Function at 0x4c92a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x12c
xor eax, eax
mov dword [esp + 8], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x44], eax
push ebx
mov ebx, ecx
mov dword [esp + 0x44], 0
mov ecx, dword [ebp + 8]
lea eax, [edx + edx]
mov dword [esp + 0x11c], eax
add eax, ecx
push esi
mov esi, eax
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x50], 0
lea eax, [esi - 2]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x3c], eax
push edi
mov edi, dword [ebp + 0xc]
test ebx, ebx
jne 0x4c9350
cmp dword [esp + 0x14], 0
jne 0x4c9350
test ecx, ecx
jne 0x4c9350
cmp edi, 0xfffffc19
jne 0x4c9350
cmp edx, edi
jne 0x4c9350
push ecx
push ecx
push ecx
push ecx
push ecx
xor edx, edx
call fcn.004c11c0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x4c9365
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x4ca0ac
test ecx, ecx
je 0x4ca0ac
cmp dword [ebp + 0x18], 0
mov eax, dword [ebp + 0x1c]
jne 0x4c9386
test eax, eax
jg 0x4ca0ac
test eax, eax
jns 0x4c9396
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edx, edx
js 0x4ca0a0
cmp edx, edi
jg 0x4ca0a0
mov ecx, dword [ebx]
cmp ecx, 0x50435245
je 0x4c93ca
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0xc]
test al, 2
jne 0x4c93de
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0xac], 1
test ecx, 0x8000000
je 0x4c93fb
mov eax, 2
jmp 0x4c9403
mov eax, ecx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xec], eax
test ecx, 0x2000
jne 0x4c943d
test edx, edx
jle 0x4c943d
cmp edx, edi
jge 0x4c943d
mov eax, esi
mov ecx, 0xfc00
mov ax, word [eax]
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4c943d
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x14], 0
movzx eax, word [ebx + 0x18]
mov dword [esp + 0x38], 0
mov dword [esp + 0x64], 0x989680
mov dword [esp + 0x68], 0x1770
lea eax, [ebx + eax*2]
mov dword [esp + 0x10c], 0
mov dword [esp + 0x88], eax
movzx eax, word [ebx + 0x1c]
movzx ebx, word [ebx + 0x1a]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x84], ebx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x30], eax
je 0x4c94ec
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
test cl, 1
je 0x4c94ab
mov edx, dword [eax + 4]
mov dword [esp + 0x38], edx
mov edx, dword [ebp + 0x10]
test cl, 2
je 0x4c94bb
mov eax, dword [eax + 8]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x14]
test cl, 0x10
je 0x4c94c7
mov eax, dword [eax + 0x14]
mov dword [esp + 0x68], eax
test cl, 4
je 0x4c94da
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x10c], eax
test cl, 8
je 0x4c94e8
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x10]
jmp 0x4c94ec
mov eax, dword [esp + 0x30]
test eax, eax
mov edi, dword [esp + 0x10]
mov ecx, 0x4d2350
mov dword [esp + 0xf8], edx
cmovne ecx, eax
mov dword [esp + 0xd0], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc4], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x110], 0
mov eax, dword [eax + 8]
mov dword [esp + 0x44], eax
or eax, dword [ebp + 0x14]
mov dword [esp + 0x58], eax
movzx eax, word [edi + 0xc]
mov dword [esp + 0x34], eax
movzx eax, word [edi + 0x1c]
imul ebx, eax
movzx eax, word [edi + 0x18]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x108], 0
mov dword [esp + 0x94], ecx
add ebx, eax
mov eax, edi
mov edi, dword [ebp + 0xc]
lea eax, [eax + ebx*2]
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 8]
mov ebx, eax
mov dword [esp + 0xd8], ebx
lea eax, [eax + edi*2]
mov edi, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 0xdc], eax
mov eax, edx
shr eax, 5
and eax, 1
mov dword [esp + 0xb8], eax
mov eax, edx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, edx
shr eax, 0x19
and eax, 1
mov dword [esp + 0xb0], eax
mov eax, edi
shr eax, 7
and eax, 1
mov dword [esp + 0xa4], eax
mov eax, edi
shr eax, 8
and eax, 1
mov dword [esp + 0xa8], eax
mov eax, edi
shr eax, 0xa
and eax, 1
mov dword [esp + 0xbc], eax
mov eax, edi
shr eax, 0x1c
and eax, 1
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x34]
shr eax, 0xc
and eax, 1
mov dword [esp + 0xcc], eax
lea eax, [ecx + 0x100]
mov dword [esp + 0x98], eax
lea eax, [ecx + 0x340]
mov dword [esp + 0x9c], eax
mov eax, edi
and eax, 0x1800000
je 0x4c96b0
cmp eax, 0x800000
je 0x4c96a3
cmp eax, 0x1000000
jne 0x4c9711
mov dword [esp + 0xc8], 0
test edi, 0x700000
mov eax, edi
cmove eax, edx
and eax, 0x700000
cmp eax, 0x300000
ja 0x4c9703
je 0x4c96e6
test eax, eax
je 0x4c96e6
cmp eax, 0x100000
je 0x4c96c9
cmp eax, 0x200000
jne 0x4c9711
xor eax, eax
mov dword [esp + 0x7c], 1
mov dword [esp + 0x78], eax
mov eax, 0xa
mov word [esp + 0x8c], ax
jmp 0x4c972d
mov dword [esp + 0xc8], 1
jmp 0x4c9650
test edx, 0x1800000
je 0x4c9645
mov eax, edx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xc8], eax
jmp 0x4c9650
xor eax, eax
mov dword [esp + 0x7c], 1
mov dword [esp + 0x78], eax
mov eax, 0xd
mov word [esp + 0x8c], ax
jmp 0x4c972d
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 2
mov dword [esp + 0x8c], 0xa000d
jmp 0x4c972d
cmp eax, 0x400000
je 0x4c9724
cmp eax, 0x500000
je 0x4c971d
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 2
jmp 0x4c9729
mov eax, 1
mov dword [esp + 0x78], eax
cmp dword [esp + 0xec], 0
je 0x4c9752
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x4c9752
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea edi, [edx + edx*2]
lea ecx, [edi + edi]
mov dword [esp + 0x2c], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x10]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x4c97d7
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x4c97d7
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x2c], eax
shl eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
mov dword [esp + 0x6c], edi
test edi, edi
jne 0x4c97c2
lea eax, [edi - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x24], edi
jmp 0x4c97e4
mov eax, dword [ebp + 0x18]
mov edi, eax
mov dword [esp + 0x6c], edi
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x70], eax
mov dword [esp + 0xa0], 0
mov dword [esp + 0xf4], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4c9879
mov ecx, dword [esp + 0x2c]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x10]
mov edx, ecx
movzx eax, word [eax + 0x10]
shl eax, 2
sub edx, eax
mov eax, dword [esp + 0x24]
add eax, 8
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x4c9861
nop dword [eax + eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x4c9850
mov edi, dword [esp + 0x6c]
mov dword [edi + 4], 0xffffffff
mov eax, dword [esp + 0x6c]
mov dword [eax], 0xffffffff
mov ebx, dword [esp + 0xd8]
test byte [esp + 0x58], 0x10
jne 0x4c99e7
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x4c99b6
movzx edi, word [edx + 0x14]
movzx edx, di
mov dword [esp + 0x3c], 1
mov dword [esp + 0x18], edi
movzx ecx, di
mov dword [esp + 0x1c], edx
test al, 0x20
je 0x4c99de
mov eax, 0xff
cmp di, ax
ja 0x4c997f
mov edx, dword [esp + 0x98]
movzx edi, byte [edx + ecx]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x1c]
cmp di, 0x7f
ja 0x4c9983
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x120], eax
movzx eax, di
mov dword [esp + 0x24], eax
movzx eax, word [ecx + 0xc]
test al, 0x40
je 0x4c99f0
movzx edi, word [ecx + 0x16]
movzx edx, di
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 0x54], 1
mov dword [esp + 0x28], edi
movzx ecx, di
test al, al
jns 0x4c99f2
mov eax, 0xff
cmp di, ax
ja 0x4c994d
cmp word [esp + 0x20], 0x7f
movzx edi, byte [ecx + edx]
mov dword [esp + 0x28], edi
jbe 0x4c99f2
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4df170]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d2790]
mov ax, word [eax*8 + 0x4de094]
add ax, word [esp + 0x20]
movzx edi, ax
mov dword [esp + 0x28], edi
jmp 0x4c99f2
mov edi, dword [esp + 0x1c]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4df170]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d2790]
mov ax, word [eax*8 + 0x4de094]
add ax, di
movzx eax, ax
mov dword [esp + 0x18], eax
jmp 0x4c98e5
test dword [esp + 0x34], 0x100
jne 0x4c99e7
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4c99e7
xor edi, edi
test byte [eax + 4], 1
je 0x4c99d7
add eax, 8
mov dword [esp + 0x50], eax
xor eax, eax
jmp 0x4c98e5
mov edi, dword [esp + 0x1c]
jmp 0x4c98e1
xor edi, edi
xor eax, eax
jmp 0x4c98e5
xor edi, edi
mov ecx, dword [esp + 0x20]
movzx eax, cx
mov dword [esp + 0x134], eax
movzx eax, di
mov dword [esp + 0x130], eax
mov eax, ecx
movzx eax, ax
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0xc]
nop word [eax + eax]
test dword [esp + 0x44], 0x40000
mov edi, eax
je 0x4c9ace
mov ecx, dword [esp + 0xdc]
mov edi, esi
cmp esi, ecx
jae 0x4c9ace
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4c9a6a
cmp edi, ecx
jae 0x4c9a9e
push 1
lea edx, [esp + 0x80]
push edx
push ecx
mov edx, eax
mov ecx, edi
call fcn.004ca500
add esp, 0xc
test eax, eax
jne 0x4c9ac7
jmp 0x4c9a97
mov edx, dword [esp + 0x7c]
lea eax, [edx + edx]
sub ecx, eax
cmp edi, ecx
ja 0x4c9a97
mov ax, word [edi]
cmp ax, word [esp + 0x8c]
jne 0x4c9a97
cmp edx, 1
je 0x4c9ac7
mov ax, word [edi + 2]
cmp ax, word [esp + 0x8e]
je 0x4c9ac7
mov ecx, dword [esp + 0xdc]
add edi, 2
cmp edi, dword [esp + 0xc]
jae 0x4c9abf
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4c9abf
add edi, 2
cmp edi, ecx
jb 0x4c9a41
mov ebx, dword [esp + 0xd8]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
and eax, 0x4000000
mov dword [esp + 0x128], eax
jne 0x4c9c63
cmp dword [esp + 0x3c], 0
je 0x4c9b4a
cmp esi, edi
jae 0x4c9c6b
mov eax, dword [esp + 0x24]
cmp ax, word [esp + 0x120]
je 0x4c9b31
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
nop
movzx eax, word [esi]
cmp ax, cx
je 0x4c9c6b
cmp ax, dx
je 0x4c9c6b
add esi, 2
cmp esi, edi
jb 0x4c9b10
jmp 0x4c9c6b
mov eax, dword [esp + 0x1c]
cmp word [esi], ax
je 0x4c9c6b
add esi, 2
cmp esi, edi
jb 0x4c9b35
jmp 0x4c9c6b
test dword [esp + 0x34], 0x100
je 0x4c9c20
mov eax, dword [esp + 0x124]
add eax, ebx
cmp esi, eax
jbe 0x4c9c6b
cmp esi, edi
jae 0x4c9bfc
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4c9ba1
cmp esi, ebx
jbe 0x4c9bd5
push 1
lea ecx, [esp + 0x80]
mov edx, eax
push ecx
push ebx
mov ecx, esi
call fcn.004ca5c0
add esp, 0xc
test eax, eax
jne 0x4c9bfc
mov ebx, dword [esp + 0xd8]
jmp 0x4c9bd5
mov eax, dword [esp + 0x7c]
lea edx, [eax + eax]
lea eax, [ebx + edx]
cmp esi, eax
jb 0x4c9bd5
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x8c]
jne 0x4c9bd5
cmp dword [esp + 0x7c], 1
je 0x4c9bfc
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x8e]
je 0x4c9bfc
add esi, 2
cmp esi, edi
jae 0x4c9bfc
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4c9b71
add esi, 2
cmp esi, edi
jb 0x4c9b71
cmp word [esi - 2], 0xd
jne 0x4c9c6b
mov eax, dword [esp + 0x78]
cmp eax, 1
je 0x4c9c11
cmp eax, 2
jne 0x4c9c6b
cmp esi, edi
jae 0x4c9c6b
cmp word [esi], 0xa
jne 0x4c9c6b
add esi, 2
jmp 0x4c9c6b
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x4c9c6b
cmp esi, edi
jae 0x4c9c6b
nop dword [eax]
movzx edx, word [esi]
mov eax, 0xff
cmp edx, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebx], al
jne 0x4c9c6b
add esi, 2
cmp esi, edi
jb 0x4c9c30
mov eax, dword [esp + 0x128]
test eax, eax
jne 0x4c9d20
cmp dword [esp + 0xec], 0
jne 0x4c9d20
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x4c9c96
test byte [ecx + 4], 2
je 0x4c9c96
mov eax, ebx
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x4c9cf4
cmp dword [esp + 0x54], 0
je 0x4c9d20
mov eax, ebx
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x4c9d20
mov eax, dword [esp + 0x3c]
lea ecx, [esi + eax*2]
cmp ecx, dword [esp + 0x40]
jbe 0x4c9d20
cmp ecx, ebx
jae 0x4c9cf4
mov eax, dword [esp + 0x12c]
cmp ax, word [esp + 0x130]
je 0x4c9cfb
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov dword [esp + 0x40], edi
mov edx, eax
cmp ax, word [esp + 0x134]
je 0x4c9d1c
cmp dx, word [esp + 0x28]
je 0x4c9d1c
cmp ecx, ebx
jb 0x4c9cd1
xor edi, edi
jmp 0x4c9da7
mov edx, dword [esp + 0x20]
nop
movzx eax, word [ecx]
mov edi, ecx
mov dword [esp + 0x40], ecx
add ecx, 2
cmp ax, dx
je 0x4c9d1c
cmp ecx, ebx
jb 0x4c9d00
xor edi, edi
jmp 0x4c9da7
cmp edi, ebx
jae 0x4c9cf4
mov edx, dword [esp + 0xd4]
lea eax, [esp + 0x60]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0xf4], esi
mov dword [esp + 0xfc], esi
mov dword [esp + 0x74], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x104], 0
call fcn.004c11c0
add esp, 0x14
mov edi, eax
cmp dword [esp + 0xc4], 0
je 0x4c9d87
mov eax, dword [esp + 0x48]
test eax, eax
cmove eax, dword [esp + 0xe8]
mov dword [esp + 0x48], eax
cmp edi, 0xfffffc1d
jg 0x4c9dd5
je 0x4c9e13
cmp edi, 0xfffffc1a
jne 0x4c9f29
xor edi, edi
mov ebx, dword [esp + 0xc]
cmp dword [esp + 0x4c], 0
je 0x4c9dbb
push dword [esp + 0x6c]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
test edi, edi
je 0x4c9fab
cmp edi, 0xfffffff4
je 0x4c9fab
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xfffffc20
jg 0x4c9e0b
je 0x4c9e13
cmp edi, 0xfffffc1e
je 0x4c9dfe
cmp edi, 0xfffffc1f
jne 0x4c9da3
mov ebx, esi
mov dword [esp + 0xd0], 1
jmp 0x4c9e3f
mov ebx, dword [esp + 0xe0]
cmp ebx, esi
je 0x4c9e13
jmp 0x4c9e3f
test edi, edi
jne 0x4c9f24
lea ebx, [esi + 2]
mov dword [esp + 0xd0], 0
cmp ebx, dword [esp + 0xc]
jae 0x4c9e3f
mov ax, word [ebx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4c9e3f
add ebx, 2
mov ecx, dword [esp + 0x78]
xor edi, edi
test dword [esp + 0x44], 0x40000
je 0x4c9eb8
mov eax, dword [esp + 0xdc]
test ecx, ecx
je 0x4c9e7f
cmp esi, eax
jae 0x4c9eb8
push 1
lea edx, [esp + 0x80]
push edx
mov edx, ecx
mov ecx, esi
push eax
call fcn.004ca500
add esp, 0xc
test eax, eax
jne 0x4c9da3
jmp 0x4c9eb4
mov edx, dword [esp + 0x7c]
lea ecx, [edx + edx]
sub eax, ecx
cmp esi, eax
ja 0x4c9eb4
mov ax, word [esi]
cmp ax, word [esp + 0x8c]
jne 0x4c9eb4
cmp edx, 1
je 0x4c9da3
mov ax, word [esi + 2]
cmp ax, word [esp + 0x8e]
je 0x4c9da3
mov ecx, dword [esp + 0x78]
test byte [esp + 0x58], 0x10
mov esi, ebx
jne 0x4c9da3
mov eax, dword [esp + 0xc]
cmp ebx, eax
ja 0x4c9fa4
cmp ebx, dword [esp + 0x5c]
jbe 0x4c9f0d
cmp word [ebx - 2], 0xd
jne 0x4c9f0d
cmp ebx, eax
jae 0x4c9f0d
cmp word [ebx], 0xa
jne 0x4c9f0d
mov edi, dword [esp + 0x10]
mov edx, 0x800
test word [edi + 0xc], dx
mov edx, dword [esp + 0x7c]
jne 0x4c9f0d
cmp ecx, 1
je 0x4c9f0a
cmp ecx, 2
je 0x4c9f0a
cmp edx, 2
jne 0x4c9f0d
lea esi, [ebx + 2]
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x110], 0
jmp 0x4c9a20
cmp edi, 1
je 0x4c9f35
cmp edi, 0xfffffc19
jne 0x4c9da3
cmp dword [esp + 0x4c], 0
mov edi, dword [esp + 0x30]
je 0x4c9f8b
mov esi, dword [esp + 0x6c]
cmp edi, 4
jl 0x4c9f64
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xa0]
mov ecx, 1
cmp dword [esp + 0xf0], edi
push esi
cmovg eax, ecx
mov dword [esp + 0xa4], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp dword [esp + 0xa0], 0
mov ecx, dword [esp + 0xf0]
je 0x4c9ffd
cmp ecx, edi
jl 0x4c9ffd
xor esi, esi
jmp 0x4ca006
mov ebx, eax
jmp 0x4c9da7
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4c9fd2
cmp dword [ebp + 0x1c], 1
jle 0x4c9fcb
sub eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
sub ebx, dword [ebp + 8]
sar eax, 1
sar ebx, 1
mov dword [ecx], eax
mov dword [ecx + 4], ebx
mov eax, 0xfffffff4
jmp 0x4c9fd5
or eax, 0xffffffff
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4ca0b1
test byte [ecx], 0x20
je 0x4ca0b1
mov edx, dword [ecx + 0x18]
mov ecx, dword [esp + 0x114]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x10]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp + 0x18]
sar eax, 1
cmp eax, edi
jg 0x4ca04f
test edx, edx
je 0x4ca04f
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [edx + ecx*4]
cmovg eax, dword [esp + 0x2c]
xor ebx, ebx
lea eax, [edx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, ebx
test ecx, ecx
je 0x4ca04f
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x4ca059
xor esi, esi
jmp 0x4ca07e
mov eax, dword [esp + 0xe0]
sub eax, dword [esp + 0xd8]
sar eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xe4]
sub eax, dword [esp + 0xd8]
sar eax, 1
mov dword [edx + 4], eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4ca097
test byte [eax], 0x20
je 0x4ca097
mov edx, dword [eax + 0x18]
mov ecx, dword [esp + 0x110]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret