Function at 0x4f8ff0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x44
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
push ebx
push ebp
mov ebp, dword [eax]
mov ebx, dword [eax + 0x18]
lea edx, [edx + edx*2]
shl edx, 4
add ebx, edx
mov dword [esp + 0x24], ebp
mov ecx, dword [ebp]
push edi
mov dword [esp + 0x34], ecx
mov eax, dword [ebx]
mov ecx, dword [ecx]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], eax
push 0
push 0x1a8
test ecx, ecx
je 0x4f9046
push ecx
call fcn.0054aba0
mov edi, eax
add esp, 0xc
mov dword [esp + 0xc], edi
jmp 0x4f9054
call fcn.005660f0
add esp, 8
mov dword [esp + 0xc], eax
mov edi, eax
test edi, edi
je 0x4f98c5
push esi
push 0x1a8
push 0
push edi
call fcn.0042d620
or word [ebx + 0xa], 0x10
lea esi, [edi + 0x20]
push 0x180
push 0
push esi
mov dword [ebx + 0x18], edi
call fcn.0042d620
push 0x2b
push dword [esp + 0x60]
mov dword [edi], ebp
push edi
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x18], esi
call fcn.00595470
mov esi, dword [edi + 0xc]
add esp, 0x24
sub esi, 1
js 0x4f90d3
nop
push esi
push edi
push dword [esp + 0x60]
call fcn.004f7c40
add esp, 0xc
sub esi, 1
jns 0x4f90c0
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x57], 0
jne 0x4f9622
mov eax, dword [esp + 0x10]
or ecx, 0xffffffff
or edx, 0xffffffff
mov dword [esp + 0x18], ecx
or edi, 0xffffffff
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], edi
mov eax, dword [eax + 0xc]
sub eax, 1
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], 0x400
mov esi, dword [eax + 0x18]
mov dword [esp + 0x34], esi
js 0x4f935b
mov eax, ecx
or eax, edx
je 0x4f934f
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4f92a6
mov ebp, dword [esp + 0x30]
xorps xmm0, xmm0
push 0
push 0x1a0
push ebp
movlpd qword [esp + 0x28], xmm0
call fcn.0054aba0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4f9289
mov eax, dword [esp + 0x3c]
xorps xmm0, xmm0
or word [esi + 0xa], 0x20
push 0x180
mov dword [esi + 0x18], edi
mov word [esi + 0xc], ax
mov dword [esi + 0x14], 0xffffffff
lea esi, [edi + 0x20]
push 0
push esi
movlpd qword [esp + 0x30], xmm0
call fcn.0042d620
mov ebx, dword [esp + 0x68]
push 0x2c
mov eax, dword [ebx]
mov dword [edi], eax
mov eax, dword [esp + 0x44]
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x18], esi
push dword [eax]
push edi
call fcn.00595470
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4f91f3
nop dword [eax]
push esi
push edi
push dword [esp + 0x60]
call fcn.004f7c40
add esp, 0xc
sub esi, 1
jns 0x4f91e0
mov dword [edi + 4], ebx
cmp byte [ebp + 0x57], 0
jne 0x4f9254
mov esi, dword [edi + 0x18]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4f9254
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
nop
mov eax, dword [esi]
mov al, byte [eax]
cmp al, 0x31
je 0x4f9231
cmp al, 0x35
jb 0x4f9222
cmp al, 0x39
jbe 0x4f9231
jmp 0x4f922a
cmp al, 0x32
je 0x4f9231
cmp al, 0x2d
je 0x4f9231
cmp word [esi + 0xc], 0x40
jne 0x4f924a
mov eax, dword [esp + 0x2c]
push dword [esi + 0x14]
add eax, 0x1f0
push eax
call fcn.00594bb0
add esp, 8
or ebp, eax
or ebx, edx
add esi, 0x30
sub edi, 1
jne 0x4f9210
jmp 0x4f925c
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
and ecx, ebp
mov ebp, dword [esp + 0x20]
and edx, ebx
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x34]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x1c], ebx
jmp 0x4f9333
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x1c], ebx
jmp 0x4f9333
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4f9337
push dword [esi + 0x14]
add ebp, 0x1f0
push ebp
call fcn.00594bb0
mov edi, eax
add esp, 8
movzx eax, word [esi + 0xa]
mov ebx, edx
test al, 2
je 0x4f92f4
mov ecx, dword [esi + 0x10]
mov eax, dword [esp + 0x10]
lea esi, [ecx + ecx*2]
mov ecx, dword [eax + 0x18]
add esi, esi
push dword [ecx + esi*8 + 0x14]
push ebp
call fcn.00594bb0
mov esi, dword [esp + 0x3c]
add esp, 8
or edi, eax
or ebx, edx
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
and ecx, edi
movzx eax, word [esi + 0xc]
and edx, ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], edx
test al, 2
jne 0x4f932b
xorps xmm0, xmm0
movlpd qword [esp + 0x1c], xmm0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1c], eax
jmp 0x4f9333
and dword [esp + 0x1c], edi
and dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x40]
add esi, 0x30
dec eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x40], eax
test eax, eax
jns 0x4f9125
mov ebx, dword [esp + 0x48]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov dword [eax + 0x1a0], ecx
or ecx, edx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x1a4], edx
mov eax, 0x200
mov word [ebx + 0xc], ax
mov dword [ebx + 0x14], 0xffffffff
je 0x4f957f
mov eax, dword [esp + 0x5c]
mov byte [eax + 9], 1
cmp dword [ecx + 0xc], 2
jne 0x4f957f
xor ecx, ecx
xor edx, edx
lea edi, [ecx + 8]
jmp 0x4f93b0
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x40]
nop dword [eax + eax]
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x3c]
mov eax, dword [eax + 0x18]
cmp word [eax + 0xc], bp
je 0x4f93ca
xor ebp, ebp
test ecx, ecx
cmove ebp, eax
jmp 0x4f93db
mov eax, dword [eax + 0x18]
cmp ecx, dword [eax + 0xc]
jge 0x4f9577
mov ebp, dword [eax + 0x18]
add ebp, edx
inc ecx
add edx, 0x30
mov dword [esp + 0x40], ecx
mov dword [esp + 0x34], edx
test ebp, ebp
je 0x4f9577
xor ecx, ecx
xor edx, edx
jmp 0x4f9410
mov ecx, dword [esp + 0x14]
jmp 0x4f9410
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
jmp 0x4f9410
mov edi, 8
nop word [eax + eax]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x3c]
mov eax, dword [eax + 0x18]
add eax, 0x30
cmp word [eax + 0xc], bx
je 0x4f942d
xor esi, esi
test ecx, ecx
cmove esi, eax
jmp 0x4f943e
mov esi, dword [eax + 0x18]
cmp ecx, dword [esi + 0xc]
jge 0x4f93a0
mov esi, dword [esi + 0x18]
add esi, edx
inc ecx
add edx, 0x30
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
test esi, esi
je 0x4f93a0
movzx ecx, word [ebp + 0xc]
movzx edx, word [esi + 0xc]
mov eax, ecx
or eax, edx
movzx ebx, ax
mov al, byte [esi + 0xa]
or al, byte [ebp + 0xa]
js 0x4f93fb
test cl, 0x3e
mov ecx, dword [esp + 0x14]
je 0x4f93ff
test dl, 0x3e
mov edx, dword [esp + 0x18]
je 0x4f9410
mov eax, ebx
and eax, 0x1a
cmp ax, bx
je 0x4f948f
mov eax, ebx
and eax, 0x26
cmp ax, bx
jne 0x4f9410
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0xc]
mov eax, dword [ebp]
push dword [eax + 0xc]
push 0
call fcn.00550f00
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x4f9410
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0x10]
mov eax, dword [ebp]
push dword [eax + 0x10]
push 0
call fcn.00550f00
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x4f9410
mov ecx, ebx
lea eax, [ecx - 1]
test ecx, eax
je 0x4f94f1
test bl, 0x18
mov ebx, 0x20
cmovne ebx, edi
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [ebp]
test eax, eax
je 0x4f93f5
push 0
push 0
push eax
push ecx
call fcn.004fa110
mov ecx, dword [esp + 0x24]
mov edi, eax
mov edx, dword [esp + 0x28]
add esp, 0x10
test edi, edi
je 0x4f9405
movzx esi, bx
mov edx, 0x35
cmp esi, 2
je 0x4f954d
xor ecx, ecx
nop dword [eax]
inc ecx
mov eax, 2
shl eax, cl
inc edx
cmp esi, eax
jne 0x4f9540
mov ebx, dword [esp + 0x5c]
push 3
push edi
push ebx
mov byte [edi], dl
call fcn.005a63f0
push eax
push ebx
push dword [esp + 0x6c]
call fcn.004f7c40
mov ecx, dword [esp + 0x2c]
add esp, 0x18
mov edx, dword [esp + 0x18]
jmp 0x4f9405
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov eax, edi
or eax, dword [esp + 0x24]
je 0x4f9622
xor edi, edi
or edx, 0xffffffff
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], edi
test edi, edi
jne 0x4f96f7
mov ebx, dword [ecx + 0xc]
sub ebx, 1
mov ebp, dword [ecx + 0x18]
js 0x4f9622
mov ecx, 0xffbf
and word [ebp + 0xa], cx
lea esi, [ebp + 0xa]
mov edi, dword [ebp + 0x14]
cmp edi, edx
je 0x4f961a
mov ecx, dword [esp + 0x2c]
cmp dword [ecx + 0x1f8], edi
jne 0x4f95d3
mov ecx, 1
xor edx, edx
jmp 0x4f9605
mov edx, dword [ecx + 0x1f4]
mov eax, 1
cmp edx, eax
jle 0x4f95f4
add ecx, 0x1fc
cmp dword [ecx], edi
je 0x4f962a
inc eax
add ecx, 4
cmp eax, edx
jl 0x4f95e8
xorps xmm0, xmm0
movlpd qword [esp + 0x48], xmm0
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
and ecx, dword [esp + 0x1c]
and edx, dword [esp + 0x24]
or ecx, edx
jne 0x4f9641
mov edx, dword [esp + 0x3c]
mov ecx, 0xffbf
add ebp, 0x30
sub ebx, 1
jns 0x4f95b0
pop esi
pop edi
pop ebp
pop ebx
add esp, 0x44
ret
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4f9605
mov eax, dword [ebp]
mov edx, edi
mov ecx, dword [ebp + 0x18]
mov edi, 1
mov dword [esp + 0x48], ecx
mov dword [esp + 0x3c], edx
mov eax, dword [eax + 0xc]
mov dword [esp + 0x34], eax
nop dword [eax]
test edi, edi
je 0x4f96d9
cmp dword [esi + 0xa], edx
je 0x4f9673
mov eax, 0xffbf
and word [esi], ax
jmp 0x4f96c5
cmp dword [esi + 0xe], ecx
jne 0x4f96c3
cmp ecx, 0xfffffffe
jne 0x4f9696
push 0xffffffffffffffff
push eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
push dword [esp + 0x44]
call fcn.00550f00
add esp, 0x10
test eax, eax
jne 0x4f96c3
mov eax, dword [esi - 0xa]
push dword [eax + 0x10]
call fcn.0054da60
movsx ebp, al
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
call fcn.0054da60
add esp, 8
movsx eax, al
test ebp, ebp
je 0x4f96bd
cmp ebp, eax
jne 0x4f96c3
or word [esi], 0x40
jmp 0x4f96c5
xor edi, edi
mov ecx, dword [esp + 0x48]
add esi, 0x30
sub ebx, 1
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
jns 0x4f9660
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x40], eax
cmp eax, 2
jl 0x4f9598
test edi, edi
je 0x4f9622
mov ecx, dword [esp + 0x10]
xor esi, esi
xor eax, eax
mov ebx, dword [ecx + 0xc]
sub ebx, 1
mov edi, dword [ecx + 0x18]
js 0x4f97b2
nop
test byte [edi + 0xa], 0x40
je 0x4f978c
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4f9734
push 0
push 0
push eax
push dword [esp + 0x3c]
call fcn.004fa110
add esp, 0x10
mov edx, eax
jmp 0x4f9736
xor edx, edx
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
test esi, esi
jne 0x4f974f
push edx
push dword [ecx]
call fcn.00552530
add esp, 8
mov esi, eax
jmp 0x4f9787
mov eax, dword [esi]
lea ebp, [eax + 1]
cmp dword [esi + 4], ebp
jge 0x4f9769
push edx
push esi
push dword [ecx]
call fcn.00552470
add esp, 0xc
mov esi, eax
jmp 0x4f9787
movups xmm0, xmmword [0x61317c]
lea eax, [eax + eax*4]
mov dword [esi], ebp
lea ecx, [esi + eax*4]
mov eax, dword [0x61318c]
movups xmmword [ecx + 8], xmm0
mov dword [ecx + 0x18], eax
mov dword [ecx + 8], edx
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
add edi, 0x30
sub ebx, 1
jns 0x4f9710
test eax, eax
je 0x4f97b2
mov ebp, dword [esp + 0x30]
push 0
push 0
push eax
push ebp
call fcn.004fa110
add esp, 0x10
mov ebx, eax
jmp 0x4f97b8
mov ebp, dword [esp + 0x30]
xor ebx, ebx
mov eax, dword [esp + 0x38]
push 0
push 0x34
push dword [eax]
call fcn.0054aba0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4f9898
push 0x34
push 0
push edi
call fcn.0042d620
or eax, 0xffffffff
mov byte [edi], 0x31
add esp, 0xc
mov word [edi + 0x22], ax
mov dword [edi + 0x18], 1
lea ecx, [eax + 2]
test ebx, ebx
je 0x4f9814
mov dword [edi + 0xc], ebx
mov eax, dword [ebx + 4]
and eax, 0x400208
or dword [edi + 4], eax
mov eax, dword [ebx + 0x18]
cmp eax, ecx
jl 0x4f9814
lea ecx, [eax + 1]
mov dword [edi + 0x18], ecx
mov edx, dword [esp + 0x38]
mov eax, dword [edx]
mov eax, dword [eax + 0x84]
cmp ecx, eax
jle 0x4f9833
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push edx
call fcn.0054d2c0
add esp, 0xc
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx + 4]
and eax, 3
je 0x4f9848
or dword [edi + 4], eax
mov eax, dword [ecx + 0x24]
mov dword [edi + 0x24], eax
mov ebx, dword [esp + 0x5c]
push 3
push edi
push ebx
mov dword [edi + 0x14], esi
call fcn.005a63f0
mov esi, eax
push esi
push ebx
push dword [esp + 0x6c]
call fcn.004f7c40
mov eax, dword [ebx + 0x18]
lea edx, [esi + esi*2]
mov ecx, dword [esp + 0x78]
add edx, edx
mov esi, dword [esp + 0x68]
add esp, 0x18
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x18]
mov ax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x18]
inc byte [eax + esi + 0xe]
pop esi
pop edi
pop ebp
pop ebx
add esp, 0x44
ret
test ebx, ebx
je 0x4f98ab
mov eax, dword [esp + 0x38]
push ebx
push dword [eax]
call fcn.005514d0
add esp, 8
test esi, esi
je 0x4f9622
push esi
push ebp
call fcn.004fac60
add esp, 8
pop esi
pop edi
pop ebp
pop ebx
add esp, 0x44
ret
mov dword [ebx + 0x18], edi
pop edi
pop ebp
pop ebx
add esp, 0x44
ret