Function at 0x46e120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4c8fb4
mov eax, dword fs:[0]
push eax
sub esp, 0x49c
mov eax, dword [0x4f55dc]
xor eax, esp
mov dword [esp + 0x498], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4f55dc]
xor eax, esp
push eax
lea eax, [esp + 0x4b0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x4c4]
mov edi, dword [esp + 0x4c0]
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xac], 7
mov dword [esp + 0xa8], 0
mov word [esp + 0x98], ax
mov dword [esp + 0x4b8], eax
lea esi, [ecx + 0x38]
cmp byte [esi], al
jne 0x46e1b8
mov ecx, esi
call fcn.0048b460
xor eax, eax
mov dword [esp + 0xf4], 0
push 0xffffffffffffffff
push eax
mov word [esp + 0xec], ax
lea ecx, [esp + 0xec]
lea eax, [esi + 0x1c]
mov dword [esp + 0x100], 0
push eax
mov dword [esp + 0x104], 7
mov dword [esp + 0x100], 0
call fcn.00401fd0
mov byte [esp + 0x4b8], 1
cmp dword [esp + 0xf4], 0
jne 0x46e21a
xor bl, bl
jmp 0x46ec11
push pe_nt_image_headers32
lea eax, [esp + 0x144]
mov dword [esp + 0x140], 0x11c
push 0
push eax
call fcn.004a1910
add esp, 0xc
lea ecx, [esp + 0x13c]
call fcn.00408880
cmp dword [esp + 0x140], 6
lea ecx, [esp + 0x80]
mov bl, 1
mov byte [esp + 0x1a], bl
jb 0x46e39c
xor bl, bl
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedTaskBar_
mov byte [esp + 0x1e], bl
call fcn.00401dd0
mov byte [esp + 0x4b8], 5
lea eax, [esp + 0x80]
push eax
lea edx, [esp + 0xe8]
lea ecx, [esp + 0xb4]
call fcn.0040c770
add esp, 4
mov esi, eax
mov byte [esp + 0x4b8], 6
lea eax, [esp + 0x98]
cmp eax, esi
je 0x46e2f4
cmp dword [esp + 0xac], 8
jb 0x46e2c7
push dword [esp + 0x98]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xac], 7
push esi
lea ecx, [esp + 0x9c]
mov dword [esp + 0xac], 0
mov word [esp + 0x9c], ax
call fcn.00405670
mov byte [esp + 0x4b8], 5
cmp dword [esp + 0xc4], 8
jb 0x46e315
push dword [esp + 0xb0]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
mov byte [esp + 0x4b8], 1
cmp dword [esp + 0x94], 8
jb 0x46e356
push dword [esp + 0x80]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
push edi
lea edx, [esp + 0x9c]
mov dword [esp + 0x94], 0
lea ecx, [esp + 0x84]
mov word [esp + 0x84], ax
call fcn.0040c770
add esp, 4
mov esi, eax
mov byte [esp + 0x4b8], 7
jmp 0x46e4ca
push str.MicrosoftInternet_ExplorerQuick_Launch_
call fcn.00401dd0
mov byte [esp + 0x4b8], 2
lea eax, [esp + 0x80]
push eax
lea edx, [esp + 0xe8]
lea ecx, [esp + 0xb4]
call fcn.0040c770
add esp, 4
mov esi, eax
mov byte [esp + 0x4b8], 3
lea eax, [esp + 0x98]
cmp eax, esi
je 0x46e427
cmp dword [esp + 0xac], 8
jb 0x46e3fa
push dword [esp + 0x98]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xac], 7
push esi
lea ecx, [esp + 0x9c]
mov dword [esp + 0xac], 0
mov word [esp + 0x9c], ax
call fcn.00405670
mov byte [esp + 0x4b8], 2
cmp dword [esp + 0xc4], 8
jb 0x46e448
push dword [esp + 0xb0]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
mov byte [esp + 0x4b8], 1
cmp dword [esp + 0x94], 8
jb 0x46e489
push dword [esp + 0x80]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
push edi
lea edx, [esp + 0x9c]
mov dword [esp + 0x94], 0
lea ecx, [esp + 0x84]
mov word [esp + 0x84], ax
call fcn.0040c770
add esp, 4
mov esi, eax
mov byte [esp + 0x4b8], 4
lea eax, [esp + 0x98]
cmp eax, esi
je 0x46e517
cmp dword [esp + 0xac], 8
jb 0x46e4ee
push dword [esp + 0x98]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xac], 7
push esi
lea ecx, [esp + 0x9c]
mov dword [esp + 0xac], eax
mov word [esp + 0x9c], ax
call fcn.00405670
mov byte [esp + 0x4b8], 1
cmp dword [esp + 0x94], 8
jb 0x46e538
push dword [esp + 0x80]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
push 4
mov word [esp + 0x84], ax
mov dword [esp + 0x94], eax
call fcn.0049c7b6
mov ebp, eax
add esp, 4
mov dword [esp + 0xe0], ebp
mov byte [esp + 0x4b8], 8
test ebp, ebp
je 0x46e583
mov dword [ebp], 0
mov dword [ebp], 0xffffffff
jmp 0x46e585
xor ebp, ebp
mov byte [esp + 0x4b8], 1
mov dword [esp + 0xe0], ebp
mov byte [esp + 0x4b8], 9
lea ecx, [esp + 0xfc]
call fcn.0040cb60
mov byte [esp + 0x4b8], 0xa
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x9c]
mov ecx, ebp
push eax
call fcn.0040cdc0
test al, al
jne 0x46e5d2
xor bl, bl
jmp 0x46eb96
xor eax, eax
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xdc], 7
mov dword [esp + 0xd8], 0
mov word [esp + 0xc8], ax
mov byte [esp + 0x4b8], 0xb
lea edx, [esp + 0xe4]
test bl, bl
je 0x46e712
push str.MicrosoftInternet_ExplorerQuick_Launch_
lea ecx, [esp + 0x3c]
call fcn.0040dbd0
add esp, 4
mov byte [esp + 0x4b8], 0xc
lea ecx, [esp + 0x124]
push ecx
mov edx, eax
lea ecx, [esp + 0x54]
call fcn.004758a0
add esp, 4
mov esi, eax
mov byte [esp + 0x4b8], 0xd
lea eax, [esp + 0xc8]
cmp eax, esi
je 0x46e6a9
cmp dword [esp + 0xdc], 8
jb 0x46e67c
push dword [esp + 0xc8]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], 7
push esi
lea ecx, [esp + 0xcc]
mov dword [esp + 0xdc], 0
mov word [esp + 0xcc], ax
call fcn.00405670
mov byte [esp + 0x4b8], 0xc
cmp dword [esp + 0x64], 8
jb 0x46e6c4
push dword [esp + 0x50]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], 0
mov word [esp + 0x50], ax
mov byte [esp + 0x4b8], 0xb
cmp dword [esp + 0x4c], 8
jb 0x46e6f6
push dword [esp + 0x38]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
jmp 0x46e800
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedTaskBar_
lea ecx, [esp + 0x24]
call fcn.0040dbd0
add esp, 4
mov byte [esp + 0x4b8], 0xe
lea ecx, [esp + 0x124]
push ecx
mov edx, eax
lea ecx, [esp + 0x6c]
call fcn.004758a0
add esp, 4
mov esi, eax
mov byte [esp + 0x4b8], 0xf
lea eax, [esp + 0xc8]
cmp eax, esi
je 0x46e79c
cmp dword [esp + 0xdc], 8
jb 0x46e76f
push dword [esp + 0xc8]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], 7
push esi
lea ecx, [esp + 0xcc]
mov dword [esp + 0xdc], 0
mov word [esp + 0xcc], ax
call fcn.00405670
mov byte [esp + 0x4b8], 0xe
cmp dword [esp + 0x7c], 8
jb 0x46e7b7
push dword [esp + 0x68]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
mov byte [esp + 0x4b8], 0xb
cmp dword [esp + 0x34], 8
jb 0x46e7e9
push dword [esp + 0x20]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
xor eax, eax
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
mov byte [esp + 0x4b8], 0x10
lea edx, [esp + 0xb0]
lea ecx, [esp + 0xc8]
call fcn.0046ecd0
lea edx, [esp + 0xb0]
lea ecx, [esp + 0x80]
call fcn.0040da60
mov byte [esp + 0x4b8], 0x11
cmp dword [esp + 0xc0], 0
je 0x46e8fe
mov eax, dword [esp + 0x1c]
xor ebx, ebx
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x46e8fa
xor edi, edi
lea esp, [esp]
add esi, edi
cmp dword [esi + 0x14], 8
jb 0x46e8aa
mov esi, dword [esi]
lea ecx, [esp + 0x80]
call fcn.004021f0
test esi, esi
jne 0x46e8c1
test eax, eax
sete al
jmp 0x46e8ce
test eax, eax
je 0x46e8d6
mov edx, eax
mov ecx, esi
call fcn.00406e80
test al, al
jne 0x46ea25
mov eax, dword [esp + 0x1c]
inc ebx
add edi, 0x18
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x46e8a0
mov bl, byte [esp + 0x1a]
mov esi, dword [ebp]
cmp esi, 0xffffffff
je 0x46ead1
push 0x24c
lea eax, [esp + 0x264]
mov dword [esp + 0x260], 0
push 0
push eax
call fcn.004a1910
add esp, 0xc
lea eax, [esp + 0x25c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
setne al
test al, al
je 0x46ead1
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x260]
push eax
call fcn.0040cf40
mov byte [esp + 0x4b8], 0x10
cmp dword [esp + 0x94], 8
jb 0x46e97e
push dword [esp + 0x80]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
mov dword [esp + 0x90], 0
mov word [esp + 0x80], ax
mov byte [esp + 0x4b8], 0xb
cmp dword [esp + 0xc4], 8
jb 0x46e9bf
push dword [esp + 0xb0]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
mov byte [esp + 0x4b8], 0xa
cmp dword [esp + 0xdc], 8
jb 0x46ea00
push dword [esp + 0xc8]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], 7
mov dword [esp + 0xd8], 0
mov word [esp + 0xc8], ax
jmp 0x46e5d2
mov bl, 1
mov byte [esp + 0x4b8], 0x10
cmp dword [esp + 0x94], 8
jb 0x46ea48
push dword [esp + 0x80]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
mov dword [esp + 0x90], 0
mov word [esp + 0x80], ax
mov byte [esp + 0x4b8], 0xb
cmp dword [esp + 0xc4], 8
jb 0x46ea89
push dword [esp + 0xb0]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
mov byte [esp + 0x4b8], 0xa
cmp dword [esp + 0xdc], 8
jb 0x46eaca
push dword [esp + 0xc8]
call fcn.0049c766
add esp, 4
xor eax, eax
jmp 0x46eb78
mov byte [esp + 0x4b8], 0x10
cmp dword [esp + 0x94], 8
jb 0x46eaf2
push dword [esp + 0x80]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
mov dword [esp + 0x90], 0
mov word [esp + 0x80], ax
mov byte [esp + 0x4b8], 0xb
cmp dword [esp + 0xc4], 8
jb 0x46eb33
push dword [esp + 0xb0]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], 0
mov word [esp + 0xb0], ax
mov byte [esp + 0x4b8], 0xa
cmp dword [esp + 0xdc], 8
jb 0x46eb74
push dword [esp + 0xc8]
call fcn.0049c766
add esp, 4
xor eax, eax
mov bl, al
mov word [esp + 0xc8], ax
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 7
mov byte [esp + 0x4b8], 9
cmp dword [esp + 0x138], 8
jb 0x46ebb7
push dword [esp + 0x124]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0x138], 7
mov dword [esp + 0x134], 0
mov word [esp + 0x124], ax
mov byte [esp + 0x4b8], 1
test ebp, ebp
je 0x46ec06
mov eax, dword [ebp]
cmp eax, 0xffffffff
je 0x46ebfd
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
je 0x46ebfd
mov dword [ebp], 0xffffffff
push ebp
call fcn.0049c766
add esp, 4
mov dword [esp + 0xe0], 0
mov byte [esp + 0x4b8], 0
cmp dword [esp + 0xf8], 8
jb 0x46ec32
push dword [esp + 0xe4]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xf8], 7
mov dword [esp + 0xf4], 0
mov word [esp + 0xe4], ax
mov dword [esp + 0x4b8], 0xffffffff
cmp dword [esp + 0xac], 8
jb 0x46ec76
push dword [esp + 0x98]
call fcn.0049c766
add esp, 4
xor eax, eax
mov dword [esp + 0xac], 7
mov word [esp + 0x98], ax
mov al, bl
mov dword [esp + 0xa8], 0
mov ecx, dword [esp + 0x4b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x498]
xor ecx, esp
call fcn.0049bfa3
add esp, 0x4a8
ret 8