Function at 0x4ca9f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14c
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edi, ecx
mov dword [esp + 0x68], edx
mov ecx, dword [ebp + 8]
lea eax, [esi + esi]
mov dword [esp + 0x14], edi
mov dword [esp + 0x140], eax
add eax, ecx
mov ebx, eax
mov dword [esp + 0x154], eax
xor eax, eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x64], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x3c], 0
lea eax, [ebx - 2]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x38], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x1c], ebx
test edi, edi
jne 0x4caa9b
test edx, edx
jne 0x4caa9b
test ecx, ecx
jne 0x4caa9b
cmp eax, 0xfffffc19
jne 0x4caa9b
cmp esi, eax
jne 0x4caa9b
push ecx
push ecx
push ecx
push ecx
push ecx
call fcn.004c2d00
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x4caab0
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4cbb3e
test ecx, ecx
je 0x4cbb3e
cmp dword [ebp + 0x18], 0
mov edx, dword [ebp + 0x1c]
jne 0x4caad1
test edx, edx
jg 0x4cbb3e
test edx, edx
jns 0x4caae1
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
js 0x4cbb32
cmp esi, eax
jg 0x4cbb32
mov ecx, dword [edi]
cmp ecx, 0x50435245
je 0x4cab15
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx edx, word [edi + 0xc]
test dl, 2
jne 0x4cab2a
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xc4], 1
test edx, 0x8000000
je 0x4cab47
mov ecx, 2
jmp 0x4cab4f
mov ecx, edx
shr ecx, 0xf
and ecx, 1
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x104], ecx
mov ecx, 0xfc00
mov dword [esp + 0x144], ecx
mov dword [esp + 0x50], 0xdc00
test edx, 0x2000
jne 0x4cab9b
test esi, esi
jle 0x4cab9b
cmp esi, eax
jge 0x4cab9b
mov eax, dword [ebp + 8]
mov ax, word [eax + esi*2]
and ax, cx
cmp ax, word [esp + 0x50]
jne 0x4cab9b
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edi + 0x18]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x7c], 0x989680
lea eax, [edi + eax*2]
mov dword [esp + 0xa0], eax
movzx eax, word [edi + 0x1c]
mov dword [esp + 0x98], eax
movzx eax, word [edi + 0x1a]
mov edi, dword [edi + 0x20]
mov dword [esp + 0x20], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0x80], 0x1770
mov dword [esp + 0x124], 0
test edx, edx
je 0x4cac3c
mov ecx, dword [edx]
test cl, 1
je 0x4cac06
mov eax, dword [edx + 4]
mov dword [esp + 0x58], eax
test cl, 2
je 0x4cac12
mov eax, dword [edx + 8]
mov dword [esp + 0x7c], eax
test cl, 0x10
je 0x4cac21
mov eax, dword [edx + 0x14]
mov dword [esp + 0x80], eax
test cl, 4
je 0x4cac30
mov eax, dword [edx + 0xc]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x20]
test cl, 8
je 0x4cac3c
mov edi, dword [edx + 0x10]
mov ecx, dword [esp + 0x14]
test edi, edi
mov ebx, dword [esp + 0x14]
mov edx, 0x4d4360
cmovne edx, edi
mov dword [esp + 0x110], esi
imul eax, dword [esp + 0x98]
mov edi, dword [ecx + 8]
mov ecx, edi
or ecx, dword [ebp + 0x14]
shr ecx, 4
and ecx, 1
mov esi, dword [ebp + 0x14]
add eax, dword [esp + 0x54]
mov dword [esp + 0x70], ecx
movzx ecx, word [ebx + 0xc]
mov dword [esp + 0x40], ecx
lea eax, [ebx + eax*2]
shr dword [esp + 0x40], 8
mov ebx, dword [ebp + 8]
mov dword [esp + 0xec], eax
mov eax, dword [ebp + 0xc]
and dword [esp + 0x40], 1
mov dword [esp + 0x48], edi
shr dword [esp + 0x48], 0x12
lea eax, [ebx + eax*2]
and dword [esp + 0x48], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xf4], eax
mov eax, edi
shr eax, 5
and eax, 1
shr ecx, 0xc
mov dword [esp + 0xd0], eax
and ecx, 1
mov eax, edi
mov dword [esp + 0xf0], ebx
shr eax, 0x1d
and eax, 1
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xcc], eax
mov eax, edi
shr eax, 0x19
and eax, 1
mov dword [esp + 0xe8], 0
mov dword [esp + 0xc8], eax
mov eax, esi
shr eax, 7
and eax, 1
mov dword [esp + 0xdc], 0
mov dword [esp + 0xbc], eax
mov eax, esi
shr eax, 8
and eax, 1
mov dword [esp + 0x12c], 0
mov dword [esp + 0xc0], eax
mov eax, esi
shr eax, 0xa
and eax, 1
mov dword [esp + 0x128], 0
mov dword [esp + 0xd4], eax
mov eax, esi
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x120], 0
mov dword [esp + 0xd8], eax
lea eax, [edx + 0x100]
mov dword [esp + 0xb0], eax
lea eax, [edx + 0x340]
mov dword [esp + 0xb4], eax
mov eax, esi
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xac], edx
and eax, 0x1800000
je 0x4cadfa
cmp eax, 0x800000
je 0x4caded
cmp eax, 0x1000000
jne 0x4cae93
mov dword [esp + 0xe0], 0
test esi, 0x700000
mov eax, esi
cmove eax, edi
and eax, 0x700000
cmp eax, 0x300000
ja 0x4cae85
je 0x4cae48
test eax, eax
je 0x4cae48
cmp eax, 0x100000
je 0x4cae13
cmp eax, 0x200000
jne 0x4cae93
mov eax, 0xa
jmp 0x4cae18
mov dword [esp + 0xe0], 1
jmp 0x4cadb3
test edi, 0x1800000
je 0x4cada8
mov eax, edi
shr eax, 0x17
and eax, 1
mov dword [esp + 0xe0], eax
jmp 0x4cadb3
mov eax, 0xd
mov cx, word [esp + 0xa6]
mov esi, 1
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], esi
mov word [esp + 0xa4], ax
mov dword [esp + 0x28], ecx
jmp 0x4caede
mov ecx, 0xd0a
mov dword [esp + 0x90], 0
mov eax, ecx
mov esi, 2
sar eax, 8
movzx ecx, cl
movzx eax, al
mov dword [esp + 0x94], esi
mov word [esp + 0xa4], ax
mov dword [esp + 0x28], ecx
mov word [esp + 0xa6], cx
jmp 0x4caede
cmp eax, 0x400000
je 0x4caeb8
cmp eax, 0x500000
je 0x4cae9f
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov cx, word [esp + 0xa6]
mov dword [esp + 0x90], 2
mov dword [esp + 0x28], ecx
jmp 0x4caecf
mov ax, word [esp + 0xa6]
mov dword [esp + 0x90], 1
mov dword [esp + 0x28], eax
mov esi, dword [esp + 0x94]
mov ax, word [esp + 0xa4]
cmp dword [esp + 0x4c], 0
mov dword [esp + 0x24], eax
je 0x4caf04
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x4caf04
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea edi, [edx + edx*2]
lea ecx, [edi + edi]
mov dword [esp + 0x18], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x14]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x4cafc2
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x4cafc2
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x18], eax
shl eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
mov dword [esp + 0x84], edi
test edi, edi
jne 0x4caf7b
lea eax, [edi - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov dword [esp + 0x34], 1
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x8c], eax
jmp 0x4cb015
mov eax, dword [ebp + 0x18]
mov edi, eax
xor eax, eax
mov dword [esp + 0x84], edi
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x8c], eax
test edi, edi
je 0x4cb092
mov eax, dword [esp + 0x14]
mov esi, edi
movzx eax, word [eax + 0x10]
lea ecx, [esi + edx*4]
shl eax, 2
mov edx, ecx
sub edx, eax
lea eax, [esi + 8]
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x4cb054
nop dword [eax + eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x4cb040
mov edi, dword [esp + 0x84]
mov dword [edi + 4], 0xffffffff
mov eax, dword [esp + 0x84]
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x104]
mov esi, dword [esp + 0x94]
mov dword [esp + 0x4c], eax
mov ax, word [esp + 0xa6]
mov dword [esp + 0x28], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x24], eax
cmp dword [esp + 0x70], 0
jne 0x4cb1f1
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x4cb1bc
movzx edx, word [edx + 0x14]
movzx edi, dx
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0xb0]
mov dword [esp + 0x5c], 1
mov dword [esp + 0x38], edx
movzx ecx, dx
test al, 0x20
je 0x4cb1e8
mov eax, 0xff
cmp dx, ax
ja 0x4cb185
movzx edx, byte [edi + ecx]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x3c]
cmp dx, 0x7f
ja 0x4cb189
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x13c], eax
movzx eax, dx
lea edx, [ecx + 0xc]
mov dword [esp + 0x138], eax
movzx eax, word [edx]
mov dword [esp + 0x20], edx
test al, 0x40
je 0x4cb240
movzx ecx, word [ecx + 0x16]
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x30]
movzx ebx, bx
mov dword [esp + 0x44], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x74], 1
movzx ecx, cx
mov dword [esp + 0x20], edx
test al, al
jns 0x4cb244
mov eax, 0xff
cmp word [esp + 0x30], ax
ja 0x4cb201
movzx eax, byte [edi + ecx]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x30], eax
cmp dx, 0x7f
jbe 0x4cb248
jmp 0x4cb205
mov edx, dword [esp + 0x3c]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4e1180]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d47a0]
mov ax, word [eax*8 + 0x4e00a4]
add ax, dx
movzx eax, ax
mov dword [esp + 0x38], eax
jmp 0x4cb0fe
cmp dword [esp + 0x40], 0
jne 0x4cb1f1
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4cb1f1
mov edi, dword [esp + 0xb0]
xor edx, edx
test byte [eax + 4], 1
je 0x4cb1e1
add eax, 8
mov dword [esp + 0x6c], eax
xor eax, eax
jmp 0x4cb0fe
mov edx, dword [esp + 0x3c]
jmp 0x4cb0fa
mov edi, dword [esp + 0xb0]
xor edx, edx
xor eax, eax
jmp 0x4cb0fe
mov edx, dword [esp + 0x44]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4e1180]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d47a0]
mov ax, word [eax*8 + 0x4e00a4]
add ax, dx
movzx eax, ax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
add eax, 0xc
mov dword [esp + 0x20], eax
jmp 0x4cb248
xor edx, edx
jmp 0x4cb248
mov edx, dword [esp + 0x44]
movzx eax, dx
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x30]
movzx eax, ax
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x44]
movzx eax, ax
mov dword [esp + 0x148], eax
nop
cmp dword [esp + 0x48], 0
mov edx, dword [esp + 0x10]
mov dword [esp + 0x2c], edx
je 0x4cb39f
mov edi, dword [esp + 0xf4]
mov edx, ebx
mov dword [esp + 0x2c], edx
cmp ebx, edi
jae 0x4cb39f
mov ebx, dword [esp + 0x90]
nop
test ebx, ebx
je 0x4cb34e
cmp edx, edi
jae case.default.0x4cb31f
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4cb2db
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp ebx, 2
jne 0x4cb30d
cmp ecx, 0xa
je case.0x4cb31f.10
cmp ecx, 0xd
jne case.default.0x4cb31f
lea eax, [edi - 2]
cmp edx, eax
jae case.0x4cb31f.10
cmp word [edx + 2], 0xa
mov esi, 2
je 0x4cb338
mov esi, 1
mov dword [esp + 0x94], esi
mov eax, esi
jmp 0x4cb348
cmp ecx, 0x85
ja 0x4cb326
je case.0x4cb31f.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4cb31f
jmp dword [ecx*4 + 0x4cbb4c]
sub ecx, 0x2028
je case.0x4cb31f.10
sub ecx, 1
jne case.default.0x4cb31f
mov esi, 1
mov dword [esp + 0x94], esi
mov eax, 1
jmp 0x4cb348
xor eax, eax
test eax, eax
jne 0x4cb397
jmp 0x4cb371
lea eax, [esi + esi]
mov ecx, edi
sub ecx, eax
cmp edx, ecx
ja 0x4cb371
mov eax, dword [esp + 0x24]
cmp word [edx], ax
jne 0x4cb371
cmp esi, 1
je 0x4cb397
mov eax, dword [esp + 0x28]
cmp word [edx + 2], ax
je 0x4cb397
add edx, 2
cmp edx, dword [esp + 0x10]
jae 0x4cb38f
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
cmp ax, word [esp + 0x50]
jne 0x4cb38f
add edx, 2
cmp edx, edi
jb 0x4cb2a0
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x14]
mov edi, dword [eax + 8]
or edi, dword [ebp + 0x14]
and edi, 0x4000000
jne 0x4cb62a
cmp dword [esp + 0x5c], edi
je 0x4cb41a
cmp ebx, edx
jae 0x4cb632
mov eax, dword [esp + 0x138]
cmp ax, word [esp + 0x13c]
je 0x4cb401
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop dword [eax]
movzx eax, word [ebx]
cmp ax, cx
je 0x4cb632
cmp ax, si
je 0x4cb632
add ebx, 2
cmp ebx, edx
jb 0x4cb3e0
jmp 0x4cb632
mov eax, dword [esp + 0x3c]
cmp word [ebx], ax
je 0x4cb632
add ebx, 2
cmp ebx, edx
jb 0x4cb405
jmp 0x4cb632
cmp dword [esp + 0x40], 0
je 0x4cb5cb
mov eax, dword [esp + 0xf0]
add eax, dword [esp + 0x140]
cmp ebx, eax
jbe 0x4cb632
cmp ebx, edx
jae 0x4cb598
lea ecx, [ebx - 2]
mov dword [esp + 0x1c], ecx
lea edi, [ebx - 4]
nop dword [eax]
cmp dword [esp + 0x90], 0
je 0x4cb52c
cmp ebx, dword [esp + 0xf0]
jbe case.default.0x4cb4d4
movzx eax, word [ecx]
mov edx, ecx
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x4cb483
movzx ecx, word [edi]
mov edx, edi
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4cb4ae
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x4cb4c2
cmp ecx, 0xa
je case.0x4cb4d4.10
cmp ecx, 0xd
jmp 0x4cb50b
cmp ecx, 0x85
ja 0x4cb500
je case.0x4cb4d4.11
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4cb4d4
jmp dword [ecx*4 + 0x4cbb5c]
cmp edx, dword [esp + 0xf0]
jbe case.0x4cb4d4.11
cmp word [edx - 2], 0xd
mov esi, 2
je 0x4cb512
mov esi, 1
mov dword [esp + 0x94], esi
mov eax, esi
jmp 0x4cb522
sub ecx, 0x2028
je case.0x4cb4d4.11
sub ecx, 1
jne case.default.0x4cb4d4
mov esi, 1
mov dword [esp + 0x94], esi
mov eax, 1
jmp 0x4cb522
xor eax, eax
mov edx, dword [esp + 0x2c]
test eax, eax
jne 0x4cb598
jmp 0x4cb558
mov eax, dword [esp + 0xf0]
lea ecx, [esi + esi]
add eax, ecx
cmp ebx, eax
jb 0x4cb558
mov eax, ebx
sub eax, ecx
mov ecx, dword [esp + 0x24]
cmp word [eax], cx
jne 0x4cb558
cmp esi, 1
je 0x4cb598
mov ecx, dword [esp + 0x28]
cmp word [eax + 2], cx
je 0x4cb598
mov ecx, dword [esp + 0x1c]
add ebx, 2
add ecx, 2
add edi, 2
mov dword [esp + 0x1c], ecx
cmp ebx, edx
jae 0x4cb598
mov ax, word [ebx]
and ax, word [esp + 0x144]
cmp ax, word [esp + 0x50]
jne 0x4cb450
add ebx, 2
add ecx, 2
add edi, 2
mov dword [esp + 0x1c], ecx
cmp ebx, edx
jb 0x4cb450
cmp word [ebx - 2], 0xd
jne 0x4cb632
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x4cb5b8
cmp eax, 2
jne 0x4cb632
cmp ebx, edx
jae 0x4cb632
cmp word [ebx], 0xa
jne 0x4cb632
add ebx, 2
jmp 0x4cb632
cmp dword [esp + 0x6c], 0
je 0x4cb632
cmp ebx, edx
jae 0x4cb632
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x34]
movzx edx, word [ebx]
mov dword [esp + 0x18], eax
cmp edx, 0xff
mov eax, 0xff
mov dword [esp + 0x34], ecx
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
mov ecx, dword [esp + 0x6c]
test byte [edx + ecx], al
jne 0x4cb632
mov eax, dword [esp + 0x18]
add ebx, 2
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], ecx
cmp ebx, esi
jb 0x4cb5e2
test edi, edi
jne 0x4cb6f0
cmp dword [esp + 0x4c], 0
jne 0x4cb6f0
mov ecx, dword [esp + 0x58]
mov esi, dword [esp + 0x10]
test ecx, ecx
je 0x4cb65a
test byte [ecx + 4], 2
je 0x4cb65a
mov eax, esi
sub eax, ebx
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x4cb6c3
cmp dword [esp + 0x74], 0
je 0x4cb6f0
mov eax, esi
sub eax, ebx
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x4cb6f0
mov eax, dword [esp + 0x5c]
lea eax, [ebx + eax*2]
cmp eax, dword [esp + 0x60]
jbe 0x4cb6f0
cmp eax, esi
jae 0x4cb6c3
mov ecx, dword [esp + 0x148]
cmp cx, word [esp + 0x14c]
je 0x4cb6ca
nop dword [eax]
movzx ecx, word [eax]
mov edi, eax
add eax, 2
mov dword [esp + 0x60], edi
mov edx, ecx
cmp cx, word [esp + 0x150]
je 0x4cb6ec
cmp dx, word [esp + 0x30]
je 0x4cb6ec
cmp eax, esi
jb 0x4cb6a0
xor edi, edi
jmp 0x4cb77a
mov edx, dword [esp + 0x44]
nop
mov cx, word [eax]
mov edi, eax
add eax, 2
mov dword [esp + 0x60], edi
cmp cx, dx
je 0x4cb6ec
cmp eax, esi
jb 0x4cb6d0
xor edi, edi
jmp 0x4cb77a
cmp edi, esi
jae 0x4cb6c3
mov edx, dword [esp + 0xec]
lea eax, [esp + 0x78]
push 0
push 0
push eax
push 2
push ebx
mov ecx, ebx
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x8c], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x11c], 0
call fcn.004c2d00
add esp, 0x14
mov edi, eax
cmp dword [esp + 0xdc], 0
je 0x4cb75a
mov eax, dword [esp + 0x64]
test eax, eax
cmove eax, dword [esp + 0x100]
mov dword [esp + 0x64], eax
cmp edi, 0xfffffc1d
jg 0x4cb7ab
je 0x4cb7e9
cmp edi, 0xfffffc1a
jne 0x4cb9c1
xor edi, edi
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x34], 0
je 0x4cb791
push dword [esp + 0x84]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
test edi, edi
je 0x4cba3d
cmp edi, 0xfffffff4
je 0x4cba3d
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xfffffc20
jg 0x4cb7e1
je 0x4cb7e9
cmp edi, 0xfffffc1e
je 0x4cb7d4
cmp edi, 0xfffffc1f
jne 0x4cb776
mov edx, ebx
mov dword [esp + 0xe8], 1
jmp 0x4cb812
mov edx, dword [esp + 0xf8]
cmp edx, ebx
je 0x4cb7e9
jmp 0x4cb812
test edi, edi
jne 0x4cb9bc
lea edx, [ebx + 2]
mov dword [esp + 0xe8], 0
cmp edx, dword [esp + 0x10]
jae 0x4cb812
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
cmp ax, word [esp + 0x50]
jne 0x4cb812
add edx, 2
mov ax, word [esp + 0xa6]
xor edi, edi
mov dword [esp + 0x28], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x24], eax
cmp dword [esp + 0x48], edi
je 0x4cb939
cmp dword [esp + 0x90], edi
je 0x4cb900
mov esi, dword [esp + 0xf4]
cmp ebx, esi
jae case.default.0x4cb8c6
movzx ecx, word [ebx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4cb87d
movzx eax, word [ebx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x4cb8b4
cmp ecx, 0xa
je case.0x4cb8c6.10
cmp ecx, 0xd
jne case.default.0x4cb8c6
lea eax, [esi - 2]
cmp ebx, eax
jae case.0x4cb8c6.10
cmp word [ebx + 2], 0xa
mov esi, 2
je 0x4cb8df
mov esi, 1
mov dword [esp + 0x94], esi
mov eax, esi
jmp 0x4cb8f6
cmp ecx, 0x85
ja 0x4cb8cd
je case.0x4cb8c6.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4cb8c6
jmp dword [ecx*4 + 0x4cbb6c]
sub ecx, 0x2028
je case.0x4cb8c6.10
sub ecx, 1
jne case.default.0x4cb8c6
mov esi, 1
mov dword [esp + 0x94], esi
mov eax, 1
jmp 0x4cb8f6
mov esi, dword [esp + 0x94]
xor eax, eax
test eax, eax
jne 0x4cb776
jmp 0x4cb940
mov esi, dword [esp + 0x94]
mov ecx, dword [esp + 0xf4]
lea eax, [esi + esi]
sub ecx, eax
cmp ebx, ecx
ja 0x4cb940
mov eax, dword [esp + 0x24]
cmp word [ebx], ax
jne 0x4cb940
cmp esi, 1
je 0x4cb776
mov eax, dword [esp + 0x28]
cmp word [ebx + 2], ax
je 0x4cb776
jmp 0x4cb940
mov esi, dword [esp + 0x94]
mov ebx, edx
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x70], edi
jne 0x4cb776
mov eax, dword [esp + 0x10]
cmp edx, eax
ja 0x4cba36
cmp edx, dword [esp + 0x154]
jbe 0x4cb9a1
cmp word [edx - 2], 0xd
jne 0x4cb9a1
cmp edx, eax
jae 0x4cb9a1
cmp word [edx], 0xa
jne 0x4cb9a1
mov edi, dword [esp + 0x20]
mov eax, 0x800
test word [edi], ax
jne 0x4cb9a1
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x4cb99a
cmp eax, 2
je 0x4cb99a
cmp esi, 2
jne 0x4cb9a1
lea ebx, [edx + 2]
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x128], 0
mov dword [esp + 0x4c], eax
jmp 0x4cb270
cmp edi, 1
je 0x4cb9cd
cmp edi, 0xfffffc19
jne 0x4cb776
cmp dword [esp + 0x34], 0
mov edi, dword [esp + 0x54]
je 0x4cba1d
mov esi, dword [esp + 0x84]
cmp edi, 4
jl 0x4cb9ff
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [esp + 0x108], edi
jle 0x4cba13
mov dword [esp + 0xb8], 1
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp dword [esp + 0xb8], 0
mov ecx, dword [esp + 0x108]
je 0x4cba8f
cmp ecx, edi
jl 0x4cba8f
xor esi, esi
jmp 0x4cba98
mov esi, eax
jmp 0x4cb77a
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4cba64
cmp dword [ebp + 0x1c], 1
jle 0x4cba5d
sub eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
sub esi, dword [ebp + 8]
sar eax, 1
sar esi, 1
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov eax, 0xfffffff4
jmp 0x4cba67
or eax, 0xffffffff
mov edx, dword [esp + 0x68]
test edx, edx
je 0x4cbb43
test byte [edx], 0x20
je 0x4cbb43
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x12c]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x14]
mov ebx, dword [ebp + 0x18]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, edi
jg 0x4cbae1
test ebx, ebx
je 0x4cbae1
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [ebx + ecx*4]
cmovg eax, dword [esp + 0x18]
xor edx, edx
lea eax, [ebx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, edx
test ecx, ecx
je 0x4cbae1
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x4cbaeb
xor esi, esi
jmp 0x4cbb10
mov eax, dword [esp + 0xf8]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx], eax
mov eax, dword [esp + 0xfc]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x68]
test edx, edx
je 0x4cbb29
test byte [edx], 0x20
je 0x4cbb29
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x128]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret