Function at 0x489360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xb8
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0xb4], eax
test byte [0x62f020], 1
mov eax, dword [ebp + 0xc]
push esi
push edi
mov dword [esp + 0xc], eax
jne 0x4893ba
mov edi, 0x62f020
lock bts dword ds:[edi], 0x1f
setb al
test al, al
je 0x48947d
test byte [0x62f020], 1
jne 0x4893ba
xor edx, edx
mov ecx, edi
call sym.SystemInformer.exe_Ordinal_1388
push dword [0x6330ec]
push 0x4c
call sym.SystemInformer.exe_Ordinal_1240
push 0x4c
mov edi, eax
push 0
push edi
call fcn.005861b0
add esp, 0xc
push 0x50
push 4
push dword [0x633a74]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
push 0x50
mov esi, eax
push 0
push esi
call fcn.005861b0
mov dword [edi + 0x3c], esi
add esp, 0xc
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0x18]
test edx, edx
js 0x489586
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x68], eax
mov eax, 0x29
push 0x40
mov word [esp + 0xb4], ax
lea eax, [esp + 0x5c]
push 4
push eax
mov dword [esp + 0x64], 1
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], 1
mov dword [esp + 0x8c], 4
mov dword [esp + 0x90], 0x603a3c
mov dword [esp + 0x94], 8
mov dword [esp + 0xa4], edx
mov dword [esp + 0xac], 0
call sym.SystemInformer.exe_Ordinal_1375
mov dword [edi + 4], eax
jmp 0x489591
push dword [0x633a48]
push 0x28
call sym.SystemInformer.exe_Ordinal_1240
mov edx, eax
mov esi, 1
xor eax, eax
mov ecx, esi
mov word [edx], ax
lock xadd dword [0x633a44], ecx
inc ecx
push dword [0x633a48]
dec cl
mov dword [edx + 4], eax
movzx eax, cl
push 0x28
mov byte [edx + 2], cl
mov dword [edx + 8], 0x489680
mov dword [edx + 0xc], str.ProcessPropContext
mov dword [eax*4 + 0x6360e0], edx
mov dword [0x6330ec], edx
call sym.SystemInformer.exe_Ordinal_1240
mov edx, eax
mov ecx, esi
xor eax, eax
mov word [edx], ax
lock xadd dword [0x633a44], ecx
inc ecx
push dword [0x633a48]
dec cl
mov dword [edx + 4], eax
movzx eax, cl
push 0x28
mov byte [edx + 2], cl
mov dword [edx + 8], 0x489f40
mov dword [edx + 0xc], str.ProcessPropPageContext
mov dword [eax*4 + 0x6360e0], edx
mov dword [0x6330e4], edx
call sym.SystemInformer.exe_Ordinal_1240
mov ecx, eax
xor eax, eax
mov word [ecx], ax
mov eax, esi
lock xadd dword [0x633a44], eax
inc eax
dec al
mov dword [ecx + 4], 0
mov byte [ecx + 2], al
movzx eax, al
mov dword [ecx + 8], 0x489f80
mov dword [ecx + 0xc], str.ProcessPropPageWaitContext
mov dword [0x6330e8], ecx
mov dword [eax*4 + 0x6360e0], ecx
mov eax, 0x636a18
test al, 7
jne 0x489575
xorps xmm0, xmm0
mov ecx, edi
movlpd qword [0x636a18], xmm0
call sym.SystemInformer.exe_Ordinal_1358
jmp 0x4893ba
push 0x80000002
call dword [sym.imp.ntdll.dll_RtlRaiseStatus]
mov dword [edi + 4], ecx
test ecx, ecx
je 0x489591
lock inc dword [ecx - 4]
mov eax, dword [0x633a60]
xorps xmm0, xmm0
mov ecx, dword [esi + 0x38]
mov dword [esp + 0x1c], eax
mov eax, dword [0x633a24]
movlpd qword [esp + 0x38], xmm0
mov dword [esp + 0x10], 0x34
mov dword [esp + 0x14], 0x2000583
test eax, eax
je 0x4895e9
mov esi, dword [eax]
lea edx, [esp + 8]
push edx
push 1
push ecx
mov dword [esp + 0x14], 0
mov esi, dword [esi + 0x28]
mov ecx, esi
push eax
call dword [0x5a9914]
call esi
mov eax, dword [esp + 8]
mov esi, dword [esp + 0xc]
jmp 0x4895eb
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [edi + 4]
test eax, eax
je 0x4895fb
mov eax, dword [eax + 4]
jmp 0x4895fd
xor eax, eax
mov dword [esp + 0x24], eax
xor ecx, ecx
mov eax, dword [edi + 0x3c]
cmp dword [0x6365c4], ecx
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 8]
cmovne eax, ecx
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], eax
movups xmm0, xmmword [esp + 0x10]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x34], 0x4896e0
movups xmmword [edi + 8], xmm0
mov dword [edi], esi
movups xmm0, xmmword [esp + 0x20]
movups xmmword [edi + 0x18], xmm0
movups xmm0, xmmword [esp + 0x30]
movups xmmword [edi + 0x28], xmm0
mov dword [edi + 0x38], ecx
lock inc dword [esi - 4]
mov ecx, dword [esp + 0xbc]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.00583f7f
mov esp, ebp
pop ebp
ret 8