Function at 0x6cf997
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
mov eax, dword [0x73e040]
xor eax, ebp
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0x424], 1
push ebx
mov ebx, ecx
mov byte [ebp - 0x419], al
push esi
push edi
mov dword [ebp - 0x440], ebx
mov edi, dword [ebx]
mov ecx, edi
mov byte [ebp - 0x41a], al
mov word [ebp - 0x418], ax
mov byte [ebp - 0x416], al
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x438], eax
mov dword [ebx + 8], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0xc], eax
call fcn.006ce7df
test eax, eax
je 0x6d0317
mov ecx, edi
call fcn.006c8ec1
mov ecx, edi
mov esi, eax
call fcn.006c8ec1
mov ecx, eax
mov dword [ebp - 0x444], ecx
cmp ecx, 0x43674249
je 0x6cffdf
cmp ecx, 0x49444154
je 0x6cff37
cmp ecx, 0x49454e44
je 0x6d0129
cmp ecx, 0x49484452
je 0x6cfd21
cmp ecx, 0x504c5445
je 0x6cfbe3
cmp ecx, 0x74524e53
je 0x6cfac6
cmp dword [ebp - 0x424], 0
jne 0x6d0305
test ecx, 0x20000000
jne 0x6cffe9
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, ecx
shr eax, 0x10
mov byte [0x73f321], al
mov eax, ecx
shr eax, 8
mov byte [0x73f322], al
mov eax, dword fs:[0x2c]
mov byte [0x73f323], cl
mov eax, dword [eax]
mov dword [eax + 0xc], str.XXXX_PNG_chunk_not_known
jmp 0x6d0317
cmp dword [ebp - 0x424], 0
jne 0x6d0305
cmp dword [ebx + 4], 0
jne 0x6d0043
cmp byte [ebp - 0x419], 0
je 0x6cfb6d
mov eax, dword [ebp - 0x430]
test eax, eax
je 0x6d0015
cmp esi, eax
ja 0x6cfffe
xor edx, edx
mov byte [ebp - 0x419], 4
mov dword [ebp - 0x420], edx
test esi, esi
je 0x6cfff2
mov eax, dword [edi + 0xac]
cmp eax, dword [edi + 0xb0]
jae 0x6cfb30
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfb56
cmp dword [edi + 0x20], 0
je 0x6cfb54
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
mov edx, dword [ebp - 0x420]
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfb56
xor cl, cl
mov byte [ebp + edx*4 - 0x411], cl
inc edx
mov dword [ebp - 0x420], edx
cmp edx, esi
jb 0x6cfb17
jmp 0x6cfff2
mov ecx, dword [edi + 8]
test cl, 1
je 0x6d002c
lea eax, [ecx + ecx]
cmp esi, eax
jne 0x6cfffe
xor esi, esi
mov byte [ebp - 0x41a], 1
cmp dword [ebx + 0x10], 0x10
jne 0x6cfbb2
test ecx, ecx
jle 0x6cfff2
mov ecx, edi
call fcn.006c8e49
mov word [ebp + esi*2 - 0x10], ax
inc esi
cmp esi, dword [edi + 8]
jl 0x6cfb9b
jmp 0x6cfff2
test ecx, ecx
jle 0x6cfff2
mov ecx, edi
call fcn.006c8e49
mov ecx, dword [ebx + 0x10]
movzx eax, al
movzx ecx, byte [ecx + 0x7210c4]
imul eax, ecx
mov byte [ebp + esi - 0x418], al
inc esi
cmp esi, dword [edi + 8]
jl 0x6cfbba
jmp 0x6cfff2
cmp dword [ebp - 0x424], 0
jne 0x6d0305
cmp esi, 0x300
ja 0x6d005a
push 3
xor edx, edx
mov eax, esi
pop ecx
div ecx
imul ecx, eax, 3
mov dword [ebp - 0x430], eax
cmp ecx, esi
jne 0x6d005a
and dword [ebp - 0x420], 0
test eax, eax
je 0x6cfff2
lea ebx, [ebp - 0x414]
lea esi, [edi + 0x20]
mov eax, dword [edi + 0xac]
cmp eax, dword [edi + 0xb0]
jae 0x6cfc47
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfc60
lea esi, [edi + 0x20]
cmp dword [esi], 0
je 0x6cfc5e
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
jmp 0x6cfc3c
xor cl, cl
mov edx, esi
mov esi, dword [ebp - 0x420]
mov dword [ebp - 0x444], edx
mov byte [ebx + esi*4], cl
cmp eax, dword [edi + 0xb0]
jae 0x6cfc87
mov cl, byte [eax]
lea esi, [edi + 0x20]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfcae
cmp dword [edx], 0
mov esi, edx
je 0x6cfcac
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
mov edx, dword [ebp - 0x444]
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfcae
xor cl, cl
mov ebx, dword [ebp - 0x420]
mov byte [ebp + ebx*4 - 0x413], cl
cmp eax, dword [edi + 0xb0]
jae 0x6cfcce
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfce4
cmp dword [edx], 0
je 0x6cfce2
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
jmp 0x6cfcc3
xor cl, cl
mov edx, dword [ebp - 0x420]
lea eax, [ebp - 0x412]
lea ebx, [ebp - 0x414]
mov byte [eax + edx*4], cl
lea eax, [ebp - 0x411]
mov byte [eax + edx*4], 0xff
inc edx
mov dword [ebp - 0x420], edx
cmp edx, dword [ebp - 0x430]
jb 0x6cfc2e
mov ebx, dword [ebp - 0x440]
jmp 0x6cfff2
cmp dword [ebp - 0x424], 0
je 0x6d0112
and dword [ebp - 0x424], 0
cmp esi, 0xd
jne 0x6d00fb
mov ecx, edi
call fcn.006c8ec1
mov ecx, edi
mov dword [edi], eax
call fcn.006c8ec1
mov ecx, 0x1000000
mov dword [edi + 4], eax
cmp eax, ecx
ja 0x6cff20
cmp dword [edi], ecx
ja 0x6cff20
mov eax, dword [edi + 0xac]
cmp eax, dword [edi + 0xb0]
jae 0x6cfd7f
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfd96
cmp dword [edi + 0x20], 0
je 0x6cfd94
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
jmp 0x6cfd74
xor cl, cl
push 0x20
movzx eax, cl
mov esi, edi
mov dword [ebx + 0x10], eax
pop edx
mov dword [ebp - 0x420], edx
cmp eax, 1
je 0x6cfdc4
cmp eax, 2
je 0x6cfdc4
cmp eax, 4
je 0x6cfdc4
cmp eax, 8
je 0x6cfdc4
cmp eax, 0x10
jne 0x6d0071
mov eax, dword [edi + 0xac]
cmp eax, dword [edi + 0xb0]
jae 0x6cfddd
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfdf4
cmp dword [edx + esi], 0
je 0x6cfdf2
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
jmp 0x6cfdd2
xor cl, cl
movzx ecx, cl
mov dword [ebp - 0x434], ecx
cmp ecx, 6
ja 0x6d0088
push 3
pop edx
cmp ecx, edx
jne 0x6cfe1f
cmp dword [ebx + 0x10], 0x10
je 0x6d0088
mov byte [ebp - 0x419], dl
jmp 0x6cfe28
test cl, 1
jne 0x6d0088
cmp eax, dword [edi + 0xb0]
jb 0x6cfe49
mov ecx, dword [ebp - 0x420]
cmp dword [ecx + esi], 0
je 0x6cfe60
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
test cl, cl
jne 0x6d009f
mov ecx, dword [ebp - 0x420]
cmp eax, dword [edi + 0xb0]
jb 0x6cfe7b
cmp dword [ecx + esi], 0
je 0x6cfe92
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
test cl, cl
jne 0x6d00b6
mov ecx, dword [ebp - 0x420]
cmp eax, dword [edi + 0xb0]
jae 0x6cfea5
mov cl, byte [eax]
inc eax
mov dword [edi + 0xac], eax
jmp 0x6cfebc
cmp dword [ecx + esi], 0
je 0x6cfeba
mov ecx, edi
call fcn.006c8d30
mov eax, dword [edi + 0xac]
jmp 0x6cfe9a
xor cl, cl
movzx eax, cl
xor ecx, ecx
inc ecx
mov dword [ebp - 0x43c], eax
cmp eax, ecx
ja 0x6d00e4
cmp dword [edi], 0
je 0x6d00cd
mov esi, dword [edi + 4]
test esi, esi
je 0x6d00cd
xor edx, edx
mov eax, 0x40000000
div dword [edi]
cmp byte [ebp - 0x419], 0
jne 0x6cff12
mov ecx, dword [ebp - 0x434]
mov edx, ecx
shr edx, 2
and ecx, 2
and edx, 1
or ecx, 1
add ecx, edx
xor edx, edx
div ecx
jmp 0x6cff15
shr eax, 2
mov dword [edi + 8], ecx
cmp eax, esi
jae 0x6cfff2
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.too_large
jmp 0x6d0317
cmp dword [ebp - 0x424], 0
jne 0x6d0305
cmp byte [ebp - 0x419], 0
je 0x6cff5a
cmp dword [ebp - 0x430], 0
je 0x6d02b5
cmp esi, 0x40000000
ja 0x6d02f1
mov ecx, dword [ebp - 0x42c]
lea eax, [esi + ecx]
cmp eax, ecx
jl 0x6d0317
mov ecx, dword [ebp - 0x428]
cmp eax, ecx
jbe 0x6cffbd
test ecx, ecx
jne 0x6cff97
mov edx, 0x1000
cmp esi, edx
mov ecx, edx
cmova ecx, esi
mov dword [ebp - 0x428], ecx
cmp eax, ecx
jbe 0x6cffa7
add ecx, ecx
cmp eax, ecx
ja 0x6cff9b
mov dword [ebp - 0x428], ecx
push ecx
push dword [ebx + 4]
call fcn.006e2143
pop ecx
pop ecx
test eax, eax
je 0x6d02c9
mov dword [ebx + 4], eax
mov edx, dword [ebx + 4]
mov ecx, edi
add edx, dword [ebp - 0x42c]
push esi
call fcn.006c8dc8
pop ecx
test eax, eax
je 0x6d02dd
add dword [ebp - 0x42c], esi
jmp 0x6cfff2
mov dword [ebp - 0x438], 1
mov edx, esi
mov ecx, edi
call fcn.006c8d81
mov ecx, edi
call fcn.006c8ec1
jmp 0x6cfa18
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.bad_tRNS_len
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.tRNS_before_PLTE
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.tRNS_with_alpha
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.tRNS_after_IDAT
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.invalid_PLTE
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.1_2_4_8_16_bit_only
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.bad_ctype
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.bad_comp_method
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.bad_filter_method
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.0_pixel_image
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.bad_interlace_method
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.bad_IHDR_len
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.multiple_IHDR
jmp 0x6d0317
cmp dword [ebp - 0x424], 0
jne 0x6d0305
mov ecx, dword [ebx + 4]
test ecx, ecx
jne 0x6d0154
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.no_IDAT
jmp 0x6d0317
mov esi, dword [edi]
xor eax, eax
imul esi, dword [ebx + 0x10]
mov edx, dword [ebp - 0x42c]
add esi, 7
shr esi, 3
imul esi, dword [edi + 8]
inc esi
imul esi, dword [edi + 4]
cmp dword [ebp - 0x438], eax
sete al
push eax
lea eax, [ebp - 0x428]
mov dword [ebp - 0x428], esi
push eax
push esi
call fcn.006ce750
add esp, 0xc
mov dword [ebx + 8], eax
test eax, eax
je 0x6d0317
push dword [ebx + 4]
call fcn.006e214e
xor esi, esi
pop ecx
mov dword [ebx + 4], esi
mov ecx, dword [edi + 8]
lea eax, [ecx + 1]
cmp eax, 4
jne 0x6d01be
cmp byte [ebp - 0x419], 0
je 0x6d01c9
cmp byte [ebp - 0x41a], 0
jne 0x6d01c9
mov eax, ecx
mov ecx, dword [ebp - 0x43c]
push ecx
push dword [ebp - 0x434]
mov dword [edi + 0xc], eax
mov ecx, ebx
push dword [ebx + 0x10]
mov edx, dword [ebx + 8]
push eax
push dword [ebp - 0x428]
call fcn.006cf468
add esp, 0x14
test eax, eax
je 0x6d0317
cmp byte [ebp - 0x41a], 0
je 0x6d022a
cmp dword [ebx + 0x10], 0x10
mov ecx, ebx
push dword [edi + 0xc]
jne 0x6d0216
lea edx, [ebp - 0x10]
call fcn.006cf735
jmp 0x6d0221
lea edx, [ebp - 0x418]
call fcn.006cf6b4
pop ecx
test eax, eax
je 0x6d0317
cmp dword [ebp - 0x438], esi
je 0x6d0260
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x18], esi
je 0x6d024a
mov eax, dword [eax + 0x1c]
jmp 0x6d024f
mov eax, dword [0xb40f38]
test eax, eax
je 0x6d0260
cmp dword [edi + 0xc], 2
jle 0x6d0260
mov ecx, ebx
call fcn.006cf891
mov al, byte [ebp - 0x419]
test al, al
je 0x6d0291
movzx eax, al
lea edx, [ebp - 0x414]
push 4
mov dword [edi + 8], eax
pop eax
push eax
push ecx
mov ecx, ebx
mov dword [edi + 0xc], eax
call fcn.006cf7c6
pop ecx
pop ecx
test eax, eax
je 0x6d0317
jmp 0x6d029d
cmp byte [ebp - 0x41a], 0
je 0x6d029d
inc dword [edi + 8]
push dword [ebx + 8]
call fcn.006e214e
pop ecx
mov ecx, edi
mov dword [ebx + 8], esi
call fcn.006c8ec1
xor eax, eax
inc eax
jmp 0x6d0319
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.no_PLTE
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.outofmem
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.outofdata
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.IDAT_size_limit
jmp 0x6d0317
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov dword [eax + 0xc], str.first_not_IHDR
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006dd431
leave
ret