Function at 0x4b9e97
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2e4
mov eax, dword [ebp + 0x1c]
push ebx
push esi
push edi
push 1
push ecx
lea ecx, [esp + 0x90]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
call fcn.004baf3b
mov eax, dword [ebp + 0x18]
movzx ecx, ax
mov dword [esp + 0x1c], ecx
test al, 2
jne 0x4b9ed4
cmp ax, 1
jne 0x4b9edb
mov dword [ebp + 0x18], 2
xor bl, bl
xor edx, edx
mov byte [esp + 0x1b], bl
mov ebx, dword [ebp + 0xc]
mov dword [esp + 0xc], edx
cmp ebx, 0xffffffff
jne 0x4b9efd
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
xor esi, esi
jmp 0x4b9f07
mov edi, dword [esp + 0xa0]
test esi, esi
jne 0x4b9f1e
mov ecx, dword [edi + 0x18]
mov eax, dword [edi + 0x20]
dec ecx
and ecx, ebx
lea esi, [eax + ecx*4]
mov esi, dword [esi]
test esi, esi
je 0x4b9f51
lea ecx, [ecx]
cmp esi, dword [edi + 0xc]
jbe 0x4b9f31
call fcn.004d509f
mov eax, dword [edi + 0x10]
lea esi, [esi + esi*2]
lea esi, [esi - 3]
cmp dword [eax + esi*4 + 8], ebx
lea esi, [eax + esi*4]
je 0x4ba077
mov esi, dword [esi]
test esi, esi
jne 0x4b9f27
mov edx, dword [esp + 0xc]
mov ecx, dword [ebp + 0x18]
mov edi, dword [ebp + 0x24]
mov esi, dword [ebp + 8]
cmp cx, 4
je 0x4b9f6a
cmp cx, 8
jne 0x4ba6bb
test edx, edx
je 0x4ba6bb
mov bl, byte [esp + 0x1b]
xor eax, eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x78]
test bl, bl
je 0x4b9fa9
mov eax, dword [ebp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x30], edx
test bl, bl
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
setne cl
mov dword [esp + 0x3c], 0
dec ecx
and ecx, dword [esp + 0x10]
mov dword [ebp + 0x1c], ecx
xor ecx, ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], ecx
mov byte [esp + 0x50], cl
mov ecx, dword [esp + 0x1c]
mov word [esp + 0x51], cx
lea ecx, [esp + 0x20]
push ecx
push eax
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x3c]
call fcn.004b99e3
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], ebx
test esi, esi
js 0x4ba603
push dword [ebp + 0x28]
lea eax, [esp + 0x8c]
push edi
push dword [ebp + 8]
lea ecx, [esp + 0x3c]
push dword [esp + 0x20]
push eax
call fcn.004b917f
mov esi, eax
mov dword [esp + 0x10], esi
test esi, esi
jns 0x4ba513
test edi, edi
je 0x4ba603
call fcn.004d6912
mov ecx, dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov ebx, eax
mov dword [esp + 0xc], ecx
mov eax, dword [ebx + 0x34]
test eax, eax
jne 0x4ba4bc
xor eax, eax
jmp 0x4ba4c6
mov ecx, dword [esi + 4]
cmp dword [esp + 0x94], ecx
jne 0x4ba0ba
movzx ecx, byte [esp + 0xc5]
mov eax, dword [esp + 0xea]
add ecx, dword [esp + 0xa4]
add eax, 0xc
add eax, ecx
mov dword [esp + 0xd5], 0xffffffff
mov dword [esp + 0xac], eax
mov byte [esp + 0xd0], 0
jmp 0x4ba0e3
mov dword [esp + 0x94], ecx
add ecx, dword [esp + 0x88]
movzx eax, word [ecx]
push eax
mov dword [esp + 0x9c], eax
lea eax, [ecx + 2]
push eax
lea ecx, [esp + 0xac]
call fcn.004baa66
mov al, byte [esp + 0xc2]
test al, al
jns 0x4ba0f3
cmp ebx, 0xfffffffc
jne 0x4ba15f
movzx edx, al
xor ecx, ecx
and edx, 0xf
cmp edx, 1
sete cl
xor eax, eax
test edx, edx
sete al
or ecx, eax
je 0x4ba111
mov edx, 2
mov eax, dword [ebp + 0x18]
movzx eax, ax
cmp edx, eax
je 0x4ba16d
cmp edx, 2
mov edx, dword [esp + 0xc]
jne 0x4b9f07
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xa8]
call fcn.004ba78d
test al, al
je 0x4ba14f
cmp byte [esp + 0xe5], 0
jne 0x4ba14f
mov byte [esp + 0x1b], 1
mov edx, dword [esp + 0x94]
mov dword [esp + 0xc], edx
jmp 0x4b9f07
mov eax, 0x800a0005
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov esi, dword [0x4e0524]
test esi, esi
je 0x4ba188
call fcn.004d6912
cmp dword [eax + 2], 0
jne 0x4ba188
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [ebp + 0x1c]
mov dword [esp + 0x30], eax
xor eax, eax
test byte [esp + 0xc3], 1
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov byte [esp + 0x50], al
mov eax, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov word [esp + 0x51], cx
je 0x4ba25e
mov ecx, dword [ebx + 0xc]
mov edx, 0x10
mov eax, dword [ebx + 8]
mov dword [esp + 0x64], ecx
inc eax
mov ecx, dword [ebx + 4]
mov dword [esp + 0x5c], ecx
xor ecx, ecx
mov dword [esp + 0x60], eax
mul edx
seto cl
neg ecx
or ecx, eax
jne 0x4ba209
xor eax, eax
jmp 0x4ba218
push ecx
push 8
push dword [0x4e05c4]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [ebx + 8]
shl ecx, 4
push ecx
push dword [ebx]
mov dword [esp + 0x60], eax
push eax
call fcn.004d634d
mov ecx, dword [ebx + 8]
add esp, 0xc
mov eax, dword [esp + 0x58]
add ecx, ecx
mov edx, 2
mov word [eax + ecx*8], dx
call fcn.004d6912
mov edx, dword [ebx + 8]
add edx, edx
mov cx, word [eax + 0x17a]
mov eax, dword [esp + 0x58]
mov word [eax + edx*8 + 8], cx
lea eax, [esp + 0x58]
mov edi, dword [ebp + 0x20]
lea ecx, [esp + 0x30]
push edi
push eax
lea eax, [esp + 0x90]
push eax
call fcn.004b99e3
mov ebx, eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [esp + 0x1c], eax
mov eax, dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
test ebx, ebx
js 0x4ba461
push dword [ebp + 0x28]
mov esi, dword [ebp + 0x24]
lea eax, [esp + 0x8c]
push esi
push dword [ebp + 8]
lea ecx, [esp + 0x3c]
push dword [esp + 0x20]
push eax
call fcn.004b917f
test byte [esp + 0xc3], 1
mov ebx, eax
mov dword [esp + 0x10], ebx
je 0x4ba2d3
push dword [esp + 0x58]
push 0
push dword [0x4e05c4]
call dword [esp + 0x18]
test ebx, ebx
jns 0x4ba34f
test esi, esi
je 0x4ba461
call fcn.004d6912
mov ecx, dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov edi, eax
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x34]
test eax, eax
jne 0x4ba2fb
xor eax, eax
jmp 0x4ba305
push dword [eax - 4]
push eax
call ecx
mov ecx, dword [esp + 0x14]
mov dword [esi + 8], eax
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x4ba315
push dword [eax - 4]
push eax
call ecx
mov dword [esi + 4], eax
mov eax, dword [edi + 0x38]
test eax, eax
je 0x4ba327
push dword [eax - 4]
push eax
call dword [esp + 0x1c]
mov dword [esi + 0xc], eax
mov eax, dword [edi + 0x40]
mov dword [esi + 0x10], eax
xor eax, eax
mov dword [esi + 0x1c], ebx
mov ebx, 0x80020009
mov dword [esi + 0x18], 0
mov dword [esi + 0x14], 0
mov dword [esi], eax
jmp 0x4ba45d
cmp byte [esp + 0x50], 0
je 0x4ba45d
cmp word [edi], 9
jne 0x4ba453
cmp dword [edi + 8], 0
je 0x4ba453
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x20]
push ecx
push dword [ebp + 0x1c]
lea ecx, [edi + 8]
push dword [ebp + 0x18]
push 0
call fcn.004c9c32
mov ecx, dword [edi + 8]
push ecx
mov dword [esp + 0x18], eax
mov edx, dword [ecx]
call dword [edx + 8]
mov eax, dword [esp + 0x14]
test eax, eax
jns 0x4ba436
test esi, esi
je 0x4ba41d
call fcn.004d6912
mov ebx, dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov edi, eax
mov eax, dword [edi + 0x34]
test eax, eax
jne 0x4ba3ca
xor eax, eax
jmp 0x4ba3d0
push dword [eax - 4]
push eax
call ebx
mov dword [esi + 8], eax
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x4ba3e0
push dword [eax - 4]
push eax
call ebx
mov dword [esi + 4], eax
mov eax, dword [edi + 0x38]
test eax, eax
je 0x4ba3f0
push dword [eax - 4]
push eax
call ebx
mov dword [esi + 0xc], eax
mov ebx, 0x80020009
mov eax, dword [edi + 0x40]
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x1c], eax
xor eax, eax
mov dword [esi + 0x18], 0
mov dword [esi + 0x14], 0
mov dword [esi], eax
mov dword [esp + 0x10], ebx
jmp 0x4ba423
mov ebx, eax
mov dword [esp + 0x10], eax
cmp word [esp + 0x20], 0
je 0x4ba461
lea eax, [esp + 0x20]
push eax
call dword [esp + 0x20]
jmp 0x4ba461
mov eax, dword [esp + 0x20]
mov dword [edi], eax
mov eax, dword [esp + 0x24]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x28]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [edi + 0xc], eax
jmp 0x4ba45d
push edi
call dword [esp + 0x20]
mov ebx, 0x80020005
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4ba476
push eax
push 0
push dword [0x4e05c4]
call dword [esp + 0x18]
mov edi, dword [esp + 0x3c]
test edi, edi
je 0x4ba4a8
mov ebx, dword [esp + 0x1c]
jmp 0x4ba487
mov esi, dword [edi + 0x10]
push edi
call ebx
push edi
push 0
push dword [0x4e05c4]
call dword [esp + 0x18]
mov edi, esi
mov dword [esp + 0x3c], edi
test esi, esi
jne 0x4ba487
mov ebx, dword [esp + 0x10]
lea eax, [esp + 0x40]
push eax
call dword [esp + 0x20]
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
push dword [eax - 4]
push eax
call ecx
mov ecx, dword [esp + 0xc]
mov dword [edi + 8], eax
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4ba4d6
push dword [eax - 4]
push eax
call ecx
mov dword [edi + 4], eax
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x4ba4e8
push dword [eax - 4]
push eax
call dword [esp + 0x14]
mov dword [edi + 0xc], eax
mov eax, dword [ebx + 0x40]
mov dword [edi + 0x10], eax
xor eax, eax
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x1c], esi
mov dword [edi], eax
mov dword [esp + 0x10], 0x80020009
jmp 0x4ba603
cmp word [esp + 0x20], 9
jne 0x4ba65a
cmp dword [esp + 0x28], 0
je 0x4ba65a
xor eax, eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
lea eax, [esp + 0x68]
push eax
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push 0
call fcn.004c9c32
mov esi, eax
mov eax, dword [esp + 0x28]
push eax
mov dword [esp + 0x14], esi
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x4ba5f4
test edi, edi
je 0x4ba5f4
call fcn.004d6912
mov edx, dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x34]
test ecx, ecx
jne 0x4ba590
xor ecx, ecx
jmp 0x4ba5a0
push dword [ecx - 4]
push ecx
call edx
mov edx, dword [esp + 0x14]
mov ecx, eax
mov eax, dword [esp + 0xc]
mov dword [edi + 8], ecx
mov ecx, dword [eax + 0x3c]
test ecx, ecx
je 0x4ba5b6
push dword [ecx - 4]
push ecx
call edx
mov ecx, eax
mov eax, dword [esp + 0xc]
mov dword [edi + 4], ecx
mov ecx, dword [eax + 0x38]
test ecx, ecx
je 0x4ba5ce
push dword [ecx - 4]
push ecx
call dword [esp + 0x1c]
mov ecx, eax
mov eax, dword [esp + 0xc]
mov dword [edi + 0xc], ecx
mov eax, dword [eax + 0x40]
mov dword [edi + 0x10], eax
xor eax, eax
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x1c], esi
mov dword [edi], eax
mov dword [esp + 0x10], 0x80020009
cmp word [esp + 0x68], 0
je 0x4ba603
lea eax, [esp + 0x68]
push eax
call ebx
mov eax, dword [esp + 0x38]
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x4ba61c
push eax
push 0
push dword [0x4e05c4]
call ebx
mov edi, dword [esp + 0x3c]
test edi, edi
je 0x4ba644
lea ecx, [ecx]
mov esi, dword [edi + 0x10]
push edi
call dword [esp + 0x20]
push edi
push 0
push dword [0x4e05c4]
call ebx
mov edi, esi
mov dword [esp + 0x3c], edi
test esi, esi
jne 0x4ba627
lea eax, [esp + 0x40]
push eax
call dword [esp + 0x20]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4ba67c
push eax
push 0
push dword [0x4e05c4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, dword [esp + 0x3c]
test ebx, ebx
je 0x4ba6aa
lea ecx, [ecx]
mov esi, dword [ebx + 0x10]
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push ebx
push 0
push dword [0x4e05c4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, esi
mov dword [esp + 0x3c], ebx
test esi, esi
jne 0x4ba687
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
test byte [esp + 0x8c], 1
je 0x4ba772
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4ba6da
call fcn.004d509f
mov eax, dword [esp + 0x14]
push dword [ebp + 0x28]
sub esi, dword [eax]
push edi
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
mov eax, dword [esi]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 0x556a40
push ebx
push esi
call dword [eax + 0x18]
mov dword [esp + 0xc], eax
test eax, eax
jns 0x4ba777
test edi, edi
je 0x4ba777
call fcn.004d6912
mov ebx, dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov esi, eax
mov ecx, dword [esi + 0x34]
test ecx, ecx
jne 0x4ba71c
xor eax, eax
jmp 0x4ba722
push dword [ecx - 4]
push ecx
call ebx
mov dword [edi + 8], eax
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x4ba732
push dword [eax - 4]
push eax
call ebx
mov dword [edi + 4], eax
mov eax, dword [esi + 0x38]
test eax, eax
je 0x4ba742
push dword [eax - 4]
push eax
call ebx
mov dword [edi + 0xc], eax
mov eax, dword [esi + 0x40]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0xc]
mov dword [edi + 0x1c], eax
xor eax, eax
mov dword [edi], eax
mov eax, 0x80020009
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov eax, 0x80020003
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24