Function at 0x49a990
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x564
mov eax, dword [0x54f048]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x1c]
xor edx, edx
push ebx
mov dword [eax], edx
mov ebx, dword [ecx + 0xc]
push esi
push edi
mov dword [ebp - 0x530], ecx
mov dword [ebp - 0x564], eax
mov dword [ebp - 0x53c], edx
mov dword [ebp - 0x560], edx
mov dword [ebp - 0x554], edx
cmp ebx, edx
jbe 0x49a9db
mov eax, dword [ecx + 0x38]
mov edi, dword [eax]
jmp 0x49a9dd
xor edi, edi
mov dword [ebp - 0x54c], edx
cmp ebx, edx
jbe 0x49aa6b
jmp 0x49a9f0
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 0x10]
and ecx, 0x1000
xor eax, eax
or eax, ecx
jne 0x49aa33
mov ecx, dword [edx + 8]
mov edx, dword [edx + 0xc]
mov eax, ecx
and eax, dword [ebp + 0x14]
mov esi, edx
and esi, dword [ebp + 0x18]
or eax, esi
jne 0x49aa33
and ecx, dword [ebp + 0xc]
and edx, dword [ebp + 0x10]
or ecx, edx
je 0x49aa33
or eax, 0xffffffff
cmp dword [edi + 0x24], eax
jne 0x49aa33
cmp dword [edi + 0x20], eax
jne 0x49aa33
inc dword [ebp - 0x53c]
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp eax, ebx
jae 0x49aa52
mov ecx, dword [ebp - 0x530]
mov edx, dword [ecx + 0x38]
mov edi, dword [edx + eax*4]
jmp 0x49a9f0
cmp dword [ebp - 0x53c], 0x3ffffffd
jbe 0x49aa6b
mov ebx, dword [ebp - 0x530]
mov eax, 0x80070216
jmp 0x49aae0
mov eax, dword [ebp - 0x53c]
add eax, eax
add eax, eax
jne 0x49aa7c
mov eax, 4
mov ebx, dword [ebp - 0x530]
mov dword [ebp - 0x554], eax
mov esi, eax
lea edi, [ebx + 0x3768]
test eax, eax
ja 0x49aa99
mov esi, 1
mov eax, dword [edi]
test eax, eax
je 0x49aaa9
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jbe 0x49aab8
mov ecx, esi
call fcn.0047fc20
test eax, eax
je 0x49aab8
xor eax, eax
jmp 0x49aacc
mov ecx, dword [edi]
test ecx, ecx
je 0x49aac7
mov edx, dword [ecx + 8]
lea eax, [edx + ecx + 0x10]
jmp 0x49aac9
xor eax, eax
add dword [ecx + 8], esi
mov dword [ebp - 0x560], eax
neg eax
sbb eax, eax
and eax, 0x7ff8fff2
add eax, 0x8007000e
xor edi, edi
cmp eax, edi
mov esi, eax
jl 0x49b338
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x53c], edi
cmp eax, edi
jbe 0x49aafe
mov ecx, dword [ebx + 0x38]
mov edi, dword [ecx]
xor ebx, ebx
test eax, eax
jbe 0x49ab75
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 0x10]
and ecx, 0x1000
xor eax, eax
or eax, ecx
jne 0x49ab57
mov ecx, dword [edx + 8]
mov edx, dword [edx + 0xc]
mov eax, ecx
and eax, dword [ebp + 0x14]
mov esi, edx
and esi, dword [ebp + 0x18]
or eax, esi
jne 0x49ab57
and ecx, dword [ebp + 0xc]
and edx, dword [ebp + 0x10]
or ecx, edx
je 0x49ab57
or eax, 0xffffffff
cmp dword [edi + 0x24], eax
jne 0x49ab57
cmp dword [edi + 0x20], eax
jne 0x49ab57
mov eax, dword [ebp - 0x53c]
mov edx, dword [ebp - 0x560]
mov dword [edx + eax*4], edi
inc eax
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x530]
mov eax, dword [ecx + 0xc]
inc ebx
cmp ebx, eax
jb 0x49ab6b
xor edi, edi
mov ebx, eax
jmp 0x49ab71
mov ecx, dword [ecx + 0x38]
mov edi, dword [ecx + ebx*4]
cmp ebx, eax
jb 0x49ab04
mov edx, dword [ebp - 0x530]
mov edi, dword [ebp - 0x53c]
mov esi, dword [ebp - 0x560]
push edx
push 0x507cd0
mov eax, edi
call fcn.0047fe40
xor ebx, ebx
mov dword [ebp - 0x540], ebx
test edi, edi
jbe 0x49b330
jmp 0x49abb0
mov esi, dword [ebp - 0x560]
mov edi, dword [esi + ebx*4]
mov dword [ebp - 0x538], edi
mov dword [ebp - 0x54c], ebx
cmp ebx, dword [ebp - 0x53c]
jae 0x49ac38
lea ecx, [ecx]
mov eax, dword [esi + ebx*4]
test eax, eax
je 0x49ac32
mov ecx, dword [eax + 0x28]
cmp ecx, dword [edi + 0x28]
jne 0x49ac32
mov eax, dword [eax + 0x94]
mov ecx, dword [edi + 0x94]
cmp eax, ecx
je 0x49ac29
test eax, eax
je 0x49ac32
test ecx, ecx
je 0x49ac32
mov ecx, dword [ecx + 0x24]
mov eax, dword [eax + 0x24]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49ac20
test dl, dl
je 0x49ac1c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49ac20
add eax, 2
add ecx, 2
test dl, dl
jne 0x49ac00
xor eax, eax
jmp 0x49ac25
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x49ac32
inc ebx
cmp ebx, dword [ebp - 0x53c]
jb 0x49abd0
mov dword [ebp - 0x540], ebx
mov eax, dword [ebp - 0x564]
inc dword [eax]
mov esi, dword [edi + 0x98]
cmp esi, 0xffffffff
je 0x49b173
cmp dword [edi + 0x94], 0
je 0x49b173
push 0x520
lea edx, [ebp - 0x528]
push 0
push edx
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x54c]
xor edi, edi
add esp, 0xc
mov dword [ebp - 0x544], edi
cmp eax, ebx
jae 0x49aca7
mov ecx, dword [ebp - 0x560]
mov edx, dword [ecx + eax*4]
mov ecx, dword [edx + 0x2c]
add ecx, 4
mov edx, 1
shl edx, cl
inc eax
or edi, edx
cmp eax, ebx
jb 0x49ac84
mov dword [ebp - 0x544], edi
mov ecx, dword [ebp - 0x530]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
push esi
call edx
mov ecx, dword [ebp - 0x530]
mov edx, dword [ebp - 0x538]
mov edx, dword [edx + 0x98]
mov ebx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x70]
push edx
mov dword [ebp - 0x54c], ebx
call eax
cmp ebx, 0xd
je 0x49b0cb
cmp ebx, 0x1b
je 0x49b0d0
cmp ebx, 0x1d
je 0x49b0cb
lea eax, [ebx - 1]
mov byte [ebp - 0x529], 0
cmp eax, 0x1b
ja case.0x49ad0c.2
movzx ecx, byte [eax + 0x49b440]
jmp dword [ecx*4 + 0x49b414]
mov edx, 2
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 0
jmp 0x49ae26
mov edx, 3
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 0
jmp 0x49ae26
mov edx, 1
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 0
jmp 0x49ae26
mov edx, 4
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 0
jmp 0x49ae26
mov edx, 5
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 0
jmp 0x49ae26
mov edx, 6
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 1
jmp 0x49ae26
mov edx, 7
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 1
jmp 0x49ae26
mov edx, 8
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 1
jmp 0x49ae26
mov edx, 9
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 1
jmp 0x49ae26
mov edx, dword [ebp - 0x530]
test byte [edx + 0xb6], 4
jne 0x49ae0c
mov eax, dword [ebp - 0x538]
mov edx, dword [eax + 0x94]
mov esi, dword [ebp - 0x530]
push 0x43fba0
mov ecx, 0x1196
call fcn.004f47c0
add esp, 4
mov edx, 0xa
mov dword [ebp - 0x534], edx
mov byte [ebp - 0x529], 1
jmp 0x49ae26
mov edx, dword [ebp - 0x534]
cmp byte [ebp + 8], 0
mov esi, dword [ebp - 0x530]
je 0x49b096
mov al, byte [esi + 0xb1]
test al, 0x10
je 0x49afe2
mov ecx, dword [ebp - 0x538]
mov eax, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov ecx, eax
and ecx, 0x20000000
xor edx, edx
or ecx, edx
je 0x49ae66
lea edi, [edx + 1]
jmp 0x49af2e
mov edx, eax
and edx, 0x40000000
xor ebx, ebx
mov ecx, edx
or ecx, ebx
je 0x49aeaf
mov ecx, eax
and ecx, 0x10000000
xor edi, edi
or ecx, edi
je 0x49aeaf
lea edi, [ebx + 7]
mov esi, dword [ebp - 0x530]
test byte [esi + 0xb6], 8
jne 0x49af2e
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x84]
test eax, eax
je 0x49af1a
lea edx, [eax + 0x10]
jmp 0x49af1c
or edx, ebx
je 0x49aeba
mov edi, 6
jmp 0x49ae87
mov edx, eax
and edx, 0x8000000
xor ebx, ebx
mov ecx, edx
or ecx, ebx
je 0x49aedd
mov ecx, eax
and ecx, 0x10000000
xor edi, edi
or ecx, edi
je 0x49aedd
lea edi, [ebx + 5]
jmp 0x49af2e
or edx, ebx
je 0x49aee8
mov edi, 3
jmp 0x49af2e
mov ecx, eax
and ecx, 0x10000000
xor edx, edx
or ecx, edx
je 0x49aefb
lea edi, [edx + 4]
jmp 0x49af2e
and esi, 0x60000db
and eax, 0x80000000
mov ecx, esi
or eax, ecx
je 0x49af13
mov edi, 1
jmp 0x49af2e
mov edi, 2
jmp 0x49af2e
xor edx, edx
push 0x43fbd0
mov ecx, 0x11d8
call fcn.004f47c0
add esp, 4
cmp dword [ebp - 0x54c], 1
mov ebx, dword [ebp - 0x538]
jne 0x49afa5
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x54c], eax
mov eax, ecx
and eax, 0x20000000
xor edx, edx
or eax, edx
je 0x49af81
mov eax, dword [ebx + 0x84]
test eax, eax
je 0x49af65
lea edx, [eax + 0x10]
jmp 0x49af67
xor edx, edx
mov esi, dword [ebp - 0x530]
push 0x43fc08
mov ecx, 0x11d8
call fcn.004f47c0
add esp, 4
jmp 0x49afa5
mov eax, ecx
and eax, 0x40000000
xor edx, edx
or eax, edx
je 0x49af93
lea edi, [edx + 7]
jmp 0x49afa5
xor eax, eax
and ecx, 0x8000000
or ecx, eax
lea edi, [eax + 5]
jne 0x49afa5
lea edi, [eax + 4]
mov ecx, dword [ebp - 0x534]
mov edx, dword [ebp - 0x544]
mov eax, dword [ebx + 0x28]
mov esi, dword [ebp - 0x530]
push ecx
push edx
add esi, 0xb8dc
cmp byte [ebp - 0x529], 0
push eax
mov eax, edi
je 0x49afd8
call fcn.0048dbd0
jmp 0x49b155
call fcn.0048dac0
jmp 0x49b155
test al, 8
je 0x49b061
mov ecx, dword [esi + 0x3658]
dec ecx
xor eax, eax
cmp ecx, 6
ja case.0x49aff4.4
jmp dword [ecx*4 + 0x49b45c]
mov eax, 1
jmp case.0x49aff4.4
mov eax, 2
jmp case.0x49aff4.4
mov eax, 3
jmp case.0x49aff4.4
mov eax, 4
jmp case.0x49aff4.4
mov eax, 6
cmp ebx, 0x14
jne 0x49b031
add esi, 0xb8dc
call fcn.0048dce0
jmp 0x49b155
cmp byte [ebp - 0x529], 0
mov ecx, dword [ebp - 0x538]
push edx
mov edx, dword [ecx + 0x28]
push edi
push edx
lea edi, [esi + 0xb8dc]
push eax
je 0x49b057
call fcn.0048d910
jmp 0x49b155
call fcn.0048d740
jmp 0x49b155
mov eax, dword [ebp - 0x534]
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x28]
push eax
add esi, 0xb8dc
cmp byte [ebp - 0x529], 0
push edi
push edx
je 0x49b08c
call fcn.0048d810
jmp 0x49b155
call fcn.0048d640
jmp 0x49b155
mov eax, dword [ebp - 0x534]
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x28]
push eax
add esi, 0xb8dc
cmp byte [ebp - 0x529], 0
push edi
push edx
je 0x49b0c1
call fcn.0048e110
jmp 0x49b155
call fcn.0048e010
jmp 0x49b155
cmp ebx, 0x1b
jne 0x49b0e5
mov esi, dword [ebp - 0x530]
push edi
push eax
add esi, 0xb8dc
call fcn.0048df30
jmp 0x49b155
cmp ebx, 0xd
jne 0x49b0fd
mov esi, dword [ebp - 0x530]
add esi, 0xb8dc
call fcn.0048dda0
jmp 0x49b155
cmp ebx, 0x1d
jne 0x49b367
mov eax, dword [ebp - 0x530]
test byte [eax + 0xb6], 0x40
jne 0x49b144
mov ecx, dword [ebp - 0x538]
mov eax, dword [ecx + 0x84]
test eax, eax
je 0x49b12a
lea edx, [eax + 0x10]
jmp 0x49b12c
xor edx, edx
mov esi, dword [ebp - 0x530]
push 0x43fc2c
mov ecx, 0x1197
call fcn.004f47c0
add esp, 4
mov esi, dword [ebp - 0x530]
add esi, 0xb8dc
call fcn.0048de70
cmp dword [ebp - 0x528], 0x35
jne 0x49b31e
mov edx, dword [ebp - 0x1c]
push edx
call sub.msvcrt.dll_free
add esp, 4
jmp 0x49b31e
mov eax, dword [ebp - 0x54c]
xor edx, edx
mov dword [ebp - 0x544], edx
cmp eax, ebx
jae 0x49b1b3
jmp 0x49b190
mov ecx, dword [ebp - 0x560]
mov ecx, dword [ecx + eax*4]
mov ecx, dword [ecx + 0x2c]
add ecx, 4
mov esi, 1
shl esi, cl
inc eax
or edx, esi
cmp eax, ebx
jb 0x49b190
mov dword [ebp - 0x544], edx
cmp byte [ebp + 8], 0
je 0x49b2fd
mov esi, dword [ebp - 0x530]
mov al, byte [esi + 0xb1]
test al, 0x10
je 0x49b29e
mov eax, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov ecx, eax
and ecx, 0x20000000
xor edx, edx
or ecx, edx
je 0x49b1ed
lea eax, [edx + 1]
jmp 0x49b277
mov edx, eax
and edx, 0x40000000
xor ebx, ebx
mov ecx, edx
or ecx, ebx
je 0x49b210
mov ecx, eax
and ecx, 0x10000000
xor edi, edi
or ecx, edi
je 0x49b210
lea eax, [ebx + 7]
jmp 0x49b277
or edx, ebx
je 0x49b21b
mov eax, 6
jmp 0x49b277
mov edx, eax
and edx, 0x8000000
xor ebx, ebx
mov ecx, edx
or ecx, ebx
je 0x49b23e
mov ecx, eax
and ecx, 0x10000000
xor edi, edi
or ecx, edi
je 0x49b23e
lea eax, [ebx + 5]
jmp 0x49b277
or edx, ebx
je 0x49b249
mov eax, 3
jmp 0x49b277
mov ecx, eax
and ecx, 0x10000000
xor edx, edx
or ecx, edx
je 0x49b25c
lea eax, [edx + 4]
jmp 0x49b277
and esi, 0x60000db
and eax, 0x80000000
mov ecx, esi
or eax, ecx
mov eax, 1
jne 0x49b277
mov eax, 2
mov edx, dword [ebp - 0x544]
mov ecx, dword [ebp - 0x538]
mov esi, dword [ebp - 0x530]
push edx
mov edx, dword [ecx + 0x28]
push edx
add esi, 0xb8dc
call fcn.0048d9e0
jmp 0x49b31e
test al, 8
je 0x49b2eb
mov ecx, dword [esi + 0x3658]
dec ecx
xor eax, eax
cmp ecx, 6
ja case.0x49b2b0.4
jmp dword [ecx*4 + 0x49b478]
mov eax, 1
jmp case.0x49b2b0.4
mov eax, 2
jmp case.0x49b2b0.4
mov eax, 3
jmp case.0x49b2b0.4
mov eax, 4
jmp case.0x49b2b0.4
mov eax, 6
mov ecx, dword [edi + 0x28]
push edx
push ecx
push eax
lea edi, [esi + 0xb8dc]
call fcn.0048d590
jmp 0x49b31e
push edx
mov edx, dword [edi + 0x28]
push edx
add esi, 0xb8dc
call fcn.0048d4b0
jmp 0x49b31e
mov eax, dword [ebp - 0x530]
test byte [eax + 0xb1], 0x10
jne 0x49b383
mov ecx, dword [edi + 0x28]
push edx
mov esi, eax
push ecx
add esi, 0xb8dc
call fcn.0048df30
mov ebx, dword [ebp - 0x540]
cmp ebx, dword [ebp - 0x53c]
jb 0x49abb0
xor esi, esi
mov ebx, dword [ebp - 0x530]
cmp dword [ebp - 0x560], 0
mov ecx, dword [ebp - 0x554]
je 0x49b3ff
test ecx, ecx
ja 0x49b354
mov ecx, 1
mov eax, dword [ebx + 0x3768]
cmp ecx, dword [eax + 8]
jae 0x49b3c0
sub dword [eax + 8], ecx
jmp 0x49b3ff
cmp dword [ebp - 0x528], 0x35
mov esi, 0x80004005
jne 0x49b332
mov edx, dword [ebp - 0x1c]
push edx
call sub.msvcrt.dll_free
add esp, 4
jmp 0x49b332
mov eax, dword [edi + 0x94]
mov ecx, dword [eax + 0x24]
mov eax, dword [edi + 0x84]
test eax, eax
je 0x49b39b
lea edx, [eax + 0x10]
jmp 0x49b39d
xor edx, edx
mov esi, dword [ebp - 0x530]
push ecx
push 0x43fc58
mov ecx, 0x1197
call fcn.004f47c0
add esp, 8
mov esi, 0x80004005
jmp 0x49b332
mov ecx, dword [ebx + 0x376c]
test ecx, ecx
je 0x49b3e2
mov edx, dword [ecx + 0xc]
cmp edx, dword [eax + 0xc]
jb 0x49b3e2
mov edi, dword [eax]
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov dword [ebx + 0x3768], edi
jmp 0x49b3fc
push ecx
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebx + 0x3768]
mov dword [ebx + 0x376c], eax
mov eax, dword [eax]
mov dword [ebx + 0x3768], eax
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0054b0c8
mov esp, ebp
pop ebp
ret 0x18