Function at 0x425f4b
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push edi
mov edi, ecx
mov ebx, edx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], edi
mov eax, dword [edi + 0xc]
test dword [edi + 8], eax
je 0x425f70
mov eax, 0x80070057
jmp 0x4265aa
mov eax, dword [edi + 4]
test eax, eax
jns 0x425ff5
cmp eax, 0x80000000
jne 0x425f9b
mov edx, dword [ebx + 0xc]
shl edx, 9
push 1
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x16
xor eax, dword [ebx + 0xc]
and eax, 0x400000
jmp 0x425fe1
cmp eax, 0x80000001
jne 0x425fbf
mov edx, dword [ebx + 0xc]
shl edx, 7
push 1
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x18
xor eax, dword [ebx + 0xc]
and eax, 0x1000000
jmp 0x425fe1
cmp eax, reloc.OLEAUT32.dll_SysReAllocString
jne 0x425feb
mov edx, dword [ebx + 0xc]
shl edx, 6
push 1
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x19
xor eax, dword [ebx + 0xc]
and eax, 0x2000000
xor dword [ebx + 0xc], eax
xor ecx, ecx
jmp 0x4265a8
mov ecx, 0x80070057
jmp 0x4265a8
dec eax
push esi
cmp eax, 0xb
ja case.default.0x426000
jmp dword [eax*4 + 0x4265b3]
mov edx, dword [ebx]
not edx
and edx, 0x10000000
push 1
shr edx, 0x1c
call fcn.00425f26
mov ecx, dword [ebx]
neg eax
mov edx, dword [ebx + 8]
sbb eax, eax
and ecx, 0xefffffff
inc eax
shl edx, 0x1e
shl eax, 0x1c
or eax, ecx
sar edx, 0x1f
push 2
mov ecx, edi
mov dword [ebp - 8], eax
mov dword [ebx], eax
call fcn.00425f26
add eax, eax
xor eax, dword [ebx + 8]
and eax, 2
xor dword [ebx + 8], eax
mov edx, dword [ebx + 8]
shl edx, 0x1f
push 4
sar edx, 0x1f
call fcn.00425f26
mov esi, eax
xor esi, dword [ebx + 8]
and esi, 1
xor esi, dword [ebx + 8]
mov edx, esi
mov dword [ebx + 8], esi
not edx
and edx, 8
push 8
shr edx, 3
call fcn.00425f26
neg eax
push 0x10
sbb edi, edi
and esi, 0xfffffff7
and edi, 0xfffffff8
add edi, 8
or edi, esi
mov edx, edi
mov dword [ebx + 8], edi
not edx
and edx, 4
shr edx, 2
call fcn.00425f26
neg eax
mov edx, 0x40000000
sbb eax, eax
and edi, 0xfffffffb
and eax, 0xfffffffc
xor ecx, ecx
add eax, 4
or eax, edi
mov dword [ebx + 8], eax
test al, 3
je 0x4260c0
mov edx, ecx
mov eax, dword [ebp - 8]
and eax, 0xbfffffff
or eax, edx
mov dword [ebx], eax
jmp 0x4265a7
mov esi, dword [ebx]
mov edx, esi
not edx
and edx, 0x20000000
push 1
shr edx, 0x1d
call fcn.00425f26
neg eax
sbb eax, eax
inc eax
shl eax, 0x1d
and esi, 0xdfffffff
or eax, esi
mov dword [ebx], eax
xor ecx, ecx
jmp 0x4265a7
mov edx, dword [ebx]
shl edx, 6
push 1
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x19
xor eax, dword [ebx]
and eax, 0x2000000
xor dword [ebx], eax
jmp 0x4260f9
mov esi, dword [ebx]
mov edx, esi
not edx
and edx, 0x4000000
push 1
shr edx, 0x1a
call fcn.00425f26
neg eax
sbb eax, eax
inc eax
shl eax, 0x1a
and esi, 0xfbffffff
jmp 0x4260f5
mov esi, dword [ebx]
mov edx, esi
not edx
and edx, 0x8000000
push 1
shr edx, 0x1b
call fcn.00425f26
neg eax
sbb eax, eax
inc eax
shl eax, 0x1b
and esi, 0xf7ffffff
jmp 0x4260f5
mov esi, dword [ebx]
mov edx, esi
not edx
push 1
and edx, 1
call fcn.00425f26
mov edx, dword [ebx + 0x10]
neg eax
push 2
sbb eax, eax
and esi, 0xfffffffe
inc eax
shl edx, 0x1d
or eax, esi
sar edx, 0x1f
mov dword [ebx], eax
call fcn.00425f26
shl eax, 2
xor eax, dword [ebx + 0x10]
and eax, 4
xor dword [ebx + 0x10], eax
jmp 0x4260f9
mov esi, dword [ebx]
mov edx, esi
not edx
and edx, 0x10000
push 1
shr edx, 0x10
call fcn.00425f26
neg eax
sbb eax, eax
inc eax
shl eax, 0x10
and esi, 0xfffeffff
jmp 0x4260f5
mov edx, dword [ebx + 0xc]
not edx
push 1
and edx, 1
call fcn.00425f26
mov ecx, dword [ebx + 0xc]
neg eax
push 0x20
sbb esi, esi
and ecx, 0xfffffffe
inc esi
or esi, ecx
mov ecx, edi
mov edx, esi
mov dword [ebx + 0xc], esi
not edx
and edx, 2
shr edx, 1
call fcn.00425f26
neg eax
push 0x40
sbb edi, edi
and esi, 0xfffffffd
and edi, 0xfffffffe
add edi, 2
or edi, esi
mov edx, edi
mov dword [ebx + 0xc], edi
not edx
and edx, 4
shr edx, 2
call fcn.00425f26
neg eax
push 0x80
sbb esi, esi
and edi, 0xfffffffb
and esi, 0xfffffffc
add esi, 4
or esi, edi
mov edx, esi
mov dword [ebx + 0xc], esi
not edx
and edx, 8
shr edx, 3
call fcn.00425f26
neg eax
push 2
sbb edi, edi
and esi, 0xfffffff7
and edi, 0xfffffff8
add edi, 8
or edi, esi
mov edx, edi
mov dword [ebx + 0xc], edi
not edx
and edx, 0x10
shr edx, 4
call fcn.00425f26
neg eax
push 4
sbb esi, esi
and edi, 0xffffffef
and esi, 0xfffffff0
add esi, 0x10
or esi, edi
mov edx, esi
mov dword [ebx + 0xc], esi
not edx
and edx, 0x20
shr edx, 5
call fcn.00425f26
neg eax
push 8
sbb edi, edi
and esi, 0xffffffdf
and edi, 0xffffffe0
add edi, 0x20
or edi, esi
mov edx, edi
mov dword [ebx + 0xc], edi
not edx
and edx, 0x40
shr edx, 6
call fcn.00425f26
neg eax
push 0x10
sbb esi, esi
and edi, 0xffffffbf
and esi, 0xffffffc0
add esi, 0x40
or esi, edi
mov edx, esi
mov dword [ebx + 0xc], esi
not edx
and edx, 0x80
shr edx, 7
call fcn.00425f26
neg eax
push pe_nt_image_headers32
sbb edi, edi
and esi, 0xffffff7f
and edi, 0xffffff80
sub edi, 0xffffff80
or edi, esi
mov edx, edi
mov dword [ebx + 0xc], edi
shl edx, 0x17
sar edx, 0x1f
call fcn.00425f26
mov esi, eax
shl esi, 8
xor esi, edi
and esi, 0x100
xor esi, edi
mov edx, esi
mov dword [ebx + 0xc], esi
shl edx, 0x16
push 0x200
sar edx, 0x1f
call fcn.00425f26
mov edi, eax
shl edi, 9
xor edi, esi
and edi, 0x200
xor edi, esi
mov esi, 0x400
mov edx, edi
mov dword [ebx + 0xc], edi
shl edx, 0x15
push esi
sar edx, 0x1f
call fcn.00425f26
mov ebx, eax
shl ebx, 0xa
xor ebx, edi
and ebx, esi
xor ebx, edi
mov edi, dword [ebp - 8]
mov edx, ebx
shl edx, 0x14
sar edx, 0x1f
mov dword [edi + 0xc], ebx
mov edi, 0x800
push edi
call fcn.00425f26
mov esi, eax
shl esi, 0xb
xor esi, ebx
and esi, edi
xor esi, ebx
mov ebx, dword [ebp - 8]
mov edx, esi
shl edx, 0x12
push 0x40000000
sar edx, 0x1f
mov dword [ebx + 0xc], esi
call fcn.00425f26
mov edi, eax
shl edi, 0xd
xor edi, esi
and edi, 0x2000
xor edi, esi
mov edx, edi
mov dword [ebx + 0xc], edi
shl edx, 0x13
push SysReAllocString
sar edx, 0x1f
call fcn.00425f26
mov esi, eax
shl esi, 0xc
xor esi, edi
and esi, 0x1000
xor esi, edi
mov edx, esi
mov dword [ebx + 0xc], esi
shl edx, 0x11
push 0x10000000
sar edx, 0x1f
call fcn.00425f26
shl eax, 0xe
xor eax, esi
and eax, 0x4000
xor eax, esi
mov dword [ebx + 0xc], eax
jmp 0x4260f9
mov edx, dword [ebx + 0xc]
not edx
and edx, 0x40000
push 1
shr edx, 0x12
call fcn.00425f26
mov ecx, dword [ebx + 0xc]
neg eax
push 2
sbb edi, edi
and ecx, 0xfffbffff
inc edi
shl edi, 0x12
or edi, ecx
mov ecx, dword [ebp - 4]
mov edx, edi
mov dword [ebx + 0xc], edi
not edx
and edx, 0x80000
shr edx, 0x13
call fcn.00425f26
neg eax
push 4
sbb esi, esi
and edi, 0xfff7ffff
inc esi
shl esi, 0x13
or esi, edi
mov edx, esi
mov dword [ebx + 0xc], esi
shl edx, 0xb
sar edx, 0x1f
call fcn.00425f26
mov edx, dword [ebx + 0x10]
shl eax, 0x14
xor eax, esi
shl edx, 0x1c
and eax, 0x100000
sar edx, 0x1f
xor eax, esi
push 8
mov dword [ebx + 0xc], eax
call fcn.00425f26
shl eax, 3
xor eax, dword [ebx + 0x10]
and eax, 8
jmp 0x42619e
mov esi, dword [ebx + 0xc]
mov edx, esi
shl edx, 0xa
push 1
sar edx, 0x1f
call fcn.00425f26
neg eax
sbb eax, eax
and esi, 0xffdfffff
inc eax
shl eax, 0x15
or eax, esi
jmp 0x4263e3
mov edx, dword [ebx + 0xc]
shl edx, 8
push 1
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x17
xor eax, dword [ebx + 0xc]
and eax, 0x800000
xor dword [ebx + 0xc], eax
jmp 0x4260f9
mov edx, dword [ebx + 0xc]
shl edx, 5
push 1
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x1a
xor eax, dword [ebx + 0xc]
and eax, 0x4000000
xor dword [ebx + 0xc], eax
mov edx, dword [ebx + 0xc]
shl edx, 4
push 2
sar edx, 0x1f
call fcn.00425f26
mov esi, eax
shl esi, 0x1b
xor esi, dword [ebx + 0xc]
and esi, 0x8000000
xor esi, dword [ebx + 0xc]
mov edx, esi
mov dword [ebx + 0xc], esi
not edx
and edx, 0x10000000
push 4
shr edx, 0x1c
call fcn.00425f26
neg eax
push 8
sbb edi, edi
and esi, 0xefffffff
inc edi
shl edi, 0x1c
or edi, esi
mov edx, edi
mov dword [ebx + 0xc], edi
not edx
and edx, 0x20000000
shr edx, 0x1d
call fcn.00425f26
neg eax
push 0x10
sbb ebx, ebx
and edi, 0xdfffffff
inc ebx
shl ebx, 0x1d
or ebx, edi
mov edi, dword [ebp - 8]
mov edx, ebx
not edx
and edx, 0x40000000
shr edx, 0x1e
mov dword [edi + 0xc], ebx
call fcn.00425f26
neg eax
push 0x400
sbb esi, esi
and ebx, 0xbfffffff
inc esi
shl esi, 0x1e
or esi, ebx
mov edx, esi
mov dword [edi + 0xc], esi
sar edx, 0x1f
call fcn.00425f26
shl eax, 0x1f
and esi, 0x7fffffff
or eax, esi
mov dword [edi + 0xc], eax
jmp 0x4260f9
mov ecx, 0x80070057
pop esi
mov eax, ecx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret