Function at 0x4a3af0
Capabilities:
Inspect section memory permissions

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5ed4c1
push eax
mov dword fs:[0], esp
sub esp, 0x3ac
lea eax, [esp + 0x38]
lea edx, [esp + 0xc]
push ebx
push ebp
push esi
push edi
xor edi, edi
mov ebp, ecx
push edi
push eax
push edi
lea ecx, [esp + 0x20]
push edi
push ecx
mov ecx, dword [ebp + 0x74]
lea eax, [esp + 0x60]
push edx
push eax
push edi
push ecx
mov ecx, ebp
call fcn.0049ce70
mov esi, eax
cmp esi, edi
jne 0x4a3b43
xor eax, eax
jmp 0x4a440e
push esi
mov ecx, ebp
call fcn.004c45e0
test eax, eax
je 0x4a3b6c
mov eax, dword [esp + 0x1c]
test byte [eax + 0x10], 0x10
je 0x4a3b6c
push 1
push 1
push eax
mov ecx, ebp
call fcn.004c48c0
xor eax, eax
jmp 0x4a440e
mov eax, dword [esp + 0x4c]
mov ebx, 1
cmp eax, ebx
mov dword [esp + 0x10], edi
jne 0x4a3b88
mov dword [esp + 0x3cc], edi
mov dword [esp + 0x10], ebx
push edi
push ebx
push edi
mov ecx, ebp
call fcn.004c73c0
cmp esi, 0xe
je 0x4a42e6
cmp esi, 0xf
je 0x4a42e6
cmp esi, 0x10
je 0x4a42e6
cmp esi, 0xd
je 0x4a3d94
mov eax, dword [ebp + 0x3c]
xor ebx, ebx
dec eax
mov dword [esp + 0x24], edi
cmp eax, 3
ja case.default.0x4a3be4
jmp dword [eax*4 + 0x4a442c]
lea eax, [esi - 8]
mov dword [esp + 0x20], 0x20000000
cmp eax, 4
ja case.default.0x4a3be4
jmp dword [eax*4 + 0x4a443c]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3cc], edi
add eax, 2
mov dword [esp + 0x10], eax
mov ebx, dword [ebp + 0x54]
mov dword [esp + 0x20], 0x10000000
add ebx, 0xc
jmp case.default.0x4a3be4
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3cc], edi
add eax, 2
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x24], 1
lea ebx, [edx + 0x38]
jmp case.default.0x4a3be4
mov eax, dword [esp + 0x1c]
lea ebx, [eax + 0x18]
jmp case.default.0x4a3be4
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x20], edi
jmp case.default.0x4a3be4
mov ecx, dword [esp + 0x1c]
cmp esi, 5
mov dword [esp + 0x20], 0x30000000
lea ebx, [ecx + 0xc]
jne case.default.0x4a3be4
jmp 0x4a3c7d
mov edx, dword [esp + 0x1c]
dec esi
mov dword [esp + 0x20], 0x40000000
lea ebx, [edx + 0x10]
je 0x4a3c73
dec esi
je 0x4a3c78
dec esi
je 0x4a3c7d
jmp case.default.0x4a3be4
add dword [esp + 0x10], 2
add dword [esp + 0x10], 2
add dword [esp + 0x10], 2
cmp dword [esp + 0x3cc], 1
jne 0x4a3c90
inc dword [esp + 0x14]
mov esi, dword [ebp + 0x5c]
lea ecx, [esp + 0x30]
call fcn.004918b0
mov dword [esp + 0x44], esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], 0x5f7bac
mov eax, dword [esp + 0x20]
push edi
push edi
push edi
push eax
push edi
push edi
lea ecx, [esp + 0x40]
mov dword [esp + 0x3dc], 2
call fcn.004e8c30
mov eax, dword [ebx + 4]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jl 0x4a3cd7
mov eax, ecx
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x28]
push ecx
push 1
push edi
push edx
mov dword [esp + 0x24], eax
push eax
mov eax, dword [esp + 0x5c]
mov ecx, 0x6756e0
push eax
call fcn.0050f230
mov edx, dword [esp + 0x14]
push 1
lea ecx, [esp + 0x2c]
push edi
push ecx
push edx
mov ecx, ebx
call fcn.004e7220
mov eax, dword [esp + 0x3cc]
cmp eax, 1
mov eax, dword [esp + 0x10]
je 0x4a3d22
cmp eax, edi
jle 0x4a3d44
jmp 0x4a3d27
inc eax
mov dword [esp + 0x10], eax
mov ebx, dword [ebp + 0x74]
push edi
push 1
push edi
add eax, ebx
push edi
push eax
mov ecx, ebp
call fcn.004c63e0
push 1
push edi
push edi
mov ecx, ebp
call fcn.004c6e30
push 1
push edi
mov ecx, ebp
call fcn.004ca1a0
mov dword [esp + 0x28], 0x5f7a5c
lea ecx, [esp + 0x30]
mov dword [esp + 0x3c4], 3
mov dword [esp + 0x2c], edi
call fcn.00491ab0
lea ecx, [esp + 0x30]
mov dword [esp + 0x3c4], 0xffffffff
mov dword [esp + 0x30], 0x5f7940
call fcn.00491ab0
mov eax, 1
jmp 0x4a440e
mov ecx, dword [esp + 0x1c]
mov ebx, ecx
cmp dword [ecx + 0xcc], edi
jne 0x4a3da6
xor edx, edx
jmp 0x4a3dac
mov edx, dword [ecx + 0xc4]
cmp dword [ecx + 0x68], edi
jne 0x4a3db5
xor eax, eax
jmp 0x4a3db8
mov eax, dword [ecx + 0x60]
mov esi, dword [esp + 0x14]
mov eax, dword [eax + esi*4]
add eax, edx
push eax
call fcn.004ee940
test al, 2
je 0x4a3de0
mov eax, dword [esp + 0x3cc]
mov ecx, ebp
push eax
push edi
call fcn.004a4c60
jmp 0x4a440e
lea ecx, [esp + 0x50]
call fcn.00456540
lea ecx, [esp + 0x8c]
call fcn.0040ee50
lea ecx, [esp + 0xe4]
mov dword [esp + 0x3c4], 4
call fcn.005bae68
lea ecx, [esp + 0xf8]
mov byte [esp + 0x3c4], 5
call fcn.005bb2c6
lea ecx, [esp + 0x10c]
mov byte [esp + 0x3c4], 6
call fcn.004918b0
mov esi, 0x5f7a80
mov dword [esp + 0x10c], esi
lea ecx, [esp + 0x120]
mov byte [esp + 0x3c4], 7
call fcn.005bb2c6
lea ecx, [esp + 0x134]
mov byte [esp + 0x3c4], 8
call fcn.005bb2c6
lea ecx, [esp + 0x148]
mov byte [esp + 0x3c4], 9
call fcn.005bae68
lea ecx, [esp + 0x170]
mov byte [esp + 0x3c4], 0xa
call fcn.004918b0
mov eax, dword [0x6707bc]
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], eax
lea ecx, [esp + 0x198]
mov byte [esp + 0x3c4], 0xf
call fcn.005bb2c6
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x3c4], 0x10
call fcn.005bae68
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x3c4], 0x11
call fcn.005bae68
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x3c4], 0x12
call fcn.005bae68
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x3c4], 0x13
call fcn.004918b0
mov dword [esp + 0x1f0], esi
mov dword [esp + method.CCommandLineInfo.virtual_0], 0x5f7944
mov dword [esp + 0x208], edi
mov dword [esp + 0x214], edi
mov dword [esp + 0x210], edi
mov dword [esp + 0x20c], edi
lea ecx, [esp + 0x218]
mov byte [esp + 0x3c4], 0x15
call fcn.005bae68
lea ecx, [esp + 0x22c]
mov byte [esp + 0x3c4], 0x16
call fcn.004918b0
mov byte [esp + 0x3c4], 0x17
lea ecx, [esp + 0x244]
call fcn.005bb2c6
push edi
lea ecx, [esp + 0x25c]
mov byte [esp + 0x3c8], 0x18
call fcn.0040ea10
push edi
lea ecx, [esp + 0x27c]
mov byte [esp + 0x3c8], 0x19
call fcn.0040ed60
push edi
lea ecx, [esp + 0x298]
mov byte [esp + 0x3c8], 0x1a
call fcn.0040ec70
push edi
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x3c8], 0x1b
call fcn.0040edc0
push edi
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x3c8], 0x1c
call fcn.0040ed90
push edi
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x3c8], 0x1d
call fcn.0040edf0
push edi
lea ecx, [esp + 0x30c]
mov byte [esp + 0x3c8], 0x1e
call fcn.0040eb30
push edi
lea ecx, [esp + 0x328]
mov byte [esp + 0x3c8], 0x1f
call fcn.0040eb90
lea ecx, [esp + 0x344]
mov byte [esp + 0x3c4], 0x20
call fcn.0040ee20
mov eax, dword [0x6707bc]
mov dword [esp + 0x38c], eax
mov dword [esp + 0x390], eax
mov dword [esp + 0x394], eax
mov dword [esp + 0x398], eax
lea ecx, [esp + 0x160]
mov byte [esp + 0x3c4], 0x25
push ecx
mov dword [esp + 0x244], 0xffff
mov dword [esp + 0x38c], edi
mov dword [esp + 0x1dc], edi
mov dword [esp + 0x160], edi
mov dword [esp + 0x198], edi
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 5
push edi
lea ecx, [esp + 0xec]
mov dword [esp + 0x3ac], edi
mov dword [esp + 0x3a8], edi
mov dword [esp + 0x3b0], edi
mov dword [esp + 0x3b4], edi
mov dword [esp + 0x3b8], edi
mov dword [esp + 0x3c0], edi
mov dword [esp + 0x3bc], edi
call fcn.005baefb
push 5
push edi
lea ecx, [esp + 0x100]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x128]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x13c]
call fcn.005bb4dc
push 5
push edi
lea ecx, [esp + 0x150]
call fcn.005baefb
lea ecx, [esp + 0x50]
lea edx, [esp + 0x50]
lea eax, [esp + 0x50]
mov dword [esp + 0x30c], ecx
mov dword [esp + 0x2f0], edx
mov dword [esp + 0x340], eax
lea ecx, [esp + 0x50]
lea edx, [esp + 0x50]
lea eax, [esp + 0x50]
mov dword [esp + 0x2b0], ecx
mov dword [esp + 0x2b8], edx
mov dword [esp + 0x2d4], eax
lea ecx, [esp + 0x360]
lea edx, [esp + 0x50]
lea eax, [esp + 0x50]
push 0x28
push ecx
mov dword [esp + 0x284], edx
mov dword [esp + 0x27c], eax
call fcn.004927e0
add esp, 8
mov edx, dword [ebx + 0xd0]
lea ecx, [esp + 0x50]
push edx
mov dword [esp + 0x3c8], 0x26
call fcn.00467020
push 0xd4
call fcn.005bd3d9
mov esi, eax
add esp, 4
mov dword [esp + 0x24], esi
cmp esi, edi
je 0x4a4281
mov eax, dword [0x6707bc]
mov dword [esi], eax
mov ecx, dword [0x6707bc]
mov dword [esi + 4], ecx
mov edx, dword [0x6707bc]
mov dword [esi + 8], edx
lea ebx, [esi + 0x18]
lea eax, [esp + 0x50]
push eax
mov ecx, ebx
mov byte [esp + 0x3c8], 0x2a
call fcn.0040ea40
mov dword [ebx], 0x5f7bac
lea ecx, [esp + 0x50]
mov byte [esp + 0x3c4], 0x2b
push ecx
lea ecx, [esi + 0x38]
call fcn.0040ec70
lea ecx, [esi + 0x58]
mov byte [esp + 0x3c4], 0x2c
call fcn.004918b0
lea ecx, [esi + 0x6c]
mov byte [esp + 0x3c4], 0x2d
call fcn.004918b0
lea ecx, [esi + 0x80]
mov byte [esp + 0x3c4], 0x2e
call fcn.004918b0
lea ecx, [esi + 0x94]
mov byte [esp + 0x3c4], 0x2f
call fcn.004918b0
lea ecx, [esi + 0xa8]
mov byte [esp + 0x3c4], 0x30
call fcn.004918b0
lea ecx, [esi + 0xbc]
mov byte [esp + 0x3c4], 0x31
call fcn.004918b0
lea edx, [esp + 0x50]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0xd0], edx
jmp 0x4a4283
xor esi, esi
push edi
push edi
mov ecx, esi
mov byte [esp + 0x3cc], 0x26
call fcn.004ee660
mov ebx, dword [esi + 0x10]
push esi
or ebx, 2
lea ecx, [esp + 0x248]
mov dword [esi + 0x10], ebx
mov eax, dword [esp + 0x250]
push eax
call fcn.005bb38c
mov ecx, dword [esp + 0x3cc]
push edi
push edi
lea edx, [esp + 0x58]
push ecx
push edx
mov ecx, ebp
call fcn.00496e40
lea ecx, [esp + 0x50]
mov dword [esp + 0x3c4], 0xffffffff
call fcn.00401f70
mov eax, 1
jmp 0x4a440e
cmp dword [esp + 0x3cc], ebx
jne 0x4a42f3
inc dword [esp + 0x14]
mov ebx, dword [ebp + 0x5c]
lea ecx, [esp + 0x30]
call fcn.004918b0
mov dword [esp + 0x44], ebx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], 0x5f7b8c
cmp esi, 0xe
mov dword [esp + 0x3c4], edi
jne 0x4a4331
push edi
lea eax, [esp + 0x1f]
push 1
push eax
push edi
push edi
mov byte [esp + 0x2f], 0x16
push 0x10000000
jmp 0x4a4353
sub esi, 0xf
push edi
neg esi
sbb esi, esi
lea ecx, [esp + 0x28]
push 4
and esi, 0x10000000
push ecx
push edi
add esi, 0x20000000
push edi
mov dword [esp + 0x38], edi
push esi
lea ecx, [esp + 0x40]
call fcn.004e89a0
mov eax, dword [esp + 0x14]
mov esi, 1
push esi
lea edx, [esp + 0x2c]
push edi
push edx
push eax
push 0x133
mov ecx, 0x6756e0
call fcn.0050f370
mov edx, dword [esp + 0x14]
push esi
lea ecx, [esp + 0x2c]
push edi
push ecx
mov ecx, dword [ebp + 0x5c]
push edx
add ecx, 0x2d4
call fcn.004e7220
mov eax, dword [esp + 0x3cc]
cmp eax, esi
mov eax, dword [esp + 0x10]
je 0x4a43ab
cmp eax, edi
jle 0x4a43cb
jmp 0x4a43b0
inc eax
mov dword [esp + 0x10], eax
mov ecx, dword [ebp + 0x74]
push edi
push esi
push edi
add eax, ecx
push edi
push eax
mov ecx, ebp
call fcn.004c63e0
push esi
push edi
push edi
mov ecx, ebp
call fcn.004c6e30
push esi
push edi
mov ecx, ebp
call fcn.004ca1a0
mov dword [esp + 0x28], 0x5f7a5c
lea ecx, [esp + 0x30]
mov dword [esp + 0x3c4], esi
mov dword [esp + 0x2c], edi
call fcn.00491ab0
lea ecx, [esp + 0x30]
mov dword [esp + 0x3c4], 0xffffffff
mov dword [esp + 0x30], 0x5f7940
call fcn.00491ab0
mov eax, esi
mov ecx, dword [esp + 0x3bc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3b8
ret 4