Function at 0x140008db0
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov ebp, dword [rsp + 0x90]
test ebp, ebp
je 0x140008e33
mov edi, r9d
mov r15, r8
mov r14, rdx
mov rbx, rcx
mov r12d, ebp
and r12d, 0xff000000
mov r13d, 1
mov ecx, 0x68
mov edx, 1
call qword [sym.imp.mozglue.dll_calloc]
mov rsi, rax
mov qword [rax + 0x58], r15
mov rcx, qword [r15 + 0x78]
test rcx, rcx
je 0x140008e3a
mov rax, rcx
mov rcx, qword [rcx + 0x60]
test rcx, rcx
jne 0x140008e07
add rax, 0x60
movdqu xmm0, xmmword [r15 + 0x80]
pcmpeqd xmm1, xmm1
psubq xmm0, xmm1
movdqu xmmword [r15 + 0x80], xmm0
jmp 0x140008e4c
xor eax, eax
jmp 0x1400094bc
lea rax, [r15 + 0x78]
mov qword [r15 + 0x80], r13
mov qword [r15 + 0x88], r13
mov qword [rax], rsi
mov eax, ebp
and eax, 7
mov dword [rsi + 8], eax
mov dword [rsi + 0xc], 0
cmp r12d, 0x9ffffff
jg 0x140008eb2
mov ecx, 1
cmp r12d, 0x2ffffff
jle 0x140008f13
cmp r12d, 0x5ffffff
jle 0x140008f8f
cmp r12d, 0x7ffffff
jg 0x14000905d
cmp r12d, 0x6000000
je 0x1400090be
cmp r12d, 0x7000000
je 0x140009077
jmp 0x1400091c1
cmp r12d, 0xfffffff
jle 0x140008f56
cmp r12d, 0x3fffffff
jle 0x140008fc5
cmp r12d, 0x5fffffff
jg 0x140009086
cmp r12d, 0x40000000
je 0x1400090d8
cmp r12d, 0x50000000
jne 0x1400091c1
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
mov edx, 0x1c
mov eax, 0xe
cmove rax, rdx
or ecx, 0x14
jmp 0x1400091d2
cmp r12d, 0xfeffffff
jg 0x140008ffb
cmp r12d, 0x80000000
je 0x1400090e7
cmp r12d, 0x90000000
je 0x1400090f6
cmp r12d, 0xa0000000
jne 0x1400091c1
mov eax, 0x10
mov ecx, 0xb
jmp 0x1400091d2
cmp r12d, 0xcffffff
jg 0x14000902c
cmp r12d, 0xa000000
je 0x140009105
cmp r12d, 0xb000000
je 0x14000911c
cmp r12d, 0xc000000
je 0x1400090af
jmp 0x1400091c1
cmp r12d, 0x3000000
je 0x14000912b
cmp r12d, 0x4000000
je 0x1400090af
cmp r12d, 0x5000000
jne 0x1400091c1
mov eax, 0x10
mov ecx, 5
jmp 0x1400091d2
cmp r12d, 0x10000000
je 0x14000913d
cmp r12d, 0x20000000
je 0x14000914c
cmp r12d, 0x30000000
jne 0x1400091c1
mov eax, 0xa
mov ecx, 8
jmp 0x1400091d2
cmp r12d, 0xff000000
je 0x140009158
cmp r12d, 0x1000000
je 0x140009161
mov eax, 1
cmp r12d, 0x2000000
je 0x1400091d2
jmp 0x1400091c1
cmp r12d, 0xd000000
je 0x140009178
cmp r12d, 0xe000000
je 0x14000918c
cmp r12d, 0xf000000
jne 0x1400091c1
movzx eax, byte [r15 + 0x29]
jmp 0x1400091c6
cmp r12d, 0x8000000
je 0x140009198
cmp r12d, 0x9000000
jne 0x1400091c1
mov eax, 8
mov ecx, 4
jmp 0x1400091d2
cmp r12d, 0x60000000
je 0x1400091a4
cmp r12d, 0x70000000
jne 0x1400091c1
mov eax, 0x200
mov ecx, 0x18
jmp 0x1400091d2
mov eax, 4
mov ecx, 3
jmp 0x1400091d2
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
lea rax, [rcx*2 + 4]
or ecx, 0xe
jmp 0x1400091d2
mov eax, 0xa
mov ecx, 9
jmp 0x1400091d2
mov eax, 0xa
mov ecx, 0x19
jmp 0x1400091d2
mov eax, 0x10
mov ecx, 0xd
jmp 0x1400091d2
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
xor ecx, 0x11
mov eax, 6
jmp 0x1400091d2
mov eax, 0x10
mov ecx, 0xc
jmp 0x1400091d2
xor eax, eax
cmp byte [r15 + 0x2a], 4
sete al
inc rax
jmp 0x1400091d2
mov eax, 4
mov ecx, 6
jmp 0x1400091d2
mov eax, 8
mov ecx, 7
jmp 0x1400091d2
mov ecx, 0xff
xor eax, eax
jmp 0x1400091d2
xor ecx, ecx
cmp byte [r15 + 0x2a], 4
sete cl
lea rax, [rcx*4 + 4]
xor ecx, 0x13
jmp 0x1400091d2
xor ecx, ecx
cmp byte [r15 + 0x2a], 4
sete cl
lea rax, [rcx*2 + 2]
jmp 0x1400091cf
mov eax, 2
mov ecx, 2
jmp 0x1400091d2
mov eax, 0x10
mov ecx, 0xa
jmp 0x1400091d2
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
mov edx, 0x6c
mov eax, 0x5e
cmove rax, rdx
or ecx, 0x16
jmp 0x1400091d2
movzx eax, byte [r15 + 0x2a]
xor ecx, ecx
cmp rax, 4
sete cl
or ecx, 2
mov r12d, dword [rsp + 0x98]
mov dword [rsi + 4], ecx
xor ecx, ecx
cmp rax, 2
sete cl
lea rcx, [rcx*8 + 1]
cmp rax, 1
mov r13d, 0x11
cmovne r13, rcx
shr ebp, 0x10
movzx ecx, bpl
dec ecx
cmp ecx, 0x17
ja case.default.0x140009223
mov dl, byte [rsp + 0xa0]
lea r8, [0x1400553a8]
movsxd rcx, dword [r8 + rcx*4]
add rcx, r8
jmp rcx
mov qword [rsp + 0x20], r13
jmp 0x1400092c6
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x29
jmp 0x140009421
mov dword [rsi + 0xc], 1
cmp eax, 1
jne 0x1400096f2
mov dword [rsi], 3
mov eax, 1
test r14, r14
jne case.0x1400093cd.1
jmp 0x140009484
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x19
jmp 0x140009421
mov qword [rsp + 0x20], 0x19
jmp 0x1400092c6
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x39
movzx ebx, dl
mov rcx, rsi
add rcx, 0x10
jmp 0x14000942b
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x21
jmp 0x140009421
mov qword [rsp + 0x20], 0x21
mov rcx, rbx
mov edx, r14d
mov r8, rsi
mov r9, r15
call fcn.140009790
jmp 0x140009484
mov dword [rsi], 0
jmp 0x140009482
mov dword [rsi], 5
cmp r14, 1
ja 0x140009725
xor eax, eax
cmp byte [r15 + 0x29], 4
sete al
lea rax, [rax*2 + 4]
jmp 0x140009484
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x31
jmp 0x140009421
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rdx, str.eflags
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x140083698]
mov dword [rsi + 0x18], eax
mov eax, dword [0x140083694]
mov dword [rsi + 0x1c], eax
mov eax, dword [0x14008369c]
test rax, rax
je 0x140009384
lea rcx, [0x140045280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], 0x51
jmp 0x140009482
shr dl, 3
and dl, 7
mov dword [rsi], 1
movzx eax, dl
jmp 0x1400095ca
mov dword [rsi], 2
cmp rax, r14
ja 0x140009484
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x1400093cd.3
lea rdx, [0x140055448]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov dword [rsi], 7
mov dword [rsi + 0xc], 8
movzx eax, byte [r15 + 0x29]
cmp rax, r14
ja 0x140009484
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x1400093cd.3
lea rdx, [0x140055408]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov al, byte [rbx]
mov byte [rsi + 0x10], al
mov eax, 1
jmp 0x140009484
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x41
mov rcx, rsi
add rcx, 0x10
movzx ebx, dl
mov qword [rsi + 0x24], 0
lea rax, [rbx + rbx*4]
lea rdx, [0x140083040]
lea rdi, [rdx + rax*4]
add rdi, 0xc
mov r8d, 8
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rdi - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rdi - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rdi - 4]
test rax, rax
je 0x14000947f
lea rcx, [0x140045280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], ebx
xor eax, eax
test r12d, r12d
je 0x1400094bc
mov ecx, dword [rsi]
and ecx, 0xfffffffe
cmp ecx, 6
jne 0x1400094bc
and r12d, 0xf00
add r12d, 0xffffff00
cmp r12d, 0x5ff
ja 0x1400094bc
shr r12d, 8
lea rcx, [0x140045820]
mov ecx, dword [rcx + r12*4]
or dword [rsi + 0xc], ecx
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsi], 6
mov dword [rsi + 0xc], 0x44a
mov rcx, rsi
add rcx, 0x30
mov qword [rsi + 0x44], 0
lea rdx, [0x1400830d8]
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1400830d0]
mov dword [rsi + 0x38], eax
mov eax, dword [0x1400830cc]
mov dword [rsi + 0x3c], eax
mov eax, dword [0x1400830d4]
test rax, rax
je 0x14000952f
lea rcx, [0x140045280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x44], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x48], eax
mov dword [rsi + 0x40], 7
jmp 0x140009482
mov dword [rsi], 6
mov dword [rsi + 0xc], 0x14a
mov rcx, rsi
add rcx, 0x30
mov qword [rsi + 0x44], 0
lea rdx, [0x1400830ec]
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1400830e4]
mov dword [rsi + 0x38], eax
mov eax, dword [0x1400830e0]
mov dword [rsi + 0x3c], eax
mov eax, dword [0x1400830e8]
test rax, rax
je 0x14000959d
lea rcx, [0x140045280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x44], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x48], eax
mov dword [rsi + 0x40], 8
jmp 0x140009482
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
mov eax, edi
lea rcx, [rax + r13]
add rcx, 0xffffffffffffffa2
cmp rcx, 0xffffffffffffffa3
jb 0x140009482
add r13, rax
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rax, [r13*4]
add rax, r13
lea rdx, [0x140083040]
lea rdi, [rdx + rax*4]
add rdi, 0xc
mov r8d, 8
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rdi - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rdi - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rdi - 4]
test rax, rax
je 0x14000962f
lea rcx, [0x140045280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], r13d
jmp 0x140009482
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x41
jmp 0x14000966c
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x39
jmp 0x14000966c
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x49
lea rax, [rdi - 0x5e]
cmp rax, 0xffffffffffffffa3
jb 0x140009482
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rax, [rdi + rdi*4]
lea rdx, [0x140083040]
lea rbx, [rdx + rax*4]
add rbx, 0xc
mov r8d, 8
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rbx - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rbx - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rbx - 4]
test rax, rax
je 0x1400096d5
lea rcx, [0x140045280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], edi
jmp 0x140009482
mov dword [rsi], 2
mov dword [rsi + 0x10], edi
mov dword [rsi + 0xc], 0x40
jmp 0x140009482
mov dword [rsi], 4
cmp rax, r14
ja 0x140009484
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x1400093cd.3
lea rdx, [0x140055428]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbx]
mov qword [rsi + 0x10], rcx
jmp 0x140009484
movzx eax, word [rbx]
mov word [rsi + 0x10], ax
cmp byte [r15 + 0x29], 4
jne 0x140009760
mov eax, 6
cmp r14, 4
jb 0x140009484
mov ecx, dword [rbx]
mov dword [rsi + 0x14], ecx
jmp 0x140009484
mov cl, byte [rbx]
mov byte [rsi + 0x10], cl
jmp 0x140009484
mov ecx, dword [rbx]
mov dword [rsi + 0x10], ecx
jmp 0x140009484
mov word [rsi + 0x14], ax
mov eax, 4
jmp 0x140009484
movzx ecx, word [rbx]
mov word [rsi + 0x10], cx
jmp 0x140009484
movzx eax, word [rbx]
mov word [rsi + 0x10], ax
mov eax, 2
jmp 0x140009484