Function at 0x4897b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
mov eax, dword [0x612790]
xor eax, esp
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x64]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x6c]
xor ebp, ebp
mov dword [esp + 0x10], eax
mov byte [esp + 0xe], 0
mov byte [esp + 0xf], 0
mov dword [esp + 0x24], 0
push edi
test esi, esi
je 0x489a31
mov edi, esi
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x4897f0
sub edi, ecx
cmp edi, 0x7a1200
ja 0x489a31
lea eax, [edi*2 + 2]
push eax
call dword [0x612764]
mov ebx, eax
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [eax + 0x28], ebx
test ebx, ebx
je 0x489fbf
lea eax, [edi + 1]
add eax, ebx
mov dword [esp + 0x18], eax
push 0x29
mov byte [eax], 0
lea eax, [esp + 0x40]
push eax
push esi
call fcn.004884e0
mov edx, dword [esp + 0x84]
add esp, 0xc
test al, al
je 0x4899a4
lea ebp, [esp + 0x3c]
mov byte [esp + 0x13], 1
lea ecx, [ebp + 1]
nop
mov al, byte [ebp]
inc ebp
test al, al
jne 0x489860
lea eax, [esp + 0x3c]
sub ebp, ecx
push str.file
push eax
call fcn.00466300
add esp, 8
test eax, eax
je 0x4899a0
add esi, 5
mov ecx, ebx
sub ecx, esi
nop dword [eax + eax]
mov al, byte [esi]
lea esi, [esi + 1]
mov byte [ecx + esi - 1], al
test al, al
jne 0x489890
xor ebp, ebp
push str.file
mov dword [esp + 0x1c], ebp
call dword [0x612770]
mov edi, dword [esp + 0x18]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x489fbf
mov al, byte [ebx]
cmp al, 0x2f
jne 0x489aee
cmp byte [ebx + 1], al
jne 0x489945
mov cl, byte [ebx + 2]
add ebx, 2
mov al, cl
cmp cl, 0x2f
je 0x48993d
cmp cl, 0x61
jl 0x4898e5
cmp cl, 0x7a
jle 0x4898ed
mov al, cl
sub al, 0x41
cmp al, 0x19
ja 0x48990b
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x4898f8
cmp al, 0x7c
jne 0x48990b
mov dl, byte [ebx + 2]
mov al, cl
cmp dl, 0x2f
je 0x48993d
cmp dl, 0x5c
je 0x48993d
test dl, dl
je 0x48993d
push 0xa
push ebx
push str.localhost_
call fcn.004664e0
add esp, 0xc
test eax, eax
jne 0x489937
push 0xa
push ebx
push str.127.0.0.1_
call fcn.004664e0
add esp, 0xc
test eax, eax
je 0x489a31
mov al, byte [ebx + 9]
add ebx, 9
cmp al, 0x2f
jne 0x489aee
mov al, byte [ebx + 1]
lea edx, [ebx + 1]
cmp al, 0x61
jl 0x489953
cmp al, 0x7a
jle 0x48995d
sub al, 0x41
cmp al, 0x19
ja 0x489aee
mov al, byte [ebx + 2]
cmp al, 0x3a
je 0x48996c
cmp al, 0x7c
jne 0x489aee
mov al, byte [ebx + 3]
cmp al, 0x2f
je 0x48997f
cmp al, 0x5c
je 0x48997f
test al, al
jne 0x489aee
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x489984
sub ecx, esi
lea eax, [ecx + 1]
push eax
push edx
push ebx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
jmp 0x489aee
mov edx, dword [esp + 0x78]
cmp byte [esp + 0x13], 0
mov byte [ebx], 0
je 0x489a49
inc esi
xor eax, eax
add esi, ebp
je 0x489a31
nop dword [eax]
cmp byte [esi], 0x2f
jne 0x4899d0
cmp eax, 4
jge 0x4899d0
inc eax
add esi, 1
jne 0x4899c0
dec eax
cmp eax, 2
ja 0x489a31
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x2c], eax
call fcn.0045d4c0
add esp, 4
test eax, eax
jne 0x489a0b
mov eax, dword [esp + 0x78]
test al, 8
jne 0x489a0b
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00498b38
add esp, 0x5c
ret
lea edi, [esp + 0x3c]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x489a12
lea eax, [esp + 0x3c]
sub edi, ecx
push 0x5fb9cc
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcspn
add esp, 8
cmp eax, edi
je 0x489a67
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00498b38
add esp, 0x5c
ret
test edx, 0x204
je 0x489a31
test dl, 4
mov ebp, str.https
mov eax, 0
cmove ebp, eax
mov dword [esp + 0x28], ebp
jmp 0x489a6b
mov edx, dword [esp + 0x78]
mov al, byte [esi]
mov ecx, esi
test al, al
je 0x489a87
cmp al, 0x2f
je 0x489a87
cmp al, 0x3f
je 0x489a87
cmp al, 0x23
je 0x489a87
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x489a73
mov edi, esi
sub edi, ecx
je 0x489aa2
mov ebp, dword [esp + 0x18]
push edi
push ecx
push ebp
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebp], 0
jmp 0x489aaa
test edx, 0x400
je 0x489a31
mov edi, esi
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x489ab0
sub edi, ecx
push edi
push esi
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x34]
add esp, 0xc
mov byte [edi + ebx], 0
test eax, eax
je 0x489aea
push eax
call dword [0x612770]
mov edi, dword [esp + 0x18]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x489fbf
jmp 0x489aee
mov edi, dword [esp + 0x14]
mov esi, ebx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x489af3
push 0x5fb9cc
push ebx
sub esi, ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcspn
add esp, 8
cmp eax, esi
jne 0x489a31
mov eax, dword [esp + 0x78]
test al, al
jns 0x489c15
cmp byte [ebx], 0
je 0x489c15
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x489b30
sub ecx, edx
lea eax, [ecx + ecx*2]
push eax
call dword [0x612764]
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
je 0x489fbf
cmp byte [ebx], 0
mov dh, 1
mov byte [esp + 0x12], 1
mov esi, eax
mov edi, ebx
je 0x489c09
cmp edi, ebx
jae 0x489b73
mov al, byte [edi]
mov byte [esi], al
jmp 0x489bfa
mov dl, byte [edi]
cmp dl, 0x20
je 0x489be5
xor ecx, ecx
movzx eax, dh
cmp dl, 0x3f
movzx ebp, dl
push ebp
cmovne ecx, eax
mov byte [esp + 0x23], cl
call fcn.0048b170
add esp, 4
test eax, eax
jne 0x489bd4
push ebp
call fcn.0048b210
add esp, 4
test eax, eax
jne 0x489bd4
push ebp
call fcn.0048b1b0
add esp, 4
test eax, eax
jne 0x489bd4
movzx eax, byte [edi]
push eax
push str.___02x
push 4
push esi
call fcn.00464f40
mov dh, byte [esp + 0x2f]
mov eax, 3
add esp, 0x10
add esi, eax
jmp 0x489bfb
mov al, byte [edi]
mov dh, byte [esp + 0x1f]
mov byte [esi], al
mov eax, 1
add esi, eax
jmp 0x489bfb
test dh, dh
je 0x489bf7
mov word [esi], 0x3225
mov byte [esi + 2], 0x30
add esi, 3
jmp 0x489bfb
mov byte [esi], 0x2b
inc esi
inc edi
cmp byte [edi], 0
jne 0x489b66
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov ebx, eax
mov byte [esi], 0
mov dword [edi + 0x2c], eax
push 0x23
push ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
test eax, eax
je 0x489c42
mov byte [eax], 0
inc eax
cmp byte [eax], 0
je 0x489c42
push eax
call dword [0x612770]
add esp, 4
mov dword [edi + 0x24], eax
test eax, eax
je 0x489fbf
push 0x3f
push ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
test eax, eax
je 0x489c6a
mov byte [eax], 0
inc eax
push eax
call dword [0x612770]
add esp, 4
mov dword [edi + 0x20], eax
test eax, eax
je 0x489fbf
cmp byte [ebx], 0
je 0x489d03
test byte [esp + 0x78], 0x10
jne 0x489cde
push ebx
call fcn.004966d0
mov esi, eax
add esp, 4
test esi, esi
je 0x489fbf
mov edx, ebx
mov ecx, esi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x489cb1
test al, al
je 0x489cad
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x489cb1
add ecx, 2
add edx, 2
test al, al
jne 0x489c91
xor eax, eax
jmp 0x489cb6
sbb eax, eax
or eax, 1
test eax, eax
je 0x489cd4
cmp byte [esp + 0x12], 0
je 0x489ccd
push dword [edi + 0x2c]
call dword [0x612768]
add esp, 4
mov ebx, esi
mov dword [edi + 0x2c], esi
jmp 0x489cf1
push esi
call dword [0x612768]
add esp, 4
cmp byte [esp + 0x12], 0
jne 0x489cf1
push ebx
call dword [0x612770]
add esp, 4
mov ebx, eax
mov dword [edi + 0x1c], ebx
test ebx, ebx
je 0x489fbf
mov dword [edi + 0x2c], 0
mov ebp, dword [esp + 0x18]
test ebp, ebp
je 0x48a08e
mov esi, ebp
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x489d14
push 0x5fb9cc
push ebp
sub esi, ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcspn
add esp, 8
cmp eax, esi
jne 0x489a31
xor edi, edi
push 0x40
push ebp
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x28], edi
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
mov ebx, ebp
test esi, esi
je 0x489e06
mov edi, dword [esp + 0x14]
inc esi
mov ebp, esi
mov eax, dword [edi]
test eax, eax
je 0x489d81
push eax
call fcn.0045d4c0
add esp, 4
test eax, eax
je 0x489d81
test dword [eax + 0x48], 0x400
je 0x489d81
lea eax, [esp + 0x20]
jmp 0x489d83
xor eax, eax
push eax
lea eax, [esp + 0x30]
sub esi, ebx
push eax
lea eax, [esp + 0x2c]
dec esi
push eax
push esi
push ebx
call fcn.0045e090
add esp, 0x14
test eax, eax
mov eax, dword [esp + 0x24]
je 0x489daa
mov edi, 3
jmp 0x489e0a
mov ebx, dword [esp + 0x78]
test eax, eax
je 0x489dc1
test bl, 0x20
je 0x489dbe
mov edi, 8
jmp 0x489e0e
mov dword [edi + 4], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x489dcc
mov dword [edi + 8], eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x489dd7
mov dword [edi + 0xc], eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x16]
push eax
push str.__45_0123456789abcdefABCDEF:.__c_n
push ebp
call fcn.00436d70
add esp, 0x10
cmp eax, 1
jne 0x489e99
mov al, byte [esp + 0x12]
cmp al, 0x5d
jne 0x489e45
mov esi, dword [esp + 0x18]
jmp 0x489e84
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x78]
push eax
call dword [0x612768]
push dword [esp + 0x30]
call dword [0x612768]
push dword [esp + 0x28]
call dword [0x612768]
add esp, 0xc
test edi, edi
je 0x489dd7
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00498b38
add esp, 0x5c
ret
cmp al, 0x25
jne 0x489a31
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x16]
push eax
lea eax, [esi + ebp]
push str._____c_n
push eax
call fcn.00436d70
add esp, 0x10
cmp eax, 1
jne 0x489a31
cmp byte [esp + 0x12], 0x5d
jne 0x489a31
add esi, dword [esp + 0x18]
add esi, ebp
test esi, esi
je 0x489ecd
mov al, byte [esi]
test al, al
je 0x489ecd
cmp al, 0x3a
je 0x489eaa
jmp 0x489a31
push 0x3a
push ebp
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
test esi, esi
je 0x489ecd
mov al, byte [esi + 1]
lea edi, [esi + 1]
test al, al
jne 0x489f49
mov byte [esi], al
movzx eax, byte [esp + 0x13]
xor eax, 1
shl eax, 2
test eax, eax
jne 0x489a36
mov edi, dword [esp + 0x14]
mov ecx, ebp
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x489ed6
sub ecx, edx
jne 0x489ee9
test ebx, 0x400
jne 0x489efb
push ebp
push edi
call fcn.004895f0
add esp, 8
test eax, eax
jne 0x489a36
push ebp
call dword [0x612770]
add esp, 4
mov dword [edi + 0x10], eax
test eax, eax
je 0x489fbf
test ebx, 0x200
je 0x48a08e
cmp dword [esp + 0x28], 0
jne 0x48a08e
push 4
push ebp
push str.ftp.
call fcn.004664e0
add esp, 0xc
test eax, eax
je 0x489fef
mov ecx, 0x5f6584
jmp 0x48a07a
movzx eax, al
push eax
call fcn.0048b190
add esp, 4
test eax, eax
je 0x489fd7
push 0xa
lea eax, [esp + 0x34]
push eax
push edi
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtol
mov edi, eax
add esp, 0xc
lea ecx, [edi - 1]
cmp ecx, 0xfffe
ja 0x489fd7
mov eax, dword [esp + 0x30]
cmp byte [eax], 0
jne 0x489fd7
push edi
mov byte [esi], 0
push 0x5f5450
mov byte [eax], 0
lea eax, [esp + 0x3c]
push 7
push eax
call fcn.00464f40
mov eax, dword [esp + 0x24]
mov dword [eax + 0x30], edi
lea eax, [esp + 0x44]
push eax
call dword [0x612770]
mov edi, dword [esp + 0x28]
add esp, 0x14
mov dword [edi + 0x18], eax
test eax, eax
jne 0x489ed1
pop edi
pop esi
pop ebp
mov eax, 7
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00498b38
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00498b38
add esp, 0x5c
ret
push 5
push ebp
push str.dict.
call fcn.004664e0
add esp, 0xc
test eax, eax
je 0x48a00a
mov ecx, str.dict
jmp 0x48a07a
push 5
push ebp
push str.ldap.
call fcn.004664e0
add esp, 0xc
test eax, eax
je 0x48a025
mov ecx, str.ldap
jmp 0x48a07a
push 5
push ebp
push str.imap.
call fcn.004664e0
add esp, 0xc
test eax, eax
je 0x48a040
mov ecx, str.imap
jmp 0x48a07a
push 5
push ebp
push str.smtp.
call fcn.004664e0
add esp, 0xc
test eax, eax
je 0x48a05b
mov ecx, str.smtp
jmp 0x48a07a
push 5
push ebp
push str.pop3.
call fcn.004664e0
add esp, 0xc
mov ecx, str.pop3
test eax, eax
mov edx, str.http
cmove ecx, edx
push ecx
call dword [0x612770]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x489fbf
push dword [edi + 0x28]
call dword [0x612768]
push dword [edi + 0x2c]
mov dword [edi + 0x28], 0
call dword [0x612768]
mov ecx, dword [esp + 0x70]
add esp, 8
mov dword [edi + 0x2c], 0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00498b38
add esp, 0x5c
ret