Function at 0x7ff6850b23a0
Capabilities:
Inspect section memory permissions

Disassembly:
push r15
push r14
mov r14, r8
push r13
mov r13, rdx
push r12
push rbp
push rdi
mov rdi, rcx
mov rcx, rdx
push rsi
mov rsi, r9
push rbx
sub rsp, 0x48
call fcn.7ff6850c3a40
mov rbx, qword [0x7ff6850ca170]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx]
cmp dword [rax + 0xf4], 0
je 0x7ff6850b2412
lea rdx, [0x7ff6850c7a20]
mov ecx, 1
call qword [rax + 0x1b0]
mov r12, rax
test rax, rax
jne 0x7ff6850b2415
mov rax, qword [rbx]
mov ecx, 1
mov rax, qword [rax + 0x8c2]
mov edx, dword [rax + 0x68]
call fcn.7ff6850bfaf0
jmp 0x7ff6850b25a5
xor r12d, r12d
xor ebp, ebp
mov r15d, 0x40
mov rax, qword [rdi + 8]
cmp word [rax + 2], bp
jbe 0x7ff6850b24e4
movzx edx, bp
mov rcx, qword [rdi]
imul rax, rdx, 0x28
lea rax, [rcx + rax + 0x14]
cmp dword [rax + 0x10], 0
mov qword [rdi + 0x10], rax
jne 0x7ff6850b2448
inc ebp
jmp 0x7ff6850b241d
mov r8d, dword [rax + 0x24]
mov eax, 1
mov ecx, r8d
and ecx, 0xe0000000
je 0x7ff6850b24ac
mov eax, 0x10
cmp ecx, 0x20000000
je 0x7ff6850b24ac
mov eax, 2
cmp ecx, 0x40000000
je 0x7ff6850b24ac
mov eax, 0x20
cmp ecx, 0x60000000
je 0x7ff6850b24ac
mov eax, 8
cmp ecx, 0x80000000
je 0x7ff6850b24ac
mov eax, pe_nt_image_headers64
cmp ecx, 0xa0000000
je 0x7ff6850b24ac
cmp ecx, 0xc0000000
mov eax, 4
cmovne eax, r15d
bt r8d, 0x1a
jae 0x7ff6850b24b6
or ah, 2
shl rdx, 4
add rdx, qword [rdi + 0x3c]
mov ecx, 2
mov r9, qword [rdx + 8]
mov dword [rsp + 0x20], eax
mov r8, qword [rdx]
or rdx, 0xffffffffffffffff
call fcn.7ff6850bf2c0
test eax, eax
jne 0x7ff6850b2444
jmp 0x7ff6850b25a5
mov r9, qword [rdi + 0x4c]
test r9, r9
jne 0x7ff6850b24f2
xor r15d, r15d
jmp 0x7ff6850b2518
mov dword [rsp + 0x20], 2
mov r8, qword [rdi + 0x44]
or rdx, 0xffffffffffffffff
mov ecx, 2
call fcn.7ff6850bf2c0
test eax, eax
jne 0x7ff6850b24ed
jmp 0x7ff6850b25a5
inc r15d
mov rax, qword [rdi + 8]
mov eax, dword [rax + 0xc]
cmp eax, r15d
jbe 0x7ff6850b2571
mov ebp, r15d
mov rdx, qword [rdi + 0x20]
imul rbp, rbp, 0x12
lea rcx, [rdx + rbp]
cmp dword [rcx], 0
jne 0x7ff6850b2546
imul rax, rax, 0x12
mov ecx, dword [rcx + 4]
add rax, rcx
lea rcx, [rdx + rax]
mov r8d, dword [rsp + 0x38]
mov rdx, r13
call fcn.7ff6850beed0
test eax, eax
jne 0x7ff6850b2515
add rbp, qword [rdi + 0x20]
mov rax, qword [rdi + 0x3c]
movzx edx, word [rbp + 0xc]
mov ecx, dword [rbp + 8]
shl rdx, 4
add rcx, qword [rax + rdx - 0x10]
jne 0x7ff6850b25a9
mov edx, dword [rsp + 0xb0]
mov ecx, 0x14
call fcn.7ff6850bf840
mov edx, 2
mov r12, rax
mov rcx, rax
call fcn.7ff6850bf5c0
mov rcx, r12
mov rdx, r13
call fcn.7ff6850bf6f0
mov rcx, r12
call fcn.7ff6850bf8f0
xor eax, eax
jmp 0x7ff6850b260d
mov rdx, qword [rdi + 8]
mov r9w, word [rdx + 2]
xor edx, edx
jmp 0x7ff6850b25c5
mov r8, qword [rax]
cmp r8, rcx
jbe 0x7ff6850b25cd
inc rdx
add rax, 0x10
cmp r9w, dx
ja 0x7ff6850b25b6
jmp 0x7ff6850b25a5
add r8, qword [rax + 8]
cmp rcx, r8
jae 0x7ff6850b25be
imul rdx, rdx, 0x28
mov rax, qword [rdi]
lea rax, [rax + rdx + 0x14]
mov qword [rdi + 0x10], rax
test byte [rax + 0x27], 0x20
je 0x7ff6850b25a5
mov r8, rsi
mov rdx, r14
call fcn.7ff6850b2620
test r12, r12
je 0x7ff6850b2608
mov rax, qword [rbx]
mov rcx, r12
call qword [rax + 0x1b8]
mov eax, 1
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret