Function at 0x48d9d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1088
call fcn.004a7400
mov edx, dword [esp + 0x108c]
push ebx
mov ebx, dword [esp + 0x109c]
push ebp
push esi
xor esi, esi
xor ebp, ebp
mov dword [esp + 0x18], 1
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
cmp ebx, esi
jne 0x48da20
mov eax, dword [esp + 0x10a0]
cmp eax, esi
je 0x48da14
mov dword [eax], 0x63
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1088
ret
push edi
mov edi, dword [esp + 0x10a4]
mov dword [ebx], esi
cmp edi, esi
je 0x48da30
mov dword [edi], esi
mov eax, dword [esp + 0x10ac]
cmp eax, esi
jne 0x48da45
mov ecx, 0x10
jmp 0x48e383
mov dword [eax], esi
mov eax, dword [esp + 0x10b0]
cmp eax, esi
jne 0x48da5e
mov eax, 0x4cbd08
mov dword [esp + 0x10b0], eax
lea ecx, [eax + 0x100]
mov dword [esp + 0x2c], ecx
lea ecx, [eax + 0x200]
mov dword [esp + 0x28], eax
add eax, 0x340
test dword [esp + 0x10a0], 0xd8038580
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
je 0x48da96
mov ecx, 0x11
jmp 0x48e35f
cmp word [edx], 0x28
jne 0x48de6e
lea ebx, [edx + 4]
jmp 0x48dab2
mov edx, eax
cmp word [edx + ebp*2 + 2], 0x2a
jne 0x48de6c
mov edi, 6
mov ecx, ebx
mov esi, str.UTF16_
lea ebx, [ebx]
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48dafa
test edi, edi
jne 0x48dad0
add ebp, 8
add ebx, 0x10
or dword [esp + 0x10a0], 0x800
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48db1c
add ebp, 8
add ebx, 0x10
or dword [esp + 0x10a0], 0x800
jmp 0x48de53
mov edi, 4
mov ecx, ebx
mov esi, str.UCP_
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48db52
test edi, edi
jne 0x48db28
add ebp, 6
add ebx, 0xc
or dword [esp + 0x10a0], 0x20000000
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48db74
add ebp, 6
add ebx, 0xc
or dword [esp + 0x10a0], 0x20000000
jmp 0x48de53
mov edi, 0xd
mov ecx, ebx
mov esi, str.NO_START_OPT_
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48dbaa
test edi, edi
jne 0x48db80
add ebp, 0xf
add ebx, 0x1e
or dword [esp + 0x10a0], 0x4000000
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48dbcc
add ebp, 0xf
add ebx, 0x1e
or dword [esp + 0x10a0], 0x4000000
jmp 0x48de53
mov edi, 3
mov ecx, ebx
mov esi, 0x4ceb50
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48dbee
test edi, edi
jne 0x48dbd8
jmp 0x48dbfa
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48dc20
mov ecx, dword [esp + 0x10a0]
mov eax, 0x100000
and ecx, 0xff8fffff
add ebp, 5
add ebx, 0xa
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
mov edi, 3
mov ecx, ebx
mov esi, 0x4ceb54
lea esp, [esp]
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48dc6a
test edi, edi
jne 0x48dc30
mov ecx, dword [esp + 0x10a0]
mov eax, 0x200000
and ecx, 0xff8fffff
add ebp, 5
add ebx, 0xa
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48dc9c
mov ecx, dword [esp + 0x10a0]
mov eax, 0x200000
and ecx, 0xff8fffff
add ebp, 5
add ebx, 0xa
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
mov edi, 5
mov ecx, ebx
mov esi, str.CRLF_
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48dce2
test edi, edi
jne 0x48dca8
mov ecx, dword [esp + 0x10a0]
mov eax, 0x300000
and ecx, 0xff8fffff
add ebp, 7
add ebx, 0xe
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48dd14
mov ecx, dword [esp + 0x10a0]
mov eax, 0x300000
and ecx, 0xff8fffff
add ebp, 7
add ebx, 0xe
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
mov edi, 4
mov ecx, ebx
mov esi, str.ANY_
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48dd5a
test edi, edi
jne 0x48dd20
mov ecx, dword [esp + 0x10a0]
mov eax, 0x400000
and ecx, 0xff8fffff
add ebp, 6
add ebx, 0xc
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48dd8c
mov ecx, dword [esp + 0x10a0]
mov eax, 0x400000
and ecx, 0xff8fffff
add ebp, 6
add ebx, 0xc
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
mov edi, 8
mov ecx, ebx
mov esi, str.ANYCRLF_
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48ddd2
test edi, edi
jne 0x48dd98
mov ecx, dword [esp + 0x10a0]
mov eax, 0x500000
and ecx, 0xff8fffff
add ebp, 0xa
add ebx, 0x14
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48de01
mov ecx, dword [esp + 0x10a0]
mov eax, 0x500000
and ecx, 0xff8fffff
add ebp, 0xa
add ebx, 0x14
or ecx, eax
mov dword [esp + 0x10a0], ecx
jmp 0x48de53
mov edi, 0xc
mov ecx, ebx
mov esi, str.BSR_ANYCRLF_
lea ecx, [ecx]
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48de26
test edi, edi
jne 0x48de10
jmp 0x48de32
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48de9a
add ebp, 0xe
add ebx, 0x1c
mov eax, 0x800000
mov edx, dword [esp + 0x10a0]
and edx, 0xfe7fffff
or edx, eax
mov dword [esp + 0x10a0], edx
mov eax, dword [esp + 0x109c]
cmp word [eax + ebp*2], 0x28
je 0x48dab0
mov edx, dword [esp + 0x109c]
xor esi, esi
mov eax, dword [esp + 0x10a0]
test eax, 0x2000
jne 0x48de80
mov dword [esp + 0x10], esi
mov ecx, eax
and ecx, 0x1800000
cmp ecx, 0x1800000
jne 0x48dee6
mov ecx, 0x38
jmp 0x48e35f
mov edi, 0xc
mov ecx, ebx
mov esi, str.BSR_UNICODE_
movzx eax, word [ecx]
movzx edx, byte [esi]
dec edi
add ecx, 2
inc esi
cmp dx, ax
jne 0x48deca
test edi, edi
jne 0x48dea6
add ebp, 0xe
add ebx, 0x1c
mov eax, 0x1000000
jmp 0x48de3d
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x48de65
add ebp, 0xe
add ebx, 0x1c
mov eax, 0x1000000
jmp 0x48de3d
and eax, 0x700000
cmp eax, 0x300000
jg 0x48df52
je 0x48df4b
cmp eax, esi
je 0x48df4b
cmp eax, 0x100000
je 0x48df44
cmp eax, 0x200000
jne 0x48df60
mov eax, 0xa
mov dword [esp + 0x88], esi
cmp eax, 0xff
jle 0x48df84
mov ecx, eax
sar ecx, 8
movzx eax, al
and ecx, 0xff
mov dword [esp + 0x8c], 2
mov word [esp + 0x90], cx
mov word [esp + 0x92], ax
jmp 0x48df97
mov eax, 0xd
jmp 0x48df0b
mov eax, 0xd0a
jmp 0x48df0b
cmp eax, 0x400000
je 0x48df77
cmp eax, 0x500000
je 0x48df6a
mov ecx, 0x38
jmp 0x48e35f
mov dword [esp + 0x88], 2
jmp 0x48df97
mov dword [esp + 0x88], 1
jmp 0x48df97
mov dword [esp + 0x8c], 1
mov word [esp + 0x90], ax
lea ecx, [esp + 0x98]
mov eax, ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], ecx
xor ecx, ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x5c], 0x800
mov dword [esp + 0x40], edx
mov eax, edx
cmp word [edx], si
je 0x48dfe9
lea ecx, [ecx]
add eax, 2
inc ecx
cmp word [eax], si
jne 0x48dfe0
mov esi, dword [esp + 0x109c]
lea edx, [esi + ecx*2]
mov eax, dword [esp + 0x10a0]
mov dword [esp + 0x44], edx
xor edi, edi
lea ecx, [esp + 0x98]
mov dword [esp + 0x18], ecx
mov edx, 0x7d
mov word [esp + 0x98], dx
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x2c]
push edx
push edi
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x34]
push edx
push edi
push edi
push edi
push edi
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x44]
push ecx
lea esi, [esi + ebp*2]
push eax
mov dword [esp + 0xb0], edi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0x48], esi
call fcn.0048cf30
mov ecx, dword [esp + 0x44]
add esp, 0x34
cmp ecx, edi
jne 0x48e35f
mov ebx, dword [esp + 0x1c]
cmp ebx, 0x10000
jle 0x48e090
lea ecx, [edi + 0x14]
jmp 0x48e35f
mov ebp, dword [esp + 0x54]
imul ebp, dword [esp + 0x58]
add ebp, ebx
lea ebp, [ebp + ebp + 0x28]
push ebp
call dword [0x4d4458]
mov edi, eax
add esp, 4
test edi, edi
jne 0x48e0b7
lea ecx, [eax + 0x15]
jmp 0x48e35f
mov dword [edi + 4], ebp
mov dword [edi], 0x50435245
mov edx, dword [esp + 0x74]
mov dword [edi + 8], edx
movzx eax, word [esp + 0x78]
mov word [edi + 0xc], ax
xor ecx, ecx
mov word [edi + 0xe], cx
xor edx, edx
mov dword [edi + 0x14], edx
mov ecx, 0x14
mov word [edi + 0x18], cx
mov dx, word [esp + 0x58]
mov word [edi + 0x1a], dx
movzx eax, word [esp + 0x54]
mov word [edi + 0x1c], ax
mov eax, dword [esp + 0x10b0]
xor ecx, ecx
mov word [edi + 0x1e], cx
mov edx, eax
sub edx, 0x4cbd08
neg edx
sbb edx, edx
and edx, eax
mov dword [edi + 0x20], edx
xor eax, eax
mov dword [edi + 0x24], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x54], eax
movzx edx, word [edi + 0x18]
lea ebp, [edi + edx*2]
mov dword [esp + 0x50], ebp
movzx edx, word [edi + 0x1a]
movzx ecx, word [edi + 0x1c]
imul ecx, edx
push eax
lea ebp, [ebp + ecx*2]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0x2c]
push ecx
push eax
mov dword [esp + 0x48], ebp
mov edx, 0x7d
mov word [ebp], dx
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x34]
push ecx
push eax
push eax
push eax
push eax
lea edx, [esp + 0x34]
push edx
mov edx, dword [edi + 8]
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x44]
push ecx
push edx
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], ebp
call fcn.0048cf30
movzx eax, word [esp + 0x94]
mov word [edi + 0x10], ax
mov cx, word [esp + 0x9c]
mov word [edi + 0x12], cx
mov edx, dword [esp + 0xac]
or edx, 2
add esp, 0x34
mov word [edi + 0xc], dx
cmp dword [esp + 0x80], 0
je 0x48e1e5
mov dword [esp + 0x20], 0xffffffff
cmp dword [esp + 0x10], 0
jne 0x48e1fe
mov eax, dword [esp + 0x14]
cmp word [eax], 0
je 0x48e1fe
mov dword [esp + 0x10], 0x16
mov eax, dword [esp + 0x18]
xor ecx, ecx
mov word [eax], cx
add eax, 2
sub eax, ebp
sar eax, 1
cmp eax, ebx
jle 0x48e21a
mov dword [esp + 0x10], 0x17
mov ecx, dword [esp + 0x4c]
cmp ecx, dword [esp + 0x38]
jbe 0x48e276
xor eax, eax
or edx, 0xffffffff
cmp dword [esp + 0x10], eax
jne 0x48e276
nop
cmp ecx, dword [esp + 0x38]
jbe 0x48e276
sub ecx, 2
mov dword [esp + 0x4c], ecx
movzx ebx, word [ecx]
movzx esi, word [ebp + ebx*2]
cmp esi, edx
je 0x48e252
mov eax, ebp
call fcn.00487110
mov edx, esi
test eax, eax
je 0x48e26e
mov ecx, eax
sub ecx, ebp
sar ecx, 1
mov word [ebp + ebx*2], cx
cmp dword [esp + 0x10], 0
jne 0x48e276
mov ecx, dword [esp + 0x4c]
jmp 0x48e230
mov dword [esp + 0x10], 0x35
cmp dword [esp + 0x5c], 0x800
jle 0x48e28e
mov edx, dword [esp + 0x38]
push edx
call dword [0x4d445c]
add esp, 4
cmp dword [esp + 0x10], 0
jne 0x48e2a7
mov ax, word [edi + 0x12]
cmp ax, word [edi + 0x10]
jbe 0x48e2a7
mov dword [esp + 0x10], 0xf
cmp dword [esp + 0x84], 0
je 0x48e34a
or esi, 0xffffffff
mov eax, ebp
call fcn.00487110
mov esi, eax
test esi, esi
je 0x48e34a
lea esp, [esp]
cmp word [esi + 2], 0
jne 0x48e317
movzx ecx, word [esi - 2]
movzx edx, word [esi + ecx*2 - 4]
lea ebx, [esi + ecx*2 - 4]
mov dword [esp + 0x1c], edx
xor eax, eax
mov word [ebx], ax
mov edx, dword [edi + 8]
lea ecx, [esp + 0x28]
push ecx
shr edx, 0xb
push 1
and edx, 1
push edx
push esi
call fcn.00486df0
mov cx, word [esp + 0x2c]
add esp, 0x10
mov word [ebx], cx
test eax, eax
js 0x48e32a
mov word [esi + 2], ax
lea eax, [esi + 4]
or esi, 0xffffffff
call fcn.00487110
mov esi, eax
test esi, esi
jne 0x48e2d0
jmp 0x48e34a
cmp eax, 0xfffffffe
jne 0x48e339
mov dword [esp + 0x10], 0x24
jmp 0x48e351
sub eax, 0xfffffffc
neg eax
sbb eax, eax
and eax, 0xffffffd3
add eax, 0x46
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0
je 0x48e3bc
push edi
call dword [0x4d445c]
mov ecx, dword [esp + 0x14]
add esp, 4
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x109c]
mov edx, dword [esp + 0x10ac]
mov ebx, dword [esp + 0x10a8]
mov edi, dword [esp + 0x10a4]
sar eax, 1
mov dword [edx], eax
mov esi, ecx
mov eax, str.no_error
test ecx, ecx
jle 0x48e3a7
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x48e390
cmp byte [eax], dl
je 0x48e3a2
dec esi
test esi, esi
jg 0x48e390
jmp 0x48e3a7
mov eax, str.Error_text_not_found__please_report_
mov dword [ebx], eax
test edi, edi
je 0x48e3af
mov dword [edi], ecx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1088
ret
mov ebx, dword [edi + 8]
test bl, 0x10
jne 0x48e480
mov esi, dword [esp + 0x6c]
push esi
push 0
push ebp
call fcn.0048d2f0
add esp, 0xc
test eax, eax
je 0x48e3e7
or ebx, 0x10
mov dword [edi + 8], ebx
jmp 0x48e480
mov eax, dword [esp + 0x24]
test eax, eax
jns 0x48e3fe
push 0
push ebp
call fcn.0048d780
add esp, 8
test eax, eax
js 0x48e467
mov word [edi + 0x14], ax
test eax, 0x10000000
je 0x48e460
mov ecx, 0x80
cmp ax, cx
jae 0x48e423
mov ecx, dword [esp + 0x2c]
movzx edx, ax
movzx edx, byte [edx + ecx]
cmp dx, ax
jmp 0x48e459
movzx eax, ax
mov ecx, eax
shr ecx, 7
movzx edx, byte [ecx + 0x4be208]
mov ecx, eax
shl edx, 7
and ecx, 0x8000007f
jns 0x48e444
dec ecx
or ecx, 0xffffff80
inc ecx
add edx, ecx
movzx edx, word [edx*2 + 0x4c0408]
mov ecx, dword [edx*8 + 0x4bd12c]
add ecx, eax
cmp ecx, eax
je 0x48e460
or word [edi + 0xc], 0x20
or word [edi + 0xc], 0x10
jmp 0x48e480
push esi
push 0
push ebp
call fcn.0048d4a0
add esp, 0xc
test eax, eax
je 0x48e480
mov edx, pe_nt_image_headers32
or word [edi + 0xc], dx
mov eax, dword [esp + 0x20]
test eax, eax
js 0x48e523
test byte [edi + 8], 0x10
je 0x48e49d
test eax, 0x20000000
je 0x48e523
mov word [edi + 0x16], ax
test eax, 0x10000000
je 0x48e51e
mov ecx, 0x80
cmp ax, cx
jae 0x48e4dd
mov ecx, dword [esp + 0x2c]
movzx edx, ax
movzx edx, byte [edx + ecx]
cmp dx, ax
je 0x48e51e
mov eax, 0x80
or word [edi + 0xc], ax
or word [edi + 0xc], 0x40
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1088
ret
movzx eax, ax
mov ecx, eax
shr ecx, 7
movzx edx, byte [ecx + 0x4be208]
mov ecx, eax
shl edx, 7
and ecx, 0x8000007f
jns 0x48e4fe
dec ecx
or ecx, 0xffffff80
inc ecx
add edx, ecx
movzx edx, word [edx*2 + 0x4c0408]
mov ecx, dword [edx*8 + 0x4bd12c]
add ecx, eax
cmp ecx, eax
je 0x48e51e
mov edx, 0x80
or word [edi + 0xc], dx
or word [edi + 0xc], 0x40
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1088
ret