Function at 0x4cb0a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14c
push ebx
xor eax, eax
mov dword [esp + 0x54], edx
push esi
mov esi, dword [ebp + 0x10]
mov ebx, ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x68], eax
push edi
lea eax, [esi + esi]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x13c], eax
add eax, ecx
mov edi, eax
mov dword [esp + 0x154], eax
xor eax, eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], 0
mov dword [esp + 0x64], 0
lea eax, [edi - 2]
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x50], eax
test ebx, ebx
jne 0x4cb154
test edx, edx
mov edx, dword [ebp + 0xc]
jne 0x4cb157
test ecx, ecx
jne 0x4cb157
cmp edx, 0xfffffc19
jne 0x4cb157
cmp esi, edx
jne 0x4cb157
push ecx
push ecx
push ecx
push ecx
push ecx
xor edx, edx
call fcn.004c32b0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0xc]
test dword [ebp + 0x14], 0xe20f5a6f
je 0x4cb16c
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x4cc1bf
test ecx, ecx
je 0x4cc1bf
cmp dword [ebp + 0x18], 0
mov eax, dword [ebp + 0x1c]
jne 0x4cb18d
test eax, eax
jg 0x4cc1bf
test eax, eax
jns 0x4cb19d
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
js 0x4cc1b3
cmp esi, edx
jg 0x4cc1b3
mov ecx, dword [ebx]
cmp ecx, 0x50435245
je 0x4cb1d1
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0xc]
test al, 2
jne 0x4cb1e5
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0xbc], 1
test ecx, 0x8000000
je 0x4cb202
mov eax, 2
jmp 0x4cb20a
mov eax, ecx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xfc], eax
mov dword [esp + 0x140], 0xfc00
mov dword [esp + 0x144], 0xdc00
test ecx, 0x2000
jne 0x4cb25c
test esi, esi
jle 0x4cb25c
cmp esi, edx
jge 0x4cb25c
mov eax, dword [ebp + 8]
mov ecx, 0xfc00
mov ax, word [eax + esi*2]
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4cb25c
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0x18]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x74], 0x989680
lea eax, [ebx + eax*2]
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 0x1c]
mov dword [esp + 0x90], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebx + 0x20]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x78], 0x1770
mov dword [esp + 0x11c], 0
test edx, edx
je 0x4cb2f7
mov ecx, dword [edx]
test cl, 1
je 0x4cb2c4
mov eax, dword [edx + 4]
mov dword [esp + 0x60], eax
test cl, 2
je 0x4cb2d0
mov eax, dword [edx + 8]
mov dword [esp + 0x74], eax
test cl, 0x10
je 0x4cb2dc
mov eax, dword [edx + 0x14]
mov dword [esp + 0x78], eax
test cl, 4
je 0x4cb2eb
mov eax, dword [edx + 0xc]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x2c]
test cl, 8
je 0x4cb2f7
mov ebx, dword [edx + 0x10]
mov ecx, dword [esp + 0x18]
test ebx, ebx
mov edi, dword [esp + 0x18]
mov edx, 0x4d4350
cmovne edx, ebx
mov dword [esp + 0x108], esi
imul eax, dword [esp + 0x90]
mov ebx, dword [ecx + 8]
mov ecx, ebx
or ecx, dword [ebp + 0x14]
shr ecx, 4
and ecx, 1
mov esi, dword [ebp + 0x14]
add eax, dword [esp + 0x48]
mov dword [esp + 0x68], ecx
movzx ecx, word [edi + 0xc]
mov dword [esp + 0x38], ecx
lea eax, [edi + eax*2]
shr dword [esp + 0x38], 8
mov edi, dword [ebp + 8]
mov dword [esp + 0xe4], eax
mov eax, edi
mov dword [esp + 0xe8], eax
mov eax, dword [ebp + 0xc]
and dword [esp + 0x38], 1
mov dword [esp + 0x40], ebx
shr dword [esp + 0x40], 0x12
lea eax, [edi + eax*2]
and dword [esp + 0x40], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xec], eax
mov eax, ebx
shr eax, 5
and eax, 1
mov edi, dword [esp + 0x1c]
mov dword [esp + 0xc8], eax
mov eax, ebx
shr eax, 0x1d
and eax, 1
shr ecx, 0xc
mov dword [esp + 0xc4], eax
and ecx, 1
mov eax, ebx
mov dword [esp + 0xe0], 0
shr eax, 0x19
and eax, 1
mov dword [esp + 0xd4], 0
mov dword [esp + 0xc0], eax
mov eax, esi
shr eax, 7
and eax, 1
mov dword [esp + 0x124], 0
mov dword [esp + 0xb4], eax
mov eax, esi
shr eax, 8
and eax, 1
mov dword [esp + 0x120], 0
mov dword [esp + 0xb8], eax
mov eax, esi
shr eax, 0xa
and eax, 1
mov dword [esp + 0x118], 0
mov dword [esp + 0xcc], eax
mov eax, esi
shr eax, 0x1c
and eax, 1
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xd0], eax
lea eax, [edx + 0x100]
mov dword [esp + 0xa8], eax
lea eax, [edx + 0x340]
mov dword [esp + 0xac], eax
mov eax, esi
mov dword [esp + 0xa4], edx
and eax, 0x1800000
je 0x4cb4b7
cmp eax, 0x800000
je 0x4cb4aa
cmp eax, 0x1000000
jne 0x4cb550
mov dword [esp + 0xd8], 0
test esi, 0x700000
mov eax, esi
cmove eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x4cb542
je 0x4cb505
test eax, eax
je 0x4cb505
cmp eax, 0x100000
je 0x4cb4d0
cmp eax, 0x200000
jne 0x4cb550
mov eax, 0xa
jmp 0x4cb4d5
mov dword [esp + 0xd8], 1
jmp 0x4cb470
test ebx, 0x1800000
je 0x4cb465
mov eax, ebx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xd8], eax
jmp 0x4cb470
mov eax, 0xd
mov cx, word [esp + 0x9e]
mov esi, 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], esi
mov word [esp + 0x9c], ax
mov dword [esp + 0x20], ecx
jmp 0x4cb59b
mov ecx, 0xd0a
mov dword [esp + 0x88], 0
mov eax, ecx
mov esi, 2
sar eax, 8
movzx ecx, cl
movzx eax, al
mov dword [esp + 0x8c], esi
mov word [esp + 0x9c], ax
mov dword [esp + 0x20], ecx
mov word [esp + 0x9e], cx
jmp 0x4cb59b
cmp eax, 0x400000
je 0x4cb575
cmp eax, 0x500000
je 0x4cb55c
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov cx, word [esp + 0x9e]
mov dword [esp + 0x88], 2
mov dword [esp + 0x20], ecx
jmp 0x4cb58c
mov ax, word [esp + 0x9e]
mov dword [esp + 0x88], 1
mov dword [esp + 0x20], eax
mov esi, dword [esp + 0x8c]
mov ax, word [esp + 0x9c]
cmp dword [esp + 0xfc], 0
mov dword [esp + 0x14], eax
je 0x4cb5c4
mov ecx, dword [esp + 0x18]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x4cb5c4
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea ebx, [edx + edx*2]
lea ecx, [ebx + ebx]
mov dword [esp + 0x2c], ebx
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x18]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x4cb661
mov ecx, eax
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x4cb661
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x2c], eax
shl eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebx, eax
add esp, 4
mov dword [esp + 0x7c], ebx
test ebx, ebx
jne 0x4cb634
lea eax, [ebx - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ax, word [esp + 0x9e]
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x20], eax
mov ax, word [esp + 0x9c]
mov dword [esp + 0x58], 1
mov dword [esp + 0x24], ebx
mov dword [esp + 0x14], eax
jmp 0x4cb66e
mov eax, dword [ebp + 0x18]
mov ebx, eax
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x80], eax
mov dword [esp + 0xb0], 0
mov dword [esp + 0x104], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4cb721
mov ecx, dword [esp + 0x2c]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x18]
mov edx, ecx
movzx eax, word [eax + 0x10]
shl eax, 2
sub edx, eax
mov eax, dword [esp + 0x24]
add eax, 8
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x4cb6f1
nop dword [eax + eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x4cb6e0
mov ebx, dword [esp + 0x7c]
mov dword [ebx + 4], 0xffffffff
mov eax, dword [esp + 0x7c]
mov dword [eax], 0xffffffff
mov ax, word [esp + 0x9e]
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x20], eax
mov ax, word [esp + 0x9c]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x68], 0
jne 0x4cb880
mov edx, dword [esp + 0x18]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x4cb84b
movzx edx, word [edx + 0x14]
movzx ebx, dx
mov dword [esp + 0x34], ebx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x30], edx
movzx ecx, dx
test al, 0x20
je 0x4cb877
mov eax, 0xff
cmp dx, ax
ja 0x4cb814
movzx edx, byte [ebx + ecx]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x34]
cmp dx, 0x7f
ja 0x4cb818
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x138], eax
movzx eax, dx
lea edx, [ecx + 0xc]
mov dword [esp + 0x134], eax
movzx eax, word [edx]
mov dword [esp + 0x24], edx
test al, 0x40
je 0x4cb8cf
movzx ecx, word [ecx + 0x16]
mov dword [esp + 0x28], ecx
mov edi, dword [esp + 0x28]
movzx edi, di
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x64], 1
movzx ecx, cx
mov dword [esp + 0x24], edx
test al, al
jns 0x4cb8d3
mov eax, 0xff
cmp word [esp + 0x28], ax
ja 0x4cb890
movzx eax, byte [ebx + ecx]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x28], eax
cmp dx, 0x7f
jbe 0x4cb8d7
jmp 0x4cb894
mov edx, dword [esp + 0x34]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4e1170]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d4790]
mov ax, word [eax*8 + 0x4e0094]
add ax, dx
movzx eax, ax
mov dword [esp + 0x30], eax
jmp 0x4cb78d
cmp dword [esp + 0x38], 0
jne 0x4cb880
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4cb880
mov ebx, dword [esp + 0xa8]
xor edx, edx
test byte [eax + 4], 1
je 0x4cb870
add eax, 8
mov dword [esp + 0x6c], eax
xor eax, eax
jmp 0x4cb78d
mov edx, dword [esp + 0x34]
jmp 0x4cb789
mov ebx, dword [esp + 0xa8]
xor edx, edx
xor eax, eax
jmp 0x4cb78d
mov edx, dword [esp + 0x3c]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4e1170]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d4790]
mov ax, word [eax*8 + 0x4e0094]
add ax, dx
movzx eax, ax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
add eax, 0xc
mov dword [esp + 0x24], eax
jmp 0x4cb8d7
xor edx, edx
jmp 0x4cb8d7
mov edx, dword [esp + 0x3c]
movzx eax, dx
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x3c]
movzx eax, ax
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x40], 0
mov ebx, eax
je 0x4cba23
mov edx, dword [esp + 0xec]
mov ebx, edi
cmp edi, edx
jae 0x4cba23
mov edi, dword [esp + 0x88]
test edi, edi
je 0x4cb9d3
cmp ebx, edx
jae case.default.0x4cb9a5
movzx eax, word [ebx]
mov ecx, eax
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x4cb962
movzx ecx, word [ebx + 2]
and eax, 0x3ff
and ecx, 0x3ff
shl eax, 0xa
or eax, ecx
add eax, 0x10000
cmp edi, 2
jne 0x4cb994
cmp eax, 0xa
je case.0x4cb9a5.10
cmp eax, 0xd
jne case.default.0x4cb9a5
lea eax, [edx - 2]
cmp ebx, eax
jae case.0x4cb9a5.10
cmp word [ebx + 2], 0xa
mov esi, 2
je 0x4cb9bd
mov esi, 1
mov dword [esp + 0x8c], esi
mov eax, esi
jmp 0x4cb9cd
cmp eax, 0x85
ja 0x4cb9ac
je case.0x4cb9a5.10
add eax, 0xfffffff6
cmp eax, 3
ja case.default.0x4cb9a5
jmp dword [eax*4 + 0x4cc1cc]
sub eax, 0x2028
je case.0x4cb9a5.10
sub eax, 1
jne case.default.0x4cb9a5
mov esi, 1
mov dword [esp + 0x8c], esi
mov eax, 1
jmp 0x4cb9cd
xor eax, eax
test eax, eax
jne 0x4cba1f
jmp 0x4cb9f6
lea eax, [esi + esi]
mov ecx, edx
sub ecx, eax
cmp ebx, ecx
ja 0x4cb9f6
mov eax, dword [esp + 0x14]
cmp word [ebx], ax
jne 0x4cb9f6
cmp esi, 1
je 0x4cba1f
mov eax, dword [esp + 0x20]
cmp word [ebx + 2], ax
je 0x4cba1f
add ebx, 2
cmp ebx, dword [esp + 0x10]
jae 0x4cba17
mov ax, word [ebx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4cba17
add ebx, 2
cmp ebx, edx
jb 0x4cb926
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
and eax, 0x4000000
mov dword [esp + 0x44], eax
jne 0x4cbcb0
cmp dword [esp + 0x4c], 0
je 0x4cbaa5
cmp edi, ebx
jae 0x4cbcb8
mov eax, dword [esp + 0x134]
cmp ax, word [esp + 0x138]
je 0x4cba85
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
movzx eax, word [edi]
cmp ax, cx
je 0x4cbcb8
cmp ax, dx
je 0x4cbcb8
add edi, 2
cmp edi, ebx
jb 0x4cba64
jmp 0x4cbcb8
mov eax, dword [esp + 0x34]
nop dword [eax]
cmp word [edi], ax
je 0x4cbcb8
add edi, 2
cmp edi, ebx
jb 0x4cba90
jmp 0x4cbcb8
cmp dword [esp + 0x38], 0
je 0x4cbc6c
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0xe8]
add eax, ecx
cmp edi, eax
jbe 0x4cbcb8
cmp edi, ebx
jae 0x4cbc45
lea edx, [edi - 2]
lea eax, [edi - 4]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x44], eax
jmp 0x4cbae7
mov ecx, dword [esp + 0xe8]
cmp dword [esp + 0x88], 0
je 0x4cbbc7
cmp edi, ecx
jbe case.default.0x4cbb7b
mov eax, dword [esp + 0x1c]
movzx eax, word [eax]
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x4cbb17
mov eax, dword [esp + 0x44]
mov edx, eax
movzx ecx, word [eax]
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4cbb42
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x88], 2
jne 0x4cbb69
cmp ecx, 0xa
je case.0x4cbb7b.10
cmp ecx, 0xd
je case.0x4cbb7b.11
xor eax, eax
test eax, eax
jne 0x4cbc45
mov edx, dword [esp + 0x1c]
jmp 0x4cbbf3
cmp ecx, 0x85
ja 0x4cbba7
je case.0x4cbb7b.11
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4cbb7b
jmp dword [ecx*4 + 0x4cc1dc]
cmp edx, dword [esp + 0xe8]
jbe case.0x4cbb7b.11
cmp word [edx - 2], 0xd
mov esi, 2
je 0x4cbbb9
mov esi, 1
mov dword [esp + 0x8c], esi
mov eax, esi
jmp 0x4cbb58
sub ecx, 0x2028
je case.0x4cbb7b.11
sub ecx, 1
jne case.default.0x4cbb7b
mov esi, 1
mov dword [esp + 0x8c], esi
mov eax, 1
jmp 0x4cbb58
mov eax, dword [esp + 0xe8]
lea ecx, [esi + esi]
add eax, ecx
cmp edi, eax
jb 0x4cbbf3
mov eax, edi
sub eax, ecx
mov ecx, dword [esp + 0x14]
cmp word [eax], cx
jne 0x4cbbf3
cmp esi, 1
je 0x4cbc45
mov ecx, dword [esp + 0x20]
cmp word [eax + 2], cx
je 0x4cbc45
mov ecx, dword [esp + 0x44]
add edi, 2
add edx, 2
add ecx, 2
mov dword [esp + 0x1c], edx
mov dword [esp + 0x44], ecx
cmp edi, ebx
jae 0x4cbc45
mov ax, word [edi]
and ax, word [esp + 0x140]
cmp ax, word [esp + 0x144]
jne 0x4cbae0
add ecx, 2
add edi, 2
add edx, 2
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0x1c], edx
cmp edi, ebx
jb 0x4cbae7
cmp word [edi - 2], 0xd
jne 0x4cbcb8
mov eax, dword [esp + 0x88]
cmp eax, 1
je 0x4cbc5d
cmp eax, 2
jne 0x4cbcb8
cmp edi, ebx
jae 0x4cbcb8
cmp word [edi], 0xa
jne 0x4cbcb8
add edi, 2
jmp 0x4cbcb8
mov esi, dword [esp + 0x6c]
test esi, esi
je 0x4cbcb8
cmp edi, ebx
jae 0x4cbcb8
nop dword [eax + eax]
movzx edx, word [edi]
mov eax, 0xff
cmp edx, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + esi], al
jne 0x4cbcb8
add edi, 2
cmp edi, ebx
jb 0x4cbc80
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x4cbd70
cmp dword [esp + 0xfc], 0
jne 0x4cbd70
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x10]
test ecx, ecx
je 0x4cbce3
test byte [ecx + 4], 2
je 0x4cbce3
mov eax, esi
sub eax, edi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x4cbd43
cmp dword [esp + 0x64], 0
je 0x4cbd70
mov eax, esi
sub eax, edi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x4cbd70
mov eax, dword [esp + 0x4c]
lea ecx, [edi + eax*2]
cmp ecx, dword [esp + 0x50]
jbe 0x4cbd70
cmp ecx, esi
jae 0x4cbd43
mov eax, dword [esp + 0x148]
cmp ax, word [esp + 0x14c]
je 0x4cbd4a
nop
movzx eax, word [ecx]
mov ebx, ecx
add ecx, 2
mov dword [esp + 0x50], ebx
mov edx, eax
cmp ax, word [esp + 0x150]
je 0x4cbd6c
cmp dx, word [esp + 0x28]
je 0x4cbd6c
cmp ecx, esi
jb 0x4cbd20
xor ebx, ebx
jmp 0x4cbdfa
mov edx, dword [esp + 0x3c]
nop
mov ax, word [ecx]
mov ebx, ecx
add ecx, 2
mov dword [esp + 0x50], ebx
cmp ax, dx
je 0x4cbd6c
cmp ecx, esi
jb 0x4cbd50
xor ebx, ebx
jmp 0x4cbdfa
cmp ebx, esi
jae 0x4cbd43
mov edx, dword [esp + 0xe4]
lea eax, [esp + 0x70]
push 0
push 0
push eax
push 2
push edi
mov ecx, edi
mov dword [esp + 0x104], edi
mov dword [esp + 0x10c], edi
mov dword [esp + 0x84], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x114], 0
call fcn.004c32b0
add esp, 0x14
mov ebx, eax
cmp dword [esp + 0xd4], 0
je 0x4cbdda
mov eax, dword [esp + 0x54]
test eax, eax
cmove eax, dword [esp + 0xf8]
mov dword [esp + 0x54], eax
cmp ebx, 0xfffffc1d
jg 0x4cbe28
je 0x4cbe66
cmp ebx, 0xfffffc1a
jne 0x4cc03c
xor ebx, ebx
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x58], 0
je 0x4cbe0e
push dword [esp + 0x7c]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
test ebx, ebx
je 0x4cc0be
cmp ebx, 0xfffffff4
je 0x4cc0be
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ebx, 0xfffffc20
jg 0x4cbe5e
je 0x4cbe66
cmp ebx, 0xfffffc1e
je 0x4cbe51
cmp ebx, 0xfffffc1f
jne 0x4cbdf6
mov edx, edi
mov dword [esp + 0xe0], 1
jmp 0x4cbe94
mov edx, dword [esp + 0xf0]
cmp edx, edi
je 0x4cbe66
jmp 0x4cbe94
test ebx, ebx
jne 0x4cc037
mov eax, dword [esp + 0x10]
lea edx, [edi + 2]
mov dword [esp + 0xe0], 0
cmp edx, eax
jae 0x4cbe94
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4cbe94
add edx, 2
mov ax, word [esp + 0x9e]
xor ebx, ebx
mov dword [esp + 0x20], eax
mov ax, word [esp + 0x9c]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x40], ebx
je 0x4cbfbb
cmp dword [esp + 0x88], ebx
je 0x4cbf82
mov esi, dword [esp + 0xec]
cmp edi, esi
jae case.default.0x4cbf48
movzx ecx, word [edi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4cbeff
movzx eax, word [edi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x88], 2
jne 0x4cbf36
cmp ecx, 0xa
je case.0x4cbf48.10
cmp ecx, 0xd
jne case.default.0x4cbf48
lea eax, [esi - 2]
cmp edi, eax
jae case.0x4cbf48.10
cmp word [edi + 2], 0xa
mov esi, 2
je 0x4cbf61
mov esi, 1
mov dword [esp + 0x8c], esi
mov eax, esi
jmp 0x4cbf78
cmp ecx, 0x85
ja 0x4cbf4f
je case.0x4cbf48.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4cbf48
jmp dword [ecx*4 + 0x4cc1ec]
sub ecx, 0x2028
je case.0x4cbf48.10
sub ecx, 1
jne case.default.0x4cbf48
mov esi, 1
mov dword [esp + 0x8c], esi
mov eax, 1
jmp 0x4cbf78
mov esi, dword [esp + 0x8c]
xor eax, eax
test eax, eax
jne 0x4cbdf6
jmp 0x4cbfc2
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0xec]
lea eax, [esi + esi]
sub ecx, eax
cmp edi, ecx
ja 0x4cbfc2
mov eax, dword [esp + 0x14]
cmp word [edi], ax
jne 0x4cbfc2
cmp esi, 1
je 0x4cbdf6
mov eax, dword [esp + 0x20]
cmp word [edi + 2], ax
je 0x4cbdf6
jmp 0x4cbfc2
mov esi, dword [esp + 0x8c]
mov edi, edx
mov dword [esp + 0x1c], edi
cmp dword [esp + 0x68], ebx
jne 0x4cbdf6
mov eax, dword [esp + 0x10]
cmp edx, eax
ja 0x4cc0b7
cmp edx, dword [esp + 0x154]
jbe 0x4cc027
cmp word [edx - 2], 0xd
jne 0x4cc027
cmp edx, eax
jae 0x4cc027
cmp word [edx], 0xa
jne 0x4cc027
mov ecx, dword [esp + 0x24]
mov ebx, 0x800
test word [ecx], bx
jne 0x4cc027
mov eax, dword [esp + 0x88]
cmp eax, 1
je 0x4cc01c
cmp eax, 2
je 0x4cc01c
cmp esi, 2
jne 0x4cc023
lea edi, [edx + 2]
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x120], 0
jmp 0x4cb901
cmp ebx, 1
je 0x4cc048
cmp ebx, 0xfffffc19
jne 0x4cbdf6
cmp dword [esp + 0x58], 0
mov edi, dword [esp + 0x48]
je 0x4cc09e
mov esi, dword [esp + 0x7c]
cmp edi, 4
jl 0x4cc077
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xb0]
mov ecx, 1
cmp dword [esp + 0x100], edi
push esi
cmovg eax, ecx
mov dword [esp + 0xb4], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp dword [esp + 0xb0], 0
mov ecx, dword [esp + 0x100]
je 0x4cc110
cmp ecx, edi
jl 0x4cc110
xor esi, esi
jmp 0x4cc119
mov esi, eax
jmp 0x4cbdfa
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4cc0e5
cmp dword [ebp + 0x1c], 1
jle 0x4cc0de
sub eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
sub esi, dword [ebp + 8]
sar eax, 1
sar esi, 1
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov eax, 0xfffffff4
jmp 0x4cc0e8
or eax, 0xffffffff
mov edx, dword [esp + 0x5c]
test edx, edx
je 0x4cc1c4
test byte [edx], 0x20
je 0x4cc1c4
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x124]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x18]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp + 0x18]
sar eax, 1
cmp eax, edi
jg 0x4cc162
test edx, edx
je 0x4cc162
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [edx + ecx*4]
cmovg eax, dword [esp + 0x2c]
xor ebx, ebx
lea eax, [edx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, ebx
test ecx, ecx
je 0x4cc162
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x4cc16c
xor esi, esi
jmp 0x4cc191
mov eax, dword [esp + 0xf0]
sub eax, dword [esp + 0xe8]
sar eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xf4]
sub eax, dword [esp + 0xe8]
sar eax, 1
mov dword [edx + 4], eax
mov edx, dword [esp + 0x5c]
test edx, edx
je 0x4cc1aa
test byte [edx], 0x20
je 0x4cc1aa
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x120]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret