Function at 0x140009230
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov ebp, dword [rsp + 0x90]
test ebp, ebp
je 0x1400092b3
mov edi, r9d
mov r15, r8
mov r14, rdx
mov rbx, rcx
mov r12d, ebp
and r12d, 0xff000000
mov r13d, 1
mov ecx, 0x68
mov edx, 1
call qword [sym.imp.mozglue.dll_calloc]
mov rsi, rax
mov qword [rax + 0x58], r15
mov rcx, qword [r15 + 0x78]
test rcx, rcx
je 0x1400092ba
mov rax, rcx
mov rcx, qword [rcx + 0x60]
test rcx, rcx
jne 0x140009287
add rax, 0x60
movdqu xmm0, xmmword [r15 + 0x80]
pcmpeqd xmm1, xmm1
psubq xmm0, xmm1
movdqu xmmword [r15 + 0x80], xmm0
jmp 0x1400092cc
xor eax, eax
jmp 0x14000993c
lea rax, [r15 + 0x78]
mov qword [r15 + 0x80], r13
mov qword [r15 + 0x88], r13
mov qword [rax], rsi
mov eax, ebp
and eax, 7
mov dword [rsi + 8], eax
mov dword [rsi + 0xc], 0
cmp r12d, 0x9ffffff
jg 0x140009332
mov ecx, 1
cmp r12d, 0x2ffffff
jle 0x140009393
cmp r12d, 0x5ffffff
jle 0x14000940f
cmp r12d, 0x7ffffff
jg 0x1400094dd
cmp r12d, 0x6000000
je 0x14000953e
cmp r12d, 0x7000000
je 0x1400094f7
jmp 0x140009641
cmp r12d, 0xfffffff
jle 0x1400093d6
cmp r12d, 0x3fffffff
jle 0x140009445
cmp r12d, 0x5fffffff
jg 0x140009506
cmp r12d, 0x40000000
je 0x140009558
cmp r12d, 0x50000000
jne 0x140009641
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
mov edx, 0x1c
mov eax, 0xe
cmove rax, rdx
or ecx, 0x14
jmp 0x140009652
cmp r12d, 0xfeffffff
jg 0x14000947b
cmp r12d, 0x80000000
je 0x140009567
cmp r12d, 0x90000000
je 0x140009576
cmp r12d, 0xa0000000
jne 0x140009641
mov eax, 0x10
mov ecx, 0xb
jmp 0x140009652
cmp r12d, 0xcffffff
jg 0x1400094ac
cmp r12d, 0xa000000
je 0x140009585
cmp r12d, 0xb000000
je 0x14000959c
cmp r12d, 0xc000000
je 0x14000952f
jmp 0x140009641
cmp r12d, 0x3000000
je 0x1400095ab
cmp r12d, 0x4000000
je 0x14000952f
cmp r12d, 0x5000000
jne 0x140009641
mov eax, 0x10
mov ecx, 5
jmp 0x140009652
cmp r12d, 0x10000000
je 0x1400095bd
cmp r12d, 0x20000000
je 0x1400095cc
cmp r12d, 0x30000000
jne 0x140009641
mov eax, 0xa
mov ecx, 8
jmp 0x140009652
cmp r12d, 0xff000000
je 0x1400095d8
cmp r12d, 0x1000000
je 0x1400095e1
mov eax, 1
cmp r12d, 0x2000000
je 0x140009652
jmp 0x140009641
cmp r12d, 0xd000000
je 0x1400095f8
cmp r12d, 0xe000000
je 0x14000960c
cmp r12d, 0xf000000
jne 0x140009641
movzx eax, byte [r15 + 0x29]
jmp 0x140009646
cmp r12d, 0x8000000
je 0x140009618
cmp r12d, 0x9000000
jne 0x140009641
mov eax, 8
mov ecx, 4
jmp 0x140009652
cmp r12d, 0x60000000
je 0x140009624
cmp r12d, 0x70000000
jne 0x140009641
mov eax, 0x200
mov ecx, 0x18
jmp 0x140009652
mov eax, 4
mov ecx, 3
jmp 0x140009652
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
lea rax, [rcx*2 + 4]
or ecx, 0xe
jmp 0x140009652
mov eax, 0xa
mov ecx, 9
jmp 0x140009652
mov eax, 0xa
mov ecx, 0x19
jmp 0x140009652
mov eax, 0x10
mov ecx, 0xd
jmp 0x140009652
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
xor ecx, 0x11
mov eax, 6
jmp 0x140009652
mov eax, 0x10
mov ecx, 0xc
jmp 0x140009652
xor eax, eax
cmp byte [r15 + 0x2a], 4
sete al
inc rax
jmp 0x140009652
mov eax, 4
mov ecx, 6
jmp 0x140009652
mov eax, 8
mov ecx, 7
jmp 0x140009652
mov ecx, 0xff
xor eax, eax
jmp 0x140009652
xor ecx, ecx
cmp byte [r15 + 0x2a], 4
sete cl
lea rax, [rcx*4 + 4]
xor ecx, 0x13
jmp 0x140009652
xor ecx, ecx
cmp byte [r15 + 0x2a], 4
sete cl
lea rax, [rcx*2 + 2]
jmp 0x14000964f
mov eax, 2
mov ecx, 2
jmp 0x140009652
mov eax, 0x10
mov ecx, 0xa
jmp 0x140009652
xor ecx, ecx
cmp byte [r15 + 0x29], 4
sete cl
mov edx, 0x6c
mov eax, 0x5e
cmove rax, rdx
or ecx, 0x16
jmp 0x140009652
movzx eax, byte [r15 + 0x2a]
xor ecx, ecx
cmp rax, 4
sete cl
or ecx, 2
mov r12d, dword [rsp + 0x98]
mov dword [rsi + 4], ecx
xor ecx, ecx
cmp rax, 2
sete cl
lea rcx, [rcx*8 + 1]
cmp rax, 1
mov r13d, 0x11
cmovne r13, rcx
shr ebp, 0x10
movzx ecx, bpl
dec ecx
cmp ecx, 0x17
ja case.default.0x1400096a3
mov dl, byte [rsp + 0xa0]
lea r8, [0x1400563a8]
movsxd rcx, dword [r8 + rcx*4]
add rcx, r8
jmp rcx
mov qword [rsp + 0x20], r13
jmp 0x140009746
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x29
jmp 0x1400098a1
mov dword [rsi + 0xc], 1
cmp eax, 1
jne 0x140009b72
mov dword [rsi], 3
mov eax, 1
test r14, r14
jne case.0x14000984d.1
jmp 0x140009904
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x19
jmp 0x1400098a1
mov qword [rsp + 0x20], 0x19
jmp 0x140009746
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x39
movzx ebx, dl
mov rcx, rsi
add rcx, 0x10
jmp 0x1400098ab
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x21
jmp 0x1400098a1
mov qword [rsp + 0x20], 0x21
mov rcx, rbx
mov edx, r14d
mov r8, rsi
mov r9, r15
call fcn.140009c10
jmp 0x140009904
mov dword [rsi], 0
jmp 0x140009902
mov dword [rsi], 5
cmp r14, 1
ja 0x140009ba5
xor eax, eax
cmp byte [r15 + 0x29], 4
sete al
lea rax, [rax*2 + 4]
jmp 0x140009904
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x31
jmp 0x1400098a1
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rdx, str.eflags
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x140084698]
mov dword [rsi + 0x18], eax
mov eax, dword [0x140084694]
mov dword [rsi + 0x1c], eax
mov eax, dword [0x14008469c]
test rax, rax
je 0x140009804
lea rcx, [0x140046280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], 0x51
jmp 0x140009902
shr dl, 3
and dl, 7
mov dword [rsi], 1
movzx eax, dl
jmp 0x140009a4a
mov dword [rsi], 2
cmp rax, r14
ja 0x140009904
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x14000984d.3
lea rdx, [0x140056448]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov dword [rsi], 7
mov dword [rsi + 0xc], 8
movzx eax, byte [r15 + 0x29]
cmp rax, r14
ja 0x140009904
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x14000984d.3
lea rdx, [0x140056408]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov al, byte [rbx]
mov byte [rsi + 0x10], al
mov eax, 1
jmp 0x140009904
shr dl, 3
and dl, 7
mov dword [rsi], 1
add dl, 0x41
mov rcx, rsi
add rcx, 0x10
movzx ebx, dl
mov qword [rsi + 0x24], 0
lea rax, [rbx + rbx*4]
lea rdx, [0x140084040]
lea rdi, [rdx + rax*4]
add rdi, 0xc
mov r8d, 8
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rdi - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rdi - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rdi - 4]
test rax, rax
je 0x1400098ff
lea rcx, [0x140046280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], ebx
xor eax, eax
test r12d, r12d
je 0x14000993c
mov ecx, dword [rsi]
and ecx, 0xfffffffe
cmp ecx, 6
jne 0x14000993c
and r12d, 0xf00
add r12d, 0xffffff00
cmp r12d, 0x5ff
ja 0x14000993c
shr r12d, 8
lea rcx, [0x140046820]
mov ecx, dword [rcx + r12*4]
or dword [rsi + 0xc], ecx
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsi], 6
mov dword [rsi + 0xc], 0x44a
mov rcx, rsi
add rcx, 0x30
mov qword [rsi + 0x44], 0
lea rdx, [0x1400840d8]
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1400840d0]
mov dword [rsi + 0x38], eax
mov eax, dword [0x1400840cc]
mov dword [rsi + 0x3c], eax
mov eax, dword [0x1400840d4]
test rax, rax
je 0x1400099af
lea rcx, [0x140046280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x44], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x48], eax
mov dword [rsi + 0x40], 7
jmp 0x140009902
mov dword [rsi], 6
mov dword [rsi + 0xc], 0x14a
mov rcx, rsi
add rcx, 0x30
mov qword [rsi + 0x44], 0
lea rdx, [0x1400840ec]
mov r8d, 8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1400840e4]
mov dword [rsi + 0x38], eax
mov eax, dword [0x1400840e0]
mov dword [rsi + 0x3c], eax
mov eax, dword [0x1400840e8]
test rax, rax
je 0x140009a1d
lea rcx, [0x140046280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x44], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x48], eax
mov dword [rsi + 0x40], 8
jmp 0x140009902
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
mov eax, edi
lea rcx, [rax + r13]
add rcx, 0xffffffffffffffa2
cmp rcx, 0xffffffffffffffa3
jb 0x140009902
add r13, rax
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rax, [r13*4]
add rax, r13
lea rdx, [0x140084040]
lea rdi, [rdx + rax*4]
add rdi, 0xc
mov r8d, 8
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rdi - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rdi - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rdi - 4]
test rax, rax
je 0x140009aaf
lea rcx, [0x140046280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], r13d
jmp 0x140009902
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x41
jmp 0x140009aec
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x39
jmp 0x140009aec
mov dword [rsi], 1
mov dword [rsi + 0xc], 0x40
add edi, 0x49
lea rax, [rdi - 0x5e]
cmp rax, 0xffffffffffffffa3
jb 0x140009902
mov rcx, rsi
add rcx, 0x10
mov qword [rsi + 0x24], 0
lea rax, [rdi + rdi*4]
lea rdx, [0x140084040]
lea rbx, [rdx + rax*4]
add rbx, 0xc
mov r8d, 8
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [rbx - 8]
mov dword [rsi + 0x18], eax
mov eax, dword [rbx - 0xc]
mov dword [rsi + 0x1c], eax
mov eax, dword [rbx - 4]
test rax, rax
je 0x140009b55
lea rcx, [0x140046280]
movzx edx, byte [rcx + rax*2]
mov dword [rsi + 0x24], edx
movzx eax, byte [rcx + rax*2 + 1]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x20], edi
jmp 0x140009902
mov dword [rsi], 2
mov dword [rsi + 0x10], edi
mov dword [rsi + 0xc], 0x40
jmp 0x140009902
mov dword [rsi], 4
cmp rax, r14
ja 0x140009904
lea ecx, [rax - 1]
cmp ecx, 7
ja case.0x14000984d.3
lea rdx, [0x140056428]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbx]
mov qword [rsi + 0x10], rcx
jmp 0x140009904
movzx eax, word [rbx]
mov word [rsi + 0x10], ax
cmp byte [r15 + 0x29], 4
jne 0x140009be0
mov eax, 6
cmp r14, 4
jb 0x140009904
mov ecx, dword [rbx]
mov dword [rsi + 0x14], ecx
jmp 0x140009904
mov cl, byte [rbx]
mov byte [rsi + 0x10], cl
jmp 0x140009904
mov ecx, dword [rbx]
mov dword [rsi + 0x10], ecx
jmp 0x140009904
mov word [rsi + 0x14], ax
mov eax, 4
jmp 0x140009904
movzx ecx, word [rbx]
mov word [rsi + 0x10], cx
jmp 0x140009904
movzx eax, word [rbx]
mov word [rsi + 0x10], ax
mov eax, 2
jmp 0x140009904