Function at 0x5aa130
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, dword [ebx + 0x48]
mov dword [ebp - 4], 0
mov edi, dword [esi + 8]
movsx eax, byte [edi]
xor edx, edx
lea eax, [eax + eax*2]
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], eax
mov cl, byte [eax + 0x5dc97a]
mov byte [esi + 0x48], cl
movsx ecx, byte [eax + 0x5dc979]
mov dword [ebp + 8], ecx
movsx ecx, byte [eax + 0x5dc978]
dec ecx
cmp ecx, 9
ja case.default.0x5aa17b
jmp dword [ecx*4 + 0x5aa7bc]
mov dword [esi + 0xc], edx
mov dword [esi + 0x38], edx
mov word [esi + 0x40], dx
mov word [esi + 0x42], dx
mov ecx, dword [edi]
test ch, 0xf
je 0x5aa19e
mov dword [ebp - 8], 1
cmp dword [ebp - 8], 1
jne case.0x5aa1e5.21
mov ecx, dword [esi + 0x4c]
test ecx, 0x10000000
jne 0x5aa1c6
mov eax, ecx
or eax, 0x10000000
test eax, 0x20000000
mov dword [esi + 0x4c], eax
jne case.0x5aa1e5.19
jmp case.0x5aa1e5.21
test ecx, 0x20000000
je case.0x5aa1e5.21
movsx eax, byte [eax + 0x5dc97a]
add eax, 0xffffffed
cmp eax, 0x20
ja case.0x5aa1e5.21
xor ecx, ecx
mov cl, byte [eax + 0x5aa7f0]
jmp dword [ecx*4 + 0x5aa7e4]
mov eax, dword [edi + 4]
mov dword [esi + 0xc], eax
mov ecx, dword [edi + 8]
xor eax, eax
mov dword [esi + 0x38], ecx
mov al, byte [edi + 3]
xor ecx, ecx
mov word [esi + 0x40], ax
mov cl, byte [edi + 2]
mov word [esi + 0x42], cx
jmp 0x5aa2a3
mov dword [esi + 0xc], edx
mov dword [esi + 0x38], edx
mov word [esi + 0x40], dx
mov word [esi + 0x42], dx
jmp 0x5aa2a3
xor eax, eax
mov ax, word [edi + 2]
mov dword [esi + 0x38], edx
mov dword [esi + 0xc], eax
mov word [esi + 0x40], dx
mov word [esi + 0x42], dx
jmp 0x5aa2a3
xor ecx, ecx
mov cx, word [edi + 2]
mov dword [esi + 0xc], edx
mov dword [esi + 0x38], ecx
mov word [esi + 0x40], dx
mov word [esi + 0x42], dx
jmp 0x5aa2a3
xor eax, eax
xor ecx, ecx
mov al, byte [edi + 1]
mov dword [esi + 0xc], eax
mov cx, word [edi + 2]
mov dword [esi + 0x38], ecx
mov word [esi + 0x40], dx
mov word [esi + 0x42], dx
jmp 0x5aa2a3
xor eax, eax
xor ecx, ecx
mov al, byte [edi + 1]
mov dword [esi + 0xc], eax
mov cl, byte [edi + 2]
mov dword [esi + 0x38], ecx
movzx ax, byte [edi + 3]
mov word [esi + 0x40], ax
mov word [esi + 0x42], dx
jmp 0x5aa2a3
push 0x4fe
push 0x63679c
push 2
push 0xc0000008
call fcn.005a41d0
add esp, 0x10
xor edx, edx
cmp dword [ebp - 8], edx
je 0x5aa411
mov eax, dword [edi]
mov dword [ebp + 8], 0x1c
test ah, 1
je 0x5aa327
xor ecx, ecx
xor edx, edx
mov cl, byte [edi + 0xf]
mov dl, byte [edi + 0xe]
xor eax, eax
push ecx
mov ax, word [edi + 0xc]
mov ecx, dword [ebx + 0x58]
push edx
push eax
push ecx
call fcn.005aa8c0
mov edx, dword [ebp - 0xc]
mov dword [esi + 0xc], eax
add esp, 0x10
mov cl, byte [edx + 0x5dc97a]
cmp cl, 0xb
je 0x5aa30f
cmp cl, 0xd
je 0x5aa30f
cmp cl, 0xe
je 0x5aa30f
cmp eax, 1
jl 0x5aa300
cmp eax, 0x7fffffff
jle 0x5aa327
test dword [esi + 0x4c], 0x40000000
je 0x5aa459
jmp 0x5aa327
test eax, eax
jl 0x5aa31a
cmp eax, 0x7fff
jle 0x5aa327
test dword [esi + 0x4c], 0x40000000
je 0x5aa459
mov eax, dword [edi]
test ah, 2
je 0x5aa391
xor eax, eax
xor ecx, ecx
mov al, byte [edi + 0x13]
mov cl, byte [edi + 0x12]
xor edx, edx
push eax
mov dx, word [edi + 0x10]
mov eax, dword [ebx + 0x58]
push ecx
push edx
push eax
call fcn.005aa8c0
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x38], eax
add esp, 0x10
cmp byte [ecx + 0x5dc97a], 0xa
jne 0x5aa379
mov al, byte [esi + 0x38]
cmp al, 0x80
mov byte [esi + 0x44], al
jl 0x5aa36a
cmp al, 0x7f
jle 0x5aa391
test dword [esi + 0x4c], 0x40000000
je 0x5aa459
jmp 0x5aa391
test eax, eax
jl 0x5aa384
cmp eax, 0x7fff
jle 0x5aa391
test dword [esi + 0x4c], 0x40000000
je 0x5aa459
mov eax, dword [edi]
test ah, 4
je 0x5aa3d3
xor edx, edx
xor eax, eax
mov dl, byte [edi + 0x17]
mov al, byte [edi + 0x16]
xor ecx, ecx
push edx
mov cx, word [edi + 0x14]
mov edx, dword [ebx + 0x58]
push eax
push ecx
push edx
call fcn.005aa8c0
add esp, 0x10
mov word [esi + 0x40], ax
test ax, ax
jl 0x5aa3c6
cmp ax, 0x7fff
jle 0x5aa3d3
test dword [esi + 0x4c], 0x40000000
je 0x5aa459
mov eax, dword [edi]
test ah, 8
je 0x5aa411
xor eax, eax
xor ecx, ecx
mov al, byte [edi + 0x1b]
mov cl, byte [edi + 0x1a]
xor edx, edx
push eax
mov dx, word [edi + 0x18]
mov eax, dword [ebx + 0x58]
push ecx
push edx
push eax
call fcn.005aa8c0
add esp, 0x10
mov word [esi + 0x42], ax
test ax, ax
jl 0x5aa408
cmp ax, 0xff
jle 0x5aa411
test dword [esi + 0x4c], 0x40000000
je 0x5aa459
mov ecx, dword [ebp - 0xc]
mov al, byte [ecx + 0x5dc97a]
movsx ecx, al
cmp ecx, 0x33
ja case.0x5aa42a.0
xor edx, edx
mov dl, byte [ecx + 0x5aa888]
jmp dword [edx*4 + 0x5aa814]
or dword [esi + 0x4c], 0x200000
mov dword [ebp - 4], 1
mov edx, dword [ebp + 8]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 4]
add ecx, edx
test eax, eax
mov dword [esi + 8], ecx
mov edi, ecx
je 0x5aa149
jmp 0x5aa48d
mov eax, 0xc0000044
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push 0xc0000042
push 0xc0000042
push 1
call fcn.005a4200
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xc000003e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
test eax, eax
jne case.0x5aa1e5.19
and dword [esi + 0x4c], 0xdfffffff
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x4c]
or eax, 0x200000
mov dword [esi + 0x4c], eax
mov eax, 1
mov word [esi + 0x40], ax
mov dword [ebp - 4], eax
jmp 0x5aa43f
mov ecx, dword [esi + 0x38]
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
and eax, 3
xor eax, edx
sub eax, edx
je 0x5aa4d9
mov edx, 4
sub edx, eax
mov eax, edx
add eax, ecx
mov ecx, dword [ebp + 8]
add ecx, eax
add edi, 4
mov dword [ebp + 8], ecx
mov dword [esi + 0x3c], edi
jmp case.0x5aa42a.15
mov eax, dword [esi + 0x4c]
mov edx, dword [ebp + 8]
and eax, 0xffdfffff
mov word [esi + 0x46], 0
mov dword [esi + 0x4c], eax
mov ecx, eax
mov eax, dword [esi + 8]
mov dword [esi + 4], edi
mov eax, dword [edx + eax]
and eax, 0xff
cmp byte [eax + eax*2 + 0x5dc97a], 2
jne 0x5aa43f
or ecx, 0x80000000
mov dword [esi + 0x4c], ecx
jmp 0x5aa43f
movsx eax, word [esi + 0x46]
mov ecx, dword [esi + 4]
mov byte [esi + 0x45], 0
add eax, ecx
mov dword [ebp + 8], 0
mov dword [esi + 8], eax
jmp case.0x5aa42a.15
mov dl, byte [esi + 0x45]
sub di, word [esi + 4]
inc dl
mov al, dl
mov byte [esi + 0x45], dl
cmp al, 1
jne 0x5aa560
mov word [esi + 0x46], di
mov ecx, dword [ebp + 8]
movsx edx, al
add edi, ecx
mov word [esi + edx*2 + 0x26], di
mov cx, word [esi + 0xc]
movsx eax, byte [esi + 0x45]
mov word [esi + eax*2 + 0x14], cx
jmp 0x5aa43f
mov al, byte [esi + 0x45]
movsx edx, al
lea ecx, [esi + edx*2 + 0x14]
mov dx, word [esi + edx*2 + 0x14]
cmp dx, 1
jne 0x5aa59e
dec al
mov byte [esi + 0x45], al
jmp 0x5aa43f
dec edx
mov dword [ebp + 8], 0
mov word [ecx], dx
xor ecx, ecx
movsx eax, byte [esi + 0x45]
mov cx, word [esi + eax*2 + 0x26]
mov eax, ecx
mov ecx, dword [esi + 4]
add eax, ecx
mov dword [esi + 8], eax
jmp 0x5aa43f
mov edx, dword [esi + 0x4c]
and edx, 0xfffffffd
or edx, 1
mov dword [esi + 0x4c], edx
jmp 0x5aa43f
mov eax, dword [esi + 0x4c]
and al, 0xfe
or al, 2
mov dword [esi + 0x4c], eax
jmp 0x5aa43f
mov ecx, dword [esi + 0x4c]
and ecx, 0xffffffe7
or ecx, 4
mov dword [esi + 0x4c], ecx
jmp 0x5aa43f
mov edx, dword [esi + 0x4c]
and edx, 0xffffffeb
or edx, 8
mov dword [esi + 0x4c], edx
jmp 0x5aa43f
mov eax, dword [esi + 0x4c]
and al, 0xf3
or al, 0x10
mov dword [esi + 0x4c], eax
jmp 0x5aa43f
mov al, byte [esi + 0x38]
cmp al, 0x80
mov byte [esi + 0x44], al
jl case.0x5aa42a.0
cmp al, 0x7f
jg case.0x5aa42a.0
jmp 0x5aa43f
cmp al, 0xb
jne 0x5aa638
mov edi, dword [esi + 0xc]
jmp 0x5aa63b
mov edi, dword [esi + 0x38]
mov eax, dword [ebx + 0x11c]
test ah, 2
jne 0x5aa6a8
mov ecx, dword [ebx + 0x2c]
mov edx, dword [ebx + 0x34]
add ecx, edi
cmp ecx, edx
jb 0x5aa6a0
mov eax, dword [ebx + 0xb8]
test eax, eax
jl 0x5aa6a0
mov al, byte [ebx + 0x113]
cmp al, 2
je 0x5aa66a
cmp al, 0x26
jne 0x5aa6a0
cmp byte [ebx + 0x10c], 1
jne 0x5aa677
cmp ecx, edx
je 0x5aa6a0
mov eax, dword [esi + 0x38]
cmp eax, 0x200
jg 0x5aa686
mov eax, 0x200
push eax
push ebx
call fcn.005aa940
add esp, 8
test eax, eax
jne 0x5aa465
add dword [ebx + 0x2c], edi
jmp 0x5aa43f
mov dword [ebx + 0x2c], ecx
jmp 0x5aa43f
mov eax, dword [ebx + 0xc0]
test eax, eax
jne 0x5aa6be
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x34]
add edi, eax
mov eax, edi
jmp 0x5aa6f5
add edi, eax
mov dword [ebx + 0xc0], edi
jmp 0x5aa43f
mov edx, dword [esi + 0x38]
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x11c]
test ch, 2
lea eax, [edx + eax - 1]
jne 0x5aa6e8
mov dword [ebx + 0x2c], eax
jmp 0x5aa43f
mov ecx, dword [ebx + 0xc0]
test ecx, ecx
mov ecx, dword [ebx + 0x34]
jne 0x5aa711
cmp eax, ecx
ja 0x5aa701
mov dword [ebx + 0x2c], eax
jmp 0x5aa43f
sub eax, ecx
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0xc0], eax
jmp 0x5aa43f
cmp eax, ecx
jbe 0x5aa722
sub eax, ecx
mov dword [ebx + 0xc0], eax
jmp 0x5aa43f
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0xc0], 0
jmp 0x5aa43f
mov eax, dword [ebx + 0x11c]
test ah, 2
jne 0x5aa75f
mov ecx, dword [esi + 0x38]
mov edi, dword [ebx + 0x2c]
mov eax, dword [ebx + 0x38]
sub edi, ecx
mov ecx, edi
mov dword [ebx + 0x2c], edi
cmp ecx, eax
jae 0x5aa43f
mov dword [ebx + 0x2c], eax
jmp 0x5aa43f
mov eax, dword [ebx + 0xc0]
mov edx, dword [esi + 0x38]
test eax, eax
jne 0x5aa789
mov edi, dword [ebx + 0x2c]
mov eax, dword [ebx + 0x38]
sub edi, edx
mov ecx, edi
mov dword [ebx + 0x2c], edi
cmp ecx, eax
jae 0x5aa43f
mov dword [ebx + 0x2c], eax
jmp 0x5aa43f
sub eax, edx
test eax, eax
jle 0x5aa79a
mov dword [ebx + 0xc0], eax
jmp 0x5aa43f
mov ecx, dword [ebx + 0x34]
add eax, ecx
mov ecx, dword [ebx + 0x38]
cmp eax, ecx
mov dword [ebx + 0x2c], eax
jae 0x5aa7ac
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0xc0], 0
jmp 0x5aa43f