Function at 0x4f3b60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
mov eax, dword [edx]
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x24], eax
mov eax, dword [eax]
lea ecx, [ecx + ecx*2]
shl ecx, 4
push esi
add ebx, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [eax]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x30], edx
mov ecx, dword [ebx]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], ecx
push edi
push 0
push 0x1a0
test eax, eax
je 0x4f3bbc
mov ecx, eax
call fcn.00486970
mov edi, eax
mov dword [esp + 0x20], edi
jmp 0x4f3bc7
call fcn.00486390
mov edi, eax
mov dword [esp + 0x20], eax
add esp, 8
test edi, edi
je 0x4f3bde
push 0x1a0
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebx + 0x1c], edi
test edi, edi
je 0x4f4375
or word [ebx + 0xa], 0x10
lea esi, [edi + 0x18]
push 0x180
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x38]
add esp, 0xc
mov edx, dword [esp + 0x48]
mov ecx, edi
mov dword [edi], eax
mov byte [edi + 9], 0
push 0x2b
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
call fcn.004f52f0
mov ecx, dword [esp + 0x40]
add esp, 4
mov edx, edi
call fcn.004f5590
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x51], 0
jne 0x4f4375
mov eax, dword [edi + 0xc]
or edx, 0xffffffff
mov esi, dword [edi + 0x14]
or ecx, 0xffffffff
sub eax, 1
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], esi
js 0x4f3e9d
mov eax, edx
or eax, ecx
je 0x4f3e95
movzx eax, word [esi + 0xc]
test eax, 0x1ff
jne 0x4f3dea
mov ecx, dword [esp + 0x30]
xorps xmm0, xmm0
push 0
push 0x198
movlpd qword [esp + 0x58], xmm0
call fcn.00486970
mov edi, eax
add esp, 8
test edi, edi
je 0x4f3dcd
or word [esi + 0xa], 0x20
mov eax, 0x400
push 0x180
mov dword [esi + 0x1c], edi
xorps xmm0, xmm0
mov word [esi + 0xc], ax
lea esi, [edi + 0x18]
push 0
push esi
movlpd qword [esp + 0x2c], xmm0
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [esp + 0x40]
add esp, 0xc
mov edx, dword [esp + 0x38]
mov ecx, edi
mov eax, dword [ebx]
mov dword [edi], eax
mov byte [edi + 9], 0
mov dword [edi + 4], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 8
mov dword [edi + 0x14], esi
mov edx, dword [edx]
push 0x2c
call fcn.004f52f0
mov ecx, dword [esp + 0x40]
add esp, 4
mov edx, edi
call fcn.004f5590
mov eax, dword [esp + 0x30]
mov dword [edi + 4], ebx
cmp byte [eax + 0x51], 0
jne 0x4f3d98
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0xc]
test edi, edi
jle 0x4f3d98
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x20], ecx
mov eax, dword [esi]
mov al, byte [eax]
cmp al, 0x31
je 0x4f3d70
cmp al, 0x35
jb 0x4f3d61
cmp al, 0x39
jbe 0x4f3d70
cmp al, 0x32
je 0x4f3d70
cmp al, 0x2d
je 0x4f3d70
cmp word [esi + 0xc], 0x40
jne 0x4f3d8e
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x14]
lea ecx, [ecx + 0x1e8]
call fcn.004f5860
mov ecx, dword [esp + 0x20]
or ecx, eax
or ebx, edx
mov dword [esp + 0x20], ecx
add esi, 0x30
sub edi, 1
jne 0x4f3d51
jmp 0x4f3da0
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x50]
and edx, ecx
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x38]
and ecx, ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
jmp 0x4f3e7d
mov ebx, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
jmp 0x4f3e7d
movzx eax, word [esi + 0xa]
test al, 8
jne 0x4f3e7d
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x14]
add ecx, 0x1e8
call fcn.004f5860
mov edi, eax
mov ebx, edx
movzx eax, word [esi + 0xa]
test al, 2
je 0x4f3e3e
mov esi, dword [esi + 0x10]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
lea esi, [esi + esi*2]
mov edx, dword [eax + 0x14]
add esi, esi
lea ecx, [ecx + 0x1e8]
mov edx, dword [edx + esi*8 + 0x14]
call fcn.004f5860
mov esi, dword [esp + 0x38]
or edi, eax
or ebx, edx
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
and edx, edi
movzx eax, word [esi + 0xc]
and ecx, ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
test al, 2
jne 0x4f3e75
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov eax, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
jmp 0x4f3e7d
and dword [esp + 0x1c], edi
and dword [esp + 0x20], ebx
mov eax, dword [esp + 0x44]
add esi, 0x30
dec eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x44], eax
test eax, eax
jns 0x4f3c81
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x18]
mov dword [edi + 0x198], edx
mov eax, 0x200
or edx, ecx
mov dword [edi + 0x19c], ecx
mov word [ebx + 0xc], ax
je 0x4f407c
mov eax, dword [esp + 0x34]
mov byte [eax + 9], 1
cmp dword [edi + 0xc], 2
jne 0x4f407c
mov ecx, dword [edi + 0x14]
xor edx, edx
xor ebx, ebx
mov eax, 0x400
cmp word [ecx + 0xc], ax
je 0x4f3ee7
xor edi, edi
test edx, edx
cmove edi, ecx
jmp 0x4f3ef8
mov eax, dword [ecx + 0x1c]
cmp edx, dword [eax + 0xc]
jge 0x4f3ef6
mov edi, dword [eax + 0x14]
add edi, ebx
jmp 0x4f3ef8
xor edi, edi
inc edx
mov dword [esp + 0x38], edi
add ebx, 0x30
mov dword [esp + 0x4c], edx
mov dword [esp + 0x44], ebx
test edi, edi
je 0x4f4078
xor edx, edx
xor ebx, ebx
jmp 0x4f3f24
mov edi, dword [esp + 0x38]
jmp 0x4f3f20
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, 0x400
mov ecx, dword [eax + 0x14]
cmp word [ecx + 0x3c], si
lea eax, [ecx + 0x30]
je 0x4f3f42
xor esi, esi
test edx, edx
cmove esi, eax
jmp 0x4f3f53
mov esi, dword [eax + 0x1c]
cmp edx, dword [esi + 0xc]
jge 0x4f3f51
mov esi, dword [esi + 0x14]
add esi, ebx
jmp 0x4f3f53
xor esi, esi
inc edx
add ebx, 0x30
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
test esi, esi
je 0x4f406b
movzx ecx, word [edi + 0xc]
movzx edx, word [esi + 0xc]
mov eax, ecx
or eax, edx
movzx ebx, ax
test cl, 0x3e
je 0x4f3f1c
test dl, 0x3e
mov edx, dword [esp + 0x10]
je 0x4f3f20
mov eax, ebx
and eax, 0x1a
cmp ax, bx
je 0x4f3f98
mov eax, ebx
and eax, 0x26
cmp ax, bx
jne 0x4f3f20
mov eax, dword [esi]
xor ecx, ecx
mov edx, dword [edi]
push 0xffffffffffffffff
push dword [eax + 0xc]
mov edx, dword [edx + 0xc]
call fcn.004c11b0
mov edx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x4f3f20
mov eax, dword [esi]
xor ecx, ecx
mov edx, dword [edi]
push 0xffffffffffffffff
push dword [eax + 0x10]
mov edx, dword [edx + 0x10]
call fcn.004c11b0
mov edx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x4f3f20
mov ecx, ebx
lea eax, [ecx - 1]
test ecx, eax
je 0x4f3ff5
test bl, 0x18
mov eax, 8
mov ebx, 0x20
cmovne ebx, eax
mov eax, dword [esp + 0x34]
mov edx, dword [edi]
mov eax, dword [eax]
mov eax, dword [eax]
test edx, edx
je 0x4f3f1c
mov ecx, dword [eax]
push 0
push 0
call fcn.004bb2d0
mov edx, dword [esp + 0x18]
mov edi, eax
add esp, 8
test edi, edi
je 0x4f3f16
movzx esi, bx
mov edx, 0x35
cmp esi, 2
je 0x4f403f
xor ecx, ecx
inc ecx
mov eax, 2
shl eax, cl
inc edx
cmp esi, eax
jne 0x4f4032
mov ecx, dword [esp + 0x34]
mov byte [edi], dl
mov edx, edi
push 3
call fcn.004f33f0
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x3c]
push eax
call fcn.004f45e0
mov edi, dword [esp + 0x3c]
add esp, 4
jmp 0x4f3f1c
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x44]
jmp 0x4f3ed3
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
or eax, dword [esp + 0x20]
je 0x4f4375
xor ebx, ebx
mov ecx, 0xffbf
or edx, 0xffffffff
mov dword [esp + 0x14], ebx
mov dword [esp + 0x38], edx
jmp 0x4f40a4
mov edi, dword [esp + 0x18]
test ebx, ebx
jne 0x4f4217
mov eax, dword [esp + 0x18]
mov edi, dword [edi + 0x14]
mov ebx, dword [eax + 0xc]
sub ebx, 1
mov dword [esp + 0x44], ebx
js 0x4f4375
and word [edi + 0xa], cx
mov eax, ebx
mov esi, dword [edi + 0x14]
mov dword [esp + 0x4c], eax
cmp esi, edx
je 0x4f4126
mov ecx, dword [esp + 0x2c]
xor eax, eax
mov edx, dword [ecx + 0x1ec]
test edx, edx
jle 0x4f40fc
add ecx, 0x1f0
nop word [eax + eax]
cmp dword [ecx], esi
je 0x4f4139
inc eax
add ecx, 4
cmp eax, edx
jl 0x4f40f0
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
and ecx, dword [esp + 0x1c]
and edx, dword [esp + 0x20]
or ecx, edx
jne 0x4f4150
mov eax, dword [esp + 0x4c]
mov ecx, 0xffbf
mov edx, dword [esp + 0x38]
dec ebx
add edi, 0x30
mov dword [esp + 0x44], ebx
test eax, eax
jg 0x4f40c3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4f410d
mov eax, dword [edi]
mov edx, esi
mov ecx, dword [edi + 0x1c]
lea esi, [edi + 0xa]
mov edi, dword [esp + 0x44]
mov ebx, 1
mov dword [esp + 0x10], ecx
mov eax, dword [eax + 0xc]
mov dword [esp + 0x38], edx
mov dword [esp + 0x50], eax
test ebx, ebx
je 0x4f41f8
cmp dword [esi + 0xa], edx
je 0x4f4189
mov eax, 0xffbf
and word [esi], ax
jmp 0x4f41e0
cmp dword [esi + 0x12], ecx
jne 0x4f41de
cmp ecx, 0xfffffffe
jne 0x4f41ac
mov edx, dword [esi - 0xa]
mov ecx, dword [esp + 0x40]
push 0xffffffffffffffff
push eax
mov edx, dword [edx + 0xc]
call fcn.004c11b0
add esp, 8
test eax, eax
jne 0x4f41de
mov ecx, dword [esi - 0xa]
mov ecx, dword [ecx + 0x10]
call fcn.004b9e70
mov ecx, dword [esi - 0xa]
movsx eax, al
mov dword [esp + 0x4c], eax
mov ecx, dword [ecx + 0xc]
call fcn.004b9e70
movsx ecx, al
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4f41d8
cmp eax, ecx
jne 0x4f41de
or word [esi], 0x40
jmp 0x4f41e0
xor ebx, ebx
mov ecx, dword [esp + 0x10]
add esi, 0x30
sub edi, 1
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x38]
jns 0x4f4172
mov eax, dword [esp + 0x14]
mov ecx, 0xffbf
inc eax
mov dword [esp + 0x14], eax
cmp eax, 2
jl 0x4f40a0
test ebx, ebx
je 0x4f4375
mov eax, dword [esp + 0x18]
xor ebx, ebx
xor edx, edx
mov edi, dword [eax + 0xc]
sub edi, 1
mov esi, dword [eax + 0x14]
js 0x4f428b
nop word [eax + eax]
test byte [esi + 0xa], 0x40
je 0x4f426b
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
test edx, edx
je 0x4f4251
mov ecx, dword [esp + 0x30]
push 0
push 0
call fcn.004bb2d0
add esp, 8
jmp 0x4f4253
xor eax, eax
push eax
mov eax, dword [esp + 0x30]
mov edx, ebx
mov ecx, dword [eax]
call fcn.004bbe70
mov ebx, eax
add esp, 4
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
add esi, 0x30
sub edi, 1
jns 0x4f4230
test edx, edx
je 0x4f428b
mov ecx, dword [esp + 0x30]
push 0
push 0
call fcn.004bb2d0
add esp, 8
mov edi, eax
jmp 0x4f428d
xor edi, edi
mov eax, dword [esp + 0x40]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.00486970
mov esi, eax
add esp, 8
test esi, esi
je 0x4f4355
push 0x34
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [esi], 0x31
or eax, 0xffffffff
mov edx, esi
mov word [esi + 0x22], ax
push 0
push edi
mov edi, dword [esp + 0x48]
mov ecx, dword [edi]
call fcn.004babe0
mov eax, dword [edi]
add esp, 8
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4f42ec
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push edi
call fcn.00489a80
add esp, 0xc
mov ecx, dword [esp + 0x48]
mov edx, esi
push 3
mov eax, dword [ecx + 4]
and eax, 1
or dword [esi + 4], eax
movzx eax, word [ecx + 0x24]
mov dword [esi + 0x14], ebx
mov ebx, dword [esp + 0x38]
mov ecx, ebx
mov word [esi + 0x24], ax
call fcn.004f33f0
mov ecx, dword [esp + 0x40]
add esp, 4
mov esi, eax
mov edx, ebx
push esi
call fcn.004f45e0
mov eax, dword [ebx + 0x14]
lea edx, [esi + esi*2]
mov ecx, dword [ebp + 8]
add edx, edx
mov esi, dword [esp + 0x60]
add esp, 4
mov dword [eax + edx*8 + 0x10], ecx
mov ecx, dword [ebx + 0x14]
movzx eax, word [ecx + esi + 8]
mov word [ecx + edx*8 + 8], ax
mov eax, dword [ebx + 0x14]
inc byte [esi + eax + 0xe]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4f4366
mov eax, dword [esp + 0x40]
mov edx, edi
mov ecx, dword [eax]
call fcn.004bb0e0
test ebx, ebx
je 0x4f4375
mov ecx, dword [esp + 0x30]
mov edx, ebx
call fcn.004bc210
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret