Function at 0x404ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x104
mov eax, dword [0x4a99c8]
xor eax, esp
mov dword [esp + 0x100], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x114]
push edi
mov edi, dword [esp + 0x11c]
push str.OptionalHeader
push esi
call fcn.0041a220
movzx ecx, word [edi]
mov ebx, 0x10b
add esp, 8
mov ebp, 0x441088
cmp cx, bx
jne 0x404afd
mov eax, 0x44108c
jmp 0x404b0d
mov edx, 0x20b
mov eax, str.PE32
cmp cx, dx
cmovne eax, ebp
push eax
push str.Magic
push str.__20s_:__s
push esi
call fcn.0041a710
movsx eax, byte [edi + 2]
push eax
push str.MajorLinker
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movsx eax, byte [edi + 3]
push eax
push str.MinorLinker
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 4]
push str.SizeOfCode
push str.__20s_:_0x_x
push esi
call fcn.0041a710
add esp, 0x40
push dword [edi + 8]
push str.SizeOfData
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0xc]
push str.SizeOfUdata
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x10]
push str.EntryPoint
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x14]
push str.BaseOfCode
push str.__20s_:_0x_x
push esi
call fcn.0041a710
add esp, 0x40
cmp word [edi], bx
jne 0x404bc8
push dword [edi + 0x18]
push str.BaseOfData
push str.__20s_:_0x_x
push esi
call fcn.0041a710
add esp, 0x10
push dword [edi + 0x24]
push dword [edi + 0x20]
push str.ImageBase
push str.__20s_:_0x_llx
push esi
call fcn.0041a710
push dword [edi + 0x28]
push str.SectionAlignment
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x2c]
push str.FileAlignment
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx eax, word [edi + 0x30]
push eax
push str.MajorOSversion
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx eax, word [edi + 0x32]
add esp, 0x44
push eax
push str.MinorOSversion
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx eax, word [edi + 0x34]
push eax
push str.MajorImageVersion
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx eax, word [edi + 0x36]
push eax
push str.MinorImageVersion
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx eax, word [edi + 0x38]
push eax
push str.MajorSubsystem
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx eax, word [edi + 0x3a]
add esp, 0x40
push eax
push str.MinorSubsystem
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x3c]
push str.Win32Version
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x40]
push str.SizeOfImage
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x44]
push str.SizeOfHeaders
push str.__20s_:_0x_x
push esi
call fcn.0041a710
add esp, 0x40
push dword [edi + 0x48]
push str.Checksum
push str.__20s_:_0x_x
push esi
call fcn.0041a710
movzx ecx, word [edi + 0x4c]
add esp, 0x10
cmp ecx, 1
jne 0x404ced
mov eax, str.native
jmp 0x404d7f
cmp ecx, 2
jne 0x404cfc
mov eax, 0x44101c
jmp 0x404d7f
cmp ecx, 3
jne 0x404d08
mov eax, 0x441020
jmp 0x404d7f
cmp ecx, 5
jne 0x404d14
mov eax, 0x441024
jmp 0x404d7f
cmp ecx, 7
jne 0x404d20
mov eax, str.posix_cui
jmp 0x404d7f
cmp ecx, 8
jne 0x404d2c
mov eax, str.native_win9x
jmp 0x404d7f
cmp ecx, 9
jne 0x404d38
mov eax, str.windows_ce
jmp 0x404d7f
cmp ecx, 0xa
jne 0x404d44
mov eax, str.efi_app
jmp 0x404d7f
cmp ecx, 0xb
jne 0x404d50
mov eax, str.efi_boot
jmp 0x404d7f
cmp ecx, 0xc
jne 0x404d5c
mov eax, str.efi_runtime
jmp 0x404d7f
cmp ecx, 0xd
jne 0x404d68
mov eax, str.efi_rom
jmp 0x404d7f
cmp ecx, 0xe
jne 0x404d74
mov eax, str.xbox
jmp 0x404d7f
cmp ecx, 0x10
mov eax, str.winboot
cmovne eax, ebp
push eax
push str.Subsystem
push 0x440eb0
push esi
call fcn.0041a710
movzx ebx, word [edi + 0x4e]
lea eax, [esp + 0x20]
push ebx
push str.DLLCharacteristics__Value_x
push 0x100
push eax
call fcn.00401010
lea eax, [esp + 0x30]
push eax
push esi
call fcn.0041a220
add esp, 0x28
test bl, 0x20
je 0x404dca
push str.HighEntropy64
push esi
call fcn.0041a710
add esp, 8
test bl, 0x40
je 0x404ddd
push str.DynamicBase_ASLR
push esi
call fcn.0041a710
add esp, 8
test bl, bl
jns 0x404def
push str.Integrity
push esi
call fcn.0041a710
add esp, 8
test ebx, 0x100
je 0x404e05
push str.NXCompatible
push esi
call fcn.0041a710
add esp, 8
test ebx, 0x200
je 0x404e1b
push str.NoIsolation
push esi
call fcn.0041a710
add esp, 8
test ebx, 0x400
je 0x404e31
push str.NoSEH
push esi
call fcn.0041a710
add esp, 8
test ebx, 0x800
je 0x404e52
push str.NoBind
push esi
call fcn.0041a710
push str.AppContainer
push esi
call fcn.0041a710
add esp, 0x10
test ebx, 0x1000
je 0x404e68
push str.AppContainer
push esi
call fcn.0041a710
add esp, 8
test ebx, 0x2000
je 0x404e7e
push str.WDMDriver
push esi
call fcn.0041a710
add esp, 8
test ebx, 0x4000
je 0x404e94
push str.ControlFlowGuard
push esi
call fcn.0041a710
add esp, 8
test bx, bx
jns 0x404ea7
push str.TerminalServer
push esi
call fcn.0041a710
add esp, 8
push esi
call fcn.0041a5c0
push dword [edi + 0x54]
push dword [edi + 0x50]
push str.SizeOfStackReserve
push str.__20s_:_0x_llx
push esi
call fcn.0041a710
push dword [edi + 0x5c]
push dword [edi + 0x58]
push str.SizeOfStackCommit
push str.__20s_:_0x_llx
push esi
call fcn.0041a710
push dword [edi + 0x64]
push dword [edi + 0x60]
push str.SizeOfHeapReserve
push str.__20s_:_0x_llx
push esi
call fcn.0041a710
add esp, 0x40
push dword [edi + 0x6c]
push dword [edi + 0x68]
push str.SizeOfHeapCommit
push str.__20s_:_0x_llx
push esi
call fcn.0041a710
push dword [edi + 0x70]
push str.LoaderFlags
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push dword [edi + 0x74]
push str.NumberOfDataDirs
push str.__20s_:_0x_x
push esi
call fcn.0041a710
push str.DataDirectory
push esi
call fcn.0041a220
push dword [edi + 0x7c]
push dword [edi + 0x78]
push str.Export
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
add esp, 0x50
push dword [edi + 0x84]
push dword [edi + 0x80]
push str.Import
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0x8c]
push dword [edi + 0x88]
push str.Resource
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0x9c]
push dword [edi + 0x98]
push str.Cert
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xa4]
push dword [edi + 0xa0]
push str.BaseReloc
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
add esp, 0x50
push dword [edi + 0xac]
push dword [edi + 0xa8]
push str.Debug
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xb4]
push dword [edi + 0xb0]
push str.Arch
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xbc]
push dword [edi + 0xb8]
push str.GlobalPtr
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xc4]
push dword [edi + 0xc0]
push 0x4412d8
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
add esp, 0x50
push dword [edi + 0xcc]
push dword [edi + 0xc8]
push str.LoadConfig
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xd4]
push dword [edi + 0xd0]
push str.BoundImport
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xdc]
push dword [edi + 0xd8]
push 0x4412f4
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xe4]
push dword [edi + 0xe0]
push str.DelayImport
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
add esp, 0x50
push dword [edi + 0xec]
push dword [edi + 0xe8]
push str.ClrRuntime
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push dword [edi + 0xf4]
push dword [edi + 0xf0]
push str.Reserved
push str.__15s_:_addr0x__8x_size0x_x
push esi
call fcn.0041a710
push esi
call fcn.0041a5c0
push esi
call fcn.0041a5c0
mov ecx, dword [esp + 0x140]
add esp, 0x30
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0041c143
add esp, 0x104
ret