Function at 0x4891ad
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov eax, dword [esi]
push edi
mov edi, ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x28], edi
call fcn.004794fe
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x6c]
push ecx
push dword [eax]
push edi
call fcn.00489160
test al, al
mov ecx, dword [ebp + 8]
jne 0x489206
push dword [ebp + 0x10]
mov eax, esi
mov edx, edi
call fcn.004899ac
jmp 0x4899a3
mov eax, dword [esi]
call fcn.004794fe
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
xor ebx, ebx
mov dword [esp + 0x64], eax
mov eax, dword [edi + 0x35c]
inc dword [esi]
mov dword [esp + 0x5c], eax
mov eax, dword [esi]
mov dword [esp + 0x38], 0x46c438
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x50], 1
mov dword [esp + 0x54], ebx
call fcn.004794fe
cmp dword [eax + 8], 0x47
je 0x489265
push dword [esp + 0x64]
push 0x6f
jmp 0x489987
mov eax, dword [esi]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 8]
lea ecx, [esp + 0x20]
push edi
call fcn.004890fe
test eax, eax
jne 0x48998e
mov eax, dword [esp + 0x60]
call fcn.004661b0
cmp dword [esp + 0x30], ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x34], ebx
mov dword [esp + 0x1c], ebx
jle 0x4894c5
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x20]
jae 0x4894c5
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
inc dword [esp + 0x34]
mov ecx, esi
mov byte [esp + 0x13], 0
mov dword [esp + 0x24], ebx
call fcn.004794fe
cmp dword [eax + 8], ebx
jne 0x489406
mov eax, dword [esp + 0xc]
mov ecx, esi
call fcn.004794fe
cmp dword [eax], 0x23
jne 0x4892fa
mov byte [esp + 0x13], 1
jmp 0x489316
mov eax, dword [esp + 0xc]
mov ecx, esi
call fcn.004794fe
cmp dword [eax], 0x1e
jne 0x48956e
mov dword [esp + 0x24], pe_nt_image_headers32
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov ecx, esi
call fcn.004794fe
cmp dword [eax + 8], ebx
je 0x4892e3
cmp byte [esp + 0x13], 0
je 0x489406
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.004794fe
cmp dword [eax + 8], 0x33
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x18]
jne 0x48957a
call fcn.004794fe
push dword [eax]
lea esi, [esp + 0x7c]
call fcn.0046ced5
lea eax, [esp + 0x58]
push eax
xor ecx, ecx
lea esi, [esp + 0x30]
lea edi, [esp + 0x7c]
call fcn.0046cc82
push dword [esp + 0x78]
mov bl, al
neg bl
sbb bl, bl
inc bl
call 0x4aca9c
test bl, bl
pop ecx
jne 0x489584
mov eax, pe_nt_image_headers32
test dword [esp + 0x2c], eax
je 0x4893a5
test dword [esp + 0x24], eax
je 0x48959e
inc dword [esp + 0x18]
mov eax, dword [esp + 0x58]
inc dword [esp + 0xc]
cmp dword [eax + 8], 5
jne 0x4893e5
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.004794fe
cmp dword [eax + 8], 0x4e
jne 0x4893e5
push dword [esp + 0x28]
mov ecx, dword [ebp + 8]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x1c]
call fcn.0048d6af
test eax, eax
jne 0x48998e
push dword [esp + 0x58]
lea esi, [esp + 0x4c]
call fcn.0046f49d
mov eax, esi
push eax
lea esi, [esp + 0x3c]
call fcn.0046df1a
mov edi, dword [esp + 0x28]
xor ebx, ebx
jmp 0x48946b
push ebx
lea esi, [esp + 0x4c]
call fcn.0046edc7
mov eax, esi
push eax
lea esi, [esp + 0x3c]
call fcn.0046df1a
mov eax, dword [esp + 0x40]
cmp eax, ebx
jne 0x48942b
call fcn.0048ce03
jmp 0x489433
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + eax*4 - 4]
push dword [esp + 0x20]
mov ecx, edi
push eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 8]
call fcn.0048e2a1
test eax, eax
jne 0x48998e
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
cmp dword [eax + 8], 0x41
jne 0x48946b
add dword [esp + 0xc], 2
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x20]
je 0x4894c5
mov ecx, dword [ebp + 8]
call fcn.004794fe
cmp dword [eax + 8], 0x40
mov eax, dword [esp + 0x18]
jne 0x4895b4
lea ecx, [eax + 1]
cmp ecx, dword [esp + 0x20]
je 0x4895b4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x14]
call fcn.004794fe
cmp dword [eax + 8], 0x40
jne 0x4894b3
inc dword [esp + 0xc]
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
jl 0x4892b0
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x84]
jl 0x489981
cmp eax, dword [esp + 0x30]
jg 0x489981
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x20]
jne 0x489981
mov dword [esp + 0xc], 3
call fcn.0046ccdf
xor eax, eax
inc eax
cmp dword [esp + 0x30], eax
mov dword [esp + 0x1c], eax
jl 0x4896b2
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
or dword [esp + 0x90], 0xffffffff
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x68], 0x46b948
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x24], ebx
mov byte [esp + 0x13], bl
call fcn.004794fe
cmp dword [eax + 8], esi
jne 0x48972f
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
cmp dword [eax], 0x23
jne 0x4895c4
mov byte [esp + 0x13], 1
jmp 0x4895e2
push 0xffffffffffffffff
push 0x91
jmp 0x489987
call fcn.004794fe
push dword [eax + 0xc]
jmp 0x489570
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.004794fe
push dword [eax + 0xc]
push 0x79
mov ebx, dword [esp + 0x30]
jmp 0x489989
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
call fcn.004794fe
push dword [eax + 0xc]
push 0xb0
jmp 0x489595
mov ecx, dword [ebp + 8]
call fcn.004794fe
push dword [eax + 0xc]
jmp 0x48925e
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
cmp dword [eax], 0x1e
jne 0x4895e6
mov dword [esp + 0x24], pe_nt_image_headers32
mov ebx, dword [esp + 0x24]
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
cmp dword [eax + 8], esi
je 0x489555
cmp byte [esp + 0x13], 0
je 0x48972f
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
push dword [eax]
lea esi, [esp + 0xa8]
call fcn.0046ced5
mov eax, dword [esp + 0x1c]
dec eax
lea ecx, [esp + 0x38]
call fcn.0046460e
cmp dword [eax + 8], 6
jne 0x48963a
mov eax, dword [eax]
jmp 0x48963c
xor eax, eax
cmp dword [0x48c984], 0
je 0x48966d
test eax, eax
je 0x48966d
push eax
mov eax, 0x48c984
or ebx, 0x200
call fcn.0046ce47
push eax
mov eax, ebx
lea ecx, [esp + 0xac]
call fcn.0046e431
mov bl, 1
jmp 0x48966f
xor bl, bl
push dword [esp + 0xa4]
call 0x4aca9c
test bl, bl
pop ecx
je 0x4898e5
add dword [esp + 0xc], 2
lea ecx, [esp + 0x88]
call fcn.0046e0c6
lea ecx, [esp + 0x68]
call fcn.00466038
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
jle 0x48950c
xor ebx, ebx
mov eax, dword [esp + 0x34]
lea esi, [edi + 0x340]
push ebx
mov dword [edi + 0x35c], eax
mov word [edi + 0x29a], bx
call fcn.0046edc7
push ebx
xor ecx, ecx
mov eax, edi
call fcn.004793ff
movzx eax, word [edi + 0x29a]
test al, 4
mov dword [edi + 0x358], ebx
je 0x4896f4
xor eax, 4
mov word [edi + 0x29a], ax
mov eax, dword [esp + 0x60]
push ebx
push ebx
inc eax
push eax
mov ecx, edi
call fcn.0047921c
test byte [edi + 0x29a], 1
je 0x489915
mov ebx, dword [ebp + 0x10]
push esi
call fcn.0046ec13
xor word [edi + 0x29a], 1
push 1
call fcn.0046edc7
xor ebx, ebx
jmp 0x48991e
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x1c], eax
jle 0x489835
lea esi, [esp + 0x68]
call fcn.004660ee
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
and dword [esp + 0x2c], 0
add esi, 2
mov eax, esi
call fcn.004794fe
cmp dword [eax + 8], 0x4a
je 0x489778
mov ecx, dword [esp + 0x14]
mov eax, esi
call fcn.004794fe
cmp dword [eax + 8], 0x49
je 0x489778
mov eax, esi
jmp 0x489794
mov ecx, dword [esp + 0x14]
mov eax, esi
call fcn.004794fe
push eax
lea ebx, [esp + 0x6c]
call fcn.00466057
mov eax, dword [esp + 0xc]
add eax, 3
mov ecx, dword [esp + 0x14]
call fcn.004794fe
push eax
lea ebx, [esp + 0x6c]
call fcn.00466057
push 0x7f
pop edi
lea esi, [esp + 0x88]
call fcn.0046e11f
mov eax, esi
push eax
call fcn.00466057
mov ecx, dword [esp + 0x28]
push 0xffffffffffffffff
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x34]
push eax
mov eax, ebx
push eax
call fcn.0048e2a1
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
push dword [eax]
lea esi, [esp + 0x9c]
call fcn.0046ced5
mov eax, dword [esp + 0x24]
or eax, 0x200
cmp dword [0x48c984], 0
push eax
lea eax, [esp + 0x4c]
push eax
mov eax, esi
push eax
jne 0x489813
push 0x48c980
jmp 0x48981e
mov eax, 0x48c984
call fcn.0046ce47
push eax
call fcn.0046e39e
push dword [esp + 0x98]
call 0x4aca9c
mov edi, dword [esp + 0x2c]
jmp 0x48988f
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
push dword [eax]
lea esi, [esp + 0x7c]
call fcn.0046ced5
mov eax, dword [esp + 0x1c]
or ebx, 0x200
dec eax
lea ecx, [esp + 0x38]
call fcn.0046460e
cmp dword [0x48c984], 0
push ebx
push eax
mov eax, esi
push eax
jne 0x489876
push 0x48c980
jmp 0x489881
mov eax, 0x48c984
call fcn.0046ce47
push eax
call fcn.0046e39e
push dword [esp + 0x78]
call 0x4aca9c
mov eax, dword [esp + 0x10]
pop ecx
mov ecx, dword [esp + 0x14]
inc eax
call fcn.004794fe
cmp dword [eax + 8], 0x41
jne 0x489684
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
add esi, 2
mov eax, esi
call fcn.004794fe
cmp dword [eax + 8], 0x4a
je 0x4898db
mov ecx, dword [esp + 0x14]
mov eax, esi
call fcn.004794fe
cmp dword [eax + 8], 0x49
je 0x4898db
add dword [esp + 0xc], 4
jmp 0x489689
add dword [esp + 0xc], 5
jmp 0x489689
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
call fcn.004794fe
push dword [eax + 0xc]
mov ebx, edi
push 0x79
call fcn.00477a39
lea ecx, [esp + 0x88]
call fcn.0046e0c6
lea ecx, [esp + 0x68]
call fcn.00466038
jmp 0x48998e
mov esi, dword [ebp + 0x10]
push ebx
call fcn.0046edc7
movzx eax, word [edi + 0x29a]
test al, 2
je 0x489935
xor eax, 2
mov word [edi + 0x29a], ax
jmp 0x48993f
push ebx
xor ecx, ecx
mov eax, edi
call fcn.004793ff
movzx eax, word [edi + 0x29a]
test al, 4
je 0x489956
xor eax, 4
mov word [edi + 0x29a], ax
jmp 0x48995c
mov dword [edi + 0x358], ebx
call fcn.0046cd39
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x48]
mov dword [edi + 0x35c], eax
call fcn.0046e759
lea ecx, [esp + 0x38]
call fcn.0046defb
xor eax, eax
jmp 0x4899a3
push dword [esp + 0x64]
push 0x70
mov ebx, edi
call fcn.00477a39
lea ecx, [esp + 0x48]
call fcn.0046e759
lea ecx, [esp + 0x38]
call fcn.0046defb
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc