Function at 0x41c44f
Capabilities:
Inspect section memory permissions

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
lea rax, [0x004a8480]
mov qword [rbp - 8], rax
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41c47b
mov eax, 8
jmp 0x41c480
mov eax, 0x10
mov dword [rbp - 0x2c], eax
mov eax, 0x3fb
sub eax, dword [rbp - 0x2c]
mov dword [rbp - 0x10], eax
mov qword [rbp - 0x18], 0
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x28], 0
mov eax, dword [0x004a838c]
test eax, eax
je 0x41cb72
mov rax, qword [rbp + 0x18]
mov ecx, eax
mov edx, dword [rbp - 0x2c]
mov eax, dword [rbp - 0x2c]
mov dword [rsp + 0x20], ecx
mov r9d, edx
mov r8d, eax
lea rdx, str.__.lx_:
lea rcx, [0x004a8480]
call sub.msvcrt.dll_sprintf
mov eax, dword [rbp - 0x2c]
add eax, 4
mov eax, eax
add qword [rbp - 8], rax
jmp 0x41cb72
mov rax, qword [rbp + 0x18]
neg rax
and rax, qword [rbp + 0x18]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
not rax
and qword [rbp + 0x18], rax
mov eax, dword [0x004a838c]
test eax, eax
je 0x41c947
mov rax, qword [rbp - 0x38]
cmp rax, 0x80
je 0x41c61e
cmp rax, 0x80
ja 0x41c57a
cmp rax, 4
je 0x41c5ee
cmp rax, 4
ja 0x41c557
cmp rax, 1
je 0x41c5d6
cmp rax, 2
je 0x41c5e2
jmp 0x41c672
cmp rax, 0x20
je 0x41c606
cmp rax, 0x40
je 0x41c612
cmp rax, 0x10
je 0x41c5fa
jmp 0x41c672
cmp rax, 0x400
je 0x41c642
cmp rax, 0x400
ja 0x41c5ab
cmp rax, 0x100
je 0x41c62a
cmp rax, 0x200
je 0x41c636
jmp 0x41c672
cmp rax, 0x1000000
je 0x41c666
mov edx, 0x80000000
cmp rax, rdx
je 0x41c64e
cmp rax, 0x800
je 0x41c65a
jmp 0x41c672
mov dword [rbp - 0xc], 0
jmp 0x41c85e
mov dword [rbp - 0xc], 1
jmp 0x41c85e
mov dword [rbp - 0xc], 2
jmp 0x41c85e
mov dword [rbp - 0xc], 3
jmp 0x41c85e
mov dword [rbp - 0xc], 4
jmp 0x41c85e
mov dword [rbp - 0xc], 5
jmp 0x41c85e
mov dword [rbp - 0xc], 6
jmp 0x41c85e
mov dword [rbp - 0xc], 7
jmp 0x41c85e
mov dword [rbp - 0xc], 8
jmp 0x41c85e
mov dword [rbp - 0xc], 9
jmp 0x41c85e
mov dword [rbp - 0xc], 0x12
jmp 0x41c85e
mov dword [rbp - 0xc], 0x14
jmp 0x41c85e
mov dword [rbp - 0xc], 0x18
jmp 0x41c85e
mov dword [rbp - 0xc], 0xffffffff
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
movzx eax, ax
cmp eax, 0x14
je 0x41c841
cmp eax, 0x14
jg 0x41c6c8
cmp eax, 6
je 0x41c7f2
cmp eax, 6
jg 0x41c6b1
sub eax, 2
cmp eax, 1
ja 0x41c854
jmp 0x41c7f2
cmp eax, 0xb
je 0x41c7f2
cmp eax, 0x12
je 0x41c7f2
jmp 0x41c854
cmp eax, 0x32
je 0x41c70e
cmp eax, 0x32
jg 0x41c6e9
cmp eax, 0x28
je 0x41c805
cmp eax, 0x2b
je 0x41c7f2
jmp 0x41c854
cmp eax, 0x3e
je 0x41c7f2
cmp eax, 0x3e
jl 0x41c854
sub eax, 0xb4
cmp eax, 1
ja 0x41c854
jmp 0x41c7f2
cmp qword [rbp - 0x38], 0x10000000
jne 0x41c724
mov dword [rbp - 0xc], 0xa
jmp 0x41c857
cmp qword [rbp - 0x38], 0x20000000
jne 0x41c73a
mov dword [rbp - 0xc], 0xb
jmp 0x41c857
mov rax, qword [rbp + 0x10]
movzx eax, byte [rax + 0x1f]
cmp al, 0xd
jne 0x41c857
mov rax, qword [rbp - 0x38]
movabs rdx, 0x400000000
cmp rax, rdx
je 0x41c7cd
movabs rdx, 0x400000000
cmp rax, rdx
ja 0x41c78c
movabs rdx, 0x100000000
cmp rax, rdx
je 0x41c7bb
movabs rdx, 0x200000000
cmp rax, rdx
je 0x41c7c4
jmp 0x41c7f0
movabs rdx, 0x1000000000
cmp rax, rdx
je 0x41c7df
movabs rdx, 0x2000000000
cmp rax, rdx
je 0x41c7e8
movabs rdx, 0x800000000
cmp rax, rdx
je 0x41c7d6
jmp 0x41c7f0
mov dword [rbp - 0xc], 0xc
jmp 0x41c7f0
mov dword [rbp - 0xc], 0xd
jmp 0x41c7f0
mov dword [rbp - 0xc], 0xe
jmp 0x41c7f0
mov dword [rbp - 0xc], 0xf
jmp 0x41c7f0
mov dword [rbp - 0xc], 0x10
jmp 0x41c7f0
mov dword [rbp - 0xc], 0x11
nop
jmp 0x41c857
cmp qword [rbp - 0x38], 0x40000000
jne 0x41c85a
mov dword [rbp - 0xc], 0x13
jmp 0x41c85a
mov rax, qword [rbp - 0x38]
cmp rax, 0x20000000
je 0x41c82e
mov edx, 0x80000000
cmp rax, rdx
je 0x41c837
cmp rax, 0x10000000
je 0x41c825
jmp 0x41c83f
mov dword [rbp - 0xc], 0x15
jmp 0x41c83f
mov dword [rbp - 0xc], 0x16
jmp 0x41c83f
mov dword [rbp - 0xc], 0x17
nop
jmp 0x41c85e
cmp qword [rbp - 0x38], 0x10000000
jne 0x41c85d
mov dword [rbp - 0xc], 0x19
jmp 0x41c85d
nop
jmp 0x41c85e
nop
jmp 0x41c85e
nop
jmp 0x41c85e
nop
cmp dword [rbp - 0xc], 0xffffffff
je 0x41c904
mov eax, dword [rbp - 0x2c]
lea rdx, [rax + 4]
lea rax, [0x004a8480]
add rax, rdx
cmp qword [rbp - 8], rax
je 0x41c8bf
cmp dword [rbp - 0x10], 0xb
ja 0x41c89d
lea rcx, str.Internal_error:_not_enough_buffer_room_for_section_flag_info
call fcn.0045d7fb
lea rax, [0x00489b2d]
jmp 0x41cd85
sub dword [rbp - 0x10], 2
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x2c
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x20
mov eax, dword [rbp - 0xc]
cdqe
shl rax, 4
mov rdx, rax
lea rax, [0x00492088]
mov eax, dword [rdx + rax]
sub dword [rbp - 0x10], eax
mov eax, dword [rbp - 0xc]
cdqe
shl rax, 4
mov rdx, rax
lea rax, str.WRITE
mov rdx, qword [rdx + rax]
mov rax, qword [rbp - 8]
mov rcx, rax
call fcn.004643d0
mov qword [rbp - 8], rax
jmp 0x41cb72
mov rax, qword [rbp - 0x38]
and eax, 0xff00000
test rax, rax
je 0x41c91f
mov rax, qword [rbp - 0x38]
or qword [rbp - 0x18], rax
jmp 0x41cb72
mov rax, qword [rbp - 0x38]
and eax, 0xf0000000
test rax, rax
je 0x41c93a
mov rax, qword [rbp - 0x38]
or qword [rbp - 0x20], rax
jmp 0x41cb72
mov rax, qword [rbp - 0x38]
or qword [rbp - 0x28], rax
jmp 0x41cb72
mov rax, qword [rbp - 0x38]
cmp rax, 0x80
je 0x41ca4f
cmp rax, 0x80
ja 0x41c9ab
cmp rax, 4
je 0x41ca1f
cmp rax, 4
ja 0x41c988
cmp rax, 1
je 0x41ca07
cmp rax, 2
je 0x41ca13
jmp 0x41caa3
cmp rax, 0x20
je 0x41ca37
cmp rax, 0x40
je 0x41ca43
cmp rax, 0x10
je 0x41ca2b
jmp 0x41caa3
cmp rax, 0x400
je 0x41ca73
cmp rax, 0x400
ja 0x41c9dc
cmp rax, 0x100
je 0x41ca5b
cmp rax, 0x200
je 0x41ca67
jmp 0x41caa3
cmp rax, 0x1000000
je 0x41ca97
mov edx, 0x80000000
cmp rax, rdx
je 0x41ca7f
cmp rax, 0x800
je 0x41ca8b
jmp 0x41caa3
mov rax, qword [rbp - 8]
mov byte [rax], 0x57
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x41
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x58
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x4d
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x53
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x49
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x4c
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x4f
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x47
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x54
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x45
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x43
jmp 0x41cb6d
mov rax, qword [rbp - 8]
mov byte [rax], 0x44
jmp 0x41cb6d
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0x3e
je 0x41cacd
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0xb4
je 0x41cacd
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0xb5
jne 0x41cae3
cmp qword [rbp - 0x38], 0x10000000
jne 0x41cae3
mov rax, qword [rbp - 8]
mov byte [rax], 0x6c
jmp 0x41cb6c
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0x28
jne 0x41cb04
cmp qword [rbp - 0x38], 0x20000000
jne 0x41cb04
mov rax, qword [rbp - 8]
mov byte [rax], 0x79
jmp 0x41cb6c
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0x14
jne 0x41cb25
cmp qword [rbp - 0x38], 0x10000000
jne 0x41cb25
mov rax, qword [rbp - 8]
mov byte [rax], 0x76
jmp 0x41cb6c
mov rax, qword [rbp - 0x38]
and eax, 0xff00000
test rax, rax
je 0x41cb44
mov rax, qword [rbp - 8]
mov byte [rax], 0x6f
and qword [rbp + 0x18], 0xfffffffff00fffff
jmp 0x41cb6c
mov rax, qword [rbp - 0x38]
and eax, 0xf0000000
test rax, rax
je 0x41cb63
mov rax, qword [rbp - 8]
mov byte [rax], 0x70
and qword [rbp + 0x18], 0xfffffff
jmp 0x41cb6c
mov rax, qword [rbp - 8]
mov byte [rax], 0x78
jmp 0x41cb6c
nop
add qword [rbp - 8], 1
cmp qword [rbp + 0x18], 0
jne 0x41c4ee
mov eax, dword [0x004a838c]
test eax, eax
je 0x41cd77
cmp qword [rbp - 0x18], 0
je 0x41cc30
mov eax, dword [rbp - 0x10]
sub eax, dword [rbp - 0x2c]
sub eax, 5
mov dword [rbp - 0x10], eax
mov eax, dword [rbp - 0x2c]
lea rdx, [rax + 4]
lea rax, [0x004a8480]
add rax, rdx
cmp qword [rbp - 8], rax
je 0x41cbf9
cmp dword [rbp - 0x10], 2
ja 0x41cbd7
lea rcx, str.Internal_error:_not_enough_buffer_room_for_section_flag_info
call fcn.0045d7fb
lea rax, [0x00489b2d]
jmp 0x41cd85
sub dword [rbp - 0x10], 2
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x2c
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x20
mov rax, qword [rbp - 0x18]
mov r8d, eax
mov ecx, dword [rbp - 0x2c]
mov edx, dword [rbp - 0x2c]
mov rax, qword [rbp - 8]
mov dword [rsp + 0x20], r8d
mov r9d, ecx
mov r8d, edx
lea rdx, str.OS___.lx_
mov rcx, rax
call sub.msvcrt.dll_sprintf
mov eax, dword [rbp - 0x2c]
add eax, 5
mov eax, eax
add qword [rbp - 8], rax
cmp qword [rbp - 0x20], 0
je 0x41ccd5
mov eax, dword [rbp - 0x10]
sub eax, dword [rbp - 0x2c]
sub eax, 7
mov dword [rbp - 0x10], eax
mov eax, dword [rbp - 0x2c]
lea rdx, [rax + 4]
lea rax, [0x004a8480]
add rax, rdx
cmp qword [rbp - 8], rax
je 0x41cc9e
cmp dword [rbp - 0x10], 2
ja 0x41cc7c
lea rcx, str.Internal_error:_not_enough_buffer_room_for_section_flag_info
call fcn.0045d7fb
lea rax, [0x00489b2d]
jmp 0x41cd85
sub dword [rbp - 0x10], 2
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x2c
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x20
mov rax, qword [rbp - 0x20]
mov r8d, eax
mov ecx, dword [rbp - 0x2c]
mov edx, dword [rbp - 0x2c]
mov rax, qword [rbp - 8]
mov dword [rsp + 0x20], r8d
mov r9d, ecx
mov r8d, edx
lea rdx, str.PROC___.lx_
mov rcx, rax
call sub.msvcrt.dll_sprintf
mov eax, dword [rbp - 0x2c]
add eax, 7
mov eax, eax
add qword [rbp - 8], rax
cmp qword [rbp - 0x28], 0
je 0x41cd77
mov eax, dword [rbp - 0x10]
sub eax, dword [rbp - 0x2c]
sub eax, 0xa
mov dword [rbp - 0x10], eax
mov eax, dword [rbp - 0x2c]
lea rdx, [rax + 4]
lea rax, [0x004a8480]
add rax, rdx
cmp qword [rbp - 8], rax
je 0x41cd40
cmp dword [rbp - 0x10], 2
ja 0x41cd1e
lea rcx, str.Internal_error:_not_enough_buffer_room_for_section_flag_info
call fcn.0045d7fb
lea rax, [0x00489b2d]
jmp 0x41cd85
sub dword [rbp - 0x10], 2
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x2c
mov rax, qword [rbp - 8]
lea rdx, [rax + 1]
mov qword [rbp - 8], rdx
mov byte [rax], 0x20
mov rax, qword [rbp - 0x28]
mov r8d, eax
mov ecx, dword [rbp - 0x2c]
mov edx, dword [rbp - 0x2c]
mov rax, qword [rbp - 8]
mov dword [rsp + 0x20], r8d
mov r9d, ecx
mov r8d, edx
lea rdx, str.UNKNOWN___.lx_
mov rcx, rax
call sub.msvcrt.dll_sprintf
mov eax, dword [rbp - 0x2c]
add eax, 0xa
mov eax, eax
add qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov byte [rax], 0
lea rax, [0x004a8480]
add rsp, 0x70
pop rbp
ret