Function at 0x10013240
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0xb8
mov eax, dword [0x100588c0]
xor eax, esp
mov dword [esp + 0xb4], eax
mov eax, dword [0x100588b0]
push ebx
mov ebx, dword [esp + 0xc0]
cmp eax, 0xffff
je 0x1001328e
test ebx, ebx
je 0x100136ec
mov ecx, dword [0x10059a50]
mov dword [ebx], ecx
pop ebx
mov ecx, dword [esp + 0xb4]
xor ecx, esp
call fcn.100330f2
add esp, 0xb8
ret
push 0
push 0xffffffffffffffff
mov dword [0x100588b0], 0x20
mov dword [0x10059a50], 0
call fcn.100131d9
add esp, 8
cmp eax, 3
je 0x100136dc
push edi
mov edi, 4
cmp eax, edi
jne 0x100132cc
mov dword [0x10059a50], edi
jmp 0x100136db
lea edx, [esp + 0x18]
push edx
push 0
call fcn.100131d9
add esp, 8
cmp dword [esp + 0x18], 1
jae 0x100132ed
mov dword [0x10059a50], edi
jmp 0x100136db
push esi
lea eax, [esp + 0xc]
push eax
push 1
call fcn.100131d9
mov eax, dword [esp + 0x20]
mov esi, dword [0x10059a50]
add esp, 8
test eax, 0x800000
je 0x10013314
or esi, 0x100
test eax, 0x2000000
je 0x10013321
or esi, 0x200
test eax, 0x4000000
je 0x1001332e
or esi, 0x400
test al, 0x10
je 0x10013338
or esi, 0x4000
test eax, 0x8000
je 0x10013345
or esi, 0x8000
test eax, 0x10000000
je 0x10013352
or esi, 0x10000
mov eax, dword [esp + 0x14]
test al, 1
je 0x10013360
or esi, 0x20000
test eax, 0x200
je 0x1001336d
or esi, 0x40000
test eax, 0x80000
je 0x1001337a
or esi, 0x2000000
test eax, 0x100000
je 0x10013387
or esi, 0x4000000
test eax, 0x800000
je 0x10013394
or esi, 0x8000000
test eax, 0x2000000
je 0x100133a1
or esi, 0x10000000
test al, 2
je 0x100133ab
or esi, 0x20000000
mov eax, dword [esp + 0x28]
cmp eax, 0x69746e65
jne 0x1001347f
mov eax, dword [esp + 0xc]
mov ecx, eax
shr ecx, 8
and eax, 0xf00
and ecx, 0xff000
or eax, ecx
shr eax, 8
add eax, 0xfffffffc
cmp eax, 0x5b
ja case.0x100133e2.7
movzx edx, byte [eax + 0x10013720]
jmp dword [edx*4 + 0x10013704]
or esi, edi
jmp 0x10013404
or esi, 0x16
jmp 0x10013404
or esi, 0x17
jmp 0x10013404
or esi, 0x18
jmp 0x10013404
or esi, 0x1b
jmp 0x10013404
or esi, 0x19
lea eax, [esp + 0xc]
push eax
push 0x80000000
mov dword [0x10059a50], esi
call fcn.100131d9
add esp, 8
cmp dword [esp + 0xc], 0x80000001
jb 0x100136da
lea ecx, [esp + 0xc]
push ecx
push 0x80000001
call fcn.100131d9
mov eax, dword [esp + 0x20]
mov esi, dword [0x10059a50]
add esp, 8
test eax, 0x400000
je 0x10013459
or esi, 0x800
mov dword [0x10059a50], esi
test eax, 0x40000000
je 0x1001346c
or esi, 0x2000
mov dword [0x10059a50], esi
test eax, eax
jns 0x1001369f
or esi, 0x1000
jmp 0x10013699
cmp eax, 0x48727561
jne 0x100135b5
mov eax, dword [esp + 0xc]
mov edx, eax
shr edx, 4
and eax, 0xf00
and edx, 0xf
or eax, edx
add eax, 0xfffff9f8
cmp eax, 7
ja case.0x100134a7.1546
jmp dword [eax*4 + 0x1001377c]
or esi, 0x20
jmp 0x100134c0
or esi, 0x21
jmp 0x100134c0
or esi, 0x23
jmp 0x100134c0
or esi, 0x22
lea eax, [esp + 0xc]
push eax
push 0xc0000000
mov dword [0x10059a50], esi
call fcn.100131d9
add esp, 8
cmp dword [esp + 0xc], 0xc0000001
jb 0x100136da
lea ecx, [esp + 0xc]
push ecx
push 0xc0000001
call fcn.100131d9
mov eax, dword [esp + 0x20]
mov esi, dword [0x10059a50]
add esp, 8
test eax, 0x400000
je 0x10013515
or esi, 0x800
mov dword [0x10059a50], esi
test eax, 0x40000000
je 0x10013528
or esi, 0x2000
mov dword [0x10059a50], esi
test eax, eax
jns 0x10013538
or esi, 0x1000
mov dword [0x10059a50], esi
test al, 4
je 0x1001354c
test al, 8
je 0x1001354c
or esi, 0x100000
mov dword [0x10059a50], esi
test al, 0x40
je 0x10013560
test al, al
jns 0x10013560
or esi, 0x200000
mov dword [0x10059a50], esi
test eax, 0x100
je 0x1001357a
test eax, 0x200
je 0x1001357a
or esi, 0x400000
mov dword [0x10059a50], esi
test eax, 0x400
je 0x10013594
test eax, 0x800
je 0x10013594
or esi, 0x800000
mov dword [0x10059a50], esi
test eax, 0x1000
je 0x1001369f
test eax, 0x2000
je 0x1001369f
or esi, 0x1000000
jmp 0x10013699
mov edx, dword [esp + 0xc]
mov ecx, edx
shr ecx, 8
mov eax, edx
mov edi, ecx
and edi, 0xff000
and eax, 0xf00
or edi, eax
shr edi, 8
add edi, 0xfffffffc
cmp edi, 0x1b
ja case.0x100135e5.8
movzx edi, byte [edi + 0x100137b8]
jmp dword [edi*4 + 0x1001379c]
or esi, 4
jmp 0x10013699
or esi, 5
jmp 0x10013699
mov eax, edx
shr eax, 0x14
and eax, 0xff
shl eax, 4
and ecx, 0xf
or eax, ecx
mov ecx, edx
shl eax, 8
shr ecx, 0x10
and ecx, 0xf
or eax, ecx
shr edx, 4
shl eax, 4
and edx, 0xf
or eax, edx
shl eax, 4
cmp eax, 0x600f0
je case.0x100135e5.8
cmp eax, 0x60170
je case.0x100135e5.8
cmp eax, 0x601a0
je case.0x100135e5.8
cmp eax, 0x60200
jl 0x1001364a
or esi, 0xc
jmp 0x10013699
cmp eax, 0x601c0
jne 0x10013656
or esi, 0xb
jmp 0x10013699
cmp eax, 0x60090
jne 0x10013662
or esi, 9
jmp 0x10013699
or esi, 6
jmp 0x10013699
or esi, 0x31
jmp 0x10013699
and ecx, 0xf00
shl eax, 8
or ecx, eax
and edx, 0xff000ff
or ecx, edx
cmp ecx, 0xf0030
jb 0x1001368c
or esi, 8
jmp 0x10013699
or esi, 7
jmp 0x10013699
or esi, 0x32
jmp 0x10013699
or esi, 0xa
mov dword [0x10059a50], esi
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x100136c4
cmp dword [esp + 0x3c], 2
jne 0x100136c4
cmp dword [esp + 0x30], 4
ja 0x100136ca
and esi, 0xc1f9c1ff
mov dword [0x10059a50], esi
mov dword [0x100588b0], 0x20
pop esi
pop edi
test ebx, ebx
je 0x100136e7
mov eax, dword [0x10059a50]
mov dword [ebx], eax
mov eax, dword [0x100588b0]
mov ecx, dword [esp + 0xb8]
pop ebx
xor ecx, esp
call fcn.100330f2
add esp, 0xb8
ret