Function at 0x501ad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov esi, ecx
mov eax, dword [0x567b10]
xor eax, esp
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x34]
push eax
call fcn.004fb460
lea eax, [esi + 0x7c]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
jmp 0x501b19
add eax, 0x24
mov ebp, eax
mov ecx, edx
push ebp
push ecx
call fcn.00533ac0
add esp, 8
test ebx, ebx
jne 0x501e7a
mov ebp, dword [esi + 0x60]
mov eax, ebp
cmp ebp, 6
jne 0x501b32
mov ecx, esi
lea eax, [esp + 0x34]
push eax
call fcn.004fb460
mov eax, dword [esi + 0x60]
cmp ebp, 6
setne cl
cmp eax, 5
jne 0x501daa
mov byte [esp], cl
mov ebp, dword [esi + 0x68]
mov eax, dword [esi + 0x70]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
test eax, eax
je 0x501ba4
cmp ebp, 0xf
jbe 0x501b90
sub esp, 0xc
mov cl, byte [esp + 0x40]
mov byte [esp + 4], cl
mov dword [esp + 8], eax
mov dword [esp], ebp
mov ecx, edi
call fcn.00404140
jmp 0x501ba4
mov dword [esp + 0x1c], ebp
push ebp
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esp + ebp + 0xc], 0
mov ecx, esi
lea eax, [esp + 0x34]
push eax
call fcn.004fb460
mov ecx, dword [esp + 0x1c]
cmp dword [esp + 0x20], 0xf
mov eax, edi
jbe 0x501bc1
mov eax, dword [esp + 0xc]
mov ebp, dword [esi + 0x78]
cmp ecx, 9
je 0x501c80
cmp ecx, 8
jne 0x501cd0
mov ecx, dword [eax]
mov edx, 0x6c637865
xor ecx, edx
mov eax, dword [eax + 4]
mov edx, 0x64656475
xor eax, edx
or eax, ecx
jne 0x501cd0
movsd xmm0, qword [0x55ff80]
movsd qword [esp + 0x44], xmm0
movups xmm0, xmmword [0x55ff70]
movups xmmword [esp + 0x34], xmm0
mov ecx, ebp
push 3
lea eax, [esp + 0x38]
push eax
call fcn.00527f10
test al, al
jne 0x501c53
mov dword [esp + 0x24], 0x55ff88
mov dword [esp + 0x28], 3
mov dword [esp + 0x2c], str.Private
mov dword [esp + 0x30], 7
mov ecx, ebp
push 2
lea eax, [esp + 0x28]
push eax
call fcn.00527f10
test al, al
je 0x501cd0
mov eax, dword [esi + 0x78]
mov edx, dword [esi + 0x80]
cmp edx, dword [esi + 0x7c]
je 0x501d44
mov ecx, dword [esp + 8]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.004257f0
jmp 0x501cfb
push 9
push str.cplusplus
push eax
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x501cd0
mov dword [esp + 0x34], str.IOKit
mov dword [esp + 0x38], 5
mov dword [esp + 0x3c], 0x55ff9c
mov dword [esp + 0x40], 3
mov ecx, ebp
push 2
lea eax, [esp + 0x38]
push eax
call fcn.00527f10
test al, al
jne 0x501cfb
nop word cs:[eax + eax]
cmp dword [esp + 0x20], 0xf
mov ebp, edi
jbe 0x501cdd
mov ebp, dword [esp + 0xc]
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0x78]
mov bl, byte [esp]
xor eax, eax
mov al, bl
push dword [edx + 0xc]
push dword [edx + 8]
push eax
push dword [esp + 0x28]
push ebp
call fcn.00528280
mov ebx, dword [esi + 0x60]
test ebx, ebx
jne 0x501d0e
mov ecx, esi
lea eax, [esp + 0x34]
push eax
call fcn.004fb460
mov eax, dword [esp + 0x20]
cmp eax, 0x10
jb 0x501b11
mov ecx, dword [esp + 0xc]
lea ebp, [eax + 1]
cmp ebp, 0x1000
jb 0x501b07
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jb 0x501b00
jmp 0x501e8d
mov ebp, dword [esi + 0x88]
test ebp, ebp
je 0x501d8d
mov dword [esp + 4], ebp
lea ebp, [ebp*4]
xor ebx, ebx
mov dword [esp], edx
mov ecx, edx
mov edx, dword [ecx]
cmp edx, eax
je 0x501cfb
cmp edx, 0xfffffffe
cmove ebx, ecx
add ecx, 4
add ebp, 0xfffffffc
jne 0x501d60
test ebx, ebx
mov edx, dword [esp]
mov ebp, dword [esp + 4]
je 0x501d8d
mov dword [ebx], eax
add dword [esi + 0x8c], 0xffffffff
jmp 0x501cfb
cmp ebp, dword [esi + 0x84]
jae 0x501c65
lea ecx, [ebp + 1]
mov dword [esi + 0x88], ecx
mov dword [edx + ebp*4], eax
jmp 0x501cfb
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x64]
mov dword [ecx + 0xdc], eax
mov dword [ecx + 0xe0], 0x356
lea eax, [ecx + 0xc4]
cmp dword [ecx + 0xd8], 0x10
jb 0x501dd1
mov eax, dword [eax]
mov dword [ecx + 0xd4], 0
mov byte [eax], 0
mov byte [ecx + 0xe4], 0
mov dword [ecx + 0x20c], 0
mov dword [esp], ecx
mov eax, dword [ecx + 0x278]
test eax, eax
je 0x501e62
mov ecx, dword [esp]
mov ebx, dword [ecx + 0x274]
imul ebp, eax, 0x34
jmp 0x501e34
push edi
push ecx
call fcn.00533ac0
add esp, 8
mov dword [ebx + ebp - 0xc], 0
mov dword [ebx + ebp - 8], 0xf
mov byte [ebx + ebp - 0x1c], 0
add ebp, 0xffffffcc
je 0x501e62
mov eax, dword [ebx + ebp - 8]
cmp eax, 0x10
jb 0x501e1a
mov ecx, dword [ebx + ebp - 0x1c]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x501e10
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x501e8d
add eax, 0x24
mov edi, eax
mov ecx, edx
jmp 0x501e10
mov ecx, dword [esp]
mov dword [ecx + 0x278], 0
push 0
call fcn.0045a620
mov byte [esi + 0x21], 1
mov ecx, dword [esp + 0x4c]
xor ecx, esp
call fcn.00533ace
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3