Function at 0x402a20
Capabilities:
Inspect section memory permissions

Disassembly:
mov ecx, dword [0x587cec]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x403389
sub esp, 0x38
lea eax, [0x4c39e0]
mov dword [esp], eax
call fcn.0040db90
mov eax, dword [esp + 4]
mov dword [eax + 4], 3
lea ecx, [0x4d6e92]
mov dword [eax], ecx
lea ecx, [0x588141]
mov dword [eax + 8], ecx
mov dword [eax + 0x14], 3
lea ecx, [0x4d6e95]
mov dword [eax + 0x10], ecx
lea ecx, [0x588140]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 4
lea ecx, [0x4d6fb8]
mov dword [eax + 0x20], ecx
lea ecx, [0x588149]
mov dword [eax + 0x28], ecx
mov dword [eax + 0x34], 9
lea ecx, [0x4d7937]
mov dword [eax + 0x30], ecx
lea ecx, [0x58814c]
mov dword [eax + 0x38], ecx
mov dword [eax + 0x44], 6
lea ecx, [0x4d7282]
mov dword [eax + 0x40], ecx
lea ecx, [0x58814e]
mov dword [eax + 0x48], ecx
mov dword [eax + 0x54], 3
lea ecx, [0x4d6e98]
mov dword [eax + 0x50], ecx
lea ecx, [0x58814f]
mov dword [eax + 0x58], ecx
mov dword [0x5682cc], 6
mov dword [0x5682d0], 6
mov ecx, dword [0x587dc8]
test ecx, ecx
je 0x402b0c
call fcn.00474ab0
mov dword [edi], eax
mov ecx, dword [0x5682c8]
mov dword [edi + 4], ecx
mov dword [0x5682c8], eax
call fcn.00403410
mov eax, dword [esp]
mov dword [esp + 0x28], eax
cmp eax, 2
jge 0x402cab
mov ecx, dword [0x5682d0]
mov edx, dword [0x5682cc]
add edx, 5
mov ebx, dword [0x5682c8]
cmp ecx, edx
jae 0x402b9a
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
lea eax, [0x4cc720]
mov dword [esp + 0x10], eax
call fcn.00470510
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [0x5682d0], eax
mov eax, dword [0x587dc8]
test eax, eax
je 0x402b8e
call fcn.00474ab0
mov dword [edi], ecx
mov eax, dword [0x5682c8]
mov dword [edi + 4], eax
mov dword [0x5682c8], ecx
mov eax, dword [esp + 0x28]
mov ebx, ecx
mov dword [0x5682cc], edx
lea ecx, [edx - 5]
shl ecx, 4
mov dword [ebx + ecx + 4], 6
mov word [ebx + ecx + 0xc], 0
mov edx, dword [0x587dc8]
test edx, edx
je 0x402c0c
mov edx, dword [ebx + ecx]
call fcn.00474b10
mov dword [edi], edx
mov edx, dword [ebx + ecx + 8]
mov dword [edi + 4], edx
mov edx, dword [ebx + ecx + 0x10]
mov dword [edi + 8], edx
mov edx, dword [ebx + ecx + 0x18]
mov dword [edi + 0xc], edx
mov edx, dword [ebx + ecx + 0x20]
mov dword [edi + 0x10], edx
mov edx, dword [ebx + ecx + 0x28]
mov dword [edi + 0x14], edx
mov edx, dword [ebx + ecx + 0x30]
mov dword [edi + 0x18], edx
mov edx, dword [ebx + ecx + 0x38]
mov dword [edi + 0x1c], edx
mov edx, dword [ebx + ecx + 0x40]
call fcn.00474ab0
mov dword [edi], edx
mov edx, dword [ebx + ecx + 0x48]
mov dword [edi + 4], edx
lea edx, [0x4d7288]
mov dword [ebx + ecx], edx
lea edx, [0x58814d]
mov dword [ebx + ecx + 8], edx
mov dword [ebx + ecx + 0x14], 4
mov word [ebx + ecx + 0x1c], 0
lea edx, [0x4d6fbc]
mov dword [ebx + ecx + 0x10], edx
lea edx, [0x588150]
mov dword [ebx + ecx + 0x18], edx
mov dword [ebx + ecx + 0x24], 5
mov word [ebx + ecx + 0x2c], 0
lea edx, [0x4d710b]
mov dword [ebx + ecx + 0x20], edx
lea edx, [0x588152]
mov dword [ebx + ecx + 0x28], edx
mov dword [ebx + ecx + 0x34], 5
mov word [ebx + ecx + 0x3c], 0
lea edx, [0x4d7110]
mov dword [ebx + ecx + 0x30], edx
lea edx, [0x588153]
mov dword [ebx + ecx + 0x38], edx
mov dword [ebx + ecx + 0x44], 5
mov word [ebx + ecx + 0x4c], 0
lea edx, [0x4d7115]
mov dword [ebx + ecx + 0x40], edx
lea edx, [0x588151]
mov dword [ebx + ecx + 0x48], edx
cmp eax, 3
jge 0x402e38
mov ecx, dword [0x5682d0]
mov edx, dword [0x5682cc]
add edx, 5
mov ebx, dword [0x5682c8]
cmp ecx, edx
jae 0x402d27
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
lea eax, [0x4cc720]
mov dword [esp + 0x10], eax
call fcn.00470510
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [0x5682d0], eax
mov eax, dword [0x587dc8]
test eax, eax
je 0x402d1b
call fcn.00474ab0
mov dword [edi], ecx
mov eax, dword [0x5682c8]
mov dword [edi + 4], eax
mov dword [0x5682c8], ecx
mov eax, dword [esp + 0x28]
mov ebx, ecx
mov dword [0x5682cc], edx
lea ecx, [edx - 5]
shl ecx, 4
mov dword [ebx + ecx + 4], 3
mov word [ebx + ecx + 0xc], 0
mov edx, dword [0x587dc8]
test edx, edx
je 0x402d99
mov edx, dword [ebx + ecx]
call fcn.00474b10
mov dword [edi], edx
mov edx, dword [ebx + ecx + 8]
mov dword [edi + 4], edx
mov edx, dword [ebx + ecx + 0x10]
mov dword [edi + 8], edx
mov edx, dword [ebx + ecx + 0x18]
mov dword [edi + 0xc], edx
mov edx, dword [ebx + ecx + 0x20]
mov dword [edi + 0x10], edx
mov edx, dword [ebx + ecx + 0x28]
mov dword [edi + 0x14], edx
mov edx, dword [ebx + ecx + 0x30]
mov dword [edi + 0x18], edx
mov edx, dword [ebx + ecx + 0x38]
mov dword [edi + 0x1c], edx
mov edx, dword [ebx + ecx + 0x40]
call fcn.00474ab0
mov dword [edi], edx
mov edx, dword [ebx + ecx + 0x48]
mov dword [edi + 4], edx
lea edx, [0x4d6e9b]
mov dword [ebx + ecx], edx
lea edx, [0x588142]
mov dword [ebx + ecx + 8], edx
mov dword [ebx + ecx + 0x14], 4
mov word [ebx + ecx + 0x1c], 0
lea edx, [0x4d6fc0]
mov dword [ebx + ecx + 0x10], edx
lea edx, [0x588143]
mov dword [ebx + ecx + 0x18], edx
mov dword [ebx + ecx + 0x24], 4
mov word [ebx + ecx + 0x2c], 0
lea edx, [0x4d6fc4]
mov dword [ebx + ecx + 0x20], edx
lea edx, [0x588147]
mov dword [ebx + ecx + 0x28], edx
mov dword [ebx + ecx + 0x34], 4
mov word [ebx + ecx + 0x3c], 0
lea edx, [0x4d6fc8]
mov dword [ebx + ecx + 0x30], edx
lea edx, [0x588148]
mov dword [ebx + ecx + 0x38], edx
mov dword [ebx + ecx + 0x44], 3
mov word [ebx + ecx + 0x4c], 0
lea edx, [0x4d6e9e]
mov dword [ebx + ecx + 0x40], edx
lea edx, [0x58814a]
mov dword [ebx + ecx + 0x48], edx
cmp eax, 4
jge 0x402f5f
mov eax, dword [0x5682d0]
mov ecx, dword [0x5682cc]
add ecx, 3
mov edx, dword [0x5682c8]
cmp eax, ecx
jae 0x402eb4
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
lea eax, [0x4cc720]
mov dword [esp + 0x10], eax
call fcn.00470510
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [0x5682d0], eax
mov eax, dword [0x587dc8]
test eax, eax
je 0x402ea8
call fcn.00474ab0
mov dword [edi], ecx
mov eax, dword [0x5682c8]
mov dword [edi + 4], eax
mov dword [0x5682c8], ecx
mov eax, edx
mov edx, ecx
mov ecx, eax
mov dword [0x5682cc], ecx
lea eax, [ecx - 3]
shl eax, 4
mov dword [edx + eax + 4], 7
mov word [edx + eax + 0xc], 0
mov ecx, dword [0x587dc8]
test ecx, ecx
je 0x402f06
mov ecx, dword [edx + eax]
call fcn.00474af0
mov dword [edi], ecx
mov ecx, dword [edx + eax + 8]
mov dword [edi + 4], ecx
mov ecx, dword [edx + eax + 0x10]
mov dword [edi + 8], ecx
mov ecx, dword [edx + eax + 0x18]
mov dword [edi + 0xc], ecx
mov ecx, dword [edx + eax + 0x20]
mov dword [edi + 0x10], ecx
mov ecx, dword [edx + eax + 0x28]
mov dword [edi + 0x14], ecx
lea ecx, [0x4d7437]
mov dword [edx + eax], ecx
lea ecx, [0x588144]
mov dword [edx + eax + 8], ecx
mov dword [edx + eax + 0x14], 8
mov word [edx + eax + 0x1c], 0
lea ecx, [0x4d764b]
mov dword [edx + eax + 0x10], ecx
lea ecx, [0x588145]
mov dword [edx + eax + 0x18], ecx
mov dword [edx + eax + 0x24], 8
mov word [edx + eax + 0x2c], 0
lea ecx, [0x4d7653]
mov dword [edx + eax + 0x20], ecx
lea ecx, [0x588146]
mov dword [edx + eax + 0x28], ecx
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.004033d0
mov eax, dword [esp + 8]
test eax, eax
je 0x403385
mov dword [esp + 0x24], eax
mov dword [esp], 0x80000000
mov dword [esp + 4], 0
call fcn.004033d0
mov eax, dword [esp + 8]
mov dword [0x587cdc], eax
mov dword [esp], 1
mov dword [esp + 4], 0
call fcn.004033d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588150], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x58814c], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x200
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588151], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x80000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588152], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x100000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588153], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x800000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x58814d], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x2000000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588140], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x8000000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x58814b], al
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0x1000
call fcn.004033a0
movzx eax, byte [esp + 8]
test al, al
je 0x4030d7
movzx eax, byte [0x58814b]
jmp 0x4030d9
xor eax, eax
mov byte [0x58814a], al
movzx eax, byte [0x58814b]
test al, al
jne 0x4030f3
xor eax, eax
xor ecx, ecx
jmp 0x4031ac
call fcn.004033f0
mov eax, dword [esp]
mov dword [esp + 0x34], eax
mov dword [esp + 4], 2
call fcn.004033a0
movzx eax, byte [esp + 8]
test al, al
jne 0x403119
xor eax, eax
jmp 0x403132
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [esp + 0x23], al
test al, al
jne 0x40313e
xor ecx, ecx
jmp 0x40315e
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.004033a0
movzx eax, byte [esp + 8]
mov ecx, eax
movzx eax, byte [esp + 0x23]
test cl, cl
jne 0x403166
xor ecx, ecx
jmp 0x4031ac
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], 0x40
call fcn.004033a0
movzx eax, byte [esp + 8]
test al, al
jne 0x40318c
movzx eax, byte [esp + 0x23]
xor ecx, ecx
jmp 0x4031ac
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], pe_nt_image_headers32
call fcn.004033a0
movzx eax, byte [esp + 8]
mov ecx, eax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x22], cl
mov byte [esp + 0x23], al
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], 0x10000000
call fcn.004033a0
movzx eax, byte [esp + 8]
movzx ecx, byte [esp + 0x23]
and eax, ecx
mov byte [0x588142], al
mov eax, dword [esp + 0x24]
cmp eax, 7
jb 0x403381
mov dword [esp], 7
mov dword [esp + 4], 0
call fcn.004033d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588147], al
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.004033a0
movzx eax, byte [esp + 8]
movzx ecx, byte [esp + 0x23]
and ecx, eax
mov byte [0x588143], cl
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x100
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588148], al
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x200
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588149], al
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x80000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588141], al
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x20000000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x58814f], al
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x10000
call fcn.004033a0
movzx eax, byte [esp + 8]
movzx ecx, byte [esp + 0x22]
and ecx, eax
mov byte [0x588144], cl
test cl, cl
je 0x403328
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588145], al
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x588146], al
mov dword [esp], 0x80000000
mov dword [esp + 4], 0
call fcn.004033d0
cmp dword [esp + 8], 0x80000001
jae 0x40334a
add esp, 0x38
ret
mov dword [esp], 0x80000001
mov dword [esp + 4], 0
call fcn.004033d0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0x8000000
call fcn.004033a0
movzx eax, byte [esp + 8]
mov byte [0x58814e], al
add esp, 0x38
ret
add esp, 0x38
ret
add esp, 0x38
ret
call fcn.004736a0
jmp fcn.00402a20