Function at 0x18001b730
Capabilities:
Inspect section memory permissions

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x1800b3dc8]
xor rax, rsp
mov qword [rsp + 0x58], rax
lea eax, [rdx + 9]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x30], eax
mov rdi, r9
mov r13, r8
mov ebp, edx
mov r12, rcx
cmp edx, eax
jae case.0x18001b7bc.103
mov r15, qword [rsp + 0x20]
mov ebx, 6
mov r14, qword [rsp + 0x20]
mov r10d, 0x6c
lea eax, [rbp - 0x65]
lea r11, [0x180000000]
lea edx, [r10 - 0x50]
lea r9d, [r10 - 0x64]
lea r8d, [r10 - 0x68]
cmp eax, edx
ja case.0x18001b7bc.109
movzx eax, byte [r11 + rax + 0x1c130]
mov ecx, dword [r11 + rax*4 + 0x1c10c]
add rcx, r11
jmp rcx
test rdi, rdi
je 0x18001b7dc
test r12, r12
je 0x18001b7dc
movzx eax, byte [r12]
mov byte [rdi], al
mov dword [rsp + 0x2c], 0
jmp case.0x18001b7bc.109
mov r8, r12
lea rcx, str.RecvRequest:_NaClSrpcMessageChannelReceive_incomplete:_expected__u__got__d
mov rdx, rdi
call fcn.18004e550
mov dword [rsp + 0x2c], 0
jmp case.0x18001b7bc.109
mov eax, dword [rsp + 0x2c]
mov dword [rsp + 0x20], eax
jmp case.0x18001b7bc.109
mov r8, qword [0x1800b3ea8]
xor r9d, r9d
xor edx, edx
mov ecx, 0xf8
call fcn.180040a10
test al, al
je case.0x18001b7bc.109
nop word [rax + rax]
mov esi, 0xb
mov eax, esi
sub eax, 0xb
je 0x18001b994
sub eax, 1
je 0x18001b89b
cmp eax, 1
jne 0x18001b9a4
mov r8, qword [0x1800b3ea8]
mov r9, rdi
mov edx, 0xa0
xor ecx, ecx
call fcn.180014720
test al, al
jne 0x18001b9a4
mov byte [rsp + 0x20], 0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1800508f0
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r14, 0xffffffffffffffff
je 0x18001b9a4
mov ebx, 0x3b
nop word [rax + rax]
mov eax, ebx
sub eax, 0x39
je 0x18001c0e2
sub eax, 1
je 0x18001b958
cmp eax, 1
jne 0x18001b987
cmp qword [rdi + 0x10], r14
mov r8, r14
mov qword [rsp + 0x48], 0
mov rdx, rdi
cmovb r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
jb 0x18001b8fd
mov rdx, qword [rdi]
lea rcx, [rsp + 0x38]
call fcn.180019f00
or dword [rsp + 0x28], 1
lea rdx, [rsp + 0x38]
mov rcx, r12
call fcn.1800032b0
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x18001b987
mov rcx, qword [rsp + 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b951
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c0db
call fcn.180050140
jmp 0x18001b987
mov r8, qword [rdi + 0x10]
lea rax, [r14 + 1]
cmp r8, rax
mov rcx, rdi
cmovb rax, r8
cmp qword [rdi + 0x18], 0x10
jb 0x18001b974
mov rcx, qword [rdi]
sub r8, rax
lea rdx, [rcx + rax]
mov qword [rdi + 0x10], r8
inc r8
call sub.VCRUNTIME140.dll_memmove
dec ebx
cmp ebx, 0x38
ja 0x18001b8b0
jmp 0x18001b9a4
xor r8d, r8d
mov dl, 0xa
mov rcx, rdi
call fcn.18001dda0
mov r14, rax
inc esi
cmp esi, 0xe
jb 0x18001b835
mov r8, qword [0x1800b3ea8]
xor r9d, r9d
xor edx, edx
mov ecx, 0xf8
call fcn.180040a10
test al, al
jne 0x18001b830
mov ebx, 6
jmp case.0x18001b7bc.109
mov eax, dword [rdi]
cmp eax, 0xd000000
ja 0x18001bbd4
je 0x18001bac7
cmp eax, 0x6000000
ja 0x18001bb28
je 0x18001bbb0
cmp eax, 0x3000000
ja 0x18001bb0d
je 0x18001baf0
test eax, eax
je 0x18001c080
cmp eax, 0x1000000
je 0x18001ba7f
cmp eax, 0x2000000
jne 0x18001c080
mov ecx, 0x102
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x101
je case.0x18001b7bc.105
cmp eax, 1
jne 0x18001ba4c
mov r15d, 1
mov dword [r13 + 4], r15d
dec ecx
cmp ecx, 0x100
ja 0x18001ba30
mov eax, 9
nop dword [rax + rax]
cmp eax, 9
je 0x18001bc1c
cmp eax, 0x42
jne 0x18001bc22
mov dword [r13 + 4], 2
jmp case.0x18001b7bc.105
mov edx, 0x8d
cmp edx, 0x8d
je 0x18001ba9a
cmp edx, 0x122d
je case.0x18001b7bc.105
jmp 0x18001bab9
cmp byte [r12 + 0x2a], 4
mov r15, r8
cmove r15, r9
xor eax, eax
cmp byte [r12 + 0x2a], 4
setne al
add eax, 0x12
mov dword [r13 + 4], eax
add edx, 0x11a0
cmp edx, 0x2340
jbe 0x18001ba84
mov edx, 0x76
nop dword [rax]
cmp edx, 0x76
je 0x18001bb76
cmp edx, 0x4d70
je case.0x18001b7bc.105
jmp 0x18001bb98
xor r15d, r15d
cmp byte [r12 + 0x2a], 4
mov dword [r13 + 4], 1
sete r15b
inc r15
jmp case.0x18001b7bc.105
cmp eax, 0x4000000
je 0x18001bc2e
cmp eax, 0x5000000
je 0x18001bc91
jmp 0x18001c080
cmp eax, 0xa000000
ja 0x18001bb5b
je 0x18001bc5e
cmp eax, 0x7000000
je 0x18001be2d
cmp eax, 0x8000000
je 0x18001bcc2
cmp eax, 0x9000000
je 0x18001bc76
jmp 0x18001c080
cmp eax, 0xb000000
je 0x18001bdcc
cmp eax, 0xc000000
je 0x18001be50
jmp 0x18001c080
cmp byte [r12 + 0x2a], 4
mov r15d, 2
cmove r15, r8
xor eax, eax
cmp byte [r12 + 0x2a], 4
sete al
add eax, 2
mov dword [r13 + 4], eax
add edx, 0x4cfa
cmp edx, 0x99f4
jbe 0x18001bad0
nop word [rax + rax]
cmp byte [r12 + 0x29], 4
mov r15, r8
cmove r15, rbx
xor eax, eax
cmp byte [r12 + 0x29], 4
sete al
add eax, 0xe
mov dword [r13 + 4], eax
jmp case.0x18001b7bc.105
cmp eax, 0x50000000
ja 0x18001bd63
je 0x18001bf33
cmp eax, 0x20000000
ja 0x18001bd48
je 0x18001beaf
cmp eax, 0xe000000
je 0x18001ba56
cmp eax, 0xf000000
je 0x18001c031
cmp eax, 0x10000000
je 0x18001be7f
jmp 0x18001c080
mov r15d, 2
add eax, 0x39
cmp eax, 0x7b
jb 0x18001ba60
mov eax, 0xb2
cmp eax, 0xb2
je 0x18001bc47
cmp eax, 0x15d
je case.0x18001b7bc.105
jmp 0x18001bc52
mov r15, r8
mov dword [r13 + 4], 3
add eax, 0xab
cmp eax, 0x208
jb 0x18001bc33
mov eax, r10d
cmp eax, 0x6c
je 0x18001bd2e
add eax, 0x99
cmp eax, 0x105
jb 0x18001bc61
mov eax, 0x3c
nop dword [rax + rax]
cmp eax, 0x3c
je 0x18001bd22
add eax, 0x12
cmp eax, 0x4e
jb 0x18001bc80
mov ecx, 0xb2
mov eax, ecx
sub eax, 0xb2
je 0x18001bcaa
cmp eax, 1
je case.0x18001b7bc.105
jmp 0x18001bcb8
mov r15d, 0x10
mov dword [r13 + 4], 5
inc ecx
cmp ecx, 0xb4
jb 0x18001bc96
mov eax, 0x59
cmp eax, 0x59
je 0x18001bcd9
cmp eax, 0xe41
je case.0x18001b7bc.105
jmp 0x18001bce7
mov r15d, 0x10
mov dword [r13 + 4], 0xa
add eax, 0xde8
cmp eax, 0x1bd0
jbe 0x18001bcc7
mov ecx, 0x7c
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x7c
je 0x18001bdbb
sub eax, 1
je 0x18001bdb1
cmp eax, 1
je case.0x18001b7bc.105
jmp 0x18001bdc1
mov r15, r9
mov dword [r13 + 4], r8d
jmp case.0x18001b7bc.105
xor eax, eax
mov r15, rbx
cmp byte [r12 + 0x29], 4
setne al
add eax, 0x10
mov dword [r13 + 4], eax
jmp case.0x18001b7bc.105
cmp eax, 0x30000000
je 0x18001bec9
cmp eax, 0x40000000
je 0x18001bf01
jmp 0x18001c080
cmp eax, 0x90000000
ja 0x18001bd96
je 0x18001bdfd
cmp eax, 0x60000000
je 0x18001bf86
cmp eax, 0x70000000
je 0x18001bfce
cmp eax, 0x80000000
je 0x18001bffe
jmp 0x18001c080
cmp eax, 0xa0000000
je 0x18001bcf3
cmp eax, 0xff000000
je 0x18001c063
jmp 0x18001c080
mov dword [r13 + 4], 0xb
jmp 0x18001bdc1
mov r15d, 0x10
inc ecx
cmp ecx, 0x7f
jb 0x18001bd00
mov ecx, 0xe6
mov eax, ecx
sub eax, 0xe6
je 0x18001bde5
cmp eax, 1
je case.0x18001b7bc.105
jmp 0x18001bdf3
mov r15d, 0x10
mov dword [r13 + 4], 0xc
inc ecx
cmp ecx, 0xe8
jb 0x18001bdd1
mov ecx, 0x60
mov eax, ecx
sub eax, 0x60
je 0x18001be14
cmp eax, 0x2e
je case.0x18001b7bc.105
jmp 0x18001be22
mov r15d, 0x10
mov dword [r13 + 4], 0xd
add ecx, 0x2e
cmp ecx, 0xbc
jb 0x18001be02
mov ecx, 0x77
mov eax, ecx
sub eax, 0x76
je case.0x18001b7bc.105
cmp eax, 1
jne 0x18001be49
mov r15, r9
mov dword [r13 + 4], r8d
dec ecx
cmp ecx, 0x75
ja 0x18001be32
mov ecx, 0xe5
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe4
je 0x18001c0b8
cmp eax, 1
jne 0x18001be75
mov r15, r8
dec ecx
cmp ecx, 0xe3
ja 0x18001be60
mov ecx, 0x100
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xff
je 0x18001c0b2
cmp eax, 1
jne 0x18001bea5
mov r15, r8
dec ecx
cmp ecx, 0xfe
ja 0x18001be90
mov eax, 0xa
cmp eax, 0xa
je 0x18001c0a5
add eax, 0xbc
cmp eax, 0xc6
jb 0x18001beb4
mov eax, 0x7e
nop
cmp eax, 0x7e
je 0x18001beef
cmp eax, 0x5994
je 0x18001bee9
cmp eax, 0xb2aa
je case.0x18001b7bc.105
jmp 0x18001bef5
mov dword [r13 + 4], r9d
jmp 0x18001bef5
mov r15d, 0xa
add eax, 0x5916
cmp eax, 0x10b42
jbe 0x18001bed0
mov ecx, 0x45
nop word [rax + rax]
mov eax, ecx
sub eax, 0x44
je case.0x18001b7bc.105
cmp eax, 1
jne 0x18001bf2c
lea r15d, [rax + 9]
mov dword [r13 + 4], 9
dec ecx
cmp ecx, 0x43
ja 0x18001bf10
mov ecx, 0x89
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x89
je 0x18001bf6b
sub eax, 0x5b
je 0x18001bf59
cmp eax, 0x5b
je case.0x18001b7bc.105
jmp 0x18001bf7b
xor eax, eax
cmp r15, 0x1c
sete al
add eax, 0x14
mov dword [r13 + 4], eax
jmp 0x18001bf7b
cmp byte [r12 + 0x29], 4
mov r15d, 0xe
cmove r15, rdx
add ecx, 0x5b
cmp ecx, 0x19a
jb 0x18001bf40
mov edx, 0x10b
nop dword [rax + rax]
mov eax, edx
sub eax, 0x10a
je case.0x18001b7bc.105
cmp eax, 1
jne 0x18001bfc4
cmp byte [r12 + 0x29], 4
mov r15d, 0x5e
cmove r15, r10
xor eax, eax
cmp byte [r12 + 0x29], 4
sete al
add eax, 0x16
mov dword [r13 + 4], eax
dec edx
cmp edx, 0x109
ja 0x18001bf90
mov ecx, 0x63
mov eax, ecx
sub eax, 0x63
je 0x18001bfe5
cmp eax, 0x76
je case.0x18001b7bc.105
jmp 0x18001bff3
mov r15d, 0x200
mov dword [r13 + 4], 0x18
add ecx, 0x76
cmp ecx, 0x14f
jb 0x18001bfd3
mov eax, 0xa8
cmp eax, 0xa8
je 0x18001c017
cmp eax, 0x6270
je case.0x18001b7bc.105
jmp 0x18001c025
mov r15d, 0xa
mov dword [r13 + 4], 0x19
add eax, 0x61c8
cmp eax, 0xc390
jbe 0x18001c003
mov ecx, r8d
mov eax, ecx
sub eax, 4
je 0x18001c046
cmp eax, 1
je case.0x18001b7bc.105
jmp 0x18001c05c
movzx r15d, byte [r12 + 0x29]
xor eax, eax
cmp r15, 4
sete al
add eax, 2
mov dword [r13 + 4], eax
inc ecx
cmp ecx, 6
jb 0x18001c034
mov eax, 0xdb
cmp eax, 0xdb
je 0x18001c098
add eax, 0x4b48
cmp eax, 0x4b48
jbe 0x18001c068
nop dword [rax + rax]
movzx r15d, byte [r12 + 0x2a]
xor eax, eax
cmp r15, 4
sete al
add eax, 2
mov dword [r13 + 4], eax
jmp case.0x18001b7bc.105
xor r15d, r15d
mov dword [r13 + 4], 0xff
jmp case.0x18001b7bc.105
mov r15, r9
mov dword [r13 + 4], 7
jmp case.0x18001b7bc.105
mov dword [r13 + 4], ebx
jmp case.0x18001b7bc.105
mov dword [r13 + 4], 3
mov ebp, 0x6f
mov qword [rsp + 0x20], r15
inc ebp
cmp ebp, dword [rsp + 0x30]
jae case.0x18001b7bc.103
jmp 0x18001b784
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov byte [rsp + 0x20], 1
jmp case.0x18001b7bc.103
mov eax, dword [rdi]
lea rcx, [rsp + 0x30]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov rdx, r12
lea r8d, [r9 + 0x69]
call fcn.180027c20
jmp case.0x18001b7bc.103