Function at 0x4ad030
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, ecx
mov dword [esp + 0x10], 0
push ebx
push esi
mov esi, edx
mov dword [esp + 0xc], eax
mov ebx, dword [eax]
xor ecx, ecx
mov edx, dword [ebp + 0x14]
mov eax, 0xa2
push edi
xor edi, edi
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0x38], eax
mov dword [edx + 0x1c], 0xffffffff
test esi, esi
je 0x4ad0d6
test byte [ecx + 0x18], 6
je 0x4ad098
mov dword [esp + 0x28], edi
jmp 0x4ad0d6
xor edi, edi
cmp dword [ebx + 0x14], edi
jle 0x4ad0d4
mov ebx, dword [ebx + 0x10]
mov edx, dword [ebx]
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad17e
test ecx, ecx
jne 0x4ad190
mov ecx, dword [esp + 0x2c]
add edi, edi
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + edi*8 + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
xor edi, edi
mov esi, dword [ebp + 8]
nop dword [eax]
mov eax, dword [ecx + 4]
mov dword [esp + 0x48], eax
test eax, eax
je 0x4ad336
xor ecx, ecx
lea esi, [eax + 8]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], esi
cmp dword [eax], ecx
jle 0x4ad30f
mov eax, dword [esi + 0x14]
mov ebx, dword [esi + 0x10]
mov dword [esp + 0x34], ebx
test eax, eax
je 0x4ad1dd
test dword [eax + 8], 0x800
je 0x4ad1dd
mov ebx, dword [eax]
xor esi, esi
mov dword [esp + 0x44], 0
cmp dword [ebx], esi
jle 0x4ad1c8
lea edi, [ebx + 0xc]
nop word [eax + eax]
push dword [esp + 0x28]
mov edx, dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, dword [edi]
call fcn.004acf60
add esp, 8
test eax, eax
je 0x4ad1b0
mov eax, dword [esp + 0x14]
inc dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x18], 2
mov word [eax + 0x20], si
mov eax, 1
mov dword [esp + 0x44], eax
jmp 0x4ad1b4
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad196
inc edx
jmp 0x4ad0a6
mov eax, dword [esp + 0x2c]
inc edi
add ebx, 0x10
cmp edi, dword [eax + 0x14]
jge 0x4ad0ce
mov esi, dword [esp + 0x28]
jmp 0x4ad0a2
mov eax, dword [esp + 0x44]
inc esi
add edi, 0x18
cmp esi, dword [ebx]
jl 0x4ad140
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x4ad2ec
mov eax, dword [ebp + 8]
mov esi, dword [esp + 0x14]
test eax, eax
je 0x4ad2f0
mov ebx, dword [esp + 0x34]
jmp 0x4ad1e0
mov eax, dword [ebp + 8]
cmp dword [esp + 0x28], 0
je 0x4ad1f4
mov edx, dword [esp + 0x30]
cmp dword [ebx + 0x48], edx
jne 0x4ad2f0
test eax, eax
je 0x4ad263
mov edi, dword [esi + 0xc]
mov edx, edi
test edi, edi
jne 0x4ad203
mov edx, dword [ebx]
mov esi, eax
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad244
test ecx, ecx
jne 0x4ad25a
mov eax, dword [esp + 0x10]
cmp byte [eax + 0xc8], 2
jb 0x4ad263
test edi, edi
je 0x4ad263
mov eax, dword [eax + 0x110]
test eax, eax
je 0x4ad263
mov ecx, dword [ebp + 0x14]
add ecx, 0x2c
cmp dword [eax], ecx
je 0x4ad25d
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4ad237
jmp 0x4ad263
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad2e8
inc edx
jmp 0x4ad207
mov dword [eax], 0
mov ecx, dword [esp + 0x18]
mov eax, ecx
inc ecx
mov dword [esp + 0x18], ecx
test eax, eax
jne 0x4ad27a
mov edi, dword [esp + 0x14]
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x34]
xor edi, edi
mov ebx, dword [ebx + 4]
movsx eax, word [eax + 0x2a]
test eax, eax
jle 0x4ad2e8
nop dword [eax + eax]
mov esi, dword [ebp + 0xc]
mov edx, dword [ebx]
sub esi, edx
movzx eax, byte [edx]
movzx ecx, byte [esi + edx]
cmp eax, ecx
jne 0x4ad3a2
test eax, eax
jne 0x4ad3b8
mov esi, dword [esp + 0x1c]
cmp esi, 1
jne 0x4ad3be
mov eax, dword [esp + 0x14]
test byte [eax + 0x24], 4
jne 0x4ad2d8
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0x34]
call fcn.004acef0
test eax, eax
je 0x4ad3be
mov ecx, dword [esp + 0x34]
inc edi
add ebx, 0x10
movsx eax, word [ecx + 0x2a]
cmp edi, eax
jl 0x4ad290
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x48]
inc ecx
add esi, 0x48
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], esi
cmp ecx, dword [eax]
jl 0x4ad104
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4ad333
mov eax, dword [edi + 0x2c]
mov dword [edx + 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [edx + 0x2c], eax
test byte [edi + 0x24], 8
je 0x4ad32c
or dword [edx + 4], 0x100000
mov eax, dword [eax + 0x48]
mov dword [esp + 0x30], eax
mov esi, dword [ebp + 8]
cmp dword [esp + 0x28], 0
mov eax, dword [esp + 0x18]
jne 0x4ad674
test esi, esi
je 0x4ad674
test eax, eax
jne 0x4ad674
mov eax, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x24], ebx
cmp dword [eax + 0x78], ebx
je 0x4ad458
movzx edi, byte [eax + 0x90]
cmp edi, 0x7c
je 0x4ad420
mov edx, 0x7066d8
sub esi, edx
nop
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad405
test ecx, ecx
jne 0x4ad417
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x1c], 1
jmp 0x4ad44d
movzx ecx, byte [ecx + 0x6c6f10]
movzx eax, byte [eax + 0x6c6f10]
sub eax, ecx
jne 0x4ad2d8
inc edx
jmp 0x4ad297
mov eax, dword [esp + 0x14]
inc esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], esi
movsx eax, word [eax + 0x28]
cmp edi, eax
jne 0x4ad3ee
mov edx, dword [ebp + 0x14]
or eax, 0xffffffff
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
mov word [edx + 0x20], ax
jmp 0x4ad2f3
mov edx, dword [ebp + 0x14]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
movsx eax, di
mov word [edx + 0x20], ax
jmp 0x4ad2f3
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad41d
inc edx
jmp 0x4ad380
mov esi, dword [ebp + 8]
cmp edi, 0x7b
je 0x4ad458
mov edx, 0x7066ec
sub esi, edx
nop dword [eax]
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad4fe
test ecx, ecx
jne 0x4ad514
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x1c], ebx
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx + 0x78]
mov dword [esp + 0x24], ebx
mov eax, dword [ebp + 0x10]
test dword [eax + 0x18], 0x200
je 0x4ad4a0
mov edi, dword [eax + 8]
test edi, edi
je 0x4ad4a0
mov esi, dword [ebp + 8]
mov edx, 0x7066e0
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad51a
test ecx, ecx
jne 0x4ad530
mov eax, dword [edi + 0x14]
mov ebx, dword [eax + 0x18]
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x24], ebx
mov dword [eax + 0x1c], 2
test ebx, ebx
je 0x4ad67c
mov eax, dword [ebx + 0x48]
xor edi, edi
movsx ecx, word [ebx + 0x2a]
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x34], ecx
test ecx, ecx
jle 0x4ad567
mov ebx, dword [ebp + 0xc]
mov edx, dword [eax]
sub ebx, edx
movzx eax, byte [edx]
movzx esi, byte [ebx + edx]
cmp eax, esi
jne 0x4ad536
test eax, eax
jne 0x4ad548
mov ebx, dword [esp + 0x24]
mov esi, 0xffffffff
mov ecx, dword [esp + 0x34]
movsx eax, word [ebx + 0x28]
cmp edi, eax
cmove edi, esi
jmp 0x4ad56a
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad458
inc edx
jmp 0x4ad430
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad4a0
inc edx
jmp 0x4ad475
movzx ecx, byte [eax + 0x6c6f10]
movzx eax, byte [esi + 0x6c6f10]
sub ecx, eax
jne 0x4ad54b
inc edx
jmp 0x4ad4d7
mov eax, dword [esp + 0x44]
inc edi
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [esp + 0x44], eax
cmp edi, ecx
jl 0x4ad4d0
mov ebx, dword [esp + 0x24]
or esi, 0xffffffff
cmp edi, ecx
jl 0x4ad58d
mov ecx, dword [ebp + 0xc]
call fcn.004b1e10
mov ecx, dword [esp + 0x34]
test eax, eax
je 0x4ad585
test byte [ebx + 0x24], 0x40
cmove edi, esi
cmp edi, ecx
jge 0x4ad67c
mov esi, dword [ebp + 0x14]
inc dword [esp + 0x1c]
mov eax, dword [esi + 0x1c]
cmp eax, 2
jne 0x4ad5df
mov eax, dword [esp + 0x10]
mov ecx, dword [ebp + 0x10]
cmp byte [eax + 0xc8], 2
jb 0x4ad5c0
mov word [esi + 0x20], di
mov dword [esi + 0x2c], ebx
mov dword [esp + 0x38], 0xa2
jmp 0x4ad682
mov eax, dword [ecx + 8]
mov dword [esp + 0x38], 0xab
mov eax, dword [eax + 0x18]
add eax, edi
or dword [esi + 4], 0x400000
mov dword [esi + 0x1c], eax
jmp 0x4ad682
test edi, edi
jns 0x4ad5fb
mov byte [esi + 1], 0x44
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
mov dword [esp + 0x38], 0x4d
jmp 0x4ad67f
test eax, eax
jne 0x4ad646
cmp edi, 0x20
jl 0x4ad622
mov ecx, dword [esp + 0x10]
or eax, 0xffffffff
mov dword [esp + 0x38], 0x4d
or dword [ecx + 0x88], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4ad67f
mov ecx, edi
mov dword [esp + 0x38], 0x4d
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x10]
or dword [ecx + 0x88], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4ad67f
cmp edi, 0x20
jl 0x4ad650
or eax, 0xffffffff
jmp 0x4ad659
mov eax, 1
mov ecx, edi
shl eax, cl
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], 0x4d
or dword [ecx + 0x8c], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4ad67f
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
jmp 0x4ad68a
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jne 0x4ad6ca
cmp eax, 1
jne 0x4ad6ca
test edi, edi
je 0x4ad6ca
test byte [ecx + 0x18], 0x20
jne 0x4ad6ca
mov ecx, dword [ebp + 0xc]
call fcn.004b1e10
test eax, eax
je 0x4ad6ca
mov eax, dword [edi + 0x10]
test byte [eax + 0x24], 0x40
jne 0x4ad6ca
mov ebx, 1
mov byte [esi + 1], 0x44
or eax, 0xffffffff
mov dword [esp + 0x1c], ebx
mov word [esi + 0x20], ax
mov ecx, dword [ebp + 0x10]
test byte [ecx + 0x18], 0x80
je 0x4ad7b7
test ebx, ebx
jne 0x4ad7bb
mov esi, dword [ebp + 8]
test esi, esi
jne 0x4ad799
mov eax, dword [ecx + 8]
mov dword [esp + 0x34], eax
cmp dword [eax], ebx
jle 0x4ad7c9
mov ecx, dword [esp + 0x34]
add eax, 8
mov dword [esp + 0x44], eax
mov edi, dword [eax]
test edi, edi
je 0x4ad77f
mov esi, dword [ebp + 0xc]
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad762
test ecx, ecx
jne 0x4ad774
mov ecx, dword [ebp + 0x10]
lea eax, [ebx + ebx*2]
mov edx, dword [esp + 0x34]
mov ecx, dword [ecx + 0x18]
mov eax, dword [edx + eax*8 + 4]
test cl, 1
jne 0x4ad7cf
test byte [eax + 4], 0x10
je 0x4ad7cf
push edi
push 0x706718
push dword [esp + 0x18]
call fcn.0047b1c0
add esp, 0xc
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad777
inc edx
jmp 0x4ad711
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
inc ebx
add eax, 0x18
mov dword [esp + 0x44], eax
cmp ebx, dword [ecx]
jl 0x4ad704
mov ebx, dword [esp + 0x1c]
mov ecx, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
inc dword [esp + 0x3c]
mov dword [ebp + 0x10], ecx
test ecx, ecx
je 0x4ad880
mov edx, dword [ebp + 0x14]
mov edi, dword [esp + 0x20]
jmp 0x4ad0e0
test ebx, ebx
je 0x4ad796
cmp ebx, 1
jne 0x4ad9c0
jmp 0x4ada2d
mov ebx, dword [esp + 0x1c]
jmp 0x4ad799
test ecx, 0x4000
jne 0x4ad7eb
test dword [eax + 4], 0x8000
je 0x4ad7eb
push edi
push 0x7066f0
jmp 0x4ad74a
mov cl, byte [eax]
cmp cl, 0xab
jne 0x4ad7f5
mov cl, byte [eax + 0x26]
cmp cl, 0xac
jne 0x4ad7ff
mov eax, dword [eax + 0x14]
jmp 0x4ad809
cmp cl, 0x86
jne 0x4ad82d
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 1
je 0x4ad82d
push 0x706738
push dword [esp + 0x14]
call fcn.0047b1c0
add esp, 8
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x3c]
mov esi, dword [ebp + 0x14]
push ecx
push 0x716a58
push esi
push ebx
mov ebx, dword [esp + 0x20]
mov ecx, ebx
call fcn.004acd90
add esp, 0x10
cmp byte [ebx + 0xc8], 2
jb 0x4adab2
mov eax, dword [ebx + 0x110]
test eax, eax
je 0x4adab2
cmp dword [eax], esi
je 0x4ad875
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4ad865
jmp 0x4adab2
mov dword [eax], 0
jmp 0x4adab2
test esi, esi
jne 0x4ad9c3
mov esi, dword [ebp + 0x14]
mov ebx, dword [esi + 4]
test bl, 0x40
je 0x4ad8e6
mov edx, dword [esp + 0x2c]
cmp byte [edx + 0xa5], 0
jne 0x4ad948
mov eax, dword [esp + 0x40]
test dword [eax + 0x18], 0x10000
je 0x4ad93b
mov eax, dword [edx + 0x24]
mov ecx, dword [edx + 0x20]
xor edx, edx
mov dword [esp + 0x4c], eax
mov eax, ecx
and eax, 0x10000001
cmp eax, 1
jne 0x4ad8dc
test edx, edx
jne 0x4ad8dc
mov eax, ecx
and eax, 0x40000000
or eax, edx
jne 0x4ad948
and ecx, 0x20000000
or ecx, edx
jne 0x4ad948
test ebx, 0x4000000
jne 0x4ad9bc
mov edi, dword [esi + 8]
mov esi, 0x706c0c
mov edx, edi
sub esi, edi
nop
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad970
test ecx, ecx
jne 0x4ad982
mov ecx, dword [ebp + 0x14]
mov eax, 0x20000000
mov edx, 0x10000000
mov byte [ecx], 0xa5
cmp byte [edi + 4], 0
cmove eax, edx
or eax, ebx
mov dword [ecx + 4], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edx + 0x20]
and eax, 0x40000000
or eax, 0
je 0x4ad8e6
push dword [ebp + 0xc]
push 0x70675c
push 0x1c
call fcn.0047a540
add esp, 0xc
mov byte [esi], 0x71
mov dword [esi + 0x2c], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad988
inc edx
jmp 0x4ad900
mov esi, 0x706c04
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad9a7
test ecx, ecx
je 0x4ad913
inc edx
jmp 0x4ad991
movzx eax, byte [eax + 0x6c6f10]
movzx ecx, byte [ecx + 0x6c6f10]
sub ecx, eax
jne 0x4ad9bc
inc edx
jmp 0x4ad991
mov ebx, dword [esp + 0x1c]
mov esi, dword [ebp + 8]
push dword [ebp + 0xc]
test ebx, ebx
mov ecx, 0x706790
mov eax, 0x70674c
cmovne eax, ecx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x4ad9f3
push esi
push ecx
push eax
push 0x706780
push dword [esp + 0x24]
call fcn.0047b1c0
add esp, 0x18
jmp 0x4ada1e
test esi, esi
je 0x4ada0c
push esi
push eax
push 0x7067b0
push dword [esp + 0x20]
call fcn.0047b1c0
add esp, 0x14
jmp 0x4ada1e
push eax
push 0x7067a8
push dword [esp + 0x1c]
call fcn.0047b1c0
add esp, 0x10
mov eax, dword [esp + 0x10]
mov byte [eax + 0x11], 1
mov eax, dword [esp + 0x40]
inc dword [eax + 0x14]
mov esi, dword [ebp + 0x14]
movzx eax, word [esi + 0x20]
test ax, ax
js 0x4ada6a
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4ada6a
movsx edx, ax
mov eax, 0x3f
cmp edx, 0x40
cmovge edx, eax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [edi + 0x38], eax
or dword [edi + 0x3c], ecx
mov edx, dword [esi + 0xc]
mov edi, dword [esp + 0x2c]
test edx, edx
je 0x4ada7c
mov ecx, edi
call fcn.004b03b0
mov edx, dword [esi + 0x10]
mov dword [esi + 0xc], 0
test edx, edx
je 0x4ada91
mov ecx, edi
call fcn.004b03b0
mov eax, dword [esp + 0x38]
or dword [esi + 4], 0x800000
mov dword [esi + 0x10], 0
mov byte [esi], al
cmp ebx, 1
jne 0x4ad756
mov ebx, dword [esp + 0x10]
test dword [esi + 4], 0x400000
jne 0x4adad1
mov eax, dword [ebp + 0x10]
mov edx, esi
mov ecx, ebx
push dword [eax + 4]
push dword [esp + 0x34]
call fcn.004bcae0
add esp, 8
mov ecx, dword [esp + 0x40]
mov eax, dword [ebp + 0x10]
inc dword [ecx + 0x10]
cmp ecx, eax
je 0x4adaea
nop
mov ecx, dword [ecx + 0xc]
inc dword [ecx + 0x10]
cmp ecx, eax
jne 0x4adae0
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret