Function at 0x496d64
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x496d6c
push ecx
push ebx
push esi
push edi
mov byte [ebp - 0x25], dl
mov ebx, eax
xor eax, eax
push ebp
push 0x4971ee
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x26], 0
cmp byte [ebp - 0x25], 0
jne 0x496dad
test byte [ebx + 0x1c], 0x10
jne 0x4971be
mov eax, ebx
call fcn.00497668
test al, al
je 0x4971be
lea eax, [ebp - 4]
mov edx, dword [0x4ec73c]
call fcn.00406e1c
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0x10], eax
xor edx, edx
push ebp
push 0x4971b7
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x435f8c]
call fcn.00442644
mov dword [ebp - 0xc], eax
mov dl, 1
mov eax, dword [0x435f8c]
call fcn.00442644
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x435f8c]
call fcn.00442644
mov dword [ebp - 0x2c], eax
mov dl, 1
mov eax, dword [0x435f8c]
call fcn.00442644
mov dword [ebp - 8], eax
mov eax, ebx
call fcn.004960f0
dec eax
test eax, eax
jl 0x496f31
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.00496100
cmp byte [eax + 0x3e], 0
je 0x496f27
mov edx, esi
mov eax, ebx
call fcn.00496100
mov eax, dword [eax + 0x34]
mov edx, 0x49720c
call fcn.004078c4
je 0x496f27
mov edx, esi
mov eax, ebx
call fcn.00496100
cmp dword [eax + 0x34], 0
je 0x496f27
mov edx, esi
mov eax, ebx
call fcn.00496100
mov eax, dword [eax + 0x34]
lea edx, [ebp - 0x38]
call fcn.00499504
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x1c]
call fcn.0041c320
cmp dword [ebp - 0x1c], 0
jne 0x496ebd
mov edx, esi
mov eax, ebx
call fcn.00496100
push eax
mov edx, esi
mov eax, ebx
call fcn.00496100
mov ecx, dword [eax + 0x34]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax]
call dword [edi + 0x64]
jmp 0x496f27
mov edx, dword [0x4ec73c]
mov eax, dword [ebp - 0x1c]
call fcn.00422d98
test eax, eax
je 0x496f27
push ebp
mov eax, dword [ebp - 0x1c]
call fcn.00496b04
pop ecx
test al, al
jne 0x496f27
mov edx, esi
mov eax, ebx
call fcn.00496100
add eax, 0x34
push eax
mov edx, esi
mov eax, ebx
call fcn.00496100
mov eax, dword [eax + 0x34]
lea edx, [ebp - 0x3c]
call fcn.004993e8
mov edx, dword [ebp - 0x3c]
pop eax
call fcn.00406dd4
mov edx, esi
mov eax, ebx
call fcn.00496100
push eax
mov edx, esi
mov eax, ebx
call fcn.00496100
mov ecx, dword [eax + 0x34]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax]
call dword [edi + 0x64]
inc esi
dec dword [ebp - 0x34]
jne 0x496e34
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
call fcn.00406e1c
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4970b2
inc eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x24]
call fcn.00406e1c
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
cmp esi, 0
jl 0x497048
lea ecx, [ebp - 0x20]
mov edx, esi
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, 1
jmp 0x49702e
mov eax, dword [ebp - 0x20]
cmp word [eax + ebx*2 - 2], 0xd800
jb 0x496fb5
mov eax, dword [ebp - 0x20]
cmp word [eax + ebx*2 - 2], 0xdfff
ja 0x496fb5
inc ebx
jmp 0x49702d
lea eax, [ebp - 0x40]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 0x20]
call fcn.004078fc
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x1c]
call fcn.0041c320
push ebp
mov eax, dword [ebp - 0x1c]
call fcn.00496b04
pop ecx
test al, al
je 0x49702d
mov eax, dword [0x4efb2c]
cmp byte [eax + 0xc], 0
je 0x496ffb
lea eax, [ebp - 0x20]
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
call fcn.00496bb8
jmp 0x49700a
lea edx, [ebp - 0x20]
mov ecx, ebx
mov eax, 0x49721c
call fcn.004079a8
mov edx, esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov edx, esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x49703e
inc ebx
mov eax, dword [ebp - 0x20]
call fcn.00406ee4
cmp ebx, eax
jle 0x496f9a
dec esi
cmp esi, 0xffffffff
jne 0x496f83
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x10]
jle 0x49705c
push ebp
call fcn.00496b34
pop ecx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x4970b2
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x4970a9
inc ebx
xor esi, esi
mov edx, esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edx, eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov edi, eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ecx, eax
dec ecx
mov edx, edi
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax]
call dword [edi + 0x78]
inc esi
dec ebx
jne 0x49707a
dec dword [ebp - 0x34]
jne 0x496f51
cmp dword [ebp - 0x10], 0
jne 0x4970bf
push ebp
call fcn.00496b34
pop ecx
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
setg byte [ebp - 0x26]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x497189
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
lea ecx, [ebp - 0x20]
mov edx, esi
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [0x4efb2c]
cmp byte [eax + 0xc], 0
je 0x49716a
mov edx, dword [ebp - 0x20]
mov eax, 0x49721c
call fcn.00422d98
test eax, eax
jne 0x49716a
cmp dword [ebp - 0x18], 0
je 0x49716a
mov edx, dword [ebp - 0x20]
mov eax, 0x49721c
call fcn.00422d98
test eax, eax
jne 0x49716a
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x497130
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x44]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 0x18]
call fcn.004078fc
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0x20]
xor ecx, ecx
call fcn.00496bb8
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x49715c
sub eax, 4
mov eax, dword [eax]
lea edx, [ebp - 0x18]
mov ecx, 1
xchg edx, eax
call fcn.00407944
mov edx, esi
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x18]
add eax, 0x34
mov edx, dword [ebp - 0x20]
call fcn.00406dd4
inc esi
dec dword [ebp - 0x34]
jne 0x4970e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4971be
mov eax, dword [ebp - 8]
call fcn.00404f8c
mov eax, dword [ebp - 0x2c]
call fcn.00404f8c
mov eax, dword [ebp - 0x14]
call fcn.00404f8c
mov eax, dword [ebp - 0xc]
call fcn.00404f8c
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4971f5
lea eax, [ebp - 0x44]
mov edx, 4
call fcn.00406a74
lea eax, [ebp - 0x24]
mov edx, 4
call fcn.00406a74
lea eax, [ebp - 4]
call fcn.00406a14
ret