Function at 0x499100
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x100
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x34], 4
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
test eax, eax
je 0x4992b3
mov esi, dword [ebp + 0xc]
shl eax, 2
xor edi, edi
mov edx, 4
jmp 0x499174
mov ecx, edx
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
add esi, 4
lea edi, [ecx + 1]
mov dword [edx + ecx*4], ebx
mov dword [esp + 0x3c], edi
add eax, 0xfffffffc
je 0x49925d
mov dword [esp + 0x14], eax
mov eax, dword [0x6074b4]
mov dword [esp + 0x10], edi
mov dword [esp + 0x28], edx
mov edi, dword [esi]
movzx eax, byte [eax]
mov eax, dword [0x6074a0]
mov eax, dword [eax]
test eax, eax
jne 0x4991aa
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x499674
mov ecx, dword [0x6074a0]
mov dword [ecx], eax
push 0x2c
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x499674
mov ebx, eax
mov eax, dword [edi + 0x18]
mov dword [esp + 0xc], esi
mov ecx, dword [eax]
mov esi, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x1c], ecx
movzx ecx, byte [eax + 0x28]
mov byte [esp + 0x40], cl
mov ecx, dword [eax + 0x24]
mov dword [esp + 4], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebx], edi
mov edi, dword [esp + 0x20]
mov dword [ebx + 4], edi
mov edi, dword [esp + 8]
mov dword [ebx + 8], edi
mov edi, dword [esp + 0x1c]
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], edx
mov dword [ebx + 0x18], esi
mov edx, dword [esp + 4]
movzx ecx, byte [esp + 0x40]
movsd xmm0, qword [eax + 0x1c]
movsd qword [ebx + 0x1c], xmm0
mov dword [ebx + 0x24], edx
mov edx, dword [esp + 0x10]
mov byte [ebx + 0x28], cl
cmp edx, dword [esp + 0x38]
jne 0x499150
lea ecx, [esp + 0x34]
call fcn.00484ab0
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
jmp 0x49915a
test edi, edi
je 0x4992b3
mov eax, dword [esp + 0x34]
mov bl, 1
mov dword [esp + 0x40], ebx
mov edx, dword [eax]
cmp dword [edx], 0
je 0x49946d
mov esi, dword [edx + 4]
mov dword [esp + 4], 1
mov dword [esp + 0x24], 0
mov dword [esp + 0x30], esi
cmp dword [edx + 8], 0
je 0x499485
mov edi, dword [edx + 0xc]
mov dword [esp + 8], 1
mov dword [esp + 0x40], 0
mov dword [esp + 0x2c], edi
jmp 0x49948d
mov al, 1
xorps xmm4, xmm4
xor esi, esi
xor edi, edi
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0x14], eax
mov al, 1
mov dword [esp + 0xc], eax
mov eax, dword [0x6074b4]
mov ebx, dword [0x6074a0]
movaps xmmword [esp + 0x40], xmm4
movzx eax, byte [eax]
mov eax, dword [ebx]
test eax, eax
jne 0x499306
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x499674
mov dword [ebx], eax
push 0x2c
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x499674
mov ecx, dword [esp + 4]
movaps xmm0, xmmword [esp + 0x40]
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 8]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0xc]
mov dword [eax + 0x18], edi
movlps qword [eax + 0x1c], xmm0
mov word [eax + 0x24], si
lea edi, [esp + 0xac]
lea esi, [esp + 0x58]
mov byte [eax + 0x26], cl
mov ecx, dword [esp + 0x14]
mov byte [eax + 0x27], 0
mov byte [eax + 0x28], cl
movzx ecx, word [esp + 0xa4]
mov word [eax + 0x29], cx
movzx ecx, byte [esp + 0xa6]
mov byte [eax + 0x2b], cl
mov ecx, dword [ebp + 8]
movsd xmm1, qword [ecx + 0x30]
movsd xmm2, qword [ecx + 0x28]
movsd xmm0, qword [ecx + 0x38]
movsd qword [esp + 0x88], xmm1
movsd xmm1, qword [ecx + 0x20]
movsd qword [esp + 0x80], xmm2
movsd xmm2, qword [ecx + 0x18]
movsd qword [esp + 0x90], xmm0
movsd qword [esp + 0x78], xmm1
movsd xmm1, qword [ecx + 0x10]
movsd qword [esp + 0x70], xmm2
movsd xmm2, qword [ecx]
movsd qword [esp + 0x68], xmm1
movsd xmm1, qword [ecx + 8]
mov ecx, dword [esp + 0x3c]
movsd qword [esp + 0x58], xmm2
movsd qword [esp + 0x60], xmm1
movsd xmm1, qword [esp + 0x34]
mov dword [esp + 0xa0], ecx
mov ecx, 0x13
movsd qword [esp + 0x98], xmm1
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xf8], eax
mov eax, dword [0x6074b4]
mov dword [esp + 0xa4], 1
mov dword [esp + 0xa8], 1
movzx eax, byte [eax]
mov eax, dword [ebx]
test eax, eax
jne 0x499443
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x499682
mov dword [ebx], eax
push 0x58
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x499682
lea esi, [esp + 0xa4]
mov ecx, 0x16
mov edi, eax
rep movsd dword es:[edi], dword [esi]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov bl, 1
mov dword [esp + 4], 0
mov dword [esp + 0x24], ebx
cmp dword [edx + 8], 0
jne 0x499297
mov dword [esp + 8], 0
mov esi, dword [edx + 0x10]
movzx ebx, byte [edx + 0x26]
movsd xmm4, qword [edx + 0x1c]
mov edi, dword [edx + 0x18]
test ecx, ecx
mov dword [esp + 0x10], esi
mov esi, dword [edx + 0x14]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x28], esi
movzx esi, word [edx + 0x24]
movzx edx, byte [edx + 0x27]
mov dword [esp + 0x14], edx
je 0x4992de
movaps xmm0, xmmword [0x5ac470]
add eax, 4
shl ecx, 2
jmp 0x499541
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 8]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x2c]
test edi, edi
mov dword [esp + 0x54], ebx
sete byte [esp + 0x1b]
cmp ebx, esi
seta bh
or bh, byte [esp + 0x1b]
mov ebx, 1
cmovne esi, dword [esp + 0x54]
cmovne edi, ebx
mov dword [esp + 8], edi
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x20]
movsd xmm1, qword [edx + 0x1c]
or si, word [edx + 0x24]
movaps xmm3, xmm0
add eax, 4
add ecx, 0xfffffffc
movaps xmm2, xmm1
andps xmm1, xmm4
orps xmm2, xmm4
andnps xmm3, xmm1
andps xmm2, xmm0
movaps xmm4, xmm2
orps xmm4, xmm3
je 0x4992de
mov edx, dword [eax]
cmp byte [esp + 0xc], 0
je 0x499560
movzx ebx, byte [edx + 0x26]
mov dword [esp + 0xc], ebx
jmp 0x499568
mov dword [esp + 0xc], 0
add edi, dword [edx + 0x18]
mov ebx, 0xffffffff
cmovb edi, ebx
mov ebx, dword [edx + 0x10]
cmp dword [esp + 0x10], 0
je 0x4995a0
test ebx, ebx
je 0x4995a4
mov ebx, edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], 1
cmp edi, dword [edx + 0x14]
mov edi, ebx
je 0x4995ac
jmp 0x4995a4
test ebx, ebx
je 0x4995c4
mov dword [esp + 0x10], 0
cmp byte [esp + 0x14], 0
je 0x4995e0
movzx ebx, byte [edx + 0x27]
mov dword [esp + 0x14], ebx
test byte [esp + 0x24], 1
jne 0x499631
jmp 0x4995ef
mov dword [esp + 0x10], 0
cmp byte [esp + 0x14], 0
jne 0x4995b3
nop word cs:[eax + eax]
nop dword [eax]
mov dword [esp + 0x14], 0
test byte [esp + 0x24], 1
jne 0x499631
cmp dword [edx], 0
je 0x499659
mov dword [esp + 0x1c], edi
cmp dword [esp + 4], 0
mov dword [esp + 0x20], esi
mov edi, dword [edx + 4]
mov esi, dword [esp + 0x30]
sete bh
cmp edi, esi
setb bl
or bl, bh
mov ebx, 1
cmovne esi, edi
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x30], esi
mov esi, dword [esp + 4]
cmovne esi, ebx
mov dword [esp + 4], esi
mov esi, dword [esp + 0x20]
test byte [esp + 0x40], 1
jne 0x499514
cmp dword [edx + 8], 0
jne 0x4994d0
mov bl, 1
mov dword [esp + 8], 0
mov dword [esp + 0x40], ebx
jmp 0x499514
mov bl, 1
mov dword [esp + 4], 0
mov dword [esp + 0x24], ebx
test byte [esp + 0x40], 1
jne 0x499514
jmp 0x49963c
push 0x2c
push 4
call fcn.0041a8c0
add esp, 8
jmp 0x49968e
push 0x58
push 4
call fcn.0041a8c0
add esp, 8
ud2