Function at 0x424442
Capabilities:
Inspect section memory permissions

Disassembly:
sub eax, dword [ebp - 0x1c]
add eax, 0x1ff
and eax, 0xfffffe00
mov dword [ebp + 8], eax
call fcn.004109e7
jmp 0x4242a4
mov ecx, dword [0x487fb8]
and ecx, dword [0x4884d4]
inc dword [0x487fb8]
jmp 0x424266
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x240]
jmp 0x42454b
add ecx, 4
mov dword [ebp - 0x14], ecx
push dword [ebp - 0x14]
push dword [ebp - 8]
call fcn.00411bc8
push dword [ebp - 8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
call fcn.00417746
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
lea eax, [esi + 0x54]
cmp eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
jae 0x42423b
mov eax, dword [ebp + 0x14]
cmp eax, 1
je 0x42f448
test eax, eax
je 0x42ef24
add eax, 0x250
xor edx, edx
mov dx, word [eax]
movzx ecx, dx
and ecx, dword [0x4884d4]
inc edx
mov word [eax], dx
call fcn.0040fe00
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
add ecx, 4
cmp ecx, dword [ebp + 0x10]
mov dword [ebp - 0x10], ecx
jb 0x4241fb
mov eax, dword [ebp + 0x14]
cmp eax, 1
je 0x42f411
test eax, eax
je 0x4213e6
add eax, 0x250
xor edx, edx
mov dx, word [eax]
movzx ecx, dx
and ecx, dword [0x4884d4]
inc edx
mov word [eax], dx
mov eax, dword [ebp + 8]
inc dword [0x4884f8]
shr eax, 0xc
add dword [0x4884f4], eax
test byte [ebx + 0x20], 0x20
je 0x42429f
mov edx, dword [ebp + 8]
xor eax, eax
add edx, dword [ebp - 0x1c]
adc eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 8]
jb 0x42429f
mov eax, dword [ebp - 0xc]
ja 0x41f26b
cmp edx, eax
ja 0x41f26b
call fcn.0040fe00
inc dword [ebx + 0x10]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp - 0x14]
lea ecx, [esi + 0x54]
sar eax, 2
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x4884c8]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
push 0xffffffffffffffff
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 8]
push esi
push dword [ebp - 0x14]
lea edx, [eax + 0xfff]
xor ecx, ecx
shr edx, 0xc
lea edx, [edx*4 + 0x1c]
push edi
mov dword [edi], ecx
mov word [edi + 4], dx
mov dword [edi + 0x10], ecx
mov dword [edi + 0x18], ecx
mov dword [edi + 0x14], eax
mov word [edi + 6], 0x42
call fcn.0042432f
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x1c], eax
mov eax, dword [ebx + 0x24]
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x30], eax
mov eax, 0xc0033333
pop edi
pop ebx
pop esi
leave
ret 0x10
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0x14]
call fcn.0040fe69
test eax, eax
jne 0x44b0a0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
test eax, eax
push esi
jns 0x424612
mov esi, eax
shr esi, 4
and eax, 0x1e
and esi, 0x7ffff80
shl eax, 2
or esi, eax
add esi, dword [0x483ad8]
mov dword [ebp - 8], esi
push ebx
mov ebx, dword [esi]
mov eax, dword [ebx + 0x20]
test al, 0x10
jne 0x44b0aa
mov edx, dword [esi + 0x18]
push edi
mov edi, dword [esi + 0x10]
lea edx, [edi + edx*4]
cmp ecx, edx
jae 0x44b0b4
test eax, 0x20000000
jne 0x44b0be
mov eax, dword fs:[0x124]
push dword [ebp + 0x14]
mov dword [ebp - 0x18], eax
push 1
call fcn.00424064
mov esi, eax
test esi, esi
je 0x440a22
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov dword [eax], esi
cmp dword [0x483af0], 0
mov dword [ebp - 0x14], ecx
mov ecx, dword [0x48851c]
lea eax, [esi + 0x54]
lea edi, [esi + 0x38]
mov dword [ebp + 0x10], eax
mov dword [ebp + 8], 0x1000
mov dword [ebp - 0x10], ecx
jne 0x44b1f6
mov ecx, dword [ebp - 0x18]
cmp byte [ecx + 0x255], 0
jne 0x4241d1
mov ecx, dword [ebx + 0x20]
test cl, 8
jne 0x4241d1
mov edx, dword [0x479e28]
add edx, edx
cmp dword [ebp - 0x10], edx
jbe 0x44b205
test cl, 0x20
je 0x4241bd
mov edx, dword [ebp - 8]
test byte [edx + 4], 0x20
mov ecx, dword [0x483ad4]
je 0x42454b
mov ecx, dword [0x483ad0]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
add ecx, 4
mov eax, 0xfff
test eax, ecx
mov dword [ebp - 4], ecx
je 0x4245a2
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + 0x10], ecx
jae 0x4241d1
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x10]
lea edx, [ecx + edx*4]
mov ecx, dword [ebp - 4]
cmp ecx, edx
jae 0x4245a2
mov ecx, dword [ecx]
mov edx, dword [ebp + 0xc]
cmp ecx, dword [edx]
jne 0x4245a2
add dword [ebp - 4], 4
inc dword [ebx + 0x10]
add dword [ebp + 8], 0x1000
add dword [ebp + 0x10], 4
test dword [ebp - 4], eax
jne 0x424563
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + 0x10], ecx
jae 0x4241d1
mov ecx, dword [ebp - 0x18]
cmp byte [ecx + 0x254], 0
jne 0x4241d1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffffc
mov edx, ecx
and edx, eax
cmp edx, 0xffc
mov dword [ebp - 4], ecx
je 0x4241cb
mov edx, dword [ebp + 0x10]
cmp edx, dword [ebp - 0x10]
jae 0x4241cb
mov edx, dword [ebp - 8]
cmp ecx, dword [edx + 0x10]
jb 0x4241cb
mov ecx, dword [ecx]
mov edx, dword [ebp + 0xc]
cmp ecx, dword [edx]
mov ecx, dword [ebp - 4]
jne 0x4241cb
inc dword [ebx + 0x10]
add dword [ebp + 8], 0x1000
add dword [ebp + 0x10], 4
sub ecx, 4
jmp 0x4245c4
mov edx, eax
shr edx, 4
and eax, 0x1e
shl eax, 2
and edx, 0xfffff80
or edx, eax
mov eax, dword [0x47a158]
sub eax, edx
mov dword [ebp - 8], eax
mov esi, eax
jmp 0x424487
mov ecx, dword [0x487fb8]
and ecx, dword [0x4884d4]
inc dword [0x487fb8]
jmp 0x424226
mov eax, dword [0x487f68]
add eax, 0x94
mov edx, dword [eax]
mov ecx, edx
and ecx, dword [0x4884d4]
inc edx
mov dword [eax], edx
jmp 0x424266
mov eax, dword [0x487f68]
add eax, 0x94
mov edx, dword [eax]
mov ecx, edx
and ecx, dword [0x4884d4]
inc edx
mov dword [eax], edx
jmp 0x424226
mov eax, 0xc7303001
jmp 0x424323
mov eax, 0xc7303001
jmp 0x424326
mov eax, 0xc0000006
jmp 0x424324
mov eax, 0xc0000005
jmp 0x424323
push ecx
push esi
call fcn.00411bc8
push esi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
call fcn.00417746
test byte [ebx + 0x20], 0x20
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
je 0x44b131
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
add ecx, 0x1000
adc eax, 0
cmp eax, edx
jb 0x44b131
ja 0x44b0f7
cmp ecx, dword [ebp - 0xc]
jbe 0x44b131
push dword [ebp + 0x14]
push 1
call fcn.00424064
mov esi, eax
test esi, esi
je 0x440a22
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov eax, dword fs:[0x124]
lea eax, [esi + 0x54]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
lea edi, [esi + 0x38]
mov dword [ebp + 8], 0x1000
mov dword [ebp - 0x14], eax
jmp 0x4241f0
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov cl, 0xc
call sym.ntoskrnl.exe__allshr
mov edi, eax
add edi, dword [ebx + 0x30]
inc dword [ebx + 0x10]
mov ecx, dword [0x4884c8]
lea eax, [edi + edi*2]
lea esi, [ecx + eax*8]
test byte [esi + 0xd], 7
je 0x44b1c1
mov ecx, esi
call fcn.00410033
inc word [esi + 0xe]
mov eax, dword [esi + 0xc]
inc dword [esi + 8]
mov ebx, dword [ebp + 0xc]
and eax, 0xffffdeff
or eax, 0x1600
mov dword [esi + 0xc], eax
mov esi, ebx
shr esi, 0xa
and esi, 0x3ffffc
sub esi, 0x40000000
test byte [esi], 1
jne 0x44b1ab
mov ecx, ebx
call fcn.00415527
test eax, eax
jge 0x44b1ab
push 0
push dword [esi]
push ebx
push 0x61940
push 0x1a
call sym.ntoskrnl.exe_KeBugCheckEx
mov eax, dword [esi]
mov ecx, dword [0x4884c8]
shr eax, 0xc
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
inc dword [eax + 8]
jmp 0x44b1cf
push 0
push dword [ebp + 0xc]
push edi
call fcn.0041094e
mov ebx, dword [ebp + 0xc]
mov ecx, ebx
call fcn.0040fe28
mov ecx, dword [ebx]
shr ecx, 5
and ecx, 0x1f
or eax, dword [ecx*4 + 0x479ee8]
shl edi, 0xc
or eax, edi
mov dword [ebx], eax
mov eax, 0x110
jmp 0x424323
and dword [ebp - 0x10], 0
dec dword [0x483af0]
jmp 0x424500
test cl, 0x20
jne 0x44b21a
mov edx, dword [ebp - 0x18]
cmp byte [edx + 0x254], 0
je 0x4241d1
cmp dword [ebp - 0x10], 0x1f
jbe 0x4241d1
jmp 0x42452d