Function at 0x4a5e80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x58c5f2
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x5e173c]
xor eax, esp
mov dword [esp + 0x124], eax
push ebx
push esi
push edi
mov eax, dword [0x5e173c]
xor eax, esp
push eax
lea eax, [esp + 0x138]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x18], 0
lea ecx, [esp + 0xc8]
push 0xb
xor eax, eax
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
push 0x5b9be4
mov dword [esp + 0xe4], 7
mov dword [esp + 0xe0], 0
mov word [esp + 0xd0], ax
call fcn.00404a80
mov dword [esp + 0x140], 0
lea ecx, [esp + 0xc8]
call fcn.004b97a0
mov byte [esp + 0x17], al
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0xdc], 8
jb 0x4a5f4c
push dword [esp + 0xc8]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], 7
push 0xc
mov dword [esp + 0xf4], eax
lea ecx, [esp + 0xe4]
mov dword [esp + 0xf8], eax
push str.QQPCTray.exe
mov dword [esp + 0xe0], 0
mov word [esp + 0xd0], ax
mov dword [esp + 0xfc], 7
mov dword [esp + 0xf8], eax
mov word [esp + 0xe8], ax
call fcn.00404a80
mov dword [esp + 0x140], 1
lea ecx, [esp + 0xe0]
call fcn.004b97a0
mov byte [esp + 0x16], al
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0xf4], 8
jb 0x4a5fe6
push dword [esp + 0xe0]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xf4], 7
push 0xb
mov dword [esp + 0xdc], eax
lea ecx, [esp + 0xcc]
mov dword [esp + 0xe0], eax
push str.kxetray.exe
mov dword [esp + 0xf8], 0
mov word [esp + 0xe8], ax
mov dword [esp + 0xe4], 7
mov dword [esp + 0xe0], eax
mov word [esp + 0xd0], ax
call fcn.00404a80
mov dword [esp + 0x140], 2
lea ecx, [esp + 0xc8]
call fcn.004b97a0
mov byte [esp + 0x15], al
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0xdc], 8
jb 0x4a6080
push dword [esp + 0xc8]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], 7
push 0xc
mov dword [esp + 0xf4], eax
lea ecx, [esp + 0xe4]
mov dword [esp + 0xf8], eax
push str.HipsTray.exe
mov dword [esp + 0xe0], 0
mov word [esp + 0xd0], ax
mov dword [esp + 0xfc], 7
mov dword [esp + 0xf8], eax
mov word [esp + 0xe8], ax
call fcn.00404a80
mov dword [esp + 0x140], 3
lea ecx, [esp + 0xe0]
call fcn.004b97a0
mov byte [esp + 0x14], al
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0xf4], 8
jb 0x4a611a
push dword [esp + 0xe0]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xf4], 7
push 0xe
mov dword [esp + 0x10c], eax
lea ecx, [esp + 0xfc]
mov dword [esp + 0x110], eax
push str.PEFService.exe
mov dword [esp + 0xf8], 0
mov word [esp + 0xe8], ax
mov dword [esp + 0x114], 7
mov dword [esp + 0x110], eax
mov word [esp + 0x100], ax
call fcn.00404a80
mov dword [esp + 0x140], 4
mov ebx, 1
lea ecx, [esp + 0xf8]
mov dword [esp + 0x18], ebx
call fcn.004b97a0
test al, al
jne 0x4a623e
push 9
xor eax, eax
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
lea ecx, [esp + 0xcc]
push str.QcShm.exe
mov dword [esp + 0xe4], 7
mov dword [esp + 0xe0], 0
mov word [esp + 0xd0], ax
call fcn.00404a80
mov dword [esp + 0x140], 5
mov ebx, 3
lea ecx, [esp + 0xc8]
mov dword [esp + 0x18], ebx
call fcn.004b97a0
test al, al
jne 0x4a623e
push str.mfemms.exe
lea ecx, [esp + 0x24]
call fcn.00403a70
mov dword [esp + 0x140], 6
mov ebx, 7
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], ebx
call fcn.004b97a0
mov byte [esp + 0x13], 0
test al, al
je 0x4a6243
mov byte [esp + 0x13], 1
mov dword [esp + 0x140], 5
test bl, 4
je 0x4a6284
and ebx, 0xfffffffb
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x34], 8
jb 0x4a626d
push dword [esp + 0x20]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
mov dword [esp + 0x140], 4
test bl, 2
je 0x4a62d4
and ebx, 0xfffffffd
mov dword [esp + 0x18], ebx
cmp dword [esp + 0xdc], 8
jb 0x4a62b4
push dword [esp + 0xc8]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], 7
mov dword [esp + 0xd8], 0
mov word [esp + 0xc8], ax
mov dword [esp + 0x140], 0xffffffff
test bl, 1
je 0x4a6324
and ebx, 0xfffffffe
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x10c], 8
jb 0x4a6304
push dword [esp + 0xf8]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x10c], 7
mov dword [esp + 0x108], 0
mov word [esp + 0xf8], ax
cmp byte [esp + 0x17], 0
jne 0x4a634b
cmp byte [esp + 0x16], 0
jne 0x4a634b
cmp byte [esp + 0x15], 0
jne 0x4a634b
cmp byte [esp + 0x14], 0
jne 0x4a634b
cmp byte [esp + 0x13], 0
je 0x4a6aee
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push 5
push 0x5b96c0
push 0x5b9ca8
push edi
call esi
cmp eax, 2
je 0x4a6aee
push 0xb
xor eax, eax
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
lea ecx, [esp + 0x3c]
push 0x5b9be4
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], 0
mov word [esp + 0x40], ax
call fcn.00404a80
mov dword [esp + 0x140], 7
xorps xmm0, xmm0
movq qword [esp + 0x128], xmm0
mov dword [esp + 0x130], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov byte [esp + 0x140], 8
lea edx, [esp + 0x128]
lea ecx, [esp + 0x38]
call fcn.004b9330
mov byte [esp + 0x15], al
mov byte [esp + 0x140], 7
mov ecx, dword [esp + 0x128]
test ecx, ecx
je 0x4a643c
push ecx
call fcn.00564de3
add esp, 4
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0x4c], 8
jb 0x4a645a
push dword [esp + 0x38]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
push 0xc
mov dword [esp + 0x64], eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x68], eax
push str.QQPCTray.exe
mov dword [esp + 0x50], 0
mov word [esp + 0x40], ax
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], eax
mov word [esp + 0x58], ax
call fcn.00404a80
mov dword [esp + 0x140], 9
xorps xmm0, xmm0
movq qword [esp + 0x11c], xmm0
mov dword [esp + 0x124], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov byte [esp + 0x140], 0xa
lea edx, [esp + 0x11c]
lea ecx, [esp + 0x50]
call fcn.004b9330
mov byte [esp + 0x16], al
mov byte [esp + 0x140], 9
mov ecx, dword [esp + 0x11c]
test ecx, ecx
je 0x4a6536
push ecx
call fcn.00564de3
add esp, 4
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0x64], 8
jb 0x4a6554
push dword [esp + 0x50]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x64], 7
push 0xb
mov dword [esp + 0xc4], eax
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc8], eax
push str.kxetray.exe
mov dword [esp + 0x68], 0
mov word [esp + 0x58], ax
mov dword [esp + 0xcc], 7
mov dword [esp + 0xc8], eax
mov word [esp + 0xb8], ax
call fcn.00404a80
mov dword [esp + 0x140], 0xb
xorps xmm0, xmm0
movq qword [esp + 0x110], xmm0
mov dword [esp + 0x118], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov byte [esp + 0x140], 0xc
lea edx, [esp + 0x110]
lea ecx, [esp + 0xb0]
call fcn.004b9330
mov byte [esp + 0x17], al
mov byte [esp + 0x140], 0xb
mov ecx, dword [esp + 0x110]
test ecx, ecx
je 0x4a6645
push ecx
call fcn.00564de3
add esp, 4
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0xc4], 8
jb 0x4a6669
push dword [esp + 0xb0]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xc4], 7
push 0xc
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x9c]
mov dword [esp + 0xb0], eax
push str.HipsTray.exe
mov dword [esp + 0xc8], 0
mov word [esp + 0xb8], ax
mov dword [esp + 0xb4], 7
mov dword [esp + 0xb0], eax
mov word [esp + 0xa0], ax
call fcn.00404a80
mov dword [esp + 0x140], 0xd
xorps xmm0, xmm0
movq qword [esp + 0xf8], xmm0
mov dword [esp + 0x100], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov byte [esp + 0x140], 0xe
lea edx, [esp + 0xf8]
lea ecx, [esp + 0x98]
call fcn.004b9330
mov byte [esp + 0x1f], al
mov byte [esp + 0x140], 0xd
mov ecx, dword [esp + 0xf8]
test ecx, ecx
je 0x4a6763
push ecx
call fcn.00564de3
add esp, 4
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x140], 0xffffffff
cmp dword [esp + 0xac], 8
jb 0x4a6787
push dword [esp + 0x98]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0xac], 7
push 0xe
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], eax
push str.PEFService.exe
mov dword [esp + 0xb0], 0
mov word [esp + 0xa0], ax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], eax
mov word [esp + 0x28], ax
call fcn.00404a80
mov dword [esp + 0x140], 0xf
or ebx, 8
mov dword [esp + 0x18], ebx
xorps xmm0, xmm0
movq qword [esp + 0xe0], xmm0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0x140], 0x10
lea edx, [esp + 0xe0]
lea ecx, [esp + 0x20]
call fcn.004b9330
mov byte [esp + 0x14], al
mov byte [esp + 0x140], 0xf
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x4a687a
push ecx
call fcn.00564de3
mov al, byte [esp + 0x18]
add esp, 4
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
test al, al
jne 0x4a69e0
push 9
xor eax, eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
lea ecx, [esp + 0x6c]
push str.QcShm.exe
mov dword [esp + 0x84], 7
mov dword [esp + 0x80], 0
mov word [esp + 0x70], ax
call fcn.00404a80
mov dword [esp + 0x140], 0x11
or ebx, 0x10
mov dword [esp + 0x18], ebx
xorps xmm0, xmm0
movq qword [esp + 0xc8], xmm0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0x140], 0x12
lea edx, [esp + 0xc8]
lea ecx, [esp + 0x68]
call fcn.004b9330
mov byte [esp + 0x14], al
mov byte [esp + 0x140], 0x11
mov ecx, dword [esp + 0xc8]
test ecx, ecx
je 0x4a696c
push ecx
call fcn.00564de3
mov al, byte [esp + 0x18]
add esp, 4
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
test al, al
jne 0x4a69e0
push 0xa
xor eax, eax
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
lea ecx, [esp + 0x84]
push str.mfemms.exe
mov dword [esp + 0x9c], 7
mov dword [esp + 0x98], 0
mov word [esp + 0x88], ax
call fcn.00404a80
mov dword [esp + 0x140], 0x13
or ebx, 0x20
lea ecx, [esp + 0x80]
mov dword [esp + 0x18], ebx
call fcn.004b97a0
mov byte [esp + 0x13], 0
test al, al
je 0x4a69e5
mov byte [esp + 0x13], 1
mov dword [esp + 0x140], 0x11
test bl, 0x20
je 0x4a6a35
and ebx, 0xffffffdf
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x94], 8
jb 0x4a6a15
push dword [esp + 0x80]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x94], 7
mov dword [esp + 0x90], 0
mov word [esp + 0x80], ax
mov dword [esp + 0x140], 0xf
test bl, 0x10
je 0x4a6a76
and ebx, 0xffffffef
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x7c], 8
jb 0x4a6a5f
push dword [esp + 0x68]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
mov dword [esp + 0x140], 0xffffffff
test bl, 8
je 0x4a6ab7
and ebx, 0xfffffff7
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x34], 8
jb 0x4a6aa0
push dword [esp + 0x20]
call fcn.00564de3
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
cmp byte [esp + 0x15], 0
jne 0x4a6351
cmp byte [esp + 0x16], 0
jne 0x4a6351
cmp byte [esp + 0x17], 0
jne 0x4a6351
cmp byte [esp + 0x1f], 0
jne 0x4a6351
cmp byte [esp + 0x13], 0
jne 0x4a6351
mov ecx, dword [esp + 0x138]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.00564de8
add esp, 0x134
ret