Function at 0x140007cc0
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x2c8
mov r13, qword [0x14011e4e0]
mov eax, 1
xor r9d, r9d
mov r14, qword [0x14011e5b0]
xor r15d, r15d
mov r12, r9
movzx esi, word [r13 + 0x28]
mov word [r13 + 0x28], ax
mov rax, qword [0x14011e5e0]
mov byte [rsp + 0x5d], cl
mov ebp, edx
mov word [rsp + 0x5e], si
lea r10, [rax + 0x150]
mov rax, r15
nop dword [rax]
mov word [rsp + 0x5a], ax
mov r15d, eax
mov rsi, r10
mov ebx, 0x1c
mov rdi, qword [0x14011e400]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r12
lea rdi, [rdi + r12 + 0x76c]
jmp 0x140007e2e
movzx edx, word [rsi]
xor ecx, ecx
test dx, dx
cmovs edx, ecx
xor r8d, r8d
movsx ecx, dx
movsx edx, word [rsi + 2]
test dx, dx
cmovs edx, r8d
add ecx, edx
movsx edx, word [rsi + 4]
test dx, dx
cmovs edx, r8d
add ecx, edx
cmp ecx, 0x32
jle 0x140007e3c
test ah, 0x80
mov ecx, eax
je 0x140007f70
and ecx, 2
mov edx, eax
and edx, 0x80
test ecx, ecx
jne 0x140007e51
nop word [rax + rax]
test edx, edx
jne 0x140007f00
mov edx, eax
and edx, 0x4000
test ah, 0x20
jne 0x140007ee8
test edx, edx
jne 0x140007f00
mov edx, eax
and edx, 0x40000000
test eax, 0x20000000
jne 0x140007f20
test edx, edx
jne 0x140007f00
mov edx, eax
and edx, 0x20002002
jne 0x140007e02
cmp byte [r13 + 0x225], 0
je 0x140007e18
cmp dword [rdi + 4], 1
je 0x140008120
movzx ecx, word [rsi + 6]
cmp word [rsi], cx
je 0x140007f88
test bpl, bpl
jne 0x140007ed4
sub rbx, 1
sub rdi, 0x44
sub rsi, 0xc
cmp rbx, 0xffffffffffffffff
je 0x1400080d0
mov eax, dword [rdi + 0x14]
mov r12d, ebx
test al, 0x40
jne 0x140007d50
mov ecx, eax
mov edx, eax
and ecx, 2
and edx, 0x80
test ecx, ecx
je 0x140007da8
test edx, edx
jne 0x140007db0
test al, 1
jne 0x140007ec0
cmp byte [r13 + 0xc], 0
je 0x140007ec0
test al, 0x20
jne 0x140008130
test ah, 8
jne 0x140007ec0
mov edx, dword [rdi + 4]
mov rax, qword [0x14011e5b0]
mov r9d, dword [rdi + 0x10]
mov rcx, rdx
shl rcx, 8
mov r8d, dword [rax + rcx + 0x30]
shl r9, 8
mov ecx, dword [rdi + 8]
shl rcx, 8
mov r11d, dword [rax + rcx + 0x30]
or r11d, r8d
mov ecx, r11d
or ecx, dword [rax + r9 + 0x30]
mov r9d, dword [rdi + 0xc]
shl r9, 8
or ecx, dword [rax + r9 + 0x30]
and ecx, 0x800000
jne 0x140008159
nop
mov edx, r12d
mov ecx, r15d
call fcn.140060290
test bpl, bpl
je 0x140007e18
mov edx, r12d
mov ecx, r15d
call fcn.140043a00
jmp 0x140007e18
test edx, edx
jne 0x140007dc9
and eax, 0xfffbffff
mov dword [rdi + 0x14], eax
jmp 0x140007e0f
mov edx, r12d
mov ecx, r15d
call fcn.140007bc0
test bpl, bpl
je 0x140007e18
jmp 0x140007ed4
test edx, edx
jne 0x140007de4
test al, 1
jne 0x140007ef0
mov edx, dword [rdi + 4]
mov ecx, dword [rdi + 8]
shl rdx, 8
shl rcx, 8
mov edx, dword [r14 + rdx + 0x2c]
or edx, dword [r14 + rcx + 0x2c]
mov ecx, dword [rdi + 0x10]
shl rcx, 8
or edx, dword [r14 + rcx + 0x2c]
mov ecx, dword [rdi + 0xc]
shl rcx, 8
or edx, dword [r14 + rcx + 0x2c]
and edx, 0x829c1
jne 0x140007ef0
add word [r13 + 0xb0], 1
jmp 0x140007ef0
or ecx, 2
and eax, 0x80
mov edx, eax
mov dword [rdi + 0x14], ecx
mov eax, ecx
jmp 0x140007e51
movzx ecx, word [rsi + 8]
cmp word [rsi + 2], cx
jne 0x140007e0f
movzx ecx, word [rsi + 0xa]
cmp word [rsi + 4], cx
jne 0x140007e0f
test edx, edx
je 0x140007e18
cmp byte [rsp + 0x5d], 0
je 0x140007e18
cmp byte [r13 + 0xc], 0
je 0x140007fd5
imul edx, dword [r13 + 0xa4], 0xcccccccd
cmp edx, 0x33333333
ja 0x140007e18
mov edx, dword [rdi + 4]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r14 + rcx + 0x10]
test rcx, rcx
je 0x140007ff3
cmp byte [rcx + 0xe], 0
jne 0x140007ef0
shl rdx, 8
mov rdx, qword [r14 + rdx + 8]
test rdx, rdx
je 0x14000800b
cmp byte [rdx + 0xe], 0
jne 0x140007ef0
mov edx, dword [rdi + 8]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r14 + rcx + 0x10]
test rcx, rcx
je 0x140008029
cmp byte [rcx + 0xe], 0
jne 0x140007ef0
shl rdx, 8
mov rdx, qword [r14 + rdx + 8]
test rdx, rdx
je 0x140008041
cmp byte [rdx + 0xe], 0
jne 0x140007ef0
mov edx, dword [rdi + 0x10]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r14 + rcx + 0x10]
test rcx, rcx
je 0x14000805f
cmp byte [rcx + 0xe], 0
jne 0x140007ef0
shl rdx, 8
mov rdx, qword [r14 + rdx + 8]
test rdx, rdx
je 0x140008077
cmp byte [rdx + 0xe], 0
jne 0x140007ef0
mov edx, dword [rdi + 0xc]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r14 + rcx + 0x10]
test rcx, rcx
je 0x140008095
cmp byte [rcx + 0xe], 0
jne 0x140007ef0
shl rdx, 8
mov rdx, qword [r14 + rdx + 8]
test rdx, rdx
je 0x1400080ad
cmp byte [rdx + 0xe], 0
jne 0x140007ef0
mov rdx, qword [0x14011e3b0]
cmp word [rdx + 0x1ac], 0
je 0x140007e18
jmp 0x140007ef0
mov rax, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r12, qword [rsp + 0x48]
add rax, 1
add r10, 0x15c
add r12, 0x7b4
cmp rax, 0x4f
jne 0x140007d18
movzx esi, word [rsp + 0x5e]
mov word [r13 + 0x28], si
add rsp, 0x2c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test al, 1
je 0x140007e18
jmp 0x140007e02
movzx eax, word [rsp + 0x5a]
mov ecx, ebx
shl ecx, 0x10
or ecx, eax
call fcn.140027990
test rax, rax
je 0x140008151
test word [rax], 0x1000
jne 0x1400081da
mov eax, dword [rdi + 0x14]
jmp 0x140007e6c
lea r9, [rdi + 4]
xor ecx, ecx
and r8d, 0x800000
jne 0x14000818b
add rcx, 1
cmp rcx, 4
je 0x1400081d6
mov edx, dword [r9 + rcx*4]
mov r8, rdx
shl r8, 8
mov r8d, dword [rax + r8 + 0x30]
and r8d, 0x800000
je 0x140008168
lea r8, [rsp + 0x190]
shl rdx, 8
lea rdx, [rax + rdx + 0x34]
mov rcx, r8
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
lea rcx, [rsp + 0x60]
lea rdx, str.you_see__s.
mov r8, rax
mov qword [rsp + 0x50], rcx
call fcn.1400716e0
mov rdx, qword [0x14011dce0]
xor r8d, r8d
mov rcx, qword [rsp + 0x50]
call fcn.14004ea90
jmp 0x140007ec0
mov edx, dword [rdi]
jmp 0x14000818b
lea rdx, [rsp + 0x190]
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov rcx, rax
mov qword [rsp + 0x50], rdx
call fcn.14001d740
mov r8, qword [rsp + 0x50]
lea rcx, [rsp + 0x60]
lea rdx, str.you_see__s.
mov qword [rsp + 0x50], rcx
call fcn.1400716e0
mov rdx, qword [0x14011e120]
xor r8d, r8d
mov rcx, qword [rsp + 0x50]
call fcn.14004ea90
jmp 0x140008151