Function at 0x140084770
Capabilities:
Inspect section memory permissions

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], r9
mov qword [r11 + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [r11 + 8], rcx
push rbp
push rsi
push rdi
push r15
sub rsp, 0xc8
mov rax, qword [0x1401761c0]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov edi, dword [r11 + 0x10]
mov r15, rcx
mov qword [rsp + 0x80], r8
mov rsi, r8
test r8, r8
je 0x140084cc4
xor ebp, ebp
mov qword [r8], rbp
test rcx, rcx
je 0x140084cc4
cmp word [rcx], bp
je 0x140084cc4
test edi, edi
je 0x140084cc4
lea rdx, [0x140133c10]
mov qword [r11 - 0x28], rbx
lea ecx, [rbp + 0x10]
call fcn.1400b9530
mov rbx, rax
test rax, rax
jne 0x14008481e
lea eax, [rbp + 8]
mov rbx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400b89f0
add rsp, 0xc8
pop r15
pop rdi
pop rsi
pop rbp
ret
mov qword [rax], 0xffffffffffffffff
mov r8d, 5
mov dword [rax + 8], 2
cmp word [r15], 0x2a
mov qword [rsp + 0x88], rbp
jne 0x14008488c
lea rcx, [r15 + 2]
lea rdx, str.FILE:
call fcn.1400da8e8
test eax, eax
jne 0x140084886
lea rcx, [r15 + 0xc]
xor edx, edx
lea r8d, [rax + 0x10]
call fcn.1400ca0d0
cmp rax, 0xffffffffffffffff
je 0x140084886
mov rcx, rbx
mov dword [rbx + 8], 0x10002
mov qword [rbx], rax
call fcn.140084da0
xor eax, eax
mov qword [rsi], rbx
jmp 0x1400847f9
mov r8d, 5
mov r11d, ebp
mov dword [rsp + 0x70], ebp
mov ecx, edi
mov qword [rsp + 0xb8], r12
shr ecx, 3
mov r12d, ebp
and ecx, 0x80
mov qword [rsp + 0xa8], r14
mov edx, ecx
bts edx, 8
bt edi, 0xb
cmovae edx, ecx
mov ecx, edx
bts ecx, 0x1f
test dil, 1
cmove ecx, edx
mov edx, ecx
bts edx, 0x1d
bt edi, 8
cmovae edx, ecx
mov ecx, edx
bts ecx, 0x10
bt edi, 9
cmovae ecx, edx
mov ebp, ecx
or ebp, 4
test dil, 0x80
cmove ebp, ecx
test dil, 2
je 0x1400848fd
bts ebp, 0x1e
jmp 0x14008490a
test dil, 4
je 0x14008490a
mov r12d, ebp
bts ebp, 8
mov ecx, edi
mov qword [rsp + 0xb0], r13
and ecx, 0x20000000
mov r14d, r12d
test dil, 8
je 0x14008493c
mov eax, ecx
mov r10d, 2
neg eax
sbb r13d, r13d
add r13d, 2
test ecx, ecx
cmove r10d, r8d
jmp 0x140084958
test ecx, ecx
je 0x14008494c
mov r13d, 4
lea r10d, [r13 - 1]
jmp 0x140084958
mov r13d, 3
mov r10d, 1
mov ecx, edi
mov dword [rsp + 0x64], r10d
shr ecx, 4
mov r9d, edi
and ecx, 1
mov edx, ecx
or edx, 2
test dil, 0x20
cmove edx, ecx
mov ecx, edx
or ecx, 4
test dil, 0x40
cmove ecx, edx
sar r9d, 0x1f
mov eax, r9d
mov dword [rsp + 0x68], ecx
and r9d, 0x4000000
and eax, 0x1000
mov r8d, r9d
mov edx, eax
bts edx, 0xe
bt edi, 0x1c
cmovae edx, eax
bts r8d, 0x19
bt edi, 0x1c
mov ecx, edx
mov eax, edi
cmovae r8d, r9d
or ecx, 1
bt edi, 0x1b
cmovae ecx, edx
mov edx, r8d
bts edx, 0x19
bt edi, 0x1b
cmovae edx, r8d
mov r8d, ecx
bts r8d, 0x15
mov r9d, edx
bt edi, 0x12
cmovae r8d, ecx
bts r9d, 0x15
bt edi, 0x12
mov ecx, r8d
cmovae r9d, edx
mov esi, r9d
and eax, 0x7000000
je 0x140084a44
cmp eax, 0x4000000
je 0x140084a36
cmp eax, 0x5000000
je 0x140084a2c
cmp eax, 0x6000000
je 0x140084a23
cmp eax, 0x7000000
jne 0x140084a44
bts esi, 0x1f
or ecx, 2
jmp 0x140084a44
bts esi, 0x1b
or ecx, 4
jmp 0x140084a44
bts esi, 0x1c
bts ecx, 0xb
jmp 0x140084a44
mov r11d, 0x2100
mov dword [rsp + 0x70], r11d
or esi, r11d
bt edi, 0x10
jb 0x140084a5f
bts r12d, 0x14
bts ebp, 0x14
or ecx, 0x20
test r14d, r14d
cmove r12d, r14d
jmp 0x140084a63
bts esi, 0x1e
mov edx, ecx
bts edx, 8
test edi, 0xc000
cmove edx, ecx
mov dword [rsp + 0x74], edx
je 0x140084b27
cmp qword [0x14017fa98], 0
je 0x140084b27
cmp qword [0x14017faa0], 0
je 0x140084b27
cmp qword [0x14017fab8], 0
je 0x140084b27
cmp qword [0x14017fab0], 0
je 0x140084b27
mov r8d, dword [rsp + 0x68]
mov r9d, edi
mov dword [rsp + 0x50], r11d
mov rcx, r15
mov dword [rsp + 0x48], edx
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r8d
lea r8, [rsp + 0x88]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbx
call fcn.140084210
mov r14d, eax
test eax, eax
je 0x140084c99
mov rax, qword [0x14017faa8]
test rax, rax
je 0x140084b15
mov ecx, r14d
call qword [case.0x1400a96cf.0]
mov r14d, eax
test r14d, r14d
je 0x140084c99
mov edx, 0x10
mov rcx, rbx
call fcn.1400b8a80
jmp 0x140084ca4
test edi, 0x600000
je 0x140084b37
mov r14d, 0x78
jmp 0x140084b15
mov r8d, dword [rsp + 0x68]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov edx, ebp
mov dword [rsp + 0x28], esi
mov rcx, r15
mov dword [rsp + 0x20], r13d
xor r14b, r14b
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x140084c34
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
cmp eax, 5
jne 0x140084bba
test r12d, r12d
je 0x140084b15
mov r8d, dword [rsp + 0x68]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov edx, r12d
mov dword [rsp + 0x28], esi
mov rcx, r15
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140084c39
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140084b09
cmp eax, 0x20
jne 0x140084b0c
bt edi, 0x13
jae 0x140084b15
lea rax, [rsp + 0x68]
mov byte [rsp + 0x60], 1
mov qword [rsp + 0x38], rax
mov r9d, r12d
mov eax, dword [rsp + 0x70]
mov r8d, ebp
mov dword [rsp + 0x30], eax
mov edx, edi
mov eax, dword [rsp + 0x74]
mov rcx, r15
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x20], eax
call fcn.140083f10
test eax, eax
js 0x140084b15
jne 0x140084c24
mov rsi, qword [rsp + 0x68]
xor r14d, r14d
cmp rsi, 0xffffffffffffffff
je 0x140084c99
movzx r14d, byte [rsp + 0x60]
jmp 0x140084c3c
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140084b15
mov rsi, rax
jmp 0x140084c3c
xor r14b, r14b
lea eax, [r13 - 1]
test eax, 0xfffffffc
jne 0x140084c66
cmp r13d, 3
je 0x140084c66
test r14b, r14b
jne 0x140084c66
cmp r13d, 1
je 0x140084c62
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140084c66
or byte [rbx + 0xb], 4
and edi, 0x40020000
cmp edi, 0x40000000
jne 0x140084c88
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov rdx, rbx
mov qword [rbx], rsi
mov rcx, r15
call fcn.140083e20
xor r14d, r14d
mov rax, qword [rsp + 0x80]
mov qword [rax], rbx
mov r13, qword [rsp + 0xb0]
mov eax, r14d
mov r14, qword [rsp + 0xa8]
mov r12, qword [rsp + 0xb8]
jmp 0x1400847f9
mov eax, 0x57
jmp 0x140084801