Function at 0x4626c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a64a8
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x4cc850]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push esi
push edi
mov eax, dword [0x4cc850]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0
push 0x4d0cb4
push 0x4d0c9c
push 0
push eax
mov dword [esp + 0x34], ecx
call fcn.0048778c
mov edi, dword [eax + 0x18]
mov esi, dword [edi + 4]
add esp, 0x14
cmp esi, dword [edi + 8]
mov dword [esp + 0x14], edi
jbe 0x46272c
call fcn.00484029
mov ebx, esi
mov esi, dword [edi + 8]
cmp dword [edi + 4], esi
mov dword [esp + 0x1c], ebx
jbe 0x46273f
call fcn.00484029
cmp ebx, esi
je 0x462b21
cmp ebx, dword [edi + 8]
jb 0x462751
call fcn.00484029
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
call edx
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x10], ebx
je 0x462b07
mov edi, dword [ebx + 0x14]
mov eax, edi
cmp eax, edi
jae 0x462771
cmp edi, 4
mov esi, edi
jb 0x46277d
mov esi, 4
mov eax, dword [ebx + 0x18]
cmp eax, 8
lea eax, [ebx + 4]
jb 0x46278c
mov edx, dword [eax]
jmp 0x46278e
mov edx, eax
test esi, esi
mov ecx, str.File
jbe 0x4627ae
mov bx, word [edx]
cmp bx, word [ecx]
jne 0x462813
add edx, 2
add ecx, 2
sub esi, 1
jne 0x462797
mov ebx, dword [esp + 0x10]
cmp edi, 4
jb 0x46289c
xor ecx, ecx
cmp edi, 4
setne cl
test ecx, ecx
jne 0x46289c
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [eax + 8]
jb 0x4627d9
call fcn.00484029
mov edx, dword [esp + 0x1c]
mov esi, dword [edx]
push 0x1c
call fcn.00469281
xor ebx, ebx
add esp, 4
cmp eax, ebx
je 0x462829
mov dword [eax], vtable.CAUFile.0
mov dword [eax + 0xc], vtable.CAUWow.0
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], 1
mov edi, eax
jmp 0x46282b
mov dx, bx
cmp dx, word [ecx]
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 1
je 0x4627aa
mov ebx, dword [esp + 0x10]
jmp 0x4627bf
xor edi, edi
push esi
push edi
call fcn.00447c20
cmp edi, ebx
mov dword [esp + 0x10], edi
je 0x462b07
mov esi, dword [esp + 0x20]
mov ecx, dword [esi + 8]
add esi, 4
test ecx, ecx
jne 0x462850
xor edx, edx
jmp 0x462858
mov edx, dword [esi + 8]
sub edx, ecx
sar edx, 2
test ecx, ecx
je 0x462878
mov eax, dword [esi + 0xc]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x462878
mov eax, dword [esi + 8]
mov dword [eax], edi
add eax, 4
mov dword [esi + 8], eax
jmp 0x462b07
mov edi, dword [esi + 8]
cmp ecx, edi
jbe 0x462884
call fcn.00484029
push edi
push esi
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x40]
push ecx
mov eax, esi
call fcn.004487d0
jmp 0x462b07
mov edi, dword [ebx + 0x14]
mov ecx, edi
cmp ecx, edi
jae 0x4628a5
cmp edi, 8
mov esi, edi
jb 0x4628b1
mov esi, 8
cmp dword [ebx + 0x18], 8
jb 0x4628bb
mov edx, dword [eax]
jmp 0x4628bd
mov edx, eax
test esi, esi
mov ecx, str.Registry
jbe 0x4628eb
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x4628db
add edx, 2
add ecx, 2
sub esi, 1
jne 0x4628c6
jmp 0x4628eb
mov dx, ax
cmp dx, word [ecx]
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 1
jne 0x4628fc
cmp edi, 8
jb 0x46298f
xor ecx, ecx
cmp edi, 8
setne cl
test ecx, ecx
jne 0x46298f
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 8]
jb 0x462916
call fcn.00484029
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
push eax
call fcn.004676b0
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
je 0x462b07
mov esi, dword [esp + 0x20]
mov edx, dword [esi + 0x18]
add esi, 0x14
test edx, edx
jne 0x462943
xor edi, edi
jmp 0x46294b
mov edi, dword [esi + 8]
sub edi, edx
sar edi, 2
test edx, edx
je 0x46296b
mov ecx, dword [esi + 0xc]
sub ecx, edx
sar ecx, 2
cmp edi, ecx
jae 0x46296b
mov ecx, dword [esi + 8]
mov dword [ecx], eax
add ecx, 4
mov dword [esi + 8], ecx
jmp 0x462b07
mov edi, dword [esi + 8]
cmp edx, edi
jbe 0x462977
call fcn.00484029
push edi
push esi
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x30]
push edx
mov eax, esi
call fcn.004487d0
jmp 0x462b07
mov eax, dword [ebx + 0x14]
push str.ShortCut
mov edi, 8
mov ecx, ebx
call fcn.00406a90
test eax, eax
jne 0x462a50
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 8]
jb 0x4629bd
call fcn.00484029
mov edx, dword [esp + 0x1c]
mov esi, dword [edx]
push 0xa8
call fcn.00469281
add esp, 4
test eax, eax
je 0x4629dd
call fcn.00467e90
mov edi, eax
jmp 0x4629df
xor edi, edi
push esi
push edi
call fcn.00468160
test edi, edi
mov dword [esp + 0x10], edi
je 0x462b07
mov esi, dword [esp + 0x20]
mov ecx, dword [esi + 0x28]
add esi, 0x24
test ecx, ecx
jne 0x462a04
xor edx, edx
jmp 0x462a0c
mov edx, dword [esi + 8]
sub edx, ecx
sar edx, 2
test ecx, ecx
je 0x462a2c
mov eax, dword [esi + 0xc]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x462a2c
mov eax, dword [esi + 8]
mov dword [eax], edi
add eax, 4
mov dword [esi + 8], eax
jmp 0x462b07
mov edi, dword [esi + 8]
cmp ecx, edi
jbe 0x462a38
call fcn.00484029
push edi
push esi
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
push ecx
mov eax, esi
call fcn.004487d0
jmp 0x462b07
mov eax, dword [ebx + 0x14]
push str.RecordAliasHandle
mov edi, 0x11
mov ecx, ebx
call fcn.00406a90
test eax, eax
jne 0x462b07
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
cmp edx, dword [eax + 8]
jb 0x462a7e
call fcn.00484029
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx]
lea esi, [esp + 0x3c]
call fcn.00467b10
mov esi, dword [esp + 0x20]
add esi, 0x34
lea ebx, [esp + 0x3c]
mov dword [esp + 0x90], 0
call fcn.00462bb0
mov dword [esp + 0x90], 0xffffffff
mov ebx, 8
cmp dword [esp + 0x78], ebx
mov dword [esp + 0x3c], vtable.CAURecordAliasHandle.0
jb 0x462ad3
mov edx, dword [esp + 0x64]
push edx
call fcn.004692b1
add esp, 4
xor esi, esi
cmp dword [esp + 0x58], ebx
mov edi, 7
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], esi
mov word [esp + 0x64], si
jb 0x462afa
mov eax, dword [esp + 0x44]
push eax
call fcn.004692b1
add esp, 4
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], esi
mov word [esp + 0x44], si
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
cmp ebx, dword [edi + 8]
jb 0x462b19
call fcn.00484029
add ebx, 4
jmp 0x46272e
xor eax, eax
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.00483bf3
mov esp, ebp
pop ebp
ret 4