Function at 0x4bc410
Capabilities:
Inspect section memory permissions

Disassembly:
mov ecx, dword [0x5caff0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xd0]
cmp eax, dword [ecx + 8]
jbe 0x4bd050
sub esp, 0x150
mov byte [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 4], eax
call fcn.00486650
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4bc46a
xor ecx, ecx
jmp 0x4bc47a
mov edx, dword [esp + 0xc]
test edx, edx
jbe 0x4bd046
mov ecx, dword [esp + 8]
mov dword [esp + 0xac], ecx
lea edi, [esp + 0x10c]
xor eax, eax
call fcn.004633ff
lea ecx, [0x4d40e0]
mov dword [esp], ecx
call fcn.0040bb40
mov ecx, dword [esp + 4]
mov dword [esp + 0xb8], ecx
mov dword [esp + 0x10c], 4
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x14], 0x8000004
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
lea edx, [esp + 0x10c]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ecx
call fcn.00487f20
mov ecx, dword [esp + 0x28]
test ecx, ecx
jne 0x4bcc3b
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 4]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
lea edx, [0x4bd0a0]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x5c]
mov dword [esp + 0x94], ecx
lea ecx, [esp + 0x88]
mov dword [esp], ecx
call fcn.004356a0
test eax, eax
jne 0x4bcc66
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax]
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
lea edx, [0x4bd060]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], ecx
lea ecx, [esp + 0x64]
mov dword [esp], ecx
call fcn.004356a0
test eax, eax
jne 0x4bcc5a
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax]
mov dword [esp + 0x50], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x4c], edx
nop
lea ebx, [0x4d2060]
mov dword [esp], ebx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x160]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x164]
mov dword [eax + 8], edx
mov edx, dword [0x5cb0f0]
test edx, edx
jne 0x4bc5ed
mov edx, dword [esp + 0x15c]
jmp 0x4bc5fb
call fcn.004631c0
mov edx, dword [esp + 0x15c]
mov dword [edi], edx
mov dword [eax], edx
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xffffffff
lea ecx, [0x50664c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004ab4d0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4bcc3b
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
lea ebp, [0x4c5b40]
cmp ecx, ebp
jne 0x4bd030
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], edx
mov dword [esp + 0x30], ebx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0xc4], ecx
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x3c], edx
lea ebx, [0x4da780]
mov dword [esp], ebx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov dword [esp + 0x104], eax
mov dword [eax], 0x100002
mov dword [esp + 0xf4], eax
lea ecx, [0x4c9b60]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x4c]
mov dword [eax], ecx
mov edx, dword [esp + 0xf4]
mov dword [eax + 4], edx
mov edx, dword [0x5a5f10]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4bcc3b
mov eax, dword [esp + 0x104]
mov ecx, dword [eax + 0xa4]
mov dword [esp + 0x48], ecx
lea edx, [0x4cb980]
mov dword [esp], edx
call fcn.0040bb40
mov eax, dword [esp + 0x48]
add eax, 8
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x108], ecx
lea edx, [0x4cb9c0]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.0044abc0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xf0], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 0xec], ecx
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xf0]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 4
mov ebx, dword [esp + 0xec]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x5a5f18]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4bcc3b
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
nop
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x4bc821
lea eax, [0x4c9b60]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0x48]
mov dword [eax + 4], edx
mov ebx, dword [0x5a5f1c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00486380
cmp dword [esp + 0x10], 1
je 0x4bcc19
lea eax, [0x4cb940]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov dword [esp + 0xf8], eax
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xc4]
mov ebp, dword [ebx + 0x38]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebp, dword [0x5a5f0c]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4bc8a9
mov ecx, dword [esp + 0xf8]
mov dword [ecx], eax
jmp 0x4bc91a
lea eax, [0x4c9be0]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov edx, dword [esp + 0xc4]
mov ebx, dword [edx + 0x38]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebx, dword [0x5a5f0c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4bcbf7
mov ecx, dword [esp + 0xf8]
mov dword [ecx], eax
lea eax, [0x4cb940]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov dword [esp + 0x100], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xf8]
cmp dword [edx], ecx
je 0x4bc9c9
mov dword [esp + 0xe8], edx
mov dword [esp + 0xe4], eax
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov edx, dword [esp + 0xe8]
mov dword [eax + 8], edx
mov dword [eax + 0xc], 4
mov edx, dword [esp + 0xe4]
mov dword [eax + 0x10], edx
mov edx, dword [0x5a5f20]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
cmp dword [esp + 0x10], 1
je 0x4bcbd5
mov eax, dword [esp + 0x100]
mov edx, dword [esp + 0xf8]
mov ecx, dword [esp + 0xc4]
mov word [ecx + 0x44], 2
mov ebx, dword [edx]
mov ebp, dword [esp + 0x3c]
cmp ebx, ebp
je 0x4bca19
mov ebp, dword [esp + 0xb4]
movzx esi, word [ebp + 0x12]
test si, 1
ja 0x4bc9f7
mov dword [ecx + 0x1c], ebx
jmp 0x4bca19
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov eax, dword [ecx + 0x10]
add eax, dword [edx]
mov ebx, dword [esp + 0x104]
mov dword [ebx + 0xb0], eax
mov dword [esp + 0xe0], ebx
lea eax, [0x4c9b60]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x4c]
mov dword [eax], ecx
mov ecx, dword [esp + 0xe0]
mov dword [eax + 4], ecx
mov ecx, dword [0x5a5f14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4bcc3b
mov edx, dword [esp + 0x160]
test edx, edx
jbe 0x4bd027
mov eax, dword [esp + 0x15c]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0xd8], eax
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xdc]
mov dword [eax + 8], ebx
mov ebx, dword [esp + 0xc4]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0xd8]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x5a5f20]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4bcc3b
lea eax, [0x4cb940]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov dword [esp + 0xfc], eax
mov dword [esp + 0xd4], eax
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xc4]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 2
mov ebp, dword [esp + 0xd4]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x5a5f24]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4bcbb3
xor eax, eax
jmp 0x4bcc79
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov dword [esp + 0x16c], 0
call fcn.00435c30
add esp, 0x150
ret
call fcn.00435c30
add esp, 0x150
ret
call fcn.00435c30
add esp, 0x150
ret
mov ecx, dword [esp + 0x40]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4bcf86
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xb0]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0xbc], edx
mov ebx, dword [edx + 0x3c]
mov ebp, dword [edx + 0x10]
nop
lea esi, [0x506660]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
call fcn.004aaf10
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4bcf64
mov edx, dword [esp + 0x1c]
test edx, edx
jbe 0x4bd01e
mov eax, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0xcc], eax
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0xbc]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0xf8]
add ebx, dword [ebp]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xd0]
mov dword [eax + 8], ebx
mov ebx, dword [edx + 0x10]
mov dword [eax + 0xc], ebx
mov ebx, dword [esp + 0xcc]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x5a5f20]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
cmp dword [esp + 0x10], 1
je 0x4bcf42
mov edx, dword [esp + 0xb4]
movzx ebx, word [edx + 2]
dec ebx
mov ebp, dword [esp + 0x40]
cmp ebp, ebx
jne 0x4bcdad
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x38]
mov ebx, dword [esp + 0xbc]
sub ecx, dword [ebx + 0xc]
mov eax, dword [esp + 0xb0]
mov ebx, ecx
mov ecx, dword [esp + 0x30]
jmp 0x4bcdd0
lea eax, [ebp + 1]
mov ecx, dword [esp + 0x30]
cmp ecx, eax
jbe 0x4bd019
mov eax, dword [esp + 0xb0]
mov ebx, dword [eax + ebp*4 + 4]
mov ebx, dword [ebx + 0xc]
mov esi, dword [eax + ebp*4]
sub ebx, dword [esi + 0xc]
mov dword [esp + 0x38], ebx
mov esi, dword [eax + ebp*4]
mov esi, dword [esi + 0x24]
test esi, 0x20000000
jbe 0x4bce40
test esi, 0x40000000
jbe 0x4bce04
test esi, 0x80000000
jbe 0x4bcdfc
mov edi, 0x40
jmp 0x4bce9a
test esi, 0x20000000
jmp 0x4bce0a
test esi, 0x20000000
jbe 0x4bce40
test esi, 0x40000000
jbe 0x4bce22
mov esi, dword [esp + 0xbc]
mov edi, 0x20
jmp 0x4bce9a
test esi, 0x20000000
jbe 0x4bce40
test esi, 0x80000000
jbe 0x4bce40
mov esi, dword [esp + 0xbc]
mov edi, pe_nt_image_headers32
jmp 0x4bce9a
test esi, 0x40000000
jbe 0x4bce5e
test esi, 0x80000000
jbe 0x4bce5e
mov esi, dword [esp + 0xbc]
mov edi, 4
jmp 0x4bce9a
mov esi, dword [esp + 0xbc]
mov edi, dword [esi + 0x24]
test edi, 0x20000000
jbe 0x4bce77
mov edi, 0x10
jmp 0x4bce9a
test edi, 0x40000000
jbe 0x4bce86
mov edi, 2
jmp 0x4bce9a
test edi, 0x80000000
jbe 0x4bce95
mov edi, 8
jmp 0x4bce9a
mov edi, 1
mov dword [esp + 0x44], edi
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xc8], eax
lea ecx, [0x4c9be0]
mov dword [esp], ecx
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0xbc]
mov edx, dword [edx + 0xc]
mov ebx, dword [esp + 0xf8]
add edx, dword [ebx]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x44]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0xc8]
mov dword [eax + 0x10], edx
mov edx, dword [0x5a5f24]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4bcc72
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
lea eax, [0x4c9b60]
mov dword [esp], eax
call fcn.0040bb40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [ecx + 4]
mov dword [eax], edx
mov dword [eax + 4], 0
mov edx, dword [0x5a5f08]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.00486380
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4bcff7
mov byte [esp + 0x168], 1
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
mov byte [esp + 0x168], 0
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x16c], eax
call fcn.00435c30
add esp, 0x150
ret
call fcn.00463220
xor eax, eax
mov ecx, eax
call fcn.00463220
xor eax, eax
mov ecx, eax
call fcn.00463220
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea eax, [0x4cc100]
mov dword [esp + 8], eax
call fcn.004090c0
xor eax, eax
mov ecx, eax
call fcn.00463220
nop
call fcn.00461dc0
jmp fcn.004bc410