Function at 0x4eb1c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
movzx ebp, byte [esp + 0x48]
push ebp
push ebx
push esi
push edi
call fcn.00515990
add esp, 0x10
test eax, eax
jne 0x4eb4f1
mov dword [esp + 0x10], ebp
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0xc]
call fcn.0048dbe0
mov ebp, eax
mov eax, dword [ebx]
mov dword [esp + 0x20], eax
mov ecx, ebx
call fcn.0041e000
mov dword [esp + 0x1c], eax
mov ebx, dword [esi]
mov ecx, esi
call fcn.0041e000
mov esi, eax
mov ecx, edi
mov edi, dword [edi]
call fcn.0041e000
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
push eax
push edi
push esi
push ebx
push dword [esp + 0x30]
push dword [esp + 0x38]
call fcn.00413050
test eax, eax
je 0x4eb2bf
mov edi, eax
mov ecx, dword [esp + 0x14]
cmp byte [esp + 0x48], 0
mov ebx, dword [esp + 0x10]
je 0x4eb2a4
test byte [esp + 0x1b], 0x40
jne 0x4eb2a4
xor eax, eax
cmp dword [ecx + 8], 3
jne 0x4eb4f1
mov ebp, dword [ecx + 4]
add ecx, 4
call fcn.0041e000
mov esi, eax
mov ecx, dword [esp + 0x3c]
mov ebx, dword [ecx]
call fcn.0041e000
push eax
push ebx
mov ebx, dword [esp + 0x18]
push esi
push ebp
call fcn.0041ed00
add esp, 0x10
test eax, eax
mov eax, 0
jne 0x4eb4f1
push edi
push ebx
push dword [esp + 0x4c]
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.00515ad0
add esp, 0x14
jmp 0x4eb4f1
mov esi, esp
mov ecx, esi
push dword [esp + 0x3c]
call fcn.0041dba0
lea edi, [esp + 4]
mov dword [esp + 4], 0
mov ebx, dword [esp + 0x14]
lea ecx, [ebx + 0x14]
push esi
call fcn.00420200
mov ebp, eax
mov ecx, dword [esp + 4]
test ecx, ecx
mov esi, ebx
je 0x4eb2f7
push edi
call fcn.0041c020
mov edi, esp
mov ecx, edi
call fcn.0041da60
lea eax, [esi + 0x28]
test ebp, ebp
mov ecx, dword [esi + 0x18]
lea ecx, [ecx + ebp*8 + 4]
cmovs ecx, eax
mov ecx, dword [ecx]
mov dword [esp + 0xc], ecx
xor eax, eax
test ecx, ecx
je 0x4eb4f1
lea eax, [esp + 0xc]
push eax
call fcn.0041bfa0
xor eax, eax
mov esi, dword [esp + 0xc]
test esi, esi
je 0x4eb4f1
mov ecx, edi
push dword [esp + 0x40]
call fcn.0041dba0
mov dword [esp + 4], 0
lea ecx, [esi + 0x10]
push edi
call fcn.00420200
mov ebx, eax
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4eb367
lea eax, [esp + 4]
push eax
call fcn.0041c020
mov edi, esp
mov ecx, edi
call fcn.0041da60
lea eax, [esi + 0x24]
test ebx, ebx
mov ecx, dword [esi + 0x14]
lea ecx, [ecx + ebx*8 + 4]
cmovs ecx, eax
mov ecx, dword [ecx]
mov dword [esp + 8], ecx
xor ebp, ebp
test ecx, ecx
je 0x4eb4dd
lea eax, [esp + 8]
push eax
call fcn.0041bfa0
mov esi, dword [esp + 8]
test esi, esi
je 0x4eb4dd
mov ecx, edi
mov ebx, dword [esp + 0x44]
push ebx
call fcn.0041dba0
mov dword [esp + 4], 0
lea ecx, [esi + 0x34]
push edi
call fcn.00420200
mov edi, eax
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4eb3d6
lea eax, [esp + 4]
push eax
call fcn.0041c020
mov ebp, esp
mov ecx, ebp
call fcn.0041da60
lea eax, [esi + 0x48]
test edi, edi
mov ecx, dword [esi + 0x38]
lea ecx, [ecx + edi*8 + 4]
cmovs ecx, eax
mov ecx, dword [ecx]
mov dword [esp], ecx
test ecx, ecx
je 0x4eb404
push ebp
call fcn.0041bfa0
mov ecx, dword [esp]
test ecx, ecx
jne 0x4eb481
lea edi, [esp + 0x24]
mov ecx, edi
push str.attr
call fcn.0041dee0
mov ecx, dword [esp + 0x40]
push edi
call fcn.004f1a00
mov ebx, eax
mov ecx, edi
call fcn.0041da60
xor ebp, ebp
test bl, bl
jne 0x4eb4b8
mov esi, dword [esp + 0xc]
add esi, 0x10
mov ecx, edi
push 0x5692ea
call fcn.0041dee0
mov ecx, esi
push edi
call fcn.004f1a40
lea ecx, [esp + 8]
push eax
call fcn.004f1b00
mov ecx, edi
call fcn.0041da60
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x4eb4b8
add ecx, 0x34
mov ebx, dword [esp + 0x44]
push ebx
call fcn.004f1aa0
mov ecx, esp
push eax
call fcn.004f1b40
mov ecx, dword [esp]
test ecx, ecx
je 0x4eb4fb
mov eax, dword [ecx + 0x28]
test eax, eax
js 0x4eb4c1
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 0xc]
mov edx, dword [esp + 8]
mov edx, dword [edx + 0x78]
shl edx, 0x10
shl ecx, 0x18
or ecx, eax
or ecx, edx
push ecx
push dword [esp + 0x14]
push ebx
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.00515ad0
add esp, 0x14
mov ebp, eax
mov ecx, dword [esp]
test ecx, ecx
jne 0x4eb4c3
jmp 0x4eb4cb
xor ebp, ebp
mov eax, esp
push eax
call fcn.0041c020
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x4eb4dd
lea eax, [esp + 8]
push eax
call fcn.0041c020
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x4eb4ef
lea eax, [esp + 0xc]
push eax
call fcn.0041c020
mov eax, ebp
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
xor ebp, ebp
jmp 0x4eb4cb