Function at 0x649c2090
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [esp], eax
call fcn.649d1820
cmp dword [0x649d53ec], 0
mov dword [ebp - 0x20], eax
je 0x649c20ee
mov dword [esp + 4], 0x649d4368
mov dword [esp], 1
call dword [0x649d5454]
mov dword [ebp - 0x1c], eax
push edx
push edx
test eax, eax
jne 0x649c20f5
mov eax, dword [0x649d57fe]
mov eax, dword [eax + 0x34]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.649cdd98
jmp 0x649c2290
mov dword [ebp - 0x1c], 0
xor esi, esi
mov eax, dword [ebx + 4]
cmp word [eax + 2], si
jbe 0x649c21c3
movzx edi, si
mov edx, dword [ebx]
imul eax, edi, 0x28
lea eax, [edx + eax + 0x14]
cmp dword [eax + 0x10], 0
mov dword [ebx + 8], eax
jne 0x649c211c
inc esi
jmp 0x649c20f7
mov edx, dword [eax + 0x24]
mov eax, 1
mov ecx, edx
and ecx, 0xe0000000
je 0x649c2182
mov eax, 0x10
cmp ecx, 0x20000000
je 0x649c2182
mov eax, 2
cmp ecx, 0x40000000
je 0x649c2182
mov eax, 0x20
cmp ecx, 0x60000000
je 0x649c2182
mov eax, 8
cmp ecx, 0x80000000
je 0x649c2182
mov eax, pe_nt_image_headers32
cmp ecx, 0xa0000000
je 0x649c2182
cmp ecx, 0xc0000000
mov eax, 0x40
mov ecx, 4
cmove eax, ecx
bt edx, 0x1a
jae 0x649c218b
or ah, 2
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x10], eax
lea edx, [edx + edi*8]
mov eax, dword [edx + 4]
mov dword [esp + 0xc], eax
mov eax, dword [edx]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.649cd64c
test eax, eax
jne 0x649c2119
jmp 0x649c2290
mov eax, dword [ebx + 0x28]
test eax, eax
jne 0x649c21ce
xor edi, edi
jmp 0x649c21ff
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.649cd64c
test eax, eax
jne 0x649c21ca
jmp 0x649c2290
inc edi
mov eax, dword [ebx + 4]
mov edx, dword [eax + 0xc]
cmp edx, edi
jbe 0x649c2254
imul esi, edi, 0x12
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi]
cmp dword [eax], 0
jne 0x649c2221
imul edx, edx, 0x12
add edx, dword [eax + 4]
mov eax, edx
add eax, ecx
cmp byte [eax], 0x5f
jne 0x649c2227
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
call fcn.649cd314
test eax, eax
jne 0x649c21fe
add esi, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x20]
movzx eax, word [esi + 0xc]
mov edx, dword [esi + 8]
add edx, dword [ecx + eax*8 - 8]
jne 0x649c2294
mov eax, dword [ebp + 0x18]
mov dword [esp], 0x14
mov dword [esp + 4], eax
call fcn.649cdb4c
mov dword [esp + 4], 2
mov dword [esp], eax
mov ebx, eax
call fcn.649cd8f4
mov eax, dword [ebp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.649cda10
mov dword [esp], ebx
call fcn.649cdbc4
xor eax, eax
jmp 0x649c22f6
mov eax, dword [ebx + 4]
mov di, word [eax + 2]
xor eax, eax
jmp 0x649c22a7
mov esi, dword [ecx + eax*8]
cmp esi, edx
jbe 0x649c22ae
inc eax
cmp di, ax
ja 0x649c229f
jmp 0x649c2290
add esi, dword [ecx + eax*8 + 4]
cmp edx, esi
jae 0x649c22a6
imul eax, eax, 0x28
mov ecx, dword [ebx]
lea eax, [ecx + eax + 0x14]
mov dword [ebx + 8], eax
test byte [eax + 0x27], 0x20
je 0x649c2290
mov eax, dword [ebp + 0x14]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
call fcn.649c2300
cmp dword [ebp - 0x1c], 0
je 0x649c22f1
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [0x649d5458]
push eax
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret