Function at 0x489260
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d10a0
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x54d158]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x18], esi
call fcn.00486480
test eax, eax
jne 0x4892b3
or eax, 0xffffffff
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea ecx, [esp + 0x44]
call fcn.00491850
lea ecx, [esp + 0x44]
mov dword [esp + 0x80], 0
call fcn.00491bf0
lea ecx, [esp + 0x2c]
call fcn.00491850
lea ecx, [esp + 0x5c]
mov byte [esp + 0x80], 1
call fcn.00491850
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 2
call fcn.004964e0
cmp dword [ebp + 0xc], 1
mov byte [esp + 0x80], 3
jne 0x48940a
push 0xffffffffffffffff
push 0x513a54
lea ecx, [esp + 0x38]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513c1c
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0x10
call fcn.004748c0
push 0xffffffffffffffff
mov bl, 4
push 0x513c0c
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], bl
call fcn.004748c0
push 0
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x8c], 5
call fcn.00491ae0
lea ecx, [esp + 0x10]
mov byte [esp + 0x80], bl
call fcn.004732d0
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 3
call fcn.004732d0
mov edx, dword [esi + 4]
push 0
push 0xffffffffffffffff
push edx
call fcn.004780f0
add esp, 4
push eax
lea ecx, [esp + 0x1c]
call fcn.004748e0
push 0xffffffffffffffff
mov bl, 6
push 0x513bf8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x88], bl
call fcn.004748c0
push 0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x8c], 7
call fcn.00491ae0
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], bl
call fcn.004732d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x80], 3
call fcn.004732d0
mov ecx, dword [ebp + 8]
lea edx, [esp + 0x2c]
push edx
call fcn.00491b40
push 0xffffffffffffffff
push str.dataset
lea ecx, [esp + 0x50]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513a5c
lea ecx, [esp + 0x1c]
mov dword [esp + 0x4c], 0x30
call fcn.004748c0
push 0
push esi
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 8
call fcn.00491ae0
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 3
call fcn.004732d0
mov eax, dword [esi + 0x10]
lea edi, [esi + 8]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x20], edi
jne 0x48946e
mov dword [esp + 0x10], ebx
jmp 0x489478
mov eax, dword [eax - 0xc]
shr eax, 2
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jle 0x4895fd
push ebx
mov ecx, edi
call fcn.00492900
mov esi, eax
test esi, esi
je 0x4895ec
lea ecx, [esp + 0x2c]
call fcn.00491bf0
push 0xffffffffffffffff
push str.column
lea ecx, [esp + 0x38]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513a5c
lea ecx, [esp + 0x2c]
mov dword [esp + 0x34], 0x30
call fcn.00473ec0
push esi
lea ecx, [esp + 0x2c]
call fcn.00474c20
push 0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x34]
call fcn.00491b10
push 0xffffffffffffffff
push 0x513b28
lea ecx, [esp + 0x2c]
call fcn.00473ec0
lea edi, [esi + 4]
mov ecx, edi
call fcn.0047d3a0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x34]
call fcn.00491b10
lea ecx, [esp + 0x3c]
call fcn.00473330
lea ecx, [esp + 0x5c]
call fcn.00491bf0
mov dword [esp + 0x5c], 0
cmp word [edi], 0xd
jne 0x48959d
push 0xffffffffffffffff
push str.encrypt
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push str.base64
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x34]
call fcn.00491b10
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 8]
call fcn.00474ce0
mov eax, dword [eax]
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x8c], 9
call fcn.00473f20
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 3
call fcn.004732d0
jmp 0x4895cc
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call fcn.0047de50
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x84], 0xa
call fcn.00474c20
lea ecx, [esp + 0x1c]
mov byte [esp + 0x80], 3
call fcn.004732d0
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x30]
call fcn.00491b40
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x48]
call fcn.00491b40
mov edi, dword [esp + 0x20]
add ebx, 1
cmp ebx, dword [esp + 0x10]
jl 0x489482
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0x14]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x20], ecx
jne 0x489613
mov dword [esp + 0x10], ebx
jmp 0x48961d
mov eax, dword [eax - 0xc]
shr eax, 2
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jle 0x489aab
mov edi, 0x31
jmp 0x489634
mov ecx, dword [esp + 0x20]
push ebx
call fcn.00491230
mov esi, eax
test esi, esi
je 0x489a9e
lea ecx, [esp + 0x2c]
call fcn.00491bf0
push 0xffffffffffffffff
push str.colinfo
lea ecx, [esp + 0x38]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513a5c
lea ecx, [esp + 0x2c]
mov dword [esp + 0x34], edi
call fcn.00473ec0
push esi
lea ecx, [esp + 0x2c]
call fcn.00474c20
push 0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x34]
call fcn.00491b10
push 0xffffffffffffffff
push 0x513b34
lea ecx, [esp + 0x2c]
call fcn.00473ec0
movsx eax, word [esi + 6]
push eax
lea ecx, [esp + 0x2c]
call fcn.0047b290
push 0
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x34]
call fcn.00491b10
push 0xffffffffffffffff
push 0x513b28
lea ecx, [esp + 0x2c]
call fcn.00473ec0
movsx eax, word [esi + 4]
push eax
call fcn.00491450
add esp, 4
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x34]
call fcn.00491b10
push 0xffffffffffffffff
push str.MapValue
lea ecx, [esp + 0x2c]
call fcn.00473ec0
lea edx, [esi + 0x10]
push edx
lea ecx, [esp + 0x2c]
call fcn.00474c20
push 0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x34]
call fcn.00491b10
cmp word [esi + 4], 9
jne 0x489756
push 0xffffffffffffffff
push str.encrypt
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push str.base64
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x34]
call fcn.00491b10
mov ecx, dword [esp + 0x18]
call fcn.00486460
test eax, eax
jne 0x4898da
mov ax, word [esi + 8]
and ax, 0xf0
cmp ax, 0x10
jne 0x4897a1
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push str.count
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea edx, [esp + 0x28]
push edx
jmp 0x489a87
cmp ax, 0x20
jne 0x4897cc
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b58
lea ecx, [esp + 0x30]
call fcn.00473ec0
jmp 0x489a80
cmp ax, 0x30
jne 0x4897fe
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b60
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea ecx, [esp + 0x28]
push ecx
jmp 0x489a87
cmp ax, 0x40
jne 0x489830
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b68
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea edx, [esp + 0x28]
push edx
jmp 0x489a87
cmp ax, 0x50
jne 0x48985b
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b70
lea ecx, [esp + 0x30]
call fcn.00473ec0
jmp 0x489a80
cmp ax, 0x60
jne 0x4898a5
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b78
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0x3a
lea ecx, [esp + 0x2c]
call fcn.00474090
add esi, 0xc
push esi
lea ecx, [esp + 0x2c]
call fcn.00473f90
push 0
lea ecx, [esp + 0x28]
push ecx
jmp 0x489a87
test ax, ax
jne 0x489a90
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x51cccc
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea edx, [esp + 0x28]
push edx
jmp 0x489a87
movzx eax, word [esi + 0x1a]
cmp ax, 0x10
jne 0x489910
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push str.count
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea eax, [esp + 0x28]
push eax
jmp 0x489a5a
cmp ax, 0x80
jne 0x489942
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push str.countnn
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea ecx, [esp + 0x28]
push ecx
jmp 0x489a5a
cmp ax, 0x20
jne 0x489964
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b58
jmp 0x489a4a
cmp ax, 0x30
jne 0x489996
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b60
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea eax, [esp + 0x28]
push eax
jmp 0x489a5a
cmp ax, 0x40
jne 0x4899c8
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b68
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea ecx, [esp + 0x28]
push ecx
jmp 0x489a5a
cmp ax, 0x50
jne 0x4899e7
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b70
jmp 0x489a4a
cmp ax, 0x60
jne 0x489a2e
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x513b78
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0x3a
lea ecx, [esp + 0x2c]
call fcn.00474090
lea eax, [esi + 0xc]
push eax
lea ecx, [esp + 0x2c]
call fcn.00473f90
push 0
lea ecx, [esp + 0x28]
push ecx
jmp 0x489a5a
test ax, ax
jne 0x489a63
push 0xffffffffffffffff
push str.summ
lea ecx, [esp + 0x2c]
call fcn.00473ec0
push 0xffffffffffffffff
push 0x51cccc
lea ecx, [esp + 0x30]
call fcn.00473ec0
push 0
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x34]
call fcn.00491b10
push 0xffffffffffffffff
push 0x4deca0
lea ecx, [esp + 0x2c]
call fcn.00473ec0
add esi, 0x1c
push esi
lea ecx, [esp + 0x2c]
call fcn.00474c20
push 0
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x34]
call fcn.00491b10
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00491b40
add ebx, 1
cmp ebx, dword [esp + 0x10]
jl 0x489630
mov ecx, dword [ebp + 8]
lea edx, [esp + 0x44]
push edx
call fcn.00491b40
mov esi, eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 0xb
call fcn.004732d0
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 2
call fcn.004732d0
lea ecx, [esp + 0x5c]
mov byte [esp + 0x80], 1
call fcn.004926f0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0
call fcn.004926f0
lea ecx, [esp + 0x44]
mov dword [esp + 0x80], 0xffffffff
call fcn.004926f0
mov eax, esi
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8