Function at 0x4c9cb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x154
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, ecx
mov dword [esp + 0x5c], edx
xor ecx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x60], ecx
mov ecx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
lea esi, [ecx + eax*2]
xor ecx, ecx
mov dword [esp + 0x60], ecx
lea ecx, [esi - 2]
mov dword [esp + 0x5c], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x28], esi
test ebx, ebx
jne 0x4c9d33
test edx, edx
jne 0x4c9d33
test ecx, ecx
jne 0x4c9d33
cmp edi, 0xfffffc19
jne 0x4c9d33
cmp eax, edi
jne 0x4c9d33
push ecx
push ecx
push ecx
push ecx
push ecx
call fcn.004c1fd0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x4c9d48
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x4cadcd
test ecx, ecx
je 0x4cadcd
cmp dword [ebp + 0x18], 0
mov edx, dword [ebp + 0x1c]
jne 0x4c9d69
test edx, edx
jg 0x4cadcd
test edx, edx
jns 0x4c9d79
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
js 0x4cadc1
cmp eax, edi
jg 0x4cadc1
mov ecx, dword [ebx]
cmp ecx, 0x50435245
je 0x4c9dad
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx edx, word [ebx + 0xc]
test dl, 2
jne 0x4c9dc2
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xc4], 1
test edx, 0x8000000
je 0x4c9ddf
mov ecx, 2
jmp 0x4c9de7
mov ecx, edx
shr ecx, 0xf
and ecx, 1
mov dword [esp + 0x50], ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x148], 0xfc00
mov dword [esp + 0x14c], 0xdc00
test edx, 0x2000
jne 0x4c9e3d
test eax, eax
jle 0x4c9e3d
cmp eax, edi
jge 0x4c9e3d
mov ecx, dword [ebp + 8]
mov ax, word [ecx + eax*2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4c9e3d
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0x18]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x7c], 0x989680
lea eax, [ebx + eax*2]
mov dword [esp + 0xa0], eax
movzx eax, word [ebx + 0x1c]
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebx + 0x20]
mov dword [esp + 0x18], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0x80], 0x1770
mov dword [esp + 0x124], 0
test edx, edx
je 0x4c9ede
mov ecx, dword [edx]
test cl, 1
je 0x4c9ea8
mov eax, dword [edx + 4]
mov dword [esp + 0x58], eax
test cl, 2
je 0x4c9eb4
mov eax, dword [edx + 8]
mov dword [esp + 0x7c], eax
test cl, 0x10
je 0x4c9ec3
mov eax, dword [edx + 0x14]
mov dword [esp + 0x80], eax
test cl, 4
je 0x4c9ed2
mov eax, dword [edx + 0xc]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x18]
test cl, 8
je 0x4c9ede
mov ebx, dword [edx + 0x10]
mov ecx, dword [esp + 0x14]
test ebx, ebx
mov edx, 0x4d3360
mov dword [esp + 0xe8], 0
cmovne edx, ebx
mov dword [esp + 0xdc], 0
imul eax, dword [esp + 0x98]
mov ebx, dword [ecx + 8]
mov esi, ebx
or esi, dword [ebp + 0x14]
shr esi, 4
and esi, 1
mov dword [esp + 0x4c], ebx
add eax, dword [esp + 0x54]
mov dword [esp + 0x74], esi
mov esi, ecx
shr dword [esp + 0x4c], 0x12
and dword [esp + 0x4c], 1
mov dword [esp + 0x12c], 0
movzx ecx, word [esi + 0xc]
lea eax, [esi + eax*2]
mov esi, dword [ebp + 8]
mov dword [esp + 0xec], eax
mov eax, esi
mov dword [esp + 0xf0], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x110], eax
lea eax, [esi + edi*2]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x2c], eax
mov eax, ebx
shr eax, 5
and eax, 1
mov edi, dword [ebp + 0x14]
mov dword [esp + 0xd0], eax
mov eax, ebx
shr eax, 0x1d
and eax, 1
mov esi, dword [esp + 0x28]
mov dword [esp + 0xcc], eax
mov eax, ebx
shr eax, 0x19
and eax, 1
mov dword [esp + 0x40], ecx
mov dword [esp + 0xc8], eax
mov eax, edi
shr eax, 7
and eax, 1
shr dword [esp + 0x40], 8
mov dword [esp + 0xbc], eax
mov eax, edi
shr eax, 8
and eax, 1
and dword [esp + 0x40], 1
mov dword [esp + 0xc0], eax
mov eax, edi
shr eax, 0xa
and eax, 1
shr ecx, 0xc
mov dword [esp + 0xd4], eax
and ecx, 1
mov eax, edi
mov dword [esp + 0x128], 0
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x120], 0
mov dword [esp + 0xd8], eax
lea eax, [edx + 0x100]
mov dword [esp + 0xb0], eax
lea eax, [edx + 0x340]
mov dword [esp + 0xb4], eax
mov eax, edi
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xac], edx
and eax, 0x1800000
je 0x4ca09c
cmp eax, str.uo2u
je 0x4ca08f
cmp eax, 0x1000000
jne 0x4ca135
mov dword [esp + 0xe0], 0
test edi, 0x700000
mov eax, edi
cmove eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x4ca127
je 0x4ca0ea
test eax, eax
je 0x4ca0ea
cmp eax, 0x100000
je 0x4ca0b5
cmp eax, 0x200000
jne 0x4ca135
mov eax, 0xa
jmp 0x4ca0ba
mov dword [esp + 0xe0], 1
jmp 0x4ca055
test ebx, 0x1800000
je 0x4ca04a
mov eax, ebx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xe0], eax
jmp 0x4ca055
mov eax, 0xd
mov cx, word [esp + 0xa6]
mov edi, 1
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], edi
mov word [esp + 0xa4], ax
mov dword [esp + 0x24], ecx
jmp 0x4ca180
mov ecx, 0xd0a
mov dword [esp + 0x90], 0
mov eax, ecx
mov edi, 2
sar eax, 8
movzx ecx, cl
movzx eax, al
mov dword [esp + 0x94], edi
mov word [esp + 0xa4], ax
mov dword [esp + 0x24], ecx
mov word [esp + 0xa6], cx
jmp 0x4ca180
cmp eax, 0x400000
je 0x4ca15a
cmp eax, section..rsrc
je 0x4ca141
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov cx, word [esp + 0xa6]
mov dword [esp + 0x90], 2
mov dword [esp + 0x24], ecx
jmp 0x4ca171
mov ax, word [esp + 0xa6]
mov dword [esp + 0x90], 1
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0x94]
mov ax, word [esp + 0xa4]
cmp dword [esp + 0x50], 0
mov dword [esp + 0x1c], eax
je 0x4ca1a6
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x4ca1a6
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea ebx, [edx + edx*2]
lea ecx, [ebx + ebx]
mov dword [esp + 0x20], ebx
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x14]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x4ca264
mov ecx, eax
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x4ca264
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x20], eax
shl eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebx, eax
add esp, 4
mov dword [esp + 0x84], ebx
test ebx, ebx
jne 0x4ca21d
lea eax, [ebx - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov dword [esp + 0x34], 1
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x8c], eax
jmp 0x4ca2b7
mov eax, dword [ebp + 0x18]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x8c], eax
test ebx, ebx
je 0x4ca332
mov eax, dword [esp + 0x14]
mov edi, ebx
movzx eax, word [eax + 0x10]
lea ecx, [edi + edx*4]
shl eax, 2
mov edx, ecx
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x4ca2f4
nop word [eax + eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x4ca2e0
mov ebx, dword [esp + 0x84]
mov dword [ebx + 4], 0xffffffff
mov eax, dword [esp + 0x84]
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x104]
mov edi, dword [esp + 0x94]
mov dword [esp + 0x50], eax
mov ax, word [esp + 0xa6]
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x74], 0
mov edx, 0xff
jne 0x4ca490
mov ebx, dword [esp + 0x14]
movzx eax, word [ebx + 0xc]
test al, 0x10
je 0x4ca45a
movzx ebx, word [ebx + 0x14]
movzx ecx, bx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x38], ebx
movzx ecx, cx
test al, 0x20
je 0x4ca484
cmp bx, dx
mov ebx, dword [esp + 0xb0]
mov edx, dword [esp + 0x3c]
ja 0x4ca427
movzx eax, byte [ebx + ecx]
mov dword [esp + 0x38], eax
mov eax, ecx
cmp dx, 0x7f
ja 0x4ca429
mov eax, dword [esp + 0x38]
movzx ecx, ax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0x14]
movzx eax, ax
lea edx, [ecx + 0xc]
mov dword [esp + 0x13c], eax
movzx eax, word [edx]
mov dword [esp + 0x18], edx
test al, 0x40
je 0x4ca4d2
movzx ecx, word [ecx + 0x16]
mov dword [esp + 0x44], ecx
movzx ecx, cx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x70], 1
movzx ecx, cx
mov dword [esp + 0x18], edx
test al, al
jns 0x4ca4d2
mov eax, 0xff
cmp word [esp + 0x44], ax
ja 0x4ca49e
movzx eax, byte [ebx + ecx]
mov edx, dword [esp + 0x14]
add edx, 0xc
mov dword [esp + 0x44], eax
cmp word [esp + 0x48], 0x7f
mov eax, ecx
mov dword [esp + 0x18], edx
jbe 0x4ca4d2
jmp 0x4ca4a0
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4e0180]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d37a0]
mov ax, word [eax*8 + 0x4df0a4]
add ax, dx
movzx eax, ax
mov dword [esp + 0x38], eax
jmp 0x4ca3a0
cmp dword [esp + 0x40], 0
jne 0x4ca490
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4ca490
test byte [eax + 4], 1
mov ebx, dword [esp + 0xb0]
je 0x4ca47d
add eax, 8
mov dword [esp + 0x68], eax
xor eax, eax
jmp 0x4ca3a0
mov ebx, dword [esp + 0xb0]
jmp 0x4ca39c
mov ebx, dword [esp + 0xb0]
xor eax, eax
jmp 0x4ca3a0
mov eax, ecx
shr eax, 7
and ecx, 0x7f
mov dword [esp + 0x18], edx
movzx eax, byte [eax + 0x4e0180]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4d37a0]
mov ax, word [eax*8 + 0x4df0a4]
add ax, word [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x158], eax
mov eax, dword [esp + 0x44]
movzx eax, ax
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x150], eax
mov eax, dword [ebp + 0x10]
add eax, eax
mov dword [esp + 0x144], eax
add eax, dword [ebp + 8]
mov dword [esp + 0x15c], eax
cmp dword [esp + 0x4c], 0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x30], ebx
je 0x4ca644
mov ebx, dword [esp + 0xf4]
mov edx, esi
cmp esi, ebx
jae 0x4ca63e
mov esi, dword [esp + 0x90]
nop dword [eax]
test esi, esi
je 0x4ca5ee
cmp edx, ebx
jae case.default.0x4ca5bf
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ca57b
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp esi, 2
jne 0x4ca5ad
cmp ecx, 0xa
je case.0x4ca5bf.10
cmp ecx, 0xd
jne case.default.0x4ca5bf
lea eax, [ebx - 2]
cmp edx, eax
jae case.0x4ca5bf.10
cmp word [edx + 2], 0xa
mov edi, 2
je 0x4ca5d8
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x4ca5e8
cmp ecx, 0x85
ja 0x4ca5c6
je case.0x4ca5bf.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4ca5bf
jmp dword [ecx*4 + 0x4caddc]
sub ecx, 0x2028
je case.0x4ca5bf.10
sub ecx, 1
jne case.default.0x4ca5bf
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x4ca5e8
xor eax, eax
test eax, eax
jne 0x4ca63a
jmp 0x4ca611
lea eax, [edi + edi]
mov ecx, ebx
sub ecx, eax
cmp edx, ecx
ja 0x4ca611
mov eax, dword [esp + 0x1c]
cmp word [edx], ax
jne 0x4ca611
cmp edi, 1
je 0x4ca63a
mov eax, dword [esp + 0x24]
cmp word [edx + 2], ax
je 0x4ca63a
add edx, 2
cmp edx, dword [esp + 0x2c]
jae 0x4ca632
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4ca632
add edx, 2
cmp edx, ebx
jb 0x4ca540
mov esi, dword [esp + 0x28]
mov ebx, edx
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
test eax, 0x4000000
jne 0x4ca8c4
test edx, edx
je 0x4ca6bc
cmp esi, ebx
jae 0x4ca8c4
mov eax, dword [esp + 0x13c]
cmp ax, word [esp + 0x140]
je 0x4ca6a3
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
movzx eax, word [esi]
cmp ax, cx
je 0x4ca8c0
cmp ax, dx
je 0x4ca8c0
add esi, 2
cmp esi, ebx
jb 0x4ca682
jmp 0x4ca8c0
mov eax, dword [esp + 0x3c]
cmp word [esi], ax
je 0x4ca8c4
add esi, 2
cmp esi, ebx
jb 0x4ca6a7
jmp 0x4ca8c4
cmp dword [esp + 0x40], 0
je 0x4ca86b
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0xf0]
add eax, edx
cmp esi, eax
jbe 0x4ca8c0
cmp esi, ebx
jae 0x4ca83c
lea ecx, [esi - 2]
mov dword [esp + 0x28], ecx
lea ebx, [esi - 4]
cmp dword [esp + 0x90], 0
je 0x4ca7cb
cmp esi, edx
jbe case.default.0x4ca770
movzx eax, word [ecx]
mov edx, ecx
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x4ca71f
movzx ecx, word [ebx]
mov edx, ebx
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ca74a
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x4ca75e
cmp ecx, 0xa
je case.0x4ca770.10
cmp ecx, 0xd
jmp 0x4ca7a7
cmp ecx, 0x85
ja 0x4ca79c
je case.0x4ca770.11
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4ca770
jmp dword [ecx*4 + 0x4cadec]
cmp edx, dword [esp + 0xf0]
jbe case.0x4ca770.11
cmp word [edx - 2], 0xd
mov edi, 2
je 0x4ca7ae
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x4ca7be
sub ecx, 0x2028
je case.0x4ca770.11
sub ecx, 1
jne case.default.0x4ca770
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x4ca7be
xor eax, eax
test eax, eax
jne 0x4ca838
mov edx, dword [esp + 0xf0]
jmp 0x4ca7f1
lea ecx, [edi + edi]
lea eax, [ecx + edx]
cmp esi, eax
jb 0x4ca7f1
mov eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x1c]
cmp word [eax], cx
jne 0x4ca7f1
cmp edi, 1
je 0x4ca838
mov ecx, dword [esp + 0x24]
cmp word [eax + 2], cx
je 0x4ca838
mov ecx, dword [esp + 0x28]
add esi, 2
add ecx, 2
add ebx, 2
mov dword [esp + 0x28], ecx
cmp esi, dword [esp + 0x2c]
jae 0x4ca838
mov ax, word [esi]
and ax, word [esp + 0x148]
cmp ax, word [esp + 0x14c]
jne 0x4ca6f1
add esi, 2
add ecx, 2
add ebx, 2
mov dword [esp + 0x28], ecx
cmp esi, dword [esp + 0x2c]
jb 0x4ca6f1
mov ebx, dword [esp + 0x2c]
cmp word [esi - 2], 0xd
jne 0x4ca8c0
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x4ca858
cmp eax, 2
jne 0x4ca8c0
cmp esi, ebx
jae 0x4ca8c0
cmp word [esi], 0xa
mov edx, dword [esp + 0x10]
jne 0x4ca8c4
add esi, 2
jmp 0x4ca8c4
cmp dword [esp + 0x68], 0
je 0x4ca8c4
cmp esi, ebx
jae 0x4ca8c4
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x34]
nop
movzx edx, word [esi]
mov dword [esp + 0x34], eax
cmp edx, 0xff
mov eax, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
mov ecx, dword [esp + 0x68]
test byte [edx + ecx], al
jne 0x4ca8bc
mov eax, dword [esp + 0x34]
add esi, 2
mov dword [esp + 0x34], eax
cmp esi, ebx
jb 0x4ca880
mov dword [esp + 0x20], edi
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x2c], edi
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
test eax, 0x4000000
jne 0x4ca996
cmp dword [esp + 0x50], 0
jne 0x4ca996
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x4ca909
test byte [ecx + 4], 2
je 0x4ca909
mov eax, edi
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x4caa16
cmp dword [esp + 0x70], 0
je 0x4ca996
mov eax, edi
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x4ca996
lea eax, [esi + edx*2]
cmp eax, dword [esp + 0x5c]
jbe 0x4ca996
cmp eax, edi
jae 0x4caa16
mov ecx, dword [esp + 0x150]
cmp cx, word [esp + 0x154]
je 0x4ca96e
movzx ecx, word [eax]
mov ebx, eax
add eax, 2
mov dword [esp + 0x5c], ebx
mov edx, ecx
cmp cx, word [esp + 0x158]
je 0x4ca98e
cmp dx, word [esp + 0x44]
je 0x4ca98e
cmp eax, edi
jb 0x4ca944
xor ebx, ebx
jmp 0x4cab75
mov edx, dword [esp + 0x48]
mov cx, word [eax]
mov ebx, eax
add eax, 2
mov dword [esp + 0x5c], ebx
cmp cx, dx
je 0x4ca98e
cmp eax, edi
jb 0x4ca972
xor ebx, ebx
jmp 0x4cab75
cmp ebx, edi
jae 0x4caa16
mov edx, dword [esp + 0xec]
lea eax, [esp + 0x78]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0x10c], esi
mov dword [esp + 0x114], esi
mov dword [esp + 0x8c], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x11c], 0
call fcn.004c1fd0
add esp, 0x14
mov ebx, eax
cmp dword [esp + 0xdc], 0
je 0x4caa00
mov eax, dword [esp + 0x60]
test eax, eax
cmove eax, dword [esp + 0x100]
mov dword [esp + 0x60], eax
cmp ebx, 0xfffffc1d
jg 0x4caa1d
je 0x4caa5f
cmp ebx, 0xfffffc1a
jne 0x4cac57
xor ebx, ebx
jmp 0x4cab75
cmp ebx, 0xfffffc20
jg 0x4caa57
je 0x4caa5f
cmp ebx, 0xfffffc1e
je 0x4caa4a
cmp ebx, 0xfffffc1f
jne 0x4cab75
mov edx, esi
mov dword [esp + 0xe8], 1
jmp 0x4caa89
mov edx, dword [esp + 0xf8]
cmp edx, esi
je 0x4caa5f
jmp 0x4caa89
test ebx, ebx
jne 0x4cac52
lea edx, [esi + 2]
mov dword [esp + 0xe8], 0
cmp edx, edi
jae 0x4caa89
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4caa89
add edx, 2
mov ax, word [esp + 0xa6]
xor ebx, ebx
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x4c], ebx
je 0x4cabd7
cmp dword [esp + 0x90], ebx
je 0x4caba6
mov edi, dword [esp + 0xf4]
cmp esi, edi
jae case.default.0x4cab3d
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4caaf4
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x4cab2b
cmp ecx, 0xa
je case.0x4cab3d.10
cmp ecx, 0xd
jne case.default.0x4cab3d
lea eax, [edi - 2]
cmp esi, eax
jae case.0x4cab3d.10
cmp word [esi + 2], 0xa
mov edi, 2
je 0x4cab56
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x4cab6d
cmp ecx, 0x85
ja 0x4cab44
je case.0x4cab3d.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x4cab3d
jmp dword [ecx*4 + 0x4cadfc]
sub ecx, 0x2028
je case.0x4cab3d.10
sub ecx, 1
jne case.default.0x4cab3d
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x4cab6d
mov edi, dword [esp + 0x94]
xor eax, eax
test eax, eax
je 0x4cabde
mov edi, dword [esp + 0x30]
cmp dword [esp + 0x34], 0
je 0x4cab8c
push dword [esp + 0x84]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
test ebx, ebx
je 0x4caccc
cmp ebx, 0xfffffff4
je 0x4caccc
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x94]
mov ecx, dword [esp + 0xf4]
lea eax, [edi + edi]
sub ecx, eax
cmp esi, ecx
ja 0x4cabde
mov eax, dword [esp + 0x1c]
cmp word [esi], ax
jne 0x4cabde
cmp edi, 1
je 0x4cab71
mov eax, dword [esp + 0x24]
cmp word [esi + 2], ax
je 0x4cab71
jmp 0x4cabde
mov edi, dword [esp + 0x94]
mov esi, edx
mov dword [esp + 0x28], esi
cmp dword [esp + 0x74], ebx
jne 0x4cab71
mov eax, dword [esp + 0x30]
cmp edx, eax
ja 0x4cab71
cmp edx, dword [esp + 0x15c]
jbe 0x4cac3b
cmp word [edx - 2], 0xd
jne 0x4cac3b
cmp edx, eax
jae 0x4cac3b
cmp word [edx], 0xa
jne 0x4cac3b
mov eax, dword [esp + 0x18]
mov ecx, 0x800
test word [eax], cx
jne 0x4cac3b
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x4cac34
cmp eax, 2
je 0x4cac34
cmp edi, 2
jne 0x4cac3b
lea esi, [edx + 2]
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x128], ebx
mov dword [esp + 0x50], eax
jmp 0x4ca512
cmp ebx, 1
je 0x4cac63
cmp ebx, 0xfffffc19
jne 0x4cab75
cmp dword [esp + 0x34], 0
mov edi, dword [esp + 0x54]
je 0x4cacb3
mov esi, dword [esp + 0x84]
cmp edi, 4
jl 0x4cac95
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [esp + 0x108], edi
jle 0x4caca9
mov dword [esp + 0xb8], 1
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp dword [esp + 0xb8], 0
mov ecx, dword [esp + 0x108]
je 0x4cad1e
cmp ecx, edi
jl 0x4cad1e
xor esi, esi
jmp 0x4cad27
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x4cacf3
cmp dword [ebp + 0x1c], 1
jle 0x4cacec
sub ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x18]
sub edi, dword [ebp + 8]
sar ecx, 1
sar edi, 1
mov dword [eax], ecx
mov dword [eax + 4], edi
mov eax, 0xfffffff4
jmp 0x4cacf6
or eax, 0xffffffff
mov edx, dword [esp + 0x64]
test edx, edx
je 0x4cadd2
test byte [edx], 0x20
je 0x4cadd2
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x12c]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x14]
mov ebx, dword [ebp + 0x18]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, edi
jg 0x4cad70
test ebx, ebx
je 0x4cad70
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [ebx + ecx*4]
cmovg eax, dword [esp + 0x20]
xor edx, edx
lea eax, [ebx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, edx
test ecx, ecx
je 0x4cad70
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x4cad7a
xor esi, esi
jmp 0x4cad9f
mov eax, dword [esp + 0xf8]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx], eax
mov eax, dword [esp + 0xfc]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x64]
test edx, edx
je 0x4cadb8
test byte [edx], 0x20
je 0x4cadb8
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x128]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret