Function at 0x4065b0
Capabilities:
Inspect section memory permissions

Disassembly:
push 0xffffffffffffffff
push 0x435bb9
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x448fb0]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0
call fcn.0041583d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x406600
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov esi, dword [esp + 0x24]
add eax, 0x10
mov dword [esi], eax
mov ecx, dword [edi + 0x50]
mov edx, dword [esp + 0x28]
push ecx
push edx
mov ecx, edi
mov dword [esp + 0x24], 0
mov dword [esp + 0x18], 1
call fcn.00401940
mov edi, dword [edi + 0x50]
mov ebx, eax
cmp edi, 1
jne 0x406789
and ebx, 0xffefffff
mov eax, ebx
and eax, 0xf01ff
cmp eax, 0xf01ff
jne 0x406666
push 0x439ed4
mov ecx, esi
call fcn.00404c80
and ebx, 0xfff0fe00
mov ecx, ebx
and ecx, 0x301bf
cmp ecx, 0x301bf
jne 0x406688
push 0x439ec4
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffcfe40
mov edx, ebx
and edx, 0x200a9
cmp edx, 0x200a9
jne 0x4066aa
push str.read_execute
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffdff56
mov eax, ebx
and eax, 0x116
cmp eax, 0x116
jne 0x4066ca
push 0x439e98
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffffee9
mov ecx, ebx
and ecx, 0x20089
cmp ecx, 0x20089
jne 0x4066ec
push 0x439e8c
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffdff76
test bl, 1
je 0x4066fd
push str.FILE_LIST_DIRECTORY
mov ecx, esi
call fcn.00404c80
test bl, 2
je 0x40670e
push str.FILE_ADD_FILE
mov ecx, esi
call fcn.00404c80
test bl, 4
je 0x40671f
push str.FILE_ADD_SUBDIRECTORY
mov ecx, esi
call fcn.00404c80
test bl, 8
je 0x406730
push str.FILE_READ_EA
mov ecx, esi
call fcn.00404c80
test bl, 0x10
je 0x406741
push str.FILE_WRITE_EA
mov ecx, esi
call fcn.00404c80
test bl, 0x20
je 0x406752
push str.FILE_TRAVERSE
mov ecx, esi
call fcn.00404c80
test bl, 0x40
je 0x406763
push str.FILE_DELETE_CHILD
mov ecx, esi
call fcn.00404c80
test bl, bl
jns 0x406773
push str.FILE_READ_ATTRIBUTES
mov ecx, esi
call fcn.00404c80
test ebx, 0x100
je 0x406ad6
push str.FILE_WRITE_ATTRIBUTES
jmp 0x406acf
cmp edi, 4
jne 0x406876
mov edx, ebx
and edx, 0xf003f
cmp edx, 0xf003f
jne 0x4067b4
push 0x439ed4
mov ecx, esi
call fcn.00404c80
and ebx, 0xfff0ffc0
mov eax, ebx
and eax, 0x20019
cmp eax, 0x20019
jne 0x4067d4
push 0x439e8c
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffdffe6
test bl, 0x20
je 0x4067e5
push str.KEY_CREATE_LINK
mov ecx, esi
call fcn.00404c80
test bl, 4
je 0x4067f6
push str.KEY_CREATE_SUB_KEY
mov ecx, esi
call fcn.00404c80
test bl, 8
je 0x406807
push str.KEY_ENUMERATE_SUB_KEYS
mov ecx, esi
call fcn.00404c80
mov edi, ebx
and edi, 0x20019
je 0x40681d
push str.KEY_EXECUTE
mov ecx, esi
call fcn.00404c80
test bl, 0x10
je 0x40682e
push str.KEY_NOTIFY
mov ecx, esi
call fcn.00404c80
test bl, 1
je 0x40683f
push str.KEY_QUERY_VALUE
mov ecx, esi
call fcn.00404c80
test edi, edi
je 0x40684f
push str.KEY_READ
mov ecx, esi
call fcn.00404c80
test bl, 2
je 0x406860
push str.KEY_SET_VALUE
mov ecx, esi
call fcn.00404c80
test ebx, 0x20006
je 0x406ad6
push str.KEY_WRITE
jmp 0x406acf
cmp edi, 2
jne 0x406980
mov ecx, ebx
and ecx, 0xf01ff
cmp ecx, 0xf01ff
jne 0x4068a1
push 0x439ed4
mov ecx, esi
call fcn.00404c80
and ebx, 0xfff0fe00
mov edx, ebx
and edx, 0x201fd
cmp edx, 0x201fd
jne 0x4068c3
push 0x439bf8
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffdfe02
mov eax, ebx
and eax, 0x2018d
cmp eax, 0x2018d
jne 0x4068e3
push 0x439e8c
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffdfe72
test bl, 2
je 0x4068f4
push str.SERVICE_CHANGE_CONFIG
mov ecx, esi
call fcn.00404c80
test bl, 8
je 0x406905
push str.SERVICE_ENUMERATE_DEPENDENTS
mov ecx, esi
call fcn.00404c80
test bl, bl
jns 0x406915
push str.SERVICE_INTERROGATE
mov ecx, esi
call fcn.00404c80
test bl, 0x40
je 0x406926
push str.SERVICE_PAUSE_CONTINUE
mov ecx, esi
call fcn.00404c80
test bl, 1
je 0x406937
push str.SERVICE_QUERY_CONFIG
mov ecx, esi
call fcn.00404c80
test bl, 4
je 0x406948
push str.SERVICE_QUERY_STATUS
mov ecx, esi
call fcn.00404c80
test bl, 0x10
je 0x406959
push str.SERVICE_START
mov ecx, esi
call fcn.00404c80
test bl, 0x20
je 0x40696a
push str.SERVICE_STOP
mov ecx, esi
call fcn.00404c80
test ebx, 0x100
je 0x406ad6
push str.SERVICE_USER_DEFINED_CONTROL
jmp 0x406acf
cmp edi, 3
jne 0x406a33
mov ecx, ebx
and ecx, 0xf000c
cmp ecx, 0xf000c
jne 0x4069ab
push str.manage_printer
mov ecx, esi
call fcn.00404c80
and ebx, 0xfff0fff3
mov edx, ebx
and edx, 0xf0030
cmp edx, 0xf0030
jne 0x4069cd
push str.manage_documents
mov ecx, esi
call fcn.00404c80
and ebx, 0xfff0ffcf
mov eax, ebx
and eax, 0x20008
cmp eax, 0x20008
jne 0x4069ed
push 0x439a0c
mov ecx, esi
call fcn.00404c80
and ebx, 0xfffdfff7
test bl, 4
je 0x4069fe
push str.PRINTER_ACCESS_ADMINISTER
mov ecx, esi
call fcn.00404c80
test bl, 8
je 0x406a0f
push str.PRINTER_ACCESS_USE
mov ecx, esi
call fcn.00404c80
test bl, 0x10
je 0x406a20
push str.JOB_ACCESS_ADMINISTER
mov ecx, esi
call fcn.00404c80
test bl, 0x20
je 0x406ad6
push str.JOB_ACCESS_READ
jmp 0x406acf
cmp edi, 5
jne 0x406ba6
mov ecx, ebx
and ecx, 0x1f01ff
cmp ecx, 0x1f01ff
jne 0x406a5e
push 0x439ed4
mov ecx, esi
call fcn.00404c80
and ebx, 0xffe0fe00
mov edx, ebx
and edx, 0x1301bf
cmp edx, 0x1301bf
jne 0x406a80
push 0x439ec4
mov ecx, esi
call fcn.00404c80
and ebx, 0xffecfe40
mov eax, ebx
and eax, 0x1200a9
cmp eax, 0x1200a9
jne 0x406aa0
push 0x439e8c
mov ecx, esi
call fcn.00404c80
and ebx, 0xffedff56
test ebx, 0x1bf
je 0x406ab4
push str.SHARE_READ
mov ecx, esi
call fcn.00404c80
test bl, 0xa9
je 0x406ac5
push str.SHARE_CHANGE
mov ecx, esi
call fcn.00404c80
test bl, 0x40
je 0x406ad6
push str.SHARE_WRITE
mov ecx, esi
call fcn.00404c80
test ebx, 0x20000
je 0x406aea
push str.READ_CONTROL
mov ecx, esi
call fcn.00404c80
test ebx, 0x80000
je 0x406afe
push str.WRITE_OWNER
mov ecx, esi
call fcn.00404c80
test ebx, 0x40000
je 0x406b12
push str.WRITE_DAC
mov ecx, esi
call fcn.00404c80
test ebx, 0x10000
je 0x406b26
push str.DELETE
mov ecx, esi
call fcn.00404c80
test ebx, 0x100000
je 0x406b3a
push str.SYNCHRONIZE
mov ecx, esi
call fcn.00404c80
test ebx, 0x1000000
je 0x406b4e
push str.ACCESS_SYSTEM_SECURITY
mov ecx, esi
call fcn.00404c80
test ebx, 0x10000000
je 0x406b62
push str.GENERIC_ALL
mov ecx, esi
call fcn.00404c80
test ebx, 0x20000000
je 0x406b76
push str.GENERIC_EXECUTE
mov ecx, esi
call fcn.00404c80
test ebx, ebx
jns 0x406b86
push str.GENERIC_READ
mov ecx, esi
call fcn.00404c80
test ebx, 0x40000000
je 0x406b9a
push 0x4397e0
mov ecx, esi
call fcn.00404c80
push 0x4397dc
mov ecx, esi
call fcn.00403aa0
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x10
ret 8