Function at 0x4f4ee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4c
mov eax, dword [edx]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x18], eax
mov eax, dword [eax]
lea ecx, [ecx + ecx*2]
shl ecx, 4
add ebx, ecx
mov dword [esp + 0x34], eax
push esi
mov eax, dword [eax]
mov dword [esp + 0x50], ecx
mov ecx, dword [ebx]
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ecx
push edi
test eax, eax
je 0x4f4f3f
push 0
push 0x1a0
mov ecx, eax
call fcn.00480920
mov edi, eax
add esp, 8
mov dword [esp + 0xc], edi
jmp 0x4f4fa1
cmp dword [0x70b3b8], 0
je 0x4f4f8d
mov eax, dword [0x71cc58]
test eax, eax
je 0x4f4f5b
push eax
call dword [0x70b408]
add esp, 4
lea edx, [esp + 0x30]
mov ecx, 0x1a0
call fcn.004802b0
mov eax, dword [0x71cc58]
test eax, eax
je 0x4f4f83
push eax
call dword [0x70b410]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x10], edi
jmp 0x4f4f9e
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc], edi
jmp 0x4f4fa1
push 0x1a0
call dword [0x70b3d8]
mov edi, eax
mov dword [esp + 0x10], eax
add esp, 4
test edi, edi
je 0x4f4fb5
push 0x1a0
push 0
push edi
call fcn.0063e3a0
add esp, 0xc
mov dword [ebx + 0x1c], edi
test edi, edi
je 0x4f566f
or word [ebx + 0xa], 0x10
lea esi, [edi + 0x18]
push 0x180
push 0
push esi
call fcn.0063e3a0
mov eax, dword [esp + 0x2c]
add esp, 0xc
mov edx, dword [esp + 0x50]
mov ecx, edi
mov dword [edi], eax
mov byte [edi + 9], 0
push 0x2b
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
call fcn.004f6690
mov esi, dword [edi + 0xc]
add esp, 4
sub esi, 1
js 0x4f502c
mov ebx, dword [esp + 0x38]
push esi
mov edx, edi
mov ecx, ebx
call fcn.004f5a40
add esp, 4
sub esi, 1
jns 0x4f5016
mov ebx, dword [esp + 0x4c]
mov eax, dword [esp + 0x24]
cmp byte [eax + 0x51], 0
jne 0x4f566f
mov esi, dword [esp + 0xc]
or edx, 0xffffffff
or ecx, 0xffffffff
mov dword [esp + 0x28], edx
or edi, 0xffffffff
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x10], edi
mov eax, dword [esi + 0xc]
mov esi, dword [esi + 0x14]
sub eax, 1
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x40], eax
mov dword [esp + 0x30], esi
js 0x4f52af
mov eax, edx
or eax, ecx
je 0x4f52a7
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4f51f6
mov ecx, dword [esp + 0x24]
xorps xmm0, xmm0
push 0
push 0x198
movlpd qword [esp + 0x18], xmm0
call fcn.00480920
mov edi, eax
add esp, 8
test edi, edi
je 0x4f51d9
or word [esi + 0xa], 0x20
mov eax, 0x400
push 0x180
mov dword [esi + 0x1c], edi
xorps xmm0, xmm0
mov word [esi + 0xc], ax
lea esi, [edi + 0x18]
push 0
push esi
movlpd qword [esp + 0x24], xmm0
call fcn.0063e3a0
mov ebx, dword [esp + 0x40]
add esp, 0xc
mov edx, dword [esp + 0x30]
mov ecx, edi
mov eax, dword [ebx]
mov dword [edi], eax
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
mov edx, dword [edx]
push 0x2c
call fcn.004f6690
mov esi, dword [edi + 0xc]
add esp, 4
sub esi, 1
js 0x4f5134
nop dword [eax]
mov ecx, dword [esp + 0x38]
mov edx, edi
push esi
call fcn.004f5a40
add esp, 4
sub esi, 1
jns 0x4f5120
mov eax, dword [esp + 0x24]
mov dword [edi + 4], ebx
cmp byte [eax + 0x51], 0
jne 0x4f51a4
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4f51a4
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
mov eax, dword [esi]
movzx eax, byte [eax]
cmp eax, 0x31
je 0x4f517c
cmp eax, 0x35
jb 0x4f516b
cmp eax, 0x39
jbe 0x4f517c
cmp eax, 0x32
je 0x4f517c
cmp eax, 0x2d
je 0x4f517c
cmp word [esi + 0xc], 0x40
jne 0x4f519a
mov ecx, dword [esp + 0x20]
mov edx, dword [esi + 0x14]
lea ecx, [ecx + 0x1e8]
call fcn.004f6c20
mov ecx, dword [esp + 0x18]
or ecx, eax
or ebx, edx
mov dword [esp + 0x18], ecx
add esi, 0x30
sub edi, 1
jne 0x4f5157
jmp 0x4f51ac
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov edi, dword [esp + 0x10]
and edx, ecx
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
and ecx, ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], edi
jmp 0x4f528d
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], edi
jmp 0x4f528d
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4f5289
mov ecx, dword [esp + 0x20]
mov edx, dword [esi + 0x14]
add ecx, 0x1e8
call fcn.004f6c20
mov edi, eax
mov ebx, edx
movzx eax, word [esi + 0xa]
test al, 2
je 0x4f524a
mov esi, dword [esi + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
lea esi, [esi + esi*2]
mov edx, dword [eax + 0x14]
add esi, esi
lea ecx, [ecx + 0x1e8]
mov edx, dword [edx + esi*8 + 0x14]
call fcn.004f6c20
mov esi, dword [esp + 0x30]
or edi, eax
or ebx, edx
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
and edx, edi
movzx eax, word [esi + 0xc]
and ecx, ebx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], ecx
test al, 2
jne 0x4f5281
xorps xmm0, xmm0
movlpd qword [esp + 0x10], xmm0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], edi
jmp 0x4f528d
and dword [esp + 0x10], edi
and dword [esp + 0x18], ebx
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x40]
add esi, 0x30
dec eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x40], eax
test eax, eax
jns 0x4f5072
jmp 0x4f52ab
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x4c]
mov esi, dword [esp + 0xc]
mov eax, 0x200
mov dword [esi + 0x198], edx
or edx, ecx
mov dword [esi + 0x19c], ecx
mov word [ebx + 0xc], ax
je 0x4f5390
mov eax, dword [esp + 0x34]
mov byte [eax + 9], 1
cmp dword [esi + 0xc], 2
jne 0x4f5390
xor ecx, ecx
xor edx, edx
nop word [eax + eax]
mov eax, dword [esi + 0x14]
mov edi, 0x400
cmp word [eax + 0xc], di
je 0x4f5307
xor ebx, ebx
test ecx, ecx
cmove ebx, eax
jmp 0x4f5318
mov ebx, dword [eax + 0x1c]
cmp ecx, dword [ebx + 0xc]
jge 0x4f5316
mov ebx, dword [ebx + 0x14]
add ebx, edx
jmp 0x4f5318
xor ebx, ebx
inc ecx
add edx, 0x30
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x40], edx
test ebx, ebx
je 0x4f538c
xor esi, esi
xor edi, edi
nop dword [eax]
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x14]
mov eax, 0x400
add ecx, 0x30
cmp word [ecx + 0xc], ax
je 0x4f534e
xor eax, eax
test esi, esi
cmove eax, ecx
jmp 0x4f535f
mov eax, dword [ecx + 0x1c]
cmp esi, dword [eax + 0xc]
jge 0x4f535d
mov eax, dword [eax + 0x14]
add eax, edi
jmp 0x4f535f
xor eax, eax
inc esi
add edi, 0x30
test eax, eax
je 0x4f537b
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
push eax
push ebx
call fcn.004f4dd0
add esp, 8
jmp 0x4f5330
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0xc]
jmp 0x4f52f0
mov edi, dword [esp + 0x10]
mov eax, edi
or eax, dword [esp + 0x18]
je 0x4f566f
xor eax, eax
mov edx, 0xffbf
or ecx, 0xffffffff
mov dword [esp + 0x4c], eax
mov dword [esp + 0x30], ecx
nop
test eax, eax
jne 0x4f5507
mov ebx, dword [esi + 0xc]
sub ebx, 1
mov edi, dword [esi + 0x14]
js 0x4f566f
and word [edi + 0xa], dx
mov edx, dword [edi + 0x14]
cmp edx, ecx
je 0x4f5415
mov ecx, dword [esp + 0x20]
xor eax, eax
mov esi, dword [ecx + 0x1ec]
test esi, esi
jle 0x4f53f4
add ecx, 0x1f0
cmp dword [ecx], edx
je 0x4f5428
inc eax
add ecx, 4
cmp eax, esi
jl 0x4f53e8
xorps xmm0, xmm0
movlpd qword [esp + 0x40], xmm0
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
and ecx, dword [esp + 0x10]
and edx, dword [esp + 0x18]
or ecx, edx
jne 0x4f543f
mov ecx, dword [esp + 0x30]
add edi, 0x30
sub ebx, 1
js 0x4f566f
mov edx, 0xffbf
jmp 0x4f53c7
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4f5405
mov eax, dword [edi + 0x14]
lea esi, [edi + 0xa]
mov ecx, dword [edi + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [edi]
mov dword [esp + 0x40], ecx
mov edx, dword [eax + 0xc]
mov eax, 1
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4f54e0
mov edi, dword [esp + 0x30]
cmp dword [esi + 0xa], edi
je 0x4f5479
mov ecx, 0xffbf
and word [esi], cx
jmp 0x4f54d0
cmp dword [esi + 0x12], ecx
jne 0x4f54ca
cmp ecx, 0xfffffffe
jne 0x4f549c
mov ecx, dword [esp + 0x3c]
push 0xffffffffffffffff
push edx
mov edx, dword [esi - 0xa]
mov edx, dword [edx + 0xc]
call fcn.004bf6a0
add esp, 8
test eax, eax
jne 0x4f54ca
mov ecx, dword [esi - 0xa]
mov ecx, dword [ecx + 0x10]
call fcn.004b7b40
mov ecx, dword [esi - 0xa]
movsx edi, al
mov ecx, dword [ecx + 0xc]
call fcn.004b7b40
movsx eax, al
test edi, edi
je 0x4f54c0
cmp edi, eax
jne 0x4f54ca
or word [esi], 0x40
mov eax, dword [esp + 0x2c]
jmp 0x4f54d0
xor eax, eax
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x40]
add esi, 0x30
sub ebx, 1
mov edx, dword [esp + 0x28]
jns 0x4f5462
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x30]
inc edx
mov esi, dword [esp + 0xc]
cmp edx, 2
mov dword [esp + 0x4c], edx
mov edx, 0xffbf
jl 0x4f53b0
test eax, eax
je 0x4f566f
mov eax, dword [esp + 0xc]
xor ebx, ebx
mov esi, dword [esi + 0x14]
xor edx, edx
mov edi, dword [eax + 0xc]
sub edi, 1
js 0x4f557b
nop word [eax + eax]
test byte [esi + 0xa], 0x40
je 0x4f555b
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
test edx, edx
je 0x4f5541
mov ecx, dword [esp + 0x24]
push 0
push 0
call fcn.004b8ed0
add esp, 8
jmp 0x4f5543
xor eax, eax
push eax
mov eax, dword [esp + 0x24]
mov edx, ebx
mov ecx, dword [eax]
call fcn.004b9ae0
mov ebx, eax
add esp, 4
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
add esi, 0x30
sub edi, 1
jns 0x4f5520
test edx, edx
je 0x4f557b
mov ecx, dword [esp + 0x24]
push 0
push 0
call fcn.004b8ed0
add esp, 8
mov edi, eax
jmp 0x4f557d
xor edi, edi
mov eax, dword [esp + 0x3c]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.00480920
mov esi, eax
add esp, 8
test esi, esi
je 0x4f564f
push 0x34
push 0
push esi
call fcn.0063e3a0
or eax, 0xffffffff
mov byte [esi], 0x31
add esp, 0xc
mov word [esi + 0x22], ax
test edi, edi
je 0x4f55c2
mov dword [esi + 0xc], edi
mov eax, dword [edi + 4]
and eax, 0x200104
or dword [esi + 4], eax
mov ecx, esi
call fcn.004b85e0
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4f55e6
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.00483a70
add esp, 0xc
mov ecx, dword [esp + 0x50]
mov edx, esi
push 3
mov eax, dword [ecx + 4]
and eax, 1
or dword [esi + 4], eax
movzx eax, word [ecx + 0x24]
mov dword [esi + 0x14], ebx
mov ebx, dword [esp + 0x38]
mov ecx, ebx
mov word [esi + 0x24], ax
call fcn.004f4680
mov ecx, dword [esp + 0x3c]
add esp, 4
mov esi, eax
mov edx, ebx
push esi
call fcn.004f5a40
mov eax, dword [ebx + 0x14]
lea edx, [esi + esi*2]
mov ecx, dword [ebp + 8]
add edx, edx
mov esi, dword [esp + 0x58]
add esp, 4
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x14]
movzx eax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x14]
inc byte [eax + esi + 0xe]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4f5660
mov eax, dword [esp + 0x3c]
mov edx, edi
mov ecx, dword [eax]
call fcn.004b8c80
test ebx, ebx
je 0x4f566f
mov ecx, dword [esp + 0x24]
mov edx, ebx
call fcn.004b9ef0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret