Function at 0x47f5fb
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp + 0x10]
xor ecx, ecx
push esi
mov esi, dword [ebp + 0x14]
mov eax, dword [ebx]
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], ecx
push edi
mov edi, ecx
mov dword [ebp - 0x3c], ebx
mov ecx, 0xa2
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], ecx
or ecx, 0xffffffff
mov dword [esi + 0x1c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 8], edi
mov dword [ebp - 0x30], edx
test ecx, ecx
je 0x47f690
test byte [edx + 0x18], 6
je 0x47f64d
and dword [ebp - 0x14], edi
jmp 0x47f690
xor edi, edi
cmp dword [eax + 0x14], edi
jle 0x47f690
mov eax, dword [eax + 0x10]
mov dword [ebp + 0x14], eax
mov edx, ecx
mov ecx, dword [eax]
call fcn.0045c7fc
mov ecx, dword [ebp - 0x18]
test eax, eax
je 0x47f67e
mov eax, dword [ebp + 0x14]
inc edi
add eax, 0x10
cmp edi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x14]
mov dword [ebp + 0x14], eax
jl 0x47f65a
jmp 0x47f68a
mov eax, dword [ecx + 0x10]
add edi, edi
mov eax, dword [eax + edi*8 + 0xc]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp - 8]
mov eax, dword [edx + 4]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x47f89e
xor edx, edx
lea edi, [eax + 8]
mov dword [ebp - 0x10], edx
mov dword [ebp + 0x14], edi
cmp dword [eax], edx
jle 0x47f878
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x20], ecx
test eax, eax
je 0x47f737
test dword [eax + 8], 0x800
je 0x47f737
mov eax, dword [eax]
xor edi, edi
and dword [ebp - 0x28], 0
mov dword [ebp - 0x38], eax
cmp dword [eax], edi
jle 0x47f72a
lea ebx, [eax + 0xc]
push dword [ebp - 0x14]
mov edx, dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, dword [ebx]
call fcn.0047f568
pop ecx
pop ecx
test eax, eax
je 0x47f70b
inc dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp + 0x14]
inc ecx
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], eax
mov word [esi + 0x20], di
mov dword [ebp - 0x28], ecx
jmp 0x47f70e
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
inc edi
add ebx, 0x18
cmp edi, dword [eax]
jl 0x47f6d9
mov ebx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x10]
test ecx, ecx
jne 0x47f860
mov ecx, dword [ebp - 0x20]
cmp dword [ebp + 8], 0
mov edi, dword [ebp + 0x14]
je 0x47f863
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
je 0x47f74f
mov eax, dword [ebp - 0x1c]
cmp dword [ecx + 0x48], eax
jne 0x47f863
cmp dword [ebp + 8], 0
je 0x47f78d
mov edi, dword [edi + 0xc]
test edi, edi
je 0x47f760
mov ecx, edi
jmp 0x47f762
mov ecx, dword [ecx]
mov edx, dword [ebp + 8]
call fcn.0045c7fc
test eax, eax
jne 0x47f85d
cmp byte [ebx + 0xc8], 2
jb 0x47f78d
test edi, edi
je 0x47f78d
lea eax, [esi + 0x2c]
xor edx, edx
push eax
mov ecx, ebx
call fcn.00486f67
pop ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0x38], 0
mov edi, dword [ebp + 0x14]
mov eax, edi
cmovne eax, dword [ebp - 8]
xor edx, edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], edx
mov ecx, dword [eax + 4]
movsx eax, word [eax + 0x2a]
mov dword [ebp - 0x38], ecx
test eax, eax
jle 0x47f85d
mov edx, dword [ebp + 0xc]
mov ecx, dword [ecx]
call fcn.0045c7fc
test eax, eax
jne 0x47f835
mov edx, dword [ebp - 4]
cmp edx, 1
jne 0x47f810
test byte [edi + 0x24], 4
jne 0x47f835
mov eax, dword [edi + 0x34]
test eax, eax
je 0x47f810
mov ecx, dword [eax + 4]
and dword [ebp - 0x34], 0
mov dword [ebp - 0x40], ecx
test ecx, ecx
jle 0x47f810
mov edi, dword [eax]
mov edx, dword [ebp + 0xc]
mov ecx, dword [edi]
call fcn.0045c7fc
test eax, eax
je 0x47f832
mov eax, dword [ebp - 0x34]
add edi, 8
inc eax
mov dword [ebp - 0x34], eax
cmp eax, dword [ebp - 0x40]
jl 0x47f7ed
mov edi, dword [ebp + 0x14]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x28]
push 0xffffffffffffffff
movsx eax, word [eax + 0x28]
cmp edx, eax
movzx ecx, dx
pop eax
cmove ecx, eax
mov dword [ebp - 8], edi
mov word [esi + 0x20], cx
jmp 0x47f85d
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
inc eax
add ecx, 0x10
mov dword [ebp - 0x28], eax
movsx edx, word [ebx + 0x2a]
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
cmp eax, edx
jl 0x47f7ba
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x10]
mov edi, dword [ebp + 0x14]
mov eax, dword [ebp - 0x44]
inc edx
add edi, 0x48
mov dword [ebp - 0x10], edx
mov dword [ebp + 0x14], edi
cmp edx, dword [eax]
jl 0x47f6b1
mov edi, dword [ebp - 8]
test edi, edi
je 0x47f89e
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [esi + 0x2c], eax
test byte [edi + 0x24], 8
je 0x47f898
or dword [esi + 4], 0x100000
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
jne 0x47faa0
cmp dword [ebp + 8], 0
je 0x47faa0
test eax, eax
jne 0x47faa0
xor edi, edi
mov dword [ebp - 0x10], edi
cmp dword [ebx + 0x78], edi
je 0x47f90e
mov al, byte [ebx + 0x90]
mov byte [ebp + 0x17], al
cmp al, 0x7c
je 0x47f8f4
mov edx, dword [ebp + 8]
mov ecx, 0x101ec8fc
call fcn.0045c7fc
test eax, eax
jne 0x47f8ee
mov dword [esi + 0x1c], 1
jmp 0x47f908
cmp byte [ebp + 0x17], 0x7b
je 0x47f90e
mov edx, dword [ebp + 8]
mov ecx, 0x101ec8f8
call fcn.0045c7fc
test eax, eax
jne 0x47f90e
and dword [esi + 0x1c], edi
mov edi, dword [ebx + 0x78]
mov dword [ebp - 0x10], edi
mov eax, dword [ebp + 0x10]
test dword [eax + 0x18], 0x200
je 0x47f948
mov eax, dword [eax + 8]
test eax, eax
je 0x47f948
mov edx, dword [ebp + 8]
mov ecx, 0x101ec920
call fcn.0045c7fc
test eax, eax
jne 0x47f948
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
mov eax, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
mov dword [ebp - 0x10], edi
mov dword [esi + 0x1c], 2
test edi, edi
je 0x47fa5a
mov edx, dword [ebp - 0x10]
mov eax, dword [edi + 0x48]
xor edi, edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], 1
movsx eax, word [edx + 0x2a]
mov ecx, dword [edx + 4]
mov dword [ebp + 0x14], ecx
mov dword [ebp - 0x38], eax
test eax, eax
jle 0x47f9aa
mov edx, dword [ebp + 0xc]
mov ecx, dword [ecx]
call fcn.0045c7fc
test eax, eax
je 0x47f992
mov ecx, dword [ebp + 0x14]
inc edi
add ecx, 0x10
mov dword [ebp + 0x14], ecx
cmp edi, dword [ebp - 0x38]
jl 0x47f973
jmp 0x47f9ae
mov edx, dword [ebp - 0x10]
movsx eax, word [edx + 0x28]
cmp edi, eax
jne 0x47f9a6
or eax, 0xffffffff
mov edi, eax
mov ecx, eax
jmp 0x47f9da
movsx eax, word [edx + 0x2a]
cmp edi, eax
jl 0x47f9d0
mov ecx, dword [ebp + 0xc]
call fcn.00482cac
mov edx, dword [ebp - 0x10]
test eax, eax
je 0x47f9cd
test byte [edx + 0x24], 0x40
push 0xffffffffffffffff
pop eax
cmove edi, eax
movsx eax, word [edx + 0x2a]
jmp 0x47f9d0
mov eax, dword [ebp - 0x38]
mov ecx, edi
cmp edi, eax
jge 0x47fa5a
inc dword [ebp - 4]
cmp dword [esi + 0x1c], 2
jne 0x47fa1a
cmp byte [ebx + 0xc8], 2
mov ecx, dword [ebp + 0x10]
jb 0x47f9ff
mov word [esi + 0x20], di
mov dword [esi + 0x2c], edx
mov dword [ebp - 0x24], 0xa2
jmp 0x47fa5d
mov eax, dword [ecx + 8]
mov dword [ebp - 0x24], 0xab
mov eax, dword [eax + 0x18]
add eax, edi
or dword [esi + 4], 0x400000
mov dword [esi + 0x1c], eax
jmp 0x47fa5d
test edi, edi
jns 0x47fa24
mov byte [esi + 1], 0x44
jmp 0x47fa4c
xor eax, eax
inc eax
shl eax, cl
cmp dword [esi + 0x1c], 0
push 0xffffffffffffffff
pop ecx
jne 0x47fa40
cmp edi, 0x20
cmovge eax, ecx
or dword [ebx + 0x88], eax
jmp 0x47fa4c
cmp edi, 0x20
cmovge eax, ecx
or dword [ebx + 0x8c], eax
mov dword [esi + 0x2c], edx
mov word [esi + 0x20], di
mov dword [ebp - 0x24], 0x4d
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 4], 0
jne 0x47faa5
cmp eax, 1
jne 0x47faa5
test edi, edi
je 0x47faa5
test byte [ecx + 0x18], 0x20
jne 0x47faa5
mov ecx, dword [ebp + 0xc]
call fcn.00482cac
test eax, eax
je 0x47faa5
mov eax, dword [edi + 0x10]
test byte [eax + 0x24], 0x40
jne 0x47faa5
xor edi, edi
mov byte [esi + 1], 0x44
inc edi
or eax, 0xffffffff
mov dword [ebp - 4], edi
mov word [esi + 0x20], ax
jmp 0x47faa8
mov ecx, dword [ebp + 0x10]
jmp 0x47fa63
mov edi, dword [ebp - 4]
mov edx, dword [ebp + 0x10]
test byte [edx + 0x18], 0x80
je 0x47fafe
test edi, edi
jne 0x47fb02
cmp dword [ebp + 8], edi
jne 0x47fb43
mov eax, dword [edx + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x44], ecx
test ecx, ecx
jle 0x47fb40
add eax, 8
mov dword [ebp + 0x14], eax
cmp dword [eax], 0
je 0x47faed
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
call fcn.0045c7fc
test eax, eax
je 0x47fbaf
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x44]
inc edi
add eax, 0x18
mov dword [ebp + 0x14], eax
cmp edi, ecx
jl 0x47fad0
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp - 4]
test edi, edi
je 0x47fb43
cmp edi, 1
je 0x47fcc1
push dword [ebp + 0xc]
test edi, edi
mov ecx, 0x101ec9ac
mov eax, 0x101ec968
cmovne eax, ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x47fc8e
push dword [ebp + 8]
push ecx
push eax
push 0x101ec99c
push ebx
call fcn.0045c724
add esp, 0x18
jmp 0x47fcb7
mov edi, dword [ebp - 4]
mov edx, dword [edx + 0xc]
inc dword [ebp - 0x2c]
mov dword [ebp + 0x10], edx
test edx, edx
jne 0x47f68d
cmp dword [ebp + 8], edx
jne 0x47fb0b
test byte [esi + 4], 0x40
je 0x47fc7d
mov ecx, dword [ebp - 0x18]
cmp byte [ecx + 0xa5], dl
jne 0x47fc5c
mov eax, dword [ebp - 0x30]
test dword [eax + 0x18], 0x10000
je 0x47fc4f
call fcn.0048a727
test eax, eax
je 0x47fb9f
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x20]
and eax, 0x40000000
or eax, 0
jne 0x47fc5c
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x20]
and eax, 0x20000000
jmp 0x47fc57
mov ecx, dword [ebp + 0x10]
imul eax, edi, 0x18
mov edx, dword [ecx + 8]
mov ecx, dword [eax + edx + 4]
mov eax, dword [ebp + 0x10]
test byte [eax + 0x18], 1
jne 0x47fbe6
test byte [ecx + 4], 0x10
je 0x47fbe6
mov ecx, dword [ebp + 0x14]
push dword [ecx]
push 0x101ec900
push ebx
call fcn.0045c724
add esp, 0xc
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret
test dword [eax + 0x18], 0x4000
jne 0x47fc04
test dword [ecx + 4], 0x8000
je 0x47fc04
mov ecx, dword [ebp + 0x14]
push dword [ecx]
push 0x101ec940
jmp 0x47fbd5
call fcn.0048143a
cmp eax, 1
je 0x47fc1d
push 0x101ec92c
push ebx
call fcn.0045c724
pop ecx
pop ecx
jmp 0x47fbde
mov eax, dword [ebp - 0x2c]
mov ecx, ebx
push eax
push 0x101e09e0
push esi
push edi
call fcn.0047f46d
add esp, 0x10
cmp byte [ebx + 0xc8], 2
jb 0x47fd36
push esi
xor edx, edx
mov ecx, ebx
call fcn.00486f67
pop ecx
jmp 0x47fd36
mov eax, dword [ecx + 0x20]
and eax, 0x40000000
or eax, 0
je 0x47fc7d
push dword [ebp + 0xc]
push 0x101ec978
push 0x1c
call fcn.0045bd4b
add esp, 0xc
mov byte [esi], 0x71
and dword [esi + 0x2c], 0
xor eax, eax
inc eax
jmp 0x47fbe1
mov ecx, esi
call fcn.00482903
test eax, eax
je 0x47fb0b
jmp 0x47fc75
cmp dword [ebp + 8], 0
je 0x47fca8
push dword [ebp + 8]
push eax
push 0x101ec9cc
push ebx
call fcn.0045c724
add esp, 0x14
jmp 0x47fcb7
push eax
push 0x101ec9c4
push ebx
call fcn.0045c724
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov byte [ebx + 0x11], 1
inc dword [eax + 0x14]
movzx eax, word [esi + 0x20]
test ax, ax
js 0x47fcfb
mov edi, dword [ebp - 8]
test edi, edi
je 0x47fcf8
movsx edx, ax
cmp edx, 0x40
push 0x3f
pop eax
cmovge edx, eax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [edi + 0x38], eax
or dword [edi + 0x3c], ecx
mov edi, dword [ebp - 4]
mov edx, dword [esi + 0xc]
test edx, edx
je 0x47fd0a
mov ecx, dword [ebp - 0x18]
call fcn.00481ce8
and dword [esi + 0xc], 0
mov edx, dword [esi + 0x10]
test edx, edx
je 0x47fd1d
mov ecx, dword [ebp - 0x18]
call fcn.00481ce8
and dword [esi + 0x10], 0
mov ecx, dword [ebp - 0x24]
or dword [esi + 4], 0x800000
mov byte [esi], cl
cmp edi, 1
jne 0x47fbde
test dword [esi + 4], 0x400000
jne 0x47fd53
mov ecx, dword [ebp + 0x10]
mov edx, esi
push dword [ecx + 4]
mov ecx, ebx
push dword [ebp - 0x1c]
call fcn.00489af8
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + 0x10]
jmp 0x47fd5e
mov eax, dword [eax + 0xc]
inc dword [eax + 0x10]
cmp eax, ecx
jne 0x47fd5b
jmp 0x47fc75