Function at 0x4f7360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
push ebx
mov ebx, dword [esp + 0x74]
push esi
push edi
mov dword [esp + 0x4c], 0
mov eax, dword [ebx]
movzx edx, byte [ebx + 0x2c]
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov ecx, dword [eax]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x20], edx
cmp edx, 1
jg 0x4f73aa
mov edi, 1
jmp 0x4f73b7
lea edi, [edx - 2]
neg edi
sbb edi, edi
and edi, 5
add edi, 5
mov eax, dword [ebx + 8]
mov dword [esp + 0x48], edi
test eax, eax
je 0x4f73d1
cmp word [esp + 0x80], 0
je 0x4f73d1
mov esi, dword [eax]
jmp 0x4f73d3
xor esi, esi
lea eax, [edx + 8]
mov dword [esp + 0x30], esi
imul eax, edi
lea eax, [esi + eax*4]
add eax, eax
cdq
push edx
push eax
push ecx
call fcn.004ad310
mov edx, eax
add esp, 0xc
mov dword [esp + 0x2c], edx
test edx, edx
jne 0x4f7402
pop edi
pop esi
lea eax, [edx + 7]
pop ebx
add esp, 0x6c
ret
mov eax, edi
shl eax, 5
lea ecx, [eax + edx]
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x18], 0
mov dword [esp + 0x28], ecx
mov dword [ecx + 0x1c], 0
add ecx, eax
push ebp
lea eax, [edi + edi]
mov ebp, edx
mov dword [esp + 0x1c], ebp
test eax, eax
jle 0x4f7470
mov esi, dword [esp + 0x24]
shl esi, 2
add edx, 0x18
nop
mov dword [edx], ecx
lea edx, [edx + 0x20]
dec eax
add ecx, esi
test eax, eax
jg 0x4f7460
mov esi, dword [esp + 0x34]
test esi, esi
je 0x4f7487
lea eax, [esi + esi]
mov dword [esp + 0x60], ecx
push eax
push 0
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 0x88]
cmp eax, 0x30
jb 0x4f749b
mov eax, 0x30
mov edi, dword [esp + 0x2c]
mov word [edi + 0x10], ax
mov eax, 1
mov dword [esp + 0x5c], eax
test esi, esi
je 0x4f74c6
cmp dword [esp + 0x24], 0
jle 0x4f74bc
or eax, 0xffffffff
jmp 0x4f74be
mov eax, esi
mov byte [edi + 0x16], al
mov eax, 1
xor edx, edx
mov dword [esp + 0x38], edx
cmp dword [esp + 0x24], edx
jle 0x4f7af8
mov esi, dword [esp + 0x24]
lea ebx, [ebx]
xor ecx, ecx
mov dword [esp + 0x18], ecx
test eax, eax
jle 0x4f79ae
add edi, 0x10
mov dword [esp + 0x20], edi
mov ebx, dword [ebx + 0x3c]
mov dword [esp + 0x28], ebx
test ebx, ebx
je 0x4f7989
mov al, byte [edi + 6]
mov edx, dword [edi - 0x10]
mov ecx, edx
mov esi, dword [edi - 0xc]
not ecx
and ecx, dword [ebx]
mov byte [esp + 0x13], al
lea eax, [edi - 0x10]
mov dword [esp + 0x48], eax
mov eax, esi
not eax
mov dword [esp + 0x74], 0
and eax, dword [ebx + 4]
or ecx, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], esi
jne 0x4f7a20
mov ebp, dword [ebx + 8]
mov ecx, edx
mov eax, esi
and ecx, ebp
and eax, dword [ebx + 0xc]
or ecx, eax
jne 0x4f7a17
test dword [ebx + 0x24], 0x4000
je 0x4f756c
cmp word [edi], 3
jl 0x4f7a17
mov edx, dword [esp + 0x28]
movzx ebx, word [edi]
mov ax, word [edx + 0x14]
movzx edx, word [edx + 0x12]
add ax, bx
movzx ecx, ax
cmp dx, cx
jl 0x4f75b1
movsx esi, cx
movsx ecx, dx
lea eax, [esi + 0x31]
cmp ecx, eax
jle 0x4f7597
mov esi, edx
jmp 0x4f75dd
lea eax, [esi + 0x1f]
cmp ecx, eax
jle 0x4f75a3
lea eax, [edx + 1]
jmp 0x4f75da
sub ecx, esi
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
add ax, dx
jmp 0x4f75da
movsx esi, dx
movsx edx, cx
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x4f75c2
mov esi, ecx
jmp 0x4f75dd
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x4f75ce
lea eax, [ecx + 1]
jmp 0x4f75da
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
movzx esi, ax
movzx ecx, word [edi + 4]
mov di, si
mov dword [esp + 0x14], esi
movsx edx, cx
cmp di, cx
jl 0x4f761b
movsx ecx, di
lea eax, [edx + 0x31]
cmp ecx, eax
jg 0x4f764b
lea eax, [edx + 0x1f]
cmp ecx, eax
jle 0x4f7604
inc esi
jmp 0x4f7644
sub ecx, edx
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
add di, ax
mov word [esp + 0x14], di
mov esi, dword [esp + 0x14]
jmp 0x4f764b
movsx esi, di
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x4f7629
mov esi, ecx
jmp 0x4f7644
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x4f7635
lea eax, [ecx + 1]
jmp 0x4f7641
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
movzx esi, ax
mov dword [esp + 0x14], esi
mov di, si
mov eax, dword [esp + 0x28]
or dword [esp + 0x3c], ebp
mov ax, word [eax + 0x16]
add ax, bx
mov ebx, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x40]
or eax, dword [ebx + 0xc]
mov dword [esp + 0x40], eax
mov al, byte [esp + 0x13]
test al, al
jns 0x4f76b3
mov ecx, dword [esp + 0x80]
lea eax, [esp + 0x74]
push eax
push ebx
push dword [esp + 0x40]
movzx eax, word [ecx + 0x28]
push eax
push dword [esp + 0x58]
push dword [ecx + 8]
push ecx
call fcn.004f6b50
mov edx, dword [esp + 0x90]
add esp, 0x1c
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x13], al
mov dword [esp + 0x64], edx
jmp 0x4f76c1
mov edx, dword [esp + 0x20]
mov ecx, dword [edx - 8]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx - 4]
mov dword [esp + 0x68], ecx
test al, al
js 0x4f77ef
movsx ecx, al
mov eax, dword [esp + 0x34]
cmp ecx, eax
jge 0x4f77ef
mov edx, dword [esp + 0x60]
cmp word [edx + ecx*2], 0
lea ebp, [edx + ecx*2]
jne 0x4f7762
mov edx, dword [esp + 0x84]
sub eax, ecx
imul eax, eax, 0x64
movzx ebx, dx
cdq
idiv dword [esp + 0x34]
cdq
push edx
push eax
call fcn.004c2bb0
mov edx, dword [esp + 0x8c]
add esp, 8
lea ecx, [edx - 0x32]
add ax, cx
mov ecx, 0x4000
movzx eax, ax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x80]
test word [eax + 0x28], cx
je 0x4f773a
movzx eax, word [eax + 0x2a]
cmp ax, dx
jge 0x4f773a
mov ebx, eax
cmp bx, 0xa
jg 0x4f7744
xor eax, eax
jmp 0x4f7756
movsx eax, bx
cdq
push edx
push eax
call fcn.004c2bb0
cwde
add esp, 8
sub eax, 0x21
add eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
mov word [ebp], ax
movzx ecx, word [ebp]
movsx edx, cx
cmp di, cx
jl 0x4f77af
movsx ecx, di
lea eax, [edx + 0x31]
cmp ecx, eax
jle 0x4f7783
movzx eax, di
add eax, 5
movzx edx, ax
jmp 0x4f77fc
lea eax, [edx + 0x1f]
cmp ecx, eax
jle 0x4f7798
lea eax, [esi + 1]
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4f77fc
sub ecx, edx
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
add ax, di
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4f77fc
movsx esi, di
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x4f77c3
mov eax, ecx
add eax, 5
movzx edx, ax
jmp 0x4f77fc
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x4f77d8
lea eax, [ecx + 1]
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4f77fc
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
movzx eax, ax
add eax, 5
movzx edx, ax
jmp 0x4f77fc
sub esi, 2
movzx edx, di
mov dword [esp + 0x14], esi
mov di, si
mov ebp, dword [esp + 0x1c]
xor ecx, ecx
mov esi, ebp
cmp dword [esp + 0x18], ecx
jle 0x4f7838
mov ebp, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
cmp dword [esi], ebp
jne 0x4f782c
mov eax, dword [esp + 0x40]
cmp dword [esi + 4], eax
jne 0x4f7828
mov al, byte [esi + 0x16]
xor al, byte [esp + 0x13]
jns 0x4f7862
mov eax, dword [esp + 0x18]
inc ecx
add esi, 0x20
cmp ecx, eax
jl 0x4f7812
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, dword [esp + 0x4c]
jl 0x4f7896
mov esi, dword [esp + 0x58]
cmp dx, si
jg 0x4f7a29
jne 0x4f785c
cmp di, word [esp + 0x54]
jge 0x4f7a29
mov esi, dword [esp + 0x50]
jmp 0x4f789d
cmp ecx, dword [esp + 0x18]
jge 0x4f7834
movzx eax, word [esi + 0x12]
cmp ax, dx
jl 0x4f796a
mov ebp, dword [esp + 0x44]
jne 0x4f78a6
movzx eax, word [esi + 0x10]
cmp ax, bp
jl 0x4f796a
jne 0x4f78a6
cmp word [esi + 0x14], di
jle 0x4f796a
jmp 0x4f78a6
mov esi, ecx
inc ecx
mov dword [esp + 0x18], ecx
shl esi, 5
add esi, ebp
mov ebp, dword [esp + 0x44]
mov ecx, dword [ebx + 8]
mov eax, dword [esp + 0x48]
or ecx, dword [eax]
mov eax, dword [ebx + 0xc]
mov ebx, dword [esp + 0x48]
or eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x68]
mov dword [esi + 0xc], eax
mov al, byte [esp + 0x13]
mov byte [esi + 0x16], al
mov eax, dword [esp + 0x38]
mov word [esi + 0x14], di
mov dword [esi], ecx
mov word [esi + 0x10], bp
lea edi, [eax*4]
mov word [esi + 0x12], dx
mov eax, dword [esp + 0x20]
push edi
push dword [eax + 8]
push dword [esi + 0x18]
call sub.MSVCRT.dll_memcpy
mov eax, dword [esi + 0x18]
add esp, 0xc
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov dword [edi + eax], ebx
mov edi, dword [esp + 0x4c]
cmp ecx, edi
jl 0x4f796e
mov eax, dword [esp + 0x1c]
mov ecx, 1
mov dword [esp + 0x50], 0
movzx esi, word [eax + 0x12]
movzx ebp, word [eax + 0x10]
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], ebp
cmp edi, ecx
jle 0x4f796a
add eax, 0x32
jmp 0x4f7940
movzx edx, word [eax]
cmp dx, si
jg 0x4f7950
jne 0x4f795a
cmp word [eax + 2], bp
jle 0x4f795a
movzx ebp, word [eax + 2]
mov esi, edx
mov dword [esp + 0x50], ecx
inc ecx
add eax, 0x20
cmp ecx, edi
jl 0x4f7940
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], esi
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [ebx + 0x34]
mov dword [esp + 0x28], ebx
test ebx, ebx
jne 0x4f7504
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x80]
add edi, 0x20
dec eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x5c], eax
jne 0x4f74f5
mov edx, dword [esp + 0x38]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, ebp
mov dword [esp + 0x1c], edi
mov ebp, edi
inc edx
mov dword [esp + 0x38], edx
mov edi, eax
mov dword [esp + 0x2c], edi
mov eax, ecx
mov dword [esp + 0x5c], eax
cmp edx, esi
jl 0x4f74e0
test ecx, ecx
jne 0x4f7af8
push str.no_query_solution
push dword [esp + 0x70]
call fcn.004af3d0
mov ecx, dword [esp + 0x78]
add esp, 8
test ecx, ecx
je 0x4f7a84
cmp dword [ecx + 0x1f8], 0
je 0x4f7a32
push dword [esp + 0x30]
push ecx
call fcn.00493c50
add esp, 8
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
mov ecx, dword [esp + 0x18]
jmp 0x4f7972
mov ecx, dword [esp + 0x18]
jmp 0x4f7976
mov edi, dword [esp + 0x20]
jmp 0x4f7976
mov ebx, dword [esp + 0x30]
cmp ebx, dword [ecx + 0x14c]
jae 0x4f7a88
cmp ebx, dword [ecx + 0x144]
jb 0x4f7a61
mov eax, dword [ecx + 0x140]
pop ebp
pop edi
mov dword [ebx], eax
mov eax, 1
pop esi
mov dword [ecx + 0x140], ebx
pop ebx
add esp, 0x6c
ret
cmp ebx, dword [ecx + 0x148]
jb 0x4f7a88
mov eax, dword [ecx + 0x138]
pop ebp
pop edi
mov dword [ebx], eax
mov eax, 1
pop esi
mov dword [ecx + 0x138], ebx
pop ebx
add esp, 0x6c
ret
mov ebx, dword [esp + 0x30]
cmp dword [0x52e2d8], 0
je 0x4f7ae1
mov eax, dword [0x530c58]
test eax, eax
je 0x4f7aa4
push eax
call dword [0x52e328]
add esp, 4
push ebx
call dword [0x52e304]
sub dword [0x530be8], eax
dec dword [0x530c0c]
push ebx
call dword [0x52e2fc]
mov eax, dword [0x530c58]
add esp, 8
test eax, eax
je 0x4f7aeb
push eax
call dword [0x52e330]
add esp, 4
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
push ebx
call dword [0x52e2fc]
add esp, 4
pop ebp
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x6c
ret
cmp eax, 1
jle 0x4f7b19
lea ecx, [edi + 0x20]
lea edx, [eax - 1]
mov ax, word [edi + 0x12]
cmp ax, word [ecx + 0x12]
jle 0x4f7b0f
mov edi, ecx
add ecx, 0x20
dec edx
jne 0x4f7b03
mov dword [esp + 0x2c], edi
mov ebx, dword [esp + 0x24]
xor esi, esi
mov edi, dword [esp + 0x80]
mov ebp, dword [esp + 0x2c]
test ebx, ebx
jle 0x4f7b5e
lea edx, [edi + 0x324]
mov eax, dword [ebp + 0x18]
lea edx, [edx + 0x58]
mov eax, dword [eax + esi*4]
inc esi
mov dword [edx - 0x44], eax
mov al, byte [eax + 0x10]
mov byte [edx - 0x58], al
movzx eax, al
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*8 + 0x34]
mov dword [edx - 0x88], eax
cmp esi, ebx
jl 0x4f7b34
movzx eax, word [edi + 0x28]
test eax, 0x100
je 0x4f7bb2
test al, al
js 0x4f7bb2
cmp byte [edi + 0x2f], 0
jne 0x4f7bb2
cmp word [esp + 0x84], 0
mov esi, ebx
je 0x4f7bb4
lea eax, [esp + 0x74]
push eax
mov eax, dword [ebp + 0x18]
push dword [eax + esi*4 - 4]
lea eax, [esi - 1]
push eax
push pe_nt_image_headers32
push ebp
push dword [edi + 0xc]
push edi
call fcn.004f6b50
movsx ecx, al
add esp, 0x1c
mov eax, dword [edi + 0xc]
cmp ecx, dword [eax]
jne 0x4f7bb4
mov byte [edi + 0x2f], 2
jmp 0x4f7bb4
mov esi, ebx
and dword [edi + 0x30], 0xfffffffb
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x4f7cd6
movzx ebx, word [edi + 0x28]
test bl, bl
jns 0x4f7be0
movsx eax, byte [ebp + 0x16]
cmp eax, dword [ecx]
jne 0x4f7c76
mov byte [edi + 0x2f], 2
jmp 0x4f7c76
mov al, byte [ebp + 0x16]
mov byte [edi + 0x2d], al
mov eax, dword [ebp + 8]
mov dword [edi + 0x48], eax
mov eax, dword [ebp + 0xc]
mov dword [edi + 0x4c], eax
mov al, byte [edi + 0x2d]
test al, al
jg 0x4f7c65
mov byte [edi + 0x2d], 0
test esi, esi
jle 0x4f7c76
mov eax, dword [ebp + 0x18]
mov edx, dword [eax + esi*4 - 4]
mov eax, dword [edx + 0x24]
test eax, 0x1000
jne 0x4f7c76
and eax, 0x104
cmp eax, 0x104
je 0x4f7c76
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0
push eax
push edx
lea eax, [esi - 1]
mov dword [esp + 0x80], 0
push eax
push 0x800
push ebp
push ecx
push edi
call fcn.004f6b50
mov ecx, dword [edi + 8]
add esp, 0x1c
movsx eax, al
cmp eax, dword [ecx]
jne 0x4f7c76
mov eax, dword [esp + 0x74]
mov dword [edi + 0x48], eax
mov eax, dword [esp + 0x78]
mov dword [edi + 0x4c], eax
jmp 0x4f7c72
test esi, esi
je 0x4f7c76
cmp al, 1
jne 0x4f7c76
test bl, 3
je 0x4f7c76
or dword [edi + 0x30], 4
mov eax, 0x200
test word [edi + 0x28], ax
je 0x4f7cd6
movsx eax, byte [edi + 0x2d]
cmp eax, dword [ecx]
jne 0x4f7cd6
test esi, esi
jle 0x4f7cd6
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0
push eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x7c], 0
push dword [eax + esi*4 - 4]
lea eax, [esi - 1]
push eax
push 0
push ebp
push ecx
push edi
call fcn.004f6b50
movsx ecx, al
add esp, 0x1c
mov eax, dword [edi + 8]
cmp ecx, dword [eax]
jne 0x4f7cd6
mov eax, dword [esp + 0x74]
or dword [edi + 0x30], 8
mov dword [edi + 0x48], eax
mov eax, dword [esp + 0x78]
mov dword [edi + 0x4c], eax
mov ax, word [ebp + 0x10]
mov ecx, dword [esp + 0x70]
mov word [edi + 0x34], ax
test ecx, ecx
je 0x4f7d52
cmp dword [ecx + 0x1f8], 0
je 0x4f7d06
push dword [esp + 0x30]
push ecx
call fcn.00493c50
add esp, 8
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
mov ebx, dword [esp + 0x30]
cmp ebx, dword [ecx + 0x14c]
jae 0x4f7d56
cmp ebx, dword [ecx + 0x144]
jb 0x4f7d32
mov eax, dword [ecx + 0x140]
pop ebp
pop edi
mov dword [ebx], eax
xor eax, eax
pop esi
mov dword [ecx + 0x140], ebx
pop ebx
add esp, 0x6c
ret
cmp ebx, dword [ecx + 0x148]
jb 0x4f7d56
mov eax, dword [ecx + 0x138]
pop ebp
pop edi
mov dword [ebx], eax
xor eax, eax
pop esi
mov dword [ecx + 0x138], ebx
pop ebx
add esp, 0x6c
ret
mov ebx, dword [esp + 0x30]
cmp dword [0x52e2d8], 0
je 0x4f7dac
mov eax, dword [0x530c58]
test eax, eax
je 0x4f7d72
push eax
call dword [0x52e328]
add esp, 4
push ebx
call dword [0x52e304]
sub dword [0x530be8], eax
dec dword [0x530c0c]
push ebx
call dword [0x52e2fc]
mov eax, dword [0x530c58]
add esp, 8
test eax, eax
je 0x4f7db6
push eax
call dword [0x52e330]
add esp, 4
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x6c
ret
push ebx
call dword [0x52e2fc]
add esp, 4
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x6c
ret