Function at 0x1400acca0
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rdi, r8
mov rbx, rdx
mov r13, rcx
mov qword [rsp + 0x28], r9
mov rbp, qword [r9 + 0x18]
test rbp, rbp
je 0x1400acd5f
lea rax, [rbp - 1]
mov rcx, qword [rsp + 0x28]
cmp rax, qword [rcx + 0x10]
jae 0x1400acd5f
mov r8, qword [rsp + 0x28]
mov rcx, qword [r8 + 8]
movzx r15d, byte [rcx + rax]
mov edx, dword [r8]
mov r8d, dword [r8 + 4]
mov rax, qword [rbx + 0x298]
or rax, qword [rbx + 0x2a8]
mov rcx, qword [rbx + 0x290]
or rcx, qword [rbx + 0x2a0]
or rcx, rax
je 0x1400acd79
lea rax, [rbx + 0x290]
mov r9d, r15d
shr r9d, 3
and r9d, 0xfffffff0
mov r10d, 1
xor r11d, r11d
mov ecx, r15d
shld r11, r10, cl
shl r10, cl
xor ecx, ecx
test r15b, 0x40
cmovne r11, r10
cmovne r10, rcx
and r11, qword [rax + r9 + 8]
and r10, qword [rax + r9]
or r10, r11
je 0x1400acd79
mov eax, 4
jmp 0x1400ad2c0
mov rax, qword [rsp + 0x28]
mov edx, dword [rax]
mov r8d, dword [rax + 4]
mov al, 2
movzx r9d, al
mov rax, r9
test edx, edx
jne 0x1400acd8d
jmp 0x1400acd9a
movzx eax, byte [rbx + r15 + 0x90]
movzx r9d, al
mov rax, r9
test edx, edx
je 0x1400acd9a
cmp edx, 1
jne 0x1400acf53
lea rax, [r9 + 6]
cmp rax, qword [rdi + 0x40]
jae 0x1400ad553
mov rcx, qword [rdi + 0x38]
mov r15d, dword [rcx + rax*4]
test r15d, r15d
js 0x1400ad29c
mov rax, qword [rsp + 0x28]
mov r12, qword [rax + 0x10]
mov rsi, qword [rax + 0x20]
cmp rbp, rsi
jae 0x1400acea8
mov qword [rsp + 0x48], r13
mov rcx, qword [rsp + 0x28]
mov r13, qword [rcx + 8]
mov rax, qword [rbx + 0x2b0]
mov qword [rsp + 0x58], rax
cmp byte [rcx + 0x28], 0
je 0x1400acf7c
xor r9d, r9d
lea rcx, [rsp + 0x38]
jmp 0x1400ace0f
inc rbp
mov r15d, edx
cmp rsi, rbp
je 0x1400ad106
cmp rbp, r12
jae 0x1400ad553
movzx r8d, byte [r13 + rbp]
movzx edx, byte [rbx + r8 + 0x190]
mov eax, r15d
and eax, 0x7ffffff
add rax, rdx
cmp rax, qword [rdi + 0x28]
jae 0x1400ad553
mov rdx, qword [rdi + 0x20]
mov edx, dword [rdx + rax*4]
test edx, edx
js 0x1400ace73
cmp edx, 0x7ffffff
jbe 0x1400ace00
mov eax, edx
test eax, 0x8000000
jne 0x1400ad237
test eax, 0x40000000
jne 0x1400ad292
test eax, 0x20000000
je 0x1400ace00
jmp 0x1400ad1e5
shl r8d, 8
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rdi
mov r14, rcx
mov edx, r15d
call fcn.14008eac0
test eax, eax
jne 0x1400ad422
xor r9d, r9d
mov rcx, r14
cmp edx, 0x7ffffff
jbe 0x1400ace00
jmp 0x1400ace4f
xor r9d, r9d
cmp rsi, r12
jae 0x1400ad11a
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 8]
movzx r14d, byte [rax + rsi]
movzx ecx, byte [rbx + r14 + 0x190]
mov eax, r15d
and eax, 0x7ffffff
add rax, rcx
cmp rax, qword [rdi + 0x28]
jae 0x1400ad553
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + rax*4]
test edx, edx
js 0x1400ad372
mov eax, edx
test eax, 0x8000000
jne 0x1400ad485
test eax, 0x20000000
je 0x1400ad4f6
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400ad553
mov byte [rax], 0
mov byte [rax + 1], r14b
mov r12, rsi
mov qword [rax + 8], r12
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rax
call sub.KERNEL32.dll_HeapFree
mov qword [r13 + 8], r12
mov qword [r13], 2
jmp 0x1400ad50e
test byte [rbx + 0x81], 1
mov r15d, r8d
jne 0x1400ad0d7
mov rax, r15
shl rax, 0x20
or rax, 2
cmp eax, 5
je 0x1400acdb5
jmp 0x1400ad2c0
mov rax, qword [rbx + 0x2b8]
and eax, 0x3f
mov qword [rsp + 0x60], rax
xor r9d, r9d
jmp 0x1400acfa3
mov r10d, dword [rax + 0x1d]
mov r11, rbp
inc rbp
cmp rsi, rbp
je 0x1400ad109
cmp rbp, r12
jae 0x1400ad553
movzx r8d, byte [r13 + rbp]
movzx ecx, byte [rbx + r8 + 0x190]
mov eax, r15d
and eax, 0x7ffffff
add rax, rcx
cmp rax, qword [rdi + 0x28]
jae 0x1400ad553
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + rax*4]
test edx, edx
js 0x1400ad086
mov r15d, edx
cmp edx, 0x8000000
jb 0x1400acf97
mov eax, r15d
test eax, 0x8000000
jne 0x1400ad010
test eax, 0x40000000
jne 0x1400ad351
test eax, 0x20000000
je 0x1400acf97
jmp 0x1400ad1e5
mov r9d, 1
xor r10d, r10d
mov rax, qword [rsp + 0x58]
cmp qword [rax + 0x168], 1
je 0x1400acf94
mov eax, r15d
and eax, 0x7ffffff
mov rcx, qword [rsp + 0x60]
shr rax, cl
cmp rax, qword [rdi + 0x58]
jae 0x1400ad553
mov rdx, qword [rdi + 0x50]
shl eax, 4
mov rcx, qword [rdx + rax + 8]
test rcx, rcx
je 0x1400ad553
mov rax, qword [rdx + rax]
test byte [rax + 0x10], 2
je 0x1400acf94
cmp rcx, 0xc
jbe 0x1400ad553
add rcx, 0xfffffffffffffff3
cmp rcx, 3
ja 0x1400acf90
jmp 0x1400ad553
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], r10d
mov r14, r9
shl r8d, 8
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x38]
mov edx, r15d
call fcn.14008eac0
test eax, eax
jne 0x1400ad422
mov r9, r14
mov r10d, dword [rsp + 0x34]
mov r11, qword [rsp + 0x50]
mov r15d, edx
cmp edx, 0x8000000
jb 0x1400acf97
jmp 0x1400acfea
mov rax, qword [rbx + 0x2b0]
cmp qword [rax + 0x168], r15
jbe 0x1400ad1c2
lea rax, [r15 + r15*2]
lea rax, [r9 + rax*2]
add rax, 0xc
cmp rax, qword [rdi + 0x40]
jb 0x1400acda4
jmp 0x1400ad553
mov r15d, edx
mov rbp, rsi
mov r13, qword [rsp + 0x48]
cmp rsi, r12
jb 0x1400aceb4
movzx r8d, byte [rbx + 0x28f]
mov eax, r15d
and eax, 0x7ffffff
add eax, r8d
inc eax
cmp qword [rdi + 0x28], rax
jbe 0x1400ad553
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + rax*4]
test edx, edx
js 0x1400ad3c9
test edx, 0x8000000
je 0x1400ad4f6
mov rax, qword [rbx + 0x2b0]
mov r9d, 1
xor r10d, r10d
cmp qword [rax + 0x168], 1
je 0x1400ad4f3
and edx, 0x7ffffff
movzx ecx, byte [rbx + 0x2b8]
shr rdx, cl
cmp rdx, qword [rdi + 0x58]
jae 0x1400ad553
mov rax, qword [rdi + 0x50]
shl edx, 4
mov rcx, qword [rax + rdx + 8]
test rcx, rcx
je 0x1400ad553
mov rax, qword [rax + rdx]
test byte [rax + 0x10], 2
je 0x1400ad4f3
cmp rcx, 0xc
jbe 0x1400ad553
add rcx, 0xfffffffffffffff3
jmp 0x1400ad4e9
mov rax, qword [rbx + 0x2b8]
and eax, 0x3f
cmp rax, 0x1b
jae 0x1400ad553
mov r15d, 0x40000000
bts r15, rax
jmp 0x1400acdb5
movzx ebx, byte [r13 + rbp]
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400ad553
mov byte [rax], 0
mov byte [rax + 1], bl
mov qword [rax + 8], rbp
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rax
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x48]
mov qword [rax + 8], rbp
mov qword [rax], 2
jmp 0x1400ad50e
xor eax, eax
mov rcx, qword [rsp + 0x58]
cmp qword [rcx + 0x168], 1
mov rsi, qword [rsp + 0x48]
je 0x1400ad27f
and edx, 0x7ffffff
movzx ecx, byte [rbx + 0x2b8]
shr rdx, cl
cmp rdx, qword [rdi + 0x58]
jae 0x1400ad553
mov rax, qword [rdi + 0x50]
shl edx, 4
mov rcx, qword [rax + rdx]
mov rdx, qword [rax + rdx + 8]
xor r8d, r8d
call fcn.14007b2c0
mov qword [rsi], 0
mov qword [rsi + 8], rbp
mov dword [rsi + 0x10], eax
jmp 0x1400ad50e
mov eax, 1
jmp 0x1400ad35d
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x38]
call fcn.14008fd80
mov r15, rax
shr r15, 0x20
cmp eax, 5
je 0x1400acdb5
lea edx, [rax - 3]
cmp edx, 2
mov ecx, 2
cmovb ecx, edx
test ecx, ecx
je 0x1400ad30c
cmp ecx, 1
jne 0x1400ad538
test rbp, rbp
je 0x1400ad553
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400ad553
dec rbp
mov byte [rax], 0
mov byte [rax + 1], r15b
jmp 0x1400ad32b
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400ad553
mov byte [rax], 1
mov qword [rax + 8], rbp
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rax
call sub.KERNEL32.dll_HeapFree
mov qword [r13 + 8], rbp
mov qword [r13], 2
jmp 0x1400ad50e
xor eax, eax
test r9, r9
sete al
cmovne rbp, r11
mov rcx, qword [rsp + 0x48]
mov qword [rcx], rax
mov qword [rcx + 8], rbp
mov dword [rcx + 0x10], r10d
jmp 0x1400ad50e
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], r10d
mov r12, r9
mov r8d, r14d
shl r8d, 8
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x38]
mov edx, r15d
call fcn.14008eac0
test eax, eax
je 0x1400ad46b
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400ad553
mov byte [rax], 1
jmp 0x1400acf2a
mov qword [rsp + 0x50], r11
mov r14d, r10d
mov rsi, r9
inc r8d
shl r8d, 0x10
or r8d, 1
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x38]
mov edx, r15d
call fcn.14008eac0
test eax, eax
je 0x1400ad51f
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
je 0x1400ad553
mov byte [rax], 1
jmp 0x1400acf2d
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
mov rsi, qword [rsp + 0x48]
je 0x1400ad553
mov byte [rax], 1
mov qword [rax + 8], rbp
mov rcx, qword [0x14017a0c0]
xor edx, edx
mov r8, rax
call sub.KERNEL32.dll_HeapFree
mov qword [rsi + 8], rbp
mov qword [rsi], 2
jmp 0x1400ad50e
mov r9, r12
mov r10d, dword [rsp + 0x34]
mov r11, qword [rsp + 0x50]
mov eax, edx
test eax, 0x8000000
je 0x1400acefc
mov rcx, qword [rbx + 0x2b0]
mov r9d, 1
xor r10d, r10d
cmp qword [rcx + 0x168], 1
je 0x1400ad4d7
and eax, 0x7ffffff
movzx ecx, byte [rbx + 0x2b8]
shr rax, cl
cmp rax, qword [rdi + 0x58]
jae 0x1400ad553
mov rdx, qword [rdi + 0x50]
shl eax, 4
mov rcx, qword [rdx + rax + 8]
test rcx, rcx
je 0x1400ad553
mov rax, qword [rdx + rax]
test byte [rax + 0x10], 2
jne 0x1400ad4dc
mov r11, rsi
jmp 0x1400ad4f6
cmp rcx, 0xc
jbe 0x1400ad553
add rcx, 0xfffffffffffffff3
mov r12, rsi
cmp rcx, 3
jbe 0x1400ad553
mov r10d, dword [rax + 0x1d]
mov r11, r12
xor eax, eax
test r9, r9
cmove r11, rbp
sete al
mov qword [r13], rax
mov qword [r13 + 8], r11
mov dword [r13 + 0x10], r10d
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r9, rsi
mov r10d, r14d
mov r11, qword [rsp + 0x50]
test edx, 0x8000000
jne 0x1400ad154
jmp 0x1400ad4f6
mov rsi, rax
movzx eax, byte [0x14017a148]
mov edx, 0x10
xor ecx, ecx
call fcn.1400dbb10
test rax, rax
jne 0x1400ad555
ud2
mov byte [rax], 3
mov dword [rax + 4], esi
mov dword [rax + 8], r15d
ud2