Function at 0x43a570
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd6a0
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
mov eax, dword [0x506070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov esi, ecx
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x88], eax
sub esp, 0x18
mov dword [ebp - 4], 1
mov ecx, esp
lea eax, [ebp + 0x20]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push eax
mov byte [ecx], 0
call fcn.00485ae0
lea ecx, [ebp - 0x40]
call fcn.00408090
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 0x10
cmovae eax, dword [ebp + 8]
push eax
push edi
push esi
call dword [sym.imp.WLDAP32.dll_Ordinal_139]
add esp, 0x24
mov dword [ebp - 0x80], eax
test eax, eax
je 0x43aaac
cmp dword [eax], 0
mov dword [ebp - 0x84], 0
je 0x43aaa2
mov edi, dword [ebp - 0x88]
mov esi, eax
nop dword [eax + eax]
cmp byte [ebp + 0x38], 0
jne 0x43a671
lea eax, [ebp + 0x20]
mov edx, 0x608570
push eax
lea ecx, [ebp - 0x58]
call fcn.00487870
push 0x4d4a44
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.00487950
add esp, 8
push 0xffffffffffffffff
push 0
push eax
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.004830f0
lea ecx, [ebp - 0x28]
call fcn.00482890
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00482890
mov edx, dword [esi]
mov ecx, edx
lea ebx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43a678
sub ecx, ebx
push ecx
push edx
mov ecx, edi
call fcn.00483000
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
mov edx, dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x40]
push 0xb
push str.systemflags
push 0
call fcn.004895a0
add esp, 0xc
test eax, eax
jne 0x43aa0b
push dword [esi]
call fcn.0049db61
mov ebx, eax
add esp, 4
test bl, 1
je 0x43a719
push 0xf
push str.XREF_NC_NTDS_1_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
dec ebx
test bl, 2
je 0x43a75e
push 0x11
push str.XREF_NC_Domain_2_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 2
test bl, 4
je 0x43a7a3
push 0x1c
push str.XREF_NC_NOT_GC_REPLICATED_4_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 4
test ebx, 0x4000000
je 0x43a7ee
push 0x1e
push str.DOMAIN_DISALLOW_MOVE_67108864_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x4000000
test ebx, 0x8000000
je 0x43a839
push 0x21
push str.DOMAIN_DISALLOW_RENAME_134217728_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x8000000
test ebx, 0x2000000
je 0x43a884
push 0x1d
push str.NO_MOVE_TO_DEL_OBJS_33554432_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x2000000
test ebx, 0x10000000
je 0x43a8cf
push 0x1e
push str.CAN_MOVE_RESTRICTED_268435456_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x10000000
test ebx, 0x20000000
je 0x43a91a
push 0x20
push str.CAN_MOVE_UNRESTRICTED_536870912_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x20000000
test ebx, 0x40000000
je 0x43a965
push 0x16
push str.CAN_RENAME_1073741824_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x40000000
test ebx, ebx
jns 0x43a9ae
push 0x15
push str.NO_DELETE_2147483648_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00482f30
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x7c]
call fcn.00488e10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00482890
sub ebx, 0x80000000
test ebx, ebx
je 0x43aa0b
mov edx, ebx
lea ecx, [ebp - 0x70]
call fcn.004091b0
push eax
mov edx, str.UNKNOWN_FLAGS_
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
call fcn.00486ce0
push 0x4d5854
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x58]
call fcn.00487950
add esp, 8
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x12
call fcn.00488e10
lea ecx, [ebp - 0x58]
call fcn.00482890
lea ecx, [ebp - 0x28]
call fcn.00482890
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 5
call fcn.00482890
push 2
push 0x4eb7d0
mov ecx, edi
call fcn.00483000
mov esi, dword [ebp - 0x7c]
cmp esi, dword [ebp - 0x78]
je 0x43aa69
cmp esi, dword [ebp - 0x7c]
jne 0x43aa34
push 0xffffffffffffffff
push 0
push esi
mov ecx, edi
call fcn.004830f0
jmp 0x43aa61
push esi
mov edx, 0x4d4ef4
lea ecx, [ebp - 0x70]
call fcn.00486d50
add esp, 4
push 0xffffffffffffffff
push 0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x13
call fcn.004830f0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 5
call fcn.00482890
add esi, 0x18
cmp esi, dword [ebp - 0x78]
jne 0x43aa21
push 2
push 0x4d4d68
mov ecx, edi
call fcn.00483000
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.00481f20
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x80]
inc eax
cmp dword [ecx + eax*4], 0
mov dword [ebp - 0x84], eax
lea esi, [ecx + eax*4]
jne 0x43a620
mov eax, ecx
push eax
call dword [sym.imp.WLDAP32.dll_Ordinal_223]
add esp, 4
lea ecx, [ebp - 0x40]
call fcn.00482890
lea ecx, [ebp + 8]
call fcn.00482890
lea ecx, [ebp + 0x20]
call fcn.00482890
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00493041
mov esp, ebp
pop ebp
ret