Function at 0x1004a7df
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov esi, esp
mov dword [esi + 0x68], ebp
mov edi, dword [ebp + 8]
mov dword [esi + 0x6c], esp
mov dword [esi + 0x78], 0xffffffff
lea eax, [esi + 0x70]
mov dword [esi + 0x74], 0x1004c0f0
mov edx, dword fs:[0]
mov dword [esi + 0x70], edx
mov dword fs:[0], eax
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov eax, dword [ecx + 8]
dec eax
cmp eax, 5
ja case.default.0x1004a5ec
jmp dword [eax*4 + 0x10143e2c]
mov eax, 0xbab98238
mov ecx, 0x209af751
mov dword [esi + 4], ecx
mov dword [esi], eax
mov eax, 0x230c3ef
mov ecx, 0xcb8cac12
mov dword [esi + 0xc], ecx
mov dword [esi + 8], eax
mov eax, 0x2952b7d8
mov ecx, 0x81b11791
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0xea653855
mov ecx, 0x865f9bdb
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
mov eax, 0x67f1ca2d
mov ecx, 0x98c0fa69
mov dword [esi + 0x24], ecx
mov dword [esi + 0x20], eax
mov eax, 0x1ebc0b7e
mov ecx, 0xcebb0308
mov edx, 0xdfdded55
mov edi, 0x57b5843d
mov dword [esi + 0x34], edi
mov dword [esi + 0x30], edx
mov edx, 0x6d40a28a
mov edi, 0xbca3df7c
mov dword [esi + 0x3c], edi
mov dword [esi + 0x38], edx
mov edx, 0x403cdc87
mov edi, 0xe3ee72f7
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edx
mov edx, 0x840a4134
mov edi, 0xeb71efbe
mov dword [esi + 0x4c], edi
mov edi, 0x98c0fa69
mov dword [esi + 0x48], edx
mov edx, 0x67f1a649
mov dword [esi + 0x54], edi
mov dword [esi + 0x50], edx
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x28], eax
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x58], eax
lea eax, [esi + 0x30]
xor ecx, ecx
movaps xmm0, xmmword [esi]
xorps xmm0, xmmword [eax]
movaps xmmword [esi], xmm0
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x10], xmm0
movaps xmm0, xmmword [esi + 0x20]
xorps xmm0, xmmword [eax + 0x20]
movaps xmmword [esi + 0x20], xmm0
mov ebx, esi
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1004abee
mov dword [esi + 0x78], 0
sub esp, 0xc
movzx eax, byte [esi + 0x30]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, dword [ebp + 8]
call fcn.1001f5d0
jmp case.default.0x1004a5ec
mov eax, 0xbab98238
mov ecx, 0x209af751
mov dword [esi + 4], ecx
mov dword [esi], eax
mov eax, 0x230c3ef
mov ecx, 0xcb8cac12
mov dword [esi + 0xc], ecx
mov dword [esi + 8], eax
mov eax, 0x2952b7d8
mov ecx, 0x85b11791
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0xaa7a2858
mov ecx, 0xeb1d8bd3
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
mov eax, 0xdfdded55
mov ecx, 0x57b5843d
mov dword [esi + 0x34], ecx
mov dword [esi + 0x30], eax
mov eax, 0x6d40a28a
mov ecx, 0xbca3df7c
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x38], eax
mov eax, 0x403cdc87
mov ecx, 0xe3ee72f7
mov dword [esi + 0x44], ecx
mov dword [esi + 0x40], eax
mov eax, 0x840a4134
mov ecx, 0xeb71efbe
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x48], eax
lea eax, [esi + 0x30]
xor ecx, ecx
movaps xmm0, xmmword [esi]
xorps xmm0, xmmword [eax]
movaps xmmword [esi], xmm0
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x10], xmm0
mov ebx, esi
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1004abee
mov dword [esi + 0x78], 0
sub esp, 0xc
movzx eax, byte [esi + 0x30]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, dword [ebp + 8]
call fcn.1001f5d0
jmp case.default.0x1004a5ec
mov eax, 0xbab98238
mov ecx, 0x209af751
mov dword [esi + 4], ecx
mov dword [esi], eax
mov eax, 0x230c3ef
mov ecx, 0xcb8cac12
mov dword [esi + 0xc], ecx
mov dword [esi + 8], eax
mov eax, 0x2952b7d8
mov ecx, 0x84b11791
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0xe9243541
mov ecx, 0xeb7183da
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
mov eax, 0xdfdded55
mov ecx, 0x57b5843d
mov dword [esi + 0x34], ecx
mov dword [esi + 0x30], eax
mov eax, 0x6d40a28a
mov ecx, 0xbca3df7c
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x38], eax
mov eax, 0x403cdc87
mov ecx, 0xe3ee72f7
mov dword [esi + 0x44], ecx
mov dword [esi + 0x40], eax
mov eax, 0x840a4134
mov ecx, 0xeb71efbe
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x48], eax
lea eax, [esi + 0x30]
xor ecx, ecx
movaps xmm0, xmmword [esi]
xorps xmm0, xmmword [eax]
movaps xmmword [esi], xmm0
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x10], xmm0
mov ebx, esi
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1004abee
mov dword [esi + 0x78], 0
sub esp, 0xc
movzx eax, byte [esi + 0x30]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, dword [ebp + 8]
call fcn.1001f5d0
jmp case.default.0x1004a5ec
mov eax, 0xbab98238
mov ecx, 0x209af751
mov dword [esi + 4], ecx
mov dword [esi], eax
mov eax, 0x230c3ef
mov ecx, 0xcb8cac12
mov dword [esi + 0xc], ecx
mov dword [esi + 8], eax
mov eax, 0x2952b7d8
mov ecx, 0x88b11791
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0xe96b3355
mov ecx, 0x87158290
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
mov eax, 0x67f1a649
mov ecx, 0x98c0fa69
mov dword [esi + 0x64], eax
mov edx, 0x1ebc0b7e
mov edi, 0xcebb0308
mov ebx, 0xdfdded55
mov eax, 0x57b5843d
mov dword [esi + 0x34], eax
mov dword [esi + 0x30], ebx
mov eax, 0x6d40a28a
mov ebx, 0xbca3df7c
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x38], eax
mov eax, 0x403cdc87
mov ebx, 0xe3ee72f7
mov dword [esi + 0x44], ebx
mov dword [esi + 0x40], eax
mov eax, 0x840a4134
mov ebx, 0xeb71efbe
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x48], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0x54], ecx
mov eax, dword [esi + 0x64]
mov dword [esi + 0x20], eax
mov dword [esi + 0x50], eax
mov dword [esi + 0x2c], edi
mov dword [esi + 0x28], edx
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edx
lea eax, [esi + 0x30]
xor ecx, ecx
movaps xmm0, xmmword [esi]
xorps xmm0, xmmword [eax]
movaps xmmword [esi], xmm0
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x10], xmm0
movaps xmm0, xmmword [esi + 0x20]
xorps xmm0, xmmword [eax + 0x20]
movaps xmmword [esi + 0x20], xmm0
mov ebx, esi
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1004abee
mov dword [esi + 0x78], 0
sub esp, 0xc
movzx eax, byte [esi + 0x30]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, dword [ebp + 8]
call fcn.1001f5d0
jmp case.default.0x1004a5ec
mov eax, 0xbab98238
mov ecx, 0x209af751
mov dword [esi + 4], ecx
mov dword [esi], eax
mov eax, 0x230c3ef
mov ecx, 0xcb8cac12
mov dword [esi + 0xc], ecx
mov dword [esi + 8], eax
mov eax, 0x2952b7d8
mov ecx, 0x8eb11791
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0xe5681e0d
mov ecx, 0x8f1cc1c7
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
mov eax, 0x67f1a625
mov ecx, 0x98c0fa69
mov dword [esi + 0x24], ecx
mov dword [esi + 0x20], eax
mov eax, 0x1ebc0b7e
mov ecx, 0xcebb0308
mov edx, 0xdfdded55
mov edi, 0x57b5843d
mov dword [esi + 0x34], edi
mov dword [esi + 0x30], edx
mov edx, 0x6d40a28a
mov edi, 0xbca3df7c
mov dword [esi + 0x3c], edi
mov dword [esi + 0x38], edx
mov edx, 0x403cdc87
mov edi, 0xe3ee72f7
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edx
mov edx, 0x840a4134
mov edi, 0xeb71efbe
mov dword [esi + 0x4c], edi
mov edi, 0x98c0fa69
mov dword [esi + 0x48], edx
mov edx, 0x67f1a649
mov dword [esi + 0x54], edi
mov dword [esi + 0x50], edx
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x28], eax
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x58], eax
lea eax, [esi + 0x30]
xor ecx, ecx
movaps xmm0, xmmword [esi]
xorps xmm0, xmmword [eax]
movaps xmmword [esi], xmm0
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x10], xmm0
movaps xmm0, xmmword [esi + 0x20]
xorps xmm0, xmmword [eax + 0x20]
movaps xmmword [esi + 0x20], xmm0
mov ebx, esi
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1004abee
mov dword [esi + 0x78], 0
sub esp, 0xc
movzx eax, byte [esi + 0x30]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, dword [ebp + 8]
call fcn.1001f5d0
jmp case.default.0x1004a5ec
mov eax, 0xbab98238
mov ecx, 0x209af751
mov dword [esi + 4], ecx
mov dword [esi], eax
mov eax, 0x230c3ef
mov ecx, 0xcb8cac12
mov dword [esi + 0xc], ecx
mov dword [esi + 8], eax
mov eax, 0x2952b7d8
mov ecx, 0x97b11791
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], eax
mov eax, 0xed7e2255
mov ecx, 0xc51d8edd
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x18], eax
mov eax, 0x679dc224
mov ecx, 0x98c0fa69
mov dword [esi + 0x24], ecx
mov dword [esi + 0x20], eax
mov eax, 0x1ebc0b7e
mov ecx, 0xcebb0308
mov edx, 0xdfdded55
mov edi, 0x57b5843d
mov dword [esi + 0x34], edi
mov dword [esi + 0x30], edx
mov edx, 0x6d40a28a
mov edi, 0xbca3df7c
mov dword [esi + 0x3c], edi
mov dword [esi + 0x38], edx
mov edx, 0x403cdc87
mov edi, 0xe3ee72f7
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edx
mov edx, 0x840a4134
mov edi, 0xeb71efbe
mov dword [esi + 0x4c], edi
mov edi, 0x98c0fa69
mov dword [esi + 0x48], edx
mov edx, 0x67f1a649
mov dword [esi + 0x54], edi
mov dword [esi + 0x50], edx
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x28], eax
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x58], eax
lea eax, [esi + 0x30]
xor ecx, ecx
movaps xmm0, xmmword [esi]
xorps xmm0, xmmword [eax]
movaps xmmword [esi], xmm0
movaps xmm0, xmmword [esi + 0x10]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x10], xmm0
movaps xmm0, xmmword [esi + 0x20]
xorps xmm0, xmmword [eax + 0x20]
movaps xmmword [esi + 0x20], xmm0
mov ebx, esi
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x1004abee
mov dword [esi + 0x78], 0
sub esp, 0xc
movzx eax, byte [esi + 0x30]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
mov ecx, dword [ebp + 8]
call fcn.1001f5d0
jmp case.default.0x1004a5ec
mov eax, dword [ebp + 8]
mov dword [eax + 0x10], edi
push edi
push ebx
push eax
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [ebx + edi], 0
mov eax, dword [esi + 0x70]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4