Function at 0x489bd7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov eax, dword [esi]
push edi
mov edi, ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x28], edi
call fcn.00479e1d
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x6c]
push ecx
push dword [eax]
push edi
call fcn.00489b8a
test al, al
mov ecx, dword [ebp + 8]
jne 0x489c30
push dword [ebp + 0x10]
mov eax, esi
mov edx, edi
call fcn.0048a3d5
jmp 0x48a3cc
mov eax, dword [esi]
call fcn.00479e1d
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
xor ebx, ebx
mov dword [esp + 0x64], eax
mov eax, dword [edi + 0x354]
inc dword [esi]
mov dword [esp + 0x5c], eax
mov eax, dword [esi]
mov dword [esp + 0x38], 0x46d234
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x50], 1
mov dword [esp + 0x54], ebx
call fcn.00479e1d
cmp dword [eax + 8], 0x47
je 0x489c8f
push dword [esp + 0x64]
push 0x6f
jmp 0x48a3b0
mov eax, dword [esi]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 8]
lea ecx, [esp + 0x20]
push edi
call fcn.00489b28
test eax, eax
jne 0x48a3b7
mov eax, dword [esp + 0x60]
call fcn.00467258
cmp dword [esp + 0x30], ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x34], ebx
mov dword [esp + 0x1c], ebx
jle 0x489eef
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x20]
jae 0x489eef
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
inc dword [esp + 0x34]
mov ecx, esi
mov byte [esp + 0x13], 0
mov dword [esp + 0x24], ebx
call fcn.00479e1d
cmp dword [eax + 8], ebx
jne 0x489e30
mov eax, dword [esp + 0xc]
mov ecx, esi
call fcn.00479e1d
cmp dword [eax], 0x23
jne 0x489d24
mov byte [esp + 0x13], 1
jmp 0x489d40
mov eax, dword [esp + 0xc]
mov ecx, esi
call fcn.00479e1d
cmp dword [eax], 0x1e
jne 0x489f98
mov dword [esp + 0x24], pe_nt_image_headers32
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov ecx, esi
call fcn.00479e1d
cmp dword [eax + 8], ebx
je 0x489d0d
cmp byte [esp + 0x13], 0
je 0x489e30
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.00479e1d
cmp dword [eax + 8], 0x33
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x18]
jne 0x489fa4
call fcn.00479e1d
push dword [eax]
lea esi, [esp + 0x7c]
call fcn.0046df0a
lea eax, [esp + 0x58]
push eax
xor ecx, ecx
lea esi, [esp + 0x30]
lea edi, [esp + 0x7c]
call fcn.0046dcb7
push dword [esp + 0x78]
mov bl, al
neg bl
sbb bl, bl
inc bl
call 0x4ae322
test bl, bl
pop ecx
jne 0x489fae
mov eax, pe_nt_image_headers32
test dword [esp + 0x2c], eax
je 0x489dcf
test dword [esp + 0x24], eax
je 0x489fc8
inc dword [esp + 0x18]
mov eax, dword [esp + 0x58]
inc dword [esp + 0xc]
cmp dword [eax + 8], 5
jne 0x489e0f
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.00479e1d
cmp dword [eax + 8], 0x4e
jne 0x489e0f
push dword [esp + 0x28]
mov ecx, dword [ebp + 8]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x1c]
call fcn.0048e0b9
test eax, eax
jne 0x48a3b7
push dword [esp + 0x58]
lea esi, [esp + 0x4c]
call fcn.004704d2
mov eax, esi
push eax
lea esi, [esp + 0x3c]
call fcn.0046ef4f
mov edi, dword [esp + 0x28]
xor ebx, ebx
jmp 0x489e95
push ebx
lea esi, [esp + 0x4c]
call fcn.0046fdfc
mov eax, esi
push eax
lea esi, [esp + 0x3c]
call fcn.0046ef4f
mov eax, dword [esp + 0x40]
cmp eax, ebx
jne 0x489e55
call fcn.0048d80d
jmp 0x489e5d
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + eax*4 - 4]
push dword [esp + 0x20]
mov ecx, edi
push eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 8]
call fcn.0048ecbb
test eax, eax
jne 0x48a3b7
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
cmp dword [eax + 8], 0x41
jne 0x489e95
add dword [esp + 0xc], 2
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x20]
je 0x489eef
mov ecx, dword [ebp + 8]
call fcn.00479e1d
cmp dword [eax + 8], 0x40
mov eax, dword [esp + 0x18]
jne 0x489fde
lea ecx, [eax + 1]
cmp ecx, dword [esp + 0x20]
je 0x489fde
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
cmp dword [eax + 8], 0x40
jne 0x489edd
inc dword [esp + 0xc]
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
jl 0x489cda
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x84]
jl 0x48a3aa
cmp eax, dword [esp + 0x30]
jg 0x48a3aa
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x20]
jne 0x48a3aa
mov dword [esp + 0xc], 3
call fcn.0046dd14
xor eax, eax
inc eax
cmp dword [esp + 0x30], eax
mov dword [esp + 0x1c], eax
jl 0x48a0dc
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
or dword [esp + 0x90], 0xffffffff
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x68], 0x46c758
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x24], ebx
mov byte [esp + 0x13], bl
call fcn.00479e1d
cmp dword [eax + 8], esi
jne 0x48a158
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
cmp dword [eax], 0x23
jne 0x489fee
mov byte [esp + 0x13], 1
jmp 0x48a00c
push 0xffffffffffffffff
push 0x91
jmp 0x48a3b0
call fcn.00479e1d
push dword [eax + 0xc]
jmp 0x489f9a
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.00479e1d
push dword [eax + 0xc]
push 0x79
mov ebx, dword [esp + 0x30]
jmp 0x48a3b2
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.00479e1d
push dword [eax + 0xc]
push 0xb0
jmp 0x489fbf
mov ecx, dword [ebp + 8]
call fcn.00479e1d
push dword [eax + 0xc]
jmp 0x489c88
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
cmp dword [eax], 0x1e
jne 0x48a010
mov dword [esp + 0x24], pe_nt_image_headers32
mov ebx, dword [esp + 0x24]
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
cmp dword [eax + 8], esi
je 0x489f7f
cmp byte [esp + 0x13], 0
je 0x48a158
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
push dword [eax]
lea esi, [esp + 0xa8]
call fcn.0046df0a
mov eax, dword [esp + 0x1c]
dec eax
lea ecx, [esp + 0x38]
call fcn.004656a7
cmp dword [eax + 8], 6
jne 0x48a064
mov eax, dword [eax]
jmp 0x48a066
xor eax, eax
cmp dword [0x48d8a4], 0
je 0x48a097
test eax, eax
je 0x48a097
push eax
mov eax, 0x48d8a4
or ebx, 0x200
call fcn.0046de7c
push eax
mov eax, ebx
lea ecx, [esp + 0xac]
call fcn.0046f466
mov bl, 1
jmp 0x48a099
xor bl, bl
push dword [esp + 0xa4]
call 0x4ae322
test bl, bl
pop ecx
je 0x48a30e
add dword [esp + 0xc], 2
lea ecx, [esp + 0x88]
call fcn.0046f0fb
lea ecx, [esp + 0x68]
call fcn.004670c4
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
jle 0x489f36
xor ebx, ebx
mov eax, dword [esp + 0x34]
lea esi, [edi + 0x338]
push ebx
mov dword [edi + 0x354], eax
mov word [edi + 0x28e], bx
call fcn.0046fdfc
push ebx
xor ecx, ecx
mov eax, edi
call fcn.00479d1e
movzx eax, word [edi + 0x28e]
test al, 4
mov dword [edi + 0x350], ebx
je 0x48a11e
xor eax, 4
mov word [edi + 0x28e], ax
mov eax, dword [esp + 0x60]
push ebx
inc eax
push eax
mov ecx, edi
call fcn.00479aca
test byte [edi + 0x28e], 1
je 0x48a33e
mov ebx, dword [ebp + 0x10]
push esi
call fcn.0046fc48
xor word [edi + 0x28e], 1
push 1
call fcn.0046fdfc
xor ebx, ebx
jmp 0x48a347
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x1c], eax
jle 0x48a25e
lea esi, [esp + 0x68]
call fcn.0046717a
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
and dword [esp + 0x2c], 0
add esi, 2
mov eax, esi
call fcn.00479e1d
cmp dword [eax + 8], 0x4a
je 0x48a1a1
mov ecx, dword [esp + 0x14]
mov eax, esi
call fcn.00479e1d
cmp dword [eax + 8], 0x49
je 0x48a1a1
mov eax, esi
jmp 0x48a1bd
mov ecx, dword [esp + 0x14]
mov eax, esi
call fcn.00479e1d
push eax
lea ebx, [esp + 0x6c]
call fcn.004670e3
mov eax, dword [esp + 0xc]
add eax, 3
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
push eax
lea ebx, [esp + 0x6c]
call fcn.004670e3
push 0x7f
pop edi
lea esi, [esp + 0x88]
call fcn.0046f154
mov eax, esi
push eax
call fcn.004670e3
mov ecx, dword [esp + 0x28]
push 0xffffffffffffffff
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x34]
push eax
mov eax, ebx
push eax
call fcn.0048ecbb
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
push dword [eax]
lea esi, [esp + 0x9c]
call fcn.0046df0a
mov eax, dword [esp + 0x24]
or eax, 0x200
cmp dword [0x48d8a4], 0
push eax
lea eax, [esp + 0x4c]
push eax
mov eax, esi
push eax
jne 0x48a23c
push 0x48d8a0
jmp 0x48a247
mov eax, 0x48d8a4
call fcn.0046de7c
push eax
call fcn.0046f3d3
push dword [esp + 0x98]
call 0x4ae322
mov edi, dword [esp + 0x2c]
jmp 0x48a2b8
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
push dword [eax]
lea esi, [esp + 0x7c]
call fcn.0046df0a
mov eax, dword [esp + 0x1c]
or ebx, 0x200
dec eax
lea ecx, [esp + 0x38]
call fcn.004656a7
cmp dword [0x48d8a4], 0
push ebx
push eax
mov eax, esi
push eax
jne 0x48a29f
push 0x48d8a0
jmp 0x48a2aa
mov eax, 0x48d8a4
call fcn.0046de7c
push eax
call fcn.0046f3d3
push dword [esp + 0x78]
call 0x4ae322
mov eax, dword [esp + 0x10]
pop ecx
mov ecx, dword [esp + 0x14]
inc eax
call fcn.00479e1d
cmp dword [eax + 8], 0x41
jne 0x48a0ae
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
add esi, 2
mov eax, esi
call fcn.00479e1d
cmp dword [eax + 8], 0x4a
je 0x48a304
mov ecx, dword [esp + 0x14]
mov eax, esi
call fcn.00479e1d
cmp dword [eax + 8], 0x49
je 0x48a304
add dword [esp + 0xc], 4
jmp 0x48a0b3
add dword [esp + 0xc], 5
jmp 0x48a0b3
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.00479e1d
push dword [eax + 0xc]
mov ebx, edi
push 0x79
call fcn.004783cb
lea ecx, [esp + 0x88]
call fcn.0046f0fb
lea ecx, [esp + 0x68]
call fcn.004670c4
jmp 0x48a3b7
mov esi, dword [ebp + 0x10]
push ebx
call fcn.0046fdfc
movzx eax, word [edi + 0x28e]
test al, 2
je 0x48a35e
xor eax, 2
mov word [edi + 0x28e], ax
jmp 0x48a368
push ebx
xor ecx, ecx
mov eax, edi
call fcn.00479d1e
movzx eax, word [edi + 0x28e]
test al, 4
je 0x48a37f
xor eax, 4
mov word [edi + 0x28e], ax
jmp 0x48a385
mov dword [edi + 0x350], ebx
call fcn.0046dd6e
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x48]
mov dword [edi + 0x354], eax
call fcn.0046f78e
lea ecx, [esp + 0x38]
call fcn.0046ef30
xor eax, eax
jmp 0x48a3cc
push dword [esp + 0x64]
push 0x70
mov ebx, edi
call fcn.004783cb
lea ecx, [esp + 0x48]
call fcn.0046f78e
lea ecx, [esp + 0x38]
call fcn.0046ef30
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc