Function at 0x4e2c80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x118
mov eax, dword [0x6121d4]
xor eax, esp
mov dword [esp + 0x114], eax
mov eax, dword [ecx]
mov dword [esp + 0x14], ecx
mov ecx, dword [ecx + 4]
sub ecx, eax
mov dword [esp + 0x6c], edx
xor edx, edx
mov dword [esp + 0x34], ecx
push esi
push edi
ja 0x4e2cc2
jb 0x4e32a3
cmp ecx, 0x38
jbe 0x4e32a3
cmp dword [eax], 0xcf9bf378
jne 0x4e32b9
xor esi, esi
mov edi, 0x38
cmp dword [eax + 0x38], 0x638bcfdc
mov dword [esp + 0x10], esi
jne 0x4e32b9
push 0x38
lea eax, [esp + 0x7c]
push 0
push eax
call fcn.0056fec0
mov eax, dword [esp + 0x28]
add esp, 0xc
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], esi
mov ecx, dword [eax]
mov eax, dword [ecx + edi + 4]
add ecx, edi
cdq
mov dword [esp + 0x88], eax
add eax, edi
mov dword [esp + 0x8c], edx
adc edx, esi
mov dword [esp + 0x34], eax
mov dword [esp + 0x80], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x38], edx
mov dword [esp + 0x84], edx
mov dword [esp + 0x98], eax
cmp eax, 0x24
jne 0x4e32b9
mov eax, dword [ecx + 0x10]
mov esi, dword [ecx + 0xc]
mov dword [esp + 0x9c], eax
mov eax, dword [ecx + 0x14]
mov dword [esp + 0xb4], eax
mov eax, dword [ecx + 0x18]
mov dword [esp + 0xb8], eax
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0xa4], esi
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [esp + 0x10c]
sub esp, 0x24
sub eax, 0x76c
mov dword [esp + 0xf8], eax
movzx eax, word [esp + 0x132]
dec eax
mov dword [esp + 0xf4], eax
movzx eax, word [esp + 0x136]
mov dword [esp + 0xf0], eax
movzx eax, word [esp + 0x138]
mov dword [esp + 0xec], eax
movzx eax, word [esp + 0x13a]
mov dword [esp + 0xe8], eax
movzx eax, word [esp + 0x13c]
mov dword [esp + 0xe4], eax
mov eax, esp
movups xmm0, xmmword [esp + 0xe4]
movups xmmword [eax], xmm0
movups xmm0, xmmword [esp + 0xf4]
movups xmmword [eax + 0x10], xmm0
mov dword [eax + 0x20], 0xffffffff
call fcn.005213a0
add esp, 0x24
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], edx
cmp esi, 0x10004
jne 0x4e2e36
mov dword [esp + 0xac], 0
jmp 0x4e324f
mov eax, dword [esp + 0x1c]
add edi, 0x24
mov esi, dword [esp + 0x10]
adc esi, 0
mov dword [esp + 0x10], esi
mov eax, dword [eax]
cmp dword [edi + eax], 1
jne 0x4e32b9
cmp dword [edi + eax + 4], 2
jne 0x4e32b9
push 8
call fcn.00540e66
add esp, 4
mov dword [esp + 0x18], eax
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.004e6f90
mov ecx, dword [esp + 0x18]
push 4
mov dword [esp + 0xb0], ecx
mov byte [esp + 0x1b], 0
mov dword [ecx], eax
call fcn.00540e66
add esp, 4
mov dword [esp + 0x28], eax
mov dword [eax], 0
push 4
call fcn.00540e66
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [eax], 0
push 4
call fcn.00540e66
add esp, 4
mov dword [esp + 0x30], eax
mov dword [eax], 0
nop dword [eax]
push 0x30
lea eax, [esp + 0x44]
push 0
push eax
call fcn.0056fec0
mov eax, dword [esp + 0x28]
add esp, 0xc
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], edi
mov esi, dword [eax]
mov dword [esp + 0x20], esi
mov eax, dword [esi + edi + 8]
add eax, 0xc
cdq
mov dword [esp + 0x50], eax
add eax, edi
mov dword [esp + 0x54], edx
adc edx, dword [esp + 0x10]
mov ecx, edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 4], 0
jne 0x4e2fbf
mov edx, edi
mov edi, dword [esp + 0x44]
add edx, 0xc
mov ecx, edx
adc edi, 0
mov dword [esp + 0x24], edi
cmp dword [esi + ecx], 0x4513ed
je 0x4e2f66
add ecx, 1
mov esi, eax
mov eax, dword [esp + 0x10]
adc edi, 0
sub esi, 4
sbb eax, 0
cmp edi, eax
jg 0x4e2f7f
jl 0x4e2f5c
cmp ecx, esi
jae 0x4e2f7f
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x48]
jmp 0x4e2f37
lea eax, [ecx + 4]
mov byte [esp + 0x17], 1
mov ecx, dword [esp + 0x28]
add eax, esi
mov dword [ecx], eax
mov eax, dword [eax]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov edi, dword [eax]
nop dword [eax]
cmp dword [edi + edx], 0x4513ec
je 0x4e303d
mov ecx, dword [esp + 0x48]
add edx, 1
mov eax, dword [esp + 0x10]
adc esi, 0
sub ecx, 4
sbb eax, 0
cmp esi, eax
jg 0x4e2fbb
jl 0x4e2f90
cmp edx, ecx
jb 0x4e2f90
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xa8]
cmp byte [esp + 0x17], 0
je 0x4e31f7
cmp eax, 0x64
je 0x4e31f7
cmp dword [esp + 0xa4], 0
jne 0x4e2fec
test eax, eax
je 0x4e31f7
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
add edi, 0xc
mov ecx, edi
adc eax, 0
mov dword [esp + 0x20], eax
mov esi, eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
nop dword [eax]
cmp dword [eax + ecx], 0x4e0bbe
je 0x4e305a
mov edx, dword [esp + 0x48]
add ecx, 1
mov eax, dword [esp + 0x10]
adc esi, 0
sub edx, 8
sbb eax, 0
cmp esi, eax
jg 0x4e3069
jl 0x4e3037
cmp ecx, edx
jae 0x4e3069
mov eax, dword [esp + 0x24]
jmp 0x4e3010
mov ecx, dword [esp + 0x28]
lea eax, [edi + 4]
add eax, edx
mov dword [ecx], eax
mov eax, dword [eax]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa8], eax
jmp 0x4e2fc6
add ecx, 8
add eax, ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x64], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x1c]
mov ecx, edi
mov esi, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
nop dword [eax]
cmp dword [eax + ecx], 0x431d4f
je 0x4e30b3
mov edx, dword [esp + 0x48]
add ecx, 1
mov eax, dword [esp + 0x10]
adc esi, 0
sub edx, 4
sbb eax, 0
cmp esi, eax
jg 0x4e30ad
jl 0x4e30a7
cmp ecx, edx
jae 0x4e30ad
mov eax, dword [esp + 0x24]
jmp 0x4e3080
mov al, byte [esp + 0x60]
jmp 0x4e30c4
add ecx, 4
add eax, ecx
mov ecx, dword [esp + 0x30]
mov dword [ecx], eax
mov al, byte [eax]
mov byte [esp + 0x60], al
test al, al
je 0x4e312b
mov eax, dword [esp + 0x1c]
mov ecx, edi
mov esi, dword [esp + 0x20]
mov edx, dword [eax]
mov dword [esp + 0x24], edx
nop dword [eax + eax]
mov eax, dword [edx + ecx]
and eax, 0xffffff00
cmp eax, 0x4e1d00
je 0x4e3113
mov edx, dword [esp + 0x48]
add ecx, 1
mov eax, dword [esp + 0x10]
adc esi, 0
sub edx, 8
sbb eax, 0
cmp esi, eax
jg 0x4e312b
jl 0x4e310d
cmp ecx, edx
jae 0x4e312b
mov edx, dword [esp + 0x24]
jmp 0x4e30e0
lea eax, [ecx + 8]
mov ecx, dword [esp + 0x2c]
add eax, edx
mov dword [ecx], eax
cmp word [eax], 0x40
jne 0x4e3127
add eax, 2
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
mov edx, dword [eax]
cmp dword [edx + edi], 0x410003
je 0x4e315e
mov eax, dword [esp + 0x48]
add edi, 1
mov ecx, dword [esp + 0x10]
adc esi, 0
sub eax, 4
sbb ecx, 0
cmp esi, ecx
jg 0x4e317c
jl 0x4e3135
cmp edi, eax
jae 0x4e317c
jmp 0x4e3135
mov ecx, dword [esp + 0x28]
lea eax, [edx + 4]
add eax, edi
mov dword [ecx], eax
mov eax, dword [eax]
cdq
add eax, dword [esp + 0x40]
mov dword [esp + 0x58], eax
adc edx, dword [esp + 0x44]
mov dword [esp + 0x5c], edx
movups xmm0, xmmword [esp + 0x40]
mov eax, dword [esp + 0x40]
push dword [esp + 0x3c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x48]
movups xmmword [esp + 0xcc], xmm0
mov dword [esp + 0xc8], eax
lea eax, [esp + 0xc4]
movups xmm0, xmmword [esp + 0x54]
push eax
push ecx
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x110]
movups xmmword [esp + 0xe4], xmm0
push eax
movups xmm0, xmmword [esp + 0x70]
movups xmmword [esp + 0xf8], xmm0
call fcn.004e75a0
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x48]
cmp esi, dword [esp + 0x38]
jl 0x4e2ed0
jg 0x4e322b
cmp edi, dword [esp + 0x34]
jb 0x4e2ed0
jmp 0x4e322b
mov edi, dword [ecx]
mov esi, dword [edi]
mov dword [esp + 0x20], esi
call fcn.004beac0
mov ecx, dword [esp + 0x18]
push dword [ecx]
call fcn.00407310
add esp, 4
push 8
push dword [esp + 0x1c]
call fcn.00541532
add esp, 8
mov dword [esp + 0xac], 0
push 4
push dword [esp + 0x2c]
call fcn.00541532
push 4
push dword [esp + 0x38]
call fcn.00541532
push 4
push dword [esp + 0x44]
call fcn.00541532
add esp, 0x18
mov eax, dword [esp + 0xa8]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x10], esi
cmp eax, 0x64
je 0x4e3283
cmp dword [esp + 0xa4], 0
jne 0x4e3275
test eax, eax
je 0x4e3283
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x78]
push eax
call fcn.004e6500
mov ecx, dword [esp + 0x3c]
mov eax, 0
sub ecx, 1
sbb eax, eax
cmp esi, eax
jl 0x4e2ce6
jg 0x4e32a3
cmp edi, ecx
jb 0x4e2ce6
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x114]
xor ecx, esp
call fcn.00540c56
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x11c]
or eax, 0xffffffff
pop edi
pop esi
xor ecx, esp
call fcn.00540c56
mov esp, ebp
pop ebp
ret