Function at 0x4f8090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x3c
mov ecx, dword [esp + 0x44]
push ebx
mov ebx, dword [esp + 0x44]
push ebp
mov edx, dword [ecx + 0xc]
mov ebp, dword [ecx + 0x10]
push esi
mov esi, dword [ebx + 8]
mov al, byte [edx]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], ebp
push edi
cmp al, 0xb0
jne 0x4f80b9
mov al, byte [edx + 2]
cmp al, 0xb1
jne 0x4f80c8
mov eax, dword [edx + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
jmp reloc.ole32.dll_CoCreateInstance
cmp al, 0x8a
jne 0x4f80da
mov eax, dword [edx + 0x14]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
jmp reloc.ole32.dll_CoCreateInstance
mov dword [esp + 0x10], 1
mov al, byte [esp + 0x5c]
xor edi, edi
dec dword [ebx + 0x38]
mov byte [esp + 0x50], al
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x14], eax
mov eax, dword [ecx + 4]
shr eax, 9
and eax, 1
mov dword [esp + 0x44], eax
cmp dword [ebx + 0x24], edi
jne CoInitializeEx
mov al, byte [ebp]
cmp al, 0xb0
jne 0x4f8116
mov al, byte [ebp + 2]
cmp al, 0xb1
jne 0x4f8121
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
jmp 0x4f8134
cmp al, 0x8a
jne 0x4f812f
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
jmp 0x4f8134
mov eax, 1
cmp dword [esp + 0x10], eax
je 0x4f8150
push str.row_value_misused
push ebx
call fcn.00539ba0
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov al, byte [esp + 0x5c]
cmp al, 0x37
jne StringFromGUID2
mov byte [esp + 0x50], 0x38
jmp 0x4f8173
cmp al, 0x39
jne 0x4f816a
mov byte [esp + 0x50], 0x36
jmp OleUninitialize
cmp al, 0x34
jne 0x4f8173
mov byte [esp + 0x50], 0x35
cmp byte [edx], 0x8a
mov dword [esp + 0x1c], edi
jne reloc.ole32.dll_ReleaseStgMedium
push edx
push ebx
call fcn.00534760
add esp, 8
mov dword [esp + 0x1c], eax
cmp byte [ebp], 0x8a
mov dword [esp + 0x20], edi
jne 0x4f81a2
push ebp
push ebx
call fcn.00534760
add esp, 8
mov dword [esp + 0x20], eax
mov ebp, dword [esp + 0x58]
push ebp
push 1
push 0x47
push esi
call fcn.00560d50
movzx eax, byte [esp + 0x70]
add esp, 0x10
mov dword [esp + 0x48], eax
xor ecx, ecx
mov eax, dword [esp + 0x10]
dec eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x54], ecx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + SHGetSpecialFolderLocationx28], 0
mov dword [esp + 0x24], 0
test edi, edi
je 0x4f8217
mov edx, dword [esi + 0x74]
jns 0x4f81f8
lea edi, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f8207
mov eax, 0x973eec
jmp 0x4f8214
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], edx
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x24]
push ecx
push dword [esp + 0x4c]
push ebx
call fcn.004ff8b0
mov dword [esp + 0x30], eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x40]
push eax
push dword [esp + 0x40]
push dword [esp + 0x78]
push dword [esp + 0x68]
push ebx
call fcn.004ff8b0
push dword [esp + 0x74]
movzx ecx, byte [esp + 0x84]
push dword [esp + 0x7c]
mov edi, dword [esi + 0x74]
push dword [esp + 0x4c]
mov dword [esp + 0x70], eax
push eax
push dword [esp + 0x58]
push ecx
push dword [esp + 0x6c]
push dword [esp + 0x74]
push ebx
call fcn.004f67e0
mov ecx, dword [esp + 0x80]
add esp, 0x54
test ecx, ecx
je 0x4f82a1
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4f82a1
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je ShellExecuteExW
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4f82bd
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
mov al, byte [esp + 0x50]
cmp al, 0x38
je 0x4f82c9
cmp al, 0x36
jne timeBeginPeriod
mov eax, dword [esp + 0x38]
cmp dword [esp + 0x54], eax
jge timeBeginPeriod
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x4f82f0
push 0
push 0
push 0
push 0x3a
push esi
call fcn.00515850
add esp, 0x14
mov edi, eax
jmp timeBeginPeriod
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x3a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x60], 0x80
mov ecx, dword [esi + 0x74]
jne 0x4f8369
cmp dword [esi + 0x78], ecx
jg 0x4f8344
push 0
push ebp
push 0
push 0x47
push esi
call fcn.00515850
add esp, 0x14
jmp 0x4f83b4
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], GdipDeleteFont
mov dword [eax + ecx*4 + 0xc], 0
jmp reloc.gdiplus.dll_GdipDeletePen
cmp dword [esi + 0x78], ecx
jg GdipDeleteGraphics
mov edx, dword [esp + 0x34]
push edx
push ebp
push dword [esp + 0x20]
push 0x5b
push esi
call fcn.00515850
add esp, 0x14
jmp 0x4f83b4
mov edx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + GdipDeletePenx10], 0
mov dword [eax + ecx*4 + 8], ebp
mov eax, dword [esp + 0x38]
cmp dword [esp + 0x54], eax
je 0x4f8409
cmp byte [esp + 0x50], 0x35
push dword [esp + 0x14]
jne 0x4f83df
push ebp
push 0x33
push esi
call fcn.00560d50
mov ecx, dword [esp + 0x64]
add esp, 0x10
inc ecx
jmp GdipGetDpiX
push 0
push 0xb
push esi
call fcn.00560d50
mov eax, dword [esp + 0x20]
add esp, 0x10
mov ecx, dword [esp + 0x54]
add eax, 0xfffffffe
cmp ecx, eax
jne 0x4f8403
mov al, byte [esp + 0x5c]
mov byte [esp + 0x50], al
inc ecx
jmp IcmpCloseHandle
mov edx, dword [esi + 0x74]
test edi, edi
jns 0x4f8413
lea edi, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f8422
mov eax, 0x973eec
jmp 0x4f842b
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4f844c
push edx
push esi
push ecx
call fcn.005278f0
add esp, 0xc
jmp 0x4f8455
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
cmp byte [esp + 0x5c], 0x34
jne 0x4f84a6
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f847b
push 0
push ebp
push ebp
push 0x13
push esi
call fcn.00515850
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x13
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret