Function at 0x140007600
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x2c8
mov r14, qword [0x140121580]
mov eax, 1
xor r9d, r9d
movzx ebx, word [r14 + 0x28]
mov word [r14 + 0x28], ax
mov rax, qword [0x140121690]
mov r12d, edx
mov byte [rsp + 0x5d], cl
xor edx, edx
mov word [rsp + 0x5e], bx
lea r10, [rax + 0x150]
nop dword [rax + rax]
mov rax, qword [0x1401214a0]
mov r13d, edx
mov rsi, r10
movzx ebp, dx
mov ebx, 0x1c
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r9
lea r15, [rax + r9 + 0x76c]
jmp 0x140007763
movzx edx, word [rsi]
xor ecx, ecx
test dx, dx
cmovs edx, ecx
xor r8d, r8d
movsx ecx, dx
movsx edx, word [rsi + 2]
test dx, dx
cmovs edx, r8d
add ecx, edx
movsx edx, word [rsi + 4]
test dx, dx
cmovs edx, r8d
add ecx, edx
cmp ecx, 0x32
jle 0x140007779
test ah, 0x80
mov ecx, eax
je 0x140007840
and ecx, 2
mov edx, eax
and edx, 0x80
test ecx, ecx
jne 0x14000778e
nop word [rax + rax]
test edx, edx
jne 0x1400077f0
mov edx, eax
and edx, 0x4000
test ah, 0x20
jne 0x1400077d8
test edx, edx
jne 0x1400077f0
mov edx, eax
and edx, 0x40000000
test eax, 0x20000000
jne 0x140007810
test edx, edx
jne 0x1400077f0
mov edx, eax
and edx, 0x20002002
jne 0x14000773b
cmp byte [r14 + 0x225], 0
je 0x14000774d
cmp dword [r15 + 4], 1
je 0x140007a28
movzx ecx, word [rsi + 6]
cmp word [rsi], cx
je 0x140007858
test r12b, r12b
jne 0x1400077c8
sub rbx, 1
sub r15, 0x44
sub rsi, 0xc
cmp rbx, 0xffffffffffffffff
je 0x1400079d8
mov eax, dword [r15 + 0x14]
mov edi, ebx
mov r11d, ebx
shl edi, 0x10
or edi, ebp
test al, 0x40
jne 0x140007688
mov ecx, eax
mov edx, eax
and ecx, 2
and edx, 0x80
test ecx, ecx
je 0x1400076e0
test edx, edx
jne 0x1400076e8
test al, 1
jne 0x1400077b8
cmp byte [r14 + 0xc], 0
je 0x1400077b8
test al, 0x20
jne 0x140007ae0
test ah, 8
je 0x140007a38
nop word [rax + rax]
mov edx, r11d
mov ecx, r13d
call fcn.14005e350
test r12b, r12b
je 0x14000774d
mov ecx, edi
call fcn.140041e20
jmp 0x14000774d
test edx, edx
jne 0x140007701
and eax, 0xfffbffff
mov dword [r15 + 0x14], eax
jmp 0x140007748
mov edx, r11d
mov ecx, r13d
call fcn.140007510
test r12b, r12b
je 0x14000774d
jmp 0x1400077c8
test edx, edx
jne 0x14000771c
test al, 1
jne 0x1400077e0
mov edx, 0x829c1
mov ecx, edi
call fcn.140037720
test al, al
jne 0x140007835
add word [r14 + 0xb0], 1
mov eax, dword [r15 + 0x14]
jmp 0x1400077e0
or ecx, 2
and eax, 0x80
mov edx, eax
mov dword [r15 + 0x14], ecx
mov eax, ecx
jmp 0x14000778e
movzx ecx, word [rsi + 8]
cmp word [rsi + 2], cx
jne 0x140007748
movzx ecx, word [rsi + 0xa]
cmp word [rsi + 4], cx
jne 0x140007748
test edx, edx
je 0x14000774d
cmp byte [rsp + 0x5d], 0
je 0x14000774d
cmp byte [r14 + 0xc], 0
je 0x1400078a5
imul edx, dword [r14 + 0xa4], 0xcccccccd
cmp edx, 0x33333333
ja 0x14000774d
mov edx, dword [r15 + 4]
mov r9, qword [0x140121660]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r9 + rcx + 0x10]
test rcx, rcx
je 0x1400078cb
cmp byte [rcx + 0xe], 0
jne 0x1400077e0
mov rcx, qword [0x140121660]
shl rdx, 8
mov rdx, qword [rcx + rdx + 8]
test rdx, rdx
je 0x1400078ea
cmp byte [rdx + 0xe], 0
jne 0x1400077e0
mov edx, dword [r15 + 8]
mov r9, qword [0x140121660]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r9 + rcx + 0x10]
test rcx, rcx
je 0x140007910
cmp byte [rcx + 0xe], 0
jne 0x1400077e0
mov rcx, qword [0x140121660]
shl rdx, 8
mov rdx, qword [rcx + rdx + 8]
test rdx, rdx
je 0x14000792f
cmp byte [rdx + 0xe], 0
jne 0x1400077e0
mov edx, dword [r15 + 0x10]
mov r10, qword [0x140121660]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r10 + rcx + 0x10]
test rcx, rcx
je 0x140007955
cmp byte [rcx + 0xe], 0
jne 0x1400077e0
mov rcx, qword [0x140121660]
shl rdx, 8
mov rdx, qword [rcx + rdx + 8]
test rdx, rdx
je 0x140007974
cmp byte [rdx + 0xe], 0
jne 0x1400077e0
mov edx, dword [r15 + 0xc]
mov r9, qword [0x140121660]
mov rcx, rdx
shl rcx, 8
mov rcx, qword [r9 + rcx + 0x10]
test rcx, rcx
je 0x14000799a
cmp byte [rcx + 0xe], 0
jne 0x1400077e0
mov rcx, qword [0x140121660]
shl rdx, 8
mov rdx, qword [rcx + rdx + 8]
test rdx, rdx
je 0x1400079b9
cmp byte [rdx + 0xe], 0
jne 0x1400077e0
mov rcx, qword [0x140121450]
cmp word [rcx + 0x1ac], 0
je 0x14000774d
jmp 0x1400077e0
mov rdx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
add rdx, 1
add r10, 0x15c
add r9, 0x7b4
cmp rdx, 0x4f
jne 0x140007650
movzx ebx, word [rsp + 0x5e]
mov word [r14 + 0x28], bx
add rsp, 0x2c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test al, 1
je 0x14000774d
jmp 0x14000773b
mov edx, 0x800000
mov ecx, edi
mov dword [rsp + 0x50], r11d
call fcn.140037740
mov r11d, dword [rsp + 0x50]
test al, al
je 0x1400077b8
lea r8, [r15 + 4]
xor eax, eax
mov edx, dword [r8 + rax*4]
mov r10, qword [0x140121660]
mov rcx, rdx
shl rcx, 8
test byte [r10 + rcx + 0x32], 0x80
jne 0x140007a83
add rax, 1
cmp rax, 4
jne 0x140007a5c
mov edx, dword [r15]
mov rax, qword [0x140121660]
shl rdx, 8
mov dword [rsp + 0x58], r11d
lea r8, [rsp + 0x190]
mov rcx, r8
lea rdx, [rax + rdx + 0x34]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
lea rcx, [rsp + 0x60]
lea rdx, str.you_see__s.
mov r8, rax
mov qword [rsp + 0x50], rcx
call fcn.14006dfd0
mov rdx, qword [0x140120d80]
xor r8d, r8d
mov rcx, qword [rsp + 0x50]
call fcn.14004c4d0
mov r11d, dword [rsp + 0x58]
jmp 0x1400077b8
mov ecx, edi
mov dword [rsp + 0x50], r11d
call fcn.1400262b0
mov r11d, dword [rsp + 0x50]
test rax, rax
je 0x140007afd
test word [rax], 0x1000
jne 0x140007b06
mov eax, dword [r15 + 0x14]
jmp 0x1400077a9
lea rdx, [rsp + 0x190]
mov rcx, rax
xor r8d, r8d
mov dword [rsp + 0x58], r11d
mov r9d, 1
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x20], 0
call fcn.14001d280
mov r8, qword [rsp + 0x50]
lea rcx, [rsp + 0x60]
lea rdx, str.you_see__s.
mov qword [rsp + 0x50], rcx
call fcn.14006dfd0
mov rdx, qword [0x1401211c0]
xor r8d, r8d
mov rcx, qword [rsp + 0x50]
call fcn.14004c4d0
mov r11d, dword [rsp + 0x58]
jmp 0x140007afd