Function at 0x4ca5a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
push ebx
push edi
mov eax, dword [ecx]
mov ebx, dword [ecx + 0x14]
lea edx, [edx + edx*2]
shl edx, 4
mov dword [ebp - 0x24], eax
add ebx, edx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
push 0
mov ecx, dword [ebx]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ecx
push 0x1a0
test eax, eax
je 0x4ca5ee
push eax
call fcn.004e9f60
mov edi, eax
add esp, 0xc
mov dword [ebp - 0x10], edi
jmp 0x4ca5fb
call fcn.004f9810
add esp, 8
mov dword [ebp - 0x10], eax
mov edi, eax
test edi, edi
je 0x4ca60f
push 0x1a0
push 0
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebx + 0x1c], edi
test edi, edi
je 0x4cad76
or word [ebx + 0xa], 0x10
push esi
push 0x180
lea esi, [edi + 0x18]
push 0
push esi
call sub.msvcrt.dll_memset
mov ecx, dword [ebp - 0x24]
push 0x2b
push dword [ebp - 0x3c]
mov dword [edi], ecx
push edi
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
call fcn.00519bf0
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4ca683
mov ebx, dword [ebp + 8]
nop word [eax + eax]
push esi
push edi
push ebx
call fcn.004c9a30
add esp, 0xc
sub esi, 1
jns 0x4ca670
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x51], 0
jne 0x4cad75
mov eax, dword [edi + 0xc]
or edx, 0xffffffff
mov esi, dword [edi + 0x14]
or ecx, 0xffffffff
sub eax, 1
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], esi
js 0x4ca8c3
nop
mov eax, edx
or eax, ecx
je 0x4ca8bd
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4ca81e
push 0
push 0x198
push dword [ebp - 0x28]
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
call fcn.004e9f60
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4ca807
or word [esi + 0xa], 0x20
mov eax, 0x400
push 0x180
mov dword [esi + 0x1c], edi
xorps xmm0, xmm0
mov word [esi + 0xc], ax
lea esi, [edi + 0x18]
push 0
push esi
movlpd qword [ebp - 0x20], xmm0
call sub.msvcrt.dll_memset
mov ebx, dword [ebp + 0xc]
push 0x2c
mov eax, dword [ebx]
mov dword [edi], eax
mov eax, dword [ebp - 0x2c]
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
push dword [eax]
push edi
call fcn.00519bf0
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4ca777
mov ebx, dword [ebp + 8]
push esi
push edi
push ebx
call fcn.004c9a30
add esp, 0xc
sub esi, 1
jns 0x4ca764
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x28]
mov dword [edi + 4], ebx
cmp byte [eax + 0x51], 0
jne 0x4ca7dd
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4ca7dd
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov eax, dword [esi]
mov al, byte [eax]
cmp al, 0x31
je 0x4ca7b5
cmp al, 0x35
jb 0x4ca7a6
cmp al, 0x39
jbe 0x4ca7b5
cmp al, 0x32
je 0x4ca7b5
cmp al, 0x2d
je 0x4ca7b5
cmp word [esi + 0xc], 0x40
jne 0x4ca7d3
mov eax, dword [ebp - 0x24]
push dword [esi + 0x14]
add eax, 0x1e8
push eax
call fcn.00519ba0
mov ecx, dword [ebp - 0x1c]
add esp, 8
or ecx, eax
or ebx, edx
mov dword [ebp - 0x1c], ecx
add esi, 0x30
sub edi, 1
jne 0x4ca796
jmp 0x4ca7e3
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x18]
and edx, ecx
mov ecx, dword [ebp - 4]
mov esi, dword [ebp - 0x2c]
and ecx, ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], edi
jmp 0x4ca8a8
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], edi
jmp 0x4ca8a8
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4ca8a8
mov eax, dword [ebp - 0x24]
push dword [esi + 0x14]
add eax, 0x1e8
push eax
call fcn.00519ba0
mov edi, eax
add esp, 8
movzx eax, word [esi + 0xa]
mov ebx, edx
test al, 2
je 0x4ca874
mov ecx, dword [esi + 0x10]
mov eax, dword [ebp - 0x10]
lea esi, [ecx + ecx*2]
mov ecx, dword [eax + 0x14]
add esi, esi
mov eax, dword [ebp - 0x24]
add eax, 0x1e8
push dword [ecx + esi*8 + 0x14]
push eax
call fcn.00519ba0
mov esi, dword [ebp - 0x2c]
add esp, 8
or edi, eax
or ebx, edx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
and edx, edi
movzx eax, word [esi + 0xc]
and ecx, ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
test al, 2
jne 0x4ca8a2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], edi
jmp 0x4ca8a8
and dword [ebp - 0x14], edi
and dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x34]
add esi, 0x30
dec eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], eax
test eax, eax
jns 0x4ca6c0
mov ebx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x10]
mov dword [edi + 0x198], edx
mov eax, 0x200
or edx, ecx
mov dword [edi + 0x19c], ecx
mov word [ebx + 0xc], ax
je 0x4caa9e
mov eax, dword [ebp + 0xc]
mov byte [eax + 9], 1
cmp dword [edi + 0xc], 2
jne 0x4caa9e
mov ecx, dword [edi + 0x14]
xor edx, edx
xor ebx, ebx
nop dword [eax + eax]
mov eax, 0x400
cmp word [ecx + 0xc], ax
je 0x4ca914
xor edi, edi
test edx, edx
cmove edi, ecx
jmp 0x4ca925
mov eax, dword [ecx + 0x1c]
cmp edx, dword [eax + 0xc]
jge 0x4ca923
mov edi, dword [eax + 0x14]
add edi, ebx
jmp 0x4ca925
xor edi, edi
inc edx
mov dword [ebp - 0x2c], edi
add ebx, 0x30
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ebx
test edi, edi
je 0x4caa9b
xor edx, edx
xor ebx, ebx
jmp 0x4ca950
mov edi, dword [ebp - 0x2c]
jmp 0x4ca948
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0xc]
nop dword [eax + eax]
mov eax, dword [ebp - 0x10]
mov esi, 0x400
mov ecx, dword [eax + 0x14]
cmp word [ecx + 0x3c], si
lea eax, [ecx + 0x30]
je 0x4ca96d
xor esi, esi
test edx, edx
cmove esi, eax
jmp 0x4ca97e
mov esi, dword [eax + 0x1c]
cmp edx, dword [esi + 0xc]
jge 0x4ca97c
mov esi, dword [esi + 0x14]
add esi, ebx
jmp 0x4ca97e
xor esi, esi
inc edx
add ebx, 0x30
mov dword [ebp - 4], edx
mov dword [ebp - 0xc], ebx
test esi, esi
je 0x4caa90
movzx ecx, word [edi + 0xc]
movzx edx, word [esi + 0xc]
mov eax, ecx
or eax, edx
movzx ebx, ax
test cl, 0x3e
je 0x4ca945
test dl, 0x3e
mov edx, dword [ebp - 4]
je 0x4ca948
mov eax, ebx
and eax, 0x1a
cmp ax, bx
je 0x4ca9c0
mov eax, ebx
and eax, 0x26
cmp ax, bx
jne 0x4ca948
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0xc]
mov eax, dword [edi]
push dword [eax + 0xc]
push 0
call fcn.004eebc0
mov edx, dword [ebp - 4]
add esp, 0x10
test eax, eax
jne 0x4ca948
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0x10]
mov eax, dword [edi]
push dword [eax + 0x10]
push 0
call fcn.004eebc0
mov edx, dword [ebp - 4]
add esp, 0x10
test eax, eax
jne 0x4ca948
mov ecx, ebx
lea eax, [ecx - 1]
test ecx, eax
je 0x4caa1b
test bl, 0x18
mov eax, 8
mov ebx, 0x20
cmovne ebx, eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [edi]
test eax, eax
je 0x4ca948
push 0
push 0
push eax
push ecx
call fcn.004cb270
mov edx, dword [ebp - 4]
mov edi, eax
add esp, 0x10
test edi, edi
je 0x4ca940
movzx esi, bx
mov edx, 0x35
cmp esi, 2
je 0x4caa6d
xor ecx, ecx
nop dword [eax + eax]
inc ecx
mov eax, 2
shl eax, cl
inc edx
cmp esi, eax
jne 0x4caa60
mov ebx, dword [ebp + 0xc]
push 3
push edi
push ebx
mov byte [edi], dl
call fcn.00525710
push eax
push ebx
push dword [ebp + 8]
call fcn.004c9a30
mov edi, dword [ebp - 0x2c]
add esp, 0x18
jmp 0x4ca945
mov edx, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x34]
jmp 0x4ca900
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x1c]
je 0x4cad75
xor ebx, ebx
mov ecx, 0xffbf
or edx, 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], edx
jmp 0x4caac3
mov edi, dword [ebp - 0x10]
test ebx, ebx
jne 0x4cac18
mov eax, dword [ebp - 0x10]
mov edi, dword [edi + 0x14]
mov ebx, dword [eax + 0xc]
sub ebx, 1
mov dword [ebp - 0x38], ebx
js 0x4cad75
and word [edi + 0xa], cx
mov eax, ebx
mov esi, dword [edi + 0x14]
mov dword [ebp - 0xc], eax
cmp esi, edx
je 0x4cab34
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov edx, dword [ecx + 0x1ec]
test edx, edx
jle 0x4cab11
add ecx, 0x1f0
cmp dword [ecx], esi
je 0x4cab46
inc eax
add ecx, 4
cmp eax, edx
jl 0x4cab05
xorps xmm0, xmm0
movlpd qword [ebp - 8], xmm0
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x14]
and edx, dword [ebp - 0x1c]
or ecx, edx
jne 0x4cab5d
mov eax, dword [ebp - 0xc]
mov ecx, 0xffbf
mov edx, dword [ebp - 0x2c]
dec ebx
add edi, 0x30
mov dword [ebp - 0x38], ebx
test eax, eax
jg 0x4caae0
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4cab1f
mov eax, dword [edi]
mov edx, esi
mov ecx, dword [edi + 0x1c]
lea esi, [edi + 0xa]
mov edi, dword [ebp - 0x38]
mov ebx, 1
mov dword [ebp - 0xc], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 4], eax
nop dword [eax + eax]
test ebx, ebx
je 0x4cabfb
cmp dword [esi + 0xa], edx
je 0x4cab93
mov eax, 0xffbf
and word [esi], ax
jmp 0x4cabea
cmp dword [esi + 0x12], ecx
jne 0x4cabe8
cmp ecx, 0xfffffffe
jne 0x4cabb5
push 0xffffffffffffffff
push eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
push dword [ebp - 0x30]
call fcn.004eebc0
add esp, 0x10
test eax, eax
jne 0x4cabe8
mov eax, dword [esi - 0xa]
push dword [eax + 0x10]
call fcn.004ebe60
movsx eax, al
mov dword [ebp - 0x38], eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
call fcn.004ebe60
movsx ecx, al
add esp, 8
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4cabe2
cmp eax, ecx
jne 0x4cabe8
or word [esi], 0x40
jmp 0x4cabea
xor ebx, ebx
mov ecx, dword [ebp - 0xc]
add esi, 0x30
sub edi, 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
jns 0x4cab80
mov eax, dword [ebp - 0x34]
mov ecx, 0xffbf
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 2
jl 0x4caac0
test ebx, ebx
je 0x4cad75
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
xor eax, eax
mov edi, dword [ecx + 0xc]
sub edi, 1
mov esi, dword [ecx + 0x14]
js 0x4cac89
nop word [eax + eax]
test byte [esi + 0xa], 0x40
je 0x4cac69
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4cac51
push 0
push 0
push eax
push dword [ebp - 0x28]
call fcn.004cb270
add esp, 0x10
jmp 0x4cac53
xor eax, eax
push eax
mov eax, dword [ebp - 0x24]
push ebx
push dword [eax]
call fcn.004efbd0
mov ecx, dword [esi]
mov ebx, eax
add esp, 0xc
mov eax, dword [ecx + 0xc]
add esi, 0x30
sub edi, 1
jns 0x4cac30
test eax, eax
je 0x4cac89
push 0
push 0
push eax
push dword [ebp - 0x28]
call fcn.004cb270
add esp, 0x10
mov edi, eax
jmp 0x4cac8b
xor edi, edi
mov eax, dword [ebp - 0x30]
push 0
push 0x34
push dword [eax]
call fcn.004e9f60
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4cad53
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x31
add esp, 0xc
mov word [esi + 0x22], ax
test edi, edi
je 0x4caccf
mov dword [esi + 0xc], edi
mov eax, dword [edi + 4]
and eax, 0x200104
or dword [esi + 4], eax
push esi
call fcn.004cbfc0
mov ecx, dword [ebp - 0x30]
add esp, 4
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4cacf4
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.004ebbf0
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push 3
push esi
mov eax, dword [ecx + 4]
and eax, 1
or dword [esi + 4], eax
movzx eax, word [ecx + 0x24]
mov dword [esi + 0x14], ebx
mov ebx, dword [ebp + 0xc]
push ebx
mov word [esi + 0x24], ax
call fcn.00525710
mov esi, eax
push esi
push ebx
push dword [ebp + 8]
call fcn.004c9a30
mov eax, dword [ebx + 0x14]
lea edx, [esi + esi*2]
mov ecx, dword [ebp + 0x10]
add edx, edx
mov esi, dword [ebp - 0x40]
add esp, 0x18
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x14]
movzx eax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x14]
inc byte [esi + eax + 0xe]
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4cad65
mov eax, dword [ebp - 0x30]
push edi
push dword [eax]
call fcn.004eeea0
add esp, 8
test ebx, ebx
je 0x4cad75
push ebx
push dword [ebp - 0x28]
call fcn.004cb980
add esp, 8
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret