Function at 0x40be60
Capabilities:
Inspect section memory permissions

Disassembly:
push ecx
push ebx
push esi
push 0x531570
mov dword [esp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [esp + 0x10]
test eax, eax
je 0x40beb3
push str.GetProductInfo
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40beb3
movzx edx, word [esi + 0x12e]
lea ecx, [esp + 8]
push ecx
movzx ecx, word [esi + 0x12c]
push edx
mov edx, dword [esi + 0x9c]
push ecx
mov ecx, dword [esi + 0x98]
push edx
push ecx
call eax
mov eax, dword [esp + 8]
dec eax
mov edx, 0x80
lea ecx, [edx - 0x7f]
lea ebx, [edx - 0x40]
cmp eax, 0x81
ja case.0x40bece.51
jmp dword [eax*4 + 0x40c674]
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x1000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x10000000
or dword [esi + 0x134], 0x8800
jmp case.0x40bece.51
or dword [esi + 0x130], 0x10000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x1800000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x1000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x2800000
or dword [esi + 0x134], 0x8000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x2000000
or dword [esi + 0x134], 0x8000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x8800000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x8000000
jmp case.0x40bece.51
or dword [esi + 0x130], 2
or dword [esi + 0x134], 0x4000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800002
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800002
or dword [esi + 0x134], 0x4000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x400000
jmp case.0x40bece.51
or dword [esi + 0x130], 0xc00000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x24000020
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20000020
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000020
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000020
or dword [esi + 0x134], 0x4000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x24000002
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20000002
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000002
jmp case.0x40bece.51
mov dword [esi + 0xa8], 5
or dword [esi + 0x130], 2
jmp case.0x40bece.51
or dword [esi + 0x130], 0x24000000
or dword [esi + 0x134], 0x20
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20000000
or dword [esi + 0x134], 0x20
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000000
or dword [esi + 0x134], 0x20
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000000
or dword [esi + 0x134], 0x4020
jmp case.0x40bece.51
or dword [esi + 0x134], 0x400
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20000080
jmp case.0x40bece.51
or dword [esi + 0x130], edx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x10000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x40000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80000000
jmp case.0x40bece.51
or dword [esi + 0x134], ecx
jmp case.0x40bece.51
or dword [esi + 0x134], 2
jmp case.0x40bece.51
or dword [esi + 0x134], 2
or dword [esi + 0x130], 0x4000000
jmp case.0x40bece.51
or dword [esi + 0x130], ecx
jmp case.0x40bece.51
or dword [esi + 0x130], ecx
or dword [esi + 0x134], 0x8004
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20000001
or dword [esi + 0x134], 0x8004
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20080002
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80002
jmp case.0x40bece.51
or dword [esi + 0x134], 8
or dword [esi + 0x130], 0x20080000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 8
jmp case.0x40bece.51
or dword [esi + 0x134], 0x20
or dword [esi + 0x130], 0x20080000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20080000
or dword [esi + 0x134], 0x4020
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x20
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20080000
or dword [esi + 0x134], 0x10
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x10
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x4010
jmp case.0x40bece.51
or dword [esi + 0x130], 2
or dword [esi + 0x134], ebx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x1000000
or dword [esi + 0x134], ebx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x2000000
or dword [esi + 0x134], 0x8040
jmp case.0x40bece.51
or dword [esi + 0x134], 0xc0
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], edx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000001
jmp case.0x40bece.51
or dword [esi + 0x134], 0x100
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x200
jmp case.0x40bece.51
or dword [esi + 0x134], 0x220
jmp case.0x40bece.51
or dword [esi + 0x134], 0x18200
jmp case.0x40bece.51
or dword [esi + 0x130], 0x20000100
or dword [esi + 0x134], 0x200
jmp case.0x40bece.51
or dword [esi + 0x130], 0x10000
or dword [esi + 0x134], ebx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x810000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x400000
or dword [esi + 0x134], ebx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x2000
jmp case.0x40bece.51
or dword [esi + 0x134], 0x2000
mov dword [esi + 0xa8], 9
jmp case.0x40bece.51
or dword [esi + 0x134], 0x20000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x40000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x2000000
jmp case.0x40bece.51
mov dword [esi + 0xa8], 9
or dword [esi + 0x134], 0x4000000
jmp case.0x40bece.51
or dword [esi + 0x134], 0x4080000
jmp case.0x40bece.51
or dword [esi + 0x134], 0x4100000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x4000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x4000
or dword [esi + 0x134], edx
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], edx
jmp case.0x40bece.51
or dword [esi + 0x134], 0x14000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x2004000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x2004040
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x4000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x4040
jmp case.0x40bece.51
or dword [esi + 0x134], 0x80000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x138], ecx
jmp case.0x40bece.51
or dword [esi + 0x134], 0x800000
jmp case.0x40bece.51
mov eax, 0x800000
or dword [esi + 0x130], eax
or dword [esi + 0x134], eax
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x8000080
jmp case.0x40bece.51
or dword [esi + 0x134], 0x900000
jmp case.0x40bece.51
or dword [esi + 0x134], 0x880000
jmp case.0x40bece.51
or dword [esi + 0x138], 8
jmp case.0x40bece.51
or dword [esi + 0x134], 0x2000000
or dword [esi + 0x138], 0x10
jmp case.0x40bece.51
or dword [esi + 0x138], 4
jmp case.0x40bece.51
or dword [esi + 0x138], 2
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x1000000
jmp case.0x40bece.51
or dword [esi + 0x134], 0x20000000
jmp case.0x40bece.51
or dword [esi + 0x138], 0x20
jmp case.0x40bece.51
or dword [esi + 0x130], 2
or dword [esi + 0x134], 0x40000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800002
or dword [esi + 0x134], 0x40000000
jmp case.0x40bece.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x40000080
jmp case.0x40bece.51
or dword [esi + 0x130], 2
jmp 0x40c611
or dword [esi + 0x130], 0x800002
or dword [esi + 0x134], 0x40004000
mov eax, dword [esi + 0xa4]
cmp eax, 4
jne 0x40c66d
cmp dword [esi + 0x98], 5
jne 0x40c640
cmp dword [esi + 0x9c], 0
jne 0x40c640
cmp dword [esi + 0x13c], ecx
je 0x40c667
cmp eax, 4
jne 0x40c66d
cmp dword [esi + 0x98], 5
jne 0x40c66d
cmp dword [esi + 0x9c], 0
je 0x40c66d
cmp dword [esi + 0x13c], ecx
jne 0x40c66d
test byte [esi + 0x130], bl
jne 0x40c66d
or dword [esi + 0x134], edx
pop esi
pop ebx
pop ecx
ret 4