Function at 0x638422a4
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [esp], eax
call fcn.63852eb8
mov dword [ebp - 0x20], eax
mov eax, dword [0x63857358]
cmp dword [eax + 0xb4], 0
je 0x6384230d
mov dword [esp + 4], 0x638560b0
mov dword [esp], 1
call dword [eax + 0x11c]
mov dword [ebp - 0x1c], eax
push edx
push edx
test eax, eax
jne 0x63842314
mov eax, dword [0x63857358]
mov eax, dword [eax + 0x4ca]
mov eax, dword [eax + 0x34]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.6384eef4
jmp 0x638424af
mov dword [ebp - 0x1c], 0
xor esi, esi
mov eax, dword [ebx + 4]
cmp word [eax + 2], si
jbe 0x638423e2
movzx edi, si
mov edx, dword [ebx]
imul eax, edi, 0x28
lea eax, [edx + eax + 0x14]
cmp dword [eax + 0x10], 0
mov dword [ebx + 8], eax
jne 0x6384233b
inc esi
jmp 0x63842316
mov edx, dword [eax + 0x24]
mov eax, 1
mov ecx, edx
and ecx, 0xe0000000
je 0x638423a1
mov eax, 0x10
cmp ecx, 0x20000000
je 0x638423a1
mov eax, 2
cmp ecx, 0x40000000
je 0x638423a1
mov eax, 0x20
cmp ecx, 0x60000000
je 0x638423a1
mov eax, 8
cmp ecx, 0x80000000
je 0x638423a1
mov eax, pe_nt_image_headers32
cmp ecx, 0xa0000000
je 0x638423a1
cmp ecx, 0xc0000000
mov eax, 0x40
mov ecx, 4
cmove eax, ecx
bt edx, 0x1a
jae 0x638423aa
or ah, 2
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x10], eax
lea edx, [edx + edi*8]
mov eax, dword [edx + 4]
mov dword [esp + 0xc], eax
mov eax, dword [edx]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.6384e704
test eax, eax
jne 0x63842338
jmp 0x638424af
mov eax, dword [ebx + 0x28]
test eax, eax
jne 0x638423ed
xor edi, edi
jmp 0x6384241e
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.6384e704
test eax, eax
jne 0x638423e9
jmp 0x638424af
inc edi
mov eax, dword [ebx + 4]
mov edx, dword [eax + 0xc]
cmp edx, edi
jbe 0x63842473
imul esi, edi, 0x12
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi]
cmp dword [eax], 0
jne 0x63842440
imul edx, edx, 0x12
add edx, dword [eax + 4]
mov eax, edx
add eax, ecx
cmp byte [eax], 0x5f
jne 0x63842446
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
call fcn.6384e374
test eax, eax
jne 0x6384241d
add esi, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x20]
movzx eax, word [esi + 0xc]
mov edx, dword [esi + 8]
add edx, dword [ecx + eax*8 - 8]
jne 0x638424b3
mov eax, dword [ebp + 0x18]
mov dword [esp], 0x14
mov dword [esp + 4], eax
call fcn.6384ec74
mov dword [esp + 4], 2
mov dword [esp], eax
mov ebx, eax
call fcn.6384ea00
mov eax, dword [ebp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.6384eb28
mov dword [esp], ebx
call fcn.6384ecfc
xor eax, eax
jmp 0x6384251a
mov eax, dword [ebx + 4]
mov di, word [eax + 2]
xor eax, eax
jmp 0x638424c6
mov esi, dword [ecx + eax*8]
cmp esi, edx
jbe 0x638424cd
inc eax
cmp di, ax
ja 0x638424be
jmp 0x638424af
add esi, dword [ecx + eax*8 + 4]
cmp edx, esi
jae 0x638424c5
imul eax, eax, 0x28
mov ecx, dword [ebx]
lea eax, [ecx + eax + 0x14]
mov dword [ebx + 8], eax
test byte [eax + 0x27], 0x20
je 0x638424af
mov eax, dword [ebp + 0x14]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
call fcn.63842524
cmp dword [ebp - 0x1c], 0
je 0x63842515
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [0x63857358]
call dword [eax + 0x120]
push eax
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret