Function at 0x4c8c60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
push ebx
push edi
mov eax, dword [ecx]
mov ebx, dword [ecx + 0x14]
lea edx, [edx + edx*2]
shl edx, 4
mov dword [ebp - 0x24], eax
add ebx, edx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
push 0
mov ecx, dword [ebx]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ecx
push 0x1a0
test eax, eax
je 0x4c8cae
push eax
call fcn.004e8630
mov edi, eax
add esp, 0xc
mov dword [ebp - 0x10], edi
jmp 0x4c8cbb
call fcn.004f7ed0
add esp, 8
mov dword [ebp - 0x10], eax
mov edi, eax
test edi, edi
je 0x4c8ccf
push 0x1a0
push 0
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebx + 0x1c], edi
test edi, edi
je 0x4c9436
or word [ebx + 0xa], 0x10
push esi
push 0x180
lea esi, [edi + 0x18]
push 0
push esi
call sub.msvcrt.dll_memset
mov ecx, dword [ebp - 0x24]
push 0x2b
push dword [ebp - 0x3c]
mov dword [edi], ecx
push edi
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
call fcn.005182d0
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4c8d43
mov ebx, dword [ebp + 8]
nop word [eax + eax]
push esi
push edi
push ebx
call fcn.004c80f0
add esp, 0xc
sub esi, 1
jns 0x4c8d30
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x51], 0
jne 0x4c9435
mov eax, dword [edi + 0xc]
or edx, 0xffffffff
mov esi, dword [edi + 0x14]
or ecx, 0xffffffff
sub eax, 1
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], esi
js 0x4c8f83
nop
mov eax, edx
or eax, ecx
je 0x4c8f7d
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4c8ede
push 0
push 0x198
push dword [ebp - 0x28]
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
call fcn.004e8630
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4c8ec7
or word [esi + 0xa], 0x20
mov eax, 0x400
push 0x180
mov dword [esi + 0x1c], edi
xorps xmm0, xmm0
mov word [esi + 0xc], ax
lea esi, [edi + 0x18]
push 0
push esi
movlpd qword [ebp - 0x20], xmm0
call sub.msvcrt.dll_memset
mov ebx, dword [ebp + 0xc]
push 0x2c
mov eax, dword [ebx]
mov dword [edi], eax
mov eax, dword [ebp - 0x2c]
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
push dword [eax]
push edi
call fcn.005182d0
mov esi, dword [edi + 0xc]
add esp, 0x18
sub esi, 1
js 0x4c8e37
mov ebx, dword [ebp + 8]
push esi
push edi
push ebx
call fcn.004c80f0
add esp, 0xc
sub esi, 1
jns 0x4c8e24
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x28]
mov dword [edi + 4], ebx
cmp byte [eax + 0x51], 0
jne 0x4c8e9d
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4c8e9d
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov eax, dword [esi]
mov al, byte [eax]
cmp al, 0x31
je 0x4c8e75
cmp al, 0x35
jb 0x4c8e66
cmp al, 0x39
jbe 0x4c8e75
cmp al, 0x32
je 0x4c8e75
cmp al, 0x2d
je 0x4c8e75
cmp word [esi + 0xc], 0x40
jne 0x4c8e93
mov eax, dword [ebp - 0x24]
push dword [esi + 0x14]
add eax, 0x1e8
push eax
call fcn.00518280
mov ecx, dword [ebp - 0x1c]
add esp, 8
or ecx, eax
or ebx, edx
mov dword [ebp - 0x1c], ecx
add esi, 0x30
sub edi, 1
jne 0x4c8e56
jmp 0x4c8ea3
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x18]
and edx, ecx
mov ecx, dword [ebp - 4]
mov esi, dword [ebp - 0x2c]
and ecx, ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], edi
jmp 0x4c8f68
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], edi
jmp 0x4c8f68
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4c8f68
mov eax, dword [ebp - 0x24]
push dword [esi + 0x14]
add eax, 0x1e8
push eax
call fcn.00518280
mov edi, eax
add esp, 8
movzx eax, word [esi + 0xa]
mov ebx, edx
test al, 2
je 0x4c8f34
mov ecx, dword [esi + 0x10]
mov eax, dword [ebp - 0x10]
lea esi, [ecx + ecx*2]
mov ecx, dword [eax + 0x14]
add esi, esi
mov eax, dword [ebp - 0x24]
add eax, 0x1e8
push dword [ecx + esi*8 + 0x14]
push eax
call fcn.00518280
mov esi, dword [ebp - 0x2c]
add esp, 8
or edi, eax
or ebx, edx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
and edx, edi
movzx eax, word [esi + 0xc]
and ecx, ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ecx
test al, 2
jne 0x4c8f62
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], edi
jmp 0x4c8f68
and dword [ebp - 0x14], edi
and dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x34]
add esi, 0x30
dec eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], eax
test eax, eax
jns 0x4c8d80
mov ebx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x10]
mov dword [edi + 0x198], edx
mov eax, 0x200
or edx, ecx
mov dword [edi + 0x19c], ecx
mov word [ebx + 0xc], ax
je 0x4c915e
mov eax, dword [ebp + 0xc]
mov byte [eax + 9], 1
cmp dword [edi + 0xc], 2
jne 0x4c915e
mov ecx, dword [edi + 0x14]
xor edx, edx
xor ebx, ebx
nop dword [eax + eax]
mov eax, 0x400
cmp word [ecx + 0xc], ax
je 0x4c8fd4
xor edi, edi
test edx, edx
cmove edi, ecx
jmp 0x4c8fe5
mov eax, dword [ecx + 0x1c]
cmp edx, dword [eax + 0xc]
jge 0x4c8fe3
mov edi, dword [eax + 0x14]
add edi, ebx
jmp 0x4c8fe5
xor edi, edi
inc edx
mov dword [ebp - 0x2c], edi
add ebx, 0x30
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ebx
test edi, edi
je 0x4c915b
xor edx, edx
xor ebx, ebx
jmp 0x4c9010
mov edi, dword [ebp - 0x2c]
jmp 0x4c9008
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0xc]
nop dword [eax + eax]
mov eax, dword [ebp - 0x10]
mov esi, 0x400
mov ecx, dword [eax + 0x14]
cmp word [ecx + 0x3c], si
lea eax, [ecx + 0x30]
je 0x4c902d
xor esi, esi
test edx, edx
cmove esi, eax
jmp 0x4c903e
mov esi, dword [eax + 0x1c]
cmp edx, dword [esi + 0xc]
jge 0x4c903c
mov esi, dword [esi + 0x14]
add esi, ebx
jmp 0x4c903e
xor esi, esi
inc edx
add ebx, 0x30
mov dword [ebp - 4], edx
mov dword [ebp - 0xc], ebx
test esi, esi
je 0x4c9150
movzx ecx, word [edi + 0xc]
movzx edx, word [esi + 0xc]
mov eax, ecx
or eax, edx
movzx ebx, ax
test cl, 0x3e
je 0x4c9005
test dl, 0x3e
mov edx, dword [ebp - 4]
je 0x4c9008
mov eax, ebx
and eax, 0x1a
cmp ax, bx
je 0x4c9080
mov eax, ebx
and eax, 0x26
cmp ax, bx
jne 0x4c9008
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0xc]
mov eax, dword [edi]
push dword [eax + 0xc]
push 0
call fcn.004ed290
mov edx, dword [ebp - 4]
add esp, 0x10
test eax, eax
jne 0x4c9008
mov eax, dword [esi]
push 0xffffffffffffffff
push dword [eax + 0x10]
mov eax, dword [edi]
push dword [eax + 0x10]
push 0
call fcn.004ed290
mov edx, dword [ebp - 4]
add esp, 0x10
test eax, eax
jne 0x4c9008
mov ecx, ebx
lea eax, [ecx - 1]
test ecx, eax
je 0x4c90db
test bl, 0x18
mov eax, 8
mov ebx, 0x20
cmovne ebx, eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [edi]
test eax, eax
je 0x4c9008
push 0
push 0
push eax
push ecx
call fcn.004c9930
mov edx, dword [ebp - 4]
mov edi, eax
add esp, 0x10
test edi, edi
je 0x4c9000
movzx esi, bx
mov edx, 0x35
cmp esi, 2
je 0x4c912d
xor ecx, ecx
nop dword [eax + eax]
inc ecx
mov eax, 2
shl eax, cl
inc edx
cmp esi, eax
jne 0x4c9120
mov ebx, dword [ebp + 0xc]
push 3
push edi
push ebx
mov byte [edi], dl
call fcn.00523df0
push eax
push ebx
push dword [ebp + 8]
call fcn.004c80f0
mov edi, dword [ebp - 0x2c]
add esp, 0x18
jmp 0x4c9005
mov edx, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x34]
jmp 0x4c8fc0
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x1c]
je 0x4c9435
xor ebx, ebx
mov ecx, 0xffbf
or edx, 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], edx
jmp 0x4c9183
mov edi, dword [ebp - 0x10]
test ebx, ebx
jne 0x4c92d8
mov eax, dword [ebp - 0x10]
mov edi, dword [edi + 0x14]
mov ebx, dword [eax + 0xc]
sub ebx, 1
mov dword [ebp - 0x38], ebx
js 0x4c9435
and word [edi + 0xa], cx
mov eax, ebx
mov esi, dword [edi + 0x14]
mov dword [ebp - 0xc], eax
cmp esi, edx
je 0x4c91f4
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov edx, dword [ecx + 0x1ec]
test edx, edx
jle 0x4c91d1
add ecx, 0x1f0
cmp dword [ecx], esi
je 0x4c9206
inc eax
add ecx, 4
cmp eax, edx
jl 0x4c91c5
xorps xmm0, xmm0
movlpd qword [ebp - 8], xmm0
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x14]
and edx, dword [ebp - 0x1c]
or ecx, edx
jne 0x4c921d
mov eax, dword [ebp - 0xc]
mov ecx, 0xffbf
mov edx, dword [ebp - 0x2c]
dec ebx
add edi, 0x30
mov dword [ebp - 0x38], ebx
test eax, eax
jg 0x4c91a0
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4c91df
mov eax, dword [edi]
mov edx, esi
mov ecx, dword [edi + 0x1c]
lea esi, [edi + 0xa]
mov edi, dword [ebp - 0x38]
mov ebx, 1
mov dword [ebp - 0xc], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 4], eax
nop dword [eax + eax]
test ebx, ebx
je 0x4c92bb
cmp dword [esi + 0xa], edx
je 0x4c9253
mov eax, 0xffbf
and word [esi], ax
jmp 0x4c92aa
cmp dword [esi + 0x12], ecx
jne 0x4c92a8
cmp ecx, 0xfffffffe
jne 0x4c9275
push 0xffffffffffffffff
push eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
push dword [ebp - 0x30]
call fcn.004ed290
add esp, 0x10
test eax, eax
jne 0x4c92a8
mov eax, dword [esi - 0xa]
push dword [eax + 0x10]
call fcn.004ea530
movsx eax, al
mov dword [ebp - 0x38], eax
mov eax, dword [esi - 0xa]
push dword [eax + 0xc]
call fcn.004ea530
movsx ecx, al
add esp, 8
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4c92a2
cmp eax, ecx
jne 0x4c92a8
or word [esi], 0x40
jmp 0x4c92aa
xor ebx, ebx
mov ecx, dword [ebp - 0xc]
add esi, 0x30
sub edi, 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
jns 0x4c9240
mov eax, dword [ebp - 0x34]
mov ecx, 0xffbf
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 2
jl 0x4c9180
test ebx, ebx
je 0x4c9435
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
xor eax, eax
mov edi, dword [ecx + 0xc]
sub edi, 1
mov esi, dword [ecx + 0x14]
js 0x4c9349
nop word [eax + eax]
test byte [esi + 0xa], 0x40
je 0x4c9329
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4c9311
push 0
push 0
push eax
push dword [ebp - 0x28]
call fcn.004c9930
add esp, 0x10
jmp 0x4c9313
xor eax, eax
push eax
mov eax, dword [ebp - 0x24]
push ebx
push dword [eax]
call fcn.004ee2a0
mov ecx, dword [esi]
mov ebx, eax
add esp, 0xc
mov eax, dword [ecx + 0xc]
add esi, 0x30
sub edi, 1
jns 0x4c92f0
test eax, eax
je 0x4c9349
push 0
push 0
push eax
push dword [ebp - 0x28]
call fcn.004c9930
add esp, 0x10
mov edi, eax
jmp 0x4c934b
xor edi, edi
mov eax, dword [ebp - 0x30]
push 0
push 0x34
push dword [eax]
call fcn.004e8630
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4c9413
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x31
add esp, 0xc
mov word [esi + 0x22], ax
test edi, edi
je 0x4c938f
mov dword [esi + 0xc], edi
mov eax, dword [edi + 4]
and eax, 0x200104
or dword [esi + 4], eax
push esi
call fcn.004ca680
mov ecx, dword [ebp - 0x30]
add esp, 4
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4c93b4
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.004ea2c0
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push 3
push esi
mov eax, dword [ecx + 4]
and eax, 1
or dword [esi + 4], eax
movzx eax, word [ecx + 0x24]
mov dword [esi + 0x14], ebx
mov ebx, dword [ebp + 0xc]
push ebx
mov word [esi + 0x24], ax
call fcn.00523df0
mov esi, eax
push esi
push ebx
push dword [ebp + 8]
call fcn.004c80f0
mov eax, dword [ebx + 0x14]
lea edx, [esi + esi*2]
mov ecx, dword [ebp + 0x10]
add edx, edx
mov esi, dword [ebp - 0x40]
add esp, 0x18
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x14]
movzx eax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x14]
inc byte [esi + eax + 0xe]
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4c9425
mov eax, dword [ebp - 0x30]
push edi
push dword [eax]
call fcn.004ed570
add esp, 8
test ebx, ebx
je 0x4c9435
push ebx
push dword [ebp - 0x28]
call fcn.004ca040
add esp, 8
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret