Function at 0x4d1867
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c
push ebx
mov ebx, ecx
xor ecx, ecx
push ebp
mov ebp, edx
push esi
mov esi, dword [esp + 0x5c]
mov edx, esi
mov dword [ebx + 4], ebp
mov dword [ebx + 8], esi
mov dword [ebx + 0x38], ecx
mov dword [ebx + 0x3c], ecx
push edi
mov dword [ebx + 0x40], ecx
mov ecx, ebp
push str.cmap
mov dword [esp + 0x2c], ebp
call fcn.004d16c0
mov edi, eax
mov dword [esp], str.loca
mov edx, esi
mov dword [esp + 0x28], edi
mov ecx, ebp
call fcn.004d16c0
mov edx, esi
mov dword [esp + 0x24], eax
mov ecx, ebp
mov dword [ebx + 0x10], eax
mov dword [esp], 0x50cde8
call fcn.004d16c0
mov edx, esi
mov dword [esp + 0x20], eax
mov ecx, ebp
mov dword [ebx + 0x14], eax
mov dword [esp], 0x50cdf0
call fcn.004d16c0
mov edx, esi
mov dword [esp + 0x14], eax
mov ecx, ebp
mov dword [ebx + 0x18], eax
mov dword [esp], str.hhea
call fcn.004d16c0
mov edx, esi
mov dword [esp + 0x1c], eax
mov ecx, ebp
mov dword [ebx + 0x1c], eax
mov dword [esp], str.hmtx
call fcn.004d16c0
mov edx, esi
mov dword [esp + 0x18], eax
mov ecx, ebp
mov dword [ebx + 0x20], eax
mov dword [esp], str.kern
call fcn.004d16c0
mov edx, esi
mov dword [ebx + 0x24], eax
mov ecx, ebp
mov dword [esp], str.GPOS
call fcn.004d16c0
mov dword [ebx + 0x28], eax
pop ecx
test edi, edi
je 0x4d1964
cmp dword [esp + 0x1c], 0
je 0x4d1964
cmp dword [esp + 0x18], 0
je 0x4d1964
cmp dword [esp + 0x14], 0
je 0x4d1964
cmp dword [esp + 0x10], 0
je 0x4d196e
cmp dword [esp + 0x20], 0
jne 0x4d1ba8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
xor edi, edi
mov dword [esp + 0x18], 2
push str.CFF
mov edx, esi
mov dword [esp + 0x18], edi
mov ecx, ebp
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], edi
call fcn.004d16c0
pop ecx
test eax, eax
je 0x4d1964
mov dword [ebx + 0x68], edi
lea esi, [ebx + 0x38]
mov dword [ebx + 0x6c], edi
lea ecx, [esp + 0x2c]
mov dword [ebx + 0x70], edi
add eax, ebp
mov dword [ebx + 0x74], edi
mov dword [ebx + 0x78], edi
mov dword [ebx + 0x7c], edi
mov dword [esi], eax
mov dword [esi + 4], edi
lea edi, [esp + 0x2c]
mov dword [esi + 8], 0x20000000
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x30]
lea edx, [edx + 2]
call fcn.004d1336
call fcn.004d131f
movzx ecx, al
mov eax, dword [esp + 0x34]
cmp ecx, eax
cmovle eax, ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x44]
push eax
call fcn.004d13a4
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x34]
call fcn.004d13a4
push ecx
mov esi, eax
mov edi, esp
lea eax, [esp + 0x50]
xor ecx, ecx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004d1598
mov esi, eax
lea edi, [esp + 0x48]
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004d13a4
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x44]
call fcn.004d13a4
mov esi, eax
lea edi, [esp + 0x5c]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x50]
lea esi, [esp + 0x60]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
inc esi
push esi
push 0x11
pop edx
call fcn.004d1557
lea eax, [esp + 0x38]
mov edx, 0x106
push eax
push esi
lea ecx, [esp + 0x60]
call fcn.004d1557
lea eax, [esp + 0x44]
mov edx, 0x124
push eax
push esi
lea ecx, [esp + 0x68]
call fcn.004d1557
lea eax, [esp + 0x40]
mov edx, 0x125
push eax
push esi
lea ecx, [esp + 0x70]
call fcn.004d1557
add esp, 0x2c
lea esi, [esp + 0x44]
mov edi, esp
lea eax, [esp + 0x5c]
sub esp, 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [esp + 0x44]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004d17ae
mov esi, eax
lea edi, [esp + 0x60]
add esp, 0x1c
cmp dword [esp + 0x18], 2
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x5c]
lea esi, [esp + 0x44]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x4d1964
cmp dword [esp + 0x14], 0
je 0x4d1964
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4d1b66
cmp dword [esp + 0x10], 0
je 0x4d1964
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jg 0x4d1b10
mov dword [esp + 0x30], eax
test eax, eax
jns 0x4d1b14
mov dword [esp + 0x30], ecx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x30]
call fcn.004d13a4
mov esi, eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
lea edi, [esp + 0x48]
sub eax, dword [esp + 0x14]
lea ecx, [esp + 0x30]
push eax
movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x58]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [esp + 0x50]
lea edi, [ebx + 0x68]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004d136d
mov esi, eax
lea edi, [esp + 0x50]
add esp, 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [esp + 0x44]
lea edi, [ebx + 0x74]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jg 0x4d1b7a
mov dword [esp + 0x30], eax
test eax, eax
jns 0x4d1b7e
mov dword [esp + 0x30], ecx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x30]
call fcn.004d13a4
mov esi, eax
lea edi, [esp + 0x48]
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x44]
lea esi, [esp + 0x44]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x24]
push 0x50ce20
mov edx, esi
mov ecx, ebp
call fcn.004d16c0
pop ecx
test eax, eax
je 0x4d1bcc
movzx ecx, byte [eax + ebp + 5]
movzx eax, byte [eax + ebp + 4]
shl eax, 8
add ecx, eax
jmp 0x4d1bd1
mov ecx, 0xffff
mov dword [ebx + 0xc], ecx
or dword [ebx + 0x2c], 0xffffffff
movzx ecx, byte [edi + ebp + 2]
movzx eax, byte [edi + ebp + 3]
and dword [ebx + 0x30], 0
shl ecx, 8
add eax, ecx
mov dword [esp + 0x24], eax
test eax, eax
je 0x4d1c3d
lea esi, [ebp + 5]
mov ebp, eax
add esi, edi
movzx ecx, byte [esi - 1]
movzx eax, byte [esi]
shl ecx, 8
add eax, ecx
je 0x4d1c24
cmp eax, 3
jne 0x4d1c31
movzx ecx, byte [esi + 1]
movzx eax, byte [esi + 2]
shl ecx, 8
add ecx, eax
sub ecx, 1
je 0x4d1c24
sub ecx, 9
jne 0x4d1c31
lea ecx, [esi + 3]
call fcn.004d162d
add eax, edi
mov dword [ebx + 0x30], eax
add esi, 8
sub ebp, 1
jne 0x4d1bfa
mov ebp, dword [esp + 0x28]
cmp dword [ebx + 0x30], 0
je 0x4d1964
mov ecx, dword [ebx + 0x14]
xor eax, eax
movzx edx, byte [ecx + ebp + 0x32]
movzx ecx, byte [ecx + ebp + 0x33]
shl edx, 8
add edx, ecx
inc eax
mov dword [ebx + 0x34], edx
jmp 0x4d1966