Function at 0x4022a4
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [esp], eax
call fcn.00412e48
mov dword [ebp - 0x20], eax
mov eax, dword [0x417338]
cmp dword [eax + 0xb4], 0
je 0x40230d
mov dword [esp + 4], 0x416040
mov dword [esp], 1
call dword [eax + 0x11c]
mov dword [ebp - 0x1c], eax
push edx
push edx
test eax, eax
jne 0x402314
mov eax, dword [0x417338]
mov eax, dword [eax + 0x4ca]
mov eax, dword [eax + 0x34]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.0040ee8c
jmp 0x4024af
mov dword [ebp - 0x1c], 0
xor esi, esi
mov eax, dword [ebx + 4]
cmp word [eax + 2], si
jbe 0x4023e2
movzx edi, si
mov edx, dword [ebx]
imul eax, edi, 0x28
lea eax, [edx + eax + 0x14]
cmp dword [eax + 0x10], 0
mov dword [ebx + 8], eax
jne 0x40233b
inc esi
jmp 0x402316
mov edx, dword [eax + 0x24]
mov eax, 1
mov ecx, edx
and ecx, 0xe0000000
je 0x4023a1
mov eax, 0x10
cmp ecx, 0x20000000
je 0x4023a1
mov eax, 2
cmp ecx, 0x40000000
je 0x4023a1
mov eax, 0x20
cmp ecx, 0x60000000
je 0x4023a1
mov eax, 8
cmp ecx, 0x80000000
je 0x4023a1
mov eax, pe_nt_image_headers32
cmp ecx, 0xa0000000
je 0x4023a1
cmp ecx, 0xc0000000
mov eax, 0x40
mov ecx, 4
cmove eax, ecx
bt edx, 0x1a
jae 0x4023aa
or ah, 2
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x10], eax
lea edx, [edx + edi*8]
mov eax, dword [edx + 4]
mov dword [esp + 0xc], eax
mov eax, dword [edx]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.0040e69c
test eax, eax
jne 0x402338
jmp 0x4024af
mov eax, dword [ebx + 0x28]
test eax, eax
jne 0x4023ed
xor edi, edi
jmp 0x40241e
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.0040e69c
test eax, eax
jne 0x4023e9
jmp 0x4024af
inc edi
mov eax, dword [ebx + 4]
mov edx, dword [eax + 0xc]
cmp edx, edi
jbe 0x402473
imul esi, edi, 0x12
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi]
cmp dword [eax], 0
jne 0x402440
imul edx, edx, 0x12
add edx, dword [eax + 4]
mov eax, edx
add eax, ecx
cmp byte [eax], 0x5f
jne 0x402446
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
call fcn.0040e30c
test eax, eax
jne 0x40241d
add esi, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x20]
movzx eax, word [esi + 0xc]
mov edx, dword [esi + 8]
add edx, dword [ecx + eax*8 - 8]
jne 0x4024b3
mov eax, dword [ebp + 0x18]
mov dword [esp], 0x14
mov dword [esp + 4], eax
call fcn.0040ec0c
mov dword [esp + 4], 2
mov dword [esp], eax
mov ebx, eax
call fcn.0040e998
mov eax, dword [ebp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040eac0
mov dword [esp], ebx
call fcn.0040ec94
xor eax, eax
jmp 0x40251a
mov eax, dword [ebx + 4]
mov di, word [eax + 2]
xor eax, eax
jmp 0x4024c6
mov esi, dword [ecx + eax*8]
cmp esi, edx
jbe 0x4024cd
inc eax
cmp di, ax
ja 0x4024be
jmp 0x4024af
add esi, dword [ecx + eax*8 + 4]
cmp edx, esi
jae 0x4024c5
imul eax, eax, 0x28
mov ecx, dword [ebx]
lea eax, [ecx + eax + 0x14]
mov dword [ebx + 8], eax
test byte [eax + 0x27], 0x20
je 0x4024af
mov eax, dword [ebp + 0x14]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
call fcn.00402524
cmp dword [ebp - 0x1c], 0
je 0x402515
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [0x417338]
call dword [eax + 0x120]
push eax
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret