Function at 0x4e5540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xcc
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0xc8], eax
cmp dword [0x633bcc], 0
xorps xmm0, xmm0
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0
movlpd qword [esp + 0x20], xmm0
je 0x4e56ad
cmp dword [0x633bbc], 0
je 0x4e56ad
lea eax, [esp + 0x20]
mov edx, esi
push eax
sub esp, 8
lea eax, [esp + 0x1c]
push eax
mov eax, dword [edi]
push ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
call fcn.005142a0
cmp byte [0x632e94], 0
mov ebx, eax
je 0x4e55fd
mov eax, dword [esp + 0x14]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x40]
push eax
push 0x6345e0
mov dword [esp + 0x48], 2
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], ebx
call sym.SystemInformer.exe_Ordinal_1410
mov ebx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
jmp 0x4e5601
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov edx, esi
lea eax, [esp + 0x28]
push eax
push ecx
lea eax, [esp + 0x1c]
push eax
mov eax, dword [edi]
push dword [esp + 0x30]
push dword [esp + 0x30]
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
call fcn.005146e0
test al, al
je 0x4e57c0
mov esi, dword [esp + 0x14]
push 0
push 3
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0x90]
push eax
mov dword [esp + 0x94], 1
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], 1
mov dword [esp + 0xbc], 6
mov dword [esp + 0xc0], 0x619a48
mov dword [esp + 0xc4], 8
call sym.SystemInformer.exe_Ordinal_1375
mov dword [esp + 0x1c], eax
lea ecx, [esi - 8]
or edx, 0xffffffff
lock xadd dword [ecx + 4], edx
dec edx
jmp 0x4e57b5
push 0
push 0
lea eax, [esp + 0x18]
push eax
mov eax, dword [esi]
cdq
push 0
push edx
push eax
mov eax, dword [edi]
mov eax, dword [eax]
push dword [eax + 4]
call sym.SystemInformer.exe_Ordinal_1947
cmp byte [0x632e94], 0
mov ebx, eax
je 0x4e5725
mov eax, dword [esp + 0x14]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x88]
push eax
push 0x6345e0
mov dword [esp + 0x90], 2
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], ebx
call sym.SystemInformer.exe_Ordinal_1410
mov ebx, dword [esp + 0x94]
mov eax, dword [esp + 0x98]
jmp 0x4e5729
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x28]
push eax
push 0
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esi]
cdq
push edx
push eax
mov eax, dword [edi]
mov eax, dword [eax]
push dword [eax + 4]
call sym.SystemInformer.exe_Ordinal_1945
test al, al
je 0x4e57c0
mov esi, dword ds:[esp + 0x14]
push 0
push 3
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x4c], 1
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], 1
mov dword [esp + 0x74], 6
mov dword [esp + 0x78], 0x619a48
mov dword [esp + 0x7c], 8
call sym.SystemInformer.exe_Ordinal_1375
mov dword [esp + 0x1c], eax
lea ecx, [esi - 8]
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4e57bc
call fcn.004fe1e0
mov esi, dword [esp + 0x18]
movups xmm0, xmmword ds:[esi]
movups xmmword [edi + 4], xmm0
movups xmm0, xmmword [esi + 0x10]
movups xmmword [edi + 0x14], xmm0
movq xmm0, qword [esi + 0x20]
movq qword [edi + 0x24], xmm0
mov eax, dword [esi + 0x28]
mov dword [edi + 0x2c], eax
test ebx, ebx
je 0x4e586a
mov eax, 0x14c
cmp word [edi + 0x28], ax
jne 0x4e586a
test byte [edi + 0x2a], 2
je 0x4e586a
mov eax, dword [ebx]
add eax, 0x22
mov dword [esp + 0x24], 0
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push 0
push eax
call sym.SystemInformer.exe_Ordinal_1331
push dword [ebx]
mov esi, eax
push dword [ebx + 4]
push dword [esi + 4]
call fcn.00586330
mov ecx, dword ds:[ebx]
add esp, 0xc
add ecx, dword [esi + 4]
movups xmm0, xmmword [str.__No_unwind_info_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619a34]
movups xmmword [ecx + 0x10], xmm0
mov ax, word [0x619a44]
mov word [ecx + 0x20], ax
mov ecx, ebx
mov ebx, esi
add ecx, 0xfffffff8
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4e586d
call fcn.004fe1e0
jmp 0x4e586d
or esi, 0xffffffff
cmp dword [0x633bcc], 0
je 0x4e5935
cmp dword [0x633bbc], 0
je 0x4e5935
mov eax, dword [edi + 0x2c]
cmp eax, 0xffffffff
je 0x4e5935
shr eax, 8
test al, 2
je 0x4e5935
nop
test ebx, ebx
je 0x4e5912
mov eax, dword ds:[ebx]
add eax, 0x24
mov dword [esp + 0x24], 0
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push 0
push eax
call sym.SystemInformer.exe_Ordinal_1331
push dword [ebx]
mov esi, eax
push dword [ebx + 4]
push dword [esi + 4]
call fcn.00586330
mov ecx, dword [ebx]
add esp, 0xc
add ecx, dword [esi + 4]
movups xmm0, xmmword [str.__Inline_Function_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619b08]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x619b18]
mov dword [ecx + 0x20], eax
mov ecx, ebx
mov ebx, esi
add ecx, 0xfffffff8
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4e5912
call fcn.004fe1e0
xorps xmm0, xmm0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
movups xmmword [edi + 0x18], xmm0
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x4e59a5
push 0x10
lea eax, [edi + 0x5e]
mov dword [edi + 0x5a], 0x780030
push eax
push ecx
call fcn.005880c8
mov ecx, dword [edi + 0x30]
add esp, 0xc
test ecx, ecx
je 0x4e59a5
mov eax, dword [edi]
mov eax, dword [eax + 0x70]
mov eax, dword [eax + 8]
mov eax, dword [eax + ecx*4 - 4]
mov eax, dword [eax + 0x50]
test eax, eax
je 0x4e59a5
mov ecx, dword [edi + 0x10]
sub ecx, eax
mov dword [esp + 0x28], 0x10d
mov al, byte [0x6314bc]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [edi + 0x34], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0
call sym.SystemInformer.exe_Ordinal_1375
mov dword [edi + 0x1f4], eax
mov eax, dword [edi + 4]
cmp eax, dword [0x633b80]
ja 0x4e5a28
push 0x10
lea eax, [edi + 0xc2]
mov dword [edi + 0xbe], 0x780030
push eax
push dword [edi + 0x18]
call fcn.005880c8
add esp, 0xc
mov dword [edi + 0xf0], 0x780030
lea eax, [edi + 0xf4]
push 0x10
push eax
push dword [edi + 0x1c]
call fcn.005880c8
add esp, 0xc
mov dword [edi + 0x122], 0x780030
lea eax, [edi + 0x126]
push 0x10
push eax
push dword [edi + 0x20]
call fcn.005880c8
add esp, 0xc
mov dword [edi + 0x154], 0x780030
lea eax, [edi + 0x158]
push 0x10
push eax
push dword [edi + 0x24]
call fcn.005880c8
add esp, 0xc
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x4e5a4b
push 0x10
lea eax, [edi + 0x18a]
mov dword [edi + 0x186], 0x780030
push eax
push ecx
call fcn.005880c8
add esp, 0xc
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x4e5a6e
push 0x10
lea eax, [edi + 0x1bc]
mov dword [edi + 0x1b8], 0x780030
push eax
push ecx
call fcn.005880c8
add esp, 0xc
movzx eax, word [edi + 0x28]
cmp eax, 0x8664
ja 0x4e5ae2
je 0x4e5acf
nop dword [eax + eax]
sub eax, 0x14c
je 0x4e5abc
sub eax, 0x74
je 0x4e5aa9
sub eax, 0x38a4
jne 0x4e5af0
lea eax, [edi + 0x1ec]
mov ecx, str.CHPE
mov dword [eax], 8
jmp 0x4e5b27
lea eax, [edi + 0x1ec]
mov ecx, 0x60c080
mov dword [eax], 6
jmp 0x4e5b27
lea eax, [edi + 0x1ec]
mov ecx, 0x60c054
mov dword [eax], 6
jmp 0x4e5b27
lea eax, [edi + 0x1ec]
mov ecx, 0x60c078
mov dword [eax], 6
jmp 0x4e5b27
cmp eax, 0xa641
je 0x4e5b16
cmp eax, 0xaa64
je 0x4e5b03
lea eax, [edi + 0x1ec]
mov ecx, 0x5d1e90
mov dword [eax], 0
jmp 0x4e5b27
lea eax, [edi + 0x1ec]
mov ecx, 0x60c0a8
mov dword [eax], 0xa
jmp 0x4e5b27
lea eax, [edi + 0x1ec]
mov ecx, str.ARM64EC
mov dword [eax], 0xe
mov edx, 4
mov dword [edx + eax], ecx
mov ecx, dword [edi + 0x38]
mov eax, dword [esp + 0x10]
mov dword [edi + 0x38], eax
test ecx, ecx
je 0x4e5b4f
add ecx, 0xfffffff8
mov eax, esi
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4e5b4f
call fcn.004fe1e0
mov ecx, dword [edi + 0x3c]
mov eax, dword [esp + 0x1c]
mov dword [edi + 0x3c], eax
test ecx, ecx
je 0x4e5b6d
add ecx, 0xfffffff8
lock xadd dword [ecx + 4], esi
dec esi
jne 0x4e5b6d
call fcn.004fe1e0
mov ecx, dword ds:[esp + 0xd4]
mov eax, ebx
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00583f9f
mov esp, ebp
pop ebp
ret 4