Function at 0x4c94b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
push ebx
push edi
mov eax, dword [ecx]
mov ebx, dword [ecx + 0x14]
lea edx, [edx + edx*2]
shl edx, 4
mov dword [ebp - 0x24], eax
add ebx, edx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
push 0
mov ecx, dword [ebx]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ecx
push 0x1a0
test eax, eax
je 0x4c94fe
push eax
call fcn.004e8e80
mov edi, eax
add esp, 0xc
mov dword [ebp - 0x10], edi
jmp 0x4c950b
call fcn.004f8720
add esp, 8
mov dword [ebp - 0x10], eax
mov edi, eax
test edi, edi
je 0x4c951f
push 0x1a0
push 0
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebx + 0x1c], edi
test edi, edi
je 0x4c9c86
or word [ebx + 0xa], 0x10
push esi
push 0x180
lea esi, [edi + 0x18]
push 0
push esi
call sub.msvcrt.dll_memset
mov ecx, dword [ebp - 0x24]
push 0x2b
push dword [ebp - 0x3c]
mov dword [edi], ecx
push edi
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
call fcn.00518af0
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4c9593
mov ebx, dword [ebp + 8]
nop word [eax + eax]
push esi
push edi
push ebx
call fcn.004c8940
add esp, 0xc
sub esi, 1
jns 0x4c9580
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x51], 0
jne 0x4c9c85
mov eax, dword [edi + 0xc]
or edx, 0xffffffff
mov esi, dword [edi + 0x14]
or ecx, 0xffffffff
sub eax, 1
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], esi
js 0x4c97d3
nop
mov eax, edx
or eax, ecx
je 0x4c97cd
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4c972e
push 0
push 0x198
push dword [ebp - 0x28]
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
call fcn.004e8e80
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4c9717
or word [esi + 0xa], 0x20
mov eax, 0x400
push 0x180
mov dword [esi + 0x1c], edi
xorps xmm0, xmm0
mov word [esi + 0xc], ax
lea esi, [edi + 0x18]
push 0
push esi
movlpd qword [ebp - 0x20], xmm0
call sub.msvcrt.dll_memset
mov ebx, dword [ebp + 0xc]
push 0x2c
mov eax, dword [ebx]
mov dword [edi], eax
mov eax, dword [ebp - 0x2c]
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
push dword [eax]
push edi
call fcn.00518af0
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4c9687
mov ebx, dword [ebp + 8]
push esi
push edi
push ebx
call fcn.004c8940
add esp, 0xc
sub esi, 1
jns 0x4c9674
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x28]
mov dword [edi + 4], ebx
cmp byte [eax + 0x51], 0
jne 0x4c96ed
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4c96ed
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov eax, dword [esi]
mov al, byte [eax]
cmp al, 0x31
je 0x4c96c5
cmp al, 0x35
jb 0x4c96b6
cmp al, 0x39
jbe 0x4c96c5
cmp al, 0x32
je 0x4c96c5
cmp al, 0x2d
je 0x4c96c5
cmp word [esi + 0xc], 0x40
jne 0x4c96e3
mov eax, dword [ebp - 0x24]
push dword [esi + 0x14]
add eax, 0x1e8
push eax
call fcn.00518aa0
mov ecx, dword [ebp - 0x1c]
add esp, 8
or ecx, eax
or ebx, edx
mov dword [ebp - 0x1c], ecx
add esi, 0x30
sub edi, 1
jne 0x4c96a6
jmp 0x4c96f3
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x18]
and edx, ecx
mov ecx, dword [ebp - 4]
mov esi, dword [ebp - 0x2c]
and ecx, ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], edi
jmp 0x4c97b8
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], edi
jmp 0x4c97b8
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4c97b8
mov eax, dword [ebp - 0x24]
push dword [esi + 0x14]
add eax, 0x1e8
push eax
call fcn.00518aa0
mov edi, eax
add esp, 8
movzx eax, word [esi + 0xa]
mov ebx, edx
test al, 2
je 0x4c9784
mov ecx, dword [esi + 0x10]
mov eax, dword [ebp - 0x10]
lea esi, [ecx + ecx*2]
mov ecx, dword [eax + 0x14]
add esi, esi
mov eax, dword [ebp - 0x24]
add eax, 0x1e8
push dword [ecx + esi*8 + 0x14]
push eax
call fcn.00518aa0
mov esi, dword [ebp - 0x2c]
add esp, 8
or edi, eax
or ebx, edx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
and edx, edi
movzx eax, word [esi + 0xc]
and ecx, ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
test al, 2
jne 0x4c97b2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], edi
jmp 0x4c97b8
and dword [ebp - 0x14], edi
and dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x34]
add esi, 0x30
dec eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], eax
test eax, eax
jns 0x4c95d0
mov ebx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x10]
mov dword [edi + 0x198], edx
mov eax, 0x200
or edx, ecx
mov dword [edi + 0x19c], ecx
mov word [ebx + 0xc], ax
je 0x4c99ae
mov eax, dword [ebp + 0xc]
mov byte [eax + 9], 1
cmp dword [edi + 0xc], 2
jne 0x4c99ae
mov ecx, dword [edi + 0x14]
xor edx, edx
xor ebx, ebx
nop dword [eax + eax]
mov eax, 0x400
cmp word [ecx + 0xc], ax
je 0x4c9824
xor edi, edi
test edx, edx
cmove edi, ecx
jmp 0x4c9835
mov eax, dword [ecx + 0x1c]
cmp edx, dword [eax + 0xc]
jge 0x4c9833
mov edi, dword [eax + 0x14]
add edi, ebx
jmp 0x4c9835
xor edi, edi
inc edx
mov dword [ebp - 0x2c], edi
add ebx, 0x30
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ebx
test edi, edi
je 0x4c99ab
xor edx, edx
xor ebx, ebx
jmp 0x4c9860
mov edi, dword [ebp - 0x2c]
jmp 0x4c9858
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0xc]
nop dword [eax + eax]
mov eax, dword [ebp - 0x10]
mov esi, 0x400
mov ecx, dword [eax + 0x14]
cmp word [ecx + 0x3c], si
lea eax, [ecx + 0x30]
je 0x4c987d
xor esi, esi
test edx, edx
cmove esi, eax
jmp 0x4c988e
mov esi, dword [eax + 0x1c]
cmp edx, dword [esi + 0xc]
jge 0x4c988c
mov esi, dword [esi + 0x14]
add esi, ebx
jmp 0x4c988e
xor esi, esi
inc edx
add ebx, 0x30
mov dword [ebp - 4], edx
mov dword [ebp - 0xc], ebx
test esi, esi
je 0x4c99a0
movzx ecx, word [edi + 0xc]
movzx edx, word [esi + 0xc]
mov eax, ecx
or eax, edx
movzx ebx, ax
test cl, 0x3e
je 0x4c9855
test dl, 0x3e
mov edx, dword [ebp - 4]
je 0x4c9858
mov eax, ebx
and eax, 0x1a
cmp ax, bx
je 0x4c98d0
mov eax, ebx
and eax, 0x26
cmp ax, bx
jne 0x4c9858
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0xc]
mov eax, dword [edi]
push dword [eax + 0xc]
push 0
call fcn.004edae0
mov edx, dword [ebp - 4]
add esp, 0x10
test eax, eax
jne 0x4c9858
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0x10]
mov eax, dword [edi]
push dword [eax + 0x10]
push 0
call fcn.004edae0
mov edx, dword [ebp - 4]
add esp, 0x10
test eax, eax
jne 0x4c9858
mov ecx, ebx
lea eax, [ecx - 1]
test ecx, eax
je 0x4c992b
test bl, 0x18
mov eax, 8
mov ebx, 0x20
cmovne ebx, eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [edi]
test eax, eax
je 0x4c9858
push 0
push 0
push eax
push ecx
call fcn.004ca180
mov edx, dword [ebp - 4]
mov edi, eax
add esp, 0x10
test edi, edi
je 0x4c9850
movzx esi, bx
mov edx, 0x35
cmp esi, 2
je 0x4c997d
xor ecx, ecx
nop dword [eax + eax]
inc ecx
mov eax, 2
shl eax, cl
inc edx
cmp esi, eax
jne 0x4c9970
mov ebx, dword [ebp + 0xc]
push 3
push edi
push ebx
mov byte [edi], dl
call fcn.00524610
push eax
push ebx
push dword [ebp + 8]
call fcn.004c8940
mov edi, dword [ebp - 0x2c]
add esp, 0x18
jmp 0x4c9855
mov edx, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x34]
jmp 0x4c9810
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x1c]
je 0x4c9c85
xor ebx, ebx
mov ecx, 0xffbf
or edx, 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], edx
jmp 0x4c99d3
mov edi, dword [ebp - 0x10]
test ebx, ebx
jne 0x4c9b28
mov eax, dword [ebp - 0x10]
mov edi, dword [edi + 0x14]
mov ebx, dword [eax + 0xc]
sub ebx, 1
mov dword [ebp - 0x38], ebx
js 0x4c9c85
and word [edi + 0xa], cx
mov eax, ebx
mov esi, dword [edi + 0x14]
mov dword [ebp - 0xc], eax
cmp esi, edx
je 0x4c9a44
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov edx, dword [ecx + 0x1ec]
test edx, edx
jle 0x4c9a21
add ecx, 0x1f0
cmp dword [ecx], esi
je 0x4c9a56
inc eax
add ecx, 4
cmp eax, edx
jl 0x4c9a15
xorps xmm0, xmm0
movlpd qword [ebp - 8], xmm0
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x14]
and edx, dword [ebp - 0x1c]
or ecx, edx
jne 0x4c9a6d
mov eax, dword [ebp - 0xc]
mov ecx, 0xffbf
mov edx, dword [ebp - 0x2c]
dec ebx
add edi, 0x30
mov dword [ebp - 0x38], ebx
test eax, eax
jg 0x4c99f0
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4c9a2f
mov eax, dword [edi]
mov edx, esi
mov ecx, dword [edi + 0x1c]
lea esi, [edi + 0xa]
mov edi, dword [ebp - 0x38]
mov ebx, 1
mov dword [ebp - 0xc], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 4], eax
nop dword [eax + eax]
test ebx, ebx
je 0x4c9b0b
cmp dword [esi + 0xa], edx
je 0x4c9aa3
mov eax, 0xffbf
and word [esi], ax
jmp 0x4c9afa
cmp dword [esi + 0x12], ecx
jne 0x4c9af8
cmp ecx, 0xfffffffe
jne 0x4c9ac5
push 0xffffffffffffffff
push eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
push dword [ebp - 0x30]
call fcn.004edae0
add esp, 0x10
test eax, eax
jne 0x4c9af8
mov eax, dword [esi - 0xa]
push dword [eax + 0x10]
call fcn.004ead80
movsx eax, al
mov dword [ebp - 0x38], eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
call fcn.004ead80
movsx ecx, al
add esp, 8
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4c9af2
cmp eax, ecx
jne 0x4c9af8
or word [esi], 0x40
jmp 0x4c9afa
xor ebx, ebx
mov ecx, dword [ebp - 0xc]
add esi, 0x30
sub edi, 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
jns 0x4c9a90
mov eax, dword [ebp - 0x34]
mov ecx, 0xffbf
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 2
jl 0x4c99d0
test ebx, ebx
je 0x4c9c85
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
xor eax, eax
mov edi, dword [ecx + 0xc]
sub edi, 1
mov esi, dword [ecx + 0x14]
js 0x4c9b99
nop word [eax + eax]
test byte [esi + 0xa], 0x40
je 0x4c9b79
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4c9b61
push 0
push 0
push eax
push dword [ebp - 0x28]
call fcn.004ca180
add esp, 0x10
jmp 0x4c9b63
xor eax, eax
push eax
mov eax, dword [ebp - 0x24]
push ebx
push dword [eax]
call fcn.004eeaf0
mov ecx, dword [esi]
mov ebx, eax
add esp, 0xc
mov eax, dword [ecx + 0xc]
add esi, 0x30
sub edi, 1
jns 0x4c9b40
test eax, eax
je 0x4c9b99
push 0
push 0
push eax
push dword [ebp - 0x28]
call fcn.004ca180
add esp, 0x10
mov edi, eax
jmp 0x4c9b9b
xor edi, edi
mov eax, dword [ebp - 0x30]
push 0
push 0x34
push dword [eax]
call fcn.004e8e80
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4c9c63
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x31
add esp, 0xc
mov word [esi + 0x22], ax
test edi, edi
je 0x4c9bdf
mov dword [esi + 0xc], edi
mov eax, dword [edi + 4]
and eax, 0x200104
or dword [esi + 4], eax
push esi
call fcn.004caed0
mov ecx, dword [ebp - 0x30]
add esp, 4
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4c9c04
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.004eab10
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push 3
push esi
mov eax, dword [ecx + 4]
and eax, 1
or dword [esi + 4], eax
movzx eax, word [ecx + 0x24]
mov dword [esi + 0x14], ebx
mov ebx, dword [ebp + 0xc]
push ebx
mov word [esi + 0x24], ax
call fcn.00524610
mov esi, eax
push esi
push ebx
push dword [ebp + 8]
call fcn.004c8940
mov eax, dword [ebx + 0x14]
lea edx, [esi + esi*2]
mov ecx, dword [ebp + 0x10]
add edx, edx
mov esi, dword [ebp - 0x40]
add esp, 0x18
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x14]
movzx eax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x14]
inc byte [esi + eax + 0xe]
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4c9c75
mov eax, dword [ebp - 0x30]
push edi
push dword [eax]
call fcn.004eddc0
add esp, 8
test ebx, ebx
je 0x4c9c85
push ebx
push dword [ebp - 0x28]
call fcn.004ca890
add esp, 8
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret