Function at 0x14000e670
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov ebp, dword [rsp + 0x90]
test ebp, ebp
je 0x14000e6f3
mov edi, r9d
mov r15, r8
mov r14, rdx
mov rbx, rcx
mov r12d, ebp
and r12d, 0xff000000
mov r13d, 1
mov ecx, 0x68
mov edx, 1
call qword [sym.imp.mozglue.dll_calloc]
mov rsi, rax
mov qword [rax + 0x58], r15
mov rcx, qword [r15 + 0x78]
test rcx, rcx
je 0x14000e6fa
mov rax, rcx
mov rcx, qword [rcx + 0x60]
test rcx, rcx
jne 0x14000e6c7
add rax, 0x60
movdqu xmm0, xmmword [r15 + 0x80]
pcmpeqd xmm1, xmm1
psubq xmm0, xmm1
movdqu xmmword [r15 + 0x80], xmm0
jmp 0x14000e70c
xor eax, eax
jmp 0x14000ed7c
lea rax, [r15 + 0x78]
mov qword [r15 + 0x80], r13
mov qword [r15 + 0x88], r13
mov qword [rax], rsi
mov eax, ebp
and eax, 7
mov dword [rsi + 8], eax
mov dword [rsi + 0xc], 0
cmp r12d, 0x9ffffff
jg 0x14000e772
mov ecx, 1
cmp r12d, 0x2ffffff
jle 0x14000e7d3
cmp r12d, 0x5ffffff
jle 0x14000e84f
cmp r12d, 0x7ffffff
jg 0x14000e91d
cmp r12d, 0x6000000
je 0x14000e97e
cmp r12d, 0x7000000
je 0x14000e937
jmp 0x14000ea81
cmp r12d, 0xfffffff
jle 0x14000e816
cmp r12d, 0x3fffffff
jle 0x14000e885
cmp r12d, 0x5fffffff
jg 0x14000e946
cmp r12d, 0x40000000
je 0x14000e998
cmp r12d, 0x50000000
jne 0x14000ea81
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
mov edx, 0x1c
mov eax, 0xe
cmove rax, rdx
or ecx, 0x14
jmp 0x14000ea92
cmp r12d, 0xfeffffff
jg 0x14000e8bb
cmp r12d, 0x80000000
je 0x14000e9a7
cmp r12d, 0x90000000
je 0x14000e9b6
cmp r12d, 0xa0000000
jne 0x14000ea81
mov eax, 0x10
mov ecx, 0xb
jmp 0x14000ea92
cmp r12d, 0xcffffff
jg 0x14000e8ec
cmp r12d, 0xa000000
je 0x14000e9c5
cmp r12d, 0xb000000
je 0x14000e9dc
cmp r12d, 0xc000000
je 0x14000e96f
jmp 0x14000ea81
cmp r12d, 0x3000000
je 0x14000e9eb
cmp r12d, 0x4000000
je 0x14000e96f
cmp r12d, 0x5000000
jne 0x14000ea81
mov eax, 0x10
mov ecx, 5
jmp 0x14000ea92
cmp r12d, 0x10000000
je 0x14000e9fd
cmp r12d, 0x20000000
je 0x14000ea0c
cmp r12d, 0x30000000
jne 0x14000ea81
mov eax, 0xa
mov ecx, 8
jmp 0x14000ea92
cmp r12d, 0xff000000
je 0x14000ea18
cmp r12d, 0x1000000
je 0x14000ea21
mov eax, 1
cmp r12d, 0x2000000
je 0x14000ea92
jmp 0x14000ea81
cmp r12d, 0xd000000
je 0x14000ea38
cmp r12d, 0xe000000
je 0x14000ea4c
cmp r12d, 0xf000000
jne 0x14000ea81
movzx eax, byte [r15 + 0x29]
jmp 0x14000ea86
cmp r12d, 0x8000000
je 0x14000ea58
cmp r12d, 0x9000000
jne 0x14000ea81
mov eax, 8
mov ecx, 4
jmp 0x14000ea92
cmp r12d, 0x60000000
je 0x14000ea64
cmp r12d, 0x70000000
jne 0x14000ea81
mov eax, 0x200
mov ecx, 0x18
jmp 0x14000ea92
mov eax, 4
mov ecx, 3
jmp 0x14000ea92
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
lea rax, [rcx*2 + 4]
or ecx, 0xe
jmp 0x14000ea92
mov eax, 0xa
mov ecx, 9
jmp 0x14000ea92
mov eax, 0xa
mov ecx, 0x19
jmp 0x14000ea92
mov eax, 0x10
mov ecx, 0xd
jmp 0x14000ea92
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
xor ecx, 0x11
mov eax, 6
jmp 0x14000ea92
mov eax, 0x10
mov ecx, 0xc
jmp 0x14000ea92
xor eax, eax
cmp byte [r15 + 0x2a], 4
sete al
inc rax
jmp 0x14000ea92
mov eax, 4
mov ecx, 6
jmp 0x14000ea92
mov eax, 8
mov ecx, 7
jmp 0x14000ea92
mov ecx, 0xff
xor eax, eax
jmp 0x14000ea92
xor ecx, ecx
cmp byte [r15 + 0x2a], 4
sete cl
lea rax, [rcx*4 + 4]
xor ecx, 0x13
jmp 0x14000ea92
xor ecx, ecx
cmp byte [r15 + 0x2a], 4
sete cl
lea rax, [rcx*2 + 2]
jmp 0x14000ea8f
mov eax, 2
mov ecx, 2
jmp 0x14000ea92
mov eax, 0x10
mov ecx, 0xa
jmp 0x14000ea92
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
mov edx, 0x6c
mov eax, 0x5e
cmove rax, rdx
or ecx, 0x16
jmp 0x14000ea92
movzx eax, byte [r15 + 0x2a]
xor ecx, ecx
cmp rax, 4
sete cl
or ecx, 2
mov r12d, dword [rsp + 0x98]
mov dword [rsi + 4], ecx
xor ecx, ecx
cmp rax, 2
sete cl
lea rcx, [rcx*8 + 1]
cmp rax, 1
mov r13d, 0x11
cmovne r13, rcx
shr ebp, 0x10
movzx ecx, bpl
dec ecx
cmp ecx, 0x17
ja case.default.0x14000eae3
mov dl, byte [rsp + 0xa0]
lea r8, [0x1400563b8]
movsxd rcx, dword [r8 + rcx*4]
add rcx, r8
jmp rcx
mov qword [rsp + 0x20], r13
jmp 0x14000eb86
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x29
jmp 0x14000ece1
mov dword [rsi + 0xc], 1
cmp eax, 1
jne 0x14000efb2
mov dword [rsi], 3
mov eax, 1
test r14, r14
jne case.0x14000ec8d.1
jmp 0x14000ed44
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x19
jmp 0x14000ece1
mov qword [rsp + 0x20], 0x19
jmp 0x14000eb86
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x39
movzx ebx, dl
mov rcx, rsi
add rcx, 0x10
jmp 0x14000eceb
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x21
jmp 0x14000ece1
mov qword [rsp + 0x20], 0x21
mov rcx, rbx
mov edx, r14d
mov r8, rsi
mov r9, r15
call fcn.14000f050
jmp 0x14000ed44
mov dword [rsi], 0
jmp 0x14000ed42
mov dword [rsi], 5
cmp r14, 1
ja 0x14000efe5
xor eax, eax
cmp byte [r15 + 0x29], 4
sete al
lea rax, [rax*2 + 4]
jmp 0x14000ed44
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x31
jmp 0x14000ece1
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rdx, str.eflags
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x140084698]
mov dword [rsi + 0x18], eax
mov eax, dword [0x140084694]
mov dword [rsi + 0x1c], eax
mov eax, dword [0x14008469c]
test rax, rax
je 0x14000ec44
lea rcx, [0x140046290]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], 0x51
jmp 0x14000ed42
shr dl, 3
and dl, 7
mov dword [rsi], 1
movzx eax, dl
jmp 0x14000ee8a
mov dword [rsi], 2
cmp rax, r14
ja 0x14000ed44
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x14000ec8d.3
lea rdx, [0x140056458]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov dword [rsi], 7
mov dword [rsi + 0xc], 8
movzx eax, byte [r15 + 0x29]
cmp rax, r14
ja 0x14000ed44
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x14000ec8d.3
lea rdx, [0x140056418]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov al, byte [rbx]
mov byte [rsi + 0x10], al
mov eax, 1
jmp 0x14000ed44
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x41
mov rcx, rsi
add rcx, 0x10
movzx ebx, dl
mov qword [rsi + 0x24], 0
lea rax, [rbx + rbx*4]
lea rdx, [0x140084040]
lea rdi, [rdx + rax*4]
add rdi, 0xc
mov r8d, 8
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rdi - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rdi - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rdi - 4]
test rax, rax
je 0x14000ed3f
lea rcx, [0x140046290]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], ebx
xor eax, eax
test r12d, r12d
je 0x14000ed7c
mov ecx, dword [rsi]
and ecx, 0xfffffffe
cmp ecx, 6
jne 0x14000ed7c
and r12d, 0xf00
add r12d, 0xffffff00
cmp r12d, 0x5ff
ja 0x14000ed7c
shr r12d, 8
lea rcx, [0x140046830]
mov ecx, dword [rcx + r12*4]
or dword [rsi + 0xc], ecx
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsi], 6
mov dword [rsi + 0xc], 0x44a
mov rcx, rsi
add rcx, 0x30
mov qword [rsi + 0x44], 0
lea rdx, [0x1400840d8]
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1400840d0]
mov dword [rsi + 0x38], eax
mov eax, dword [0x1400840cc]
mov dword [rsi + 0x3c], eax
mov eax, dword [0x1400840d4]
test rax, rax
je 0x14000edef
lea rcx, [0x140046290]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x44], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x48], eax
mov dword [rsi + 0x40], 7
jmp 0x14000ed42
mov dword [rsi], 6
mov dword [rsi + 0xc], 0x14a
mov rcx, rsi
add rcx, 0x30
mov qword [rsi + 0x44], 0
lea rdx, [0x1400840ec]
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1400840e4]
mov dword [rsi + 0x38], eax
mov eax, dword [0x1400840e0]
mov dword [rsi + 0x3c], eax
mov eax, dword [0x1400840e8]
test rax, rax
je 0x14000ee5d
lea rcx, [0x140046290]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x44], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x48], eax
mov dword [rsi + 0x40], 8
jmp 0x14000ed42
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
mov eax, edi
lea rcx, [rax + r13]
add rcx, 0xffffffffffffffa2
cmp rcx, 0xffffffffffffffa3
jb 0x14000ed42
add r13, rax
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rax, [r13*4]
add rax, r13
lea rdx, [0x140084040]
lea rdi, [rdx + rax*4]
add rdi, 0xc
mov r8d, 8
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rdi - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rdi - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rdi - 4]
test rax, rax
je 0x14000eeef
lea rcx, [0x140046290]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], r13d
jmp 0x14000ed42
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x41
jmp 0x14000ef2c
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x39
jmp 0x14000ef2c
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x49
lea rax, [rdi - 0x5e]
cmp rax, 0xffffffffffffffa3
jb 0x14000ed42
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rax, [rdi + rdi*4]
lea rdx, [0x140084040]
lea rbx, [rdx + rax*4]
add rbx, 0xc
mov r8d, 8
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rbx - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rbx - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rbx - 4]
test rax, rax
je 0x14000ef95
lea rcx, [0x140046290]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], edi
jmp 0x14000ed42
mov dword [rsi], 2
mov dword [rsi + 0x10], edi
mov dword [rsi + 0xc], 0x40
jmp 0x14000ed42
mov dword [rsi], 4
cmp rax, r14
ja 0x14000ed44
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x14000ec8d.3
lea rdx, [0x140056438]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbx]
mov qword [rsi + 0x10], rcx
jmp 0x14000ed44
movzx eax, word [rbx]
mov word [rsi + 0x10], ax
cmp byte [r15 + 0x29], 4
jne 0x14000f020
mov eax, 6
cmp r14, 4
jb 0x14000ed44
mov ecx, dword [rbx]
mov dword [rsi + 0x14], ecx
jmp 0x14000ed44
mov cl, byte [rbx]
mov byte [rsi + 0x10], cl
jmp 0x14000ed44
mov ecx, dword [rbx]
mov dword [rsi + 0x10], ecx
jmp 0x14000ed44
mov word [rsi + 0x14], ax
mov eax, 4
jmp 0x14000ed44
movzx ecx, word [rbx]
mov word [rsi + 0x10], cx
jmp 0x14000ed44
movzx eax, word [rbx]
mov word [rsi + 0x10], ax
mov eax, 2
jmp 0x14000ed44