Function at 0x1400112bc
Capabilities:
Inspect section memory permissions

Disassembly:
jmp 0x140028600
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x288
lea rbp, [rsp + 0x20]
lea rcx, [0x14004454d]
call fcn.1400117df
nop
cmp qword [rbp + 0x288], 0
jne 0x14002863b
xor eax, eax
jmp 0x14002897d
mov rax, qword [rbp + 0x288]
add rax, 0x3c
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov eax, eax
add rax, qword [rbp + 0x288]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x288]
cmp qword [rbp + 8], rax
jne 0x140028676
xor eax, eax
jmp 0x14002897d
mov rax, qword [rbp + 8]
add rax, 0x50
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
jne 0x14002869d
xor eax, eax
jmp 0x14002897d
mov eax, dword [rbp + 0x24]
add rax, 0x10
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
jne 0x1400286ca
xor eax, eax
jmp 0x14002897d
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x288]
mov qword [rax], rcx
mov eax, dword [rbp + 0x24]
mov rcx, qword [rbp + 0x48]
mov qword [rcx + 8], rax
mov rax, qword [rbp + 0x48]
add rax, 0x10
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 8]
add rax, 0x54
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov dword [rbp + 0x64], eax
mov eax, dword [rbp + 0x64]
mov r9d, eax
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x288]
mov rcx, qword [rbp + 0x280]
call fcn.1400111e0
nop
mov rax, qword [rbp + 8]
add rax, 4
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011334
mov word [rbp + 0x84], ax
movzx eax, word [rbp + 0x84]
cmp eax, 0x8664
jne 0x140028766
mov rax, qword [rbp + 8]
add rax, 0x108
mov qword [rbp + 0x258], rax
jmp 0x140028777
mov rax, qword [rbp + 8]
add rax, 0xf8
mov qword [rbp + 0x258], rax
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0xa8], rax
xor eax, eax
mov word [rbp + 0xc4], ax
jmp 0x1400287a1
movzx eax, word [rbp + 0xc4]
inc ax
mov word [rbp + 0xc4], ax
movzx eax, word [rbp + 0xc4]
mov dword [rbp + 0x254], eax
mov rcx, qword [rbp + 8]
add rcx, 6
mov rdx, rcx
mov rcx, qword [rbp + 0x280]
call fcn.140011334
movzx eax, ax
mov ecx, dword [rbp + 0x254]
cmp ecx, eax
jge 0x140028979
movzx eax, word [rbp + 0xc4]
imul rax, rax, 0x28
mov rcx, qword [rbp + 0xa8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xe8], rax
cmp dword [rbp + 0x290], 2
jne 0x140028832
mov rax, qword [rbp + 0xe8]
add rax, 0x24
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov dword [rbp + 0x104], eax
mov eax, dword [rbp + 0x104]
and eax, 0x20
test eax, eax
jne 0x140028830
jmp 0x140028790
jmp 0x1400288ab
cmp dword [rbp + 0x290], 4
jne 0x1400288ab
mov rax, qword [rbp + 0xe8]
add rax, 0x24
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov dword [rbp + 0x124], eax
mov eax, dword [rbp + 0x124]
and eax, 0x40000000
test eax, eax
jne 0x14002886f
jmp 0x140028790
mov eax, dword [rbp + 0x124]
and eax, 0x80000000
test eax, eax
je 0x140028883
jmp 0x140028790
mov eax, dword [rbp + 0x124]
and eax, 0x20000000
test eax, eax
je 0x140028897
jmp 0x140028790
mov eax, dword [rbp + 0x124]
and eax, 0x2000000
test eax, eax
je 0x1400288ab
jmp 0x140028790
cmp dword [rbp + 0x290], 3
jne 0x1400288c0
mov dword [rbp + 0x254], 0x14
jmp 0x1400288ca
mov dword [rbp + 0x254], 0xc
movsxd rax, dword [rbp + 0x254]
mov rcx, qword [rbp + 0xe8]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov eax, eax
mov rcx, qword [rbp + 0x48]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0xe8]
add rax, 0xc
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov eax, eax
mov rcx, qword [rbp + 0x288]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0xe8]
add rax, 8
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call fcn.140011767
mov dword [rbp + 0x184], eax
mov eax, dword [rbp + 0x184]
mov r9d, eax
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x280]
call fcn.1400111e0
nop
jmp 0x140028790
mov rax, qword [rbp + 0x48]
lea rsp, [rbp + 0x268]
pop rdi
pop rbp
ret