Function at 0x4da290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
xor esi, esi
push ebx
sub esp, 0xac
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x50], ecx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xd0]
lea ebx, [eax + 0x6c]
mov dword [esp], ebx
call fcn.00569d40
mov dword [esp], ebx
mov dword [esp + 0x54], eax
call fcn.00569e00
mov edi, eax
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x68], 0
mov dword [esp + 0x48], eax
cmp dword [esp + 0x34], 0xffffffff
sete bl
test ebp, ebp
setne dl
and dl, bl
jne 0x4da480
mov edx, ebx
mov ecx, dword [esp + 0x3c]
cmp dword [esp + 0x40], 0xffffffff
sete byte [esp + 0x5a]
movzx eax, byte [esp + 0x5a]
test ecx, ecx
je 0x4da339
test al, al
jne 0x4da498
xor dl, byte [esp + 0x5a]
mov eax, dword [esp + 0x68]
cmp esi, dword [esp + 0x48]
jae 0x4da450
test dl, dl
je 0x4da450
test eax, eax
jne 0x4da45a
mov edx, dword [esp + 0xdc]
add edx, esi
movzx eax, byte [edx]
mov dword [esp + 0x44], edx
lea edx, [esi + 1]
mov dword [esp + 0x38], edx
mov dword [esp + 0x4c], eax
mov ecx, eax
movzx eax, byte [edi + eax + 0x11d]
test al, al
jne 0x4da3a5
mov eax, dword [edi]
mov eax, dword [eax + 0x20]
cmp eax, 0x4d20f0
jne 0x4da4d8
test cl, cl
je 0x4da3a9
mov eax, dword [esp + 0x4c]
mov byte [edi + eax + 0x11d], cl
mov eax, ecx
cmp al, 0x25
je 0x4da3e0
mov eax, dword [esp + 0x44]
movzx edx, byte [eax]
test ebp, ebp
je 0x4da3bc
test bl, bl
jne 0x4da588
mov eax, dword [esp + 0x34]
cmp dl, al
je 0x4da4f8
or dword [esp + 0x68], 4
mov esi, dword [esp + 0x38]
jmp 0x4da303
mov eax, dword [esp + 0xdc]
movzx eax, byte [eax + esi + 1]
mov dword [esp + 0x44], eax
mov edx, eax
movzx eax, byte [edi + eax + 0x11d]
test al, al
jne 0x4da423
mov eax, dword [edi]
mov eax, dword [eax + 0x20]
cmp eax, 0x4d20f0
jne 0x4db0a0
test dl, dl
je case.0x4da449.4
mov eax, dword [esp + 0x44]
mov byte [edi + eax + 0x11d], dl
mov eax, edx
mov dword [esp + 0x6c], 0
cmp al, 0x45
je 0x4da520
cmp al, 0x4f
je 0x4da520
sub eax, 0x41
cmp al, 0x38
ja case.0x4da449.4
movzx eax, al
jmp dword [eax*4 + 0x5e5684]
test eax, eax
jne 0x4da45a
cmp esi, dword [esp + 0x48]
je 0x4da464
mov eax, dword [esp + 0xd4]
or dword [eax], 4
mov edx, dword [esp + 0x34]
add esp, 0xac
mov eax, ebp
pop ebx
pop esi
pop edi
pop ebp
ret 0x20
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 8], eax
jae 0x4db0c0
xor edx, edx
jmp 0x4da31a
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0xc]
cmp dword [eax + 8], ecx
jb 0x4da33d
mov ecx, eax
mov eax, dword [eax]
mov byte [esp + 0x38], dl
call dword [eax + 0x24]
movzx edx, byte [esp + 0x38]
cmp eax, 0xffffffff
jne 0x4da33d
mov dword [esp + 0x3c], 0
xor edx, 1
jmp 0x4da33d
movsx ecx, cl
mov dword [esp + 4], 0
mov dword [esp], ecx
mov ecx, edi
call eax
sub esp, 8
mov ecx, eax
jmp 0x4da394
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db110
add eax, 1
mov dword [ebp + 8], eax
mov dword [esp + 0x34], 0xffffffff
mov esi, dword [esp + 0x38]
jmp 0x4da303
lea eax, [esi + 2]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xdc]
movzx esi, byte [eax + esi + 2]
movzx eax, byte [edi + esi + 0x11d]
mov edx, esi
test al, al
jne 0x4da43b
mov eax, dword [edi]
mov eax, dword [eax + 0x20]
cmp eax, 0x4d20f0
jne 0x4db0f0
test dl, dl
je case.0x4da449.4
mov eax, edx
mov byte [edi + esi + 0x11d], dl
sub eax, 0x41
cmp al, 0x38
jbe 0x4da446
lea esi, [esi]
or dword [esp + 0x68], 4
lea esi, [esi]
mov esi, dword [esp + 0x38]
add esi, 1
jmp 0x4da303
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db14d
cmp dl, byte [eax]
jne 0x4da3c8
jmp 0x4da504
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0x270f
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test eax, eax
jne 0x4da578
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
lea ecx, [edx + 0x64]
lea eax, [edx - 0x76c]
test edx, edx
cmovs eax, ecx
mov dword [ebx + 0x14], eax
jmp 0x4da578
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x94]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x98]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x9c]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0xa0]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0xa4]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0xa8]
mov dword [esp + 0x84], edx
mov edx, dword [eax + 0xac]
mov dword [esp + 0x88], edx
mov edx, dword [eax + 0xb0]
mov dword [esp + 0x8c], edx
mov edx, dword [eax + 0xb4]
mov dword [esp + 0x90], edx
mov edx, dword [eax + 0xb8]
mov dword [esp + 0x94], edx
mov edx, dword [eax + 0xbc]
mov dword [esp + 0x98], edx
mov eax, dword [eax + 0xc0]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0xc
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9b00
sub esp, 0x24
mov ebp, eax
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test ebx, ebx
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 0x10], eax
jmp 0x4da578
movzx eax, byte [edi + 0x1c]
cmp al, 1
je 0x4db068
test al, al
je 0x4db186
mov eax, dword [edi]
mov eax, dword [eax + 0x1c]
cmp eax, 0x4d2060
je 0x4db068
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x5e5673
mov ecx, edi
mov dword [esp + 8], ebx
mov dword [esp], 0x5e566a
call eax
sub esp, 0xc
jmp 0x4db059
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0x17
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
lea eax, [esp + 0x6c]
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x68]
test edx, edx
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 8], eax
jmp 0x4da578
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0xc
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 1
jmp 0x4da7b5
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0x3b
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test eax, eax
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 4], eax
jmp 0x4da578
movzx eax, byte [edi + 0x1c]
cmp al, 1
je 0x4db088
test al, al
je 0x4db16e
mov eax, dword [edi]
mov eax, dword [eax + 0x1c]
cmp eax, 0x4d2060
je 0x4db088
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x5e5679
mov ecx, edi
mov dword [esp + 8], ebx
mov dword [esp], 0x5e5673
call eax
sub esp, 0xc
jmp 0x4db059
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0x3c
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test eax, eax
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx], eax
jmp 0x4da578
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x64]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x68]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x6c]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x70]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x74]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0x78]
mov dword [esp + 0x84], edx
mov edx, dword [eax + 0x7c]
mov dword [esp + 0x88], edx
mov edx, dword [eax + 0x80]
mov dword [esp + 0x8c], edx
mov edx, dword [eax + 0x84]
mov dword [esp + 0x90], edx
mov edx, dword [eax + 0x88]
mov dword [esp + 0x94], edx
mov edx, dword [eax + 0x8c]
mov dword [esp + 0x98], edx
mov eax, dword [eax + 0x90]
jmp 0x4da6c5
test ebp, ebp
je 0x4daa20
test bl, bl
je 0x4daa20
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db280
movzx ebx, byte [eax]
mov edx, ebx
jmp 0x4daa29
mov eax, dword [esp + 0x34]
mov edx, eax
movzx ebx, al
movzx eax, byte [edi + ebx + 0x11d]
test al, al
jne 0x4daa56
mov eax, dword [edi]
mov eax, dword [eax + 0x20]
cmp eax, 0x4d20f0
jne 0x4db1ae
test dl, dl
je case.0x4da449.4
mov byte [edi + ebx + 0x11d], dl
mov eax, edx
cmp al, 0xa
jne case.0x4da449.4
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db258
add eax, 1
mov dword [ebp + 8], eax
mov dword [esp + 0x34], 0xffffffff
jmp 0x4da578
test ebp, ebp
je 0x4daaa0
test bl, bl
je 0x4daaa0
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db2ca
movzx eax, byte [eax]
jmp 0x4daaa5
movzx eax, byte [esp + 0x34]
mov edx, dword [edi + 0x18]
test byte [edx + eax*2], 1
je case.0x4da449.4
lea eax, [esp + 0x68]
lea ebx, [esp + 0x70]
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0xe
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], 0x59e880
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9b00
sub esp, 0x24
mov ebp, eax
cmp edx, 0xffffffff
sete byte [esp + 0x44]
test ebp, ebp
mov dword [esp + 0x5c], edx
setne cl
mov dword [esp + 0x34], edx
movzx edx, byte [esp + 0x44]
mov dword [esp + 0x4c], eax
and cl, dl
mov byte [esp + 0x5b], cl
jne 0x4db218
mov esi, dword [esp + 0x3c]
test esi, esi
setne al
and al, byte [esp + 0x5a]
mov esi, eax
jne 0x4db1ca
cmp dl, byte [esp + 0x5a]
je 0x4da578
mov eax, dword [esp + 0x68]
or eax, dword [esp + 0x70]
jne 0x4da578
cmp byte [esp + 0x5b], 0
mov esi, dword [esp + 0x5c]
jne 0x4db33b
cmp byte [edi + 0x1c], 0
je 0x4db29b
movzx edx, byte [edi + 0x4a]
mov eax, esi
cmp al, dl
je 0x4dabab
test ebp, ebp
je 0x4dab8f
cmp byte [esp + 0x44], 0
jne 0x4db376
mov esi, dword [esp + 0x5c]
cmp byte [edi + 0x1c], 0
je 0x4db2fb
movzx edx, byte [edi + 0x48]
mov eax, esi
cmp al, dl
jne 0x4da578
lea eax, [esp + 0x68]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov ecx, ebp
mov dword [esp + 0x1c], 2
mov dword [esp + 0x18], 0x17
mov dword [esp + 0x14], 0
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.004d9680
sub esp, 0x28
lea ecx, [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], ecx
mov ecx, ebp
mov dword [esp + 0x18], 0x3b
mov dword [esp + 0x14], 0
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov dword [esp + 0x34], edx
jmp 0x4da578
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x48]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x4c]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x54]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x58]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x84], edx
mov eax, dword [eax + 0x60]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 7
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9b00
sub esp, 0x24
mov ebp, eax
mov esi, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test esi, esi
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 0x18], eax
jmp 0x4da578
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x1c], eax
lea esi, [esi]
lea esi, [esi]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x50]
mov dword [esp], ebp
mov dword [esp + 0x18], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004da290
sub esp, 0x20
mov ebp, eax
mov dword [esp + 0x34], edx
jmp 0x4da578
movzx eax, byte [edi + 0x1c]
cmp al, 1
je 0x4db040
test al, al
je 0x4db17a
mov eax, dword [edi]
mov eax, dword [eax + 0x1c]
cmp eax, 0x4d2060
je 0x4db040
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x5e5682
mov ecx, edi
mov dword [esp + 8], ebx
mov dword [esp], 0x5e5679
call eax
sub esp, 0xc
jmp 0x4db059
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x1c], eax
jmp 0x4dad30
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x30]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x34]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x38]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x3c]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0x40]
mov dword [esp + 0x84], edx
mov eax, dword [eax + 0x44]
jmp 0x4dac9a
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0x1f
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 1
lea eax, [esp + 0x6c]
mov dword [esp], ebp
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x50]
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test ecx, ecx
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 0xc], eax
jmp 0x4da578
test ebp, ebp
je 0x4daf18
test bl, bl
je 0x4daf18
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db2e3
movzx ecx, byte [eax]
mov edx, dword [edi + 0x18]
test byte [edx + ecx*2], 0x20
je 0x4db11d
add eax, 1
mov dword [ebp + 8], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 9
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], 1
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0xffffffff
jmp 0x4dae67
mov eax, dword [esp + 0x34]
mov edx, dword [edi + 0x18]
movzx eax, al
test byte [edx + eax*2], 0x20
je 0x4db11d
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jb 0x4daebc
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x28]
jmp 0x4daec2
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0xc
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.004d9680
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x34], edx
test eax, eax
jne 0x4da578
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
sub eax, 1
mov dword [ebx + 0x10], eax
jmp 0x4da578
test ebp, ebp
je 0x4dafe0
test bl, bl
je 0x4dafe0
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db265
movzx ebx, byte [eax]
mov edx, ebx
jmp 0x4dafe9
mov eax, dword [esp + 0x34]
mov edx, eax
movzx ebx, al
movzx eax, byte [edi + ebx + 0x11d]
test al, al
jne 0x4db016
mov eax, dword [edi]
mov eax, dword [eax + 0x20]
cmp eax, 0x4d20f0
jne 0x4db192
test dl, dl
je case.0x4da449.4
mov byte [edi + ebx + 0x11d], dl
mov eax, edx
cmp al, 9
jne case.0x4da449.4
jmp 0x4daa5e
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov dword [esp + 0x1c], eax
jmp 0x4dad30
mov dword [esp + 0x70], 0x253a4825
lea ebx, [esp + 0x70]
mov dword [esp + 0x74], 0x53253a4d
mov byte [esp + 0x78], 0
mov dword [esp + 0x1c], ebx
jmp 0x4dad30
mov dword [esp + 0x70], 0x252f6d25
lea ebx, [esp + 0x70]
mov dword [esp + 0x74], 0x79252f64
mov byte [esp + 0x78], 0
jmp 0x4db059
mov eax, 0x4d
mov dword [esp + 0x70], 0x253a4825
lea ebx, [esp + 0x70]
mov word [esp + 0x74], ax
jmp 0x4db059
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, edi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x4da40e
mov eax, dword [ebp]
mov byte [esp + 0x5a], dl
mov ecx, ebp
call dword [eax + 0x24]
movzx edx, byte [esp + 0x5a]
cmp eax, 0xffffffff
mov eax, 0
cmovne edx, eax
mov eax, 0
cmove ebp, eax
jmp 0x4da31a
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, edi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x4da555
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x28]
jmp 0x4da50a
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0x1f
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0xa
jmp 0x4dae44
mov eax, dword [ebp]
mov byte [esp + 0x5a], dl
mov ecx, ebp
mov ebx, 0
call dword [eax + 0x24]
movzx edx, byte [esp + 0x5a]
cmp eax, 0xffffffff
cmove ebp, ebx
jmp 0x4da3c0
mov ecx, edi
call fcn.004d1d50
jmp 0x4da8cc
mov ecx, edi
call fcn.004d1d50
jmp 0x4dad94
mov ecx, edi
call fcn.004d1d50
jmp 0x4da757
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, edi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x4db005
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, edi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x4daa45
mov eax, dword [esp + 0x3c]
mov byte [esp + 0x5a], 0
mov ecx, dword [eax + 0xc]
cmp dword [eax + 8], ecx
jb 0x4dab45
mov ecx, eax
mov eax, dword [eax]
mov byte [esp + 0x4c], dl
call dword [eax + 0x24]
movzx edx, byte [esp + 0x4c]
add eax, 1
mov eax, 0
cmovne esi, eax
mov eax, esi
mov byte [esp + 0x5a], al
mov eax, 0
cmovne eax, dword [esp + 0x3c]
mov dword [esp + 0x3c], eax
jmp 0x4dab45
mov esi, dword [ebp + 0xc]
xor edx, edx
cmp dword [ebp + 8], esi
jb 0x4dab30
mov eax, dword [ebp]
mov byte [esp + 0x4c], dl
mov ecx, ebp
call dword [eax + 0x24]
movzx edx, byte [esp + 0x4c]
add eax, 1
jne 0x4dab30
movzx edx, byte [esp + 0x5b]
xor ebp, ebp
mov byte [esp + 0x5b], 0
jmp 0x4dab30
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x28]
jmp 0x4daa70
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
je 0x4db34b
mov edx, eax
movzx ebx, al
jmp 0x4dafe9
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
je 0x4db32a
mov edx, eax
movzx ebx, al
jmp 0x4daa29
mov ecx, edi
call fcn.004d1d50
mov eax, dword [edi]
mov edx, 0x2d
mov eax, dword [eax + 0x18]
cmp eax, 0x4d20a0
je 0x4dab7a
mov ecx, edi
mov dword [esp], 0x2d
call eax
mov edx, eax
push ecx
jmp 0x4dab7a
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
je 0x4db386
movzx eax, al
jmp 0x4daaa5
mov eax, dword [ebp]
mov ecx, ebp
mov ebx, 0
call dword [eax + 0x24]
cmp eax, 0xffffffff
cmove ebp, ebx
jmp 0x4daf1c
mov ecx, edi
call fcn.004d1d50
mov eax, dword [edi]
mov edx, 0x2b
mov eax, dword [eax + 0x18]
cmp eax, 0x4d20a0
je 0x4daba1
mov dword [esp], 0x2b
mov ecx, edi
call eax
push edx
mov edx, eax
jmp 0x4daba1
mov ebx, 0xff
mov edx, 0xffffffff
xor ebp, ebp
jmp 0x4daa29
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db35c
movzx esi, byte [eax]
jmp 0x4dab6c
mov ebx, 0xff
mov edx, 0xffffffff
xor ebp, ebp
jmp 0x4dafe9
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
mov esi, eax
mov eax, 0
cmove ebp, eax
jmp 0x4dab6c
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4db392
movzx esi, byte [eax]
jmp 0x4dab93
mov eax, 0xff
xor ebp, ebp
jmp 0x4daaa5
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
mov esi, eax
mov eax, 0
cmove ebp, eax
jmp 0x4dab93