Function at 0x1804cfcb0
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1a8
movaps xmmword [rsp + 0x190], xmm6
mov rdi, rdx
mov r12, rcx
mov r14, qword [rdx + 0x18]
mov r15, qword [rdx + 0x20]
test r14, r14
je 0x1804cfce4
mov rax, qword [r15 + 0x30]
jmp 0x1804cfce8
mov eax, dword [r15 + 0x34]
mov qword [rsp + 0x20], rax
mov eax, dword [r15 + 0x50]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x20]
lea rdx, [rsp + 0x60]
mov r8d, 0x3000
mov r9d, 4
call fcn.1804d1820
cmp eax, 0xb
je 0x1804cfd3a
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x20]
lea rdx, [rsp + 0x60]
mov r8d, 0x3000
mov r9d, 4
call fcn.1804d1820
mov rcx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x60]
add r8, 0xfffffffffffffff6
mov dl, 8
call fcn.1806a7aa0
mov rcx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x60]
add r8, 0xfffffffffffffff6
mov dl, 0xb
call fcn.1806a7aa0
mov r13, qword [rdi + 0x28]
mov rbp, qword [rdi + 0x30]
test rbp, rbp
je 0x1804cfdb5
mov rsi, qword [rdi + 0x48]
lea rax, [rbp*8]
lea rdi, [rax + rax*4]
xor ebx, ebx
nop word cs:[rax + rax]
mov edx, dword [r13 + rbx + 0x14]
add rdx, rsi
mov ecx, dword [r13 + rbx + 0xc]
mov r8d, dword [r13 + rbx + 0x10]
add rcx, qword [rsp + 0x20]
call fcn.1806a7400
add rbx, 0x28
cmp rdi, rbx
jne 0x1804cfd90
mov rdi, qword [rsp + 0x20]
test r14, r14
je 0x1804cfddf
lea rdx, [r15 + 0x88]
mov rcx, qword [r15 + 0x30]
mov rax, rdi
sub rax, rcx
mov qword [rsp + 0x158], rbp
jne 0x1804cfdfb
jmp 0x1804cfed2
lea rdx, [r15 + 0x78]
mov ecx, dword [r15 + 0x34]
mov rax, rdi
sub rax, rcx
mov qword [rsp + 0x158], rbp
je 0x1804cfed2
mov ecx, dword [rdx + 0x28]
test rcx, rcx
je 0x1804cfed2
cmp dword [rdx + 0x2c], 0
je 0x1804cfed2
add rcx, rdi
mov edx, 1
mov r8d, dword [rcx + 4]
test r8, r8
jne 0x1804cfe43
jmp 0x1804cfec4
xor r8d, r8d
add rcx, r8
mov r8d, dword [rcx + 4]
test r8, r8
je 0x1804cfec4
cmp r8d, 0xa
jb 0x1804cfeb4
lea r9, [r8 - 8]
shr r9, 0x3f
add r8, r9
add r8, 0xfffffffffffffff8
sar r8, 1
cmp r8, 2
cmovl r8, rdx
xor r9d, r9d
jmp 0x1804cfe78
inc r9
cmp r8, r9
je 0x1804cfeb0
movzx r10d, word [rcx + r9*2 + 8]
mov r11d, r10d
and r11d, 0xf000
cmp r11d, 0xa000
jne 0x1804cfe70
mov r11d, dword [rcx]
and r10d, 0xfff
add r10, r11
add qword [rdi + r10], rax
jmp 0x1804cfe70
mov r8d, dword [rcx + 4]
add rcx, r8
mov r8d, dword [rcx + 4]
test r8, r8
jne 0x1804cfe43
cmp dword [rcx], 0
jne 0x1804cfe30
mov rdi, qword [rsp + 0x20]
shl r14, 4
lea rbp, [r14 + 0x78]
mov qword [rsp + 0x150], r14
cmp dword [r15 + r14 + 0x84], 0
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x88], rbp
je 0x1804d021a
mov r14d, dword [r15 + rbp + 8]
test r14, r14
je 0x1804d021a
mov qword [rsp + 0x98], r12
add r14, rdi
lea r12, [rdi + 2]
mov esi, dword [r14 + 0xc]
test rsi, rsi
jne 0x1804cff50
cmp dword [r14 + 0x10], 0
jne 0x1804cff50
cmp dword [r14], 0
jne 0x1804cff50
cmp dword [r14 + 4], 0
jne 0x1804cff50
cmp dword [r14 + 8], 0
je 0x1804d020d
nop word cs:[rax + rax]
add rsi, rdi
mov rcx, rsi
call fcn.18069c2f0
lea r8, [rax + 1]
lea rcx, [rsp + 0xd0]
mov rdx, rsi
call fcn.180692b70
cmp qword [rsp + 0xd0], 0
jne 0x1804d01c8
mov rsi, qword [rsp + 0xe0]
test rsi, rsi
js 0x1804d087f
mov rbp, qword [rsp + 0xd8]
je 0x1804cffc0
movzx eax, byte [0x1807afe04]
mov r15d, 1
mov edx, 1
mov rcx, rsi
call fcn.1804caf90
test rax, rax
jne 0x1804cffc5
jmp 0x1804d0892
mov eax, 1
mov rcx, rax
mov rdx, rbp
mov r8, rsi
mov r15, rax
call fcn.1806a7400
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe0], rsi
lea rcx, [rsp + 0x28]
lea rdx, [rsp + 0xd0]
call fcn.1804d1630
cmp dword [rsp + 0x28], 0
mov rbx, qword [rsp + 0x160]
jne 0x1804d01ef
mov eax, dword [r14]
mov ecx, dword [r14 + 0x10]
add rcx, rdi
lea rdx, [rdi + rax]
test rax, rax
mov qword [rsp + 0x170], rcx
cmove rdx, rcx
mov qword [rsp + 0x168], rdx
mov rsi, qword [rdx]
test rsi, rsi
je 0x1804d0190
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0xa8], rax
xor ebp, ebp
jmp 0x1804d00aa
movzx edx, si
mov rcx, qword [rsp + 0xa8]
call sub.kernel32.dll_GetProcAddress
mov rcx, rax
test rax, rax
je 0x1804d01db
mov rdx, qword [rsp + 0x170]
mov qword [rdx + rbp], rcx
mov rcx, qword [rsp + 0x168]
mov rsi, qword [rcx + rbp + 8]
add rbp, 8
mov rcx, rax
mov qword [rsp + 0x58], rax
test rsi, rsi
je 0x1804d0195
test rsi, rsi
js 0x1804d0060
cmp byte [r12 + rsi], 0
je 0x1804d0190
add rsi, r12
mov rcx, rsi
call fcn.18069c2f0
lea r8, [rax + 1]
lea rcx, [rsp + 0xd0]
mov rdx, rsi
call fcn.180692b70
cmp qword [rsp + 0xd0], 0
jne 0x1804d01c8
mov rsi, qword [rsp + 0xe0]
test rsi, rsi
js 0x1804d0867
mov rdx, qword [rsp + 0xd8]
je 0x1804d0140
mov r15, rdi
mov rdi, rdx
movzx eax, byte [0x1807afe04]
mov ebx, 1
mov edx, 1
mov rcx, rsi
call fcn.1804caf90
test rax, rax
je 0x1804d0874
mov rcx, rax
mov rbx, rax
mov rdx, rdi
mov rdi, r15
jmp 0x1804d0145
mov ebx, 1
mov rcx, rbx
mov r8, rsi
call fcn.1806a7400
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rsi
lea rcx, [rsp + 0x68]
mov rdx, qword [rsp + 0xa8]
lea r8, [rsp + 0x28]
call fcn.1804d1720
cmp dword [rsp + 0x68], 0
jne 0x1804d01d3
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x58]
jmp 0x1804d007c
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x160], rbx
add r14, 0x14
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x88]
mov esi, dword [r14 + 0xc]
test rsi, rsi
jne 0x1804cff50
jmp 0x1804cff27
mov eax, 5
movd xmm0, eax
jmp 0x1804d01f5
movq xmm0, qword [rsp + 0x6c]
jmp 0x1804d01f5
movd xmm1, dword [rsp + 0x58]
movdqa xmm0, xmmword [0x1806ca730]
punpckldq xmm0, xmm1
jmp 0x1804d01f5
movq xmm0, qword [rsp + 0x2c]
mov rax, qword [rsp + 0x98]
movq qword [rax + 4], xmm0
mov dword [rax], 1
jmp 0x1804d084b
mov rdi, qword [rsp + 0x20]
mov r12, qword [rsp + 0x98]
cmp dword [r15 + rbp + 0x1c], 0
je 0x1804d02e2
lea rax, [0x1806bc05b]
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0xd0]
mov rcx, qword [rsp + 0xd0]
movabs rdx, 0xfdc935d0cf373dba
mov qword [rsp + 0xd0], rdx
mov rdx, qword [rsp + 0xd0]
call fcn.1804d1f00
mov rbx, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x1807afe04]
mov ecx, 0xc
mov edx, 1
call fcn.1804caf90
test rax, rax
je 0x1804d08ac
xor esi, 0x7f704a3a
movabs rcx, 0x8c6d740c73092ee6
xor rbx, rcx
mov qword [rax], rbx
mov dword [rax + 8], esi
mov qword [rsp + 0xd0], 0xc
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], 0xc
lea rcx, [rsp + 0x28]
lea rsi, [rsp + 0xd0]
mov rdx, rsi
call fcn.1804d1630
cmp dword [rsp + 0x28], 0
je 0x1804d03b5
mov rax, qword [rsp + 0x158]
test rax, rax
je 0x1804d050e
shl rax, 3
lea rsi, [rax + rax*4]
xor r14d, r14d
lea rdi, [rsp + 0xd0]
lea rbx, [rsp + 0x28]
jmp 0x1804d032d
mov rcx, rdi
mov rdx, rbx
call fcn.1804d1b90
cmp eax, 0xb
jne 0x1804d039e
add r14, 0x28
cmp rsi, r14
je 0x1804d050e
mov eax, dword [r13 + r14 + 0x10]
mov qword [rsp + 0x28], rax
test rax, rax
je 0x1804d0320
mov eax, dword [r13 + r14 + 0xc]
add rax, qword [rsp + 0x20]
mov qword [rsp + 0xd0], rax
mov eax, dword [r13 + r14 + 0x24]
test eax, 0x20000000
jne 0x1804d0380
mov r8d, 1
test eax, 0x40000000
je 0x1804d0310
shr eax, 0x1f
lea r8d, [rax*2 + 2]
jmp 0x1804d0310
mov r8d, 0x10
test eax, 0x40000000
je 0x1804d0310
shr eax, 0x1a
and eax, 0xffffffe0
add eax, 0x20
mov r8d, eax
jmp 0x1804d0310
mov dword [r12 + 4], eax
mov dword [r12 + 8], edx
mov dword [r12], 1
jmp 0x1804d084b
mov rbx, qword [rsp + 0x30]
lea rax, [0x1806c72b2]
mov qword [rsp + 0xd0], rax
mov rcx, qword [rsp + 0xd0]
movabs rax, 0x328d652cd5e6f6c0
mov qword [rsp + 0xd0], rax
mov rdx, qword [rsp + 0xd0]
call fcn.1804d1f50
mov r15, qword [rax]
mov r14, qword [rax + 8]
movzx esi, word [rax + 0x10]
movzx ebp, byte [rax + 0x12]
movzx eax, byte [0x1807afe04]
mov ecx, 0x13
mov edx, 1
call fcn.1804caf90
test rax, rax
je 0x1804d08ca
shl ebp, 0x10
or esi, ebp
mov ecx, esi
shr ecx, 0x10
xor cl, 0x67
mov edx, esi
shr edx, 8
xor dl, 0x14
xor sil, 0x11
movabs r8, 0xed27bf577bff404c
xor r14, r8
movabs r8, 0x16969b3459ca89cd
xor r15, r8
mov qword [rax], r15
mov qword [rax + 8], r14
mov byte [rax + 0x10], sil
mov byte [rax + 0x11], dl
mov byte [rax + 0x12], cl
mov qword [rsp + 0xd0], 0x13
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], 0x13
lea rcx, [rsp + 0x28]
lea r8, [rsp + 0xd0]
mov rdx, rbx
call fcn.1804d1720
cmp dword [rsp + 0x28], 0
je 0x1804d04c1
mov r15, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x88]
mov rax, qword [rsp + 0x158]
test rax, rax
jne 0x1804d02f3
jmp 0x1804d050e
mov r15, qword [rsp + 0x90]
mov rax, qword [rsp + 0x150]
mov ecx, dword [rax + r15 + 0x90]
add rcx, rdi
mov rbp, qword [rsp + 0x88]
mov eax, dword [r15 + rbp + 0x1c]
mov edx, 0xaaaaaaab
imul rdx, rax
shr rdx, 0x23
mov r8, rdi
call qword [rsp + 0x30]
mov rax, qword [rsp + 0x158]
test rax, rax
jne 0x1804d02f3
cmp dword [r15 + rbp + 0x4c], 0
mov rdi, qword [rsp + 0x20]
je 0x1804d083e
xorps xmm6, xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0x118], 0
movaps xmmword [rsp + 0x100], xmm6
mov dword [rsp + 0x110], 0
movabs rax, 0x101010101010101
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x148], 0
movups xmmword [rsp + 0x128], xmm6
movups xmmword [rsp + 0x134], xmm6
lea rcx, [rsp + 0x178]
call fcn.1804d2730
mov dword [rsp + 0x28], 0
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x40], 7
mov qword [rsp + 0x44], 0
mov word [rsp + 0x4c], 0
mov byte [rsp + 0x48], 1
mov rsi, qword [rsp + 0x180]
mov r8, qword [rsp + 0x188]
lea rcx, [rsp + 0x28]
mov rdx, rsi
call fcn.1806735b0
mov rdi, rax
mov rbx, rdx
mov rdx, qword [rsp + 0x178]
test rdx, rdx
je 0x1804d0607
mov r8d, 1
mov rcx, rsi
call fcn.1804cafa0
test rdi, rdi
jne 0x1804d08aa
movzx eax, byte [0x1807afe04]
mov ecx, 0x11
mov edx, 1
call fcn.1804caf90
test rax, rax
je 0x1804d08bb
movups xmm0, xmmword [str.LdrpHandleTlsDatantdll.dll]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x61
mov qword [rsp + 0x68], 0x11
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x11
lea rsi, [rsp + 0x28]
lea rdi, [rsp + 0x68]
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.1804d3a30
cmp dword [rsp + 0x28], 0x21
jne 0x1804d08aa
mov ebx, dword [rsp + 0x30]
lea rcx, [0x1806ca751]
call sub.kernel32.dll_LoadLibraryA
add rax, rbx
lea rcx, [rsp + 0xd0]
call rax
cmp eax, 0xffffffff
je 0x1804d070b
lea rax, [0x1806c7ed2]
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x28]
movabs rax, 0x9db29bd5435fe68a
mov qword [rsp + 0x28], rax
mov rdx, qword [rsp + 0x28]
call fcn.1804d1fe0
movabs rcx, 0x94e7d3158b657770
xor rcx, qword [rax]
movabs rdx, 0xf89e840abe2dceb7
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0xa5
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rdx
mov byte [rsp + 0x78], al
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xc8], 0x11
jmp 0x1804d0793
lea rax, [0x1806be2ed]
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x28]
movabs rax, 0x307fd61fc676947b
mov qword [rsp + 0x28], rax
mov rdx, qword [rsp + 0x28]
call fcn.1804d20a0
movabs rcx, 0x597d1d895386abd7
xor rcx, qword [rax]
movabs rdx, 0x345086dda3445d0f
xor rdx, qword [rax + 8]
movabs r8, 0x22ca45f7b5eda798
xor r8, qword [rax + 0x10]
mov r9d, 0x24e6896d
xor r9d, dword [rax + 0x18]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], r8
mov dword [rsp + 0x80], r9d
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xc8], 0x1c
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xb0], rax
lea rax, [0x1804ccee0]
mov qword [rsp + 0xb8], rax
lea rax, [0x1806ca760]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x48], 0
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 1
lea rcx, [rsp + 0x28]
call fcn.18066f320
mov rdi, qword [rsp + 0x20]
cmp dword [r15 + rbp + 0x4c], 0
je 0x1804d083e
mov eax, dword [r15 + rbp + 0x48]
test rax, rax
je 0x1804d083e
mov rsi, qword [rdi + rax + 0x18]
mov rax, qword [rsi]
test rax, rax
je 0x1804d083e
add rsi, 8
nop dword [rax + rax]
mov rcx, rdi
mov edx, 2
xor r8d, r8d
call rax
mov rax, qword [rsi]
add rsi, 8
test rax, rax
jne 0x1804d0820
mov rdi, qword [rsp + 0x20]
mov qword [r12 + 8], rdi
mov dword [r12], 0
movaps xmm6, xmmword [rsp + 0x190]
add rsp, 0x1a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, rbx
xor ebx, ebx
mov rcx, rbx
call fcn.18063bc30
mov rdx, rsi
mov rcx, rbx
call fcn.18063bc30
xor r15d, r15d
mov rcx, r15
mov rdx, qword [rsp + 0xa0]
call fcn.18063bc30
mov qword [rsp + 0xa0], rsi
mov rcx, r15
mov rdx, qword [rsp + 0xa0]
call fcn.18063bc30
ud2
mov ecx, 1
mov edx, 0xc
call fcn.18063bc30
mov ecx, 1
mov edx, 0x11
call fcn.18063bc30
mov ecx, 1
mov edx, 0x13
call fcn.18063bc30
int3