Function at 0x140079b50
Capabilities:
Inspect section memory permissions

Disassembly:
movzx eax, byte [r8 + 0xc]
lea r10, sym.phoenix_rainbow_loader.exe__HS_cDYPwSqo___SlDXDk7_aPg
mov r9, rcx
test al, 3
je 0x140079b7a
and eax, 3
mov rax, qword [r10 + rax*8 + 0xaf930]
or qword [rdx + 0x430], rax
movzx eax, byte [r8 + 0xc]
test al, 0xc
je 0x140079b9c
movzx eax, al
shr rax, 2
and eax, 3
mov rax, qword [r10 + rax*8 + 0xaf950]
or qword [rdx + 0x430], rax
movzx eax, byte [r8 + 0xc]
test al, 0x30
je 0x140079bb9
movzx eax, al
shr rax, 4
and eax, 3
mov rax, qword [r10 + rax*8 + 0xaf970]
or qword [rdx + 0x430], rax
cmp dword [rdx + 0xc], 0
je 0x140079bf7
movzx eax, byte [rcx + 0x1b]
test al, al
je 0x140079e9b
sub eax, 0x26
movsxd rcx, eax
movzx eax, byte [r10 + rcx + 0x79ed0]
mov ecx, dword [r10 + rax*4 + 0x79eb4]
add rcx, r10
jmp rcx
or qword [rdx + 0x430], 0x20000000
jmp 0x140079e78
movzx eax, byte [r8 + 0xc]
test al, 0x40
je 0x140079c10
or qword [rdx + 0x430], 0x100
movzx eax, byte [r8 + 0xc]
test al, al
jns 0x140079c3f
or qword [rdx + 0x430], 0x200
cmp byte [rcx + 0x18], 0
je 0x140079c3f
or qword [rdx + 0x430], 0x80000
movzx eax, byte [rcx + 0x1d]
mov dword [rdx + rax*8 + 0x4cc], 1
movzx eax, byte [r8 + 0xd]
test al, 1
je 0x140079c58
or qword [rdx + 0x430], 0x400
movzx eax, byte [r8 + 0xd]
test al, 2
je 0x140079c6c
or qword [rdx + 0x430], 0x800
movzx eax, byte [r8 + 0xd]
test al, 4
je 0x140079c80
or qword [rdx + 0x430], 0x1000
movzx eax, byte [r8 + 0xd]
test al, 8
je 0x140079c94
or qword [rdx + 0x430], 0x2000
movzx eax, byte [r8 + 0xd]
test al, 0x10
je 0x140079ca8
or qword [rdx + 0x430], 0x4000
movzx eax, byte [r8 + 0xd]
test al, 0x20
je 0x140079cbc
or qword [rdx + 0x430], 0x8000
movzx eax, byte [r8 + 0xd]
test al, 0x40
je 0x140079ccb
or qword [rdx + 0x430], 0x10000
movzx ecx, byte [rcx + 0x19]
sub ecx, 0xf2
je 0x140079d37
cmp ecx, 1
jne 0x140079d84
mov rax, qword [rdx + 0x430]
bt rax, 0xa
jae 0x140079cff
bts rax, 0x14
mov qword [rdx + 0x430], rax
jmp 0x140079d84
bt rax, 0xb
jae 0x140079d14
bts rax, 0x15
mov qword [rdx + 0x430], rax
jmp 0x140079d84
bt rax, 0xf
jae 0x140079d84
bt rax, 0x13
jb 0x140079d29
test byte [r8 + 0xd], 0x40
je 0x140079d84
bts rax, 0x19
mov qword [rdx + 0x430], rax
jmp 0x140079d84
mov rcx, qword [rdx + 0x430]
bt rcx, 0xc
jae 0x140079d4c
bts rcx, 0x16
jmp 0x140079d7d
bt rcx, 0xe
jae 0x140079d68
bt rcx, 0x13
jb 0x140079d61
test byte [r8 + 0xd], 0x40
je 0x140079d68
bts rcx, 0x18
jmp 0x140079d7d
mov rax, qword [r9]
cmp byte [rax + 0xb], 0
je 0x140079d84
bt rcx, 0xd
jae 0x140079d84
bts rcx, 0x17
mov qword [rdx + 0x430], rcx
movzx eax, byte [r9 + 0x1e]
lea rcx, [rdx + rax*8]
cmp dword [rcx + 0x4cc], 0
jne 0x140079dae
mov eax, dword [rdx + 0x430]
test rax, 0x3f00000
je 0x140079dae
mov dword [rcx + 0x4cc], 1
cmp byte [r8 + 0xd], 0
jge 0x140079e14
or qword [rdx + 0x430], 0x20000
movzx ecx, byte [r9 + 0x1a]
mov rax, qword [rdx + 0x430]
cmp cl, 0x2e
je 0x140079df7
cmp cl, 0x3e
jne 0x140079e9b
bts rax, 0x1b
mov qword [rdx + 0x430], rax
movzx eax, byte [r9 + 0x1f]
mov dword [rdx + rax*8 + 0x4cc], 1
ret
bts rax, 0x1a
mov qword [rdx + 0x430], rax
movzx eax, byte [r9 + 0x1f]
mov dword [rdx + rax*8 + 0x4cc], 1
ret
test byte [r8 + 0xe], 1
je 0x140079e26
or qword [rdx + 0x430], 0x40000
movzx eax, byte [r9 + 0x1b]
test al, al
je 0x140079e78
test byte [r8 + 0xe], 1
je 0x140079e78
sub eax, 0x26
movsxd rcx, eax
movzx eax, byte [r10 + rcx + 0x79f2c]
mov ecx, dword [r10 + rax*4 + 0x79f10]
add rcx, r10
jmp rcx
or qword [rdx + 0x430], 0x10000000
jmp 0x140079e78
or qword [rdx + 0x430], 0x40000000
jmp 0x140079e78
mov eax, 0x80000000
or qword [rdx + 0x430], rax
movabs rax, 0x3f0000000
test qword [rdx + 0x430], rax
je 0x140079e9b
movzx eax, byte [r9 + 0x22]
mov dword [rdx + rax*8 + 0x4cc], 1
ret
movabs rax, 0x100000000
jmp 0x140079e71
movabs rax, 0x200000000
jmp 0x140079e71