Function at 0x141795d7a
Capabilities:
Inspect section memory permissions
Parse pe header

Disassembly:
mov qword [rsp + 0x18], r8
bsr r9w, r14w
sbb r9b, 0x96
bts r9w, si
push rsi
push r13
push r14
movzx r14d, dx
adc sil, r8b
sub rsp, 0x2c0
mov rsi, r8
neg r14w
lea r9, [rsp + 0x40]
sub r8d, r8d
movzx r14d, bx
mov r13, rdx
mov r14, rcx
mov qword [rsp + 0x20], 0x40
call fcn.141795cad
test al, al
jmp 0x141795dce
je 0x141795f16
mov eax, 0x5a4d
cmp word [rsp + 0x40], ax
jmp 0x141795de3
jne 0x141795f16
movsxd rax, dword [rsp + 0x7c]
test bpl, r13b
clc
test eax, eax
je 0x141795f16
lea r9, [rsp + 0x80]
movsx ecx, bx
mov r8, rax
cdq
movsx rcx, r13w
xchg rdx, rdx
mov rdx, r13
not cl
movzx cx, r12b
mov rcx, r14
jmp 0x141795e22
mov qword [rsp + 0x20], 0x108
jmp 0x141795e30
call fcn.141795cad
test al, al
jmp 0x141795e3c
je 0x141795f16
cmp dword [rsp + 0x80], 0x4550
jne 0x141795f16
mov eax, 0x2000
clc
test word [rsp + 0x96], ax
jmp 0x141795e66
je 0x141795f16
mov eax, 0x20b
test r11b, 0x6f
cmp word [rsp + 0x98], ax
jmp 0x141795e82
jne 0x141795eda
mov eax, 0x8664
test r15w, 0x2d6b
cmp word [rsp + 0x84], ax
jmp 0x141795ea0
jne 0x141795eda
lea rcx, [rsp + 0x190]
movsxd rdx, r9d
cwd
mov dl, r9b
lea rdx, [rsp + 0x80]
mov r8, rsp
jmp 0x141795eca
mov r8d, 0x108
jmp 0x141795ed5
call fcn.14012bd50
mov eax, dword [rsp + 0x1e4]
mov r9, rsi
jmp 0x141795eee
xor r8d, r8d
mov rdx, r13
setae cl
mov rcx, r14
jmp 0x141795eff
mov qword [rsp + 0x20], rax
call fcn.141795cad
test al, al
jmp 0x141795f10
jne 0x141795f4c
mov eax, 0xc000007b
clc
add rsp, 0x2c0
movzx r13d, si
movsx r14d, bx
movzx rsi, cx
pop r14
movsx esi, bp
movsx si, bl
cmove r13d, r11d
pop r13
movsxd rsi, ebx
movsx si, dl
pop rsi
jmp 0x141795f4b
ret
mov qword [rsp + 0x2e0], rbx
mov qword [rsp + 0x2b8], rbp
movsx ebp, r15w
mov qword [rsp + 0x2b0], rdi
xchg bpl, bpl
mov qword [rsp + 0x2a8], r12
mov qword [rsp + 0x2a0], r15
btc r15w, 0x83
movsxd r15, dword [rsi + 0x3c]
sub bpl, r12b
add r15, rsi
xchg rbp, rbp
cmc
ror bpl, cl
sub ecx, ecx
bts r12d, r15d
xadd r12d, r12d
movzx r12d, word [r15 + 0x14]
btc ebp, esi
or bp, sp
shrd rbp, r12, 6
mov ebp, ecx
clc
stc
mov qword [rsp + 0x38], r12
cmp cx, word [r15 + 6]
jmp 0x141795fbf
jae 0x1417960c0
lea r12, [r12 + r15 + 0x28]
nop
and r8, r11
sal r8b, 0x76
mov edi, dword [r12 - 8]
sub r8w, cx
sub bl, 0x5d
mov esi, dword [r12 - 4]
add bx, 0x6d0c
mov cx, r13w
mov ebx, dword [r12]
add rsi, qword [rsp + 0x2f0]
mov r8d, edi
shr ch, 0xac
rcl cl, cl
xor edx, edx
bswap ecx
movsx ecx, dx
movzx cx, r12b
mov rcx, rsi
jmp 0x141796014
mov dword [rsp + 0x2f8], edi
mov dword [rsp + 0x30], ebx
call fcn.140129620
mov r8d, dword [r12 + 4]
lea rax, [rsp + 0x30]
cmc
lea r11, [rsp + 0x2f8]
cmp r8b, r8b
rcr ch, cl
cmp edi, ebx
mov r9, rsi
mov rdx, r10
cdq
cmovae r11, rax
cqo
cwd
cdqe
mov rdx, r13
mov al, r10b
cmovns rcx, rdx
xchg ah, al
mov rcx, r14
setg al
mov eax, dword [r11]
jmp 0x141796069
mov qword [rsp + 0x20], rax
call fcn.141795cad
test al, al
jmp 0x14179607a
je 0x14179634a
movzx eax, word [r15 + 6]
jmp 0x14179608a
inc rbp
add r12, 0x28
cmp rbp, rax
jmp 0x141796099
jb 0x141795fd2
mov rsi, qword [rsp + 0x2f0]
or r12b, 0x50
sub r9b, dil
mov r12, qword [rsp + 0x38]
bswap r9
and r9b, r11b
movsx r9w, spl
sub ecx, ecx
mov r9, rsi
jmp 0x1417960c9
sub r9, qword [r15 + 0x30]
je 0x141796278
cmp dword [r15 + 0xb0], 0
jmp 0x1417960e0
je 0x141796274
mov eax, dword [r15 + 0xb4]
stc
test eax, eax
jmp 0x1417960f5
je 0x141796274
test byte [r15 + 0x16], 1
jmp 0x141796105
jne 0x141796274
mov rdi, rcx
test eax, eax
jmp 0x141796115
je 0x141796274
nop
shr ah, cl
mov ebx, dword [r15 + 0xb0]
nop
btc ax, 0xc3
add rbx, rdi
dec ah
cmc
bt ax, bx
add rbx, rsi
movsx ax, r9b
mov eax, dword [rbx + 4]
test eax, eax
je 0x141796274
cmp eax, 8
jbe 0x14179634a
test al, 1
jmp 0x141796159
jne 0x14179634a
lea r10, [rax - 8]
cmp r14w, r15w
test r13w, 0x5dc0
stc
shr r10, 1
jmp 0x141796176
je 0x141796256
lea r11, [rbx + 8]
sar r8b, 0xf6
nop
not ax
movzx ecx, word [r11]
cdqe
rdtsc
stc
mov edx, dword [rbx]
mov r8b, dil
shr r8d, cl
mov eax, ecx
xadd r8b, r8b
bts r8w, r13w
mov r8d, ecx
stc
and eax, 0xfff
stc
jmp 0x1417961ba
shr r8d, 0xc
cmc
test r8b, 0x94
add rax, rsi
cmp bl, 0xb1
add rdx, rax
jmp 0x1417961d1
dec r8d
je 0x14179622d
dec r8d
jmp 0x1417961e2
je 0x14179621f
dec r8d
jmp 0x1417961f0
je 0x141796212
cmp r8d, 7
jmp 0x1417961ff
jne 0x14179623f
add qword [rdx], r9
jmp 0x14179620d
jmp 0x14179623f
add dword [rdx], r9d
jmp 0x14179621a
jmp 0x14179623f
add word [rdx], r9w
jmp 0x141796228
jmp 0x14179623f
mov rax, r9
sar rax, 0x10
test esp, esp
cmp bh, 0x30
add word [rdx], ax
cmp dx, di
add r11, 2
jmp 0x141796248
dec r10
jmp 0x141796250
jne 0x141796188
mov eax, dword [rbx + 4]
cmp r10d, esi
add rdi, rax
bsr ax, si
mov eax, dword [r15 + 0xb4]
stc
cmp rdi, rax
jb 0x14179611e
mov qword [r15 + 0x30], rsi
mov edx, dword [r15 + 0x54]
seto r8b
xchg r8, rcx
lea r9, [rsp + 0x34]
movsx r8, r12w
mov r8d, 2
movsx cx, r9b
movzx rcx, r8w
movzx cx, r15b
mov rcx, rsi
jmp 0x1417962a8
call qword [0x140133090]
test eax, eax
jmp 0x1417962b5
je 0x1417964b8
xor eax, eax
mov edi, eax
test r10w, r10w
test r10, 0x1c8d77f5
jmp 0x1417962cf
cmp ax, word [r15 + 6]
jmp 0x1417962d9
jae 0x141796441
lea rbx, [r12 + r15 + 0x3c]
cmc
btc cx, 0xe9
bt r8d, 0x14
mov ebp, 0x200
nop
movsx ecx, r14w
btr rcx, 0xad
movzx cx, ah
mov ecx, dword [rbx]
clc
btr r8w, dx
mov r8d, eax
nop
bt ecx, 0x1a
cdqe
movsx eax, r9w
mov eax, ecx
cmovb r8d, ebp
cmc
clc
and eax, 0xe0000000
test rax, 0x48115c70
jmp 0x141796331
cmp eax, 0xe0000000
jne 0x141796359
or r8d, 0x40
jmp 0x141796345
jmp 0x1417963df
mov eax, 0xc000007b
jmp 0x141796354
jmp 0x141796447
mov eax, ecx
cmp cl, r10b
and eax, 0x60000000
test r14b, 0xb2
cmp eax, 0x60000000
jmp 0x141796371
jne 0x141796385
or r8d, 0x20
jmp 0x141796380
jmp 0x1417963df
mov eax, ecx
and eax, 0xc0000000
cmp eax, 0xc0000000
jne 0x1417963a5
or r8d, 4
jmp 0x1417963a0
jmp 0x1417963df
test ecx, ecx
jmp 0x1417963ac
jns 0x1417963bb
or r8d, 8
jmp 0x1417963df
bt ecx, 0x1e
jmp 0x1417963c4
jae 0x1417963d8
or r8d, 2
jmp 0x1417963d3
jmp 0x1417963df
or r8d, 1
xor dl, 0xa9
mov ecx, dword [rbx - 0x18]
xchg dh, dl
sbb rdx, rbp
inc r9
mov edx, dword [rbx - 0x1c]
lea r9, [rsp + 0x34]
test r13d, 0x6e572531
jmp 0x141796401
add rcx, rsi
jmp 0x141796409
call qword [0x140133090]
test eax, eax
jmp 0x141796416
je 0x1417964b8
movzx eax, word [r15 + 6]
inc rdi
cmc
add rbx, 0x28
clc
cmc
cmp di, di
cmp rdi, rax
mov eax, 0
jmp 0x14179643b
jb 0x141796302
sub eax, eax
bsf si, si
mov r12, qword [rsp + 0x2a8]
shld rbp, rsi, 0x8f
mov rdi, qword [rsp + 0x2b0]
shrd si, di, 0xc5
mov rbp, qword [rsp + 0x2b8]
shr r13b, 0xe9
rol sil, 0x17
mov rbx, qword [rsp + 0x2e0]
mov r15, qword [rsp + 0x2a0]
and r14w, 0x6324
add rsp, 0x2c0
movsx r14d, r12w
jmp 0x14179649a
pop r14
movsx r13, r10w
xchg si, si
pop r13
mov si, 0x1d5
movzx si, al
seta sil
pop rsi
jmp 0x1417964b7
ret
mov eax, 0xc0000045
jmp 0x1417964c2
jmp 0x141796447