Function at 0x49df60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 8
mov ecx, dword [eax + 0x20]
mov edx, dword [ecx + 0x1c]
mov ecx, dword [edx + 0x1c]
mov edx, dword [ecx]
push ebx
mov ebx, dword [eax + 0x44]
push edi
mov edi, dword [esi + 8]
test edi, edi
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
jne 0x49dfa6
cmp dword [esi + 0x78], edi
jne 0x49df99
mov eax, dword [esi]
test byte [eax + 0x50], 8
jne 0x49df99
mov byte [esi + 0x17], 1
mov ebx, esi
call fcn.0043c140
mov ebx, dword [esp + 8]
mov edi, eax
mov ecx, dword [esp + 0xc]
mov edx, dword [ebx + 0x30]
push 0
push ecx
push edx
push 0x76
push edi
call fcn.0043c3f0
mov eax, dword [ebx + 0x30]
add esp, 0x14
push 0
push eax
add eax, 1
push eax
push 0x73
push edi
call fcn.0043c3f0
mov eax, dword [ebx + 0x30]
add esp, 0x14
push 0
push eax
add eax, 2
push eax
push 0x73
push edi
call fcn.0043c3f0
mov eax, dword [ebx + 0x30]
add esp, 0x14
push 0
push eax
add eax, 3
push eax
push 0x73
push edi
call fcn.0043c3f0
mov eax, dword [ebx + 8]
add esp, 0x14
test eax, eax
je 0x49e026
mov ecx, dword [esi + 0x2c]
mov eax, dword [eax]
add ecx, 1
mov dword [ebx + 0x44], ecx
add dword [esi + 0x2c], eax
mov ecx, dword [ebx + 0x44]
lea edx, [ecx + eax - 1]
push edx
push ecx
push 0
push 0x4b
push edi
call fcn.0043c3f0
add esp, 0x14
add dword [esi + 0x2c], 1
mov eax, dword [esi + 0x2c]
push 0
push eax
push 1
push 0x47
push edi
mov dword [ebx + 0x54], eax
call fcn.0043c3f0
add esp, 0x14
cmp byte [ebx + 0x14], 0
je 0x49e0b0
mov ecx, 1
add dword [esi + 0x2c], ecx
mov eax, dword [esi + 0x2c]
mov dword [ebx + 0x58], eax
add dword [esi + 0x2c], ecx
mov eax, dword [esi + 0x2c]
mov dword [ebx + 0x5c], eax
mov eax, dword [esi + 0x28]
mov dword [ebx + 0x3c], eax
add dword [esi + 0x28], ecx
mov edx, dword [ebx + 0x58]
push 0
push edx
push ecx
push 0x47
push edi
call fcn.0043c3f0
mov eax, dword [ebx + 0x5c]
add esp, 0x14
push 0
push eax
push 0
push 0x47
push edi
call fcn.0043c3f0
mov ecx, dword [ebx + 0x30]
mov edx, dword [ebx + 0x3c]
add esp, 0x14
push 0
push ecx
push edx
push 0x73
push edi
call fcn.0043c3f0
add esp, 0x14
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x2c]
test dword [eax + 4], 0x1000
je 0x49e170
cmp byte [ebx + 0x11], 0x5a
je 0x49e170
mov eax, dword [ebx + 0x48]
mov eax, dword [eax + 0x14]
push 0
push esi
xor ecx, ecx
call fcn.0047c070
mov ecx, dword [esi + 0x28]
mov dword [ebx + 0x3c], ecx
mov edx, dword [esi + 0x2c]
add dword [esi + 0x28], 1
add edx, 1
mov dword [ebx + 0x40], edx
add dword [esi + 0x2c], 3
add esp, 8
test eax, eax
mov dword [esp + 0xc], eax
je 0x49e10e
mov ecx, dword [ebx + 0x2c]
mov edx, dword [ecx + 0x20]
cmp byte [edx + 1], 0x69
jne 0x49e10e
mov eax, dword [eax + 0x10]
mov byte [eax], 1
mov ecx, dword [ebx + 0x3c]
push 0
push 2
push ecx
push 0x76
push edi
call fcn.0043c3f0
mov ecx, dword [edi]
add esp, 0x14
cmp byte [ecx + 0x57], 0
je 0x49e149
mov eax, dword [esp + 0xc]
mov edx, 0xfffffff8
call fcn.0043cde0
mov edx, dword [ebx + 0x40]
push 0
add edx, 1
push edx
push 0
push 0x47
jmp 0x49e1d0
mov eax, dword [edi + 0x6c]
mov ecx, dword [esp + 0xc]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + edx*4 - 0x14]
mov byte [eax + 1], pe_nt_image_headers32
mov dword [eax + 0x10], ecx
mov edx, dword [ebx + 0x40]
push 0
add edx, 1
push edx
push 0
push 0x47
jmp 0x49e1d0
mov eax, dword [eax + 0x20]
cmp eax, str.nth_value
je 0x49e1a9
cmp eax, str.first_value
je 0x49e1a9
cmp eax, str.lead
je 0x49e18f
cmp eax, 0x4c3030
jne 0x49e1d9
mov eax, dword [esi + 0x28]
mov ecx, dword [esp + 8]
mov dword [ebx + 0x3c], eax
add dword [esi + 0x28], 1
mov edx, dword [ecx + 0x30]
mov eax, dword [ebx + 0x3c]
push 0
push edx
push eax
jmp 0x49e1ce
mov ecx, dword [esi + 0x2c]
mov eax, dword [esp + 8]
add ecx, 1
mov dword [ebx + 0x40], ecx
mov edx, dword [esi + 0x28]
mov dword [ebx + 0x3c], edx
add dword [esi + 0x28], 1
add dword [esi + 0x2c], 2
mov ecx, dword [eax + 0x30]
mov edx, dword [ebx + 0x3c]
push 0
push ecx
push edx
push 0x73
push edi
call fcn.0043c3f0
add esp, 0x14
mov ebx, dword [ebx + 0x24]
test ebx, ebx
jne 0x49e0b0
pop edi
pop ebx
mov esp, ebp
pop ebp
ret