Function at 0x4da650
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
push ebx
mov ebx, dword [esp + 0x74]
push esi
push edi
mov dword [esp + 0x48], 0
mov eax, dword [ebx]
movzx edx, byte [ebx + 0x2c]
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov ecx, dword [eax]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x24], edx
cmp edx, 1
jg 0x4da69a
mov edi, 1
jmp 0x4da6a7
lea edi, [edx - 2]
neg edi
sbb edi, edi
and edi, 5
add edi, 5
mov eax, dword [ebx + 8]
mov dword [esp + 0x44], edi
test eax, eax
je 0x4da6c1
cmp word [esp + 0x80], 0
je 0x4da6c1
mov esi, dword [eax]
jmp 0x4da6c3
xor esi, esi
lea eax, [edx + 8]
mov dword [esp + 0x2c], esi
imul eax, edi
lea eax, [esi + eax*4]
add eax, eax
cdq
push edx
push eax
push ecx
call fcn.00491d60
mov edx, eax
add esp, 0xc
mov dword [esp + 0x28], edx
test edx, edx
jne 0x4da6f2
pop edi
pop esi
lea eax, [edx + 7]
pop ebx
add esp, 0x6c
ret
mov eax, edi
shl eax, 5
lea ecx, [eax + edx]
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x18], 0
mov dword [esp + 0x54], ecx
mov dword [ecx + 0x1c], 0
add ecx, eax
push ebp
lea eax, [edi + edi]
mov ebp, edx
mov dword [esp + 0x1c], ebp
test eax, eax
jle 0x4da760
mov esi, dword [esp + 0x28]
shl esi, 2
add edx, 0x18
nop
mov dword [edx], ecx
lea edx, [edx + 0x20]
dec eax
add ecx, esi
test eax, eax
jg 0x4da750
mov esi, dword [esp + 0x30]
test esi, esi
je 0x4da777
lea eax, [esi + esi]
mov dword [esp + 0x60], ecx
push eax
push 0
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 0x84]
cmp eax, 0x30
jb 0x4da78b
mov eax, 0x30
mov edi, dword [esp + 0x58]
mov word [edi + 0x10], ax
mov eax, 1
mov dword [esp + 0x5c], eax
test esi, esi
je 0x4da7b6
cmp dword [esp + 0x28], 0
jle 0x4da7ac
or eax, 0xffffffff
jmp 0x4da7ae
mov eax, esi
mov byte [edi + 0x16], al
mov eax, 1
xor edx, edx
mov dword [esp + 0x34], edx
cmp dword [esp + 0x28], edx
jle 0x4dade8
mov esi, dword [esp + 0x28]
lea ebx, [ebx]
xor ecx, ecx
mov dword [esp + 0x18], ecx
test eax, eax
jle 0x4dac9e
add edi, 0x10
mov dword [esp + 0x20], edi
mov ebx, dword [ebx + 0x3c]
mov dword [esp + 0x24], ebx
test ebx, ebx
je 0x4dac79
mov al, byte [edi + 6]
mov edx, dword [edi - 0x10]
mov ecx, edx
mov esi, dword [edi - 0xc]
not ecx
and ecx, dword [ebx]
mov byte [esp + 0x13], al
lea eax, [edi - 0x10]
mov dword [esp + 0x44], eax
mov eax, esi
not eax
mov dword [esp + 0x74], 0
and eax, dword [ebx + 4]
or ecx, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
jne 0x4dad10
mov ebp, dword [ebx + 8]
mov ecx, edx
mov eax, esi
and ecx, ebp
and eax, dword [ebx + 0xc]
or ecx, eax
jne 0x4dad07
test dword [ebx + 0x24], 0x4000
je 0x4da85c
cmp word [edi], 3
jl 0x4dad07
mov edx, dword [esp + 0x24]
movzx ebx, word [edi]
mov ax, word [edx + 0x14]
movzx edx, word [edx + 0x12]
add ax, bx
movzx ecx, ax
cmp dx, cx
jl 0x4da8a1
movsx esi, cx
movsx ecx, dx
lea eax, [esi + 0x31]
cmp ecx, eax
jle 0x4da887
mov esi, edx
jmp 0x4da8cd
lea eax, [esi + 0x1f]
cmp ecx, eax
jle 0x4da893
lea eax, [edx + 1]
jmp 0x4da8ca
sub ecx, esi
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
add ax, dx
jmp 0x4da8ca
movsx esi, dx
movsx edx, cx
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x4da8b2
mov esi, ecx
jmp 0x4da8cd
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x4da8be
lea eax, [ecx + 1]
jmp 0x4da8ca
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
movzx esi, ax
movzx ecx, word [edi + 4]
mov di, si
mov dword [esp + 0x14], esi
movsx edx, cx
cmp di, cx
jl 0x4da90b
movsx ecx, di
lea eax, [edx + 0x31]
cmp ecx, eax
jg 0x4da93b
lea eax, [edx + 0x1f]
cmp ecx, eax
jle 0x4da8f4
inc esi
jmp 0x4da934
sub ecx, edx
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
add di, ax
mov word [esp + 0x14], di
mov esi, dword [esp + 0x14]
jmp 0x4da93b
movsx esi, di
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x4da919
mov esi, ecx
jmp 0x4da934
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x4da925
lea eax, [ecx + 1]
jmp 0x4da931
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
movzx esi, ax
mov dword [esp + 0x14], esi
mov di, si
mov eax, dword [esp + 0x24]
or dword [esp + 0x38], ebp
mov ax, word [eax + 0x16]
add ax, bx
mov ebx, dword [esp + 0x24]
movzx eax, ax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
or eax, dword [ebx + 0xc]
mov dword [esp + 0x3c], eax
mov al, byte [esp + 0x13]
test al, al
jns 0x4da9a3
mov ecx, dword [esp + 0x80]
lea eax, [esp + 0x74]
push eax
push ebx
push dword [esp + 0x3c]
movzx eax, word [ecx + 0x28]
push eax
push dword [esp + 0x54]
push dword [ecx + 8]
push ecx
call fcn.004d9e60
mov edx, dword [esp + 0x90]
add esp, 0x1c
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x13], al
mov dword [esp + 0x64], edx
jmp 0x4da9b1
mov edx, dword [esp + 0x20]
mov ecx, dword [edx - 8]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx - 4]
mov dword [esp + 0x68], ecx
test al, al
js 0x4daadf
movsx ecx, al
mov eax, dword [esp + 0x30]
cmp ecx, eax
jge 0x4daadf
mov edx, dword [esp + 0x60]
cmp word [edx + ecx*2], 0
lea ebp, [edx + ecx*2]
jne 0x4daa52
mov edx, dword [esp + 0x84]
sub eax, ecx
imul eax, eax, 0x64
movzx ebx, dx
cdq
idiv dword [esp + 0x30]
cdq
push edx
push eax
call fcn.004a71c0
mov edx, dword [esp + 0x8c]
add esp, 8
lea ecx, [edx - 0x32]
add ax, cx
mov ecx, 0x4000
movzx eax, ax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x80]
test word [eax + 0x28], cx
je 0x4daa2a
movzx eax, word [eax + 0x2a]
cmp ax, dx
jge 0x4daa2a
mov ebx, eax
cmp bx, 0xa
jg 0x4daa34
xor eax, eax
jmp 0x4daa46
movsx eax, bx
cdq
push edx
push eax
call fcn.004a71c0
cwde
add esp, 8
sub eax, 0x21
add eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
mov word [ebp], ax
movzx ecx, word [ebp]
movsx edx, cx
cmp di, cx
jl 0x4daa9f
movsx ecx, di
lea eax, [edx + 0x31]
cmp ecx, eax
jle 0x4daa73
movzx eax, di
add eax, 5
movzx edx, ax
jmp 0x4daaec
lea eax, [edx + 0x1f]
cmp ecx, eax
jle 0x4daa88
lea eax, [esi + 1]
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4daaec
sub ecx, edx
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
add ax, di
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4daaec
movsx esi, di
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x4daab3
mov eax, ecx
add eax, 5
movzx edx, ax
jmp 0x4daaec
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x4daac8
lea eax, [ecx + 1]
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4daaec
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4daaec
sub esi, 2
movzx edx, di
mov dword [esp + 0x14], esi
mov di, si
mov ebp, dword [esp + 0x1c]
xor ecx, ecx
mov esi, ebp
cmp dword [esp + 0x18], ecx
jle 0x4dab28
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x18]
cmp dword [esi], ebp
jne 0x4dab1c
mov eax, dword [esp + 0x3c]
cmp dword [esi + 4], eax
jne 0x4dab18
mov al, byte [esi + 0x16]
xor al, byte [esp + 0x13]
jns 0x4dab52
mov eax, dword [esp + 0x18]
inc ecx
add esi, 0x20
cmp ecx, eax
jl 0x4dab02
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, dword [esp + 0x48]
jl 0x4dab86
mov esi, dword [esp + 0x54]
cmp dx, si
jg 0x4dad19
jne 0x4dab4c
cmp di, word [esp + 0x50]
jge 0x4dad19
mov esi, dword [esp + 0x4c]
jmp 0x4dab8d
cmp ecx, dword [esp + 0x18]
jge 0x4dab24
movzx eax, word [esi + 0x12]
cmp ax, dx
jl 0x4dac5a
mov ebp, dword [esp + 0x40]
jne 0x4dab96
movzx eax, word [esi + 0x10]
cmp ax, bp
jl 0x4dac5a
jne 0x4dab96
cmp word [esi + 0x14], di
jle 0x4dac5a
jmp 0x4dab96
mov esi, ecx
inc ecx
mov dword [esp + 0x18], ecx
shl esi, 5
add esi, ebp
mov ebp, dword [esp + 0x40]
mov ecx, dword [ebx + 8]
mov eax, dword [esp + 0x44]
or ecx, dword [eax]
mov eax, dword [ebx + 0xc]
mov ebx, dword [esp + 0x44]
or eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x68]
mov dword [esi + 0xc], eax
mov al, byte [esp + 0x13]
mov byte [esi + 0x16], al
mov eax, dword [esp + 0x34]
mov word [esi + 0x14], di
mov dword [esi], ecx
mov word [esi + 0x10], bp
lea edi, [eax*4]
mov word [esi + 0x12], dx
mov eax, dword [esp + 0x20]
push edi
push dword [eax + 8]
push dword [esi + 0x18]
call sub.MSVCRT.dll_memcpy
mov eax, dword [esi + 0x18]
add esp, 0xc
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov dword [edi + eax], ebx
mov edi, dword [esp + 0x48]
cmp ecx, edi
jl 0x4dac5e
mov eax, dword [esp + 0x1c]
mov ecx, 1
mov dword [esp + 0x4c], 0
movzx esi, word [eax + 0x12]
movzx ebp, word [eax + 0x10]
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebp
cmp edi, ecx
jle 0x4dac5a
add eax, 0x32
jmp 0x4dac30
movzx edx, word [eax]
cmp dx, si
jg 0x4dac40
jne 0x4dac4a
cmp word [eax + 2], bp
jle 0x4dac4a
movzx ebp, word [eax + 2]
mov esi, edx
mov dword [esp + 0x4c], ecx
inc ecx
add eax, 0x20
cmp ecx, edi
jl 0x4dac30
mov dword [esp + 0x50], ebp
mov dword [esp + 0x54], esi
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [ebx + 0x34]
mov dword [esp + 0x24], ebx
test ebx, ebx
jne 0x4da7f4
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x80]
add edi, 0x20
dec eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x5c], eax
jne 0x4da7e5
mov edx, dword [esp + 0x34]
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0x28]
mov eax, ebp
mov dword [esp + 0x1c], edi
mov ebp, edi
inc edx
mov dword [esp + 0x34], edx
mov edi, eax
mov dword [esp + 0x58], edi
mov eax, ecx
mov dword [esp + 0x5c], eax
cmp edx, esi
jl 0x4da7d0
test ecx, ecx
jne 0x4dade8
push str.no_query_solution
push dword [esp + 0x70]
call fcn.00493e20
mov ecx, dword [esp + 0x78]
add esp, 8
test ecx, ecx
je 0x4dad74
cmp dword [ecx + 0x1f8], 0
je 0x4dad22
push dword [esp + 0x2c]
push ecx
call fcn.00478920
add esp, 8
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
mov ecx, dword [esp + 0x18]
jmp 0x4dac62
mov ecx, dword [esp + 0x18]
jmp 0x4dac66
mov edi, dword [esp + 0x20]
jmp 0x4dac66
mov ebx, dword [esp + 0x2c]
cmp ebx, dword [ecx + 0x14c]
jae 0x4dad78
cmp ebx, dword [ecx + 0x144]
jb 0x4dad51
mov eax, dword [ecx + 0x140]
pop ebp
pop edi
mov dword [ebx], eax
mov eax, 1
pop esi
mov dword [ecx + 0x140], ebx
pop ebx
add esp, 0x6c
ret
cmp ebx, dword [ecx + 0x148]
jb 0x4dad78
mov eax, dword [ecx + 0x138]
pop ebp
pop edi
mov dword [ebx], eax
mov eax, 1
pop esi
mov dword [ecx + 0x138], ebx
pop ebx
add esp, 0x6c
ret
mov ebx, dword [esp + 0x2c]
cmp dword [0x5061d8], 0
je 0x4dadd1
mov eax, dword [0x50df18]
test eax, eax
je 0x4dad94
push eax
call dword [0x506228]
add esp, 4
push ebx
call dword [0x506204]
sub dword [0x50de98], eax
dec dword [0x50debc]
push ebx
call dword [0x5061fc]
mov eax, dword [0x50df18]
add esp, 8
test eax, eax
je 0x4daddb
push eax
call dword [0x506230]
add esp, 4
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
push ebx
call dword [0x5061fc]
add esp, 4
pop ebp
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x6c
ret
cmp eax, 1
jle 0x4dae05
lea ecx, [edi + 0x20]
lea edx, [eax - 1]
mov ax, word [edi + 0x12]
cmp ax, word [ecx + 0x12]
jle 0x4dadff
mov edi, ecx
add ecx, 0x20
dec edx
jne 0x4dadf3
mov ebp, dword [esp + 0x28]
xor esi, esi
test ebp, ebp
jle 0x4dae3f
lea edx, [ebx + 0x324]
mov eax, dword [edi + 0x18]
lea edx, [edx + 0x58]
mov eax, dword [eax + esi*4]
inc esi
mov dword [edx - 0x44], eax
mov al, byte [eax + 0x10]
mov byte [edx - 0x58], al
movzx eax, al
lea ecx, [eax + eax*8]
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx*8 + 0x34]
mov dword [edx - 0x88], eax
cmp esi, ebp
jl 0x4dae15
movzx eax, word [ebx + 0x28]
test eax, 0x100
je 0x4dae8f
test al, al
js 0x4dae8f
cmp byte [ebx + 0x2f], 0
jne 0x4dae8f
cmp word [esp + 0x84], 0
je 0x4dae8f
lea eax, [esp + 0x74]
push eax
mov eax, dword [edi + 0x18]
push dword [eax + ebp*4 - 4]
lea eax, [ebp - 1]
push eax
push pe_nt_image_headers32
push edi
push dword [ebx + 0xc]
push ebx
call fcn.004d9e60
movsx ecx, al
add esp, 0x1c
mov eax, dword [ebx + 0xc]
cmp ecx, dword [eax]
jne 0x4dae8f
mov byte [ebx + 0x2f], 2
and dword [ebx + 0x30], 0xfffffffb
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x4daf9f
test byte [ebx + 0x28], 0x80
je 0x4daeb9
movsx eax, byte [edi + 0x16]
cmp eax, dword [ecx]
jne 0x4daf3f
mov byte [ebx + 0x2f], 2
jmp 0x4daf3f
mov al, byte [edi + 0x16]
mov byte [ebx + 0x2d], al
cmp byte [ebx + 0x2d], 0
mov eax, dword [edi + 8]
mov dword [ebx + 0x48], eax
mov eax, dword [edi + 0xc]
mov dword [ebx + 0x4c], eax
jg 0x4daf3f
mov byte [ebx + 0x2d], 0
test ebp, ebp
jle 0x4daf3f
mov eax, dword [edi + 0x18]
mov edx, dword [eax + ebp*4 - 4]
mov eax, dword [edx + 0x24]
test eax, 0x1000
jne 0x4daf3f
and eax, 0x104
cmp eax, 0x104
je 0x4daf3f
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0
push eax
push edx
lea eax, [ebp - 1]
mov dword [esp + 0x80], 0
push eax
push 0x800
push edi
push ecx
push ebx
call fcn.004d9e60
mov ecx, dword [ebx + 8]
add esp, 0x1c
movsx eax, al
cmp eax, dword [ecx]
jne 0x4daf3f
mov eax, dword [esp + 0x74]
or dword [ebx + 0x30], 4
mov dword [ebx + 0x48], eax
mov eax, dword [esp + 0x78]
mov dword [ebx + 0x4c], eax
mov eax, 0x200
test word [ebx + 0x28], ax
je 0x4daf9f
movsx eax, byte [ebx + 0x2d]
cmp eax, dword [ecx]
jne 0x4daf9f
test ebp, ebp
jle 0x4daf9f
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0
push eax
mov eax, dword [edi + 0x18]
mov dword [esp + 0x7c], 0
push dword [eax + ebp*4 - 4]
lea eax, [ebp - 1]
push eax
push 0
push edi
push ecx
push ebx
call fcn.004d9e60
movsx ecx, al
add esp, 0x1c
mov eax, dword [ebx + 8]
cmp ecx, dword [eax]
jne 0x4daf9f
mov eax, dword [esp + 0x74]
or dword [ebx + 0x30], 8
mov dword [ebx + 0x48], eax
mov eax, dword [esp + 0x78]
mov dword [ebx + 0x4c], eax
mov ax, word [edi + 0x10]
mov ecx, dword [esp + 0x70]
mov word [ebx + 0x34], ax
test ecx, ecx
je 0x4db01b
cmp dword [ecx + 0x1f8], 0
je 0x4dafcf
push dword [esp + 0x2c]
push ecx
call fcn.00478920
add esp, 8
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
mov ebx, dword [esp + 0x2c]
cmp ebx, dword [ecx + 0x14c]
jae 0x4db01f
cmp ebx, dword [ecx + 0x144]
jb 0x4daffb
mov eax, dword [ecx + 0x140]
pop ebp
pop edi
mov dword [ebx], eax
xor eax, eax
pop esi
mov dword [ecx + 0x140], ebx
pop ebx
add esp, 0x6c
ret
cmp ebx, dword [ecx + 0x148]
jb 0x4db01f
mov eax, dword [ecx + 0x138]
pop ebp
pop edi
mov dword [ebx], eax
xor eax, eax
pop esi
mov dword [ecx + 0x138], ebx
pop ebx
add esp, 0x6c
ret
mov ebx, dword [esp + 0x2c]
cmp dword [0x5061d8], 0
je 0x4db075
mov eax, dword [0x50df18]
test eax, eax
je 0x4db03b
push eax
call dword [0x506228]
add esp, 4
push ebx
call dword [0x506204]
sub dword [0x50de98], eax
dec dword [0x50debc]
push ebx
call dword [0x5061fc]
mov eax, dword [0x50df18]
add esp, 8
test eax, eax
je 0x4db07f
push eax
call dword [0x506230]
add esp, 4
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
push ebx
call dword [0x5061fc]
add esp, 4
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x6c
ret