Function at 0x4b56c0
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, ecx
mov dword [esp + 0x10], 0
push ebx
push esi
mov esi, edx
mov dword [esp + 0xc], eax
mov ebx, dword [eax]
xor ecx, ecx
mov edx, dword [ebp + 0x14]
mov eax, 0xa2
push edi
xor edi, edi
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0x38], eax
mov dword [edx + 0x1c], 0xffffffff
test esi, esi
je 0x4b5766
test byte [ecx + 0x18], 6
je 0x4b5728
mov dword [esp + 0x28], edi
jmp 0x4b5766
xor edi, edi
cmp dword [ebx + 0x14], edi
jle 0x4b5764
mov ebx, dword [ebx + 0x10]
mov edx, dword [ebx]
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b580e
test ecx, ecx
jne 0x4b5820
mov ecx, dword [esp + 0x2c]
add edi, edi
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + edi*8 + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
xor edi, edi
mov esi, dword [ebp + 8]
nop dword [eax]
mov eax, dword [ecx + 4]
mov dword [esp + 0x48], eax
test eax, eax
je 0x4b59c6
xor ecx, ecx
lea esi, [eax + 8]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], esi
cmp dword [eax], ecx
jle 0x4b599f
mov eax, dword [esi + 0x14]
mov ebx, dword [esi + 0x10]
mov dword [esp + 0x34], ebx
test eax, eax
je 0x4b586d
test dword [eax + 8], 0x800
je 0x4b586d
mov ebx, dword [eax]
xor esi, esi
mov dword [esp + 0x44], 0
cmp dword [ebx], esi
jle 0x4b5858
lea edi, [ebx + 0xc]
nop word [eax + eax]
push dword [esp + 0x28]
mov edx, dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, dword [edi]
call fcn.004b55f0
add esp, 8
test eax, eax
je 0x4b5840
mov eax, dword [esp + 0x14]
inc dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x18], 2
mov word [eax + 0x20], si
mov eax, 1
mov dword [esp + 0x44], eax
jmp 0x4b5844
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b5826
inc edx
jmp 0x4b5736
mov eax, dword [esp + 0x2c]
inc edi
add ebx, 0x10
cmp edi, dword [eax + 0x14]
jge 0x4b575e
mov esi, dword [esp + 0x28]
jmp 0x4b5732
mov eax, dword [esp + 0x44]
inc esi
add edi, 0x18
cmp esi, dword [ebx]
jl 0x4b57d0
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x4b597c
mov eax, dword [ebp + 8]
mov esi, dword [esp + 0x14]
test eax, eax
je 0x4b5980
mov ebx, dword [esp + 0x34]
jmp 0x4b5870
mov eax, dword [ebp + 8]
cmp dword [esp + 0x28], 0
je 0x4b5884
mov edx, dword [esp + 0x30]
cmp dword [ebx + 0x48], edx
jne 0x4b5980
test eax, eax
je 0x4b58f3
mov edi, dword [esi + 0xc]
mov edx, edi
test edi, edi
jne 0x4b5893
mov edx, dword [ebx]
mov esi, eax
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b58d4
test ecx, ecx
jne 0x4b58ea
mov eax, dword [esp + 0x10]
cmp byte [eax + 0xc8], 2
jb 0x4b58f3
test edi, edi
je 0x4b58f3
mov eax, dword [eax + 0x110]
test eax, eax
je 0x4b58f3
mov ecx, dword [ebp + 0x14]
add ecx, 0x2c
cmp dword [eax], ecx
je 0x4b58ed
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b58c7
jmp 0x4b58f3
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b5978
inc edx
jmp 0x4b5897
mov dword [eax], 0
mov ecx, dword [esp + 0x18]
mov eax, ecx
inc ecx
mov dword [esp + 0x18], ecx
test eax, eax
jne 0x4b590a
mov edi, dword [esp + 0x14]
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x34]
xor edi, edi
mov ebx, dword [ebx + 4]
movsx eax, word [eax + 0x2a]
test eax, eax
jle 0x4b5978
nop dword [eax + eax]
mov esi, dword [ebp + 0xc]
mov edx, dword [ebx]
sub esi, edx
movzx eax, byte [edx]
movzx ecx, byte [esi + edx]
cmp eax, ecx
jne 0x4b5a32
test eax, eax
jne 0x4b5a48
mov esi, dword [esp + 0x1c]
cmp esi, 1
jne 0x4b5a4e
mov eax, dword [esp + 0x14]
test byte [eax + 0x24], 4
jne 0x4b5968
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0x34]
call fcn.004b5580
test eax, eax
je 0x4b5a4e
mov ecx, dword [esp + 0x34]
inc edi
add ebx, 0x10
movsx eax, word [ecx + 0x2a]
cmp edi, eax
jl 0x4b5920
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x48]
inc ecx
add esi, 0x48
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], esi
cmp ecx, dword [eax]
jl 0x4b5794
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4b59c3
mov eax, dword [edi + 0x2c]
mov dword [edx + 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [edx + 0x2c], eax
test byte [edi + 0x24], 8
je 0x4b59bc
or dword [edx + 4], 0x100000
mov eax, dword [eax + 0x48]
mov dword [esp + 0x30], eax
mov esi, dword [ebp + 8]
cmp dword [esp + 0x28], 0
mov eax, dword [esp + 0x18]
jne 0x4b5d04
test esi, esi
je 0x4b5d04
test eax, eax
jne 0x4b5d04
mov eax, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x24], ebx
cmp dword [eax + 0x78], ebx
je 0x4b5ae8
movzx edi, byte [eax + 0x90]
cmp edi, 0x7c
je 0x4b5ab0
mov edx, 0x70dc68
sub esi, edx
nop
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5a95
test ecx, ecx
jne 0x4b5aa7
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x1c], 1
jmp 0x4b5add
movzx ecx, byte [ecx + 0x6cd730]
movzx eax, byte [eax + 0x6cd730]
sub eax, ecx
jne 0x4b5968
inc edx
jmp 0x4b5927
mov eax, dword [esp + 0x14]
inc esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], esi
movsx eax, word [eax + 0x28]
cmp edi, eax
jne 0x4b5a7e
mov edx, dword [ebp + 0x14]
or eax, 0xffffffff
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
mov word [edx + 0x20], ax
jmp 0x4b5983
mov edx, dword [ebp + 0x14]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
movsx eax, di
mov word [edx + 0x20], ax
jmp 0x4b5983
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b5aad
inc edx
jmp 0x4b5a10
mov esi, dword [ebp + 8]
cmp edi, 0x7b
je 0x4b5ae8
mov edx, 0x70dc64
sub esi, edx
nop dword [eax]
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5b8e
test ecx, ecx
jne 0x4b5ba4
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x1c], ebx
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx + 0x78]
mov dword [esp + 0x24], ebx
mov eax, dword [ebp + 0x10]
test dword [eax + 0x18], 0x200
je 0x4b5b30
mov edi, dword [eax + 8]
test edi, edi
je 0x4b5b30
mov esi, dword [ebp + 8]
mov edx, 0x70dc8c
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5baa
test ecx, ecx
jne 0x4b5bc0
mov eax, dword [edi + 0x14]
mov ebx, dword [eax + 0x18]
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x24], ebx
mov dword [eax + 0x1c], 2
test ebx, ebx
je 0x4b5d0c
mov eax, dword [ebx + 0x48]
xor edi, edi
movsx ecx, word [ebx + 0x2a]
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x34], ecx
test ecx, ecx
jle 0x4b5bf7
mov ebx, dword [ebp + 0xc]
mov edx, dword [eax]
sub ebx, edx
movzx eax, byte [edx]
movzx esi, byte [ebx + edx]
cmp eax, esi
jne 0x4b5bc6
test eax, eax
jne 0x4b5bd8
mov ebx, dword [esp + 0x24]
mov esi, 0xffffffff
mov ecx, dword [esp + 0x34]
movsx eax, word [ebx + 0x28]
cmp edi, eax
cmove edi, esi
jmp 0x4b5bfa
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b5ae8
inc edx
jmp 0x4b5ac0
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b5b30
inc edx
jmp 0x4b5b05
movzx ecx, byte [eax + 0x6cd730]
movzx eax, byte [esi + 0x6cd730]
sub ecx, eax
jne 0x4b5bdb
inc edx
jmp 0x4b5b67
mov eax, dword [esp + 0x44]
inc edi
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [esp + 0x44], eax
cmp edi, ecx
jl 0x4b5b60
mov ebx, dword [esp + 0x24]
or esi, 0xffffffff
cmp edi, ecx
jl 0x4b5c1d
mov ecx, dword [ebp + 0xc]
call fcn.004ba4a0
mov ecx, dword [esp + 0x34]
test eax, eax
je 0x4b5c15
test byte [ebx + 0x24], 0x40
cmove edi, esi
cmp edi, ecx
jge 0x4b5d0c
mov esi, dword [ebp + 0x14]
inc dword [esp + 0x1c]
mov eax, dword [esi + 0x1c]
cmp eax, 2
jne 0x4b5c6f
mov eax, dword [esp + 0x10]
mov ecx, dword [ebp + 0x10]
cmp byte [eax + 0xc8], 2
jb 0x4b5c50
mov word [esi + 0x20], di
mov dword [esi + 0x2c], ebx
mov dword [esp + 0x38], 0xa2
jmp 0x4b5d12
mov eax, dword [ecx + 8]
mov dword [esp + 0x38], 0xab
mov eax, dword [eax + 0x18]
add eax, edi
or dword [esi + 4], 0x400000
mov dword [esi + 0x1c], eax
jmp 0x4b5d12
test edi, edi
jns 0x4b5c8b
mov byte [esi + 1], 0x44
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
mov dword [esp + 0x38], 0x4d
jmp 0x4b5d0f
test eax, eax
jne 0x4b5cd6
cmp edi, 0x20
jl 0x4b5cb2
mov ecx, dword [esp + 0x10]
or eax, 0xffffffff
mov dword [esp + 0x38], 0x4d
or dword [ecx + 0x88], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4b5d0f
mov ecx, edi
mov dword [esp + 0x38], 0x4d
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x10]
or dword [ecx + 0x88], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4b5d0f
cmp edi, 0x20
jl 0x4b5ce0
or eax, 0xffffffff
jmp 0x4b5ce9
mov eax, 1
mov ecx, edi
shl eax, cl
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], 0x4d
or dword [ecx + 0x8c], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4b5d0f
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
jmp 0x4b5d1a
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jne 0x4b5d5a
cmp eax, 1
jne 0x4b5d5a
test edi, edi
je 0x4b5d5a
test byte [ecx + 0x18], 0x20
jne 0x4b5d5a
mov ecx, dword [ebp + 0xc]
call fcn.004ba4a0
test eax, eax
je 0x4b5d5a
mov eax, dword [edi + 0x10]
test byte [eax + 0x24], 0x40
jne 0x4b5d5a
mov ebx, 1
mov byte [esi + 1], 0x44
or eax, 0xffffffff
mov dword [esp + 0x1c], ebx
mov word [esi + 0x20], ax
mov ecx, dword [ebp + 0x10]
test byte [ecx + 0x18], 0x80
je 0x4b5e47
test ebx, ebx
jne 0x4b5e4b
mov esi, dword [ebp + 8]
test esi, esi
jne 0x4b5e29
mov eax, dword [ecx + 8]
mov dword [esp + 0x34], eax
cmp dword [eax], ebx
jle 0x4b5e59
mov ecx, dword [esp + 0x34]
add eax, 8
mov dword [esp + 0x44], eax
mov edi, dword [eax]
test edi, edi
je 0x4b5e0f
mov esi, dword [ebp + 0xc]
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5df2
test ecx, ecx
jne 0x4b5e04
mov ecx, dword [ebp + 0x10]
lea eax, [ebx + ebx*2]
mov edx, dword [esp + 0x34]
mov ecx, dword [ecx + 0x18]
mov eax, dword [edx + eax*8 + 4]
test cl, 1
jne 0x4b5e5f
test byte [eax + 4], 0x10
je 0x4b5e5f
push edi
push 0x70dc6c
push dword [esp + 0x18]
call fcn.00483850
add esp, 0xc
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b5e07
inc edx
jmp 0x4b5da1
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
inc ebx
add eax, 0x18
mov dword [esp + 0x44], eax
cmp ebx, dword [ecx]
jl 0x4b5d94
mov ebx, dword [esp + 0x1c]
mov ecx, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
inc dword [esp + 0x3c]
mov dword [ebp + 0x10], ecx
test ecx, ecx
je 0x4b5f10
mov edx, dword [ebp + 0x14]
mov edi, dword [esp + 0x20]
jmp 0x4b5770
test ebx, ebx
je 0x4b5e26
cmp ebx, 1
jne 0x4b6050
jmp 0x4b60bd
mov ebx, dword [esp + 0x1c]
jmp 0x4b5e29
test ecx, 0x4000
jne 0x4b5e7b
test dword [eax + 4], 0x8000
je 0x4b5e7b
push edi
push 0x70dcac
jmp 0x4b5dda
mov cl, byte [eax]
cmp cl, 0xab
jne 0x4b5e85
mov cl, byte [eax + 0x26]
cmp cl, 0xac
jne 0x4b5e8f
mov eax, dword [eax + 0x14]
jmp 0x4b5e99
cmp cl, 0x86
jne 0x4b5ebd
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 1
je 0x4b5ebd
push 0x70dc98
push dword [esp + 0x14]
call fcn.00483850
add esp, 8
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x3c]
mov esi, dword [ebp + 0x14]
push ecx
push 0x71ccfe
push esi
push ebx
mov ebx, dword [esp + 0x20]
mov ecx, ebx
call fcn.004b5420
add esp, 0x10
cmp byte [ebx + 0xc8], 2
jb 0x4b6142
mov eax, dword [ebx + 0x110]
test eax, eax
je 0x4b6142
cmp dword [eax], esi
je 0x4b5f05
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b5ef5
jmp 0x4b6142
mov dword [eax], 0
jmp 0x4b6142
test esi, esi
jne 0x4b6053
mov esi, dword [ebp + 0x14]
mov ebx, dword [esi + 4]
test bl, 0x40
je 0x4b5f76
mov edx, dword [esp + 0x2c]
cmp byte [edx + 0xa5], 0
jne 0x4b5fd8
mov eax, dword [esp + 0x40]
test dword [eax + 0x18], 0x10000
je 0x4b5fcb
mov eax, dword [edx + 0x24]
mov ecx, dword [edx + 0x20]
xor edx, edx
mov dword [esp + 0x4c], eax
mov eax, ecx
and eax, 0x10000001
cmp eax, 1
jne 0x4b5f6c
test edx, edx
jne 0x4b5f6c
mov eax, ecx
and eax, 0x40000000
or eax, edx
jne 0x4b5fd8
and ecx, 0x20000000
or ecx, edx
jne 0x4b5fd8
test ebx, 0x4000000
jne 0x4b604c
mov edi, dword [esi + 8]
mov esi, 0x70e174
mov edx, edi
sub esi, edi
nop
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b6000
test ecx, ecx
jne 0x4b6012
mov ecx, dword [ebp + 0x14]
mov eax, 0x20000000
mov edx, 0x10000000
mov byte [ecx], 0xa5
cmp byte [edi + 4], 0
cmove eax, edx
or eax, ebx
mov dword [ecx + 4], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edx + 0x20]
and eax, 0x40000000
or eax, 0
je 0x4b5f76
push dword [ebp + 0xc]
push 0x70dcd4
push 0x1c
call fcn.00482bd0
add esp, 0xc
mov byte [esi], 0x71
mov dword [esi + 0x2c], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b6018
inc edx
jmp 0x4b5f90
mov esi, 0x70e19c
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b6037
test ecx, ecx
je 0x4b5fa3
inc edx
jmp 0x4b6021
movzx eax, byte [eax + 0x6cd730]
movzx ecx, byte [ecx + 0x6cd730]
sub ecx, eax
jne 0x4b604c
inc edx
jmp 0x4b6021
mov ebx, dword [esp + 0x1c]
mov esi, dword [ebp + 8]
push dword [ebp + 0xc]
test ebx, ebx
mov ecx, 0x70dcf8
mov eax, 0x70dd10
cmovne eax, ecx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x4b6083
push esi
push ecx
push eax
push 0x70dd2c
push dword [esp + 0x24]
call fcn.00483850
add esp, 0x18
jmp 0x4b60ae
test esi, esi
je 0x4b609c
push esi
push eax
push 0x70dd20
push dword [esp + 0x20]
call fcn.00483850
add esp, 0x14
jmp 0x4b60ae
push eax
push 0x70dd58
push dword [esp + 0x1c]
call fcn.00483850
add esp, 0x10
mov eax, dword [esp + 0x10]
mov byte [eax + 0x11], 1
mov eax, dword [esp + 0x40]
inc dword [eax + 0x14]
mov esi, dword [ebp + 0x14]
movzx eax, word [esi + 0x20]
test ax, ax
js 0x4b60fa
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4b60fa
movsx edx, ax
mov eax, 0x3f
cmp edx, 0x40
cmovge edx, eax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [edi + 0x38], eax
or dword [edi + 0x3c], ecx
mov edx, dword [esi + 0xc]
mov edi, dword [esp + 0x2c]
test edx, edx
je 0x4b610c
mov ecx, edi
call fcn.004b8a40
mov edx, dword [esi + 0x10]
mov dword [esi + 0xc], 0
test edx, edx
je 0x4b6121
mov ecx, edi
call fcn.004b8a40
mov eax, dword [esp + 0x38]
or dword [esi + 4], 0x800000
mov dword [esi + 0x10], 0
mov byte [esi], al
cmp ebx, 1
jne 0x4b5de6
mov ebx, dword [esp + 0x10]
test dword [esi + 4], 0x400000
jne 0x4b6161
mov eax, dword [ebp + 0x10]
mov edx, esi
mov ecx, ebx
push dword [eax + 4]
push dword [esp + 0x34]
call fcn.004c5170
add esp, 8
mov ecx, dword [esp + 0x40]
mov eax, dword [ebp + 0x10]
inc dword [ecx + 0x10]
cmp ecx, eax
je 0x4b617a
nop
mov ecx, dword [ecx + 0xc]
inc dword [ecx + 0x10]
cmp ecx, eax
jne 0x4b6170
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret