Function at 0x492d87
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, ecx
mov ecx, dword [ebp + 8]
mov esi, ecx
and esi, 0xfffff
cmp dword [ebp + 0x14], 0
push 4
mov dword [ebp - 4], edi
mov dword [edi], ecx
mov dword [edi + 4], eax
mov dword [edi + 0xc], edx
pop ebx
jne 0x493603
mov edi, ecx
and edi, 0xf0000000
cmp edi, 0x40000000
ja 0x492e16
je 0x492e0c
test edi, edi
je 0x492e03
cmp edi, 0x10000000
je 0x49359a
cmp edi, 0x20000000
je 0x492dfb
cmp edi, 0x30000000
jne 0x4935cd
mov eax, esi
imul eax, eax, 3
jmp 0x49359c
lea eax, [esi + esi]
jmp 0x49359c
xor eax, eax
xor edx, edx
jmp 0x4935cd
mov eax, esi
shl eax, 2
jmp 0x49359c
cmp edi, 0x50000000
je 0x49354e
cmp edi, 0x60000000
je 0x492ec4
mov ebx, 0x80000000
cmp edi, ebx
je 0x492e44
cmp edi, 0x90000000
je 0x492e8c
jmp 0x4935cd
mov edi, ecx
and edi, 0xfff00000
cmp edi, ebx
je 0x492e84
cmp edi, 0x80100000
je 0x492e7d
cmp edi, 0x80200000
je 0x492e7d
cmp edi, 0x80300000
je 0x492e7d
cmp edi, 0x80400000
je 0x492e7d
cmp edi, 0x80500000
jne 0x492e8c
push 2
pop eax
jmp 0x492e89
xor edx, edx
inc edx
mov eax, edx
jmp 0x492e8c
mov eax, esi
imul eax, eax, 3
xor edx, edx
inc edx
and ecx, 0xfff00000
cmp ecx, 0x90000000
je 0x492eba
cmp ecx, 0x90100000
je 0x492dfb
cmp ecx, 0x90200000
jne 0x4935cd
lea eax, [esi + esi]
jmp 0x4935ca
imul esi, esi, 3
mov eax, esi
jmp 0x4935ca
and ecx, 0xfff00000
mov edi, 0x64f00000
cmp ecx, edi
ja 0x4931fc
je 0x49326c
mov esi, 0x62c00000
cmp ecx, esi
ja 0x493066
je 0x4930b3
mov esi, 0x61000000
cmp ecx, esi
ja 0x492fc1
je 0x49312d
mov esi, 0x60800000
cmp ecx, esi
ja 0x492f76
je 0x493010
mov esi, 0x60400000
cmp ecx, esi
ja 0x492f56
je 0x493010
cmp ecx, 0x60000000
je 0x4930e6
cmp ecx, 0x60100000
je 0x493010
cmp ecx, 0x60200000
je 0x493010
cmp ecx, 0x60300000
je 0x493010
jmp 0x4935cd
cmp ecx, 0x60500000
je 0x4930e6
cmp ecx, 0x60600000
je 0x493010
cmp ecx, 0x60700000
jmp 0x492f4b
cmp ecx, 0x60900000
je 0x493010
cmp ecx, 0x60a00000
je 0x492fba
cmp ecx, 0x60b00000
je 0x49312d
cmp ecx, 0x60c00000
je 0x493010
cmp ecx, 0x60d00000
je 0x493010
cmp ecx, 0x60e00000
je 0x493010
cmp ecx, 0x60f00000
jne 0x4935cd
push 6
jmp 0x493549
mov esi, 0x62400000
cmp ecx, esi
ja 0x493017
je 0x493138
cmp ecx, 0x61100000
je 0x493010
cmp ecx, 0x61200000
je 0x493010
cmp ecx, 0x61300000
je 0x493010
cmp ecx, 0x62000000
je 0x492fba
cmp ecx, 0x62100000
je 0x492fba
cmp ecx, 0x62200000
je 0x4930e6
cmp ecx, 0x62300000
jne 0x4935cd
push 8
jmp 0x493549
cmp ecx, 0x62500000
je 0x49305f
cmp ecx, 0x62600000
je 0x492fba
cmp ecx, 0x62700000
je 0x49312d
cmp ecx, 0x62800000
je 0x4930e6
cmp ecx, 0x62900000
je 0x493010
cmp ecx, 0x62a00000
je 0x493138
cmp ecx, 0x62b00000
jne 0x4935cd
push 0xa
jmp 0x493549
mov esi, 0x63d00000
cmp ecx, esi
ja 0x49313f
je 0x49312d
mov esi, 0x63500000
cmp ecx, esi
ja 0x4930ed
je 0x493010
mov esi, 0x63100000
cmp ecx, esi
ja 0x4930ca
je 0x4930c6
cmp ecx, 0x62d00000
je 0x4930c6
cmp ecx, 0x62e00000
je 0x4930c2
cmp ecx, 0x62f00000
je 0x4930ba
cmp ecx, 0x63000000
jne 0x4935cd
mov eax, ebx
jmp 0x4935ca
push 0xa
pop eax
jmp 0x4935ca
push 5
jmp 0x4930bc
push 8
jmp 0x4930bc
cmp ecx, 0x63200000
je 0x4930c2
cmp ecx, 0x63300000
je 0x4930ba
cmp ecx, 0x63400000
jne 0x4935cd
mov eax, ebx
jmp 0x49354a
cmp ecx, 0x63600000
je 0x493138
cmp ecx, 0x63700000
je 0x49305f
cmp ecx, 0x63800000
je 0x493134
cmp ecx, 0x63900000
je 0x493134
cmp ecx, 0x63a00000
je 0x493134
cmp ecx, 0x63b00000
je 0x493134
cmp ecx, 0x63c00000
jne 0x4935cd
push 0xc
jmp 0x493549
push 3
jmp 0x4930bc
push 5
jmp 0x493549
mov esi, 0x64700000
cmp ecx, esi
ja 0x4931a0
je 0x493199
cmp ecx, 0x64000000
je 0x492fba
cmp ecx, 0x64100000
je 0x493192
cmp ecx, 0x64200000
je 0x493010
cmp ecx, 0x64300000
je 0x49312d
cmp ecx, 0x64400000
je 0x49305f
cmp ecx, 0x64500000
je 0x493297
cmp ecx, 0x64600000
jmp 0x493127
push 9
jmp 0x493549
push 0x12
jmp 0x493549
cmp ecx, 0x64800000
je 0x493010
cmp ecx, 0x64900000
je 0x49312d
cmp ecx, 0x64a00000
je 0x49305f
cmp ecx, 0x64b00000
je 0x493297
cmp ecx, 0x64c00000
je 0x4930c6
cmp ecx, 0x64d00000
je 0x4931f5
cmp ecx, 0x64e00000
jne 0x4935cd
jmp 0x4930ba
push 0xc
jmp 0x4930bc
mov edi, 0x68200000
cmp ecx, edi
ja 0x4933a1
je 0x49312d
mov esi, 0x66000000
cmp ecx, esi
ja 0x4932ed
je 0x49312d
mov esi, 0x65800000
cmp ecx, esi
ja 0x49329e
je 0x492fba
mov esi, 0x65400000
cmp ecx, esi
ja 0x493273
je 0x493010
cmp ecx, 0x65000000
je 0x4930c6
cmp ecx, 0x65100000
je 0x4931f5
cmp ecx, 0x65200000
je 0x4930ba
cmp ecx, 0x65300000
jne 0x4935cd
push 0xf
jmp 0x4930bc
cmp ecx, 0x65500000
je 0x49312d
cmp ecx, 0x65600000
je 0x49305f
cmp ecx, 0x65700000
jne 0x4935cd
push 0xf
jmp 0x493549
cmp ecx, 0x65900000
je 0x493192
cmp ecx, 0x65a00000
je 0x493010
cmp ecx, 0x65b00000
je 0x49312d
cmp ecx, 0x65c00000
je 0x4932e6
cmp ecx, 0x65d00000
je 0x4932e6
cmp ecx, 0x65e00000
je 0x4932e6
cmp ecx, 0x65f00000
jne 0x4935cd
push 6
jmp 0x4930bc
mov esi, 0x67600000
cmp ecx, esi
ja 0x49334f
je 0x49312d
cmp ecx, 0x66100000
je 0x49312d
cmp ecx, 0x67000000
je 0x493192
cmp ecx, 0x67100000
je 0x49312d
cmp ecx, 0x67200000
je 0x493297
cmp ecx, 0x67300000
je 0x493199
cmp ecx, 0x67400000
je 0x49312d
cmp ecx, 0x67500000
jmp 0x493291
cmp ecx, 0x67700000
je 0x493297
cmp ecx, 0x67800000
je 0x49339a
cmp ecx, 0x67900000
je 0x49339a
cmp ecx, 0x67a00000
je 0x49312d
cmp ecx, 0x67b00000
je 0x49312d
cmp ecx, 0x68000000
je 0x493192
cmp ecx, 0x68100000
jmp 0x493291
push 9
jmp 0x4930bc
mov edi, 0x69300000
cmp ecx, edi
ja 0x49347e
je 0x49312d
mov esi, 0x68b00000
cmp ecx, esi
ja 0x49342b
je 0x4934d1
mov esi, 0x68700000
cmp ecx, esi
ja 0x493405
je 0x49312d
cmp ecx, 0x68300000
je 0x4931f5
cmp ecx, 0x68400000
je 0x4933fe
cmp ecx, 0x68500000
je 0x4931f5
cmp ecx, 0x68600000
jne 0x4935cd
push 0x10
jmp 0x4930bc
cmp ecx, 0x68800000
je 0x49312d
cmp ecx, 0x68900000
je 0x493424
cmp ecx, 0x68a00000
jmp 0x4934cb
push 0x14
jmp 0x493549
cmp ecx, 0x68c00000
je 0x493192
cmp ecx, 0x68d00000
je 0x49312d
cmp ecx, 0x68e00000
je 0x49339a
cmp ecx, 0x68f00000
je 0x49339a
cmp ecx, 0x69000000
je 0x49339a
cmp ecx, 0x69100000
je 0x49339a
cmp ecx, 0x69200000
jmp 0x493127
mov edi, 0x6b500000
cmp ecx, edi
ja 0x4934ea
je 0x493547
cmp ecx, 0x6a000000
je 0x4934e5
cmp ecx, 0x6a100000
je 0x4934de
cmp ecx, 0x6a200000
je 0x4934d5
cmp ecx, 0x6a300000
je 0x49312d
cmp ecx, 0x6a400000
je 0x4934d1
cmp ecx, 0x6a500000
je 0x49312d
cmp ecx, 0x6a600000
jne 0x4935cd
push 0x10
jmp 0x493549
mov eax, esi
mov edx, eax
jmp 0x4935cd
imul esi, esi, 3
mov eax, esi
jmp 0x49354a
lea eax, [esi + esi]
jmp 0x49354a
cmp ecx, 0x6b600000
je 0x493547
cmp ecx, 0x6b700000
je 0x49359a
cmp ecx, 0x6b800000
je 0x49359a
cmp ecx, 0x6b900000
je 0x49353d
cmp ecx, 0x6ba00000
je 0x493539
cmp ecx, 0x6bb00000
je 0x493539
cmp ecx, 0x6bc00000
jne 0x4935cd
xor eax, eax
push 2
inc eax
pop edx
jmp 0x4935cd
xor eax, eax
jmp 0x49359c
push 2
pop edx
mov eax, edx
jmp 0x4935cd
push 2
pop eax
mov edx, ebx
jmp 0x4935cd
and ecx, 0xfff00000
mov edi, 0x50500000
cmp ecx, edi
ja 0x4935a0
je 0x49358b
cmp ecx, 0x50000000
je 0x4935c2
cmp ecx, 0x50100000
je 0x49359a
cmp ecx, 0x50200000
je 0x492ebd
cmp ecx, 0x50300000
je 0x49359a
cmp ecx, 0x50400000
jne 0x4935cd
cmp edx, 0xffffffff
jne 0x493593
xor edx, edx
inc edx
imul esi, esi, 3
mov eax, esi
jmp 0x4935cd
mov eax, esi
mov edx, esi
jmp 0x4935cd
cmp ecx, 0x50600000
je 0x4935c2
cmp ecx, 0x50700000
je 0x49358b
cmp ecx, 0x50800000
je 0x49358b
cmp ecx, 0x50900000
jne 0x4935cd
jmp 0x49359a
cmp edx, 0xffffffff
lea eax, [esi + esi]
jne 0x4935cd
xor edx, edx
inc edx
mov edi, dword [ebp - 4]
or esi, 0xffffffff
cmp dword [edi + 4], esi
jne 0x4935db
mov dword [edi + 4], eax
cmp dword [edi + 0xc], esi
jne 0x4935e3
mov dword [edi + 0xc], edx
mov ecx, dword [edi + 4]
cmp ecx, eax
jne 0x4935f9
mov eax, dword [edi + 0xc]
cmp eax, edx
jne 0x4935f9
cmp ecx, esi
je 0x4935f9
cmp eax, esi
jne 0x493600
mov eax, 0x80004005
jmp 0x49367f
push 4
pop ebx
mov eax, dword [edi + 4]
xor esi, esi
cmp eax, 8
ja 0x493622
lea eax, [edi + 0x44]
mov dword [edi + 8], eax
mov eax, dword [edi + 0xc]
cmp eax, ebx
ja 0x493636
lea eax, [edi + 0x64]
mov dword [edi + 0x10], eax
jmp 0x493643
push eax
call fcn.004b1eac
cmp eax, esi
mov dword [edi + 8], eax
jne 0x493613
mov eax, 0x8007000e
jmp 0x49367f
push eax
call fcn.004b1eac
cmp eax, esi
mov dword [edi + 0x10], eax
je 0x49362f
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov ebx, 0xff
push ebx
push dword [edi + 8]
call sub.msvcrt.dll_memset
mov eax, dword [edi + 0xc]
shl eax, 2
push eax
push ebx
push dword [edi + 0x10]
call sub.msvcrt.dll_memset
add esp, 0x18
mov dword [edi + 0x24], esi
mov dword [edi + 0x28], esi
mov dword [edi + 0x2c], esi
mov dword [edi + 0x38], esi
mov dword [edi + 0x3c], esi
mov dword [edi + 0x40], esi
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10