Function at 0x140106e66
Capabilities:
Inspect section memory permissions

Disassembly:
push rbx
push rdi
push rbp
sub rsp, 0x30
mov r11d, ecx
xor eax, eax
cpuid
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x24], ebx
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x2c], edx
xor bpl, bpl
cmp dword [rsp + 0x20], 0
je 0x1401071a1
cmp r11d, 1
je 0x1401071b4
mov eax, 1
cpuid
mov r8d, edx
mov r9d, eax
and r8d, 1
mov edi, ecx
lea r8, [r8*2 + 1]
mov rax, r8
or rax, 4
test edx, 0x8000
cmovne r8, rax
mov rcx, r8
or rcx, 8
test edx, 0x800000
cmovne r8, rcx
test edx, 0x1000000
je 0x140106f9a
or r8, 0x10
mov r10, r8
or r10, 0x20
test edx, 0x2000000
cmovne r8, r10
mov rbp, r8
or rbp, 0x40
test edx, 0x4000000
cmovne r8, rbp
mov r10, r8
or r10, 0x80
test edi, 1
cmovne r8, r10
mov rax, r8
or rax, 0x100
test edi, 0x200
cmovne r8, rax
mov rbx, r8
or rbx, 0x800
test edi, 0x400000
cmovne r8, rbx
mov rcx, r8
or rcx, 0x200
test edi, 0x80000
cmovne r8, rcx
mov rdx, r8
or rdx, 0x400
test edi, 0x100000
cmovne r8, rdx
mov r10, r8
or r10, 0x1000
test edi, 0x800000
cmovne r8, r10
mov rbp, r8
or rbp, 0x2000
test edi, 2
cmovne r8, rbp
mov bpl, 1
mov rax, r8
or rax, 0x4000
test edi, 0x2000000
cmovne r8, rax
mov eax, 7
xor ecx, ecx
cpuid
mov r10d, ebx
movabs rbx, 0x800000000
or rbx, r8
test r10d, 0x20000000
cmovne r8, rbx
mov rax, r8
or rax, 0x20000
test edi, 0x40000000
cmovne r8, rax
test bpl, bpl
jne 0x140106fbe
mov eax, 7
xor ecx, ecx
cpuid
mov r10d, ebx
mov ebp, r10d
mov rcx, r8
and ebp, 0x108
or rcx, 0x80000
cmp ebp, 0x108
cmove r8, rcx
mov eax, 0x80000001
cpuid
mov rdx, r8
or rdx, 0x100000
test cl, 0x20
cmovne r8, rdx
mov rcx, r8
or rcx, 0x200000
test r10d, 0x10
cmovne r8, rcx
mov rbx, r8
or rbx, 0x400000
test r10d, 0x800
cmovne r8, rbx
mov rbp, r8
or rbp, 0x10000000
test r10d, 0x80000
cmovne r8, rbp
mov rax, r8
or rax, 0x20000000
test r10d, 0x40000
cmovne r8, rax
test edi, 0x8000000
je 0x14010714c
xor ecx, ecx
xgetbv
or r8, 1
mov edx, eax
and edx, 6
cmp edx, 6
jne 0x14010714c
mov rdx, r8
or rdx, 0x10000
test edi, 0x10000000
cmovne r8, rdx
mov rcx, r8
or rcx, 0x8000
test edi, 0x20000000
cmovne r8, rcx
mov rbx, r8
or rbx, 0x800000
test r10d, 0x20
cmovne r8, rbx
mov rbp, r8
or rbp, 0x40000
test edi, 0x1000
mov edi, eax
cmovne r8, rbp
and edi, 0x18
cmp edi, 0x18
jne 0x1401070e0
or r8, 1
movabs rdx, 0x1000000000
or rdx, r8
test r10d, 0x4000
cmovne r8, rdx
and eax, 0xe0
cmp eax, 0xe0
jne 0x14010714c
or r8, 1
movabs rdx, 0x400000000
mov rax, r8
movabs rcx, 0x100000000
or rax, 0x8000000
test r10d, 0x10000
movabs rbx, 0x200000000
cmovne r8, rax
or rdx, r8
test r10d, 0x10000000
cmovne r8, rdx
or rcx, r8
test r10d, 0x8000000
cmovne r8, rcx
or rbx, r8
test r10d, 0x4000000
cmovne r8, rbx
mov eax, r9d
shr eax, 0xc
shr r9d, 4
and eax, 0xf0
and r9d, 0xf
add eax, r9d
cmp eax, 0x1c
je 0x140107171
cmp eax, 0x26
je 0x140107171
cmp eax, 0x27
jne 0x140107176
bts r8, 0x1f
cmp r11d, 1
je 0x14010718b
mov qword [0x1401ad148], r8
add rsp, 0x30
pop rbp
pop rdi
pop rbx
ret
mov qword [0x1401ad140], r8
mov qword [0x1401ad148], r8
add rsp, 0x30
pop rbp
pop rdi
pop rbx
ret
mov qword [0x1401ad140], 1
add rsp, 0x30
pop rbp
pop rdi
pop rbx
ret
cmp dword [rsp + 0x24], 0x756e6547
jne 0x1401071a1
cmp dword [rsp + 0x2c], 0x49656e69
jne 0x1401071a1
cmp dword [rsp + 0x28], 0x6c65746e
jne 0x1401071a1
jmp 0x140106e66