Function at 0x4eb360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x78
push esi
mov esi, ecx
cmp dword [esi + 0x40], 0
jne 0x4ec7e9
push ebx
push ebp
push edi
push str.cmap
call fcn.004eb140
xor ecx, ecx
xor ebp, ebp
cmp eax, ebp
setl cl
push str.name
mov dword [esp + 0x88], eax
mov dword [esp + 0x2c], ecx
mov ecx, esi
call fcn.004eb140
xor edx, edx
test eax, eax
setl dl
push str.post
mov ecx, esi
mov dword [esp + 0x40], edx
call fcn.004eb140
xor ecx, ecx
test eax, eax
setl cl
push str.OS_2
mov dword [esp + 0x44], ecx
mov ecx, esi
call fcn.004eb140
xor edx, edx
test eax, eax
mov eax, dword [esi + 0x24]
setl dl
inc eax
push 0x10
push eax
mov dword [esp + 0x4c], edx
call fcn.00497310
mov ebx, dword [esi + 0x14]
add esp, 8
push str.loca
mov ecx, esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebp
call fcn.004eb140
lea ecx, [eax + eax*4]
mov edi, dword [ebx + ecx*4 + 8]
push str.glyf
mov ecx, esi
call fcn.004eb140
cmp dword [esi + 0x24], ebp
lea edx, [eax + eax*4]
mov eax, dword [ebx + edx*4 + 0x10]
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 1
jl 0x4eb4bd
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x5c], edi
add ebx, 4
cmp dword [esi + 0x28], 0
je 0x4eb44b
lea ecx, [esp + 0x24]
push ecx
push edi
mov ecx, esi
call fcn.0050b910
jmp 0x4eb45e
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x24]
push edx
push eax
mov ecx, esi
call fcn.0050b8d0
add eax, eax
mov dword [ebx], eax
test eax, eax
jl 0x4eb46a
cmp eax, dword [esp + 0x14]
jle 0x4eb478
mov ecx, dword [esp + 0x14]
mov dword [ebx], ecx
mov dword [esp + 0x18], 1
test ebp, ebp
jle 0x4eb4a5
mov ecx, dword [ebx]
mov edx, dword [ebx - 0x10]
cmp ecx, edx
jge 0x4eb48d
mov dword [esp + 0x18], 1
mov eax, ecx
sub eax, edx
test eax, eax
jle 0x4eb4a5
cmp eax, 0xc
jge 0x4eb4a5
mov dword [ebx - 0x10], ecx
mov dword [esp + 0x18], 1
add dword [esp + 0x5c], 2
mov dword [ebx - 4], ebp
inc ebp
add edi, 4
add ebx, 0x10
cmp ebp, dword [esi + 0x24]
jle 0x4eb436
mov ebp, dword [esi + 0x18]
mov ebx, dword [esp + 0x28]
xor edi, edi
cmp ebp, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x60], edi
jle 0x4eb54c
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x74], ebp
lea edx, [edi + 1]
lea esp, [esp]
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx]
jne 0x4eb51c
add edi, edx
cmp eax, 0x636d6170
jne 0x4eb4f5
mov ebx, edx
jmp 0x4eb539
cmp eax, 0x6e616d65
jne 0x4eb502
mov dword [esp + 0x3c], edx
jmp 0x4eb539
cmp eax, 0x706f7374
jne 0x4eb50f
mov dword [esp + 0x40], edx
jmp 0x4eb539
cmp eax, 0x4f532f32
jne 0x4eb539
mov dword [esp + 0x44], edx
jmp 0x4eb539
test eax, 0xe0000000
je 0x4eb535
test eax, 0xe00000
je 0x4eb535
test eax, 0xe000
je 0x4eb535
test al, 0xe0
jne 0x4eb539
add dword [esp + 0x1c], edx
add ecx, 0x14
sub dword [esp + 0x74], edx
jne 0x4eb4e0
mov dword [esp + 0x60], edi
mov dword [esp + 0x28], ebx
xor edi, edi
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x7c], edi
cmp ebx, edi
jne 0x4eb5cb
mov edx, dword [esi + 0x20]
test edx, edx
jne 0x4eb56d
mov dword [esp + 0x64], 1
jmp 0x4eb5cb
mov ecx, dword [esi + 0x1c]
mov eax, dword [ecx + 0xc]
add eax, dword [ecx + 8]
cmp edx, 1
jle 0x4eb5a6
mov edi, 0x14
add ecx, 0x1c
lea ebx, [edx - 1]
mov edx, dword [ecx + 4]
add edx, dword [ecx]
cmp edx, eax
jle 0x4eb59b
mov eax, dword [esi + 0x1c]
lea edx, [eax + edi]
mov eax, dword [edx + 0xc]
add eax, dword [edx + 8]
add edi, 0x14
add ecx, 0x14
sub ebx, 1
jne 0x4eb586
mov ecx, dword [esp + 0x84]
mov edx, dword [esi + 0x14]
lea ecx, [ecx + ecx*4]
sub eax, dword [edx + ecx*4 + 8]
lea ecx, [edx + ecx*4]
cmp eax, dword [ecx + 0x10]
mov dword [esp + 0x7c], eax
jle 0x4eb5cb
mov dword [esp + 0x68], 1
movsx eax, byte [0x5c931d]
movsx ecx, byte [str.hhea]
movsx edx, byte [0x5c931e]
and eax, 0xff
shl ecx, 8
or eax, ecx
movsx ecx, byte [0x5c931f]
shl eax, 8
and edx, 0xff
or eax, edx
and ecx, 0xff
shl eax, 8
or eax, ecx
xor ecx, ecx
test ebp, ebp
jle 0x4eb61c
mov edx, dword [esi + 0x14]
cmp dword [edx], eax
je 0x4eb61f
inc ecx
add edx, 0x14
cmp ecx, ebp
jl 0x4eb610
or ecx, 0xffffffff
lea eax, [ecx + ecx*4]
mov ecx, dword [esi + 0x14]
lea edx, [esp + 0x24]
push edx
mov edx, dword [ecx + eax*4 + 8]
add edx, 0x22
push edx
mov ecx, esi
call fcn.0050b8d0
mov ecx, dword [esi + 0x24]
xor edx, edx
cmp eax, ecx
setl dl
cmp dword [esp + 0x28], 0
mov dword [esp + 0x78], eax
mov eax, edx
mov dword [esp + 0x48], eax
jne 0x4eb6c4
cmp dword [esp + 0x3c], 0
jne 0x4eb6c4
cmp dword [esp + 0x40], 0
jne 0x4eb6c4
cmp dword [esp + 0x44], 0
jne 0x4eb6c4
cmp dword [esp + 0x18], 0
jne 0x4eb6c4
cmp dword [esp + 0x64], 0
jne 0x4eb6c4
cmp dword [esp + 0x68], 0
jne 0x4eb6c4
test eax, eax
jne 0x4eb6c4
cmp dword [esp + 0x60], edx
jne 0x4eb6c4
cmp dword [esp + 0x1c], edx
jne 0x4eb6c4
cmp dword [esp + 0x94], edx
jne 0x4eb6c4
cmp dword [esp + 0x98], edx
jne 0x4eb6c4
cmp dword [esi + 0x48], edx
jne 0x4eb6c4
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x90]
push eax
push ecx
push edx
call dword [esp + 0x98]
add esp, 0xc
jmp 0x4ec7d9
cmp dword [esp + 0x18], 0
mov edi, dword [sym.imp.MSVCR90.dll_qsort]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x14], 0
je 0x4eb765
push 0x4eabf0
push 0x10
inc ecx
push ecx
push ebp
call edi
xor ecx, ecx
add esp, 0x10
cmp dword [esi + 0x24], ecx
jle 0x4eb711
lea eax, [ebp + 4]
lea ebx, [ebx]
mov edx, dword [eax + 0x10]
sub edx, dword [eax]
inc ecx
mov dword [eax + 8], edx
add eax, 0x10
cmp ecx, dword [esi + 0x24]
jl 0x4eb700
mov eax, dword [esi + 0x24]
shl eax, 4
xor ebx, ebx
mov dword [eax + ebp + 0xc], ebx
mov ecx, dword [esi + 0x24]
push 0x4eac10
push 0x10
inc ecx
push ecx
push ebp
call edi
mov edx, dword [esi + 0x24]
shl edx, 4
xor eax, eax
add esp, 0x10
mov dword [edx + ebp + 0xc], ebx
cmp dword [esi + 0x24], eax
jl 0x4eb761
lea ecx, [ebp + 0xc]
mov dword [ecx - 4], eax
add eax, dword [ecx]
mov edx, eax
and edx, 3
je 0x4eb758
mov edi, 4
sub edi, edx
add eax, edi
inc ebx
add ecx, 0x10
cmp ebx, dword [esi + 0x24]
jle 0x4eb743
mov dword [esp + 0x14], eax
xor ecx, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], ecx
cmp dword [esp + 0x18], ecx
je 0x4eb884
mov ebx, dword [esi + 0x24]
cmp dword [esi + 0x28], ecx
je 0x4eb79c
test ebx, ebx
jl 0x4eb7c4
lea eax, [ebp + 8]
lea edx, [ebx + 1]
jmp 0x4eb790
add ecx, dword [eax]
add eax, 0x10
sub edx, 1
jne 0x4eb790
jmp 0x4eb7c0
xor eax, eax
test ebx, ebx
jl 0x4eb7c4
lea edx, [ebp + 0x18]
mov edi, dword [edx - 0x10]
shl edi, 0x10
add ecx, edi
lea edi, [eax + 1]
cmp edi, ebx
jg 0x4eb7b6
add ecx, dword [edx]
add eax, 2
add edx, 0x20
cmp eax, ebx
jle 0x4eb7a5
mov dword [esp + 0x6c], ecx
movsx eax, byte [0x5c932d]
movsx ecx, byte [str.glyf]
movsx edx, byte [0x5c932e]
and eax, 0xff
shl ecx, 8
or eax, ecx
movsx ecx, byte [0x5c932f]
shl eax, 8
and edx, 0xff
or eax, edx
mov edx, dword [esi + 0x18]
and ecx, 0xff
shl eax, 8
or eax, ecx
xor ecx, ecx
test edx, edx
jle 0x4eb81c
mov edi, dword [esi + 0x14]
lea esp, [esp]
cmp dword [edi], eax
je 0x4eb81f
inc ecx
add edi, 0x14
cmp ecx, edx
jl 0x4eb810
or ecx, 0xffffffff
mov eax, dword [esi + 0x14]
lea edx, [ecx + ecx*4]
mov ecx, dword [eax + edx*4 + 8]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x10], 0
test ebx, ebx
jle 0x4eb884
lea edi, [ebp + 4]
lea esp, [esp]
mov ebx, dword [edi + 8]
test ebx, ebx
jle 0x4eb873
mov ebp, dword [edi]
mov edx, dword [esp + 0x20]
push ebx
lea eax, [edx + ebp]
push eax
mov ecx, esi
call fcn.0050ba10
test eax, eax
je 0x4eb873
mov ecx, dword [esi + 8]
add ecx, ebp
add ecx, dword [esp + 0x20]
push ebx
push ecx
mov ecx, esi
call fcn.004eaf40
add dword [esp + 0x70], eax
mov eax, dword [esp + 0x10]
inc eax
add edi, 0x10
cmp eax, dword [esi + 0x24]
mov dword [esp + 0x10], eax
jl 0x4eb840
mov eax, dword [esp + 0x94]
xor ecx, ecx
cmp eax, ecx
je 0x4eb9be
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4eb898
sub eax, edx
mov edi, eax
lea ebx, [edi + edi*2]
lea ebx, [ebx + ebx + 0x47]
and ebx, 0xfffffffc
push ebx
mov dword [esp + 0x78], ebx
call fcn.00497280
push ebx
mov ebp, eax
push 0
push ebp
mov dword [esp + 0x5c], ebp
call sub.MSVCR90.dll_memset
xor ebx, ebx
add esp, 0x10
mov byte [ebp], 0
mov byte [ebp + 1], 0
mov byte [ebp + 2], 0
mov byte [ebp + 3], 4
mov byte [ebp + 4], 0
mov byte [ebp + 5], 0x36
mov dword [esp + 0x5c], ebx
xor ecx, ecx
lea esp, [esp]
lea edx, [ecx + ecx*2]
lea eax, [ebp + edx*4]
mov dl, cl
inc dl
inc ecx
mov byte [eax + 6], 0
mov byte [eax + 7], 3
mov byte [eax + 8], 0
mov byte [eax + 9], 1
mov byte [eax + 0xa], 4
mov byte [eax + 0xb], 9
mov byte [eax + 0xc], 0
mov byte [eax + 0xd], dl
cmp ecx, 2
jne 0x4eb924
xor edx, edx
jmp 0x4eb92a
lea edx, [edi + edi]
sar edx, 8
mov byte [eax + 0xe], dl
cmp ecx, 2
jne 0x4eb937
lea edx, [ecx + 0xc]
jmp 0x4eb940
lea edx, [edi + edi]
and edx, 0xff
mov byte [eax + 0xf], dl
mov edx, ebx
sar edx, 8
mov byte [eax + 0x10], dl
mov byte [eax + 0x11], bl
cmp ecx, 2
jne 0x4eb980
mov eax, dword [0x5c938c]
mov dword [ebx + ebp + 0x36], eax
mov edx, dword [0x5c9390]
mov dword [ebx + ebp + 0x3a], edx
mov eax, dword [0x5c9394]
mov dword [ebx + ebp + 0x3e], eax
mov dx, word [0x5c9398]
mov word [ebx + ebp + 0x42], dx
add ebx, 0xe
jmp 0x4eb9af
xor edx, edx
test edi, edi
jle 0x4eb9ac
lea eax, [ebx + ebp + 0x37]
lea ebx, [ebx]
mov ebx, dword [esp + 0x94]
mov byte [eax - 1], 0
mov bl, byte [edx + ebx]
mov byte [eax], bl
inc edx
add eax, 2
cmp edx, edi
jl 0x4eb990
mov ebx, dword [esp + 0x5c]
lea ebx, [ebx + edi*2]
cmp ecx, 4
mov dword [esp + 0x5c], ebx
jl 0x4eb8f0
jmp 0x4eb9c6
mov dword [esp + 0x74], ecx
mov dword [esp + 0x4c], ecx
mov edi, dword [esp + 0x98]
xor ebp, ebp
cmp edi, ebp
je 0x4ebad9
push 0x22c
mov dword [esp + 0x54], 0x22c
call fcn.00497280
mov ebp, eax
add esp, 4
xor ebx, ebx
mov dword [esp + 0x5c], ebp
mov byte [ebp], 0
mov byte [ebp + 1], 0
mov byte [ebp + 2], 0
mov byte [ebp + 3], 1
mov byte [ebp + 4], 0
mov byte [ebp + 5], 3
mov byte [ebp + 6], 0
mov byte [ebp + 7], 1
mov byte [ebp + 8], 0
mov byte [ebp + 9], 0
mov byte [ebp + 0xa], 0
mov byte [ebp + 0xb], 0xc
mov byte [ebp + 0xc], 0
mov byte [ebp + 0xd], 4
mov byte [ebp + 0xe], 2
mov byte [ebp + 0xf], 0x20
mov byte [ebp + 0x10], 0
mov byte [ebp + 0x11], 0
mov byte [ebp + 0x12], 0
mov byte [ebp + 0x13], 4
mov byte [ebp + 0x14], 0
mov byte [ebp + 0x15], 4
mov byte [ebp + 0x16], 0
mov byte [ebp + 0x17], 1
mov byte [ebp + 0x18], 0
mov byte [ebp + 0x19], 0
mov byte [ebp + 0x1a], 0
mov byte [ebp + 0x1b], 0xff
mov byte [ebp + 0x1c], 0xff
mov byte [ebp + 0x1d], 0xff
mov byte [ebp + 0x1e], 0
mov byte [ebp + 0x1f], 0
mov byte [ebp + 0x20], 0
mov byte [ebp + 0x21], 0
mov byte [ebp + 0x22], 0xff
mov byte [ebp + 0x23], 0xff
mov byte [ebp + 0x24], 0
mov byte [ebp + 0x25], 0
mov byte [ebp + 0x26], 0
mov byte [ebp + 0x27], 1
mov byte [ebp + 0x28], 0
mov byte [ebp + 0x29], 4
mov byte [ebp + 0x2a], 0
mov byte [ebp + 0x2b], 0
xor eax, eax
lea ecx, [ebp + 0x2d]
lea esp, [esp]
cmp dword [edi + eax*4], ebx
jge 0x4ebabe
mov byte [ecx - 1], 0
mov byte [ecx], 0
jmp 0x4ebacc
mov edx, dword [edi + eax*4]
sar edx, 8
mov byte [ecx - 1], dl
mov dl, byte [edi + eax*4]
mov byte [ecx], dl
inc eax
add ecx, 2
cmp eax, 0x100
jl 0x4ebab0
jmp 0x4ebae3
mov dword [esp + 0x50], ebp
mov dword [esp + 0x5c], ebp
xor ebx, ebx
cmp dword [esp + 0x48], ebx
je 0x4ebce0
movsx eax, byte [0x5c931d]
movsx ecx, byte [str.hhea]
movsx edx, byte [0x5c931e]
and eax, 0xff
shl ecx, 8
or eax, ecx
movsx ecx, byte [0x5c931f]
shl eax, 8
and edx, 0xff
or eax, edx
mov edx, dword [esi + 0x18]
and ecx, 0xff
shl eax, 8
or eax, ecx
xor ecx, ecx
cmp edx, ebx
jle 0x4ebb41
mov edi, dword [esi + 0x14]
cmp dword [edi], eax
je 0x4ebb44
inc ecx
add edi, 0x14
cmp ecx, edx
jl 0x4ebb35
or ecx, 0xffffffff
mov eax, dword [esi + 0x14]
lea edx, [ecx + ecx*4]
mov ecx, dword [eax + edx*4 + 8]
push 0x24
mov dword [esp + 0x24], ecx
mov dword [esp + 0x84], 0x24
call fcn.00497280
mov edi, eax
add esp, 4
mov dword [esp + 0x58], edi
xor ebx, ebx
nop
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x24]
push edx
push eax
mov ecx, esi
call fcn.0050b850
inc dword [esp + 0x20]
mov byte [edi + ebx], al
inc ebx
cmp ebx, 0x24
jl 0x4ebb70
mov ecx, dword [esi + 0x24]
sar ecx, 8
mov byte [edi + 0x22], cl
mov dl, byte [esi + 0x24]
mov byte [edi + 0x23], dl
movsx eax, byte [0x5c9315]
movsx ecx, byte [str.hmtx]
movsx edx, byte [0x5c9316]
and eax, 0xff
shl ecx, 8
or eax, ecx
movsx ecx, byte [0x5c9317]
shl eax, 8
and edx, 0xff
or eax, edx
mov edx, dword [esi + 0x18]
and ecx, 0xff
shl eax, 8
or eax, ecx
xor ecx, ecx
test edx, edx
jle 0x4ebbf1
mov edi, dword [esi + 0x14]
cmp dword [edi], eax
je 0x4ebbf4
inc ecx
add edi, 0x14
cmp ecx, edx
jl 0x4ebbe5
or ecx, 0xffffffff
mov eax, dword [esi + 0x14]
lea edx, [ecx + ecx*4]
mov ebx, dword [eax + edx*4 + 8]
mov eax, dword [esi + 0x24]
add eax, eax
add eax, eax
push eax
mov dword [esp + 0x88], eax
call fcn.00497280
mov dword [esp + 0x34], eax
xor eax, eax
add esp, 4
cmp dword [esp + 0x78], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], eax
jle 0x4ebc87
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0x30]
add edi, 2
mov dword [esp + 0x78], eax
mov dword [esp + 0x20], eax
lea esp, [esp]
lea ecx, [esp + 0x24]
push ecx
push ebx
mov ecx, esi
call fcn.0050b8d0
lea edx, [esp + 0x24]
mov dword [esp + 0x38], eax
push edx
lea eax, [ebx + 2]
push eax
mov ecx, esi
call fcn.0050b8d0
mov ecx, dword [esp + 0x38]
mov edx, ecx
mov byte [edi - 1], cl
mov ecx, eax
sar edx, 8
sar ecx, 8
mov byte [edi - 2], dl
mov byte [edi], cl
mov byte [edi + 1], al
add ebx, 4
add edi, 4
sub dword [esp + 0x78], 1
jne 0x4ebc40
mov edx, dword [esp + 0x20]
cmp edx, dword [esi + 0x24]
jge 0x4ebcf6
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
sar eax, 8
mov dword [esp + 0x78], eax
mov eax, edx
lea edi, [ecx + eax*4 + 2]
lea edx, [esp + 0x24]
push edx
push ebx
mov ecx, esi
call fcn.0050b8d0
mov cl, byte [esp + 0x78]
mov dl, byte [esp + 0x38]
mov byte [edi - 2], cl
mov ecx, eax
mov byte [edi + 1], al
mov eax, dword [esp + 0x20]
sar ecx, 8
mov byte [edi - 1], dl
mov byte [edi], cl
inc eax
add ebx, 2
add edi, 4
cmp eax, dword [esi + 0x24]
mov dword [esp + 0x20], eax
jl 0x4ebca5
jmp 0x4ebcf6
mov dword [esp + 0x30], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], ebx
xor ebx, ebx
xor edi, edi
cmp dword [esp + 0x44], edi
push 0x14
setne bl
xor edx, edx
cmp dword [esp + 0x44], edi
setne dl
xor eax, eax
add ebx, edx
cmp dword [esp + 0x40], edi
setne al
xor ecx, ecx
add ebx, eax
cmp dword [esp + 0x2c], edi
setne cl
add ebx, ecx
sub ebx, dword [esp + 0x20]
sub ebx, dword [esp + 0x64]
add ebx, dword [esi + 0x18]
push ebx
call fcn.00497310
add esp, 8
cmp dword [esi + 0x18], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x20], edi
jle 0x4ebf90
mov edi, dword [esp + 0x1c]
xor eax, eax
mov dword [esp + 0x38], eax
add edi, 4
lea ebx, [ebx]
mov edx, dword [esi + 0x14]
add eax, edx
cmp dword [eax + 0x10], 0
jle 0x4ebf73
mov ecx, dword [eax]
test ecx, 0xe0000000
je 0x4ebf73
test ecx, 0xe00000
je 0x4ebf73
test ecx, 0xe000
je 0x4ebf73
test cl, 0xe0
je 0x4ebf73
mov dword [edi - 4], ecx
mov edx, dword [eax + 4]
mov dword [edi], edx
mov ecx, dword [eax + 8]
mov dword [edi + 4], ecx
mov edx, dword [eax + 0xc]
mov dword [edi + 8], edx
mov eax, dword [eax + 0x10]
mov dword [edi + 0xc], eax
mov ecx, dword [esi + 0x14]
mov eax, dword [esp + 0x38]
mov edx, dword [eax + ecx + 8]
mov dword [edi + 8], edx
mov ecx, dword [esi + 0x14]
mov edx, dword [eax + ecx + 0x10]
add eax, ecx
mov eax, dword [eax + 8]
push edx
push eax
mov ecx, esi
call fcn.0050ba10
test eax, eax
je 0x4ebe23
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x38]
lea eax, [edx + ecx]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 8]
add edx, dword [esi + 8]
push ecx
push edx
mov ecx, esi
call fcn.004eaf40
mov ecx, dword [esp + 0x38]
mov dword [edi], eax
mov eax, dword [esi + 0x14]
add eax, ecx
cmp dword [eax], 0x68656164
jne 0x4ebe23
mov eax, dword [eax + 8]
lea edx, [esp + 0x24]
push edx
add eax, 8
push eax
mov ecx, esi
call fcn.0050b910
sub dword [edi], eax
mov eax, dword [edi - 4]
cmp eax, 0x636d6170
jne 0x4ebec1
cmp dword [esp + 0x98], 0
je 0x4ebe46
mov eax, dword [esp + 0x50]
push eax
push ebp
jmp 0x4ebf60
cmp eax, 0x636d6170
jne 0x4ebec1
cmp dword [esp + 0x64], 0
je 0x4ebea7
mov eax, 0x637079
mov edx, 3
xor ecx, ecx
sub edx, eax
mov dword [esp + 0x78], edx
movzx edx, byte [eax - 1]
movzx ebp, byte [eax]
shl edx, 8
add edx, ebp
movzx ebp, byte [eax + 1]
shl edx, 8
add edx, ebp
movzx ebp, byte [eax + 2]
shl edx, 8
add ebp, ecx
lea ecx, [edx + ebp]
mov edx, dword [esp + 0x78]
add eax, 4
add edx, eax
cmp edx, 0x2c
jl 0x4ebe66
mov ebp, dword [esp + 0x5c]
mov dword [edi], ecx
mov dword [edi + 0xc], 0x2c
jmp 0x4ebf6c
cmp eax, 0x636d6170
jne 0x4ebec1
cmp dword [esp + 0x68], 0
je 0x4ebec1
mov eax, dword [esp + 0x7c]
mov dword [edi + 0xc], eax
jmp 0x4ebf6c
cmp eax, 0x6c6f6361
jne 0x4ebeeb
cmp dword [esp + 0x18], 0
je 0x4ebeeb
mov edx, dword [esi + 0x24]
mov eax, dword [esp + 0x6c]
xor ecx, ecx
cmp dword [esi + 0x28], ecx
setne cl
inc edx
lea ecx, [ecx + ecx + 2]
imul ecx, edx
mov dword [edi + 0xc], ecx
jmp 0x4ebf6a
cmp eax, 0x676c7966
jne 0x4ebf08
cmp dword [esp + 0x18], 0
je 0x4ebf08
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x70]
mov dword [edi + 0xc], ecx
mov dword [edi], edx
jmp 0x4ebf6c
cmp eax, 0x6e616d65
jne 0x4ebf28
cmp dword [esp + 0x94], 0
je 0x4ebf28
mov eax, dword [esp + 0x74]
push eax
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x50]
push eax
jmp 0x4ebf63
cmp eax, 0x68686561
jne 0x4ebf45
cmp dword [esp + 0x48], 0
je 0x4ebf45
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
push eax
push ecx
jmp 0x4ebf60
cmp eax, 0x686d7478
jne 0x4ebf6c
cmp dword [esp + 0x48], 0
je 0x4ebf6c
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x30]
push eax
push edx
mov dword [edi + 0xc], eax
mov ecx, esi
call fcn.004eaf40
mov dword [edi], eax
inc dword [esp + 0x10]
add edi, 0x14
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
inc ecx
add eax, 0x14
cmp ecx, dword [esi + 0x18]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x38], eax
jl 0x4ebd60
cmp dword [esp + 0x28], 0
je 0x4ec022
cmp dword [esp + 0x98], 0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
lea eax, [eax + eax*4]
lea edi, [ecx + eax*4]
mov dword [esp + 0x20], edi
mov dword [edi], 0x636d6170
je 0x4ebfd6
mov edx, dword [esp + 0x50]
push edx
push ebp
mov ecx, esi
call fcn.004eaf40
mov dword [edi + 4], eax
mov eax, dword [esp + 0x50]
mov dword [edi + 0x10], eax
jmp 0x4ec01e
mov eax, 0x637079
mov edx, 3
xor ecx, ecx
sub edx, eax
movzx edi, byte [eax - 1]
movzx ebp, byte [eax]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 1]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 2]
shl edi, 8
add ebp, ecx
add eax, 4
lea ecx, [edi + ebp]
lea edi, [edx + eax]
cmp edi, 0x2c
jl 0x4ebfe4
mov eax, dword [esp + 0x20]
mov dword [eax + 4], ecx
mov dword [eax + 0x10], 0x2c
inc dword [esp + 0x10]
cmp dword [esp + 0x3c], 0
je 0x4ec0b4
cmp dword [esp + 0x94], 0
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
lea ecx, [eax + eax*4]
lea edi, [edx + ecx*4]
mov dword [esp + 0x20], edi
mov dword [edi], 0x6e616d65
je 0x4ec068
mov ebp, dword [esp + 0x74]
mov eax, dword [esp + 0x4c]
push ebp
push eax
mov ecx, esi
call fcn.004eaf40
mov dword [edi + 4], eax
mov dword [edi + 0x10], ebp
jmp 0x4ec0b0
mov eax, 0x637071
mov edx, 3
xor ecx, ecx
sub edx, eax
movzx edi, byte [eax - 1]
movzx ebp, byte [eax]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 1]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 2]
shl edi, 8
add ebp, ecx
add eax, 4
lea ecx, [edi + ebp]
lea edi, [edx + eax]
cmp edi, 8
jl 0x4ec076
mov eax, dword [esp + 0x20]
mov dword [eax + 4], ecx
mov dword [eax + 0x10], 8
inc dword [esp + 0x10]
cmp dword [esp + 0x40], 0
mov edx, dword [esp + 0x10]
je 0x4ec131
mov eax, dword [esp + 0x1c]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*4]
mov dword [esp + 0x20], eax
mov dword [eax], 0x706f7374
mov eax, 0x637051
mov edi, 3
xor ecx, ecx
sub edi, eax
mov dword [esp + 0x84], edi
jmp 0x4ec0f0
movzx edi, byte [eax - 1]
movzx ebp, byte [eax]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 1]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 2]
shl edi, 8
add ebp, ecx
lea ecx, [edi + ebp]
mov edi, dword [esp + 0x84]
add eax, 4
add edi, eax
cmp edi, 0x20
jl 0x4ec0f0
mov eax, dword [esp + 0x20]
mov dword [eax + 4], ecx
mov dword [eax + 0x10], 0x20
inc edx
cmp dword [esp + 0x44], 0
je 0x4ec1b2
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x1c]
lea eax, [edx + ecx*4]
mov dword [esp + 0x20], eax
mov dword [eax], 0x4f532f32
mov eax, 0x636ff9
mov edx, 3
xor ecx, ecx
sub edx, eax
lea ebx, [ebx]
movzx edi, byte [eax - 1]
movzx ebp, byte [eax]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 1]
shl edi, 8
add edi, ebp
movzx ebp, byte [eax + 2]
shl edi, 8
add ebp, ecx
add eax, 4
lea ecx, [edi + ebp]
lea edi, [edx + eax]
cmp edi, 0x56
jl 0x4ec160
movzx eax, byte [0x63704d]
movzx edx, byte [0x63704c]
shl eax, 0x10
shl edx, 0x18
or eax, edx
add ecx, eax
mov eax, dword [esp + 0x20]
mov dword [eax + 4], ecx
mov dword [eax + 0x10], 0x56
mov edi, dword [esp + 0x1c]
push 0x4eac10
push 0x14
push ebx
push edi
call dword [sym.imp.MSVCR90.dll_qsort]
mov ebp, ebx
shl ebp, 4
add esp, 0x10
lea eax, [ebp + 0xc]
mov dword [esp + 0x74], eax
test ebx, ebx
jle 0x4ec208
lea ecx, [edi + 0x10]
mov dword [esp + 0x84], ebx
mov dword [ecx - 8], eax
add eax, dword [ecx]
mov edx, eax
and edx, 3
je 0x4ec1f7
mov edi, 4
sub edi, edx
add eax, edi
add ecx, 0x14
sub dword [esp + 0x84], 1
jne 0x4ec1e2
mov eax, dword [esp + 0x74]
push eax
call fcn.00497280
mov edi, eax
mov edx, ebx
sar edx, 8
mov byte [edi + 4], dl
add esp, 4
or edx, 0xffffffff
mov dword [esp + 0x70], edi
mov byte [edi], 0
mov byte [edi + 1], 1
mov byte [edi + 2], 0
mov byte [edi + 3], 0
mov byte [edi + 5], bl
mov eax, ebx
test ebx, ebx
je 0x4ec245
lea ebx, [ebx]
inc edx
shr eax, 1
jne 0x4ec240
lea ecx, [edx + 4]
mov eax, 1
shl eax, cl
mov byte [edi + 9], dl
mov ecx, eax
shr ecx, 8
sub ebp, eax
mov byte [edi + 6], cl
mov byte [edi + 7], al
mov ecx, edx
mov eax, ebp
mov edx, eax
sar ecx, 8
shr edx, 8
mov byte [edi + 8], cl
mov byte [edi + 0xa], dl
mov byte [edi + 0xb], al
test ebx, ebx
jle 0x4ec310
mov ecx, dword [esp + 0x1c]
lea eax, [edi + 0xd]
add ecx, 8
mov edi, ebx
jmp 0x4ec290
movzx edx, byte [ecx - 5]
mov byte [eax - 1], dl
movzx edx, byte [ecx - 6]
mov byte [eax], dl
mov edx, dword [ecx - 8]
shr edx, 8
mov byte [eax + 1], dl
movzx edx, byte [ecx - 8]
mov byte [eax + 2], dl
movzx edx, byte [ecx - 1]
mov byte [eax + 3], dl
movzx edx, byte [ecx - 2]
mov byte [eax + 4], dl
mov edx, dword [ecx - 4]
shr edx, 8
mov byte [eax + 5], dl
movzx edx, byte [ecx - 4]
mov byte [eax + 6], dl
movzx edx, byte [ecx + 3]
mov byte [eax + 7], dl
movzx edx, byte [ecx + 2]
mov byte [eax + 8], dl
mov edx, dword [ecx]
sar edx, 8
mov byte [eax + 9], dl
movzx edx, byte [ecx]
mov byte [eax + 0xa], dl
movzx edx, byte [ecx + 0xb]
mov byte [eax + 0xb], dl
movzx edx, byte [ecx + 0xa]
mov byte [eax + 0xc], dl
mov edx, dword [ecx + 8]
sar edx, 8
mov byte [eax + 0xd], dl
movzx edx, byte [ecx + 8]
mov byte [eax + 0xe], dl
add eax, 0x10
add ecx, 0x14
sub edi, 1
jne 0x4ec290
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edi, dword [esp + 0x90]
mov ebp, dword [esp + 0x8c]
push eax
push ecx
push edi
call ebp
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
add esp, 0xc
push edx
push eax
mov ecx, esi
call fcn.004eaf40
test ebx, ebx
jle 0x4ec35a
mov ecx, dword [esp + 0x1c]
add ecx, 4
mov edx, ebx
nop
add eax, dword [ecx]
add ecx, 0x14
sub edx, 1
jne 0x4ec350
mov ecx, 0xb1b0afba
sub ecx, eax
mov dword [esp + 0x80], ecx
test ebx, ebx
jle 0x4ec797
mov ecx, dword [esp + 0x1c]
add ecx, 0x10
mov dword [esp + 0x14], ecx
mov dword [esp + 0x84], ebx
mov edx, dword [esp + 0x14]
mov eax, dword [edx - 0x10]
cmp eax, 0x68656164
jne 0x4ec430
mov ebx, edx
mov eax, dword [ebx]
mov ecx, dword [ebx - 4]
push eax
push ecx
mov ecx, esi
call fcn.0050ba10
test eax, eax
je 0x4ec400
mov edx, dword [esi + 8]
add edx, dword [ebx - 4]
push 8
push edx
push edi
call ebp
mov eax, dword [esp + 0x8c]
mov edx, eax
mov ecx, eax
shr ecx, 0x18
shr edx, 0x10
mov byte [esp + 0x60], cl
mov byte [esp + 0x61], dl
push 4
lea edx, [esp + 0x64]
mov ecx, eax
push edx
shr ecx, 8
push edi
mov byte [esp + 0x6e], cl
mov byte [esp + 0x6f], al
call ebp
mov eax, dword [ebx]
mov ecx, dword [esi + 8]
mov edx, dword [ebx - 4]
sub eax, 0xc
push eax
lea eax, [ecx + edx + 0xc]
push eax
push edi
call ebp
add esp, 0x24
jmp 0x4ec766
cmp dword [ebx], 0
mov dword [esp + 0x10], 0
jle 0x4ec766
push 1
push 0x57fab0
push edi
call ebp
mov eax, dword [esp + 0x1c]
inc eax
add esp, 0xc
cmp eax, dword [ebx]
mov dword [esp + 0x10], eax
jl 0x4ec411
jmp 0x4ec766
cmp eax, 0x636d6170
jne 0x4ec47d
cmp dword [esp + 0x98], 0
je 0x4ec458
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
push edx
push eax
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x636d6170
jne 0x4ec47d
cmp dword [esp + 0x28], 0
je 0x4ec47d
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
push edx
push 0x637078
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x6e616d65
jne 0x4ec4ca
cmp dword [esp + 0x94], 0
je 0x4ec4a5
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [esp + 0x4c]
push ecx
push edx
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x6e616d65
jne 0x4ec4ca
cmp dword [esp + 0x3c], 0
je 0x4ec4ca
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
push ecx
push 0x637070
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x706f7374
jne 0x4ec4ef
cmp dword [esp + 0x40], 0
je 0x4ec4ef
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
push eax
push 0x637050
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x4f532f32
jne 0x4ec514
cmp dword [esp + 0x44], 0
je 0x4ec514
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
push edx
push 0x636ff8
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x68686561
jne 0x4ec539
cmp dword [esp + 0x48], 0
je 0x4ec539
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [esp + 0x58]
push ecx
push edx
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x686d7478
jne 0x4ec55e
cmp dword [esp + 0x48], 0
je 0x4ec55e
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [esp + 0x30]
push ecx
push edx
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
cmp eax, 0x6c6f6361
jne 0x4ec5ed
cmp dword [esp + 0x18], 0
je 0x4ec5ed
cmp dword [esi + 0x24], 0
mov dword [esp + 0x10], 0
jl 0x4ec766
mov ebx, dword [esp + 0x34]
add ebx, 8
lea esp, [esp]
cmp dword [esi + 0x28], 0
je 0x4ec5b9
movzx eax, byte [ebx + 3]
mov byte [esp + 0x2c], al
mov cl, byte [ebx + 2]
mov byte [esp + 0x2d], cl
mov edx, dword [ebx]
sar edx, 8
mov byte [esp + 0x2e], dl
movzx eax, byte [ebx]
mov byte [esp + 0x2f], al
push 4
jmp 0x4ec5cc
mov edx, dword [ebx]
sar edx, 9
mov byte [esp + 0x2c], dl
mov eax, dword [ebx]
sar eax, 1
mov byte [esp + 0x2d], al
push 2
lea ecx, [esp + 0x30]
push ecx
push edi
call ebp
mov eax, dword [esp + 0x1c]
inc eax
add esp, 0xc
add ebx, 0x10
cmp eax, dword [esi + 0x24]
mov dword [esp + 0x10], eax
jle 0x4ec590
jmp 0x4ec766
cmp eax, 0x676c7966
jne 0x4ec719
cmp dword [esp + 0x18], 0
je 0x4ec719
movsx eax, byte [0x5c932d]
movsx edx, byte [str.glyf]
movsx ecx, byte [0x5c932e]
and eax, 0xff
shl edx, 8
or eax, edx
movsx edx, byte [0x5c932f]
shl eax, 8
and ecx, 0xff
or eax, ecx
and edx, 0xff
shl eax, 8
or eax, edx
mov edx, dword [esi + 0x18]
xor ecx, ecx
test edx, edx
jle 0x4ec65c
mov ebx, dword [esi + 0x14]
jmp 0x4ec650
cmp dword [ebx], eax
je 0x4ec65f
inc ecx
add ebx, 0x14
cmp ecx, edx
jl 0x4ec650
or ecx, 0xffffffff
cmp dword [esi + 0x24], 0
lea eax, [ecx + ecx*4]
mov ecx, dword [esi + 0x14]
mov edx, dword [ecx + eax*4 + 8]
mov dword [esp + 0x20], edx
mov dword [esp + 0x10], 0
jle 0x4ec766
mov eax, dword [esp + 0x34]
add eax, 0xc
mov dword [esp + 0x38], eax
lea ebx, [ebx]
mov ecx, dword [esp + 0x38]
mov ebx, dword [ecx]
test ebx, ebx
jle 0x4ec700
mov edx, ecx
mov eax, dword [edx - 8]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x7c], eax
add eax, ecx
push ebx
push eax
mov ecx, esi
call fcn.0050ba10
test eax, eax
je 0x4ec6cb
mov edx, dword [esi + 8]
add edx, dword [esp + 0x7c]
push ebx
add edx, dword [esp + 0x24]
push edx
push edi
call ebp
add esp, 0xc
jmp 0x4ec6e2
test ebx, ebx
jle 0x4ec6e2
nop
push 1
push 0x57fab0
push edi
call ebp
add esp, 0xc
sub ebx, 1
jne 0x4ec6d0
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
and eax, 3
je 0x4ec700
mov ecx, 4
sub ecx, eax
push ecx
push 0x5c9384
push edi
call ebp
add esp, 0xc
mov eax, dword [esp + 0x10]
add dword [esp + 0x38], 0x10
inc eax
cmp eax, dword [esi + 0x24]
mov dword [esp + 0x10], eax
jl 0x4ec690
jmp 0x4ec766
mov ebx, dword [esp + 0x14]
mov edx, dword [ebx]
mov eax, dword [ebx - 4]
push edx
push eax
mov ecx, esi
call fcn.0050ba10
test eax, eax
je 0x4ec741
mov edx, dword [esi + 8]
mov ecx, dword [ebx]
add edx, dword [ebx - 4]
push ecx
push edx
push edi
call ebp
add esp, 0xc
jmp 0x4ec766
mov eax, dword [esp + 0x14]
xor ebx, ebx
cmp dword [eax], ebx
jle 0x4ec766
jmp 0x4ec750
push 1
push 0x57fab0
push edi
call ebp
mov ecx, dword [esp + 0x20]
inc ebx
add esp, 0xc
cmp ebx, dword [ecx]
jl 0x4ec750
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
and eax, 3
je 0x4ec784
mov ecx, 4
sub ecx, eax
push ecx
push 0x5c9380
push edi
call ebp
add esp, 0xc
add dword [esp + 0x14], 0x14
sub dword [esp + 0x84], 1
jne 0x4ec382
mov edx, dword [esp + 0x30]
push edx
call fcn.00497230
mov eax, dword [esp + 0x5c]
push eax
call fcn.00497230
mov ecx, dword [esp + 0x64]
push ecx
call fcn.00497230
mov edx, dword [esp + 0x58]
push edx
call fcn.00497230
mov eax, dword [esp + 0x80]
push eax
call fcn.00497230
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00497230
add esp, 0x18
mov edx, dword [esp + 0x34]
push edx
call fcn.00497230
add esp, 4
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x78
ret 0x10