Function at 0x40fe6a
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
mov eax, ecx
mov dword [ebp - 0x38], edx
xor ecx, ecx
mov dword [ebp - 8], eax
push esi
push edi
mov eax, dword [eax]
mov edi, ecx
mov ebx, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x24], ecx
add eax, 0x40
mov dword [ebp - 0x18], ecx
mov byte [ebp - 3], cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x20]
push ecx
push ecx
mov ecx, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xc], ebx
call fcn.00457328
mov esi, eax
test esi, esi
js 0x410232
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x410232
imul esi, eax, 0x14
push esi
call fcn.00443fa5
mov edx, eax
mov dword [ebp - 0x1c], edx
test edx, edx
jne 0x40fee3
mov esi, 0xc0000017
jmp 0x410232
push esi
xor esi, esi
push esi
push edx
call fcn.004a73b0
add esp, 0xc
mov dword [ebp - 0x20], esi
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], esi
push eax
push esi
mov esi, dword [ebp - 0x2c]
mov ecx, esi
push 8
push 2
pop edx
call fcn.00457364
test eax, eax
js 0x4101e6
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x14]
push eax
mov ecx, esi
call fcn.00457400
mov edi, dword [ebp - 0x14]
mov esi, eax
test esi, esi
js 0x410205
movzx eax, word [edi + 0x22]
mov ecx, 0xff
cmp ax, cx
jbe 0x4101b8
mov ecx, 0x7fff
cmp ax, cx
ja 0x4101b8
mov esi, 0x200
test esi, eax
je 0x40ffa7
push dword [ebp - 0x38]
lea edx, [ebp - 0x24]
mov ecx, edi
call fcn.004103fd
mov edx, eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x58]
test edx, edx
jns 0x40ffa2
mov esi, dword [ebp - 0x10]
or ecx, 0x80
mov dword [eax + 0x58], ecx
lea eax, [edi + 8]
or dword [esi], 0x20000000
push dword [0x4f2ec0]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x10
push eax
push 0x20
pop ecx
call fcn.0040d79e
jmp 0x40ffaa
or ecx, esi
mov dword [eax + 0x58], ecx
mov esi, dword [ebp - 0x10]
mov ecx, 0x1000
mov byte [ebp - 2], 0
test word [edi + 0x22], cx
je 0x410018
lea edx, [ebp - 0xc]
mov byte [ebp - 2], 0
mov ecx, edi
call fcn.0040fd6c
mov ebx, dword [ebp - 0xc]
test eax, eax
js 0x410013
test byte [ebx + 8], 8
mov byte [ebp - 2], 0
je 0x410004
cmp word [ebp - 0x30], 0
mov byte [ebp - 2], 0
jne 0x410004
xor ecx, ecx
mov dword [esi + 0x10], ebx
inc ecx
xor ebx, ebx
mov dword [ebp - 0x30], ecx
mov byte [ebp - 2], cl
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ebx
or dword [ecx + 0x58], 0x80000
or dword [esi], 0x800000
test ebx, ebx
je 0x410013
push ebx
call fcn.00444047
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov ecx, 0x1000
mov eax, dword [ebp - 8]
mov edx, pe_nt_image_headers32
mov byte [ebp - 1], 0
test word [edi + 0x22], dx
je 0x41009c
or dword [eax + 0x58], edx
or dword [esi], 0x40000000
mov byte [ebp - 1], 0
test word [edi + 0x22], cx
je 0x41009c
lea edx, [ebp - 0xc]
mov byte [ebp - 1], 0
mov ecx, edi
call fcn.0040fd6c
mov ebx, dword [ebp - 0xc]
test eax, eax
js 0x410099
test byte [ebx + 8], 4
mov eax, dword [ebp - 8]
mov byte [ebp - 1], 0
je 0x41008a
cmp word [ebp - 0x34], 0
mov byte [ebp - 1], 0
jne 0x41008a
mov dword [esi + 0x10], ebx
xor ebx, ebx
or dword [eax + 0x58], 0x8000
or dword [esi], 0x1000000
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x34], 1
mov byte [ebp - 1], 1
test ebx, ebx
je 0x41009c
push ebx
call fcn.00444047
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov eax, dword [ebp - 8]
mov ecx, dword [esi]
mov edx, 0x400
test word [edi + 0x22], dx
je 0x4100dd
test ecx, 0x20000000
jne 0x4100b5
or dword [eax + 0x58], 0x20
push 0
lea edx, [ebp - 3]
mov ecx, edi
call fcn.00456954
test eax, eax
js 0x4100d5
cmp byte [ebp - 3], 0
je 0x4100d5
mov ecx, dword [ebp - 8]
or dword [ecx + 0x58], 0x4000
or dword [esi], 0x4000000
mov ecx, dword [esi]
movzx eax, word [edi + 0x22]
mov edx, eax
mov dword [ebp - 0x14], edx
test eax, 0x2000
je 0x410105
mov edx, dword [ebp - 8]
or dword [edx + 0x58], 0x10000
or dword [esi], 0x8000000
mov ecx, dword [esi]
movzx eax, word [edi + 0x22]
jmp 0x410108
mov eax, dword [ebp - 0x14]
movzx eax, ax
mov edx, eax
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 8]
test eax, 0x800
je 0x41012c
or dword [edx + 0x58], 0x40
or dword [esi], 0x10000000
mov ecx, dword [esi]
movzx eax, word [edi + 0x22]
jmp 0x41012f
mov eax, dword [ebp - 0x14]
movzx edx, ax
mov eax, ecx
test edx, 0x1000
je 0x410148
cmp byte [ebp - 1], 0
jne 0x410148
cmp byte [ebp - 2], 0
je 0x410152
mov ecx, eax
test edx, 0x4000
je 0x41015a
or ecx, 0x2000000
mov dword [esi], ecx
test ecx, 0x34000000
je 0x410195
push 8
pop edx
mov ecx, edi
call fcn.00454d62
mov esi, eax
test esi, esi
js 0x41018a
lea eax, [ebp - 0x28]
mov edx, 0xffff
push eax
push 2
mov ecx, edi
call fcn.004548fe
mov esi, eax
test esi, esi
jns 0x410192
cmp esi, 0xc0000225
jne 0x410205
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [esi + 4], edi
xor edi, edi
and dword [ebp - 0x28], edi
mov dword [esi + 8], ecx
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x24], edi
inc dword [ebp - 0x18]
mov dword [esi + 0xc], ecx
add esi, 0x14
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], esi
test edi, edi
je 0x4101c8
mov ecx, edi
call fcn.00454816
xor edi, edi
mov dword [ebp - 0x14], edi
mov esi, dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
mov ecx, esi
push 8
push 2
pop edx
call fcn.00457364
test eax, eax
jns 0x40ff18
mov ecx, dword [ebp - 8]
lea esi, [eax + 0x3ffffddb]
mov edx, dword [ebp - 0x18]
mov dword [ecx + 0x5c], edx
mov edx, dword [ebp - 0x1c]
and dword [ebp - 0x1c], 0
neg esi
mov dword [ecx + 0x60], edx
sbb esi, esi
and esi, eax
test edi, edi
je 0x410210
mov ecx, edi
call fcn.00454816
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x41021c
call fcn.00454816
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x410228
call fcn.00454816
test ebx, ebx
je 0x410232
push ebx
call fcn.00444047
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
call fcn.00410246
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret