Function at 0x420000
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push str.KERNEL32.DLL
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [ebp + 8]
test eax, eax
je 0x420050
push str.GetProductInfo
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x420050
lea ecx, [ebp - 4]
push ecx
movzx ecx, word [esi + 0x12e]
push ecx
movzx ecx, word [esi + 0x12c]
push ecx
push dword [esi + 0x9c]
push dword [esi + 0x98]
call eax
mov eax, dword [ebp - 4]
dec eax
cmp eax, 0x81
ja case.0x42005f.51
jmp dword [eax*4 + 0x420800]
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x1000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x10000000
or dword [esi + 0x134], 0x8800
jmp case.0x42005f.51
or dword [esi + 0x130], 0x10000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x1800000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x1000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x2800000
or dword [esi + 0x134], 0x8000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x2000000
or dword [esi + 0x134], 0x8000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x8800000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x8000000
jmp case.0x42005f.51
or dword [esi + 0x130], 2
or dword [esi + 0x134], 0x4000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800002
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800002
or dword [esi + 0x134], 0x4000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x400000
jmp case.0x42005f.51
or dword [esi + 0x130], 0xc00000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x24000020
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20000020
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000020
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000020
or dword [esi + 0x134], 0x4000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x24000002
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20000002
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000002
jmp case.0x42005f.51
mov dword [esi + 0xa8], 5
or dword [esi + 0x130], 2
jmp case.0x42005f.51
or dword [esi + 0x130], 0x24000000
or dword [esi + 0x134], 0x20
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20000000
or dword [esi + 0x134], 0x20
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000000
or dword [esi + 0x134], 0x20
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000000
or dword [esi + 0x134], 0x4020
jmp case.0x42005f.51
or dword [esi + 0x134], 0x400
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20000080
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80
jmp case.0x42005f.51
or dword [esi + 0x130], 0x10000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x40000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80000000
jmp case.0x42005f.51
or dword [esi + 0x134], 1
jmp case.0x42005f.51
or dword [esi + 0x134], 2
jmp case.0x42005f.51
or dword [esi + 0x134], 2
or dword [esi + 0x130], 0x4000000
jmp case.0x42005f.51
or dword [esi + 0x130], 1
jmp case.0x42005f.51
or dword [esi + 0x130], 1
or dword [esi + 0x134], 0x8004
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20000001
or dword [esi + 0x134], 0x8004
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20080002
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80002
jmp case.0x42005f.51
or dword [esi + 0x134], 8
or dword [esi + 0x130], 0x20080000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 8
jmp case.0x42005f.51
or dword [esi + 0x134], 0x20
or dword [esi + 0x130], 0x20080000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20080000
or dword [esi + 0x134], 0x4020
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x20
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20080000
or dword [esi + 0x134], 0x10
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x10
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x134], 0x4010
jmp case.0x42005f.51
or dword [esi + 0x130], 2
or dword [esi + 0x134], 0x40
jmp case.0x42005f.51
or dword [esi + 0x130], 0x1000000
or dword [esi + 0x134], 0x40
jmp case.0x42005f.51
or dword [esi + 0x130], 0x2000000
or dword [esi + 0x134], 0x8040
jmp case.0x42005f.51
or dword [esi + 0x134], 0xc0
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x80
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000001
jmp case.0x42005f.51
or dword [esi + 0x134], 0x100
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x200
jmp case.0x42005f.51
or dword [esi + 0x134], 0x220
jmp case.0x42005f.51
or dword [esi + 0x134], 0x18200
jmp case.0x42005f.51
or dword [esi + 0x130], 0x20000100
or dword [esi + 0x134], 0x200
jmp case.0x42005f.51
or dword [esi + 0x130], 0x10000
or dword [esi + 0x134], 0x40
jmp case.0x42005f.51
or dword [esi + 0x130], 0x810000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x400000
or dword [esi + 0x134], 0x40
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x2000
jmp case.0x42005f.51
or dword [esi + 0x134], 0x2000
mov dword [esi + 0xa8], 9
jmp case.0x42005f.51
or dword [esi + 0x134], 0x20000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x40000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x2000000
jmp case.0x42005f.51
mov dword [esi + 0xa8], 9
or dword [esi + 0x134], 0x4000000
jmp case.0x42005f.51
or dword [esi + 0x134], 0x4080000
jmp case.0x42005f.51
or dword [esi + 0x134], 0x4100000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x4000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x4000
or dword [esi + 0x134], 0x80
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x80
jmp case.0x42005f.51
or dword [esi + 0x134], 0x14000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x2004000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x2004040
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x4000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x100
or dword [esi + 0x134], 0x4040
jmp case.0x42005f.51
or dword [esi + 0x134], 0x80000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x80000
or dword [esi + 0x138], 1
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x800000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x8000080
jmp case.0x42005f.51
or dword [esi + 0x134], 0x900000
jmp case.0x42005f.51
or dword [esi + 0x134], 0x880000
jmp case.0x42005f.51
or dword [esi + 0x138], 8
jmp case.0x42005f.51
or dword [esi + 0x134], 0x2000000
or dword [esi + 0x138], 0x10
jmp case.0x42005f.51
or dword [esi + 0x138], 4
jmp case.0x42005f.51
or dword [esi + 0x138], 2
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x1000000
jmp case.0x42005f.51
or dword [esi + 0x134], 0x20000000
jmp case.0x42005f.51
or dword [esi + 0x138], 0x20
jmp case.0x42005f.51
or dword [esi + 0x130], 2
or dword [esi + 0x134], 0x40000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800002
or dword [esi + 0x134], 0x40000000
jmp case.0x42005f.51
or dword [esi + 0x130], 0x800000
or dword [esi + 0x134], 0x40000080
jmp case.0x42005f.51
or dword [esi + 0x130], 2
jmp 0x4207ae
or dword [esi + 0x130], 0x800002
or dword [esi + 0x134], 0x40004000
cmp dword [esi + 0xa4], 4
jne 0x4207f8
cmp dword [esi + 0x98], 5
jne 0x4207f8
cmp dword [esi + 0x9c], 0
jne 0x4207dc
cmp dword [esi + 0x13c], 1
jmp 0x4207ec
cmp dword [esi + 0x13c], 1
jne 0x4207f8
test byte [esi + 0x130], 0x40
jne 0x4207f8
or dword [esi + 0x134], 0x80
pop esi
mov esp, ebp
pop ebp
ret 4