Function at 0x140209b50
Capabilities:
Inspect section memory permissions

Disassembly:
push rdi
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rsi
mov rbx, rcx
xor esi, esi
cmp dword [0x140350878], esi
je 0x140209baa
mov r9d, 1
mov r8d, r9d
lea rdx, str.fScanBoostActive
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov dword [rbx + 0x12bc], 1
mov eax, dword [0x14035087c]
mov dword [rbx + 0x12c0], eax
jmp 0x140209bbc
mov dword [rcx + 0x12bc], esi
mov eax, dword [0x14035087c]
mov dword [rcx + 0x12c0], eax
cmp dword [rbx + 0x12c0], 2
jne 0x140209bed
mov r9d, 1
mov r8d, r9d
lea rdx, str.CSASScanner_ScanBoost_Level_High
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov dword [rbx + 0x12c4], 1
jmp 0x140209bf3
mov dword [rbx + 0x12c4], esi
mov ecx, 0xd0
call fcn.14018ef40
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140209c14
mov rcx, rax
call fcn.140201e00
mov rcx, rax
jmp 0x140209c17
mov rcx, rsi
mov qword [rbx + 0x1560], rcx
mov eax, dword [0x140350844]
mov dword [rcx + 0xac], eax
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x98], esi
mov rax, qword [rbx + 0x1560]
mov qword [rax + 0xa0], 0x400000
mov dword [rax + 0x9c], 1
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x50], esi
mov rax, qword [0x14037caf8]
mov ecx, dword [rax + 0x12b8]
and ecx, 0x800000
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x8c], ecx
mov rax, qword [0x14037caf8]
mov ecx, dword [rax + 0x12b8]
and ecx, 0x400000
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0xb8], ecx
mov rax, qword [0x14037caf8]
mov ecx, dword [rax + 0x12b8]
and ecx, 0x40000000
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x90], ecx
mov rax, qword [0x14037caf8]
mov ecx, dword [rax + 0x12b8]
and ecx, 0x20000000
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x94], ecx
cmp dword [0x14035083c], 0
je 0x140209d2e
mov eax, dword [0x140350870]
mov rcx, qword [rbx + 0x1560]
mov dword [rcx + 0x3c], esi
mov dword [rcx + 0x40], eax
test eax, eax
jne 0x140209d02
mov dword [rcx + 0x38], esi
jmp 0x140209d09
mov dword [rcx + 0x38], 1
mov eax, dword [0x140350870]
mov rcx, qword [rbx + 0x1560]
mov dword [rcx + 0x48], esi
mov dword [rcx + 0x4c], eax
test eax, eax
jne 0x140209d25
mov dword [rcx + 0x44], esi
jmp 0x140209d54
mov dword [rcx + 0x44], 1
jmp 0x140209d54
mov rax, qword [rbx + 0x1560]
mov qword [rax + 0x3c], rsi
mov dword [rax + 0x38], esi
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x48], esi
mov dword [rax + 0x4c], 0xffffffff
mov dword [rax + 0x44], 1
mov ecx, esi
cmp dword [0x14035084c], esi
sete cl
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x58], ecx
test dword [0x14037caf0], 0x10000000
je 0x140209daf
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0xac], esi
mov rax, qword [rbx + 0x1560]
mov qword [rax + 0x3c], rsi
mov dword [rax + 0x38], esi
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x58], 1
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0x88], 1
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0xa8], 1
test dword [0x14035088c], 0x80000000
je 0x140209e9d
mov rax, qword [rbx + 0x1560]
mov dword [rax + 0xbc], 1
mov ecx, 0xd0
call fcn.14018ef40
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140209e02
mov rcx, rax
call fcn.140201e00
mov rdi, rax
jmp 0x140209e05
mov rdi, rsi
mov rdx, qword [rbx + 0x1560]
mov rcx, rdi
call fcn.1402020e0
mov dword [rdi + 0xac], esi
mov dword [rdi + 0x58], 1
lea rax, vtable.CSABString.0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x38], 4
mov ecx, 5
call fcn.140247068
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140209e5b
mov ecx, dword [str..ZIP]
mov dword [rax], ecx
movzx ecx, byte [0x14029bf30]
mov byte [rax + 4], cl
mov dword [rsp + 0x3c], 1
mov rcx, qword [rbx + 0x1560]
add rcx, 0x78
lea rdx, [rsp + 0x28]
call fcn.1400b2e80
nop
cmp dword [rsp + 0x3c], 1
jne 0x140209e8f
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140209e8f
call fcn.140247060
mov rax, qword [rbx + 0x1560]
mov qword [rax + 0xc8], rdi
test dword [0x14037caf0], 0x10000000
jne 0x140209eb9
mov rcx, rbx
call fcn.140208500
mov rcx, rbx
call fcn.140208b10
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret