Function at 0x4ad380
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x9d0
mov eax, dword [0x4d88f0]
xor eax, esp
mov dword [esp + 0x9cc], eax
mov eax, dword [0x5077d4]
push ebp
xor ebp, ebp
push esi
push edi
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], ebp
mov dword [0x5077e4], 0xf4240
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x4ad3b3
sub eax, edx
sar eax, 1
mov esi, eax
mov eax, dword [0x506344]
lea edi, [eax + esi*2 - 8]
cmp esi, 4
jb 0x4ad43c
cmp word [edi], 0x2e
jne 0x4ad43c
movzx ecx, word [edi + 2]
push ecx
call fcn.004b0c11
add esp, 4
cmp eax, 0x5a
jne 0x4ad43c
movzx eax, word [edi + 4]
cmp ax, 0x30
jb 0x4ad43c
cmp ax, 0x39
ja 0x4ad43c
movzx eax, word [edi + 6]
cmp ax, 0x30
jb 0x4ad43c
cmp ax, 0x39
ja 0x4ad43c
cmp esi, 4
je 0x4ad41f
movzx eax, word [edi + 8]
cmp ax, 0x30
jb 0x4ad43c
cmp ax, 0x39
ja 0x4ad43c
pop edi
pop esi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x9cc]
xor ecx, esp
call fcn.004af72c
add esp, 0x9d0
ret
mov edx, dword [0x5077d4]
push ebx
push 0x4c7110
push edx
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
cmp eax, ebp
jne 0x4ad475
mov eax, dword [0x5077d4]
push eax
push ebp
mov ecx, 0x5062f4
call fcn.0042cb20
mov eax, dword [0x5077e4]
jmp 0x4ad790
push 2
push 0xffffffffffffffff
push 0xfffc0000
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
je 0x4ad4da
mov ecx, dword [0x5077d0]
push ebp
push ebp
push ebp
push ecx
call fcn.004b26a3
add esp, 0x10
test eax, eax
je 0x4ad4da
mov edx, dword [0x5077d0]
push edx
call fcn.004b24ae
mov eax, dword [0x5077d4]
add esp, 4
push eax
push 0x204
mov dword [0x5077d0], ebp
call fcn.00465ff0
push eax
push ebp
call fcn.00499570
add esp, 0xc
mov eax, 0xb
jmp 0x4adfb0
mov eax, dword [0x5077d0]
mov edi, 0x4cd530
call fcn.004a9810
test eax, eax
je 0x4ad63a
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b2a3e
mov esi, eax
mov eax, dword [0x5077d0]
add esp, 4
mov ebx, edx
call fcn.004a9810
test eax, eax
je 0x4ad538
mov edx, dword [0x5077d0]
push edx
call fcn.004b2a3e
mov esi, eax
mov eax, dword [0x5077d0]
add esp, 4
mov edi, 0x4cd530
mov ebx, edx
call fcn.004a9810
test eax, eax
jne 0x4ad512
mov eax, dword [0x5077d0]
push ebp
push ebx
push esi
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4ad65c
mov eax, dword [0x5077d0]
push eax
push 0x12
lea ecx, [esp + 0x28]
push 1
push ecx
call fcn.004b241a
add esp, 0x10
cmp eax, 0x12
jb 0x4ad63a
movzx dx, byte [esp + 0x21]
movzx ecx, byte [esp + 0x20]
shl dx, 8
movzx eax, dx
or eax, ecx
inc eax
lea edx, [eax - 1]
mov dword [0x5077e4], eax
mov dword [0x5077e8], edx
cmp eax, 0x10000
jae 0x4ad5be
movzx cx, byte [esp + 0x23]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x22]
or edx, ecx
cmp edx, eax
jbe 0x4ad5be
mov dword [0x5077e4], ebp
jmp 0x4ad647
movzx cx, byte [esp + 0x31]
movzx dx, byte [esp + 0x30]
shl cx, 8
or cx, dx
mov word [0x50633c], cx
je 0x4ad63f
movzx eax, cx
inc eax
push eax
call fcn.004af837
add esp, 4
mov dword [0x507870], eax
cmp eax, ebp
je 0x4adffa
mov ecx, dword [0x5077d0]
movzx edx, word [0x50633c]
push ecx
push 1
push edx
push eax
call fcn.004b241a
add esp, 0x10
cmp eax, 1
je 0x4ad629
mov eax, dword [0x507870]
push eax
call fcn.004af901
add esp, 4
mov dword [0x507870], ebp
jmp 0x4ad63a
movzx ecx, word [0x50633c]
mov edx, dword [0x507870]
mov byte [ecx + edx], 0
mov eax, dword [0x5077e4]
cmp eax, ebp
jne 0x4ad76b
mov eax, dword [0x5077d0]
push ebp
push ebp
push ebp
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
je 0x4ad696
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
mov edx, dword [0x5077d4]
add esp, 4
push edx
push 0x204
mov dword [0x5077d0], ebp
call fcn.00465ff0
push eax
push ebp
call fcn.00499570
add esp, 0xc
mov eax, 0xb
jmp 0x4adfb0
mov esi, dword [0x5077d0]
call fcn.004a9750
mov esi, eax
cmp esi, ebp
je 0x4ad766
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
add esp, 4
mov dword [0x5077f0], eax
mov dword [0x5077f4], edx
cmp eax, 4
jne 0x4ad73c
cmp edx, ebp
jne 0x4ad73e
mov ecx, 0x4cd548
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
je 0x4ad747
mov esi, dword [0x5077d0]
call fcn.004a9750
mov esi, eax
mov eax, dword [0x5077e4]
cmp esi, ebp
je 0x4ad76b
cmp eax, ebp
jne 0x4ad76b
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b2a3e
add esp, 4
mov dword [0x5077f0], eax
mov dword [0x5077f4], edx
cmp eax, 8
jne 0x4ad766
cmp edx, ebp
jne 0x4ad766
mov ecx, 0x4cd538
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
je 0x4ad766
mov eax, 1
mov dword [0x5077e4], eax
jmp 0x4ad76b
cmp edx, ebp
ja 0x4ad6ed
jb 0x4ad747
cmp eax, 4
ja 0x4ad6ed
mov ecx, 0x4cd548
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
je 0x4ad6ed
mov eax, 0x1869f
mov dword [0x5077e4], eax
jmp 0x4ad6f2
mov eax, dword [0x5077e4]
cmp dword [0x4d6f38], ebp
jne 0x4ad77f
mov eax, 1
mov dword [0x5077e4], eax
jmp 0x4ad7b6
cmp eax, 0xf4240
jne 0x4ad790
mov eax, 1
mov dword [0x5077e4], eax
cmp dword [0x4d6f38], ebp
je 0x4ad7b6
mov ecx, dword [0x5077d0]
cmp ecx, ebp
je 0x4ad7b6
push ecx
call fcn.004b24ae
mov eax, dword [0x5077e4]
add esp, 4
mov dword [0x5077d0], ebp
xor ecx, ecx
mov dword [0x5077e8], ecx
cmp eax, ebp
jbe 0x4adfae
mov edx, dword [0x5077d4]
push ecx
push edx
call fcn.004379c0
mov ebx, eax
mov eax, dword [0x5077d0]
mov dword [esp + 0x18], ebx
cmp eax, ebp
jne 0x4ad856
push 0x4c7110
push ebx
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
cmp eax, ebp
jne 0x4ad856
lea esp, [esp]
mov eax, dword [0x5077e8]
push eax
call fcn.00438320
cmp eax, 9
je 0x4adfc9
cmp eax, 2
je 0x4adfdc
cmp eax, 3
je 0x4adf95
mov ecx, dword [0x5077e8]
mov edx, dword [0x5077d4]
push ecx
push edx
call fcn.004379c0
mov ebx, eax
push 0x4c7110
push ebx
mov dword [esp + 0x20], ebx
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
cmp eax, ebp
je 0x4ad800
mov esi, eax
call fcn.004a9750
test eax, eax
je 0x4adf6d
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
add esp, 4
mov dword [0x5077f0], eax
mov dword [0x5077f4], edx
xor eax, eax
mov cl, byte [eax + 0x5496c4]
cmp cl, byte [eax + 0x4cd530]
jne 0x4ad894
inc eax
cmp eax, 4
jl 0x4ad880
cmp eax, 4
je 0x4adf54
xor eax, eax
nop
mov dl, byte [eax + 0x5496c4]
cmp dl, byte [eax + 0x4cd518]
jne 0x4ad8b4
inc eax
cmp eax, 4
jl 0x4ad8a0
cmp eax, 4
je 0x4adf54
xor eax, eax
nop
mov cl, byte [eax + 0x5496c4]
cmp cl, byte [eax + 0x4cd520]
jne 0x4ad8d4
inc eax
cmp eax, 4
jl 0x4ad8c0
cmp eax, 4
je 0x4adf54
xor eax, eax
nop
mov dl, byte [eax + 0x5496c4]
cmp dl, byte [eax + 0x4cd538]
jne 0x4ad8f4
inc eax
cmp eax, 4
jl 0x4ad8e0
cmp eax, 4
jne 0x4ada05
push 0x80
call fcn.004af837
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x4adffa
xor eax, eax
xor ecx, ecx
xor edx, edx
push esi
mov word [esi], ax
mov word [esi + 2], cx
mov word [esi + 4], dx
mov word [esi + 6], ax
mov dword [esi + 8], ebp
mov dword [esi + 0xc], ebp
mov dword [esi + 0x10], ebp
mov dword [esi + 0x14], ebp
mov dword [esi + 0x18], ebp
mov dword [esi + 0x1c], ebp
mov word [esi + 0x20], cx
mov word [esi + 0x24], dx
mov word [esi + 0x26], ax
mov dword [esi + 0x28], ebp
mov word [esi + 0x2c], cx
mov dword [esi + 0x38], ebp
mov dword [esi + 0x30], ebp
mov dword [esi + 0x34], ebp
mov dword [esi + 0x48], ebp
mov dword [esi + 0x44], ebp
mov dword [esi + 0x40], ebp
mov dword [esi + 0x4c], ebp
mov dword [esi + 0x3c], ebp
mov dword [esi + 0x50], ebp
mov dword [esi + 0x54], ebp
mov dword [esi + 0x5c], ebp
mov dword [esi + 0x58], ebp
call fcn.004abee0
mov edx, dword [esi + 0x54]
mov edi, eax
push edx
mov dword [esp + 0x18], edi
call fcn.0046f600
push eax
push 0x268
call fcn.00465ff0
push eax
lea eax, [esp + 0x54]
push eax
mov edx, 0x4c8
call fcn.00407130
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
call fcn.0048bca0
call fcn.0044c2e0
cmp byte [0x51a848], 0
jne 0x4adfd5
cmp dword [esp + 0x10], ebp
je 0x4ad9cb
mov dword [esp + 0x10], ebp
cmp edi, 2
je 0x4adf6d
cmp dword [esp + 0x14], ebp
jne 0x4adf54
inc dword [0x506340]
mov eax, 0x507868
cmp dword [0x507868], ebp
je 0x4ad9f5
mov eax, dword [esp + 0x1c]
mov dword [eax], esi
lea eax, [esi + 0x78]
mov dword [eax], ebp
mov dword [esp + 0x1c], eax
jmp 0x4adf54
xor eax, eax
jmp 0x4ada10
mov dl, byte [eax + 0x5496c4]
cmp dl, byte [eax + 0x4cd528]
jne 0x4ada24
inc eax
cmp eax, 4
jl 0x4ada10
cmp eax, 4
jne 0x4adf32
cmp dword [esp + 0x10], ebp
jne 0x4ada99
mov ecx, dword [0x506340]
cmp ecx, ebp
je 0x4ada99
lea eax, [ecx*4]
mov edx, eax
shr edx, 2
cmp edx, ecx
jne 0x4adffa
push eax
call fcn.004af837
add esp, 4
mov dword [0x506338], eax
cmp eax, ebp
je 0x4adffa
mov ecx, dword [0x507868]
cmp ecx, ebp
je 0x4ada82
mov dword [eax], ecx
mov ecx, dword [ecx + 0x78]
add eax, 4
cmp ecx, ebp
jne 0x4ada71
mov eax, dword [0x506338]
mov ecx, dword [0x506340]
push 0x4a8350
push 4
push ecx
push eax
call fcn.004b1c90
add esp, 0x10
mov edx, dword [0x5077d0]
push edx
push 1
lea eax, [esp + 0x28]
push 0x2a
push eax
mov dword [esp + 0x20], 1
call fcn.004b241a
add esp, 0x10
cmp eax, 1
jne 0x4adf54
push 0x80
call fcn.004af837
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x4adffa
movzx ecx, byte [esp + 0x21]
movzx edx, byte [esp + 0x20]
movzx eax, byte [esp + 0x23]
shl cx, 8
or cx, dx
movzx edx, byte [esp + 0x25]
mov word [esi], cx
movzx ecx, byte [esp + 0x22]
shl ax, 8
or ax, cx
movzx ecx, byte [esp + 0x27]
mov word [esi + 2], ax
movzx eax, byte [esp + 0x24]
shl dx, 8
or dx, ax
movzx eax, byte [esp + 0x2b]
mov word [esi + 4], dx
movzx edx, byte [esp + 0x26]
shl cx, 8
or cx, dx
movzx edx, byte [esp + 0x2a]
shl ax, 8
mov word [esi + 6], cx
movzx ecx, ax
movzx eax, byte [esp + 0x29]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x28]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, byte [esp + 0x2e]
mov dword [esi + 8], ecx
movzx ecx, byte [esp + 0x2f]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x2d]
or edx, eax
shl cx, 8
movzx eax, cx
movzx ecx, byte [esp + 0x2c]
shl edx, 0x10
or edx, eax
or edx, ecx
movzx ecx, byte [esp + 0x32]
mov dword [esi + 0xc], edx
movzx edx, byte [esp + 0x33]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x31]
or eax, ecx
shl eax, 0x10
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x30]
or eax, ecx
or eax, edx
movzx edx, byte [esp + 0x36]
mov dword [esi + 0x10], eax
movzx eax, byte [esp + 0x37]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x35]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x34]
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x3b]
or ecx, eax
movzx ax, byte [esp + 0x39]
mov dword [esi + 0x18], ecx
movzx ecx, byte [esp + 0x38]
shl ax, 8
or ax, cx
mov dword [esi + 0x14], ebp
mov dword [esi + 0x1c], ebp
mov word [esi + 0x20], ax
shl dx, 8
movzx ecx, byte [esp + 0x3a]
or dx, cx
movzx ecx, byte [esp + 0x3c]
mov word [esi + 0x24], dx
movzx edx, byte [esp + 0x3d]
shl dx, 8
or dx, cx
mov word [esi + 0x26], dx
movzx edx, byte [esp + 0x3f]
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x3e]
or ecx, edx
movzx edx, byte [esp + 0x40]
mov dword [esi + 0x28], ecx
movzx ecx, byte [esp + 0x41]
shl cx, 8
or cx, dx
mov word [esi + 0x2c], cx
movzx ecx, byte [esp + 0x45]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x44]
or edx, ecx
movzx ecx, byte [esp + 0x43]
shl cx, 8
shl edx, 0x10
movzx ecx, cx
or edx, ecx
movzx ecx, byte [esp + 0x42]
or edx, ecx
mov dword [esi + 0x38], edx
movzx edx, byte [esp + 0x49]
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x48]
or ecx, edx
movzx edx, byte [esp + 0x47]
shl dx, 8
movzx edx, dx
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x46]
or ecx, edx
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], ebp
mov dword [esi + 0x44], ebp
mov dword [esi + 0x40], ebp
mov dword [esi + 0x4c], ebp
mov dword [esi + 0x3c], ebp
mov dword [esi + 0x50], ebp
mov dword [esi + 0x54], ebp
mov dword [esi + 0x48], ebp
mov dword [esi + 0x5c], ebp
mov dword [esi + 0x58], ebp
cmp ax, bp
je 0x4adf54
movzx eax, ax
inc eax
push eax
call fcn.004af837
mov edi, eax
add esp, 4
mov dword [esi + 0x4c], edi
cmp edi, ebp
je 0x4adffa
movzx ebx, word [esi + 0x24]
cmp bx, bp
je 0x4add13
movzx ecx, bx
inc ecx
push ecx
call fcn.004af837
add esp, 4
mov dword [esi + 0x44], eax
cmp eax, ebp
je 0x4adffa
movzx ebp, word [esi + 0x26]
test bp, bp
je 0x4add34
movzx edx, bp
inc edx
push edx
call fcn.004af837
add esp, 4
mov dword [esi + 0x48], eax
test eax, eax
je 0x4adffa
mov eax, dword [0x5077d0]
movzx ecx, word [esi + 0x20]
push eax
push 1
push ecx
push edi
call fcn.004b241a
add esp, 0x10
cmp eax, 1
jne 0x4adf54
test bx, bx
je 0x4add79
mov edx, dword [0x5077d0]
mov ecx, dword [esi + 0x44]
push edx
push eax
movzx eax, bx
push eax
push ecx
call fcn.004b241a
add esp, 0x10
cmp eax, 1
jne 0x4adf54
test bp, bp
je 0x4adda0
mov edx, dword [0x5077d0]
mov ecx, dword [esi + 0x48]
push edx
movzx eax, bp
push 1
push eax
push ecx
call fcn.004b241a
add esp, 0x10
cmp eax, 1
jne 0x4adf54
movzx edx, word [esi + 0x20]
push edi
mov byte [edx + edi], 0
call fcn.004a8410
mov edi, eax
test edi, edi
je 0x4adf54
mov eax, dword [edi + 8]
cmp eax, dword [esi + 8]
jne 0x4adf54
cmp dword [edi + 0x58], 0
movzx ecx, word [esi]
mov edx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
mov word [edi], cx
movzx ecx, word [esi + 0x2c]
mov dword [edi + 0x44], edx
mov edx, dword [esi + 0x38]
mov word [edi + 0x24], bx
mov word [edi + 0x26], bp
mov dword [edi + 0x48], eax
mov word [edi + 0x2c], cx
mov dword [edi + 0x38], edx
jne 0x4ade1f
mov eax, 0x800
test word [edi + 4], ax
je 0x4ade19
mov ecx, dword [edi + 0x4c]
push ecx
call fcn.004c0ac7
add esp, 4
mov dword [edi + 0x58], eax
test eax, eax
jne 0x4ade1f
push 4
call fcn.004a6030
jmp 0x4ade1f
push edi
call fcn.004a8830
movzx eax, word [edi]
movzx ecx, al
shr ax, 8
test ax, ax
jne 0x4ade46
test dword [edi + 0x38], 0xffff0000
je 0x4ade57
cmp ecx, 0x19
je 0x4ade46
cmp ecx, 0x1a
je 0x4ade46
cmp ecx, 0x28
jne 0x4ade57
cmp ax, 6
je 0x4ade57
cmp ax, 0xb
jne 0x4ade62
cmp ecx, 0x32
jne 0x4ade62
mov eax, dword [edi + 0x4c]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
movzx eax, word [edi]
movzx ecx, al
shr ax, 8
test ax, ax
jne 0x4ade89
test dword [edi + 0x38], 0xffff0000
je 0x4ade9a
cmp ecx, 0x19
je 0x4ade89
cmp ecx, 0x1a
je 0x4ade89
cmp ecx, 0x28
jne 0x4ade9a
cmp ax, 6
je 0x4ade9a
cmp ax, 0xb
jne 0x4adea5
cmp ecx, 0x32
jne 0x4adea5
mov eax, dword [edi + 0x48]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
mov edx, dword [0x5077cc]
push edx
call fcn.004b2a3e
mov ecx, dword [edi + 0x30]
mov esi, eax
mov eax, dword [edi + 0x34]
push 0
push eax
mov ebx, edx
mov edx, dword [0x5077cc]
push ecx
push edx
call fcn.004b26a3
add esp, 0x14
test eax, eax
jne 0x4adfe3
push 1
push edi
call fcn.004ab000
mov eax, dword [0x5077cc]
push 0
push ebx
push esi
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4adfee
mov ecx, dword [0x5077cc]
push ecx
call fcn.004b2a3e
add esp, 4
cmp esi, eax
jne 0x4adf0f
cmp ebx, edx
je 0x4adf54
mov edx, dword [0x5077d0]
push edx
call fcn.004b24ae
add esp, 4
mov dword [0x5077d0], 0
mov eax, 0xe
jmp 0x4adfb0
cmp dword [0x507868], ebp
jne 0x4adf54
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x5496c4]
cmp dl, byte [eax + str.PK_a_b]
jne 0x4adf54
inc eax
cmp eax, 4
jl 0x4adf40
mov esi, dword [0x5077d0]
call fcn.004a9750
mov ebx, dword [esp + 0x18]
xor ebp, ebp
test eax, eax
jne 0x4ad865
mov eax, dword [0x5077d0]
cmp eax, ebp
je 0x4adf7f
push eax
call fcn.004b24ae
add esp, 4
push ebx
mov dword [0x5077d0], ebp
call fcn.004af901
add esp, 4
cmp dword [esp + 0x14], 2
je 0x4adfae
mov ecx, dword [0x5077e8]
inc ecx
mov dword [0x5077e8], ecx
cmp ecx, dword [0x5077e4]
jb 0x4ad7c6
xor eax, eax
mov ecx, dword [esp + 0x9dc]
pop ebx
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004af72c
add esp, 0x9d0
ret
push ebx
push ebp
mov ecx, 0x5062f4
call fcn.0042cb20
mov eax, 9
jmp 0x4adfb0
mov eax, 2
jmp 0x4adfb0
mov eax, dword [0x5077d0]
push eax
jmp 0x4adf16
mov ecx, dword [0x5077d0]
push ecx
jmp 0x4adf16
mov eax, 4
jmp 0x4adfb0