Function at 0x2a2583620
Capabilities:
Inspect section memory permissions

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x2a258406e
push rbp
mov rbp, rsp
sub rsp, 0x58
lea rax, [0x2a27f3600]
call fcn.2a25909c0
mov qword [rax + 8], 3
lea rcx, [0x2a2843d5d]
mov qword [rax], rcx
lea rcx, [0x2a2a83e01]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x28], 3
lea rcx, [0x2a2843d60]
mov qword [rax + 0x20], rcx
lea rcx, [0x2a2a83e00]
mov qword [rax + 0x30], rcx
mov qword [rax + 0x48], 4
lea rcx, [0x2a2843f48]
mov qword [rax + 0x40], rcx
lea rcx, [0x2a2a83e09]
mov qword [rax + 0x50], rcx
mov qword [rax + 0x68], 9
lea rcx, [0x2a2844ec2]
mov qword [rax + 0x60], rcx
lea rcx, [0x2a2a83e0c]
mov qword [rax + 0x70], rcx
mov qword [rax + 0x88], 6
lea rcx, [0x2a284439e]
mov qword [rax + 0x80], rcx
lea rcx, [0x2a2a83e0e]
mov qword [rax + 0x90], rcx
mov qword [rax + 0xa8], 3
lea rcx, [0x2a2843d63]
mov qword [rax + 0xa0], rcx
lea rcx, [0x2a2a83e0f]
mov qword [rax + 0xb0], rcx
mov qword [0x2a29fae18], 6
mov qword [0x2a29fae20], 6
cmp dword [0x2a2a83770], 0
je 0x2a2583735
call fcn.2a25f0de0
mov qword [r11], rax
mov rcx, qword [0x2a29fae10]
mov qword [r11 + 8], rcx
mov qword [0x2a29fae10], rax
nop dword [rax]
call fcn.2a25840e0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x48], eax
nop
cmp eax, 2
jge 0x2a2583972
mov rcx, qword [0x2a29fae20]
mov rbx, qword [0x2a29fae18]
add rbx, 5
mov rdx, qword [0x2a29fae10]
cmp rcx, rbx
jae 0x2a25837cc
mov rax, rdx
mov edi, 5
lea rsi, [0x2a2822ee0]
call fcn.2a25d46e0
mov qword [0x2a29fae20], rcx
cmp dword [0x2a2a83770], 0
je 0x2a25837be
call fcn.2a25f0de0
mov qword [r11], rax
mov rdx, qword [0x2a29fae10]
mov qword [r11 + 8], rdx
mov qword [0x2a29fae10], rax
mov rdx, rax
mov eax, dword [rsp + 0x48]
mov qword [0x2a29fae18], rbx
lea r8, [rbx - 5]
shl r8, 5
mov qword [rdx + r8 + 8], 6
mov byte [rdx + r8 + 0x18], 0
mov byte [rdx + r8 + 0x19], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583811
mov r9, qword [rdx + r8]
nop dword [rax]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x10]
mov qword [r11 + 8], r9
lea r9, [0x2a28443a4]
mov qword [rdx + r8], r9
lea r9, [0x2a2a83e0d]
mov qword [rdx + r8 + 0x10], r9
mov qword [rdx + r8 + 0x28], 4
mov byte [rdx + r8 + 0x38], 0
mov byte [rdx + r8 + 0x39], 0
cmp dword [0x2a2a83770], 0
je 0x2a258385c
mov r9, qword [rdx + r8 + 0x20]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x30]
mov qword [r11 + 8], r9
lea r9, [0x2a2843f4c]
mov qword [rdx + r8 + 0x20], r9
lea r9, [0x2a2a83e10]
mov qword [rdx + r8 + 0x30], r9
mov qword [rdx + r8 + 0x48], 5
mov byte [rdx + r8 + 0x58], 0
mov byte [rdx + r8 + 0x59], 0
cmp dword [0x2a2a83770], 0
je 0x2a25838a8
mov r9, qword [rdx + r8 + 0x40]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x50]
mov qword [r11 + 8], r9
lea r9, [0x2a2844129]
mov qword [rdx + r8 + 0x40], r9
lea r9, [0x2a2a83e12]
mov qword [rdx + r8 + 0x50], r9
mov qword [rdx + r8 + 0x68], 5
mov byte [rdx + r8 + 0x78], 0
mov byte [rdx + r8 + 0x79], 0
cmp dword [0x2a2a83770], 0
je 0x2a25838f4
mov r9, qword [rdx + r8 + 0x60]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x70]
mov qword [r11 + 8], r9
lea r9, [0x2a284412e]
mov qword [rdx + r8 + 0x60], r9
lea r9, [0x2a2a83e13]
mov qword [rdx + r8 + 0x70], r9
mov qword [rdx + r8 + 0x88], 5
mov byte [rdx + r8 + 0x98], 0
mov byte [rdx + r8 + 0x99], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583954
mov r9, qword [rdx + r8 + 0x80]
nop dword [rax + rax]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x90]
mov qword [r11 + 8], r9
lea r9, [0x2a2844133]
mov qword [rdx + r8 + 0x80], r9
lea r9, [0x2a2a83e11]
mov qword [rdx + r8 + 0x90], r9
cmp eax, 3
jge 0x2a2583b82
mov rcx, qword [0x2a29fae20]
mov rbx, qword [0x2a29fae18]
add rbx, 5
mov rdx, qword [0x2a29fae10]
cmp rcx, rbx
jae 0x2a25839e1
mov rax, rdx
mov edi, 5
lea rsi, [0x2a2822ee0]
call fcn.2a25d46e0
mov qword [0x2a29fae20], rcx
cmp dword [0x2a2a83770], 0
je 0x2a25839d3
nop dword [rax]
call fcn.2a25f0de0
mov qword [r11], rax
mov rdx, qword [0x2a29fae10]
mov qword [r11 + 8], rdx
mov qword [0x2a29fae10], rax
mov rdx, rax
mov eax, dword [rsp + 0x48]
mov qword [0x2a29fae18], rbx
lea r8, [rbx - 5]
shl r8, 5
mov qword [rdx + r8 + 8], 3
mov byte [rdx + r8 + 0x18], 0
mov byte [rdx + r8 + 0x19], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583a23
mov r9, qword [rdx + r8]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x10]
mov qword [r11 + 8], r9
lea r9, [0x2a2843d66]
mov qword [rdx + r8], r9
lea r9, [0x2a2a83e02]
mov qword [rdx + r8 + 0x10], r9
mov qword [rdx + r8 + 0x28], 4
mov byte [rdx + r8 + 0x38], 0
mov byte [rdx + r8 + 0x39], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583a71
mov r9, qword [rdx + r8 + 0x20]
nop dword [rax]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x30]
mov qword [r11 + 8], r9
lea r9, [0x2a2843f50]
mov qword [rdx + r8 + 0x20], r9
lea r9, [0x2a2a83e03]
mov qword [rdx + r8 + 0x30], r9
mov qword [rdx + r8 + 0x48], 4
mov byte [rdx + r8 + 0x58], 0
mov byte [rdx + r8 + 0x59], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583abd
mov r9, qword [rdx + r8 + 0x40]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x50]
mov qword [r11 + 8], r9
lea r9, [0x2a2843f54]
mov qword [rdx + r8 + 0x40], r9
lea r9, [0x2a2a83e07]
mov qword [rdx + r8 + 0x50], r9
mov qword [rdx + r8 + 0x68], 4
mov byte [rdx + r8 + 0x78], 0
mov byte [rdx + r8 + 0x79], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583b09
mov r9, qword [rdx + r8 + 0x60]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x70]
mov qword [r11 + 8], r9
lea r9, [0x2a2843f58]
mov qword [rdx + r8 + 0x60], r9
lea r9, [0x2a2a83e08]
mov qword [rdx + r8 + 0x70], r9
mov qword [rdx + r8 + 0x88], 3
mov byte [rdx + r8 + 0x98], 0
mov byte [rdx + r8 + 0x99], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583b64
mov r9, qword [rdx + r8 + 0x80]
call fcn.2a25f0de0
mov qword [r11], r9
mov r9, qword [rdx + r8 + 0x90]
mov qword [r11 + 8], r9
lea r9, [0x2a2843d69]
mov qword [rdx + r8 + 0x80], r9
lea r9, [0x2a2a83e0a]
mov qword [rdx + r8 + 0x90], r9
cmp eax, 4
jge 0x2a2583cd3
mov rcx, qword [0x2a29fae20]
mov rbx, qword [0x2a29fae18]
add rbx, 3
mov rax, qword [0x2a29fae10]
cmp rcx, rbx
jae 0x2a2583be4
mov edi, 3
lea rsi, [0x2a2822ee0]
call fcn.2a25d46e0
mov qword [0x2a29fae20], rcx
cmp dword [0x2a2a83770], 0
je 0x2a2583bdd
call fcn.2a25f0de0
mov qword [r11], rax
mov rcx, qword [0x2a29fae10]
mov qword [r11 + 8], rcx
mov qword [0x2a29fae10], rax
mov qword [0x2a29fae18], rbx
lea rcx, [rbx - 3]
shl rcx, 5
mov qword [rax + rcx + 8], 7
mov byte [rax + rcx + 0x18], 0
mov byte [rax + rcx + 0x19], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583c24
mov rdx, qword [rax + rcx]
call fcn.2a25f0de0
mov qword [r11], rdx
mov rdx, qword [rax + rcx + 0x10]
mov qword [r11 + 8], rdx
lea rdx, [0x2a2844682]
mov qword [rax + rcx], rdx
lea rdx, [0x2a2a83e04]
mov qword [rax + rcx + 0x10], rdx
mov qword [rax + rcx + 0x28], 8
mov byte [rax + rcx + 0x38], 0
mov byte [rax + rcx + 0x39], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583c71
mov rdx, qword [rax + rcx + 0x20]
nop dword [rax]
call fcn.2a25f0de0
mov qword [r11], rdx
mov rdx, qword [rax + rcx + 0x30]
mov qword [r11 + 8], rdx
lea rdx, [0x2a2844a7c]
mov qword [rax + rcx + 0x20], rdx
lea rdx, [0x2a2a83e05]
mov qword [rax + rcx + 0x30], rdx
mov qword [rax + rcx + 0x48], 8
mov byte [rax + rcx + 0x58], 0
mov byte [rax + rcx + 0x59], 0
cmp dword [0x2a2a83770], 0
je 0x2a2583cbb
mov rdx, qword [rax + rcx + 0x40]
call fcn.2a25f0de0
mov qword [r11], rdx
mov rdx, qword [rax + rcx + 0x50]
mov qword [r11 + 8], rdx
lea rdx, [0x2a2844a84]
mov qword [rax + rcx + 0x40], rdx
lea rdx, [0x2a2a83e06]
mov qword [rax + rcx + 0x50], rdx
mov qword [rsp], 0
nop dword [rax + rax]
call fcn.2a25840a0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 8]
nop dword [rax + rax]
test eax, eax
je 0x2a2584068
mov dword [rsp + 0x44], eax
mov eax, 0x80000000
mov qword [rsp], rax
call fcn.2a25840a0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 8]
mov dword [0x2a2a83398], eax
mov qword [rsp], 1
nop
call fcn.2a25840a0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0x10]
mov dword [rsp + 0x4c], eax
mov ebx, 1
call fcn.2a2584080
mov byte [0x2a2a83e10], al
mov eax, dword [rsp + 0x4c]
mov ebx, 2
call fcn.2a2584080
mov byte [0x2a2a83e0c], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x200
call fcn.2a2584080
mov byte [0x2a2a83e11], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x80000
call fcn.2a2584080
mov byte [0x2a2a83e12], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x100000
call fcn.2a2584080
mov byte [0x2a2a83e13], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x800000
call fcn.2a2584080
mov byte [0x2a2a83e0d], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x2000000
nop dword [rax]
call fcn.2a2584080
mov byte [0x2a2a83e00], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x8000000
call fcn.2a2584080
mov byte [0x2a2a83e0b], al
mov eax, dword [rsp + 0x4c]
mov ebx, 0x1000
call fcn.2a2584080
test al, al
je 0x2a2583e1a
movzx ecx, byte [0x2a2a83e0b]
jmp 0x2a2583e1c
xor ecx, ecx
mov byte [0x2a2a83e0a], cl
cmp byte [0x2a2a83e0b], 0
jne 0x2a2583e34
xor eax, eax
xor ecx, ecx
jmp 0x2a2583ecf
call fcn.2a25840c0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x54], eax
mov ebx, 2
call fcn.2a2584080
nop dword [rax]
test al, al
jne 0x2a2583e68
xor eax, eax
jmp 0x2a2583e76
mov eax, dword [rsp + 0x54]
mov ebx, 4
call fcn.2a2584080
mov byte [rsp + 0x43], al
test al, al
jne 0x2a2583e82
xor ecx, ecx
jmp 0x2a2583e97
mov eax, dword [rsp + 0x54]
mov ebx, 0x20
call fcn.2a2584080
mov ecx, eax
movzx eax, byte [rsp + 0x43]
test cl, cl
jne 0x2a2583e9f
xor ecx, ecx
jmp 0x2a2583ecf
mov eax, dword [rsp + 0x54]
mov ebx, 0x40
call fcn.2a2584080
test al, al
jne 0x2a2583eba
movzx eax, byte [rsp + 0x43]
xor ecx, ecx
jmp 0x2a2583ecf
mov eax, dword [rsp + 0x54]
mov ebx, pe_nt_image_headers64
call fcn.2a2584080
mov ecx, eax
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0x42], cl
mov byte [rsp + 0x43], al
mov ebx, 0x10000000
mov eax, dword [rsp + 0x4c]
call fcn.2a2584080
movzx ecx, byte [rsp + 0x43]
and eax, ecx
mov byte [0x2a2a83e02], al
mov edx, dword [rsp + 0x44]
cmp edx, 7
jb 0x2a2584062
mov qword [rsp], 7
call fcn.2a25840a0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0xc]
mov dword [rsp + 0x50], eax
mov ebx, 8
call fcn.2a2584080
mov byte [0x2a2a83e07], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x20
nop
call fcn.2a2584080
movzx ecx, byte [rsp + 0x43]
and ecx, eax
mov byte [0x2a2a83e03], cl
mov eax, dword [rsp + 0x50]
mov ebx, 0x100
nop dword [rax + rax]
call fcn.2a2584080
mov byte [0x2a2a83e08], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x200
call fcn.2a2584080
mov byte [0x2a2a83e09], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x80000
call fcn.2a2584080
mov byte [0x2a2a83e01], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x20000000
nop dword [rax]
call fcn.2a2584080
mov byte [0x2a2a83e0f], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x10000
call fcn.2a2584080
movzx ecx, byte [rsp + 0x42]
and ecx, eax
mov byte [0x2a2a83e04], cl
test cl, cl
je 0x2a2583ff2
mov eax, dword [rsp + 0x50]
mov ebx, 0x40000000
call fcn.2a2584080
mov byte [0x2a2a83e05], al
mov eax, dword [rsp + 0x50]
mov ebx, 0x80000000
call fcn.2a2584080
mov byte [0x2a2a83e06], al
mov eax, 0x80000000
mov qword [rsp], rax
nop dword [rax + rax]
call fcn.2a25840a0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp dword [rsp + 8], 0x80000001
nop
jae 0x2a2584028
add rsp, 0x58
pop rbp
ret
mov eax, 0x80000001
mov qword [rsp], rax
call fcn.2a25840a0
xorps xmm15, xmm15
mov r14, qword [0x2a2a83588]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp + 0x14]
mov ebx, 0x8000000
call fcn.2a2584080
mov byte [0x2a2a83e0e], al
add rsp, 0x58
pop rbp
ret
add rsp, 0x58
pop rbp
ret
add rsp, 0x58
pop rbp
ret
call fcn.2a25eee80
jmp fcn.2a2583620