Function at 0x140095400
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov r14, r9
mov rdi, r8
mov rbx, rdx
mov r13, rcx
mov rbp, qword [r9 + 0x18]
test rbp, rbp
je 0x1400954b9
lea rax, [rbp - 1]
cmp qword [r14 + 0x10], rax
jbe 0x1400954b9
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400954b9
movzx r15d, byte [rcx + rax]
mov edx, dword [r14]
mov r8d, dword [r14 + 4]
mov rax, qword [rbx + 0x298]
or rax, qword [rbx + 0x2a8]
mov rcx, qword [rbx + 0x290]
or rcx, qword [rbx + 0x2a0]
or rcx, rax
je 0x1400954cf
lea rax, [rbx + 0x290]
mov r9d, r15d
shr r9d, 7
shl r9, 4
mov r10d, 1
xor r11d, r11d
mov ecx, r15d
shld r11, r10, cl
shl r10, cl
xor ecx, ecx
test r15b, 0x40
cmovne r11, r10
cmovne r10, rcx
and r11, qword [rax + r9 + 8]
and r10, qword [rax + r9]
or r10, r11
je 0x1400954cf
mov r12d, 4
jmp 0x14009569a
mov edx, dword [r14]
mov r8d, dword [r14 + 4]
mov al, 2
movzx r9d, al
mov rax, r9
test edx, edx
jne 0x1400954e3
jmp 0x1400954f0
movzx eax, byte [rbx + r15 + 0x90]
movzx r9d, al
mov rax, r9
test edx, edx
je 0x1400954f0
cmp edx, 1
jne 0x140095688
lea rax, [r9 + 6]
cmp rax, qword [rdi + 0x40]
jae 0x140095c80
mov rcx, qword [rdi + 0x38]
mov r15d, dword [rcx + rax*4]
test r15d, r15d
js 0x140095a80
mov r12, qword [r14 + 0x10]
mov rsi, qword [r14 + 0x20]
cmp rbp, rsi
jae 0x140095602
mov qword [rsp + 0x40], r13
mov r13, qword [r14 + 8]
mov rax, qword [rbx + 0x2b0]
mov qword [rsp + 0x58], rax
cmp byte [r14 + 0x28], 0
je 0x140095760
xor r9d, r9d
lea rcx, [rsp + 0x30]
jmp 0x14009555f
inc rbp
mov r15d, edx
cmp rsi, rbp
je 0x1400958bc
cmp rbp, r12
jae 0x140095c80
movzx r8d, byte [r13 + rbp]
movzx edx, byte [rbx + r8 + 0x190]
mov eax, r15d
and eax, 0x7ffffff
add rax, rdx
cmp rax, qword [rdi + 0x28]
jae 0x140095c80
mov rdx, qword [rdi + 0x20]
mov edx, dword [rdx + rax*4]
test edx, edx
js 0x1400955c3
cmp edx, 0x7ffffff
jbe 0x140095550
mov eax, edx
test eax, 0x8000000
jne 0x140095a03
test eax, 0x40000000
jne 0x140095a5f
test eax, 0x20000000
je 0x140095550
jmp 0x1400959b1
mov qword [rsp + 0x50], r14
shl r8d, 8
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
mov r14, rcx
mov edx, r15d
call fcn.140080a50
test eax, eax
jne 0x140095b5a
xor r9d, r9d
mov rcx, r14
mov r14, qword [rsp + 0x50]
cmp edx, 0x7ffffff
jbe 0x140095550
jmp 0x14009559f
xor r9d, r9d
cmp rsi, r12
jae 0x1400958d0
mov rax, qword [r14 + 8]
movzx r14d, byte [rax + rsi]
movzx ecx, byte [rbx + r14 + 0x190]
mov eax, r15d
and eax, 0x7ffffff
add rax, rcx
cmp rax, qword [rdi + 0x28]
jae 0x140095c80
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + rax*4]
test edx, edx
js 0x140095aad
mov eax, edx
test eax, 0x8000000
jne 0x140095bb4
test eax, 0x20000000
je 0x140095c26
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x140095c80
mov byte [rax], 0
mov byte [rax + 1], r14b
mov qword [rax + 8], rsi
jmp 0x14009573a
test byte [rbx + 0x81], 1
mov r15d, r8d
mov r12d, 2
jne 0x1400956e8
lea ecx, [r12 - 3]
cmp ecx, 2
mov eax, 2
cmovb eax, ecx
test eax, eax
je 0x140095717
cmp eax, 1
jne 0x140095c68
test rbp, rbp
je 0x140095c80
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x140095c80
dec rbp
mov byte [rax], 0
mov byte [rax + 1], r15b
jmp 0x140095736
mov rax, qword [rbx + 0x2b0]
cmp qword [rax + 0x168], r15
jbe 0x140095988
lea rax, [r15 + r15*2]
lea rax, [r9 + rax*2]
add rax, 0xc
cmp rax, qword [rdi + 0x40]
jb 0x1400954fa
jmp 0x140095c80
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x140095c80
mov byte [rax], 1
mov qword [rax + 8], rbp
mov rsi, qword [rax + 8]
mov rcx, qword [0x140188170]
xor edx, edx
mov r8, rax
call sub.KERNEL32.dll_HeapFree
mov qword [r13 + 8], rsi
mov qword [r13], 2
jmp 0x140095c3e
mov rax, qword [rbx + 0x2b8]
and eax, 0x3f
mov qword [rsp + 0x50], rax
xor r9d, r9d
jmp 0x140095787
mov r10d, dword [rax + 0x1d]
mov r11, rbp
inc rbp
cmp rsi, rbp
je 0x1400958bf
cmp rbp, r12
jae 0x140095c80
movzx r8d, byte [r13 + rbp]
movzx ecx, byte [rbx + r8 + 0x190]
mov eax, r15d
and eax, 0x7ffffff
add rax, rcx
cmp rax, qword [rdi + 0x28]
jae 0x140095c80
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + rax*4]
test edx, edx
js 0x140095867
mov r15d, edx
cmp edx, 0x8000000
jb 0x14009577b
mov eax, r15d
test eax, 0x8000000
jne 0x1400957f0
test eax, 0x40000000
jne 0x140095a5f
test eax, 0x20000000
je 0x14009577b
jmp 0x1400959b1
mov r9d, 1
xor r10d, r10d
mov rax, qword [rsp + 0x58]
cmp qword [rax + 0x168], 1
je 0x140095778
mov eax, r15d
and eax, 0x7ffffff
mov rcx, qword [rsp + 0x50]
shr rax, cl
cmp rax, qword [rdi + 0x58]
jae 0x140095c80
mov rdx, qword [rdi + 0x50]
shl rax, 4
mov rcx, qword [rdx + rax + 8]
test rcx, rcx
je 0x140095c80
mov rax, qword [rdx + rax]
test byte [rax + 0x10], 2
je 0x140095778
cmp rcx, 0xc
jbe 0x140095c80
add rcx, 0xfffffffffffffff3
cmp rcx, 3
ja 0x140095774
jmp 0x140095c80
mov qword [rsp + 0x48], r11
mov dword [rsp + 0x2c], r10d
mov qword [rsp + 0x60], r9
shl r8d, 8
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x30]
mov edx, r15d
call fcn.140080a50
test eax, eax
jne 0x140095b5a
mov r9, qword [rsp + 0x60]
mov r10d, dword [rsp + 0x2c]
mov r11, qword [rsp + 0x48]
mov r15d, edx
cmp edx, 0x8000000
jb 0x14009577b
jmp 0x1400957ce
mov r15d, edx
mov rbp, rsi
mov r13, qword [rsp + 0x40]
cmp rsi, r12
jb 0x14009560e
movzx r8d, byte [rbx + 0x28f]
shl r8d, 0x10
add r8d, 0x10001
mov ecx, r8d
shr ecx, 0x10
mov eax, r15d
and eax, 0x7ffffff
add rax, rcx
cmp qword [rdi + 0x28], rax
jbe 0x140095c80
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + rax*4]
test edx, edx
js 0x140095b08
test edx, 0x8000000
je 0x140095c26
mov rax, qword [rbx + 0x2b0]
mov r9d, 1
xor r10d, r10d
cmp qword [rax + 0x168], 1
je 0x140095c23
and edx, 0x7ffffff
movzx ecx, byte [rbx + 0x2b8]
shr rdx, cl
cmp rdx, qword [rdi + 0x58]
jae 0x140095c80
mov rax, qword [rdi + 0x50]
shl rdx, 4
mov rcx, qword [rax + rdx + 8]
test rcx, rcx
je 0x140095c80
mov rax, qword [rax + rdx]
test byte [rax + 0x10], 2
je 0x140095c23
cmp rcx, 0xc
jbe 0x140095c80
add rcx, 0xfffffffffffffff3
jmp 0x140095c19
mov rcx, qword [rbx + 0x2b8]
and ecx, 0x3f
cmp rcx, 0x1b
jae 0x140095c80
mov r15d, 1
shl r15, cl
or r15d, 0x40000000
jmp 0x14009550b
movzx ebx, byte [r13 + rbp]
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x140095c80
mov byte [rax], 0
mov byte [rax + 1], bl
mov qword [rax + 8], rbp
mov rcx, qword [0x140188170]
xor edx, edx
mov r8, rax
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x40]
mov qword [rax + 8], rbp
mov qword [rax], 2
jmp 0x140095c3e
xor eax, eax
mov rcx, qword [rsp + 0x58]
cmp qword [rcx + 0x168], 1
mov rsi, qword [rsp + 0x40]
je 0x140095a4c
and edx, 0x7ffffff
movzx ecx, byte [rbx + 0x2b8]
shr rdx, cl
cmp rdx, qword [rdi + 0x58]
jae 0x140095c80
mov rax, qword [rdi + 0x50]
shl rdx, 4
mov rcx, qword [rax + rdx]
mov rdx, qword [rax + rdx + 8]
xor r8d, r8d
call fcn.1400781e0
mov qword [rsi], 0
mov qword [rsi + 8], rbp
mov dword [rsi + 0x10], eax
jmp 0x140095c3e
xor eax, eax
test r9, r9
cmove r11, rbp
sete al
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rcx + 8], r11
mov dword [rcx + 0x10], r10d
jmp 0x140095c3e
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x30]
call fcn.140081d50
mov r12, rax
mov r15, rax
shr r15, 0x20
cmp r12d, 5
je 0x14009550b
jmp 0x14009569a
mov qword [rsp + 0x48], r11
mov dword [rsp + 0x2c], r10d
mov r12, r9
mov r8d, r14d
shl r8d, 8
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x30]
mov edx, r15d
call fcn.140080a50
test eax, eax
je 0x140095b9a
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x140095c80
mov byte [rax], 1
mov qword [rax + 8], rsi
jmp 0x14009573a
mov qword [rsp + 0x48], r11
mov r14d, r10d
mov rsi, r9
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x30]
mov edx, r15d
call fcn.140080a50
test eax, eax
je 0x140095c4f
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x140095c80
mov byte [rax], 1
mov qword [rax + 8], r12
jmp 0x14009573a
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
mov rsi, qword [rsp + 0x40]
je 0x140095c80
mov byte [rax], 1
mov qword [rax + 8], rbp
mov rcx, rax
call fcn.140077c80
mov qword [rsi + 8], rax
mov qword [rsi], 2
jmp 0x140095c3e
mov r9, r12
mov r10d, dword [rsp + 0x2c]
mov r11, qword [rsp + 0x48]
mov eax, edx
test eax, 0x8000000
je 0x140095651
mov rcx, qword [rbx + 0x2b0]
mov r9d, 1
xor r10d, r10d
cmp qword [rcx + 0x168], 1
je 0x140095c07
and eax, 0x7ffffff
movzx ecx, byte [rbx + 0x2b8]
shr rax, cl
cmp rax, qword [rdi + 0x58]
jae 0x140095c80
mov rdx, qword [rdi + 0x50]
shl rax, 4
mov rcx, qword [rdx + rax + 8]
test rcx, rcx
je 0x140095c80
mov rax, qword [rdx + rax]
test byte [rax + 0x10], 2
jne 0x140095c0c
mov r11, rsi
jmp 0x140095c26
cmp rcx, 0xc
jbe 0x140095c80
add rcx, 0xfffffffffffffff3
mov r12, rsi
cmp rcx, 3
jbe 0x140095c80
mov r10d, dword [rax + 0x1d]
mov r11, r12
xor eax, eax
test r9, r9
cmove r11, rbp
sete al
mov qword [r13], rax
mov qword [r13 + 8], r11
mov dword [r13 + 0x10], r10d
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r9, rsi
mov r10d, r14d
mov r11, qword [rsp + 0x48]
test edx, 0x8000000
jne 0x140095919
jmp 0x140095c26
movzx eax, byte [0x140188180]
mov edx, 0x10
xor ecx, ecx
call fcn.1400f2120
test rax, rax
jne 0x140095c82
ud2
mov byte [rax], 3
mov dword [rax + 4], r12d
mov dword [rax + 8], r15d
ud2