Function at 0x62e1e4d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x5c
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
test ecx, ecx
je 0x62e1e848
mov eax, dword [esp + 0x78]
mov edx, dword [eax]
test edx, edx
jne 0x62e1e678
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x62e1e750
lea eax, [esp + 0x4c]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call dbg.libfvalue_table_get_number_of_values
mov dword [esp + 0x24], eax
cmp eax, 1
jne 0x62e1e768
mov eax, dword [esp + 0x7c]
mov dword [eax], 0x40
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0x62e1ec49
mov dword [esp + 0x2c], 0
xor esi, esi
lea edi, [esp + 0x30]
lea ebp, [esp + 0x40]
jmp 0x62e1e5b5
mov eax, dword [esp + 0x34]
test eax, eax
je 0x62e1e6b8
lea esi, [esi]
add esi, 1
cmp dword [esp + 0x4c], esi
jle 0x62e1e860
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], eax
call dbg.libfvalue_table_get_value_by_index
cmp eax, 1
jne 0x62e1e7e0
lea eax, [esp + 0x38]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], ebp
mov dword [esp], eax
call dbg.libfvalue_value_get_identifier
cmp eax, 1
jne 0x62e1e810
mov eax, dword [esp + 0x38]
test eax, eax
je 0x62e1e5a8
mov eax, dword [esp + 0x40]
test eax, eax
je 0x62e1e5a8
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dbg.libfvalue_value_has_data
cmp eax, 0xffffffff
je 0x62e1eae8
test eax, eax
je 0x62e1e598
lea eax, [esp + 0x44]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], 0
mov dword [esp], eax
call dbg.libfvalue_value_get_utf8_string_size
cmp eax, 0xffffffff
je 0x62e1ebe7
mov eax, dword [esp + 0x44]
cmp eax, 1
jbe 0x62e1e5a8
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x7c]
lea eax, [eax + edx*2 + 4]
add dword [ecx], eax
jmp 0x62e1e5a8
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_xheader_already_created.
mov dword [esp + 8], 1
mov dword [esp + 4], 0x61
mov dword [esp], ebx
call dbg.libcerror_error_set
mov dword [esp + 0x24], 0xffffffff
mov eax, dword [esp + 0x24]
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp dword [esp + 0x40], 0xd
jne 0x62e1e5a8
mov eax, dword [esp + 0x38]
cmp dword [eax], 0x75716361
jne 0x62e1e5a8
cmp dword [eax + 4], 0x5f797269
jne 0x62e1e5a8
cmp dword [eax + 8], 0x65746164
jne 0x62e1e5a8
lea eax, [esp + 0x3c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
lea eax, [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call dbg.libewf_generate_date_xheader_value
cmp eax, 1
je 0x62e1ec1c
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_generate_acquiry_date_header_value.
mov dword [esp + 8], 3
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
mov dword [esp], ebx
call dbg.libcerror_error_free
jmp 0x62e1e5a8
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], 0x62eb2100
jmp 0x62e1e688
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], 0x62eb0638
mov dword [esp + 8], 6
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
mov eax, dword [esp + 0x34]
test eax, eax
je 0x62e1e7a0
mov dword [esp], eax
call sym._free
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
test eax, eax
je 0x62e1e7bc
mov dword [esp], eax
call sym._free
mov eax, dword [esp + 0x78]
mov dword [eax], 0
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x24], 0xffffffff
mov dword [eax], 0
mov eax, dword [esp + 0x24]
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_retrieve_header_value:__d.
mov dword [esp + 8], 6
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
jmp 0x62e1e790
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_retrieve_identifier_of_header_value:__d.
mov dword [esp + 8], 6
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
jmp 0x62e1e790
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], 0x62eb20ce
jmp 0x62e1e688
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
add eax, 1
mov ecx, dword [esp + 0x7c]
mov dword [ecx], eax
mov dword [esp], eax
call sym._malloc
mov ecx, dword [esp + 0x78]
mov dword [ecx], eax
test eax, eax
je 0x62e1ec90
mov edx, dword [esp + 0x48]
mov esi, 0x3e3f
mov edi, 0xa3e
mov byte [eax + edx + 2], 0xbf
lea ecx, [eax + edx + 3]
mov byte [eax + edx], 0xef
mov byte [eax + edx + 1], 0xbb
add edx, 0x2a
add eax, edx
mov dword [ecx], 0x6d783f3c
add edx, 0xa
mov dword [ecx + 4], 0x6576206c
mov dword [ecx + 8], 0x6f697372
mov dword [ecx + 0xc], 0x31223d6e
mov dword [ecx + 0x10], 0x2022302e
mov dword [ecx + 0x14], 0x6f636e65
mov dword [ecx + 0x18], 0x676e6964
mov dword [ecx + 0x1c], 0x5455223d
mov dword [ecx + 0x20], 0x22382d46
mov word [ecx + 0x24], si
mov byte [ecx + 0x26], 0xa
mov dword [eax], 0x6568783c
mov ebp, dword [esp + 0x4c]
mov dword [eax + 4], 0x72656461
mov word [eax + 8], di
mov dword [esp + 0x48], edx
test ebp, ebp
jle 0x62e1eb21
lea edi, [esp + 0x30]
xor esi, esi
lea ebp, [esp + 0x40]
mov dword [esp + 0x28], edi
mov edi, dword [esp + 0x78]
jmp 0x62e1e93d
add esi, 1
cmp dword [esp + 0x4c], esi
jle 0x62e1eb1d
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call dbg.libfvalue_table_get_value_by_index
cmp eax, 1
jne 0x62e1e7e0
lea eax, [esp + 0x38]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], ebp
mov dword [esp], eax
call dbg.libfvalue_value_get_identifier
cmp eax, 1
jne 0x62e1e810
mov eax, dword [esp + 0x38]
test eax, eax
je 0x62e1e930
mov eax, dword [esp + 0x40]
test eax, eax
je 0x62e1e930
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dbg.libfvalue_value_has_data
cmp eax, 0xffffffff
je 0x62e1eae8
test eax, eax
je 0x62e1e930
lea eax, [esp + 0x44]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], 0
mov dword [esp], eax
call dbg.libfvalue_value_get_utf8_string_size
cmp eax, 0xffffffff
je 0x62e1ebe7
cmp dword [esp + 0x44], 1
jbe 0x62e1e930
mov eax, dword [esp + 0x48]
mov edx, dword [edi]
lea ecx, [eax + 1]
mov dword [esp + 0x48], ecx
mov byte [edx + eax], 9
mov eax, dword [esp + 0x48]
mov edx, dword [edi]
lea ecx, [eax + 1]
mov dword [esp + 0x48], ecx
mov byte [edx + eax], 0x3c
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
add eax, dword [edi]
lea edx, [ecx - 1]
mov dword [esp], eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 4], edx
call sym._memcpy
mov edx, dword [edi]
mov eax, dword [esp + 0x48]
add eax, dword [esp + 0x40]
mov dword [esp + 0x48], eax
mov byte [edx + eax - 1], 0x3e
lea eax, [esp + 0x48]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], ebx
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, dword [edi]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call dbg.libfvalue_value_copy_to_utf8_string_with_index
cmp eax, 0xffffffff
je 0x62e1ec5b
mov edx, dword [edi]
mov eax, dword [esp + 0x48]
mov byte [edx + eax - 1], 0x3c
mov eax, dword [esp + 0x48]
mov edx, dword [edi]
lea ecx, [eax + 1]
mov dword [esp + 0x48], ecx
mov byte [edx + eax], 0x2f
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
add eax, dword [edi]
lea edx, [ecx - 1]
mov dword [esp], eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 4], edx
call sym._memcpy
mov edx, dword [edi]
mov eax, dword [esp + 0x48]
add eax, dword [esp + 0x40]
mov dword [esp + 0x48], eax
mov byte [edx + eax - 1], 0x3e
mov eax, dword [esp + 0x48]
mov edx, dword [edi]
lea ecx, [eax + 1]
mov dword [esp + 0x48], ecx
mov byte [edx + eax], 0xa
jmp 0x62e1e930
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_retrieve_data_of_header_value:__s.
mov dword [esp + 0x14], eax
mov dword [esp + 8], 6
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
jmp 0x62e1e790
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x34]
add edx, dword [eax]
test ecx, ecx
je 0x62e1ebbf
mov eax, 0x6574
mov ecx, dword [esp + 0x78]
mov dword [edx], 0x63613c09
mov word [edx + 0xc], ax
mov eax, dword [esp + 0x48]
mov dword [edx + 4], 0x72697571
mov edi, dword [esp + 0x2c]
mov dword [edx + 8], 0x61645f79
add eax, 0xf
mov byte [edx + 0xe], 0x3e
mov edx, dword [esp + 0x34]
mov dword [esp + 0x48], eax
add eax, dword [ecx]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edi
call sym._memcpy
mov eax, dword [esp + 0x34]
add dword [esp + 0x48], edi
mov dword [esp], eax
call sym._free
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x48]
add eax, dword [ecx]
mov dword [eax], 0x63612f3c
mov dword [eax + 4], 0x72697571
mov dword [eax + 8], 0x61645f79
mov dword [eax + 0xc], 0xa3e6574
mov eax, dword [esp + 0x48]
lea edx, [eax + 0x10]
mov dword [esp + 0x48], edx
add edx, dword [ecx]
mov eax, dword [esp + 0x78]
mov dword [edx], 0x68782f3c
mov dword [edx + 4], 0x65646165
mov dword [edx + 8], 0xa0a3e72
mov edx, dword [eax]
mov eax, dword [esp + 0x48]
mov byte [edx + eax + 0xc], 0
jmp 0x62e1e6a8
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_retrieve_string_size_of_header_value:__s.
mov dword [esp + 0x14], eax
mov dword [esp + 8], 6
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
jmp 0x62e1e790
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sym._strlen
mov edx, dword [esp + 0x40]
mov ecx, eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
lea eax, [eax + edx*2 + 5]
add eax, ecx
mov ecx, dword [esp + 0x7c]
mov dword [ecx], eax
jmp 0x62e1e5a8
mov dword [esp + 0x2c], 0
mov eax, 0x41
jmp 0x62e1e86d
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_copy_header_value:__s_to_string.
mov dword [esp + 0x14], eax
mov dword [esp + 8], 9
mov dword [esp + 4], 0x72
mov dword [esp], ebx
call dbg.libcerror_error_set
jmp 0x62e1e790
mov dword [esp + 0x10], str.libewf_header_values_generate_xheader
mov dword [esp + 0xc], str._s:_unable_to_create_xheader.
mov dword [esp + 8], 1
mov dword [esp + 4], 0x6d
mov dword [esp], ebx
call dbg.libcerror_error_set
jmp 0x62e1e790