Function at 0x487fa6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xc0
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x14], eax
mov ebx, dword [ebp + 0x14]
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
call sub.msvcrt.dll__errno
mov edx, ebx
mov eax, dword [eax]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x24], edi
mov eax, 0x6000
and eax, dword [ebp + 8]
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], 0xfffffffd
mov word [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov word [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], 0xffffffff
mov dword [esp + 0x74], eax
add eax, 0x200
mov dword [esp + 0x78], eax
lea ebx, [esp + 0x24]
add edx, 2
xor ecx, ecx
mov edi, edx
nop word cs:[eax + eax]
movzx eax, word [edi - 2]
test eax, eax
je 0x4885d7
cmp eax, 0x25
je 0x487b50
lea eax, [edi - 2]
test ecx, ecx
cmove ecx, eax
add edi, 2
add edx, 2
jmp 0x487b20
test ecx, ecx
je 0x487b71
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
sub edx, ecx
sar edx, 1
dec edx
mov dword [esp], ebx
call fcn.00488610
mov eax, dword [esp + 0x74]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
movzx ecx, word [edi]
test cx, cx
je 0x4885d0
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov esi, edi
xor eax, eax
nop dword [eax]
lea edx, [esi + 2]
mov dword [esp + 0x10], edx
movzx ecx, cx
lea ebx, [ecx - 0x20]
cmp ebx, 0x5a
ja case.0x487bc6.33
jmp dword [ebx*4 + 0x49c068]
mov dword [esp + 0x1c], 0
mov edx, dword [esp + 0x10]
jmp 0x487dc0
lea ecx, [esi + 4]
xor eax, eax
cmp word [esi + 2], 0x6c
sete al
mov edx, dword [esp + 0x10]
cmove edx, ecx
or eax, 2
mov dword [esp + 0x1c], eax
jmp 0x487dc0
test eax, eax
jne 0x487c96
or byte [esp + 0x29], 0x10
mov dword [esp + 0x60], 0
call sub.msvcrt.dll_localeconv
mov eax, dword [eax + 4]
lea ecx, [esp + 0x60]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 8], 0x10
call fcn.0048a420
test eax, eax
jle 0x487c49
movzx ecx, word [esp + 0x18]
mov word [esp + 0x40], cx
mov dword [esp + 0x3c], eax
jmp 0x487d92
test eax, eax
jne 0x487c96
or byte [esp + 0x29], 1
jmp 0x487d92
test eax, eax
jne 0x487c96
or byte [esp + 0x29], 4
jmp 0x487d92
cmp eax, 1
jbe 0x487de9
mov edx, dword [esp + 0x10]
jmp 0x487dc0
test eax, eax
jne 0x487c96
or byte [esp + 0x28], 0x40
jmp 0x487d92
test eax, eax
je 0x487d86
mov ebx, eax
mov edx, dword [esp + 0x10]
jmp 0x487dc5
cmp dword [esp + 0x20], 0
jne 0x487e04
mov dword [esp + 0x20], 0
mov edx, dword [esp + 0x10]
jmp 0x487dc0
mov dword [esp + 0x1c], 3
mov edx, dword [esp + 0x10]
jmp 0x487dc0
mov edx, dword [esp + 0x10]
movzx ecx, word [edx]
cmp ecx, 0x33
je 0x487da2
cmp ecx, 0x36
jne 0x487dda
lea eax, [esi + 6]
xor ecx, ecx
cmp word [esi + 4], 0x34
sete cl
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x1c], ecx
cmove edx, eax
jmp 0x487dc0
lea ecx, [esi + 4]
xor edx, edx
cmp word [esi + 2], 0x68
sete dl
lea eax, [edx*4 + 1]
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x10]
cmove edx, ecx
jmp 0x487dc0
test eax, eax
je 0x487d8d
cmp eax, 3
ja 0x487ec0
lea esi, [ecx - 0x30]
cmp si, 9
ja 0x487ec0
cmp eax, 2
mov ebx, eax
mov edx, 3
cmove ebx, edx
test eax, eax
mov eax, 1
cmove ebx, eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x487e46
mov edx, dword [eax]
test edx, edx
js 0x487d9a
lea edx, [edx + edx*4]
lea ecx, [ecx + edx*2]
add ecx, 0xffffffd0
mov dword [eax], ecx
mov edx, dword [esp + 0x10]
jmp 0x487dc5
or byte [esp + 0x28], 4
mov edx, dword [esp + 0x10]
jmp 0x487dc0
or byte [esp + 0x29], 8
jmp 0x487d92
or byte [esp + 0x29], 2
xor ebx, ebx
mov edx, dword [esp + 0x10]
jmp 0x487dc5
mov dword [eax], esi
mov edx, dword [esp + 0x10]
jmp 0x487dc5
lea eax, [esi + 6]
xor ecx, ecx
cmp word [esi + 4], 0x32
sete cl
cmove edx, eax
add ecx, ecx
mov dword [esp + 0x1c], ecx
nop dword [eax + eax]
mov ebx, 4
movzx ecx, word [edx]
mov esi, edx
mov eax, ebx
test cx, cx
jne 0x487bb0
jmp 0x487b0b
mov dword [esp + 0x1c], 0
mov ebx, 4
jmp 0x487dc8
mov dword [esp + 0x30], 0
mov ebx, 2
lea ecx, [esp + 0x30]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x10]
jmp 0x487dc5
test eax, 0xfffffffd
mov ebx, 4
jne 0x487e46
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
add ecx, 4
mov esi, dword [esp + 0x20]
mov dword [esi], edx
test edx, edx
mov dword [esp + 0x14], ecx
js 0x487e2b
mov ebx, eax
jmp 0x487e46
test eax, eax
je 0x487e3b
mov dword [esp + 0x30], 0xffffffff
mov ebx, eax
jmp 0x487e46
or byte [esp + 0x29], 4
neg dword [esp + 0x2c]
xor ebx, ebx
mov dword [esp + 0x20], 0
mov edx, dword [esp + 0x10]
jmp 0x487dc5
and byte [esp + 0x29], 0xfe
mov esi, dword [esp + 0x1c]
cmp esi, 2
je 0x487eed
cmp esi, 3
mov edx, dword [esp + 0x14]
jne 0x487efb
movsd xmm0, qword [edx]
add edx, 8
movsd qword [esp + 0x50], xmm0
jmp 0x488400
or byte [esp + 0x28], 0x80
mov esi, dword [esp + 0x1c]
cmp esi, 2
je 0x48825b
cmp esi, 3
mov edx, dword [esp + 0x14]
jne 0x48826d
mov ecx, dword [edx]
mov eax, dword [edx + 4]
add edx, 8
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x14], edx
jmp 0x4884ac
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
lea ebx, [esp + 0x24]
mov dword [esp], ebx
mov ecx, 0x49c1e8
mov edx, 1
call fcn.00488610
mov edx, edi
jmp 0x487b0f
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
add edx, 4
jmp 0x4883f4
mov eax, dword [edx]
add edx, 4
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
cmp esi, 5
je 0x4883f1
cmp esi, 1
lea ebx, [esp + 0x24]
jne 0x488404
movzx eax, ax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
jmp 0x488404
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
test eax, eax
mov edi, str._null_
cmovne edi, eax
mov eax, dword [esp + 0x30]
test eax, eax
js 0x48842c
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0048a920
jmp 0x488434
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x1c]
and eax, 0xfffffffe
cmp eax, 2
je 0x4881a3
mov esi, dword [esp + 0x14]
movzx eax, byte [esi]
mov byte [esp + 0x50], al
lea ebx, [esp + 0x24]
mov dword [esp], ebx
lea ecx, [esp + 0x50]
mov edx, 1
call fcn.004887e0
jmp 0x4882c4
test eax, eax
jne 0x487fc4
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x28], eax
jne 0x487fc4
mov eax, dword [esp + 0x78]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], 8
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [esp + 0x14], ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea edx, [esp + 0x24]
mov ecx, pe_nt_image_headers32
call fcn.00488d90
jmp 0x488509
mov eax, dword [esp + 0x28]
jmp 0x488169
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x1c]
dec ecx
cmp ecx, 4
ja case.0x488020.2
jmp dword [ecx*4 + 0x49c1d4]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov dword [ecx], eax
jmp 0x488502
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
lea ebx, [esp + 0x24]
mov dword [esp], ebx
mov ecx, 0x49c1e8
mov edx, 1
call fcn.00488610
mov edx, dword [esp + 0x10]
jmp 0x487b0f
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
jmp 0x4881c8
mov eax, dword [esp + 0x28]
jmp 0x4881fc
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
jmp 0x48808d
mov eax, dword [esp + 0x28]
test al, 4
mov esi, dword [esp + 0x14]
jne 0x4880f9
movsd xmm0, qword [esi]
add esi, 8
movsd qword [esp + 0xb0], xmm0
fld qword [esp + 0xb0]
fld st(0)
fstp xword [esp + 0x80]
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x100
mov dword [esp + 0x14], esi
jne 0x4882d4
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x28]
test eax, 0x100
lea ebx, [esp + 0x24]
jne 0x4883a9
test al, 0x40
je 0x488155
mov byte [esp + 0x18], 0x20
jmp 0x4883ae
fld xword [esi]
add esi, 0xc
fld st(0)
fstp xword [esp + 0x90]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
fld st(0)
fstp xword [esp + 0x60]
fxam
wait
fnstsw ax
and eax, 0x4500
cmp eax, 0x100
mov dword [esp + 0x14], esi
jne 0x48834e
fstp st(0)
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x28]
test eax, 0x100
lea ebx, [esp + 0x24]
jne 0x4883a9
test al, 0x40
jne 0x4880ef
lea edx, [esp + 0x18]
jmp 0x4883b2
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
jne 0x488178
fld qword [eax]
add eax, 8
jmp 0x48817d
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.004890e0
jmp 0x488509
mov eax, dword [esp + 0x30]
jmp 0x488239
mov dword [esp + 0x30], 0xffffffff
mov esi, dword [esp + 0x14]
movzx eax, word [esi]
mov word [esp + 0x60], ax
lea ebx, [esp + 0x24]
mov dword [esp], ebx
lea ecx, [esp + 0x60]
mov edx, 1
jmp 0x4882bf
mov eax, dword [esp + 0x28]
test al, 4
mov eax, dword [esp + 0x14]
jne 0x4881d7
fld qword [eax]
add eax, 8
jmp 0x4881dc
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.00489270
jmp 0x488509
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
jne 0x48820b
fld qword [eax]
add eax, 8
jmp 0x488210
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.00489470
jmp 0x488509
mov ecx, dword [esp + 0x1c]
and ecx, 0xfffffffe
mov eax, dword [esp + 0x30]
cmp ecx, 2
jne 0x4883c8
mov esi, dword [esp + 0x14]
mov ecx, dword [esi]
test ecx, ecx
mov edi, 0x49c234
cmovne edi, ecx
test eax, eax
js 0x4882ac
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0048a960
jmp 0x4882b4
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [esp + 0x14], ecx
jmp 0x4884a1
mov ecx, dword [edx]
add edx, 4
mov eax, ecx
sar eax, 0x1f
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
cmp esi, 5
mov dword [esp + 0x14], edx
je 0x48849e
cmp esi, 1
lea ebx, [esp + 0x24]
jne 0x4884b0
movsx eax, cx
mov dword [esp + 0x50], eax
sar eax, 0x1f
mov dword [esp + 0x54], eax
jmp 0x4884b0
mov dword [esp], edi
call sub.msvcrt.dll_wcslen
lea ebx, [esp + 0x24]
mov dword [esp], ebx
mov ecx, edi
mov edx, eax
call fcn.00488610
add esi, 4
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x10]
jmp 0x487b0f
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
movsx ecx, word [esp + 0x88]
mov esi, ecx
sar esi, 0x1f
lea ebx, [esp + 0x24]
jns 0x4882fa
or byte [esp + 0x28], 0x80
movsd qword [esp + 0xa8], xmm0
fld qword [esp + 0xa8]
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
jne 0x488444
mov dword [esp + 0x30], 0xffffffff
test esi, esi
js 0x488516
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x48853e
test al, 0x40
je 0x4883a0
mov byte [esp + 0x18], 0x20
jmp 0x488543
movsx esi, word [esp + 0x98]
mov edi, esi
sar edi, 0x1f
lea ebx, [esp + 0x24]
jns 0x488366
or byte [esp + 0x28], 0x80
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
jne 0x488481
mov dword [esp + 0x30], 0xffffffff
test edi, edi
js 0x488516
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x48853e
test al, 0x40
jne 0x488344
lea edx, [esp + 0x18]
jmp 0x488547
mov byte [esp + 0x18], 0x2b
lea edx, [esp + 0x19]
and al, 0x20
mov ecx, eax
or cl, 0x4e
mov byte [edx], cl
or al, 0x41
mov byte [edx + 1], al
mov byte [edx + 2], cl
jmp 0x48855d
mov esi, dword [esp + 0x14]
mov ecx, dword [esi]
test ecx, ecx
mov edi, str._null_
cmovne edi, ecx
test eax, eax
js 0x488521
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0048a920
jmp 0x488529
movzx eax, al
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
lea ebx, [esp + 0x24]
mov dword [esp + 0x14], edx
cmp ecx, 0x75
je 0x4884bb
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea edx, [esp + 0x24]
call fcn.00488d90
mov edx, dword [esp + 0x10]
jmp 0x487b0f
mov dword [esp], edi
call sub.msvcrt.dll_strlen
lea ebx, [esp + 0x24]
mov dword [esp], ebx
mov ecx, edi
mov edx, eax
jmp 0x488569
and ecx, 0x7fff
mov word [esp + 0x68], cx
mov eax, ecx
dec eax
movzx eax, ax
cmp eax, 0x3bff
ja 0x488577
movzx eax, cx
mov ecx, 0x3c01
sub ecx, eax
shrd edx, edi, cl
shr edi, cl
xor esi, esi
test cl, 0x20
cmovne edx, edi
cmovne edi, esi
add ecx, eax
jmp 0x48857c
and si, 0x7fff
mov word [esp + 0x68], si
je 0x488598
movzx eax, si
add eax, 0xffffc001
jmp 0x4885a0
movsx eax, cl
mov dword [esp + 0x50], eax
sar eax, 0x1f
mov dword [esp + 0x54], eax
lea ebx, [esp + 0x24]
sar eax, 0x1f
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], eax
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea ecx, [esp + 0x24]
call fcn.00488a10
mov edx, dword [esp + 0x10]
jmp 0x487b0f
mov ecx, eax
sar ecx, 0x1f
mov esi, dword [esp + 0x14]
mov edx, dword [esi]
mov dword [edx + 4], ecx
mov dword [edx], eax
add esi, 4
mov dword [esp + 0x14], esi
jmp 0x488509
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov word [ecx], ax
jmp 0x488502
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov byte [ecx], al
add edx, 4
mov dword [esp + 0x14], edx
lea ebx, [esp + 0x24]
mov edx, dword [esp + 0x10]
jmp 0x487b0f
mov byte [esp + 0x18], 0x2d
mov eax, dword [esp + 0x28]
jmp 0x488543
mov dword [esp], edi
call sub.msvcrt.dll_strlen
lea ebx, [esp + 0x24]
mov dword [esp], ebx
mov ecx, edi
mov edx, eax
call fcn.004887e0
jmp 0x4882c4
mov byte [esp + 0x18], 0x2b
lea edx, [esp + 0x19]
and al, 0x20
mov ecx, eax
or cl, 0x49
mov byte [edx], cl
mov ecx, eax
or cl, 0x4e
mov byte [edx + 1], cl
or al, 0x46
mov byte [edx + 2], al
lea ecx, [esp + 0x18]
sub edx, ecx
add edx, 3
mov dword [esp], ebx
call fcn.004887e0
mov edx, dword [esp + 0x10]
jmp 0x487b0f
test cx, cx
je 0x4885c0
add ecx, 0xffffc004
mov word [esp + 0x68], cx
shrd edx, edi, 3
shr edi, 3
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], edi
jmp 0x4885a5
mov ax, 0xc002
or ecx, edx
je 0x4885a5
mov word [esp + 0x68], ax
movups xmm0, xmmword [esp + 0x60]
movups xmmword [esp], xmm0
lea ecx, [esp + 0x24]
call fcn.00489dd0
mov edx, dword [esp + 0x10]
jmp 0x487b0f
mov cx, 0xfc05
mov eax, edx
or eax, edi
jne 0x488582
xor edx, edx
xor edi, edi
jmp 0x48858e
mov edx, edi
jmp 0x487b0b
test ecx, ecx
je 0x4885f8
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
sub edx, ecx
sar edx, 1
dec edx
mov dword [esp], ebx
call fcn.00488610
mov eax, dword [esp + 0x44]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret