Function at 0x499570
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x499e63
sub esp, 0x7c
mov eax, 0
lea edi, [esp + 0x54]
call fcn.0044b5f6
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x80]
mov ebx, dword [edx + 0xc]
lea ebp, [ebx + ecx]
mov dword [esp + 0x38], ebp
mov esi, dword [eax + 8]
mov edi, dword [eax]
mov edx, dword [edx + 8]
cmp ebp, esi
ja 0x499df9
test ebp, ebp
jl 0x499e5c
cmp ebp, esi
ja 0x499e5c
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], edi
lea eax, [edi + ecx]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0044bd00
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x84]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x34]
mov dword [edi + 8], eax
mov eax, dword [0x784e70]
test eax, eax
jne 0x499deb
mov ecx, dword [esp + 0x3c]
mov dword [edi], ecx
mov ecx, dword [esp + 0x80]
mov edx, dword [ecx + 0x10]
test edx, 7
je 0x499de4
test edx, 0x20
je 0x4996d0
lea edi, [esp + 0x68]
lea esi, [esp + 0x88]
call fcn.0044bade
lea edi, [esp + 0x40]
xor eax, eax
call fcn.0044b5fb
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov ebx, edx
shr edx, 0x1f
shl edx, 0x1f
test edx, edx
je 0x4996ab
mov eax, ecx
shr ecx, 0x1f
shl ebx, 1
or ebx, ecx
shl eax, 1
shr eax, 0x1f
mov ecx, ebx
shl ebx, 1
or ebx, eax
mov eax, ebx
add ebx, 0xd7b17f80
mov dword [esp + 0x70], ebx
shr ecx, 0x1f
add eax, 0xd7b17f80
adc ecx, 0xd
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x68]
and eax, 0x3fffffff
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0x78], 0
lea edi, [esp + 0x40]
lea esi, [esp + 0x68]
call fcn.0044bade
lea edi, [esp + 0x88]
lea esi, [esp + 0x40]
call fcn.0044bade
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x10]
test ecx, 1
jne 0x499c0f
mov ecx, dword [eax + 0x10]
test ecx, 6
jne 0x499962
mov eax, dword [eax + 0x10]
test eax, 0x18
je 0x499845
test eax, 0x10
je 0x49994f
mov eax, dword [esp + 0xa0]
lea ecx, [eax - 1]
mov edx, dword [esp + 0x9c]
jmp 0x499722
dec ecx
test ecx, ecx
jle 0x499946
cmp ecx, eax
jae 0x499e55
movzx ebx, byte [edx + ecx]
cmp bl, 0x2f
jne 0x499721
inc ecx
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, ecx
add eax, edx
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 4]
mov dword [esp + 0x38], edx
lea ebp, [ebx + edx]
mov dword [esp + 0x34], ebp
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp ebp, esi
ja 0x4998f7
test ebp, ebp
jl 0x499e4e
cmp ebp, esi
ja 0x499e4e
mov dword [esp + 0x3c], edi
mov dword [esp + 0x30], esi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0044bd00
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x84]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x30]
mov dword [edi + 8], ecx
mov edx, dword [0x784e70]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x38]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4998e1
mov edx, dword [esp + 0x3c]
mov dword [edi], edx
cmp ebx, ecx
jg 0x499891
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
call fcn.004993f0
mov edi, dword [esp + 0x84]
mov eax, dword [edi + 4]
lea ecx, [eax + 2]
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp ecx, edx
ja 0x499852
test ecx, ecx
jl 0x499e47
cmp ecx, edx
ja 0x499e47
movzx ebp, word [0x5eb5d0]
mov word [ebx + eax], bp
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x784e70]
test ecx, ecx
jne 0x499849
mov dword [edi], ebx
add esp, 0x7c
ret
mov eax, ebx
call fcn.0044b500
jmp 0x499845
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
lea ebp, [0x5b38a0]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00437cd0
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x84]
jmp 0x499818
lea ebp, [0x5b38a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x4998da
mov dword [edi], eax
mov edx, eax
mov eax, ecx
jmp 0x4997dd
call fcn.0044b500
jmp 0x4998d1
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.0044b500
mov eax, edx
mov edx, dword [esp + 0x3c]
jmp 0x4997d5
mov dword [esp + 0x9c], eax
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00437cd0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x34]
jmp 0x499772
mov ebx, eax
mov eax, edx
jmp 0x499749
mov ebx, dword [esp + 0xa0]
mov eax, dword [esp + 0x9c]
jmp 0x499749
mov edi, esp
lea esi, [esp + 0x88]
call fcn.0044bade
call fcn.0046cc70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.004993f0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
jg 0x499bbf
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x3a
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004993f0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
jg 0x499b6f
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x3a
mov dword [esp], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004993f0
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x10]
test ecx, 4
jne 0x499aac
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
cmp ebx, esi
jg 0x499a56
lea ebx, [edx + 1]
mov dword [ecx + 4], ebx
mov byte [ebp + edx], 0x20
jmp 0x4996f5
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499aa5
mov dword [edi], eax
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x80]
mov ecx, edi
jmp 0x499a46
call fcn.0044b500
jmp 0x499a96
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx + 8]
mov esi, ecx
mov ecx, dword [ecx]
cmp ebx, ebp
jg 0x499b1d
lea ebx, [edx + 1]
mov dword [esi + 4], ebx
mov byte [ecx + edx], 0x2e
lea edi, [esp + 0x54]
mov eax, esi
lea esi, [esp + 0x88]
call fcn.0044bade
mov ecx, dword [esp + 0x54]
and ecx, 0x3fffffff
mov edx, eax
mov eax, 0x4189374c
mov ebx, edx
imul ecx
sar edx, 8
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 8], 6
call fcn.004993f0
mov eax, dword [esp + 0x80]
jmp 0x499a30
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499b68
mov dword [edi], eax
mov esi, edi
mov edx, ecx
mov ecx, eax
jmp 0x499ac4
call fcn.0044b500
jmp 0x499b5d
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499bb8
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4999fb
call fcn.0044b500
jmp 0x499baf
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499c08
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4999be
call fcn.0044b500
jmp 0x499bff
mov edi, esp
lea esi, [esp + 0x88]
call fcn.0044bade
call fcn.0046cb60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
call fcn.004993f0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
jg 0x499d94
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x2f
mov dword [esp], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004993f0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
jg 0x499d44
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x2f
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004993f0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
jg 0x499cf7
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x20
mov eax, dword [esp + 0x80]
jmp 0x4996e6
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499d3d
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x499ce0
call fcn.0044b500
jmp 0x499d37
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499d8d
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x499ca7
call fcn.0044b500
jmp 0x499d84
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00437cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x784e70]
test edx, edx
jne 0x499ddd
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x499c6b
call fcn.0044b500
jmp 0x499dd4
mov eax, ecx
jmp 0x4996f5
mov eax, dword [esp + 0x3c]
call fcn.0044b500
jmp 0x499616
mov dword [esp + 0x3c], edx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ecx
lea eax, [0x5b38a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00437cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
jmp 0x4995c2
call fcn.00425a00
ud2
call fcn.00425a00
ud2
call fcn.00425900
ud2
call fcn.00425a00
ud2
call fcn.00449da0
jmp fcn.00499570