Function at 0x140002570
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
mov r13, r8
push r12
mov r12, rdx
push rbp
mov rbp, rcx
mov rcx, rdx
push rdi
push rsi
mov rsi, r9
push rbx
sub rsp, 0x38
call fcn.140015ae0
mov rbx, rax
mov rax, qword [0x14001d220]
mov rax, qword [rax]
mov r8d, dword [rax + 0xf4]
test r8d, r8d
je 0x14000279e
lea rdx, [0x14001a1a0]
mov ecx, 1
call qword [rax + 0x1b0]
mov r14, rax
test rax, rax
je 0x140002857
mov r8, qword [rbp + 8]
xor r15d, r15d
cmp word [r8 + 2], 0
je 0x1400026d3
nop word [rax + rax]
mov rdx, qword [rbp]
movzx eax, r15w
lea rcx, [rax + rax*4]
lea rdx, [rdx + rcx*8 + 0x14]
mov ecx, dword [rdx + 0x10]
mov qword [rbp + 0x10], rdx
test ecx, ecx
je 0x1400026c4
mov ecx, dword [rdx + 0x24]
mov edx, 1
mov r8d, ecx
and r8d, 0xe0000000
je 0x140002680
mov edx, 0x10
cmp r8d, 0x20000000
je 0x140002680
mov edx, 2
cmp r8d, 0x40000000
je 0x140002680
mov edx, 0x20
cmp r8d, 0x60000000
je 0x140002680
mov edx, 8
cmp r8d, 0x80000000
je 0x140002680
mov edx, pe_nt_image_headers64
cmp r8d, 0xa0000000
je 0x140002680
cmp r8d, 0xc0000000
mov edx, 4
mov r8d, 0x40
cmovne edx, r8d
nop dword [rax + rax]
mov r8d, edx
or r8d, 0x200
and ecx, 0x4000000
mov ecx, 2
cmovne edx, r8d
shl rax, 4
add rax, qword [rbp + 0x3c]
mov r9, qword [rax + 8]
mov dword [rsp + 0x20], edx
mov r8, qword [rax]
mov rdx, 0xffffffffffffffff
call fcn.140010c70
test eax, eax
je 0x14000278b
mov r8, qword [rbp + 8]
add r15d, 1
cmp word [r8 + 2], r15w
ja 0x1400025e8
mov r9, qword [rbp + 0x4c]
test r9, r9
jne 0x1400027a6
mov eax, dword [r8 + 0xc]
xor edi, edi
test eax, eax
jne 0x140002701
jmp 0x1400027d0
mov rax, qword [rbp + 8]
add edi, 1
mov eax, dword [rax + 0xc]
cmp eax, edi
jbe 0x1400027d0
mov edx, edi
mov r8, qword [rbp + 0x20]
lea r15, [rdx + rdx*8]
add r15, r15
lea rcx, [r8 + r15]
mov edx, dword [rcx]
test edx, edx
jne 0x140002726
lea rdx, [rax + rax*8]
mov eax, dword [rcx + 4]
lea rcx, [rax + rdx*2]
add rcx, r8
mov r8d, ebx
mov rdx, r12
call fcn.140010870
test eax, eax
jne 0x1400026ef
add r15, qword [rbp + 0x20]
mov rax, qword [rbp + 0x3c]
movzx edx, word [r15 + 0xc]
mov r8d, dword [r15 + 8]
shl rdx, 4
add r8, qword [rax + rdx - 0x10]
je 0x1400027d0
mov rdx, qword [rbp + 8]
xor ecx, ecx
movzx r9d, word [rdx + 2]
test r9w, r9w
je 0x14000278b
nop word [rax + rax]
mov rdx, qword [rax]
cmp rdx, r8
ja 0x14000277d
add rdx, qword [rax + 8]
cmp rdx, r8
ja 0x140002806
add rcx, 1
add rax, 0x10
cmp r9w, cx
ja 0x140002768
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor r14d, r14d
jmp 0x1400025cf
mov r8, qword [rbp + 0x44]
mov dword [rsp + 0x20], 2
mov ecx, 2
mov rdx, 0xffffffffffffffff
call fcn.140010c70
test eax, eax
je 0x14000278b
mov r8, qword [rbp + 8]
jmp 0x1400026e0
mov edx, dword [rsp + 0xa0]
mov ecx, 0x14
call fcn.1400112f0
mov edx, 2
mov r13, rax
mov rcx, rax
call fcn.140011010
mov rcx, r13
mov rdx, r12
call fcn.140011160
mov rcx, r13
call fcn.1400113b0
jmp 0x14000278b
mov rax, qword [rbp]
lea rdx, [rcx + rcx*4]
lea rax, [rax + rdx*8 + 0x14]
mov qword [rbp + 0x10], rax
test byte [rax + 0x27], 0x20
je 0x14000278b
mov rax, qword [rsp + 0x78]
mov edx, esi
mov rcx, r13
mov qword [0x14001c5a0], rax
call r8
test r14, r14
je 0x14000284d
mov rax, qword [0x14001d220]
mov rcx, r14
mov rax, qword [rax]
call qword [rax + 0x1b8]
mov eax, 1
jmp 0x14000278d
mov rax, qword [0x14001d220]
mov ecx, 1
mov rax, qword [rax]
mov rax, qword [rax + 0x8c2]
mov edx, dword [rax + 0x68]
call fcn.140011650
xor eax, eax
jmp 0x14000278d