Function at 0x465a00
Capabilities:
Inspect section memory permissions

Disassembly:
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
movzx edx, byte [ebx + 0x70]
mov eax, dword [ebx + 0x2c]
test dl, dl
jne 0x45a5a7
test al, 8
je 0x45a5d0
test al, 1
jne 0x45a5e7
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x45a5bc
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
and eax, 0xffffffbf
or eax, 1
mov dword [ebx + 0x2c], eax
add esp, 0x18
pop ebx
ret
mov ecx, dword [esp + 0x20]
or eax, 8
test al, 1
mov dword [ebx + 0x2c], eax
mov edx, dword [ecx + 0x2c]
mov dword [ebx + 0x28], edx
mov dword [ecx + 0x2c], ebx
je 0x45a5ab
mov dword [esp + 8], 0x3e
mov dword [esp + 4], str.src_win_async.c
mov dword [esp], 0x64495c
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x45a5ab
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov eax, dword [ebx + 0x2c]
test al, 0x40
jne 0x45cd31
test al, 1
jne 0x45cd10
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x45ccd4
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x74]
test ecx, ecx
jne 0x45cd03
test al, 8
jne 0x45cd03
mov eax, dword [esp + 0x20]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x21d
mov dword [esp + 4], str.src_win_fs_event.c
mov dword [esp], 0x644d2c
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x45ccc3
mov eax, ebx
call fcn.0045c0c0
mov eax, dword [ebx + 0x2c]
jmp 0x45ccbf
push esi
push ebx
sub esp, 0x14
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
test byte [ebx + 0x2c], 1
jne 0x465a30
cmp dword [ebx + 8], 0x10
mov esi, dword [ebx + 4]
mov dword [ebx + 0xc], eax
ja case.0x465a26.0
mov eax, dword [ebx + 8]
jmp dword [eax*4 + 0x64512c]
mov dword [esp + 8], 0x47
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x645101
call fcn.004a0380
add esp, 0x14
pop ebx
pop esi
ret
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x46e840
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x45a590
mov dword [esp], ebx
call fcn.00465ff0
mov eax, dword [ebx + 0x2c]
test al, 1
jne 0x465c40
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x465aa4
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
test al, 8
jne 0x465c32
mov eax, dword [esi + 0x2c]
or edx, 9
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x28], eax
mov dword [esi + 0x2c], ebx
add esp, 0x14
pop ebx
pop esi
ret
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x45ccb0
mov dword [esp], ebx
call fcn.0047e670
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x465a93
mov dword [esp + 8], 0x8d
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x645104
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x465a93
mov dword [esp], ebx
call fcn.004661e0
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x465a93
mov dword [esp + 8], 0x77
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x645104
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x465a93
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x469400
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x46ba80
mov dword [esp], ebx
call fcn.00465e00
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x465a93
mov dword [esp + 8], 0x6b
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x645104
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x465a93
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x46ce80
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp fcn.00471c80
mov dword [esp], ebx
call fcn.00473470
mov eax, dword [ebx + 0x2c]
test al, 1
je 0x465a93
mov dword [esp + 8], 0x65
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x645104
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x465a93
mov dword [esp + 0x20], ebx
add esp, 0x14
pop ebx
pop esi
jmp 0x478be0
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
add esp, 0x14
pop ebx
pop esi
jmp 0x4796d0
or edx, 1
mov dword [ebx + 0x2c], edx
add esp, 0x14
pop ebx
pop esi
ret
mov dword [esp + 8], 0x71
mov dword [esp + 4], str.src_win_handle.c
mov dword [esp], 0x645104
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x465a93
call sub.msvcrt.dll_abort
lea esi, [esi]
push esi
push ebx
sub esp, 0x14
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov eax, dword [ebx + 0x2c]
test ah, 1
je 0x469451
mov ecx, eax
and ch, 0xfe
sub dword [ebx + 0x40], 1
mov dword [ebx + 0x2c], ecx
jne 0x469540
test al, 1
jne 0x469570
test al, 0x40
je 0x469570
mov edx, eax
and eax, 0x20
mov ecx, eax
and edx, 0xfffffebf
test ecx, ecx
mov dword [ebx + 0x2c], edx
mov eax, edx
jne 0x469590
test ah, 8
je 0x469483
mov edx, eax
and dh, 0xf7
sub dword [ebx + 0x40], 1
mov dword [ebx + 0x2c], edx
jne 0x469510
test al, 1
jne 0x469483
test al, 0x40
je 0x469483
mov edx, eax
and edx, 0xfffff7bf
test al, 0x20
mov dword [ebx + 0x2c], edx
jne 0x469580
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00469330
mov eax, dword [ebx + 0x3c]
mov edx, dword [ebx + 0x2c]
test eax, eax
jne 0x46949e
test dl, 8
je 0x4694d0
mov eax, edx
and eax, 0xfffe7fff
and edx, 1
mov dword [ebx + 0x2c], eax
jne 0x4694eb
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x4694be
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
and eax, 0xffffffbf
or eax, 1
mov dword [ebx + 0x2c], eax
add esp, 0x14
pop ebx
pop esi
ret
mov eax, dword [esi + 0x2c]
or edx, 8
mov dword [ebx + 0x28], eax
mov eax, edx
mov dword [esi + 0x2c], ebx
and eax, 0xfffe7fff
and edx, 1
mov dword [ebx + 0x2c], eax
je 0x4694ad
mov dword [esp + 8], 0x31a
mov dword [esp + 4], str.src_win_pipe.c
mov dword [esp], 0x645634
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x4694ad
jns 0x469483
mov dword [esp + 8], 0x310
mov dword [esp + 4], str.src_win_pipe.c
mov dword [esp], 0x64561a
call fcn.004a0380
jmp 0x469483
mov eax, ecx
jns 0x469451
mov dword [esp + 8], 0x30b
mov dword [esp + 4], str.src_win_pipe.c
mov dword [esp], 0x64561a
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x469451
mov eax, ecx
jmp 0x469451
mov eax, dword [ebx + 4]
sub dword [eax + 4], 1
jmp 0x469483
mov edx, dword [ebx + 4]
sub dword [edx + 4], 1
jmp 0x469451
push ebx
sub esp, 0x38
mov ebx, dword [esp + 0x44]
mov eax, dword [ebx + 0x2c]
mov byte [ebx + 0xfc], 0
mov edx, eax
and edx, 1
test eax, 0x2000000
je 0x46baf0
test edx, edx
jne 0x46bbb0
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x46bab7
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
cmp word [ebx + 0xf8], 0
mov dword [ebx + 0x2c], ecx
jne 0x46bae9
test al, 8
jne 0x46bae9
mov eax, dword [esp + 0x40]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x40]
mov dword [eax + 0x2c], ebx
xor eax, eax
add esp, 0x38
pop ebx
ret
test edx, edx
jne 0x46bbe2
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x46bb09
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
cmp word [ebx + 0xf8], 0
mov dword [ebx + 0x2c], ecx
je 0x46bace
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], 0x46b2b0
mov dword [esp], 0x6ab600
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0x7fffffff
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x7ff
call fcn.00472630
lea eax, [esp + 0x10]
mov dword [esp + 0xc], 0x6ab608
mov dword [esp + 8], 0x6ab5e0
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x34]
mov dword [esp], eax
call fcn.0047dd70
sub esp, 0x10
cmp eax, 0xffffffff
jne 0x46bae9
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x3e5
jne 0x46baeb
jmp 0x46bae9
mov dword [esp + 8], 0x1f1
mov dword [esp + 4], str.src_win_poll.c
mov dword [esp], 0x645b48
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
mov edx, eax
and edx, 0x60
cmp edx, 0x60
jne 0x46bab0
jmp 0x46bab7
mov dword [esp + 8], 0xfd
mov dword [esp + 4], str.src_win_poll.c
mov dword [esp], 0x645b48
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x46baf8
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov eax, dword [ebx + 0x2c]
test al, 1
jne 0x46cf00
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x46cea0
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
and eax, 0xffffffbf
or eax, 1
mov dword [ebx + 0x2c], eax
mov eax, dword [ebx + 0x7c]
cmp eax, 0xffffffff
je 0x46ced0
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_UnregisterWaitEx]
sub esp, 8
test eax, eax
je 0x46cf24
mov dword [ebx + 0x7c], 0xffffffff
movzx eax, byte [ebx + 0x84]
test al, al
jne 0x46cef9
mov eax, dword [ebx + 0x2c]
test al, 8
jne 0x46cef9
or eax, 8
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x384
mov dword [esp + 4], str.src_win_process.c
mov dword [esp], 0x645d9c
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x46ce8f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], str.UnregisterWaitEx
mov dword [esp], eax
call fcn.0045b880
lea esi, [esi]
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov dword [esp], ebx
call fcn.0046dce0
mov eax, dword [ebx + 0x2c]
test al, 1
jne 0x46e8a0
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x46e868
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x84]
test ecx, ecx
jne 0x46e89a
test al, 8
jne 0x46e89a
mov eax, dword [esp + 0x20]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x103
mov dword [esp + 4], str.src_win_signal.c
mov dword [esp], 0x646260
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x46e857
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x20]
mov eax, dword [ebx + 0x18]
cmp eax, 0xffffffff
je 0x478bf9
cmp eax, 2
jle 0x478c80
cmp eax, 0xffffffff
je 0x478ca8
mov dword [esp], eax
call sub.msvcrt.dll__close_1
mov edx, dword [ebx + 0x2c]
test dh, 1
jne 0x478cc6
mov eax, edx
mov dword [ebx + 0x18], 0xffffffff
mov dword [ebx + 0x90], 0xffffffff
and eax, 0xfffe7fff
and edx, 1
mov dword [ebx + 0x2c], eax
jne 0x478ce0
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x478c4b
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
jne 0x478c75
test al, 8
jne 0x478c75
mov eax, dword [ebx + 4]
or edx, 9
mov dword [ebx + 0x2c], edx
mov edx, dword [eax + 0x2c]
mov dword [ebx + 0x28], edx
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0x888
mov dword [esp + 4], 0x6467c0
mov dword [esp], str.handle__u.fd___1__handle__u.fd___2
call fcn.004a0380
mov eax, dword [ebx + 0x18]
cmp eax, 0xffffffff
jne 0x478c02
mov eax, dword [ebx + 0x90]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x2c]
sub esp, 4
test dh, 1
je 0x478c16
mov dword [esp], ebx
call fcn.00478410
mov edx, dword [ebx + 0x2c]
jmp 0x478c16
mov dword [esp + 8], 0x894
mov dword [esp + 4], 0x6467c0
mov dword [esp], 0x647034
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x478c3a
push ebx
sub esp, 0x18
mov ebx, dword [esp + 0x24]
mov dword [esp], ebx
call fcn.00459ef0
mov eax, dword [ebx + 0x38]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebx + 0x2c]
sub esp, 4
mov dword [ebx + 0x38], 0xffffffff
test al, 1
jne 0x479742
mov edx, eax
and edx, 0x60
cmp edx, 0x60
je 0x47970e
mov edx, dword [ebx + 4]
add dword [edx + 4], 1
mov edx, eax
and edx, 0xffffffbf
mov ecx, edx
or ecx, 1
mov dword [ebx + 0x2c], ecx
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
jne 0x47973d
test al, 8
jne 0x47973d
mov eax, dword [esp + 0x20]
or edx, 9
mov dword [ebx + 0x2c], edx
mov eax, dword [eax + 0x2c]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x2c], ebx
add esp, 0x18
pop ebx
ret
mov dword [esp + 8], 0xb9
mov dword [esp + 4], str.src_win_udp.c
mov dword [esp], str.___handle___flags__UV__HANDLE_CLOSING_
call fcn.004a0380
mov eax, dword [ebx + 0x2c]
jmp 0x4796fd