Function at 0x4029c0
Capabilities:
Inspect section memory permissions

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x403195
push rbp
mov rbp, rsp
sub rsp, 0x58
lea rax, [0x004c6900]
call fcn.0040db40
mov qword [rax + 8], 3
lea rcx, [0x004e5532]
mov qword [rax], rcx
lea rcx, [0x005e0101]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x28], 3
lea rcx, [0x004e5535]
mov qword [rax + 0x20], rcx
lea rcx, [0x005e0100]
mov qword [rax + 0x30], rcx
mov qword [rax + 0x48], 4
lea rcx, [0x004e5666]
mov qword [rax + 0x40], rcx
lea rcx, [0x005e0109]
mov qword [rax + 0x50], rcx
mov qword [rax + 0x68], 9
lea rcx, [0x004e6077]
mov qword [rax + 0x60], rcx
lea rcx, [0x005e010c]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x88], 6
lea rcx, [0x004e5946]
mov qword [rax + 0x80], rcx
lea rcx, [0x005e010e]
mov qword [rax + 0x90], rcx
mov qword [rax + 0xa8], 3
lea rcx, [0x004e5538]
mov qword [rax + 0xa0], rcx
lea rcx, [0x005e010f]
mov qword [rax + 0xb0], rcx
mov qword [0x005989e8], 6
mov qword [0x005989f0], 6
mov qword [0x005989e0], rax
call fcn.00403200
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov ecx, dword [rsp]
mov dword [rsp + 0x48], ecx
nop
cmp ecx, 2
jge 0x402c0f
mov rdx, qword [0x005989f0]
mov rbx, qword [0x005989e8]
add rbx, 5
mov rax, qword [0x005989e0]
cmp rdx, rbx
jae 0x402b2d
mov rcx, rdx
mov edi, 5
lea rsi, [0x004d9500]
call fcn.00468220
mov qword [0x005989f0], rcx
mov qword [0x005989e0], rax
mov ecx, dword [rsp + 0x48]
mov qword [0x005989e8], rbx
lea rdx, [rbx - 5]
shl rdx, 5
mov qword [rax + rdx + 8], 6
mov word [rax + rdx + 0x18], 0
lea r8, [0x004e594c]
mov qword [rax + rdx], r8
lea r8, [0x005e010d]
mov qword [rax + rdx + 0x10], r8
mov qword [rax + rdx + 0x28], 4
mov word [rax + rdx + 0x38], 0
lea r8, [0x004e566a]
mov qword [rax + rdx + 0x20], r8
lea r8, [0x005e0110]
mov qword [rax + rdx + 0x30], r8
mov qword [rax + rdx + 0x48], 5
mov word [rax + rdx + 0x58], 0
lea r8, [0x004e57c1]
mov qword [rax + rdx + 0x40], r8
lea r8, [0x005e0112]
mov qword [rax + rdx + 0x50], r8
mov qword [rax + rdx + 0x68], 5
mov word [rax + rdx + 0x78], 0
lea r8, [0x004e57c6]
mov qword [rax + rdx + 0x60], r8
lea r8, [0x005e0113]
mov qword [rax + rdx + 0x70], r8
mov qword [rax + rdx + 0x88], 5
mov word [rax + rdx + 0x98], 0
lea r8, [0x004e57cb]
mov qword [rax + rdx + 0x80], r8
lea r8, [0x005e0111]
mov qword [rax + rdx + 0x90], r8
cmp ecx, 3
jge 0x402d40
mov rdx, qword [0x005989f0]
mov rbx, qword [0x005989e8]
add rbx, 5
mov rax, qword [0x005989e0]
cmp rdx, rbx
jae 0x402c5c
mov rcx, rdx
mov edi, 5
lea rsi, [0x004d9500]
call fcn.00468220
mov qword [0x005989f0], rcx
mov qword [0x005989e0], rax
mov ecx, dword [rsp + 0x48]
mov qword [0x005989e8], rbx
lea rdx, [rbx - 5]
shl rdx, 5
mov qword [rax + rdx + 8], 3
mov word [rax + rdx + 0x18], 0
lea r8, [0x004e553b]
mov qword [rax + rdx], r8
lea r8, [0x005e0102]
mov qword [rax + rdx + 0x10], r8
mov qword [rax + rdx + 0x28], 4
mov word [rax + rdx + 0x38], 0
lea r8, [0x004e566e]
mov qword [rax + rdx + 0x20], r8
lea r8, [0x005e0103]
mov qword [rax + rdx + 0x30], r8
mov qword [rax + rdx + 0x48], 4
mov word [rax + rdx + 0x58], 0
lea r8, [0x004e5672]
mov qword [rax + rdx + 0x40], r8
lea r8, [0x005e0107]
mov qword [rax + rdx + 0x50], r8
mov qword [rax + rdx + 0x68], 4
mov word [rax + rdx + 0x78], 0
lea r8, [0x004e5676]
mov qword [rax + rdx + 0x60], r8
lea r8, [0x005e0108]
mov qword [rax + rdx + 0x70], r8
mov qword [rax + rdx + 0x88], 3
mov word [rax + rdx + 0x98], 0
lea r8, [0x004e553e]
mov qword [rax + rdx + 0x80], r8
lea r8, [0x005e010a]
mov qword [rax + rdx + 0x90], r8
nop
cmp ecx, 4
jge 0x402e0c
mov rcx, qword [0x005989f0]
mov rbx, qword [0x005989e8]
add rbx, 3
mov rax, qword [0x005989e0]
cmp rcx, rbx
jae 0x402d86
mov edi, 3
lea rsi, [0x004d9500]
call fcn.00468220
mov qword [0x005989f0], rcx
mov qword [0x005989e0], rax
mov qword [0x005989e8], rbx
lea rcx, [rbx - 3]
shl rcx, 5
mov qword [rax + rcx + 8], 7
mov word [rax + rcx + 0x18], 0
lea rdx, [0x004e5b25]
mov qword [rax + rcx], rdx
lea rdx, [0x005e0104]
mov qword [rax + rcx + 0x10], rdx
mov qword [rax + rcx + 0x28], 8
mov word [rax + rcx + 0x38], 0
lea rdx, [0x004e5d87]
mov qword [rax + rcx + 0x20], rdx
lea rdx, [0x005e0105]
mov qword [rax + rcx + 0x30], rdx
mov qword [rax + rcx + 0x48], 8
mov word [rax + rcx + 0x58], 0
lea rdx, [0x004e5d8f]
mov qword [rax + rcx + 0x40], rdx
lea rdx, [0x005e0106]
mov qword [rax + rcx + 0x50], rdx
mov qword [rsp], 0
call fcn.004031c0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 8]
test eax, eax
je 0x40318f
mov dword [rsp + 0x44], eax
mov eax, 0x80000000
mov qword [rsp], rax
call fcn.004031c0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 8]
mov dword [0x005df99c], eax
mov qword [rsp], 1
call fcn.004031c0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0x10]
mov dword [rsp + 0x4c], eax
mov ebx, 1
call fcn.004031a0
mov byte [0x005e0110], al
mov eax, dword [rsp + 0x4c]
mov ebx, 2
call fcn.004031a0
mov byte [0x005e010c], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x200
call fcn.004031a0
mov byte [0x005e0111], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x80000
call fcn.004031a0
mov byte [0x005e0112], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x100000
call fcn.004031a0
mov byte [0x005e0113], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x800000
call fcn.004031a0
mov byte [0x005e010d], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x2000000
call fcn.004031a0
mov byte [0x005e0100], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x8000000
nop dword [rax]
call fcn.004031a0
mov byte [0x005e010b], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x1000
call fcn.004031a0
test al, al
je 0x402f46
movzx ecx, byte [0x005e010b]
jmp 0x402f48
xor ecx, ecx
mov byte [0x005e010a], cl
cmp byte [0x005e010b], 0
jne 0x402f65
xor eax, eax
xor ecx, ecx
nop dword [rax + rax]
jmp 0x403002
call fcn.004031e0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x54], eax
mov ebx, 2
call fcn.004031a0
test al, al
jne 0x402f95
xor eax, eax
jmp 0x402fa5
mov eax, dword [rsp + 0x54]
mov ebx, 4
nop
call fcn.004031a0
mov byte [rsp + 0x43], al
test al, al
jne 0x402fb1
xor ecx, ecx
jmp 0x402fc6
mov eax, dword [rsp + 0x54]
mov ebx, 0x20
call fcn.004031a0
mov ecx, eax
movzx eax, byte [rsp + 0x43]
test cl, cl
jne 0x402fce
xor ecx, ecx
jmp 0x403002
mov eax, dword [rsp + 0x54]
mov ebx, 0x40
call fcn.004031a0
nop dword [rax]
test al, al
jne 0x402fed
movzx eax, byte [rsp + 0x43]
xor ecx, ecx
jmp 0x403002
mov eax, dword [rsp + 0x54]
mov ebx, pe_nt_image_headers64
call fcn.004031a0
mov ecx, eax
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0x42], cl
mov byte [rsp + 0x43], al
mov ebx, 0x10000000
mov eax, dword [rsp + 0x4c]
call fcn.004031a0
movzx ecx, byte [rsp + 0x43]
and eax, ecx
mov byte [0x005e0102], al
mov edx, dword [rsp + 0x44]
cmp edx, 7
jb 0x403189
mov qword [rsp], 7
call fcn.004031c0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0xc]
mov dword [rsp + 0x50], eax
mov ebx, 8
nop
call fcn.004031a0
mov byte [0x005e0107], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x20
call fcn.004031a0
movzx ecx, byte [rsp + 0x43]
and ecx, eax
mov byte [0x005e0103], cl
mov eax, dword [rsp + 0x50]
mov ebx, 0x100
call fcn.004031a0
mov byte [0x005e0108], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x200
call fcn.004031a0
mov byte [0x005e0109], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x80000
call fcn.004031a0
mov byte [0x005e0101], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x20000000
call fcn.004031a0
mov byte [0x005e010f], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x10000
nop
call fcn.004031a0
movzx ecx, byte [rsp + 0x42]
and ecx, eax
mov byte [0x005e0104], cl
test cl, cl
je 0x40311f
mov eax, dword [rsp + 0x50]
mov ebx, 0x40000000
nop
call fcn.004031a0
mov byte [0x005e0105], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x80000000
call fcn.004031a0
mov byte [0x005e0106], al
mov eax, 0x80000000
mov qword [rsp], rax
call fcn.004031c0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp dword [rsp + 8], 0x80000001
jae 0x40314f
add rsp, 0x58
pop rbp
ret
mov eax, 0x80000001
mov qword [rsp], rax
call fcn.004031c0
xorps xmm15, xmm15
mov r14, qword [0x005dfb98]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0x14]
mov ebx, 0x8000000
call fcn.004031a0
mov byte [0x005e010e], al
add rsp, 0x58
pop rbp
ret
add rsp, 0x58
pop rbp
ret
add rsp, 0x58
pop rbp
ret
call fcn.0046bb20
jmp fcn.004029c0