Function at 0x4b2fe0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5ee571
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x334
push ebx
mov ebx, ecx
push ebp
push esi
mov eax, dword [ebx + 0x7e8]
push edi
test eax, eax
mov dword [esp + 0x20], ebx
je 0x4b35c3
mov eax, dword [ebx + 0x290]
push 0
push 0
push 0xb8
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x4b35c3
lea ecx, [esp + 0x44]
call fcn.004918b0
lea ecx, [esp + 0x44]
lea edx, [esp + 0x6c]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
mov ecx, ebx
mov dword [esp + 0x358], 0
call fcn.004b2180
mov esi, eax
test esi, esi
mov dword [esp + 0x5c], esi
je 0x4b35a7
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.004eab40
add esp, 4
test eax, eax
jne 0x4b35a7
mov edx, dword [esp + 0x38]
push edx
call fcn.005027d0
add esp, 4
cmp eax, 1
jne 0x4b35a7
mov eax, dword [0x6707bc]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x14]
lea edi, [ebx + 0x274]
push ecx
mov ecx, edi
mov byte [esp + 0x350], 1
call fcn.005be86f
mov ebp, dword [esp + 0x14]
lea ecx, [esp + 0x24]
call fcn.004918b0
mov eax, dword [esp + 0x38]
mov byte [esp + 0x34c], 2
cmp eax, 0x80000201
mov dword [esp + 0x10], 0
ja 0x4b3459
je 0x4b343d
cmp eax, reloc.OLEAUT32.dll_SysReAllocStringLen
ja 0x4b325c
je 0x4b3242
cmp eax, reloc.OLEAUT32.dll_SysReAllocString
je 0x4b313b
cmp eax, 0x80000003
jne 0x4b356b
lea edx, [esp + 0x70]
push edx
push ebp
call fcn.00502ef0
add esp, 8
test eax, eax
jne 0x4b3130
push 0x669358
call fcn.004ff630
add esp, 4
jmp 0x4b356b
lea ebp, [esp + 0x70]
mov eax, 8
jmp 0x4b316a
lea eax, [esp + 0x60]
mov ecx, 0x6756e0
push eax
push ebp
call fcn.0046d920
test eax, eax
jne 0x4b3161
push 0x669338
call fcn.004ff630
add esp, 4
jmp 0x4b356b
lea ebp, [esp + 0x60]
mov eax, 4
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x38]
cmp ecx, reloc.OLEAUT32.dll_SysReAllocStringLen
je 0x4b3186
cmp ecx, 0x80000005
jne 0x4b354c
mov ecx, dword [0x675c1c]
push 0
lea eax, [esp + 0x68]
push 4
push eax
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x4b3564
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x64]
add ebx, 0x4a4
mov ecx, 0xb3
mov esi, ebx
lea edi, [esp + 0x78]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x675f40]
mov esi, dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov dword [esp + 0x128], edx
mov dword [esp + 0x11c], eax
mov eax, dword [0x675c20]
lea edx, [esp + 0x78]
push edx
push eax
mov dword [esp + 0x138], ecx
call esi
test eax, eax
je 0x4b3560
mov ecx, dword [0x675c44]
mov edi, 1
push ecx
mov dword [0x675c3c], edi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [0x675c38]
push edx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
push 0xffffffffffffffff
mov ecx, 0x675c40
call fcn.00526035
cmp dword [0x675c3c], edi
jne 0x4b34e5
mov dword [0x675c3c], 0
jmp 0x4b3560
push ebp
call fcn.00492830
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4b316e
jmp 0x4b356b
cmp eax, 0x80000005
je 0x4b3289
cmp eax, 0x80000101
jne 0x4b356b
push ebp
call fcn.0052eec9
mov byte [esp + 0x1c], al
add esp, 4
lea ebp, [esp + 0x18]
mov eax, 1
jmp 0x4b316a
mov al, byte [ebp]
xor ebx, ebx
test al, al
mov esi, ebp
je 0x4b333a
mov al, byte [esi]
cmp al, 0x20
jbe 0x4b32b2
cmp al, 0x2c
je 0x4b32b2
cmp al, 0x30
jb 0x4b3394
cmp al, 0x39
ja 0x4b3394
cmp al, 0x30
jb 0x4b32ca
cmp al, 0x39
ja 0x4b32ca
cmp ebx, 3
jge 0x4b33cd
mov byte [esp + ebx + 0x3c], al
inc ebx
jmp 0x4b32ff
cmp al, 0x2c
jne 0x4b32ff
lea ecx, [esp + 0x3c]
mov byte [esp + ebx + 0x3c], 0
push ecx
call fcn.0052eec9
add esp, 4
test eax, eax
jl 0x4b3405
cmp eax, 0xff
jg 0x4b3405
push eax
lea ecx, [esp + 0x28]
call fcn.00491bb0
xor ebx, ebx
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4b3298
test ebx, ebx
jle 0x4b333a
lea eax, [esp + 0x3c]
mov byte [esp + ebx + 0x3c], 0
push eax
call fcn.0052eec9
add esp, 4
test eax, eax
jl 0x4b3405
cmp eax, 0xff
jg 0x4b3405
push eax
lea ecx, [esp + 0x28]
call fcn.00491bb0
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x68]
push 4
push ecx
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x74], 1
call fcn.004920d0
lea edx, [esp + 0x10]
push 4
push edx
push 4
lea ecx, [esp + 0x30]
call fcn.004920d0
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x5c]
add eax, 8
neg ebp
sbb ebp, ebp
mov dword [esp + 0x10], eax
and ebp, ecx
jmp 0x4b324f
mov eax, dword [edi + 0x1c]
sub esi, ebp
lea edx, [esi + 1]
push edx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0xb1
push eax
call esi
mov ecx, dword [edi + 0x1c]
push 0
push 0
push 0xb7
push ecx
call esi
push 0x669328
call fcn.004ff630
add esp, 4
jmp 0x4b356b
mov edx, dword [edi + 0x1c]
sub esi, ebx
sub esi, ebp
push esi
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0xb1
push edx
call esi
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0xb7
push eax
call esi
push 0x66578c
call fcn.004ff630
add esp, 4
jmp 0x4b356b
mov ecx, dword [edi + 0x1c]
sub esi, ebx
sub esi, ebp
push esi
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0xb1
push ecx
call esi
mov edx, dword [edi + 0x1c]
push 0
push 0
push 0xb7
push edx
call esi
push 0x66578c
call fcn.004ff630
add esp, 4
jmp 0x4b356b
push ebp
call fcn.0052eec9
mov word [esp + 0x1c], ax
add esp, 4
lea ebp, [esp + 0x18]
mov eax, 2
jmp 0x4b316a
cmp eax, 0x80000501
ja 0x4b34bf
je 0x4b34a9
cmp eax, 0x80000301
je 0x4b3493
cmp eax, 0x80000401
jne 0x4b356b
push ebp
call fcn.0052eed4
mov dword [esp + 0x1c], eax
add esp, 4
mov dword [esp + 0x1c], edx
lea ebp, [esp + 0x18]
mov eax, 8
jmp 0x4b316a
push ebp
call fcn.0052eec9
add esp, 4
mov dword [esp + 0x18], eax
lea ebp, [esp + 0x18]
jmp 0x4b3165
push ebp
call fcn.0052f812
fstp dword [esp + 0x1c]
add esp, 4
lea ebp, [esp + 0x18]
jmp 0x4b3165
cmp eax, 0x80000601
jne 0x4b356b
push ebp
call fcn.0052f812
fstp qword [esp + 0x1c]
add esp, 4
lea ebp, [esp + 0x18]
mov eax, 8
jmp 0x4b316a
mov ecx, dword [0x675c20]
lea eax, [esp + 0x78]
push eax
push ecx
mov dword [esp + 0x80], 0x10002
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x4b3560
mov eax, dword [0x675c20]
mov edx, dword [esp + 0x128]
push ebx
push eax
mov dword [esp + 0x60], edx
call esi
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov eax, dword [0x675c1c]
push 0
push ecx
push ebp
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4b3560
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x5c]
mov eax, 4
lea ebp, [esp + 0x58]
mov dword [esp + 0x10], eax
mov ecx, dword [0x675c1c]
push 0
push eax
push ebp
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x4b3564
mov ebx, dword [esp + 0x20]
mov ecx, ebx
call fcn.004b2680
mov esi, 0x5f7940
lea ecx, [esp + 0x24]
mov byte [esp + 0x34c], 1
mov dword [esp + 0x24], esi
call fcn.00491ab0
lea ecx, [esp + 0x14]
mov byte [esp + 0x34c], 0
call fcn.005bc421
mov dword [esp + 0x34c], 0xffffffff
mov dword [esp + 0x44], esi
jmp 0x4b35ba
mov dword [esp + 0x34c], 0xffffffff
mov dword [esp + 0x44], 0x5f7940
lea ecx, [esp + 0x44]
call fcn.00491ab0
mov ecx, dword [esp + 0x344]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x340
ret