Function at 0x512d35
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe0
mov eax, dword [0x5dcf00]
xor eax, esp
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0xf0]
push ebx
mov ebx, dword [esp + 0xec]
push ebp
mov ebp, dword [esp + 0xec]
push esi
push edi
mov dword [esp + 0x9c], ebp
cmp dword [ebp + 0x7608], 0
mov dword [esp + 0xa0], ebx
jne 0x512d88
mov edx, dword [esp + 0xfc]
add edx, ebx
mov dword [esp + 0x34], edx
jmp 0x512d92
mov eax, dword [ebp + 0x7600]
mov dword [esp + 0x34], eax
mov edx, dword [ebp + 0x74b0]
mov eax, dword [ebp + 0x7578]
mov esi, dword [ebp + 0x7588]
mov dword [esp + 0x3c], edx
add esi, eax
cmp dword [esp + 0x108], 0
mov edx, dword [ebp + 0x74b4]
mov dword [esp + 0x58], edx
mov edx, dword [ebp + 0x74b8]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], esi
mov dword [esp + 0x54], edx
je 0x513879
push dword [esp + 0x104]
mov dword [ebp + 0x750c], 1
lea esi, [ebp + 0x682c]
lea edi, [esp + 0xe4]
movsd dword es:[edi], dword [esi]
lea eax, [esp + 0xb8]
push ecx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0050a70e
add esp, 0xc
cmp eax, 0xffffff88
jbe 0x512e1b
push 0xffffffffffffffec
pop edi
jmp 0x5138eb
push dword [ebp]
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.00513bb9
push dword [ebp + 8]
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00513bb9
push dword [ebp + 4]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.00513bb9
mov eax, dword [esp + 0xdc]
add esp, 0x24
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xd8]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0xc8]
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd0]
mov ebx, dword [esi + ecx*8 + 4]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0xcc]
mov esi, dword [ebx + edi*8 + 4]
mov cl, byte [ebx + edi*8 + 2]
mov dword [esp + 0x30], esi
mov dword [esp + 0x5c], esi
mov esi, dword [edx + eax*8 + 4]
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0xdc]
mov byte [esp + 0x1b], cl
mov ecx, dword [esp + 0xd8]
mov bl, byte [esi + ecx*8 + 2]
mov byte [esp + 0x1a], bl
mov bl, byte [edx + eax*8 + 2]
mov byte [esp + 0x27], bl
mov ebx, dword [esp + 0xcc]
movzx esi, word [ebx + edi*8]
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0xdc]
movzx ebx, word [esi + ecx*8]
movzx ecx, byte [esi + ecx*8 + 3]
mov dword [esp + 0x80], ebx
movzx ebx, word [edx + eax*8]
movzx eax, byte [edx + eax*8 + 3]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0x48], eax
mov al, byte [esp + 0x27]
mov dword [esp + 0x7c], ecx
movzx edi, byte [ebx + edi*8 + 3]
mov dword [esp + 0x74], edi
cmp al, 1
jbe 0x513154
cmp dword [esp + 0x10c], 0
je 0x513054
cmp al, 0x19
jb 0x513054
mov ebx, dword [esp + 0x14]
mov ecx, ebx
mov edx, dword [esp + 0x10]
and ecx, 0x1f
movzx eax, al
mov edi, edx
shl edi, cl
sub eax, 5
mov ecx, eax
add ebx, eax
neg ecx
and ecx, 0x1f
shr edi, cl
shl edi, 5
add edi, dword [esp + 0x20]
cmp ebx, 0x20
ja 0x513032
cmp ebp, dword [esp + 0xc4]
jb 0x512fcc
mov eax, ebx
and ebx, 7
shr eax, 3
sub ebp, eax
mov dword [esp + 0xb8], ebx
push 4
lea eax, [esp + 0x90]
mov dword [esp + 0xc0], ebp
push ebp
push eax
call fcn.005282a0
mov edx, dword [esp + 0x98]
jmp 0x513016
mov ecx, dword [esp + 0xc0]
cmp ebp, ecx
je 0x513032
mov edx, ebx
mov eax, ebp
shr edx, 3
sub eax, edx
cmp eax, ecx
jae 0x512fe8
mov edx, ebp
sub edx, ecx
mov eax, edx
sub ebp, edx
shl eax, 3
sub ebx, eax
mov dword [esp + 0xbc], ebp
push 4
lea eax, [esp + 0x94]
mov dword [esp + 0xbc], ebx
push ebp
push eax
call fcn.005282a0
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xc4]
add esp, 0xc
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0xb4], edx
mov dword [esp + 0x10], edx
mov esi, dword [esp + 0x10]
mov ecx, ebx
and ecx, 0x1f
mov eax, edx
shl eax, cl
add ebx, 5
shr eax, 0x1b
add edi, eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x20], edi
jmp 0x51312f
mov ebx, dword [esp + 0x14]
mov ecx, ebx
mov esi, dword [esp + 0x10]
and ecx, 0x1f
movzx edx, al
mov edi, esi
shl edi, cl
add ebx, edx
mov ecx, edx
mov dword [esp + 0x14], ebx
neg ecx
and ecx, 0x1f
shr edi, cl
add edi, dword [esp + 0x20]
mov dword [esp + 0x20], edi
cmp ebx, 0x20
ja 0x51312f
cmp ebp, dword [esp + 0xc4]
jb 0x5130c9
mov eax, ebx
and ebx, 7
shr eax, 3
sub ebp, eax
mov dword [esp + 0xb8], ebx
push 4
lea eax, [esp + 0x50]
mov dword [esp + 0xc0], ebp
push ebp
push eax
call fcn.005282a0
mov ecx, dword [esp + 0x58]
mov esi, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xc0], ecx
jmp 0x51311a
mov ecx, dword [esp + 0xc0]
cmp ebp, ecx
je 0x51312f
mov edx, ebx
mov eax, ebp
shr edx, 3
sub eax, edx
cmp eax, ecx
jae 0x5130e5
mov edx, ebp
sub edx, ecx
mov eax, edx
sub ebp, edx
shl eax, 3
sub ebx, eax
mov dword [esp + 0xbc], ebp
push 4
lea eax, [esp + 0x54]
mov dword [esp + 0xbc], ebx
push ebp
push eax
call fcn.005282a0
mov eax, dword [esp + 0x5c]
mov esi, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xc4]
add esp, 0xc
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xe4]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xe4], eax
jmp 0x5131eb
mov ecx, dword [esp + 0x30]
xor edx, edx
mov ebx, dword [esp + 0x14]
test ecx, ecx
mov esi, dword [esp + 0x10]
sete dl
test al, al
jne 0x51318f
mov edi, dword [esp + edx*4 + 0xe0]
mov eax, ecx
neg eax
mov dword [esp + 0x20], edi
sbb eax, eax
and eax, 4
mov eax, dword [esp + eax + 0xe0]
mov dword [esp + 0xe4], eax
jmp 0x5131eb
mov ecx, ebx
mov eax, esi
and ecx, 0x1f
shl eax, cl
shr eax, 0x1f
inc ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xb8], ebx
lea ecx, [eax + edx]
mov edx, dword [esp + 0xe0]
add ecx, dword [esp + 0x20]
lea edi, [edx - 1]
cmp ecx, 3
je 0x5131c4
mov edi, dword [esp + ecx*4 + 0xe0]
xor eax, eax
test edi, edi
sete al
add edi, eax
mov dword [esp + 0x20], edi
cmp ecx, 1
je 0x5131e4
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe4], edx
mov al, byte [esp + 0x1a]
mov dword [esp + 0xe0], edi
mov dword [esp + 0x64], edi
test al, al
je 0x51322b
movzx edx, al
mov ecx, ebx
and ecx, 0x1f
mov eax, esi
shl eax, cl
add ebx, edx
mov ecx, edx
mov dword [esp + 0x14], ebx
neg ecx
and ecx, 0x1f
shr eax, cl
mov ecx, dword [esp + 0x1c]
add ecx, eax
mov al, byte [esp + 0x1a]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x60], ecx
movzx ecx, al
movzx eax, byte [esp + 0x1b]
add ecx, eax
cmp ecx, 0x14
mov ecx, dword [esp + 0x14]
jb 0x5132ef
cmp ecx, 0x20
ja 0x5132ef
cmp ebp, dword [esp + 0xc4]
jb 0x5132a5
mov eax, ecx
and ecx, 7
shr eax, 3
sub ebp, eax
mov dword [esp + 0xb8], ecx
push 4
lea eax, [esp + 0xa8]
mov dword [esp + 0xc0], ebp
push ebp
push eax
call fcn.005282a0
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xc4]
add esp, 0xc
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0x14], ecx
jmp 0x5132f3
mov ebx, dword [esp + 0xc0]
cmp ebp, ebx
je 0x5132e9
mov edx, ecx
mov eax, ebp
shr edx, 3
sub eax, edx
cmp eax, ebx
jae 0x5132c1
mov edx, ebp
sub edx, ebx
imul eax, edx, 0xfffffff8
sub ebp, edx
push 4
push ebp
mov dword [esp + 0xc4], ebp
add ecx, eax
lea eax, [esp + 0x70]
push eax
mov dword [esp + 0xc4], ecx
call fcn.005282a0
mov eax, dword [esp + 0x74]
jmp 0x513283
mov eax, dword [esp + 0x10]
jmp 0x5132fa
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xc0]
mov dl, byte [esp + 0x1b]
test dl, dl
je 0x513327
and ecx, 0x1f
movzx edx, dl
shl eax, cl
mov ecx, edx
neg ecx
and ecx, 0x1f
shr eax, cl
mov ecx, dword [esp + 0x14]
add ecx, edx
mov edx, dword [esp + 0x30]
add edx, eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x5c], edx
cmp ecx, 0x20
ja 0x5133b9
cmp ebp, dword [esp + 0xc4]
jb 0x51337c
mov eax, ecx
and ecx, 7
shr eax, 3
sub ebp, eax
mov dword [esp + 0xb8], ecx
push 4
lea eax, [esp + 0x70]
mov dword [esp + 0xc0], ebp
push ebp
push eax
call fcn.005282a0
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0xc8]
add esp, 0xc
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0xb4], ebx
jmp 0x5133bd
cmp ebp, ebx
je 0x5133b9
mov edx, ecx
mov eax, ebp
shr edx, 3
sub eax, edx
cmp eax, ebx
jae 0x513391
mov edx, ebp
sub edx, ebx
imul eax, edx, 0xfffffff8
sub ebp, edx
push 4
push ebp
mov dword [esp + 0xc4], ebp
add ecx, eax
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0xc4], ecx
call fcn.005282a0
mov ebx, dword [esp + 0x7c]
jmp 0x513362
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x74]
mov edx, ebx
lea esi, [ecx + eax]
mov ecx, esi
neg ecx
and ecx, 0x1f
shr edx, cl
and edx, dword [eax*4 + 0x5bcae0]
mov eax, dword [esp + 0x78]
movzx eax, ax
add edx, eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc8], edx
mov edx, ebx
lea ecx, [esi + eax]
neg ecx
lea edi, [eax + esi]
and ecx, 0x1f
shr edx, cl
and edx, dword [eax*4 + 0x5bcae0]
mov eax, dword [esp + 0x80]
movzx eax, ax
add edx, eax
mov dword [esp + 0xd8], edx
cmp edi, 0x20
ja 0x5134b1
cmp ebp, dword [esp + 0xc4]
jb 0x513456
mov eax, edi
and edi, 7
shr eax, 3
sub ebp, eax
mov dword [esp + 0xb8], edi
push 4
lea eax, [esp + 0x88]
mov dword [esp + 0xc0], ebp
push ebp
push eax
call fcn.005282a0
mov ebx, dword [esp + 0x90]
jmp 0x5134a0
mov ecx, dword [esp + 0xc0]
cmp ebp, ecx
je 0x5134b1
mov edx, edi
mov eax, ebp
shr edx, 3
sub eax, edx
cmp eax, ecx
jae 0x513472
mov edx, ebp
sub edx, ecx
mov eax, edx
sub ebp, edx
shl eax, 3
sub edi, eax
mov dword [esp + 0xbc], ebp
push 4
lea eax, [esp + 0x8c]
mov dword [esp + 0xbc], edi
push ebp
push eax
call fcn.005282a0
mov ebx, dword [esp + 0x94]
mov edi, dword [esp + 0xc4]
add esp, 0xc
mov dword [esp + 0xb4], ebx
mov eax, dword [esp + 0x48]
lea esi, [esp + 0x5c]
add edi, eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xb8], edi
neg edi
and edi, 0x1f
mov ecx, edi
lea edi, [esp + 0xa8]
movsd dword es:[edi], dword [esi]
shr ebx, cl
and ebx, dword [eax*4 + 0x5bcae0]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x38]
movsd dword es:[edi], dword [esi]
movzx eax, ax
add ebx, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xd0], ebx
add eax, ecx
movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x2c]
lea edi, [ecx + edx]
mov dword [esp + 0x38], eax
lea ebp, [ecx + esi]
mov ebx, ebp
sub ebx, dword [esp + 0x20]
cmp eax, dword [esp + 0x44]
ja 0x513701
mov eax, dword [esp + 0x34]
lea ecx, [edi + esi]
add eax, 0xffffffe0
cmp ecx, eax
ja 0x513701
mov ecx, dword [esp + 0x34]
lea eax, [edi + 0x20]
sub ecx, esi
cmp ecx, eax
jb 0x513701
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
cmp eax, 0x10
jbe 0x513588
lea edx, [ecx + 0x10]
add eax, 0xfffffff0
lea ecx, [esi + 0x10]
movups xmm0, xmmword [edx]
lea esi, [ecx + eax]
movups xmmword [ecx], xmm0
cmp eax, 0x10
jle 0x513584
push 0x10
pop eax
add ecx, eax
add edx, eax
movups xmm0, xmmword [edx]
add edx, eax
movups xmmword [ecx], xmm0
add ecx, eax
movups xmm0, xmmword [edx]
add edx, eax
movups xmmword [ecx], xmm0
add ecx, eax
cmp ecx, esi
jb 0x51356c
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], eax
mov eax, ebp
sub eax, esi
cmp ecx, eax
jbe 0x5135ff
mov eax, ebp
sub eax, dword [esp + 0x58]
cmp ecx, eax
ja 0x512e13
mov ecx, dword [esp + 0x54]
mov eax, ecx
sub eax, esi
add ebx, eax
lea eax, [edx + ebx]
cmp eax, ecx
ja 0x5135db
push edx
push ebx
push ebp
call fcn.005282a0
add esp, 0xc
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
jmp 0x51373d
mov esi, ecx
sub esi, ebx
push esi
push ebx
push ebp
call fcn.005282a0
mov eax, dword [esp + 0x28]
add esp, 0xc
mov ebx, dword [esp + 0x3c]
add ebp, esi
sub eax, esi
mov dword [esp + 0xac], eax
jmp 0x513606
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
push 0x10
pop edx
mov dword [esp + 0x1c], eax
cmp ecx, edx
jb 0x513647
lea ecx, [eax + ebp]
movups xmm0, xmmword [ebx]
movups xmmword [ebp], xmm0
cmp eax, edx
jle 0x5135ce
add ebp, 0x10
add ebx, edx
movups xmm0, xmmword [ebx]
add ebx, edx
movups xmmword [ebp], xmm0
add ebp, edx
movups xmm0, xmmword [ebx]
add ebx, edx
movups xmmword [ebp], xmm0
add ebp, edx
cmp ebp, ecx
jb 0x51362b
jmp 0x5135ce
cmp ecx, 8
jae 0x51367a
mov al, byte [ebx]
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
add ebx, dword [ecx*4 + 0x5bc9a0]
mov byte [ebp + 3], al
mov edx, ebx
sub ebx, dword [ecx*4 + 0x5bc9c0]
lea eax, [ebp + 4]
push 4
jmp 0x513680
mov eax, ebp
mov edx, ebx
push 8
pop ecx
push ecx
push edx
push eax
call fcn.005282a0
mov eax, dword [esp + 0x28]
add esp, 0xc
cmp eax, 8
jbe 0x5135ce
add ebp, 8
lea ecx, [eax - 8]
add ebx, 8
mov eax, ebp
push 0x10
sub eax, ebx
pop edx
lea esi, [ecx + ebp]
cmp eax, edx
jge 0x5136cd
sub ebx, ebp
push 8
lea eax, [ebx + ebp]
push eax
push ebp
call fcn.005282a0
add ebp, 8
add esp, 0xc
cmp ebp, esi
jb 0x5136b2
jmp 0x5135ce
movups xmm0, xmmword [ebx]
movups xmmword [ebp], xmm0
cmp ecx, edx
jle 0x5135ce
add ebp, 0x10
add ebx, 0x10
movups xmm0, xmmword [ebx]
add ebx, edx
movups xmmword [ebp], xmm0
add ebp, edx
movups xmm0, xmmword [ebx]
add ebx, edx
movups xmmword [ebp], xmm0
add ebp, edx
cmp ebp, esi
jb 0x5136e2
jmp 0x5135ce
push dword [esp + 0x54]
mov ebx, dword [esp + 0x30]
lea eax, [esp + 0x44]
push dword [esp + 0x5c]
lea esi, [esp + 0x64]
push dword [esp + 0x44]
push dword [esp + 0x50]
push eax
sub esp, 0xc
mov edi, esp
push dword [esp + 0x54]
movsd dword es:[edi], dword [esi]
push ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00513906
mov edi, eax
add esp, 0x28
mov eax, dword [esp + 0x40]
mov dword [esp + 0x28], eax
cmp edi, 0xffffff88
ja 0x5138eb
add ebx, edi
sub dword [esp + 0x108], 1
mov dword [esp + 0x2c], ebx
je 0x513820
mov ecx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x14], ecx
cmp ecx, 0x20
ja 0x512e78
cmp ebp, dword [esp + 0xc4]
jb 0x5137af
mov eax, ecx
and ecx, 7
shr eax, 3
sub ebp, eax
mov dword [esp + 0xb8], ecx
push 4
lea eax, [esp + 0x98]
mov dword [esp + 0xc0], ebp
push ebp
push eax
call fcn.005282a0
mov eax, dword [esp + 0xa0]
jmp 0x5137fb
mov edx, dword [esp + 0xc0]
cmp ebp, edx
je 0x512e78
mov esi, ecx
mov eax, ebp
shr esi, 3
sub eax, esi
cmp eax, edx
jae 0x5137cf
mov esi, ebp
sub esi, edx
imul eax, esi, 0xfffffff8
sub ebp, esi
push 4
push ebp
mov dword [esp + 0xc4], ebp
add ecx, eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0xc4], ecx
call fcn.005282a0
mov eax, dword [esp + 0xa4]
mov ebp, dword [esp + 0xc8]
add esp, 0xc
mov dword [esp + 0x10], eax
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x14], eax
jmp 0x512e83
mov edx, dword [esp + 0xb8]
cmp edx, 0x20
ja 0x51385e
mov ecx, dword [esp + 0xbc]
cmp ecx, dword [esp + 0xc4]
jb 0x51384c
mov eax, edx
shr eax, 3
sub ecx, eax
and edx, 7
lea eax, [esp + 0x38]
jmp 0x5138b2
cmp ecx, dword [esp + 0xc0]
jne 0x51388c
cmp edx, 0x20
jb 0x512e13
mov edi, dword [esp + 0x9c]
lea esi, [esp + 0xe0]
add edi, 0x682c
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
sub esi, eax
sub ecx, ebx
cmp esi, ecx
jbe 0x5138d1
push 0xffffffffffffffba
jmp 0x512e15
mov esi, edx
mov eax, ecx
shr esi, 3
sub eax, esi
cmp eax, dword [esp + 0xc0]
jae 0x5138a7
mov esi, ecx
sub esi, dword [esp + 0xc0]
imul eax, esi, 0xfffffff8
sub ecx, esi
add edx, eax
lea eax, [esp + 0x48]
push 4
push ecx
push eax
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xc4], edx
call fcn.005282a0
add esp, 0xc
jmp 0x512e13
test ebx, ebx
je 0x5138e2
push esi
push eax
push ebx
call fcn.005282a0
add esp, 0xc
add ebx, esi
mov edi, ebx
sub edi, dword [esp + 0xa0]
mov ecx, dword [esp + 0xec]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00527919
add esp, 0xe0
ret