Function at 0x4bfa40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
mov eax, dword [edx]
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x24], eax
mov eax, dword [eax]
lea ecx, [ecx + ecx*2]
shl ecx, 4
push esi
add ebx, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [eax]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x30], edx
mov ecx, dword [ebx]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], ecx
push edi
push 0
push 0x1a0
test eax, eax
je 0x4bfa9c
mov ecx, eax
call fcn.00452440
mov edi, eax
mov dword [esp + 0x20], edi
jmp 0x4bfaa7
call fcn.00451e60
mov edi, eax
mov dword [esp + 0x20], eax
add esp, 8
test edi, edi
je 0x4bfabe
push 0x1a0
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebx + 0x1c], edi
test edi, edi
je 0x4c0255
or word [ebx + 0xa], 0x10
lea esi, [edi + 0x18]
push 0x180
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x38]
add esp, 0xc
mov edx, dword [esp + 0x48]
mov ecx, edi
mov dword [edi], eax
mov byte [edi + 9], 0
push 0x2b
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
call fcn.004c11d0
mov ecx, dword [esp + 0x40]
add esp, 4
mov edx, edi
call fcn.004c1470
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x51], 0
jne 0x4c0255
mov eax, dword [edi + 0xc]
or edx, 0xffffffff
mov esi, dword [edi + 0x14]
or ecx, 0xffffffff
sub eax, 1
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], esi
js 0x4bfd7d
mov eax, edx
or eax, ecx
je 0x4bfd75
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4bfcca
mov ecx, dword [esp + 0x30]
xorps xmm0, xmm0
push 0
push 0x198
movlpd qword [esp + 0x58], xmm0
call fcn.00452440
mov edi, eax
add esp, 8
test edi, edi
je 0x4bfcad
or word [esi + 0xa], 0x20
mov eax, 0x400
push 0x180
mov dword [esi + 0x1c], edi
xorps xmm0, xmm0
mov word [esi + 0xc], ax
lea esi, [edi + 0x18]
push 0
push esi
movlpd qword [esp + 0x2c], xmm0
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [esp + 0x40]
add esp, 0xc
mov edx, dword [esp + 0x38]
mov ecx, edi
mov eax, dword [ebx]
mov dword [edi], eax
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
mov edx, dword [edx]
push 0x2c
call fcn.004c11d0
mov ecx, dword [esp + 0x40]
add esp, 4
mov edx, edi
call fcn.004c1470
mov eax, dword [esp + 0x30]
mov dword [edi + 4], ebx
cmp byte [eax + 0x51], 0
jne 0x4bfc78
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4bfc78
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x20], ecx
mov eax, dword [esi]
mov al, byte [eax]
cmp al, 0x31
je 0x4bfc50
cmp al, 0x35
jb 0x4bfc41
cmp al, 0x39
jbe 0x4bfc50
cmp al, 0x32
je 0x4bfc50
cmp al, 0x2d
je 0x4bfc50
cmp word [esi + 0xc], 0x40
jne 0x4bfc6e
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x14]
lea ecx, [ecx + 0x1e8]
call fcn.004c1740
mov ecx, dword [esp + 0x20]
or ecx, eax
or ebx, edx
mov dword [esp + 0x20], ecx
add esi, 0x30
sub edi, 1
jne 0x4bfc31
jmp 0x4bfc80
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x50]
and edx, ecx
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x38]
and ecx, ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
jmp 0x4bfd5d
mov ebx, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
jmp 0x4bfd5d
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4bfd5d
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x14]
add ecx, 0x1e8
call fcn.004c1740
mov edi, eax
mov ebx, edx
movzx eax, word [esi + 0xa]
test al, 2
je 0x4bfd1e
mov esi, dword [esi + 0x10]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
lea esi, [esi + esi*2]
mov edx, dword [eax + 0x14]
add esi, esi
lea ecx, [ecx + 0x1e8]
mov edx, dword [edx + esi*8 + 0x14]
call fcn.004c1740
mov esi, dword [esp + 0x38]
or edi, eax
or ebx, edx
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
and edx, edi
movzx eax, word [esi + 0xc]
and ecx, ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
test al, 2
jne 0x4bfd55
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov eax, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
jmp 0x4bfd5d
and dword [esp + 0x1c], edi
and dword [esp + 0x20], ebx
mov eax, dword [esp + 0x44]
add esi, 0x30
dec eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x44], eax
test eax, eax
jns 0x4bfb61
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x18]
mov dword [edi + 0x198], edx
mov eax, 0x200
or edx, ecx
mov dword [edi + 0x19c], ecx
mov word [ebx + 0xc], ax
je 0x4bff5c
mov eax, dword [esp + 0x34]
mov byte [eax + 9], 1
cmp dword [edi + 0xc], 2
jne 0x4bff5c
mov ecx, dword [edi + 0x14]
xor edx, edx
xor ebx, ebx
mov eax, 0x400
cmp word [ecx + 0xc], ax
je 0x4bfdc7
xor edi, edi
test edx, edx
cmove edi, ecx
jmp 0x4bfdd8
mov eax, dword [ecx + 0x1c]
cmp edx, dword [eax + 0xc]
jge 0x4bfdd6
mov edi, dword [eax + 0x14]
add edi, ebx
jmp 0x4bfdd8
xor edi, edi
inc edx
mov dword [esp + 0x38], edi
add ebx, 0x30
mov dword [esp + 0x4c], edx
mov dword [esp + 0x44], ebx
test edi, edi
je 0x4bff58
xor edx, edx
xor ebx, ebx
jmp 0x4bfe04
mov edi, dword [esp + 0x38]
jmp 0x4bfe00
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, 0x400
mov ecx, dword [eax + 0x14]
cmp word [ecx + 0x3c], si
lea eax, [ecx + 0x30]
je 0x4bfe22
xor esi, esi
test edx, edx
cmove esi, eax
jmp 0x4bfe33
mov esi, dword [eax + 0x1c]
cmp edx, dword [esi + 0xc]
jge 0x4bfe31
mov esi, dword [esi + 0x14]
add esi, ebx
jmp 0x4bfe33
xor esi, esi
inc edx
add ebx, 0x30
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
test esi, esi
je 0x4bff4b
movzx ecx, word [edi + 0xc]
movzx edx, word [esi + 0xc]
mov eax, ecx
or eax, edx
movzx ebx, ax
test cl, 0x3e
je 0x4bfdfc
test dl, 0x3e
mov edx, dword [esp + 0x10]
je 0x4bfe00
mov eax, ebx
and eax, 0x1a
cmp ax, bx
je 0x4bfe78
mov eax, ebx
and eax, 0x26
cmp ax, bx
jne 0x4bfe00
mov eax, dword [esi]
xor ecx, ecx
mov edx, dword [edi]
push 0xffffffffffffffff
push dword [eax + 0xc]
mov edx, dword [edx + 0xc]
call fcn.0048cd10
mov edx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x4bfe00
mov eax, dword [esi]
xor ecx, ecx
mov edx, dword [edi]
push 0xffffffffffffffff
push dword [eax + 0x10]
mov edx, dword [edx + 0x10]
call fcn.0048cd10
mov edx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x4bfe00
mov ecx, ebx
lea eax, [ecx - 1]
test ecx, eax
je 0x4bfed5
test bl, 0x18
mov eax, 8
mov ebx, 0x20
cmovne ebx, eax
mov eax, dword [esp + 0x34]
mov edx, dword [edi]
mov eax, dword [eax]
mov eax, dword [eax]
test edx, edx
je 0x4bfdfc
mov ecx, dword [eax]
push 0
push 0
call fcn.00486e30
mov edx, dword [esp + 0x18]
mov edi, eax
add esp, 8
test edi, edi
je 0x4bfdf6
movzx esi, bx
mov edx, 0x35
cmp esi, 2
je 0x4bff1f
xor ecx, ecx
inc ecx
mov eax, 2
shl eax, cl
inc edx
cmp esi, eax
jne 0x4bff12
mov ecx, dword [esp + 0x34]
mov byte [edi], dl
mov edx, edi
push 3
call fcn.004bf2d0
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x3c]
push eax
call fcn.004c04c0
mov edi, dword [esp + 0x3c]
add esp, 4
jmp 0x4bfdfc
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x44]
jmp 0x4bfdb3
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
or eax, dword [esp + 0x20]
je 0x4c0255
xor ebx, ebx
mov ecx, 0xffbf
or edx, 0xffffffff
mov dword [esp + 0x14], ebx
mov dword [esp + 0x38], edx
jmp 0x4bff84
mov edi, dword [esp + 0x18]
test ebx, ebx
jne 0x4c00f7
mov eax, dword [esp + 0x18]
mov edi, dword [edi + 0x14]
mov ebx, dword [eax + 0xc]
sub ebx, 1
mov dword [esp + 0x44], ebx
js 0x4c0255
and word [edi + 0xa], cx
mov eax, ebx
mov esi, dword [edi + 0x14]
mov dword [esp + 0x4c], eax
cmp esi, edx
je 0x4c0006
mov ecx, dword [esp + 0x2c]
xor eax, eax
mov edx, dword [ecx + 0x1ec]
test edx, edx
jle 0x4bffdc
add ecx, 0x1f0
nop word [eax + eax]
cmp dword [ecx], esi
je 0x4c0019
inc eax
add ecx, 4
cmp eax, edx
jl 0x4bffd0
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
and ecx, dword [esp + 0x1c]
and edx, dword [esp + 0x20]
or ecx, edx
jne 0x4c0030
mov eax, dword [esp + 0x4c]
mov ecx, 0xffbf
mov edx, dword [esp + 0x38]
dec ebx
add edi, 0x30
mov dword [esp + 0x44], ebx
test eax, eax
jg 0x4bffa3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4bffed
mov eax, dword [edi]
mov edx, esi
mov ecx, dword [edi + 0x1c]
lea esi, [edi + 0xa]
mov edi, dword [esp + 0x44]
mov ebx, 1
mov dword [esp + 0x10], ecx
mov eax, dword [eax + 0xc]
mov dword [esp + 0x38], edx
mov dword [esp + 0x50], eax
test ebx, ebx
je 0x4c00d8
cmp dword [esi + 0xa], edx
je 0x4c0069
mov eax, 0xffbf
and word [esi], ax
jmp 0x4c00c0
cmp dword [esi + 0x12], ecx
jne 0x4c00be
cmp ecx, 0xfffffffe
jne 0x4c008c
mov edx, dword [esi - 0xa]
mov ecx, dword [esp + 0x40]
push 0xffffffffffffffff
push eax
mov edx, dword [edx + 0xc]
call fcn.0048cd10
add esp, 8
test eax, eax
jne 0x4c00be
mov ecx, dword [esi - 0xa]
mov ecx, dword [ecx + 0x10]
call fcn.004859d0
mov ecx, dword [esi - 0xa]
movsx eax, al
mov dword [esp + 0x4c], eax
mov ecx, dword [ecx + 0xc]
call fcn.004859d0
movsx ecx, al
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4c00b8
cmp eax, ecx
jne 0x4c00be
or word [esi], 0x40
jmp 0x4c00c0
xor ebx, ebx
mov ecx, dword [esp + 0x10]
add esi, 0x30
sub edi, 1
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x38]
jns 0x4c0052
mov eax, dword [esp + 0x14]
mov ecx, 0xffbf
inc eax
mov dword [esp + 0x14], eax
cmp eax, 2
jl 0x4bff80
test ebx, ebx
je 0x4c0255
mov eax, dword [esp + 0x18]
xor ebx, ebx
xor edx, edx
mov edi, dword [eax + 0xc]
sub edi, 1
mov esi, dword [eax + 0x14]
js 0x4c016b
nop word [eax + eax]
test byte [esi + 0xa], 0x40
je 0x4c014b
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
test edx, edx
je 0x4c0131
mov ecx, dword [esp + 0x30]
push 0
push 0
call fcn.00486e30
add esp, 8
jmp 0x4c0133
xor eax, eax
push eax
mov eax, dword [esp + 0x30]
mov edx, ebx
mov ecx, dword [eax]
call fcn.004879d0
mov ebx, eax
add esp, 4
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
add esi, 0x30
sub edi, 1
jns 0x4c0110
test edx, edx
je 0x4c016b
mov ecx, dword [esp + 0x30]
push 0
push 0
call fcn.00486e30
add esp, 8
mov edi, eax
jmp 0x4c016d
xor edi, edi
mov eax, dword [esp + 0x40]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.00452440
mov esi, eax
add esp, 8
test esi, esi
je 0x4c0235
push 0x34
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [esi], 0x31
or eax, 0xffffffff
mov edx, esi
mov word [esi + 0x22], ax
push 0
push edi
mov edi, dword [esp + 0x48]
mov ecx, dword [edi]
call fcn.00486740
mov eax, dword [edi]
add esp, 8
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4c01cc
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push edi
call fcn.00455550
add esp, 0xc
mov ecx, dword [esp + 0x48]
mov edx, esi
push 3
mov eax, dword [ecx + 4]
and eax, 1
or dword [esi + 4], eax
movzx eax, word [ecx + 0x24]
mov dword [esi + 0x14], ebx
mov ebx, dword [esp + 0x38]
mov ecx, ebx
mov word [esi + 0x24], ax
call fcn.004bf2d0
mov ecx, dword [esp + 0x40]
add esp, 4
mov esi, eax
mov edx, ebx
push esi
call fcn.004c04c0
mov eax, dword [ebx + 0x14]
lea edx, [esi + esi*2]
mov ecx, dword [ebp + 8]
add edx, edx
mov esi, dword [esp + 0x60]
add esp, 4
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x14]
movzx eax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x14]
inc byte [esi + eax + 0xe]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4c0246
mov eax, dword [esp + 0x40]
mov edx, edi
mov ecx, dword [eax]
call fcn.00486c40
test ebx, ebx
je 0x4c0255
mov ecx, dword [esp + 0x30]
mov edx, ebx
call fcn.00487d70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret