Function at 0x4ad2dc
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x612a0b
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x6b9a04]
xor eax, esp
mov dword [esp + 0x110], eax
push ebx
push esi
push edi
mov eax, dword [0x6b9a04]
xor eax, esp
push eax
lea eax, [esp + 0x128]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea edi, [eax + 0x58]
mov ebx, dword [edi + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
lea esi, [esp + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], edi
call fcn.005612ed
mov ebx, dword [edi + 0xc]
lea esi, [esp + 0x3c]
call fcn.005612ed
push dword [esp + 0x34]
lea eax, [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x48]
push dword [esp + 0x48]
push eax
push edi
call fcn.004b0e6d
mov esi, dword [esp + 0x2c]
xor ebx, ebx
push ebx
call fcn.004b072e
push 0xffffffffffffffff
add eax, 0x1c
push eax
lea ecx, [esi + 0x70]
push 0x20
push ecx
mov dword [esp + 0x48], ecx
call fcn.005c7908
add esp, 0x10
push ebx
call fcn.004b072e
mov eax, dword [eax]
call fcn.00544cca
call fcn.004b04db
push ebx
mov dword [esi + 0x90], eax
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], 1
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb0], ebx
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xb8], ebx
call dword [0x63478c]
mov edi, eax
push 0x58
push edi
call dword [0x63417c]
mov ecx, eax
mov eax, 0x5a0
cdq
idiv ecx
push edi
push ebx
mov dword [esi + 0xbc], eax
call dword [0x634788]
mov edi, 0x641040
push edi
lea ecx, [esi + 0xc0]
mov byte [esi + 0x54], 1
mov byte [esi + 0x55], 1
mov byte [esi + 0x56], 1
mov dword [esi + 0x50], ebx
call fcn.0040556d
lea ecx, [esi + 0xe4]
push edi
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe0], ebx
mov dword [esp + 0x40], ecx
call fcn.0040556d
mov dword [esi + 0x100], ebx
mov dword [esi + 0x104], ebx
mov dword [esi + 0x108], ebx
lea eax, [esi + 0x11c]
mov dword [esi + 0x10c], ebx
call fcn.00561280
mov dword [esi + 0x110], 1
mov dword [esp + 0x28], ebx
cmp dword [esp + 0x18], ebx
je 0x4ad8f9
mov eax, dword [esp + 0x18]
cmp byte [eax], bl
je 0x4ad8f9
cmp dword [esi + 0x100], ebx
jne 0x4ad4c0
cmp dword [esi + 0x108], ebx
jne 0x4ad4c0
cmp dword [esi + 0x104], ebx
jne 0x4ad4c0
push dword [esp + 0x24]
lea ecx, [esp + 0x1c]
mov ebx, esi
call fcn.004af93a
mov edi, dword [esp + 0x18]
xor ebx, ebx
jmp 0x4ad4cc
push 0x3c
push eax
call fcn.005c92e0
pop ecx
pop ecx
mov edi, eax
cmp edi, ebx
je 0x4ad880
mov al, byte [edi]
cmp al, bl
je 0x4ad880
mov dword [esp + 0x20], edi
cmp al, 0x3c
jne 0x4ad87c
push 3
inc edi
push 0x653acc
push edi
call fcn.005c8cfe
add esp, 0xc
test eax, eax
jne 0x4ad58a
push ebx
lea ecx, [esp + 0x84]
add edi, 3
mov dword [esp + 0x9c], 0xf
call fcn.004055a6
push edi
lea ecx, [esp + 0x84]
mov dword [esp + 0x134], ebx
call fcn.0040556d
push 0x653ad0
call fcn.005c3140
pop ecx
push eax
push 0x653ad0
lea eax, [esp + 0x88]
push eax
xor eax, eax
call fcn.00406e21
cmp eax, 0xffffffff
jne 0x4ad564
add edi, dword [esp + 0x94]
mov dword [esp + 0x18], edi
jmp 0x4ad56e
lea eax, [edi + eax + 3]
mov dword [esp + 0x18], eax
mov edi, eax
or dword [esp + 0x130], 0xffffffff
push ebx
push 1
lea ecx, [esp + 0x88]
call fcn.004055c2
jmp 0x4ad864
push 0x3e
push edi
call fcn.005c92e0
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x4ad8f9
sub eax, edi
push eax
push edi
lea ecx, [esp + 0x6c]
call fcn.004b0708
xor edi, edi
inc edi
mov dword [esp + 0x130], edi
cmp byte [esi], 0x3e
jne 0x4ad871
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xbc]
call fcn.004051ae
lea eax, [esp + 0x64]
mov byte [esp + 0x130], 2
inc esi
push eax
mov dword [esp + 0x1c], esi
call fcn.004b60fb
pop ecx
push ebx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], 0xf
call fcn.004055a6
mov byte [esp + 0x130], 3
xor esi, esi
cmp dword [esp + 0x78], ebx
jle 0x4ad664
push esi
lea ecx, [esp + 0x68]
call fcn.0040b85d
cmp byte [eax], 0x2f
je 0x4ad63f
push esi
lea ecx, [esp + 0x68]
call fcn.0040b85d
movsx eax, byte [eax]
push eax
call fcn.005c9456
pop ecx
test eax, eax
jne 0x4ad63f
push esi
lea ecx, [esp + 0x68]
call fcn.0040b85d
cmp byte [eax], 0x21
jne 0x4ad664
push esi
lea ecx, [esp + 0x68]
call fcn.0040b85d
mov al, byte [eax]
mov byte [esp + 0x44], al
push dword [esp + 0x44]
lea ecx, [esp + 0x4c]
push edi
call fcn.004126aa
inc esi
cmp esi, dword [esp + 0x78]
jl 0x4ad609
push str.table
lea ecx, [esp + 0x4c]
call fcn.00404ae8
test eax, eax
jne 0x4ad680
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], eax
jmp 0x4ad696
push 0x653adc
lea ecx, [esp + 0x4c]
call fcn.00404ae8
test eax, eax
jne 0x4ad696
mov dword [esp + 0x28], ebx
cmp dword [esp + 0xd0], 0x10
mov eax, dword [esp + 0xbc]
jae 0x4ad6ae
lea eax, [esp + 0xbc]
mov ecx, dword [esp + 0x5c]
lea esi, [eax + ecx]
movsx eax, byte [esi]
push eax
mov dword [esp + 0x24], esi
call fcn.005c5f4e
pop ecx
test eax, eax
je 0x4ad6da
inc esi
movsx eax, byte [esi]
push eax
call fcn.005c5f4e
pop ecx
test eax, eax
jne 0x4ad6c7
mov dword [esp + 0x20], esi
push esi
lea ecx, [esp + 0xa0]
call fcn.0040518c
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x134], 4
call fcn.004b60fb
mov esi, dword [esp + 0x3c]
push 0x12
pop ecx
lea edi, [esp + 0xd8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x40]
mov dword [esp], 0x641040
call fcn.0040556d
mov esi, dword [esp + 0x2c]
mov al, byte [esi + 0x54]
mov byte [esp + 0x17], al
cmp al, bl
jne 0x4ad72e
mov byte [esi + 0x55], bl
cmp dword [esp + 0x5c], ebx
je 0x4ad7d8
push ebx
lea ecx, [esp + 0x4c]
call fcn.0040b85d
cmp byte [eax], 0x2f
je 0x4ad7d8
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x4c], esp
push dword [esp + 0x3c]
call fcn.0040518c
push dword [esp + 0x44]
lea eax, [esp + 0xf4]
push dword [esp + 0x44]
mov byte [esp + 0x154], 5
cmp dword [esp + 0xd8], 0x10
push eax
mov eax, dword [esp + 0xc8]
jae 0x4ad78d
lea eax, [esp + 0xc8]
push eax
movzx eax, byte [esp + 0x43]
push eax
sub esp, 0x1c
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x6c], esp
push eax
call fcn.004051ae
mov ecx, esi
mov byte [esp + 0x17c], 4
call fcn.004addc1
push eax
sub esp, 0x1c
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004051ae
mov ebx, esi
call fcn.004adad4
xor ebx, ebx
jmp 0x4ad81f
sub esp, 0x1c
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004051ae
mov ecx, esi
call fcn.004adb46
push eax
push dword [esp + 0x28]
lea eax, [esp + 0xdc]
push eax
movzx eax, byte [esp + 0x23]
push eax
sub esp, 0x1c
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.004051ae
mov ecx, esi
call fcn.004aee9d
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [esp + 0xa4]
call fcn.004055c2
push ebx
push esi
lea ecx, [esp + 0x50]
call fcn.004055c2
push ebx
push esi
lea ecx, [esp + 0xc0]
call fcn.004055c2
or dword [esp + 0x130], 0xffffffff
push ebx
push esi
lea ecx, [esp + 0x6c]
call fcn.004055c2
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x18]
cmp edi, ebx
jne 0x4ad485
jmp 0x4ad8f9
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.004055c2
xor al, al
jmp 0x4ad8fb
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x48
cdq
pop ecx
idiv ecx
test eax, eax
je 0x4ad8f9
mov ebx, 0x653ac8
jmp 0x4ad89d
mov esi, edi
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x48
cdq
pop ecx
idiv ecx
dec eax
push eax
call fcn.004b088f
mov edi, dword [esp + 0x38]
push 0x12
mov esi, eax
pop ecx
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x1c]
mov ecx, dword [edi + 0x10]
mov eax, ecx
sub eax, dword [edi + 0xc]
push 0x48
cdq
pop esi
idiv esi
test eax, eax
je 0x4ad8d7
add ecx, 0xffffffb8
mov dword [edi + 0x10], ecx
push ebx
call fcn.005c3140
mov esi, dword [esp + 0x28]
pop ecx
push eax
push ebx
call fcn.00403f16
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
push 0x48
cdq
pop ecx
idiv ecx
test eax, eax
jne 0x4ad89b
mov al, 1
mov ecx, dword [esp + 0x128]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x110]
xor ecx, esp
call fcn.005c30b2
mov esp, ebp
pop ebp
ret 8