Function at 0x402940
Capabilities:
Inspect section memory permissions

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x403115
push rbp
mov rbp, rsp
sub rsp, 0x58
lea rax, [0x00542200]
call fcn.0040dea0
mov qword [rax + 8], 3
lea rcx, [0x00579550]
mov qword [rax], rcx
lea rcx, [0x007a78a1]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x28], 3
lea rcx, [0x00579553]
mov qword [rax + 0x20], rcx
lea rcx, [0x007a78a0]
mov qword [rax + 0x30], rcx
mov qword [rax + 0x48], 4
lea rcx, [0x005796aa]
mov qword [rax + 0x40], rcx
lea rcx, [0x007a78a9]
mov qword [rax + 0x50], rcx
mov qword [rax + 0x68], 9
lea rcx, [0x0057a210]
mov qword [rax + 0x60], rcx
lea rcx, [0x007a78ac]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x88], 6
lea rcx, [0x00579a26]
mov qword [rax + 0x80], rcx
lea rcx, [0x007a78ae]
mov qword [rax + 0x90], rcx
mov qword [rax + 0xa8], 3
lea rcx, [0x00579556]
mov qword [rax + 0xa0], rcx
lea rcx, [0x007a78af]
mov qword [rax + 0xb0], rcx
mov qword [0x0075ef78], 6
mov qword [0x0075ef80], 6
mov qword [0x0075ef70], rax
call fcn.00403180
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov ecx, dword [rsp]
mov dword [rsp + 0x48], ecx
nop
cmp ecx, 2
jge 0x402b8f
mov rdx, qword [0x0075ef80]
mov rbx, qword [0x0075ef78]
add rbx, 5
mov rax, qword [0x0075ef70]
cmp rdx, rbx
jae 0x402aad
mov rcx, rdx
mov edi, 5
lea rsi, [0x00561940]
call fcn.0046ab20
mov qword [0x0075ef80], rcx
mov qword [0x0075ef70], rax
mov ecx, dword [rsp + 0x48]
mov qword [0x0075ef78], rbx
lea rdx, [rbx - 5]
shl rdx, 5
mov qword [rax + rdx + 8], 6
mov word [rax + rdx + 0x18], 0
lea r8, [0x00579a2c]
mov qword [rax + rdx], r8
lea r8, [0x007a78ad]
mov qword [rax + rdx + 0x10], r8
mov qword [rax + rdx + 0x28], 4
mov word [rax + rdx + 0x38], 0
lea r8, [0x005796ae]
mov qword [rax + rdx + 0x20], r8
lea r8, [0x007a78b0]
mov qword [rax + rdx + 0x30], r8
mov qword [rax + rdx + 0x48], 5
mov word [rax + rdx + 0x58], 0
lea r8, [0x00579846]
mov qword [rax + rdx + 0x40], r8
lea r8, [0x007a78b2]
mov qword [rax + rdx + 0x50], r8
mov qword [rax + rdx + 0x68], 5
mov word [rax + rdx + 0x78], 0
lea r8, [0x0057984b]
mov qword [rax + rdx + 0x60], r8
lea r8, [0x007a78b3]
mov qword [rax + rdx + 0x70], r8
mov qword [rax + rdx + 0x88], 5
mov word [rax + rdx + 0x98], 0
lea r8, [0x00579850]
mov qword [rax + rdx + 0x80], r8
lea r8, [0x007a78b1]
mov qword [rax + rdx + 0x90], r8
cmp ecx, 3
jge 0x402cc0
mov rdx, qword [0x0075ef80]
mov rbx, qword [0x0075ef78]
add rbx, 5
mov rax, qword [0x0075ef70]
cmp rdx, rbx
jae 0x402bdc
mov rcx, rdx
mov edi, 5
lea rsi, [0x00561940]
call fcn.0046ab20
mov qword [0x0075ef80], rcx
mov qword [0x0075ef70], rax
mov ecx, dword [rsp + 0x48]
mov qword [0x0075ef78], rbx
lea rdx, [rbx - 5]
shl rdx, 5
mov qword [rax + rdx + 8], 3
mov word [rax + rdx + 0x18], 0
lea r8, [0x00579559]
mov qword [rax + rdx], r8
lea r8, [0x007a78a2]
mov qword [rax + rdx + 0x10], r8
mov qword [rax + rdx + 0x28], 4
mov word [rax + rdx + 0x38], 0
lea r8, [0x005796b2]
mov qword [rax + rdx + 0x20], r8
lea r8, [0x007a78a3]
mov qword [rax + rdx + 0x30], r8
mov qword [rax + rdx + 0x48], 4
mov word [rax + rdx + 0x58], 0
lea r8, [0x005796b6]
mov qword [rax + rdx + 0x40], r8
lea r8, [0x007a78a7]
mov qword [rax + rdx + 0x50], r8
mov qword [rax + rdx + 0x68], 4
mov word [rax + rdx + 0x78], 0
lea r8, [0x005796ba]
mov qword [rax + rdx + 0x60], r8
lea r8, [0x007a78a8]
mov qword [rax + rdx + 0x70], r8
mov qword [rax + rdx + 0x88], 3
mov word [rax + rdx + 0x98], 0
lea r8, [0x0057955c]
mov qword [rax + rdx + 0x80], r8
lea r8, [0x007a78aa]
mov qword [rax + rdx + 0x90], r8
nop
cmp ecx, 4
jge 0x402d8c
mov rcx, qword [0x0075ef80]
mov rbx, qword [0x0075ef78]
add rbx, 3
mov rax, qword [0x0075ef70]
cmp rcx, rbx
jae 0x402d06
mov edi, 3
lea rsi, [0x00561940]
call fcn.0046ab20
mov qword [0x0075ef80], rcx
mov qword [0x0075ef70], rax
mov qword [0x0075ef78], rbx
lea rcx, [rbx - 3]
shl rcx, 5
mov qword [rax + rcx + 8], 7
mov word [rax + rcx + 0x18], 0
lea rdx, [0x00579c59]
mov qword [rax + rcx], rdx
lea rdx, [0x007a78a4]
mov qword [rax + rcx + 0x10], rdx
mov qword [rax + rcx + 0x28], 8
mov word [rax + rcx + 0x38], 0
lea rdx, [0x00579ec7]
mov qword [rax + rcx + 0x20], rdx
lea rdx, [0x007a78a5]
mov qword [rax + rcx + 0x30], rdx
mov qword [rax + rcx + 0x48], 8
mov word [rax + rcx + 0x58], 0
lea rdx, [0x00579ecf]
mov qword [rax + rcx + 0x40], rdx
lea rdx, [0x007a78a6]
mov qword [rax + rcx + 0x50], rdx
mov qword [rsp], 0
call fcn.00403140
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 8]
test eax, eax
je 0x40310f
mov dword [rsp + 0x44], eax
mov eax, 0x80000000
mov qword [rsp], rax
call fcn.00403140
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 8]
mov dword [0x007a6f5c], eax
mov qword [rsp], 1
call fcn.00403140
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0x10]
mov dword [rsp + 0x4c], eax
mov ebx, 1
call fcn.00403120
mov byte [0x007a78b0], al
mov eax, dword [rsp + 0x4c]
mov ebx, 2
call fcn.00403120
mov byte [0x007a78ac], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x200
call fcn.00403120
mov byte [0x007a78b1], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x80000
call fcn.00403120
mov byte [0x007a78b2], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x100000
call fcn.00403120
mov byte [0x007a78b3], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x800000
call fcn.00403120
mov byte [0x007a78ad], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x2000000
call fcn.00403120
mov byte [0x007a78a0], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x8000000
nop dword [rax]
call fcn.00403120
mov byte [0x007a78ab], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x1000
call fcn.00403120
test al, al
je 0x402ec6
movzx ecx, byte [0x007a78ab]
jmp 0x402ec8
xor ecx, ecx
mov byte [0x007a78aa], cl
cmp byte [0x007a78ab], 0
jne 0x402ee5
xor eax, eax
xor ecx, ecx
nop dword [rax + rax]
jmp 0x402f82
call fcn.00403160
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x54], eax
mov ebx, 2
call fcn.00403120
test al, al
jne 0x402f15
xor eax, eax
jmp 0x402f25
mov eax, dword [rsp + 0x54]
mov ebx, 4
nop
call fcn.00403120
mov byte [rsp + 0x43], al
test al, al
jne 0x402f31
xor ecx, ecx
jmp 0x402f46
mov eax, dword [rsp + 0x54]
mov ebx, 0x20
call fcn.00403120
mov ecx, eax
movzx eax, byte [rsp + 0x43]
test cl, cl
jne 0x402f4e
xor ecx, ecx
jmp 0x402f82
mov eax, dword [rsp + 0x54]
mov ebx, 0x40
call fcn.00403120
nop dword [rax]
test al, al
jne 0x402f6d
movzx eax, byte [rsp + 0x43]
xor ecx, ecx
jmp 0x402f82
mov eax, dword [rsp + 0x54]
mov ebx, pe_nt_image_headers64
call fcn.00403120
mov ecx, eax
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0x42], cl
mov byte [rsp + 0x43], al
mov ebx, 0x10000000
mov eax, dword [rsp + 0x4c]
call fcn.00403120
movzx ecx, byte [rsp + 0x43]
and eax, ecx
mov byte [0x007a78a2], al
mov edx, dword [rsp + 0x44]
cmp edx, 7
jb 0x403109
mov qword [rsp], 7
call fcn.00403140
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0xc]
mov dword [rsp + 0x50], eax
mov ebx, 8
nop
call fcn.00403120
mov byte [0x007a78a7], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x20
call fcn.00403120
movzx ecx, byte [rsp + 0x43]
and ecx, eax
mov byte [0x007a78a3], cl
mov eax, dword [rsp + 0x50]
mov ebx, 0x100
call fcn.00403120
mov byte [0x007a78a8], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x200
call fcn.00403120
mov byte [0x007a78a9], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x80000
call fcn.00403120
mov byte [0x007a78a1], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x20000000
call fcn.00403120
mov byte [0x007a78af], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x10000
nop
call fcn.00403120
movzx ecx, byte [rsp + 0x42]
and ecx, eax
mov byte [0x007a78a4], cl
test cl, cl
je 0x40309f
mov eax, dword [rsp + 0x50]
mov ebx, 0x40000000
nop
call fcn.00403120
mov byte [0x007a78a5], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x80000000
call fcn.00403120
mov byte [0x007a78a6], al
mov eax, 0x80000000
mov qword [rsp], rax
call fcn.00403140
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp dword [rsp + 8], 0x80000001
jae 0x4030cf
add rsp, 0x58
pop rbp
ret
mov eax, 0x80000001
mov qword [rsp], rax
call fcn.00403140
xorps xmm15, xmm15
mov r14, qword [0x007a71a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0x14]
mov ebx, 0x8000000
call fcn.00403120
mov byte [0x007a78ae], al
add rsp, 0x58
pop rbp
ret
add rsp, 0x58
pop rbp
ret
add rsp, 0x58
pop rbp
ret
call fcn.0046e7c0
jmp fcn.00402940