Function at 0x1001ada0
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x10061338]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], edx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 0xc]
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi], edx
mov dword [esi + 4], 0
test edi, edi
je 0x10024bb4
mov dword [ebp - 0x20], 0xc8
mov dword [ebp - 0x28], 0
test edx, edx
jne 0x10024bbe
mov eax, dword [0x100083e0]
mov ecx, dword [0x100083e4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
test edi, edi
je 0x10024bce
mov eax, 0xc8
mov ebx, dword [0x10061a08]
mov dword [ebp - 0x1c], eax
test ebx, ebx
jne 0x1001ae91
mov eax, dword [0x10061a18]
test eax, eax
jne 0x1001ae75
push 0x10008468
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
mov dword [0x10061a18], eax
push 0x100083e8
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov ebx, eax
mov dword [0x10061a08], ebx
test ebx, ebx
je 0x10024bd5
lea ecx, [ebp - 0x1c]
push ecx
push edi
lea eax, [esi + 8]
mov ecx, ebx
push eax
push 0
push 0
lea eax, [ebp - 0x18]
push eax
call dword [0x10063524]
call ebx
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x10024bdf
test edi, edi
je 0x10024c12
mov ebx, dword [ebp - 0x20]
test edi, edi
je 0x10024bf3
mov edx, dword [ebp - 0x1c]
cmp edx, 4
ja 0x1001af42
cmp edx, 0x10
jae 0x10024c92
xor eax, eax
mov dword [ebp - 0x1c], 0x10
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov dword [edi], 0x100202
mov edx, dword [ebp - 0x1c]
mov dword [esi + 0x14], edi
movzx ecx, word [edi + 2]
add ecx, edi
mov dword [esi + 0x18], ecx
movzx eax, word [edi + 4]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edx
test eax, eax
jne 0x1001af21
mov ebx, 0xc8
mov dword [esi + 0x2c], ebx
cmp edi, eax
je 0x1001af49
xor eax, eax
mov dword [esi + 0x30], eax
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001bb80
mov esp, ebp
pop ebp
ret 0xc
mov al, byte [edi]
mov byte [esi + 0xc], al
jmp 0x1001aed2
mov eax, 1
jmp 0x1001af2a
inc dword [ebx - 0x4c4f33c]
add al, 0x83
inc ebp
adc byte [ebx + ebp*8], al
rol byte [ebx - 0x74eb43bb], 0xbd
js 0x10024bdc
invalid
invalid
add byte [eax], al
add byte [ebx], bh
ret
cmp dword [eax], ebx
je 0x10024c53
mov edx, dword [eax + 4]
lea ecx, [eax + 8]
add edx, eax
mov dword [ebp + 8], ecx
cmp ecx, edx
jae 0x10024c4e
mov ecx, dword [ebp + 8]
movzx ecx, word [ecx]
mov edx, ecx
and edx, 0xf000
cmp edx, 0x3000
jne 0x10024c38
and ecx, 0xfff
mov edx, esi
sub edx, dword [edi + 0x34]
add ecx, esi
add ecx, dword [eax]
add dword [ecx], edx
jmp 0x10024c40
cmp edx, ebx
jne 0x10024d8e
mov ecx, dword [eax + 4]
add dword [ebp + 8], 2
add ecx, eax
cmp dword [ebp + 8], ecx
jb 0x10024c0f
add eax, dword [eax + 4]
jmp 0x10024bfc
mov dword [ebp + 0xc], ebx
jmp 0x10024c5e
mov edi, dword [ebp - 0x88]
mov eax, dword [ebp + 0xc]
cmp ax, word [edi + 6]
jne 0x10024c76
mov edx, dword [ebp - 0xb4]
xor ecx, ecx
mov edi, 0x60000000
jmp 0x10024c94
movzx eax, ax
lea eax, [eax + eax*4]
mov ecx, dword [edi + eax*8 + 0x104]
mov edx, dword [edi + eax*8 + 0x108]
lea eax, [edi + eax*8 + 0xf8]
mov edi, dword [eax + 0x24]
js 0x10024cb8
lea eax, [edx + ecx - 1]
xor edx, edx
div dword [ebp - 0xac]
xor edx, edx
mov dword [ebp - 0x44], eax
mov eax, ecx
div dword [ebp - 0xac]
cmp eax, dword [ebp - 0x44]
ja 0x10024cf2
mov edx, edi
mov dword [ebp + 8], edi
and dword [ebp + 8], 0x40000000
or byte gs:[eax], al
add byte [eax], al
inc eax
mov dword [ebp + 0x10], edi
and edx, 0x20000000
and dword [ebp + 0x10], 0x80000000
mov ecx, dword [ebp + 0x18]
cmp edx, ebx
je 0x10024cd9
or byte [eax + ecx], 1
cmp dword [ebp + 8], ebx
je 0x10024ce2
or byte [eax + ecx], 2
cmp dword [ebp + 0x10], ebx
je 0x10024cec
add ecx, eax
or byte [ecx], 4
inc eax
cmp eax, dword [ebp - 0x44]
jbe 0x10024cce
inc dword [ebp + 0xc]
mov eax, dword [ebp - 0x88]
mov cx, word [ebp + 0xc]
cmp cx, word [eax + 6]
jbe 0x10024c58
mov dword [ebp + 8], esi
xor edi, edi
mov eax, dword [ebp + 0x18]
push 2
pop ecx
movzx eax, byte [edi + eax]
sub eax, ecx
je 0x10024d3f
dec eax
je 0x10024d36
sub eax, 3
je 0x10024d2d
mov dword [ebp - 4], 0x40
jmp 0x10024d5c
mov dword [ebp - 4], 4
jmp 0x10024d42
mov dword [ebp - 4], 0x20
jmp 0x10024d42
mov dword [ebp - 4], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 0xac]
push dword [ebp + 8]
call dword [ebp - 0xbc]
test eax, eax
je 0x10024d8e
mov eax, dword [ebp - 0xac]
add dword [ebp + 8], eax
inc edi
cmp edi, dword [ebp - 0x8c]
jbe 0x10024d0e
mov eax, dword [ebp - 0x88]
mov edi, dword [eax + 0x28]
add edi, esi
call fcn.1002459f
ljmp 0x1475