Function at 0x4bc020
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
call 0x4bc02c
pop eax
mov ebx, ecx
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
mov ecx, dword [ecx + 8]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], ebx
inc eax
mov dword [esp + 0x24], eax
jmp 0x4bc077
cmp byte [esp + 0xc], 0
mov ebx, dword [esp + 8]
je 0x4bce54
cmp esi, ebp
je 0x4bc7b0
mov dword [esp], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 4], ecx
mov ecx, esi
mov ebx, esi
nop
movzx eax, byte [ebx]
test al, al
js 0x4bc0b0
lea esi, [ebx + 1]
cmp eax, 0xd
jbe 0x4bc120
jmp 0x4bc140
movzx edi, byte [ebx + 1]
mov edx, eax
and edx, 0x1f
and edi, 0x3f
cmp al, 0xdf
jbe 0x4bc0f0
movzx esi, byte [ebx + 2]
shl edi, 6
and esi, 0x3f
or esi, edi
cmp al, 0xf0
jb 0x4bc101
movzx eax, byte [ebx + 3]
and edx, 7
shl esi, 6
lea edi, [ebx + 4]
shl edx, 0x12
and eax, 0x3f
or eax, esi
mov esi, edi
or eax, edx
cmp eax, 0xd
jbe 0x4bc120
jmp 0x4bc140
shl edx, 6
lea esi, [ebx + 2]
or edx, edi
mov eax, edx
cmp eax, 0xd
jbe 0x4bc120
jmp 0x4bc140
shl edx, 0xc
lea edi, [ebx + 3]
or esi, edx
mov eax, esi
mov esi, edi
cmp eax, 0xd
ja 0x4bc140
nop word cs:[eax + eax]
nop dword [eax]
mov edx, 0x2600
bt edx, eax
jae 0x4bc140
cmp esi, ebp
mov ebx, esi
jne 0x4bc090
jmp 0x4bc760
mov ebp, 1
cmp eax, 0x80
jb 0x4bc165
mov ebp, 2
cmp eax, 0x800
jb 0x4bc165
cmp eax, 0x10000
mov ebp, 4
sbb ebp, 0
mov edx, dword [esp + 0x74]
mov edi, dword [esp]
sub edx, ebx
cmp ebp, edx
jae 0x4bc17d
cmp byte [ebx + ebp], 0xbf
jg 0x4bc183
jmp 0x4bd08b
jne 0x4bd08b
cmp eax, 0x3e
mov dword [esp + 0x14], esi
jg 0x4bc1a5
cmp eax, 0x23
je 0x4bc1c5
cmp eax, 0x2f
jne 0x4bc1d3
mov ecx, dword [esp + 8]
cmp byte [ecx + 0x20], 2
je 0x4bc1d3
jmp 0x4bcc52
cmp eax, 0x3f
je 0x4bc1c5
cmp eax, 0x5c
jne 0x4bc1d3
cmp byte [esp + 0x1c], 2
je 0x4bc1d3
mov ecx, dword [esp + 8]
cmp byte [ecx + 0x20], 2
je 0x4bc1d3
jmp 0x4bcc39
mov edx, dword [esp + 8]
cmp byte [edx + 0x20], 0
je 0x4bcc20
mov edx, dword [esp + 8]
mov ecx, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
push dword [esp + 0x74]
push esi
push eax
call fcn.004bfb20
add esp, 0xc
cmp byte [esp + 0x1c], 0
jne 0x4bc42c
cmp edi, dword [esp + 0x6c]
mov edx, edi
jbe 0x4bc283
mov eax, dword [esp + 8]
mov ecx, edx
sub ecx, dword [esp + 0x24]
mov eax, dword [eax + 4]
jbe 0x4bc221
mov edx, dword [esp + 0x24]
cmp byte [eax + edx], 0xbf
mov edx, edi
jle 0x4bd08b
cmp ecx, 2
jne 0x4bc283
mov edx, dword [esp + 0x24]
movzx ecx, byte [eax + edx]
and cl, 0xdf
add cl, 0xbf
cmp cl, 0x19
ja 0x4bc42c
cmp byte [eax + edx + 1], 0x3a
mov ecx, dword [esp + 4]
jne 0x4bc740
mov esi, dword [esp + 8]
mov edx, edi
cmp edi, dword [esi]
jne 0x4bc262
mov ecx, esi
call fcn.00403e80
mov eax, dword [esi + 4]
mov edx, edi
mov byte [eax + edx], 0x2f
inc edx
inc dword [esp + 0x18]
mov dword [esi + 8], edx
mov esi, dword [esp + 0x14]
mov ecx, edx
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
je 0x4bc295
jmp 0x4bc440
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
jne 0x4bc440
cmp byte [esp + 0x1c], 2
jne 0x4bc5a9
mov eax, dword [esp + 8]
mov edi, edx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], edx
mov edx, edi
mov dword [esp + 0x20], eax
jmp 0x4bc2f1
lea esi, [edx + ebp]
mov eax, edx
mov ecx, ebp
mov ebp, dword [esp + 8]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x20], edx
add eax, edx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp + 8], esi
mov edx, esi
mov ecx, esi
mov ebx, dword [esp + 0xc]
mov esi, dword [esp + 0x14]
mov ebp, edi
test ebp, ebp
je 0x4bc72f
movzx eax, byte [ebx]
test al, al
js 0x4bc311
mov ecx, eax
shr ecx, 5
mov ecx, dword [ecx*4 + 0x61ed08]
bt ecx, eax
jae 0x4bc380
inc ebx
dec ebp
mov dword [esp + 0xc], ebx
mov edi, ebp
lea ebx, [eax + eax*2 + str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
mov ebp, 3
mov eax, dword [esp + 0x10]
sub eax, edx
cmp eax, ebp
jae 0x4bc2c0
mov ecx, edx
mov dword [esp], edx
mov edx, dword [esp + 0x10]
add ecx, ebp
jb 0x4bd08b
lea esi, [edx + edx]
mov eax, 8
cmp esi, ecx
cmovbe esi, ecx
cmp esi, 9
cmovb esi, eax
test esi, esi
js 0x4bd08b
test edx, edx
mov dword [esp + 4], ecx
je 0x4bc3d4
mov eax, dword [esp + 0x20]
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x3c], edx
jmp 0x4bc3d6
mov dword [esp], edx
mov edx, 1
mov dword [esp + 0xc], 1
mov edi, ebp
sub edi, edx
je 0x4bc422
movsx ecx, byte [ebx + edx]
mov eax, edx
test ecx, ecx
js 0x4bc3b8
mov edx, ecx
shr edx, 5
mov esi, dword [edx*4 + 0x61ed08]
lea edx, [eax + 1]
bt esi, ecx
jae 0x4bc390
mov edx, dword [esp]
lea ecx, [eax - 1]
cmp ecx, ebp
jae 0x4bd08b
lea ecx, [ebx + eax]
mov ebp, eax
mov dword [esp + 0xc], ecx
jmp 0x4bc325
xor eax, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x20], ebp
lea ecx, [esp + 0x28]
mov edx, 1
push eax
push esi
call fcn.00413aa0
add esp, 8
cmp dword [esp + 0x28], 1
je 0x4bd08b
mov edx, dword [esp + 0x2c]
mov ebp, dword [esp + 8]
mov dword [esp + 0x10], esi
mov eax, dword [esp]
mov ecx, dword [esp + 0x20]
mov dword [ebp + 4], edx
mov dword [ebp], esi
mov esi, dword [esp + 4]
jmp 0x4bc2cf
mov edx, dword [esp]
xor edi, edi
jmp 0x4bc325
mov ecx, dword [esp + 4]
mov edx, edi
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
je 0x4bc295
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
jmp 0x4bc47f
mov eax, dword [esp + 0xc]
mov ecx, ebp
mov ebp, dword [esp]
mov dword [esp + 0xc], eax
mov esi, ecx
add eax, ebp
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov ebx, dword [esp + 4]
add ebp, esi
mov edx, ebp
mov ecx, ebp
mov dword [eax + 8], ebp
mov ebp, edi
test ebp, ebp
mov dword [esp], edx
je 0x4bc594
movzx eax, byte [ebx]
test al, al
js 0x4bc4a2
mov ecx, eax
shr ecx, 5
mov ecx, dword [ecx*4 + 0x61ed28]
bt ecx, eax
jae 0x4bc500
inc ebx
dec ebp
mov dword [esp + 4], ebx
mov edi, ebp
lea ebx, [eax + eax*2 + str._00_01_02_03_04_05_06_07_08_09_0A_0B_0C_0D_0E_0F_10_11_12_13_14_15_16_17_18_19_1A_1B_1C_1D_1E_1F_20_21_22_23_24_25_26_27_28_29_2A_2B_2C_2D_2E_2F_30_31_32_33_34_35_36_37_38_39_3A_3B_3C_3D_3E_3F_40_41_42_43_44_45_46_47_48_49_4A_4B_4C_4D_4E_4F_50_51_52_53_54_55_56_57_58_59_5A_5B_5C_5D_5E_5F_60_61_62_63_64_65_66_67_68_69_6A_6B_6C_6D_6E_6F_70_71_72_73_74_75_76_77_78_79_7A_7B_7C_7D_7E_7F_80_81_82_83_84_85_86_87_88_89_8A_8B_8C_8D_8E_8F_90_91_92_93_94_95_96_97_98_99_9A_9B_9C_9D_9E_9F_A0_A1_A2_A3_A4_A5_A6_A7_A8_A9_AA_AB_AC_AD_AE_AF_B0_B1_B2_B3_B4_B5_B6_B7_B8_B9_BA_BB_BC_BD_BE_BF_C0_C1_C2_C3_C4_C5_C6_C7_C8_C9_CA_CB_CC_CD_CE_CF_D0_D1_D2_D3_D4_D5_D6_D7_D8_D9_DA_DB_DC_DD_DE_DF_E0_E1_E2_E3_E4_E5_E6_E7_E8_E9_EA_EB_EC_ED_EE_EF_F0_F1_F2_F3_F4_F5_F6_F7_F8_F9_FA_FB_FC_FD_FE_FF]
mov ebp, 3
mov ecx, dword [esp + 0x10]
mov esi, dword [esp]
mov eax, ecx
sub eax, esi
cmp eax, ebp
jae 0x4bc450
add esi, ebp
jb 0x4bd08b
lea eax, [ecx + ecx]
cmp eax, esi
cmova esi, eax
mov eax, 8
cmp esi, 9
cmovb esi, eax
test esi, esi
js 0x4bd08b
mov eax, dword [esp + 0xc]
test ecx, ecx
je 0x4bc54d
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x3c], ecx
jmp 0x4bc54f
mov edx, 1
mov dword [esp + 4], 1
nop dword [eax]
mov edi, ebp
sub edi, edx
je 0x4bc58d
movsx ecx, byte [ebx + edx]
mov eax, edx
test ecx, ecx
js 0x4bc534
mov edx, ecx
shr edx, 5
mov esi, dword [edx*4 + 0x61ed28]
lea edx, [eax + 1]
bt esi, ecx
jae 0x4bc510
lea ecx, [eax - 1]
cmp ecx, ebp
jae 0x4bd08b
lea ecx, [ebx + eax]
mov ebp, eax
mov dword [esp + 4], ecx
jmp 0x4bc4b6
xor eax, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, 1
push eax
push esi
call fcn.00413aa0
add esp, 8
cmp dword [esp + 0x28], 1
je 0x4bd08b
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 8]
mov ecx, ebp
mov dword [esp + 0x10], esi
mov dword [edx + 4], eax
mov dword [edx], esi
jmp 0x4bc456
xor edi, edi
jmp 0x4bc4b6
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x74]
cmp esi, ebp
jne 0x4bc086
jmp 0x4bc764
mov eax, dword [esp + 8]
mov edi, edx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xc], edx
mov edx, edi
mov dword [esp + 0x10], eax
jmp 0x4bc5ec
mov ecx, ebp
add ebp, edx
mov eax, edx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x10], edx
add eax, edx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov ebx, dword [esp + 4]
mov edx, ebp
mov ecx, ebp
mov dword [eax + 8], ebp
mov ebp, edi
test ebp, ebp
je 0x4bc72f
movzx eax, byte [ebx]
test al, al
js 0x4bc60c
mov ecx, eax
shr ecx, 5
mov ecx, dword [ecx*4 + 0x61ed18]
bt ecx, eax
jae 0x4bc680
inc ebx
dec ebp
mov dword [esp + 4], ebx
mov edi, ebp
lea ebx, [eax + eax*2 + str._00_01_02_03_04_05_06_07_08_09_0A_0B_0C_0D_0E_0F_10_11_12_13_14_15_16_17_18_19_1A_1B_1C_1D_1E_1F_20_21_22_23_24_25_26_27_28_29_2A_2B_2C_2D_2E_2F_30_31_32_33_34_35_36_37_38_39_3A_3B_3C_3D_3E_3F_40_41_42_43_44_45_46_47_48_49_4A_4B_4C_4D_4E_4F_50_51_52_53_54_55_56_57_58_59_5A_5B_5C_5D_5E_5F_60_61_62_63_64_65_66_67_68_69_6A_6B_6C_6D_6E_6F_70_71_72_73_74_75_76_77_78_79_7A_7B_7C_7D_7E_7F_80_81_82_83_84_85_86_87_88_89_8A_8B_8C_8D_8E_8F_90_91_92_93_94_95_96_97_98_99_9A_9B_9C_9D_9E_9F_A0_A1_A2_A3_A4_A5_A6_A7_A8_A9_AA_AB_AC_AD_AE_AF_B0_B1_B2_B3_B4_B5_B6_B7_B8_B9_BA_BB_BC_BD_BE_BF_C0_C1_C2_C3_C4_C5_C6_C7_C8_C9_CA_CB_CC_CD_CE_CF_D0_D1_D2_D3_D4_D5_D6_D7_D8_D9_DA_DB_DC_DD_DE_DF_E0_E1_E2_E3_E4_E5_E6_E7_E8_E9_EA_EB_EC_ED_EE_EF_F0_F1_F2_F3_F4_F5_F6_F7_F8_F9_FA_FB_FC_FD_FE_FF]
mov ebp, 3
mov eax, dword [esp + 0xc]
sub eax, edx
cmp eax, ebp
jae 0x4bc5c0
mov ecx, edx
mov dword [esp], edx
mov edx, dword [esp + 0xc]
add ecx, ebp
jb 0x4bd08b
lea esi, [edx + edx]
mov eax, 8
cmp esi, ecx
cmovbe esi, ecx
cmp esi, 9
cmovb esi, eax
test esi, esi
js 0x4bd08b
mov dword [esp + 0x20], ebp
mov ebp, ecx
test edx, edx
je 0x4bc6d8
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x3c], edx
jmp 0x4bc6da
mov dword [esp], edx
mov edx, 1
mov dword [esp + 4], 1
mov edi, ebp
sub edi, edx
je 0x4bc721
movsx ecx, byte [ebx + edx]
mov eax, edx
test ecx, ecx
js 0x4bc6b8
mov edx, ecx
shr edx, 5
mov esi, dword [edx*4 + 0x61ed18]
lea edx, [eax + 1]
bt esi, ecx
jae 0x4bc690
mov edx, dword [esp]
lea ecx, [eax - 1]
cmp ecx, ebp
jae 0x4bd08b
mov esi, dword [esp + 0x14]
lea ecx, [ebx + eax]
mov ebp, eax
mov dword [esp + 4], ecx
jmp 0x4bc620
xor eax, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, 1
push eax
push esi
call fcn.00413aa0
add esp, 8
cmp dword [esp + 0x28], 1
je 0x4bd08b
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 8]
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x20]
mov dword [eax + 4], edx
mov dword [eax], esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp]
jmp 0x4bc5ca
mov esi, dword [esp + 0x14]
mov edx, dword [esp]
xor edi, edi
jmp 0x4bc620
mov dword [esp], edx
mov ebp, dword [esp + 0x74]
cmp esi, ebp
jne 0x4bc086
jmp 0x4bc764
mov edx, edi
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
je 0x4bc295
jmp 0x4bc440
mov ecx, dword [esp + 4]
cmp dword [esp + 0x18], ecx
ja 0x4bd08b
mov eax, dword [esp + 8]
mov dword [esp + 0xc], 0
mov dword [esp + 4], ecx
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4bc79f
cmp eax, ecx
jae 0x4bc79f
cmp byte [edx + eax], 0xbf
jle 0x4bd08b
mov dword [esp + 0xc], 0
mov ebx, ecx
jmp 0x4bc7c3
mov edx, dword [ebx + 4]
mov ebx, ecx
mov eax, ecx
mov dword [esp + 0xc], 0
mov dword [esp + 4], ecx
mov edi, eax
not eax
add eax, ecx
cmp eax, 5
ja 0x4bca36
mov eax, dword [eax*4 + 0x4bd090]
mov ecx, dword [esp + 4]
mov dword [esp], edx
add eax, dword [esp + 0x50]
jmp eax
mov ecx, dword [esp + 4]
jmp 0x4bc068
mov esi, ecx
mov ebp, dword [esp + 0x74]
mov ecx, dword [esp + 4]
cmp dword [esp + 0x18], ecx
jbe 0x4bc76e
jmp 0x4bd08b
mov esi, dword [esp + 8]
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4bcc56
mov ecx, dword [esi + 0x1c]
push 0
push eax
call dword [ecx + 0x14]
add esp, 8
jmp 0x4bcc56
mov esi, dword [esp + 8]
cmp edi, dword [esi]
mov ebp, dword [esp + 0x74]
jne 0x4bcc65
mov ecx, esi
call fcn.00403e80
mov ecx, dword [esp]
mov edi, dword [esi + 4]
lea eax, [ecx + 1]
mov byte [edi + ecx], 0x2f
mov dword [esi + 8], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
cmp eax, ecx
ja 0x4bd08b
test eax, eax
je 0x4bccba
mov ecx, dword [esp + 4]
cmp eax, ecx
jae 0x4bccb1
mov ebx, ecx
cmp byte [edi + eax], 0xbf
mov ecx, dword [esp]
mov dl, 1
mov dword [esp + 0xc], edx
mov edx, edi
jg 0x4bc7c3
jmp 0x4bd08b
mov ecx, dword [esp]
jne 0x4bd08b
mov dl, 1
test ecx, ecx
mov dword [esp + 0xc], edx
je 0x4bccdc
mov ecx, dword [esp + 4]
mov edx, edi
test ecx, ecx
mov ebx, ecx
mov ecx, dword [esp]
jne 0x4bc7c3
jmp 0x4bd08b
xor ecx, ecx
mov ebx, 1
mov edx, edi
jmp 0x4bc7c3
cmp byte [esp + 0x1c], 0
jne 0x4bd024
mov eax, dword [esp + 0x6c]
mov ecx, dword [ebx + 4]
mov edi, dword [ebx + 8]
test eax, eax
mov dword [esp + 0xc], ecx
je 0x4bce84
cmp edi, eax
jbe 0x4bceaf
mov ecx, dword [esp + 0xc]
cmp byte [ecx + eax], 0xbf
jg 0x4bceb5
jmp 0x4bd08b
test edi, edi
js 0x4bd08b
je 0x4bd030
movzx eax, byte [0x62314d]
xor ecx, ecx
mov edx, edi
call fcn.0048bb80
test eax, eax
jne 0x4bd035
jmp 0x4bd08b
jne 0x4bd08b
sub edi, eax
jb 0x4bd08b
js 0x4bd08b
mov edx, 1
je 0x4bcee8
movzx eax, byte [0x62314d]
xor ecx, ecx
mov edx, edi
call fcn.0048bb80
mov edx, eax
mov eax, dword [esp + 0x6c]
test edx, edx
je 0x4bd08b
mov ecx, dword [esp + 0xc]
mov dword [ebx + 8], eax
add eax, ecx
push edi
push eax
mov dword [esp + 8], edx
push edx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x78]
add esp, 0xc
cmp eax, dword [ebx]
mov dword [esp + 4], edi
jne 0x4bcf22
mov ecx, ebx
mov edi, eax
call fcn.00403e80
mov eax, edi
mov edi, dword [esp + 4]
mov ecx, dword [ebx + 4]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
xor edx, edx
mov dword [esp + 0x14], esi
mov byte [ecx + eax], 0x2f
inc eax
mov ecx, edi
mov dword [esp + 0x10], eax
mov dword [ebx + 8], eax
mov eax, dword [esp]
add eax, edi
sub ecx, eax
jmp 0x4bcf58
inc edx
add edx, ecx
cmp ebx, 0x2f
jne 0x4bcfd6
cmp edx, edi
je 0x4bcfd4
mov eax, edx
mov edx, dword [esp]
add edx, eax
movzx ebx, byte [edx]
test bl, bl
jns 0x4bcf50
movzx ebp, byte [edx + 1]
mov edi, ebx
and edi, 0x1f
and ebp, 0x3f
cmp bl, 0xdf
jbe 0x4bcfa5
movzx esi, byte [edx + 2]
shl ebp, 6
and esi, 0x3f
or esi, ebp
cmp bl, 0xf0
jb 0x4bcfb5
movzx ebx, byte [edx + 3]
and edi, 7
shl esi, 6
add edx, 4
shl edi, 0x12
and ebx, 0x3f
or ebx, esi
or ebx, edi
jmp 0x4bcfbf
shl edi, 6
add edx, 2
or edi, ebp
mov ebp, dword [esp + 0x74]
mov ebx, edi
jmp 0x4bcfc7
shl edi, 0xc
add edx, 3
or esi, edi
mov ebx, esi
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 4]
add edx, ecx
cmp ebx, 0x2f
je 0x4bcf58
jmp 0x4bcfd6
mov eax, edi
mov ecx, dword [esp]
sub edi, eax
lea ebx, [ecx + eax]
mov eax, dword [esp + 8]
mov eax, dword [eax]
sub eax, dword [esp + 0x10]
cmp eax, edi
jb 0x4bd061
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
add ecx, eax
push edi
push ebx
push ecx
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, edi
mov eax, dword [esp + 8]
cmp dword [esp + 4], 0
mov dword [eax + 8], ebx
je 0x4bd024
push dword [esp]
push 0
push dword [0x623140]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, esi
mov edx, ebp
add esp, 0x54
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 1
mov dword [ebx + 8], 0
push edi
push dword [esp + 0x10]
mov dword [esp + 8], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
xor eax, eax
cmp eax, dword [ebx]
mov dword [esp + 4], edi
je 0x4bcf0c
jmp 0x4bcf22
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ecx, esi
push 1
push 1
push edi
call fcn.004df9e0
add esp, 0xc
mov eax, dword [esi + 4]
mov dword [esp + 0xc], eax
mov eax, dword [esi + 8]
mov esi, dword [esp + 0x14]
jmp 0x4bcff0
ud2