Function at 0x4d68b0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
movzx edx, byte [ebx + 0x70]
mov eax, dword [ebx + 0x2c]
test dl, dl
jne 0x4cb157
test al, 8
je 0x4cb180
test al, 1
jne 0x4cb197
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4cb16c
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
and eax, 0xffffffbf
or eax, 1
mov dword [ebx + 0x2c], eax
add esp, 0x18
pop ebx
ret
mov ecx, dword [esp + 0x20]
or eax, 8
test al, 1
mov dword [ebx + 0x2c], eax
mov edx, dword [ecx + 0x2c]
mov dword [ebx + 0x28], edx
mov dword [ecx + 0x2c], ebx
je 0x4cb15b
mov dword [esp + 8], 0x3e
mov dword [esp + 4], str.src_win_async.c
mov dword [esp], 0x7517bc
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4cb15b
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov eax, dword [ebx + 0x2c]
test al, 0x40
jne 0x4cdbe1
test al, 1
jne 0x4cdbc0
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4cdb84
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x74]
test ecx, ecx
jne 0x4cdbb3
test al, 8
jne 0x4cdbb3
mov eax, dword [esp + 0x20]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x21d
mov dword [esp + 4], str.src_win_fs_event.c
mov dword [esp], 0x751c08
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4cdb73
mov eax, ebx
call fcn.004ccf70
mov eax, dword [ebx + 0x2c]
jmp 0x4cdb6f
push esi
push ebx
sub esp, 0x14
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
test byte [ebx + 0x2c], 1
jne 0x4d68e0
cmp dword [ebx + 8], 0x10
mov esi, dword [ebx + 4]
mov dword [ebx + 0xc], eax
ja case.0x4d68d6.0
mov eax, dword [ebx + 8]
jmp dword [eax*4 + 0x752008]
mov dword [esp + 8], 0x47
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x751fdd
call fcn.0053e6a0
add esp, 0x14
pop ebx
pop esi
ret
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4df6f0
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4cb140
mov dword [esp], ebx
call fcn.004d6ea0
mov eax, dword [ebx + 0x2c]
test al, 1
jne 0x4d6af0
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4d6954
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
test al, 8
jne 0x4d6ae2
mov eax, dword [esi + 0x2c]
or edx, 9
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x28], eax
mov dword [esi + 0x2c], ebx
add esp, 0x14
pop ebx
pop esi
ret
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4cdb60
mov dword [esp], ebx
call fcn.004ef520
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x4d6943
mov dword [esp + 8], 0x8d
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x751fe0
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4d6943
mov dword [esp], ebx
call fcn.004d7090
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x4d6943
mov dword [esp + 8], 0x77
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x751fe0
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4d6943
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4da2b0
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4dc930
mov dword [esp], ebx
call fcn.004d6cb0
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x4d6943
mov dword [esp + 8], 0x6b
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x751fe0
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4d6943
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4ddd30
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp fcn.004e2b30
mov dword [esp], ebx
call fcn.004e4320
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x4d6943
mov dword [esp + 8], 0x65
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x751fe0
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4d6943
mov dword [esp + 0x20], ebx
add esp, 0x14
pop ebx
pop esi
jmp 0x4e9a90
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4ea580
or edx, 1
mov dword [ebx + 0x2c], edx
add esp, 0x14
pop ebx
pop esi
ret
mov dword [esp + 8], 0x71
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x751fe0
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4d6943
call sub.msvcrt.dll_exit
lea esi, [esi]
push esi
push ebx
sub esp, 0x14
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov eax, dword [ebx + 0x2c]
test ah, 1
je 0x4da301
mov ecx, eax
and ch, 0xfe
sub dword [ebx + 0x40], 1
mov dword [ebx + 0x2c], ecx
jne 0x4da3f0
test al, 1
jne 0x4da420
test al, 0x40
je 0x4da420
mov edx, eax
and eax, 0x20
mov ecx, eax
and edx, 0xfffffebf
test ecx, ecx
mov dword [ebx + 0x2c], edx
mov eax, edx
jne 0x4da440
test ah, 8
je 0x4da333
mov edx, eax
and dh, 0xf7
sub dword [ebx + 0x40], 1
mov dword [ebx + 0x2c], edx
jne 0x4da3c0
test al, 1
jne 0x4da333
test al, 0x40
je 0x4da333
mov edx, eax
and edx, 0xfffff7bf
test al, 0x20
mov dword [ebx + 0x2c], edx
jne 0x4da430
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004da1e0
mov eax, dword [ebx + 0x3c]
mov edx, dword [ebx + 0x2c]
test eax, eax
jne 0x4da34e
test dl, 8
je 0x4da380
mov eax, edx
and eax, 0xfffe7fff
and edx, 1
mov dword [ebx + 0x2c], eax
jne 0x4da39b
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4da36e
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
and eax, 0xffffffbf
or eax, 1
mov dword [ebx + 0x2c], eax
add esp, 0x14
pop ebx
pop esi
ret
mov eax, dword [esi + 0x2c]
or edx, 8
mov dword [ebx + 0x28], eax
mov eax, edx
mov dword [esi + 0x2c], ebx
and eax, 0xfffe7fff
and edx, 1
mov dword [ebx + 0x2c], eax
je 0x4da35d
mov dword [esp + 8], 0x31a
mov dword [esp + 4], str.src_win_pipe.c
mov dword [esp], 0x752510
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4da35d
jns 0x4da333
mov dword [esp + 8], 0x310
mov dword [esp + 4], str.src_win_pipe.c
mov dword [esp], 0x7524f6
call fcn.0053e6a0
jmp 0x4da333
mov eax, ecx
jns 0x4da301
mov dword [esp + 8], 0x30b
mov dword [esp + 4], str.src_win_pipe.c
mov dword [esp], 0x7524f6
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4da301
mov eax, ecx
jmp 0x4da301
mov eax, dword [ebx + 4]
sub dword [eax + 4], 1
jmp 0x4da333
mov edx, dword [ebx + 4]
sub dword [edx + 4], 1
jmp 0x4da301
push ebx
sub esp, 0x38
mov ebx, dword [esp + 0x44]
mov eax, dword [ebx + 0x2c]
mov byte [ebx + 0xfc], 0
mov edx, eax
and edx, 1
test eax, 0x2000000
je 0x4dc9a0
test edx, edx
jne 0x4dca60
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4dc967
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
cmp word [ebx + 0xf8], 0
mov dword [ebx + 0x2c], ecx
jne 0x4dc999
test al, 8
jne 0x4dc999
mov eax, dword [esp + 0x40]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x40]
mov dword [eax + 0x2c], ebx
xor eax, eax
add esp, 0x38
pop ebx
ret
test edx, edx
jne 0x4dca92
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4dc9b9
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
cmp word [ebx + 0xf8], 0
mov dword [ebx + 0x2c], ecx
je 0x4dc97e
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], 0x4dc160
mov dword [esp], 0x7e20a0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0x7fffffff
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x7ff
call fcn.004e34e0
lea eax, [esp + 0x10]
mov dword [esp + 0xc], 0x7e20a8
mov dword [esp + 8], 0x7e2080
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x34]
mov dword [esp], eax
call fcn.004eec20
sub esp, 0x10
cmp eax, 0xffffffff
jne 0x4dc999
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x3e5
jne 0x4dc99b
jmp 0x4dc999
mov dword [esp + 8], 0x1f1
mov dword [esp + 4], str.src_win_poll.c
mov dword [esp], 0x752a08
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
mov edx, eax
and edx, 0x60
cmp edx, 0x60
jne 0x4dc960
jmp 0x4dc967
mov dword [esp + 8], 0xfd
mov dword [esp + 4], str.src_win_poll.c
mov dword [esp], 0x752a08
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4dc9a8
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov eax, dword [ebx + 0x2c]
test al, 1
jne 0x4dddb0
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4ddd50
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
and eax, 0xffffffbf
or eax, 1
mov dword [ebx + 0x2c], eax
mov eax, dword [ebx + 0x7c]
cmp eax, 0xffffffff
je 0x4ddd80
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_UnregisterWaitEx]
sub esp, 8
test eax, eax
je 0x4dddd4
mov dword [ebx + 0x7c], 0xffffffff
movzx eax, byte [ebx + 0x84]
test al, al
jne 0x4ddda9
mov eax, dword [ebx + 0x2c]
test al, 8
jne 0x4ddda9
or eax, 8
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x384
mov dword [esp + 4], str.src_win_process.c
mov dword [esp], 0x752c5c
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4ddd3f
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [esp + 4], str.UnregisterWaitEx
mov dword [esp], eax
call fcn.004cc730
lea esi, [esi]
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov dword [esp], ebx
call fcn.004deb90
mov eax, dword [ebx + 0x2c]
test al, 1
jne 0x4df750
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4df718
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x84]
test ecx, ecx
jne 0x4df74a
test al, 8
jne 0x4df74a
mov eax, dword [esp + 0x20]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x103
mov dword [esp + 4], str.src_win_signal.c
mov dword [esp], 0x753120
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4df707
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x20]
mov eax, dword [ebx + 0x18]
cmp eax, 0xffffffff
je 0x4e9aa9
cmp eax, 2
jle 0x4e9b30
cmp eax, 0xffffffff
je 0x4e9b58
mov dword [esp], eax
call sub.msvcrt.dll__exit
mov edx, dword [ebx + 0x2c]
test dh, 1
jne 0x4e9b76
mov eax, edx
mov dword [ebx + 0x18], 0xffffffff
mov dword [ebx + 0x90], 0xffffffff
and eax, 0xfffe7fff
and edx, 1
mov dword [ebx + 0x2c], eax
jne 0x4e9b90
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4e9afb
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
jne 0x4e9b25
test al, 8
jne 0x4e9b25
mov eax, dword [ebx + 4]
or edx, 9
mov dword [ebx + 0x2c], edx
mov edx, dword [eax + 0x2c]
mov dword [ebx + 0x28], edx
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x888
mov dword [esp + 4], 0x753680
mov dword [esp], str.handle__u.fd___1__handle__u.fd___2
call fcn.0053e6a0
mov eax, dword [ebx + 0x18]
cmp eax, 0xffffffff
jne 0x4e9ab2
mov eax, dword [ebx + 0x90]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov edx, dword [ebx + 0x2c]
sub esp, 4
test dh, 1
je 0x4e9ac6
mov dword [esp], ebx
call fcn.004e92c0
mov edx, dword [ebx + 0x2c]
jmp 0x4e9ac6
mov dword [esp + 8], 0x894
mov dword [esp + 4], 0x753680
mov dword [esp], 0x753ef4
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4e9aea
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov dword [esp], ebx
call fcn.004caaa0
mov eax, dword [ebx + 0x38]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebx + 0x2c]
sub esp, 4
mov dword [ebx + 0x38], 0xffffffff
test al, 1
jne 0x4ea5f2
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4ea5be
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
jne 0x4ea5ed
test al, 8
jne 0x4ea5ed
mov eax, dword [esp + 0x20]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0xb9
mov dword [esp + 4], str.src_win_udp.c
mov dword [esp], str.___handle___flags__UV__HANDLE_CLOSING_
call fcn.0053e6a0
mov eax, dword [ebx + 0x2c]
jmp 0x4ea5ad