Function at 0x44fda0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48c265
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x5a1014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x48], esi
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
push 0xffffffffffffffff
push edi
push 0x21
push 0x5a44b4
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
push 0x24
push 0x5a44b4
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 0x18
test eax, eax
je 0x44fe09
mov byte [eax], 0
mov eax, 0xa64e
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], eax
cmp word [esi + 0x40], ax
je 0x4aab8c
movzx edi, word [esi + 0x40]
and ebx, 0xfe0f6ff7
test ebx, 0x20000
jne 0x4aac29
push 0x401bec
push 0x5a44b4
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
je 0x4500f1
cmp byte [0x5a4efa], 0
jne 0x4aac34
test ebx, 0x1e0
je 0x450134
mov edx, dword [0x5a44b4]
cmp ebx, 0xc0000040
je 0x45019a
test ebx, 0xe0000000
je 0x45013c
mov eax, edx
mov byte [ebp - 0x41], 0
lea ecx, [edx - 0x1010101]
mov byte [ebp - 0x2d], 0
not eax
xor edi, edi
and ecx, eax
test ecx, 0x80808080
jne 0x450440
mov ecx, edx
mov byte [ebp - 0x2d], 1
mov eax, ecx
xor eax, 0x3d0000
shr eax, 0x10
xor eax, ecx
lea ecx, [eax + eax*8]
mov eax, ecx
shr eax, 4
xor eax, ecx
imul eax, eax, 0x27d4eb2d
mov ecx, eax
shr ecx, 0xf
xor eax, ecx
and eax, 0x7f
add eax, 0x36
lea eax, [eax + eax*2]
mov edx, dword [esi + eax*4]
lea eax, [esi + eax*4]
mov dword [ebp - 0x34], eax
test edx, edx
je 0x450361
mov esi, dword [0x5a44b4]
mov al, byte [ebp - 0x2d]
mov ecx, 0x5a44b4
test al, al
je 0x44ff0d
cmp dword [edx], esi
jne 0x45033f
add edx, 4
mov ecx, 0x5a44b8
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4aace6
sub edx, ecx
lea esp, [esp]
test al, al
je 0x44ff32
mov al, byte [ecx + 1]
inc ecx
cmp al, byte [ecx + edx]
je 0x44ff20
jmp 0x4aace6
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 0x2c]
cmp ebx, edx
jne 0x4aacba
mov edi, ecx
cmp byte [ebp - 0x41], 0
jne 0x4aacee
test edi, edi
je 0x4503df
mov ebx, dword [ebp - 0x40]
test edi, edi
je 0x4aad3f
mov ecx, dword [edi + 8]
mov eax, edi
mov dword [ebp - 0x40], eax
test ecx, ecx
jne 0x4aad49
mov edx, dword [ebp - 0x3c]
mov ecx, eax
call fcn.00452cef
mov esi, eax
mov dword [ebp - 0x34], esi
test esi, esi
je 0x45025d
mov ecx, dword [ebp - 0x48]
mov edx, esi
mov dword [ebp - 0x3c], edx
mov edi, dword [ebp - 0x54]
mov eax, dword [edi + 0x6c]
cmp eax, dword [edi + 0xe4]
jae 0x450216
lea eax, [eax + eax*4]
shl eax, 4
add eax, dword [edi + 0xa0]
inc dword [edi + 0x6c]
mov dword [ebp - 0x38], eax
inc dword [esi + 0x18]
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x48]
mov dword [eax + 0x48], 0
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp + 0x18]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x38]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x38]
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x38]
mov dword [eax + 0x10], edi
mov ecx, dword [ebp - 0x38]
mov eax, dword [edi + 0xd4]
shr eax, 0xc
xor eax, dword [ecx + 0x44]
and eax, 8
xor dword [ecx + 0x44], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [edi + 0xd4]
shr eax, 0xa
xor eax, dword [ecx + 0x44]
and eax, 0x10
xor dword [ecx + 0x44], eax
mov ecx, 0x3a64
movzx eax, word [esi + 0x40]
cmp ax, cx
mov ecx, ebx
je 0x4aadb3
and ecx, 0x8000
cmp ax, word [ebp - 0x4c]
je 0x4aadd4
mov dword [ebp - 0x4c], 0xa641
cmp ax, word [ebp - 0x4c]
je 0x4aadd4
test bl, 8
jne 0x450056
and ebx, 0xf00000
cmp ebx, 0x100000
jne 0x4500df
mov ecx, 1
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x30]
test eax, eax
jne 0x450068
mov eax, dword [esi + 0x74]
cmp eax, ecx
jb 0x4aae6c
movzx eax, cx
cmp word [edx + 0x28], ax
jb 0x45024c
mov ebx, dword [ebp - 0x50]
cmp byte [ebx], 0x2e
jne 0x45008f
cmp byte [ebx + 1], 0x67
je 0x4501b6
cmp byte [0x5a2ef9], 0
jne 0x4500be
mov eax, dword [ebp - 0x38]
mov ecx, dword [edx + 0x14]
mov edx, dword [eax + 0x14]
test ecx, ecx
je 0x450255
mov dword [ecx + 0x1c], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], 0
mov dword [edx + 0x14], eax
cmp edi, dword [ebp + 0xc]
jne 0x45010e
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0047a40f
mov esp, ebp
pop ebp
ret 0x14
cmp ebx, 0x500000
jne 0x4500fc
mov ecx, 0x10
jmp 0x45005b
or ebx, 0x2000000
jmp 0x44fe4f
cmp ebx, 0x300000
jne 0x450150
mov ecx, 4
jmp 0x45005b
test byte [esi + 0x14c], 0x40
je 0x4500be
mov eax, dword [0x5a30a4]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x20]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0047d873
jmp 0x4500be
or ebx, 0x40
jmp 0x44fe68
test bl, 0x20
jne 0x4aac92
or ebx, 0xc0000000
jmp 0x44fe86
cmp ebx, 0x900000
ja 0x4aae08
je 0x4aadfe
cmp ebx, 0x600000
je 0x450357
ja 0x4503ea
test ebx, ebx
je 0x4500e7
cmp ebx, 0x200000
je 0x4501ac
cmp ebx, 0x400000
jne 0x450056
mov ecx, 8
jmp 0x45005b
cmp byte [0x5a44b5], 0x43
jne 0x44fe7a
jmp 0x4aac4a
mov ecx, 2
jmp 0x45005b
push 0x401c1c
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
je 0x4aae7b
push 0x401c10
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
je 0x4aae90
push 0x401c04
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
jne 0x4aaea5
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x40]
and eax, 0xffff97ff
or eax, 0x1000
mov dword [ecx + 0x40], eax
mov edx, dword [ebp - 0x3c]
jmp 0x45008f
test byte [ecx + 0x150], 0x90
mov edx, 0x50
je 0x450400
mov edx, 0x64
cmp byte [0x5a2ee5], 0
jne 0x45042f
add ecx, 0xb00
call fcn.0044a45f
mov edx, esi
jmp 0x44ffaf
mov word [edx + 0x28], ax
jmp 0x45007d
mov dword [edx + 0x10], eax
jmp 0x4500ac
push 0x401c54
push dword [ebp - 0x3c]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
je 0x4aad72
cmp byte [0x5a2ee5], 0
mov edx, 0x30
jne 0x4503cd
mov esi, dword [ebp - 0x48]
lea ecx, [esi + 0xafc]
call fcn.0044a45f
push 0x401c48
push dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
je 0x450421
mov ecx, dword [ebp - 0x3c]
call fcn.00450dc5
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x40]
test edi, edi
je 0x4aad7e
mov eax, dword [ebp - 0x34]
mov edx, 1
mov dword [eax + 4], edi
lea edi, [ecx + 0xc]
mov eax, dword [ebp - 0x34]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x34]
mov word [eax + 0x28], dx
mov esi, dword [edi]
test esi, esi
je 0x45030d
jmp 0x4502f0
mov eax, dword [ebp - 0x34]
push dword [esi]
push dword [eax]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
js 0x45030d
lea edi, [esi + 0xc]
mov esi, dword [edi]
test esi, esi
jne 0x4502f0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x48]
mov dword [edi], eax
mov eax, dword [ebp - 0x34]
mov dword [eax + 0xc], esi
test byte [ecx + 0x150], 0x80
je 0x450332
mov edx, dword [0x5a4efc]
test edx, edx
jne 0x4aad85
mov esi, dword [ebp - 0x34]
mov edx, esi
mov dword [ebp - 0x3c], esi
jmp 0x44ff91
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x34], ecx
test ecx, ecx
je 0x44ff45
mov edx, dword [ecx]
jmp 0x44fef4
mov ecx, 0x20
jmp 0x45005b
mov ebx, dword [ebp - 0x40]
movzx eax, word [esi + 0x40]
mov edx, ebx
push eax
mov ecx, 0x5a44b4
call fcn.00450510
cmp byte [0x5a2ee5], 0
mov edx, 0x3c
mov dword [ebp - 0x40], eax
jne 0x450412
lea ecx, [esi + 0xafc]
call fcn.0044a45f
mov ecx, 0x5a44b4
mov edi, eax
call fcn.00450dc5
mov dword [edi], eax
mov ecx, esi
mov eax, dword [ebp - 0x40]
push edi
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], eax
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
call fcn.00451538
inc dword [esi + 0xaf8]
jmp 0x44ff5a
mov ecx, 1
call fcn.0044fc74
mov esi, dword [ebp - 0x48]
jmp 0x450296
mov ebx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x48]
jmp 0x450364
cmp ebx, 0x700000
jne 0x4aade8
mov ecx, 0x40
jmp 0x45005b
call fcn.00476f67
test al, al
je 0x45022d
jmp 0x450228
mov ecx, 1
call fcn.0044fc74
jmp 0x450395
mov eax, dword [ebp - 0x34]
mov dword [esi + 0xba0], eax
jmp 0x4502b2
mov ecx, 1
call fcn.0044fc74
mov edx, esi
jmp 0x44ffaf
xor ecx, ecx
test dl, dl
je 0x44feae
jmp 0x4aac9d
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xd4]
test al, 2
jne 0x4aaba4
test eax, 0x4000
je 0x44fe1e
mov ecx, 0x5a44b4
call fcn.004ddea8
test al, al
jne 0x44fe1e
push edi
lea ecx, [ebp - 0x2c]
call fcn.004ccb01
mov dword [ebp - 4], 0
lea edi, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
jb 0x4aabd2
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4aac15
push eax
push 0x24
push edi
call sub.VCRUNTIME140.dll_memchr
add esp, 0xc
test eax, eax
je 0x4aac15
sub eax, edi
cmp eax, 0xffffffff
je 0x4aac15
push 8
push 0x41b594
inc eax
lea ecx, [ebp - 0x2c]
push eax
call fcn.004de2f6
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x2c]
jb 0x4aac0d
mov ecx, dword [ebp - 0x2c]
call fcn.00450dc5
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.004d2e75
jmp 0x44fe1e
and ebx, 0xfffdffff
jmp 0x44fe34
test bl, bl
jns 0x44fe5c
and ebx, 0xffffff7f
or ebx, 0x40
jmp 0x44fe5c
cmp dl, 0x2e
jne 0x44fe7a
cmp byte [0x5a44b6], 0x52
jne 0x44fe7a
cmp byte [0x5a44b7], 0x54
jne 0x44fe7a
cmp byte [0x5a44b8], 0
jne 0x44fe7a
mov eax, 0x14c
cmp di, ax
jne 0x44fe7a
mov ebx, 0x40000040
jmp 0x44fe86
or ebx, 0x60000000
jmp 0x44fe86
mov al, dl
mov edx, 0x5a44b4
shl ecx, 8
lea edx, [edx + 1]
movsx eax, al
or ecx, eax
mov al, byte [edx]
test al, al
jne 0x4aaca4
jmp 0x44feae
mov eax, ebx
and edx, 0xdfffffdf
and eax, 0xffffffbf
cmp eax, edx
je 0x44ff43
test dword [ecx + 0x28], 0x200
mov al, byte [ebp - 0x2d]
jne 0x45033f
mov byte [ebp - 0x41], 1
jmp 0x45033f
mov al, byte [ebp - 0x2d]
jmp 0x45033f
test edi, edi
jne 0x44ff57
mov ecx, 0x5a44b4
call fcn.0044efd9
mov esi, eax
mov dword [ebp - 0x34], esi
mov ebx, dword [ebp - 0x40]
push ebx
push esi
push 0xfee
push dword [ebp - 0x54]
mov dword [ebp - 4], 1
call fcn.0052bce6
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4503e2
push esi
call dword [sym.imp.tbbmalloc.dll_scalable_free]
add esp, 4
jmp 0x4503e2
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x44ff72
mov eax, ecx
mov dword [ebp - 0x40], eax
cmp eax, edi
je 0x4aad5e
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x4aad49
jmp 0x44ff72
mov ecx, dword [edi]
call fcn.0044efd9
push eax
push 0x479
push 0
call fcn.0047dc0b
mov byte [0x5a3d90], 1
jmp 0x450276
mov edi, ecx
jmp 0x4502ca
mov eax, dword [ebp - 0x34]
mov ecx, edx
push dword [eax]
call fcn.0046fec5
test eax, eax
je 0x4aadab
lea eax, [ebp - 0x34]
mov ecx, 0x5a1508
push eax
push dword [ebp - 0x34]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004cc5e8
mov ecx, dword [ebp - 0x48]
jmp 0x450332
mov eax, 0x3a64
and ecx, 0x8000
je 0x45002e
mov eax, dword [ebp - 0x38]
or dword [eax + 0x44], 8
movzx eax, word [esi + 0x40]
jmp 0x450024
test ecx, ecx
je 0x45003f
mov eax, dword [ebp - 0x38]
or dword [eax + 0x44], 0x10
jmp 0x45003f
cmp ebx, 0x800000
jne 0x450056
mov ecx, 0x80
jmp 0x45005b
mov ecx, 0x100
jmp 0x45005b
cmp ebx, 0xc00000
ja 0x4aae44
je 0x4aae3a
cmp ebx, 0xa00000
je 0x4aae30
cmp ebx, 0xb00000
jne 0x450056
mov ecx, 0x400
jmp 0x45005b
mov ecx, 0x200
jmp 0x45005b
mov ecx, 0x800
jmp 0x45005b
cmp ebx, 0xd00000
je 0x4aae62
cmp ebx, 0xe00000
jne 0x450056
mov ecx, 0x2000
jmp 0x45005b
mov ecx, 0x1000
jmp 0x45005b
push ecx
push dword [edi + 0x6c]
push 0x48c
push edi
call fcn.0052bb8a
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x40]
and eax, 0xffffafff
or eax, 0x2800
jmp 0x45020b
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x40]
and eax, 0xffff8fff
or eax, 0x800
jmp 0x45020b
push 0x41b5a0
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
jne 0x4aaecd
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x40]
and eax, 0xffff9fff
or eax, 0x1800
jmp 0x45020b
push 0x41b5ac
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
add esp, 8
test eax, eax
jne 0x45020e
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x40]
and eax, 0xffffa7ff
or eax, 0x2000
jmp 0x45020b