Function at 0x100d9260
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1024f77a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov ecx, edi
mov dword [ebp - 0x38], 0
xor eax, eax
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d92a0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x48]
call fcn.1001a600
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov ecx, edi
mov byte [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d92f2
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x30]
call fcn.1001a600
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x30]
push 0x2c
push eax
call sym.WMCommon.dll__StringToArray_GMStringToken_WM__SAXABV__basic_string__WU__char_traits__W_std__V__allocator__W_2__std___WAAV__vec
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.1001a5a0
mov ecx, dword [ebp - 0x14]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x18]
sub ecx, edi
imul ecx
sar edx, 2
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
je 0x100d94a9
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x100d9352
mov eax, dword [edi]
push 0x10
push 0
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
dec eax
add esp, 0xc
cmp eax, 0x22
ja case.default.0x100d936a
jmp dword [eax*4 + 0x100d94cc]
or dword [esi], 1
jmp case.default.0x100d936a
or dword [esi], 2
jmp case.default.0x100d936a
or dword [esi], 4
jmp case.default.0x100d936a
or dword [esi], 8
jmp case.default.0x100d936a
or dword [esi], 0x10
jmp case.default.0x100d936a
or dword [esi], 0x20
jmp case.default.0x100d936a
or dword [esi], 0x40
jmp case.default.0x100d936a
or dword [esi], 0x80
jmp case.default.0x100d936a
or dword [esi], 0x100
jmp case.default.0x100d936a
or dword [esi], 0x200
jmp case.default.0x100d936a
or dword [esi], 0x400
jmp case.default.0x100d936a
or dword [esi], 0x800
jmp case.default.0x100d936a
or dword [esi], 0x1000
jmp case.default.0x100d936a
or dword [esi], 0x2000
jmp case.default.0x100d936a
or dword [esi], 0x4000
jmp case.default.0x100d936a
or dword [esi], 0x8000
jmp case.default.0x100d936a
or dword [esi], 0x10000
jmp case.default.0x100d936a
or dword [esi], 0x20000
jmp case.default.0x100d936a
or dword [esi], 0x40000
jmp case.default.0x100d936a
or dword [esi], 0x80000
jmp case.default.0x100d936a
or dword [esi], 0x100000
jmp case.default.0x100d936a
or dword [esi], 0x200000
jmp case.default.0x100d936a
or dword [esi], 0x400000
jmp case.default.0x100d936a
or dword [esi], 0x800000
jmp case.default.0x100d936a
or dword [esi], 0x1000000
jmp case.default.0x100d936a
or dword [esi], 0x2000000
jmp case.default.0x100d936a
or dword [esi], 0x4000000
jmp case.default.0x100d936a
or dword [esi], 0x8000000
jmp case.default.0x100d936a
or dword [esi], 0x10000000
jmp case.default.0x100d936a
or dword [esi], 0x20000000
jmp case.default.0x100d936a
or dword [esi], 0x40000000
jmp case.default.0x100d936a
or dword [esi + 4], 2
jmp case.default.0x100d936a
or dword [esi + 4], 4
jmp case.default.0x100d936a
or dword [esi + 4], 8
jmp case.default.0x100d936a
or dword [esi + 4], 0x10
add edi, 0x18
sub ebx, 1
jne 0x100d9348
lea ecx, [ebp - 0x18]
call fcn.1001d100
lea ecx, [ebp - 0x48]
call fcn.1001a5a0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4