Function at 0x10070649
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x100cea68]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, ecx
test eax, 0x10000
je 0x100706d4
mov ecx, dword [ebp + 0xc]
and ecx, 0x7c037fff
mov eax, ecx
not eax
and dword [edi], eax
mov eax, dword [ebx]
and eax, ecx
mov ecx, 0x10000000
or eax, dword [edi]
cmp byte [edi + 0x2d], 0xa
mov dword [edi], eax
jb 0x10070693
or eax, ecx
mov dword [edi], eax
test ecx, eax
jne 0x100706a3
and eax, 0xd7ffffff
mov dword [edi], eax
jmp 0x10070e4b
test eax, 0x20000000
jne 0x10070e4b
and eax, 0xfffcffff
mov ecx, edi
mov dword [edi], eax
call fcn.1007129d
test eax, eax
je 0x10070e4b
mov dword [edi + 0x18], 0x1007f
mov byte [edi + 4], 0
jmp 0x10070e4b
test al, al
js 0x100706fb
test dword [edi], 0x1000000
je 0x100706fb
mov esi, dword [ebp + 0xc]
and eax, 0xd7ffffeb
mov dword [ebp + 0x10], eax
and esi, 0xffe3ffff
mov eax, dword [ebp + 0x14]
and eax, 0xf7ffffff
jmp 0x10070701
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], esi
and esi, 0x44037fff
mov eax, esi
not eax
and dword [edi], eax
mov eax, dword [ebx]
mov edx, dword [edi]
and eax, esi
mov esi, dword [ebp + 0x10]
or edx, eax
mov ecx, esi
and ecx, 0xbbfc0000
mov eax, ecx
not eax
and edx, eax
mov dword [edi], edx
mov eax, dword [ebx]
and eax, ecx
mov ecx, dword [ebp - 0x20]
or eax, edx
mov dword [edi], eax
test cl, 1
je 0x10070757
mov eax, dword [ebx]
and al, 1
movzx eax, al
neg eax
sbb eax, eax
and eax, 0x12c
add eax, 0x190
mov word [edi + 0x10], ax
test ecx, 0x40000000
je 0x10070765
mov eax, dword [ebx + 0xc]
mov dword [edi + 0xc], eax
test ecx, 0xbfffffc0
je 0x10070b1f
mov eax, ecx
and eax, 0x80000000
mov dword [ebp - 0x28], eax
je 0x1007079b
movsx eax, word [ebx + 8]
test esi, 0x4000
je 0x10070797
movsx ecx, word [edi + 8]
mov edx, eax
call fcn.100719b7
mov ecx, dword [ebp - 0x20]
mov word [edi + 8], ax
test ecx, 0x10000000
je 0x100707ab
mov ax, word [ebx + 0xa]
mov word [edi + 0xa], ax
test ecx, 0x8000000
je 0x100707ec
test esi, 0x1100
jne 0x10070a63
mov al, byte [ebx + 4]
mov byte [ebp - 0x19], al
test esi, 0x2000
je 0x10070a39
mov cl, byte [edi + 4]
test al, al
jne 0x100709f6
movzx ecx, cl
call fcn.10059025
test eax, eax
jne 0x10070a63
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp + 0x10]
mov edx, 0x500
mov eax, ecx
and eax, edx
cmp eax, edx
jne 0x10070825
mov dl, byte [edi + 4]
cmp dl, byte [ebx + 4]
je 0x10070825
cmp dword [ebp - 0x28], 0
je 0x10070825
movzx eax, word [edi + 8]
push eax
shr ecx, 9
push edx
mov dl, byte [ebx + 4]
and cl, 1
call fcn.1005f5a2
mov word [edi + 8], ax
test esi, 0x20000000
je 0x100708c1
push 0x100d4fb8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [ebx + 5]
inc dword [0x100d5670]
mov byte [edi + 5], al
movzx eax, word [ebx + 6]
movsx ecx, ax
mov word [edi + 6], ax
call fcn.10062a5b
test eax, eax
je 0x100708b0
xor ecx, ecx
push ecx
push ecx
push ecx
push 2
pop edx
mov ecx, eax
call fcn.10076d1b
and eax, 0xf00000
xor edx, edx
or eax, edx
je 0x100708b0
movzx eax, byte [edi + 4]
sub eax, 0xc
cmp eax, 3
jbe 0x100708b0
movsx ecx, word [edi + 6]
lea edx, [ebp - 0x10]
call fcn.10063083
or eax, edx
je 0x100708b0
mov ecx, dword [ebp - 0x10]
and ecx, 0xf00000
mov eax, ecx
or eax, 0
je 0x100708b0
push 0
push ecx
xor ecx, ecx
inc ecx
call fcn.1005feac
mov byte [edi + 4], al
dec dword [0x100d5670]
push 0x100d4fb8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 0x10]
and ecx, 0x8000
neg ecx
sbb ecx, ecx
not ecx
and ecx, esi
mov dword [ebp - 0xc], ecx
test ecx, 0x7ffffc0
je 0x10070b1f
mov eax, ecx
and eax, 0x400001
cmp eax, 0x400000
jne 0x1007090d
movzx eax, word [ebx + 0x10]
mov esi, 0x227
mov edx, dword [edi]
or edx, 1
mov word [edi + 0x10], ax
mov dword [edi], edx
cmp ax, si
jae 0x1007090d
and edx, 0xfffffffe
mov dword [edi], edx
test ecx, 0x4000000
je 0x1007091b
mov eax, dword [ebx + 0x14]
mov dword [edi + 0x14], eax
test ecx, 0x2000000
je 0x10070984
mov eax, dword [ebx + 0x18]
mov esi, dword [ebp - 0x24]
mov dword [edi + 0x18], eax
movzx eax, ax
mov dword [ebp - 0x20], eax
mov edx, eax
mov dword [ebp - 0x28], edx
test esi, 0x400000
jne 0x1007096e
test esi, 0x800000
jne 0x1007097b
test ecx, 0x8000000
jne 0x1007097b
mov dl, byte [edi + 4]
movzx eax, dl
sub eax, 0xc
cmp eax, 3
jbe 0x1007097b
cmp dl, 0xa
je 0x1007097b
test dword [ebp - 0x28], 0x3ff
je 0x1007097b
mov eax, dword [ebp - 0x20]
mov ecx, eax
call fcn.1005fa68
mov ecx, dword [ebp - 0xc]
mov byte [edi + 4], al
and esi, 0xff3fffff
mov dword [ebp - 0x24], esi
test ecx, 0x1000000
je 0x10070992
mov eax, dword [ebx + 0x1c]
mov dword [edi + 0x1c], eax
test ecx, 0x200000
je 0x100709a2
mov ax, word [ebx + 0x12]
mov word [edi + 0x12], ax
test ecx, 0x100000
je 0x100709b2
mov ax, word [ebx + 0x22]
mov word [edi + 0x22], ax
test ecx, 0x80000
je 0x100709c2
mov ax, word [ebx + 0x20]
mov word [edi + 0x20], ax
test ecx, 0x800000
je 0x10070af9
mov dl, byte [ebx + 0x24]
mov byte [edi + 0x24], dl
test cl, 4
jne 0x10070af3
mov eax, dword [edi]
and eax, 0xfffffffb
mov dword [edi], eax
test dl, dl
je 0x10070af9
or eax, 4
mov dword [edi], eax
jmp 0x10070af9
cmp cl, 0x13
jae 0x100707ec
movzx edx, cl
lea eax, [edx - 0xc]
cmp eax, 3
jbe 0x100707ec
lea eax, [edx - 0x2f]
cmp eax, 3
jbe 0x100707ec
cmp cl, 0xa
je 0x100707ec
cmp cl, 0x11
je 0x100707ec
test dword [edi], 0x40000
je 0x10070a63
jmp 0x100707ec
movzx ecx, byte [edi + 4]
call fcn.10059025
movzx ecx, byte [ebp - 0x19]
mov esi, eax
call fcn.10059025
xor esi, eax
je 0x10070a60
mov al, byte [ebp - 0x19]
cmp al, 0xa
je 0x10070a60
cmp al, 0x11
jne 0x100707ec
mov esi, dword [ebp + 0x10]
test esi, 0x1000
je 0x10070ae5
mov al, byte [edi + 4]
cmp al, 0xa
je 0x10070a76
cmp al, 0x11
jne 0x10070ae5
mov al, byte [ebx + 4]
cmp al, 0xa
je 0x10070ae5
cmp al, 0x11
je 0x10070ae5
push 0x100d4fb8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [0x100d5670]
mov esi, dword [ebp - 0x20]
test esi, 0x20000000
je 0x10070aa3
movzx eax, word [ebx + 6]
jmp 0x10070aa7
movzx eax, word [edi + 6]
movsx ecx, ax
xor edx, edx
call fcn.10063083
cmp eax, 0x40000
jne 0x10070ad2
test edx, edx
jne 0x10070ad2
dec dword [0x100d5670]
push 0x100d4fb8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x100707ef
dec dword [0x100d5670]
push 0x100d4fb8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10070ae8
mov esi, dword [ebp - 0x20]
mov al, byte [ebx + 4]
mov byte [edi + 4], al
jmp 0x100707ef
mov al, byte [ebx + 0x27]
mov byte [edi + 0x27], al
test ecx, 0x40000
je 0x10070b11
mov al, byte [ebx + 0x25]
cmp al, 0x12
jbe 0x10070b0e
test byte [ebp + 0x10], 0x80
je 0x10070b11
mov byte [edi + 0x25], al
test ecx, 0x8000
je 0x10070b1f
mov al, byte [ebx + 0x26]
mov byte [edi + 0x26], al
mov eax, dword [edi]
xor ecx, ecx
test eax, 0x10000000
jne 0x10070b33
and eax, 0xd7ffffff
mov dword [edi], eax
jmp 0x10070b59
test eax, 0x20000000
jne 0x10070b59
and eax, 0xfffcffff
mov ecx, edi
mov dword [edi], eax
call fcn.1007129d
mov ecx, eax
test ecx, ecx
je 0x10070b59
mov dword [edi + 0x18], 0x1007f
mov byte [edi + 4], 0
mov esi, dword [ebp - 0x24]
test esi, 0x100
je 0x10070b73
mov al, byte [ebx + 0x2b]
and esi, 0xfffffeff
mov dword [ebp - 0x24], esi
mov byte [edi + 0x2b], al
mov edx, dword [ebp + 0x10]
test edx, 0x8000
jne 0x10070e4b
test dl, 8
jne 0x10070b95
mov eax, dword [edi]
and eax, 0x30000000
cmp eax, 0x10000000
jne 0x10070b99
test ecx, ecx
jne 0x10070bd1
mov cx, word [edi + 0x18]
call fcn.1005fa68
movzx ecx, byte [edi + 4]
cmp eax, ecx
je 0x10070bce
movzx eax, al
sub eax, 0xc
cmp eax, 3
jbe 0x10070bce
lea eax, [ecx - 0xc]
cmp eax, 3
jbe 0x10070bce
call fcn.1005fadf
mov edx, dword [ebp + 0x10]
test eax, eax
je 0x10070bd1
mov dword [edi + 0x18], eax
jmp 0x10070bd1
mov edx, dword [ebp + 0x10]
test edx, edx
je 0x10070dab
test dl, 4
je 0x10070beb
mov ax, word [ebx + 0x32]
mov word [edi + 0x32], ax
jmp 0x10070d27
test dl, 0x10
je 0x10070d27
movzx ecx, word [edi + 0x30]
movzx esi, word [ebx + 0x30]
cmp cx, si
je 0x10070d24
or eax, 0xffffffff
cmp si, ax
jne 0x10070c16
mov word [edi + 0x30], ax
jmp 0x10070d24
xor eax, eax
lea edx, [ebp - 0x18]
mov word [ebp - 0x18], ax
mov byte [ebp - 0x16], al
mov eax, 0xff676981
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
call fcn.1005f86c
lea edx, [ebp - 0x38]
mov ecx, esi
call fcn.1005f86c
test al, al
je 0x10070d21
mov dx, word [ebp - 0x38]
test dl, 1
je 0x10070c79
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x34]
and eax, 0xfffe
movzx ecx, ax
mov word [ebp - 0x18], ax
cmp esi, 0xff676981
je 0x10070c74
or ecx, 1
mov ax, cx
mov word [ebp - 0x18], ax
mov dword [ebp - 0x14], esi
jmp 0x10070c7d
mov ax, word [ebp - 0x18]
test dl, 2
je 0x10070ca9
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x30]
and eax, 0xfffd
movzx ecx, ax
mov word [ebp - 0x18], ax
cmp esi, 0xff676981
je 0x10070ca6
or ecx, 2
mov ax, cx
mov word [ebp - 0x18], ax
mov dword [ebp - 0x10], esi
test dl, 4
je 0x10070cd3
mov eax, dword [ebp - 0x18]
and eax, 0xfffb
cmp byte [ebp - 0x36], 0
movzx ecx, ax
mov word [ebp - 0x18], ax
je 0x10070ccd
or ecx, 4
mov ax, cx
mov word [ebp - 0x18], ax
mov cl, byte [ebp - 0x36]
mov byte [ebp - 0x16], cl
mov esi, 0xfff7
test dl, 8
je 0x10070d01
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x2c]
and eax, esi
movzx ecx, ax
mov word [ebp - 0x18], ax
cmp edx, 0xff676981
je 0x10070cfe
or ecx, 8
mov ax, cx
mov word [ebp - 0x18], ax
mov dword [ebp - 0xc], edx
test byte [ebp - 0x18], 4
jne 0x10070d15
and ax, si
mov dword [ebp - 0xc], 0xff676981
mov word [ebp - 0x18], ax
lea ecx, [ebp - 0x18]
call fcn.1005f72a
mov word [edi + 0x30], ax
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp - 0x24]
test edx, 0x2000
je 0x10070d37
mov ax, word [ebx + 0x28]
mov word [edi + 0x28], ax
test dl, dl
jns 0x10070d8e
cmp byte [edi + 0x2d], 0
je 0x10070d4b
test dl, 0x20
je 0x10070d4b
inc byte [edi + 0x2c]
jmp 0x10070d8e
mov cl, byte [ebx + 0x2c]
mov byte [edi + 0x2c], cl
mov word [edi + 0x2d], 0
mov al, byte [ebx + 0x3c]
mov byte [edi + 0x3c], al
test cl, cl
je 0x10070d6d
mov al, byte [ebx + 0x2d]
mov byte [edi + 0x2d], al
mov al, byte [ebx + 0x2e]
mov byte [edi + 0x2e], al
mov ecx, dword [edi]
mov eax, ecx
and eax, edx
test eax, 0x1000000
je 0x10070d8e
mov al, byte [ebx + 0x2f]
and ecx, 0xd7ffffff
mov byte [edi + 0x2f], al
mov al, byte [ebx + 0x2b]
mov byte [edi + 0x2b], al
mov dword [edi], ecx
test dl, 0x40
je 0x10070d99
mov al, byte [ebx + 0x2c]
add byte [edi + 0x2c], al
movzx eax, byte [edi + 0x2d]
sub eax, 0xa
cmp eax, 0x17
ja 0x10070dab
or dword [edi], 0x10000000
test esi, esi
je 0x10070e4b
mov ecx, esi
and ecx, 0x40000ff
mov eax, ecx
not eax
and word [edi + 0x34], ax
mov ax, word [ebx + 0x34]
and ax, cx
or word [edi + 0x34], ax
test esi, 0x20000000
je 0x10070ddc
mov al, byte [ebx + 0x38]
mov byte [edi + 0x38], al
test esi, esi
jns 0x10070de6
mov al, byte [ebx + 0x39]
mov byte [edi + 0x39], al
test esi, 0x40000000
je 0x10070df4
mov al, byte [ebx + 0x3a]
mov byte [edi + 0x3a], al
test esi, 0x10000000
je 0x10070e02
mov al, byte [ebx + 0x3b]
mov byte [edi + 0x3b], al
test esi, 0x8000000
je 0x10070e12
mov ax, word [ebx + 0x36]
mov word [edi + 0x36], ax
test esi, 0x4000000
je 0x10070e3d
mov cl, byte [ebx + 0x3e]
mov eax, dword [edi]
and eax, 0xfffcffff
mov byte [edi + 0x3e], cl
mov dword [edi], eax
test cl, cl
jle 0x10070e34
or eax, 0x20000
jmp 0x10070e3b
jns 0x10070e3d
or eax, 0x10000
mov dword [edi], eax
test esi, 0x2000000
je 0x10070e4b
mov al, byte [ebx + 0x3d]
mov byte [edi + 0x3d], al
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100c6890
mov esp, ebp
pop ebp
ret 0x10