Function at 0x4894a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xb8
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0xb4], eax
test byte [0x62f020], 1
mov eax, dword [ebp + 0xc]
push esi
push edi
mov dword [esp + 0xc], eax
jne 0x4894fa
mov edi, 0x62f020
lock bts dword ds:[edi], 0x1f
setb al
test al, al
je 0x4895bd
test byte [0x62f020], 1
jne 0x4894fa
xor edx, edx
mov ecx, edi
call sym.SystemInformer.exe_Ordinal_1388
push dword [0x6330cc]
push 0x4c
call sym.SystemInformer.exe_Ordinal_1240
push 0x4c
mov edi, eax
push 0
push edi
call fcn.005861d0
add esp, 0xc
push 0x50
push 4
push dword [0x633a54]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
push 0x50
mov esi, eax
push 0
push esi
call fcn.005861d0
mov dword [edi + 0x3c], esi
add esp, 0xc
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0x18]
test edx, edx
js 0x4896c6
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x68], eax
mov eax, 0x29
push 0x40
mov word [esp + 0xb4], ax
lea eax, [esp + 0x5c]
push 4
push eax
mov dword [esp + 0x64], 1
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], 1
mov dword [esp + 0x8c], 4
mov dword [esp + 0x90], 0x603a3c
mov dword [esp + 0x94], 8
mov dword [esp + 0xa4], edx
mov dword [esp + 0xac], 0
call sym.SystemInformer.exe_Ordinal_1375
mov dword [edi + 4], eax
jmp 0x4896d1
push dword [0x633a28]
push 0x28
call sym.SystemInformer.exe_Ordinal_1240
mov edx, eax
mov esi, 1
xor eax, eax
mov ecx, esi
mov word [edx], ax
lock xadd dword [0x633a24], ecx
inc ecx
push dword [0x633a28]
dec cl
mov dword [edx + 4], eax
movzx eax, cl
push 0x28
mov byte [edx + 2], cl
mov dword [edx + 8], 0x4897c0
mov dword [edx + 0xc], str.ProcessPropContext
mov dword [eax*4 + 0x6360c0], edx
mov dword [0x6330cc], edx
call sym.SystemInformer.exe_Ordinal_1240
mov edx, eax
mov ecx, esi
xor eax, eax
mov word [edx], ax
lock xadd dword [0x633a24], ecx
inc ecx
push dword [0x633a28]
dec cl
mov dword [edx + 4], eax
movzx eax, cl
push 0x28
mov byte [edx + 2], cl
mov dword [edx + 8], 0x48a040
mov dword [edx + 0xc], str.ProcessPropPageContext
mov dword [eax*4 + 0x6360c0], edx
mov dword [0x6330c4], edx
call sym.SystemInformer.exe_Ordinal_1240
mov ecx, eax
xor eax, eax
mov word [ecx], ax
mov eax, esi
lock xadd dword [0x633a24], eax
inc eax
dec al
mov dword [ecx + 4], 0
mov byte [ecx + 2], al
movzx eax, al
mov dword [ecx + 8], 0x48a080
mov dword [ecx + 0xc], str.ProcessPropPageWaitContext
mov dword [0x6330c8], ecx
mov dword [eax*4 + 0x6360c0], ecx
mov eax, 0x6369f8
test al, 7
jne 0x4896b5
xorps xmm0, xmm0
mov ecx, edi
movlpd qword [0x6369f8], xmm0
call sym.SystemInformer.exe_Ordinal_1358
jmp 0x4894fa
push 0x80000002
call dword [sym.imp.ntdll.dll_RtlRaiseStatus]
mov dword [edi + 4], ecx
test ecx, ecx
je 0x4896d1
lock inc dword [ecx - 4]
mov eax, dword [0x633a40]
xorps xmm0, xmm0
mov ecx, dword [esi + 0x38]
mov dword [esp + 0x1c], eax
mov eax, dword [0x633a04]
movlpd qword [esp + 0x38], xmm0
mov dword [esp + 0x10], 0x34
mov dword [esp + 0x14], 0x2000583
test eax, eax
je 0x489729
mov esi, dword [eax]
lea edx, [esp + 8]
push edx
push 1
push ecx
mov dword [esp + 0x14], 0
mov esi, dword [esi + 0x28]
mov ecx, esi
push eax
call dword [0x5a9914]
call esi
mov eax, dword [esp + 8]
mov esi, dword [esp + 0xc]
jmp 0x48972b
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [edi + 4]
test eax, eax
je 0x48973b
mov eax, dword [eax + 4]
jmp 0x48973d
xor eax, eax
mov dword [esp + 0x24], eax
xor ecx, ecx
mov eax, dword [edi + 0x3c]
cmp dword [0x6365a4], ecx
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 8]
cmovne eax, ecx
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], eax
movups xmm0, xmmword [esp + 0x10]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x34], 0x489820
movups xmmword [edi + 8], xmm0
mov dword [edi], esi
movups xmm0, xmmword [esp + 0x20]
movups xmmword [edi + 0x18], xmm0
movups xmm0, xmmword [esp + 0x30]
movups xmmword [edi + 0x28], xmm0
mov dword [edi + 0x38], ecx
lock inc dword [esi - 4]
mov ecx, dword [esp + 0xbc]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.00583f9f
mov esp, ebp
pop ebp
ret 8