Function at 0x4fce90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa0
mov esi, ecx
mov edi, dword [ebp + 8]
mov eax, dword [0x674014]
xor eax, ebp
mov dword [esp + 0x98], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
lea eax, [ecx + 0x18]
mov dword [esp + 0x2c], eax
push eax
call dword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
je 0x4fd88d
movdqu xmm0, xmmword [edi]
sub esp, 0x10
movdqu xmmword [esp], xmm0
call fcn.004b5e80
add esp, 0x10
mov dword [esp + 0x24], esi
mov ebx, dword [esi + 0x34]
test ebx, ebx
je 0x4fd63d
mov ecx, eax
mov edx, ebx
shr edx, 1
and edx, 0x55555555
mov eax, ebx
sub eax, edx
mov edx, eax
and edx, 0x33333333
shr eax, 2
and eax, 0x33333333
add eax, edx
mov edx, eax
shr edx, 4
add edx, eax
and edx, 0xf0f0f0f
imul esi, edx, 0x1010101
shr esi, 0x18
cmp esi, 1
ja 0x4fcf58
lea edx, [ebx - 1]
and edx, ecx
jmp 0x4fcf66
cmp ecx, ebx
jae 0x4fcf60
mov edx, ecx
jmp 0x4fcf66
mov eax, ecx
xor edx, edx
div ebx
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x30]
mov dword [esp + 4], edx
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4fd63d
mov edi, dword [eax]
test edi, edi
je 0x4fd63d
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov dword [esp + 8], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x14], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x10], edx
mov eax, dword [eax + 8]
mov dword [esp + 0x20], eax
lea eax, [ebx - 1]
mov dword [esp + 0x1c], eax
jmp 0x4fcfc8
and eax, dword [esp + 0x1c]
cmp eax, dword [esp + 4]
jne 0x4fd63d
mov edi, dword [edi]
test edi, edi
je 0x4fd63d
mov eax, dword [edi + 4]
cmp eax, ecx
jne 0x4fd000
mov eax, dword [edi + 8]
xor eax, dword [esp + 8]
mov edx, dword [edi + 0xc]
xor edx, dword [esp + 0x14]
or edx, eax
jne 0x4fcfbe
mov eax, dword [edi + 0x10]
xor eax, dword [esp + 0x20]
mov edx, dword [edi + 0x14]
xor edx, dword [esp + 0x10]
or edx, eax
mov eax, dword [ebp + 0xc]
jne 0x4fcfbe
jmp 0x4fd011
cmp esi, 1
jbe 0x4fcfb0
cmp eax, ebx
jb 0x4fcfb4
xor edx, edx
div ebx
mov eax, edx
jmp 0x4fcfb4
mov ebx, dword [eax]
mov ecx, dword [eax + 4]
mov edx, dword [0x629fbc]
xor edx, ecx
mov esi, dword [0x629fb8]
mov dword [esp + 4], ebx
xor esi, ebx
or esi, edx
mov esi, dword [eax + 0xc]
mov edx, dword [eax + 8]
jne 0x4fd4f3
mov ebx, dword [0x629fc0]
xor ebx, edx
mov eax, dword [0x629fc4]
xor eax, esi
or eax, ebx
jne 0x4fd4f3
mov eax, dword [edi + 0x20]
xor ecx, ecx
cmp eax, ecx
je 0x4fd6ab
mov dword [esp + 0x28], 0
lea ebx, [esp + 0x40]
xor edi, edi
mov dword [esp + 0x18], 0
xor esi, esi
mov dword [esp + 8], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], ecx
jmp 0x4fd0ae
mov eax, dword [eax]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
je 0x4fd555
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [eax + 0x20]
mov dword [esp + 0x38], eax
jne 0x4fd0db
jmp 0x4fd0a0
mov esi, dword [esp + 4]
mov ecx, ebx
call fcn.005015f0
mov ecx, dword [esp + 0x3c]
add ecx, 0x28
mov eax, dword [esp + 0x38]
cmp ecx, dword [eax + 0x20]
je 0x4fd0a0
mov dword [esp + 4], esi
mov dword [esp + 0x3c], ecx
lea eax, [ecx + 0x10]
mov dword [esp + 0x40], 0xffffffff
mov dword [esp + 0x44], 0xffffffff
mov dword [esp + 0x48], 0xffffffff
mov ecx, ebx
mov dword [esp + 0x14], eax
push eax
call fcn.00501580
mov eax, dword [esp + 0x40]
mov esi, dword [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
xor eax, dword [0x629fbc]
mov ecx, dword [edx]
xor ecx, dword [0x629fb8]
or ecx, eax
jne 0x4fd13e
mov eax, dword [0x629fc0]
xor eax, dword [edx + 8]
mov ecx, dword [0x629fc4]
xor ecx, dword [edx + 0xc]
or ecx, eax
je 0x4fd1b5
mov dword [esp + 0xc], edi
movdqu xmm0, xmmword [esi + 8]
movdqa xmmword [esp + 0x70], xmm0
mov edi, dword [esi + 0x50]
mov ebx, dword [esi + 0x54]
mov eax, edi
add eax, 1
mov ecx, ebx
adc ecx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], ecx
lea eax, [esi + 0x18]
mov dword [esp + 0x1c], eax
push 0x40
call fcn.005dc726
add esp, 4
mov dword [esp + 0x20], eax
mov ecx, eax
push dword [esi + 0x7c]
push dword [esi + 0x78]
push ebx
push edi
push dword [esp + 0x24]
push dword [esp + 0x30]
call fcn.004f90d0
mov edi, dword [esp + 0x30]
test edi, edi
je 0x4fd1a9
mov eax, dword [edi]
mov ebx, dword [eax]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push 1
call ebx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x30], eax
mov edi, dword [esp + 0xc]
lea ebx, [esp + 0x40]
cmp byte [esi + 0xc1], 0
jne 0x4fd210
mov word [esi + 0xc1], 0x101
cmp dword [esi + 4], 1
jne 0x4fd210
mov ebx, dword [esp + 0x90]
cmp ebx, dword [esp + 0x94]
je 0x4fd1f8
mov ecx, ebx
push dword [esp + 0x14]
call fcn.00502240
add ebx, 0x18
mov dword [esp + 0x90], ebx
jmp 0x4fd208
lea ecx, [esp + 0x8c]
push dword [esp + 0x14]
call fcn.0047f940
lea ebx, [esp + 0x40]
nop dword [eax]
mov eax, dword [esi + 4]
and eax, 0xfffffffe
cmp eax, 2
jne 0x4fd0c0
mov dword [esi + 4], 4
mov ecx, dword [esp + 0x28]
cmp edi, ecx
je 0x4fd243
mov eax, dword [esp + 0x14]
movdqu xmm0, xmmword [eax]
mov dword [esp + 0xc], edi
movdqu xmmword [edi], xmm0
jmp 0x4fd2e9
sub ecx, dword [esp + 0x18]
mov eax, ecx
sar eax, 4
mov edi, eax
inc eax
cmp eax, 0x10000000
jae 0x4fd89b
mov ebx, ecx
sar ebx, 3
cmp ebx, eax
cmovbe ebx, eax
mov dword [esp + 0x28], ecx
cmp ecx, 0x7ffffff0
mov eax, 0xfffffff
cmovae ebx, eax
test ebx, ebx
je 0x4fd298
cmp ebx, 0x10000000
jae 0x4fd8a0
mov eax, ebx
shl eax, 4
push eax
call fcn.005dc726
add esp, 4
mov ecx, eax
jmp 0x4fd29a
xor ecx, ecx
shl edi, 4
shl ebx, 4
mov eax, dword [esp + 0x14]
movdqu xmm0, xmmword [eax]
mov dword [esp + 0xc], edi
movdqu xmmword [ecx + edi], xmm0
mov edi, ecx
mov ecx, dword [esp + 0x28]
test ecx, ecx
mov eax, dword [esp + 0x18]
jle 0x4fd2ce
push ecx
push eax
push edi
call fcn.005df8f0
mov eax, dword [esp + 0x24]
add esp, 0xc
add dword [esp + 0xc], edi
add ebx, edi
test eax, eax
je 0x4fd2e1
push eax
call fcn.005dc756
add esp, 4
mov dword [esp + 0x18], edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [esi + 0x88]
lea edi, [esp + 0x64]
push edi
call fcn.0054a5a0
mov ecx, esi
push edi
call fcn.00549990
mov edx, dword [esp + 0x64]
mov edi, dword [esp + 0x68]
cmp edx, edi
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 8]
mov esi, dword [esp + 4]
mov dword [esp + 0x1c], edi
jne 0x4fd358
jmp 0x4fd484
mov eax, dword [edx]
mov dword [edx], 0
mov dword [ebx], eax
add ebx, 4
add edx, 4
cmp edx, edi
je 0x4fd480
cmp ebx, esi
jb 0x4fd340
mov dword [esp + 8], ebx
sub ebx, ecx
sar ebx, 2
mov eax, ebx
mov dword [esp + 4], ebx
lea eax, [ebx + 1]
cmp eax, 0x40000000
jae 0x4fd89b
sub esi, ecx
mov edi, esi
sar edi, 1
cmp edi, eax
cmovbe edi, eax
cmp esi, 0x7ffffffc
mov eax, 0x3fffffff
cmovae edi, eax
test edi, edi
mov esi, ecx
mov dword [esp + 0x14], edi
je 0x4fd3c4
mov eax, edi
cmp edi, 0x40000000
jae 0x4fd8a0
mov edi, edx
lea eax, [eax*4]
push eax
call fcn.005dc726
add esp, 4
mov ecx, esi
mov edx, edi
mov edi, eax
jmp 0x4fd3c6
xor edi, edi
mov eax, dword [edx]
mov dword [esp + 0x10], edx
mov dword [edx], 0
mov edx, dword [esp + 4]
mov dword [edi + edx*4], eax
mov dword [esp + 0x20], edi
lea edi, [edi + edx*4]
mov eax, dword [esp + 8]
cmp eax, ecx
je 0x4fd440
nop dword [eax + eax]
mov ecx, dword [eax - 4]
mov dword [eax - 4], 0
lea edx, [eax - 4]
mov dword [edi - 4], ecx
add edi, 0xfffffffc
mov eax, edx
cmp edx, esi
jne 0x4fd3f0
mov edx, esi
mov ebx, dword [esp + 8]
jmp 0x4fd424
cmp ebx, edx
je 0x4fd442
mov ecx, dword [ebx - 4]
mov dword [ebx - 4], 0
add ebx, 0xfffffffc
test ecx, ecx
je 0x4fd420
push 1
call fcn.004f92e0
mov edx, esi
jmp 0x4fd420
mov edx, eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
lea esi, [ecx + eax*4]
mov eax, dword [esp + 4]
lea ebx, [ecx + eax*4]
add ebx, 4
test edx, edx
je 0x4fd464
push edx
call fcn.005dc756
add esp, 4
mov ecx, edi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
jmp 0x4fd34d
mov edx, dword [esp + 0x64]
mov dword [esp + 8], ebx
mov dword [esp + 0x10], ecx
test edx, edx
mov edi, dword [esp + 0xc]
lea ebx, [esp + 0x40]
je 0x4fd4eb
mov dword [esp + 4], esi
mov esi, dword [esp + 0x68]
cmp esi, edx
jne 0x4fd4b4
mov eax, edx
jmp 0x4fd4d6
cmp esi, edx
je 0x4fd4d2
mov ecx, dword [esi - 4]
mov dword [esi - 4], 0
add esi, 0xfffffffc
test ecx, ecx
je 0x4fd4b0
push 1
mov ebx, edx
call fcn.004f92e0
mov edx, ebx
jmp 0x4fd4b0
mov eax, dword [esp + 0x64]
mov dword [esp + 0x68], edx
push eax
call fcn.005dc756
add esp, 4
mov esi, dword [esp + 4]
lea ebx, [esp + 0x40]
add edi, 0x10
jmp 0x4fd0c4
push esi
push edx
push ecx
push dword [esp + 0x10]
call fcn.004b5e80
add esp, 0x10
mov ebx, dword [edi + 0x1c]
test ebx, ebx
je 0x4fd63d
mov esi, eax
mov edx, ebx
shr edx, 1
and edx, 0x55555555
mov eax, ebx
sub eax, edx
mov edx, eax
and edx, 0x33333333
shr eax, 2
and eax, 0x33333333
add eax, edx
mov edx, eax
shr edx, 4
add edx, eax
and edx, 0xf0f0f0f
imul eax, edx, 0x1010101
shr eax, 0x18
mov dword [esp + 4], eax
cmp eax, 1
ja 0x4fd58e
lea ecx, [ebx - 1]
and ecx, esi
jmp 0x4fd59e
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov edx, dword [esp + 0x30]
test edx, edx
mov dword [esp + 0xc], edi
je 0x4fd6d5
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x60], edx
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x70]
push eax
push edx
call fcn.0047ae10
jmp 0x4fd6d5
cmp esi, ebx
jae 0x4fd596
mov ecx, esi
jmp 0x4fd59e
mov eax, esi
xor edx, edx
div ebx
mov ecx, edx
mov edx, dword [ebp + 0xc]
mov eax, dword [edi + 0x18]
mov dword [esp + 8], ecx
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x4fd63d
mov eax, dword [eax]
test eax, eax
je 0x4fd63d
lea ecx, [ebx - 1]
mov dword [esp + 0xc], ecx
mov ecx, dword [edx]
mov dword [esp + 0x14], ecx
mov ecx, dword [edx + 4]
mov dword [esp + 0x10], ecx
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x20], ecx
mov ecx, dword [edx + 8]
mov dword [esp + 0x1c], ecx
jmp 0x4fd5f5
and eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, ecx
mov eax, edi
jne 0x4fd63d
mov eax, dword [eax]
test eax, eax
je 0x4fd63d
mov edi, eax
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x4fd62a
mov eax, dword [edi + 8]
xor eax, dword [esp + 0x14]
mov edx, dword [edi + 0xc]
xor edx, dword [esp + 0x10]
or edx, eax
mov eax, edi
jne 0x4fd5ef
mov edi, eax
mov eax, dword [eax + 0x10]
xor eax, dword [esp + 0x1c]
mov edx, dword [edi + 0x14]
xor edx, dword [esp + 0x20]
or edx, eax
mov eax, edi
jne 0x4fd5ef
jmp 0x4fd6a1
cmp dword [esp + 4], 1
jbe 0x4fd5e1
cmp eax, ebx
jb 0x4fd5e5
xor edx, edx
div ebx
mov eax, edx
jmp 0x4fd5e5
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov edi, dword [esp + 0x8c]
test edi, edi
je 0x4fd689
mov esi, dword [esp + 0x90]
cmp esi, edi
je 0x4fd677
nop dword [eax]
add esi, 0xffffffe8
mov ecx, esi
call fcn.005021f0
cmp esi, edi
jne 0x4fd660
mov eax, dword [esp + 0x8c]
jmp 0x4fd679
mov eax, edi
mov dword [esp + 0x90], edi
push eax
call fcn.005dc756
add esp, 4
mov ecx, dword [esp + 0x98]
xor ecx, ebp
call fcn.005dd6f3
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov ecx, dword [eax]
cmp eax, ecx
jne 0x4fd05c
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov dword [esp + 0xc], 0
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
mov dword [esp + 0x10], 0
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0x90]
cmp esi, edi
mov ebx, dword [esp + 0x24]
je 0x4fd700
nop dword [eax + eax]
mov ecx, dword [ebx + 0x14]
push esi
call fcn.0047b0e0
add esi, 0x18
cmp esi, edi
jne 0x4fd6f0
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x18], eax
je 0x4fd77a
mov edi, dword [esp + 0x18]
mov dword [esp + 0xc], eax
nop word cs:[eax + eax]
mov eax, dword [ebx + 0x14]
mov dword [esp + 4], eax
push pe_nt_image_headers32
call fcn.005dc726
add esp, 4
mov esi, eax
mov ecx, eax
push 0x629fb8
push 0x629fc8
push edi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x629fb8
push 0x629fb8
call fcn.004f8f00
mov dword [esp + 0x5c], esi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 4]
push eax
call fcn.0047ae90
mov ecx, ebx
push edi
push ebx
call fcn.004fce90
mov eax, dword [esp + 0xc]
add edi, 0x10
cmp edi, eax
jne 0x4fd720
mov ebx, dword [esp + 0x10]
cmp ebx, dword [esp + 8]
je 0x4fd866
lea ecx, [esp + 0x40]
jmp 0x4fd7a5
mov edx, dword [esp + 4]
add edx, 4
mov eax, dword [esp + 8]
cmp edx, eax
mov ebx, edx
je 0x4fd827
mov dword [esp + 4], ebx
mov eax, dword [ebx]
mov edx, dword [eax + 0x50]
cmp edx, dword [eax + 0x4c]
je 0x4fd790
xor edi, edi
xor esi, esi
jmp 0x4fd7e0
mov ecx, ebx
call fcn.005021f0
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
sub ecx, dword [eax + 0x4c]
inc esi
sar ecx, 4
add edi, 0x10
cmp esi, ecx
mov ecx, ebx
jae 0x4fd790
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x40], xmm0
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x50], 0xffffffff
mov ebx, ecx
call fcn.004cc150
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov eax, dword [eax + 0x4c]
add eax, edi
mov ecx, dword [esp + 0x24]
push ebx
push eax
call fcn.004f9960
test eax, eax
jne 0x4fd7c0
mov ecx, dword [esp + 0x24]
push ebx
call fcn.004fa1f0
jmp 0x4fd7c0
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x4fd873
cmp ebx, eax
jne 0x4fd844
jmp 0x4fd86a
cmp eax, ebx
je 0x4fd86a
mov ecx, dword [eax - 4]
mov dword [eax - 4], 0
add eax, 0xfffffffc
test ecx, ecx
je 0x4fd840
push 1
mov esi, eax
call fcn.004f92e0
mov eax, esi
mov ebx, dword [esp + 0x10]
jmp 0x4fd840
test ebx, ebx
je 0x4fd873
push ebx
call fcn.005dc756
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4fd647
push eax
call fcn.005dc756
add esp, 4
jmp 0x4fd647
mov ecx, dword [esp + 0x2c]
call fcn.004cea50
jmp 0x4fcef1
call fcn.005f1440
call fcn.00415df0
int3