Function at 0x100049c0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff8
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x1c8
mov ebx, dword [ecx]
mov ecx, 0xb
cmp dword [ebx], 0xe7
jbe 0x10004cf8
mov dword [ebp - 0x1a8], 0x198
mov eax, dword [ebx + 4]
movq xmm0, qword [ebx + 8]
movq qword [ebp - 0x1a0], xmm0
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x198], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x1ac], eax
test eax, eax
je 0x10004abc
mov edi, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
mov esi, eax
sub esp, 0x18
lea edx, [esi + esi]
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov dword [ebp - 0x1ac], eax
test eax, eax
je 0x10004e66
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov eax, dword [ebx + 0x14]
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 8], eax
call edi
sub esp, 0x18
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebx + 0xc8]
mov dword [ebp - 0x194], eax
test edi, edi
je 0x10004b79
mov edx, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov dword [esp + 8], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x1b0], edx
call edx
mov esi, eax
sub esp, 0x18
lea ecx, [esi + esi]
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov edi, eax
test eax, eax
je 0x10004e74
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov eax, dword [ebx + 0xc8]
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x1b0]
call edx
sub esp, 0x18
mov esi, dword [ebx + 0xdc]
mov dword [ebp - 0x30], edi
movq xmm1, qword [ebx + 0xcc]
movq xmm2, qword [ebx + 0xd4]
movq qword [ebp - 0x2c], xmm1
movq qword [ebp - 0x24], xmm2
test esi, esi
je 0x10004c53
mov ecx, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov dword [esp + 8], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x1b4], ecx
call ecx
mov edx, eax
sub esp, 0x18
lea esi, [edx + edx]
mov dword [ebp - 0x1b0], edx
mov eax, dword fs:[0x18]
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov esi, eax
test eax, eax
je 0x10004e80
mov edx, dword [ebp - 0x1b0]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x14], edx
mov eax, dword [ebx + 0xdc]
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x1b4]
call ecx
sub esp, 0x18
mov eax, dword [ebx + 0xe4]
mov dword [ebp - 0x1c], esi
test eax, eax
je 0x10004d10
test byte [0x10010038], 1
jne 0x10004e38
mov ecx, 8
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], ecx
mov ebx, dword fs:[0x18]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [ebp - 0x1ac], eax
call eax
sub esp, 0xc
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov edi, dword [ebp - 0x1ac]
call edi
sub esp, 0xc
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
mov ecx, dword [ebp - 0x1b0]
sub esp, 0xc
lea esp, [ebp - 0x10]
mov eax, ecx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
lea eax, [ebp - 0x1a8]
mov dword [esp], eax
call sym.msacm32.dll_acmFormatChooseW
sub esp, 4
mov ecx, eax
test eax, eax
jne 0x10004c80
mov dword [ebp - 0x1b4], eax
lea eax, [ebx + 0x18]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x190]
mov dword [esp + 8], eax
mov eax, dword [sym.imp.kernel32.dll_WideCharToMultiByte]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x30
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x1b0], eax
call eax
lea eax, [ebx + 0x48]
sub esp, 0x20
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x130]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x1b0]
call eax
mov eax, dword [ebx + 0xc8]
sub esp, 0x20
mov ecx, dword [ebp - 0x1b4]
test eax, eax
je 0x10004c80
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov edx, dword [ebx + 0xcc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x14], edx
mov eax, dword [ebp - 0x30]
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x1b0]
call eax
mov ecx, dword [ebp - 0x1b4]
sub esp, 0x20
jmp 0x10004c80
mov dword [esp + 0xc], str.Unsupported_hook_procs_n
mov dword [esp + 8], str.acmFormatChooseA
mov dword [esp + 4], 0x10010038
mov dword [esp], 0
call fcn.100048d0
mov ecx, 8
jmp 0x10004c80
xor esi, esi
xor edi, edi
mov ecx, 7
jmp 0x10004c80
xor esi, esi
mov ecx, 7
jmp 0x10004c80
mov ecx, 7
jmp 0x10004c80