Function at 0x140002310
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
mov r13, r9
push r12
mov r12, r8
push rbp
push rdi
push rsi
push rbx
mov rbx, rcx
mov rcx, rdx
sub rsp, 0x38
mov qword [rsp + 0x88], rdx
call fcn.1400133b0
mov rbp, qword [0x14001a150]
mov r14, rax
mov rax, qword [rbp]
cmp dword [rax + 0xf4], 0
je 0x140002384
lea rdx, [0x140017460]
mov ecx, 1
call qword [rax + 0x1b0]
mov rsi, rax
test rax, rax
jne 0x140002386
mov rax, qword [rbp]
mov ecx, 1
mov rax, qword [rax + 0x8c2]
mov edx, dword [rax + 0x68]
call fcn.14000f5f0
jmp 0x1400023fa
xor esi, esi
xor r15d, r15d
jmp 0x14000238e
inc r15d
mov rax, qword [rbx + 8]
cmp r15w, word [rax + 2]
jae 0x14000245a
movzx edx, r15w
mov rcx, qword [rbx]
imul rax, rdx, 0x28
lea rax, [rcx + rax + 0x14]
cmp dword [rax + 0x10], 0
mov qword [rbx + 0x10], rax
je 0x14000238b
mov r8d, dword [rax + 0x24]
mov eax, 1
mov ecx, r8d
and ecx, 0xe0000000
jne 0x140002401
bt r8d, 0x1a
jae 0x1400023d5
or ah, 2
shl rdx, 4
add rdx, qword [rbx + 0x3c]
mov ecx, 2
mov r9, qword [rdx + 8]
mov dword [rsp + 0x20], eax
mov r8, qword [rdx]
or rdx, 0xffffffffffffffff
call fcn.14000ee00
test eax, eax
jne 0x14000238b
xor eax, eax
jmp 0x14000259f
mov eax, 0x10
cmp ecx, 0x20000000
je 0x1400023cb
mov eax, 2
cmp ecx, 0x40000000
je 0x1400023cb
mov eax, 0x20
cmp ecx, 0x60000000
je 0x1400023cb
mov eax, 8
cmp ecx, 0x80000000
je 0x1400023cb
mov eax, pe_nt_image_headers64
cmp ecx, 0xa0000000
je 0x1400023cb
cmp ecx, 0xc0000000
mov eax, 4
mov ecx, 0x40
cmovne eax, ecx
jmp 0x1400023cb
mov r9, qword [rbx + 0x4c]
test r9, r9
jne 0x140002467
xor edi, edi
jmp 0x1400024c2
mov dword [rsp + 0x20], 2
mov r8, qword [rbx + 0x44]
or rdx, 0xffffffffffffffff
mov ecx, 2
call fcn.14000ee00
test eax, eax
jne 0x140002463
jmp 0x1400023fa
mov r15d, edi
mov rdx, qword [rbx + 0x20]
imul r15, r15, 0x12
lea rcx, [rdx + r15]
cmp dword [rcx], 0
jne 0x1400024ac
imul rax, rax, 0x12
mov ecx, dword [rcx + 4]
add rax, rcx
lea rcx, [rdx + rax]
mov rdx, qword [rsp + 0x88]
mov r8d, r14d
call fcn.14000ea00
test eax, eax
je 0x1400024cf
inc edi
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0xc]
cmp edi, eax
jb 0x14000248a
jmp 0x1400024f8
add r15, qword [rbx + 0x20]
mov r9, qword [rbx + 0x3c]
movzx eax, word [r15 + 0xc]
mov ecx, dword [r15 + 8]
shl rax, 4
add rcx, qword [r9 + rax - 0x10]
je 0x1400024f8
mov rax, qword [rbx + 8]
mov r10w, word [rax + 2]
xor eax, eax
jmp 0x14000254b
mov edx, dword [rsp + 0xa0]
mov ecx, 0x14
call fcn.14000f370
mov edx, 2
mov rcx, rax
mov rbx, rax
call fcn.14000f100
mov rdx, qword [rsp + 0x88]
mov rcx, rbx
call fcn.14000f230
mov rcx, rbx
call fcn.14000f410
jmp 0x1400023fa
mov r8, rax
shl r8, 4
add r8, r9
mov rdx, qword [r8]
cmp rcx, rdx
jae 0x140002556
inc rax
cmp ax, r10w
jb 0x140002536
jmp 0x1400023fa
add rdx, qword [r8 + 8]
cmp rcx, rdx
jae 0x140002548
imul rax, rax, 0x28
mov rdx, qword [rbx]
lea rax, [rdx + rax + 0x14]
mov qword [rbx + 0x10], rax
test byte [rax + 0x27], 0x20
je 0x1400023fa
mov r8, r13
mov rdx, r12
call fcn.1400025b0
test rsi, rsi
jne 0x140002590
mov eax, 1
jmp 0x14000259f
mov rax, qword [rbp]
mov rcx, rsi
call qword [rax + 0x1b8]
jmp 0x140002589
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret