Function at 0x14013a400
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rsi
mov ebp, r8d
mov r12, rdx
mov rbx, rcx
lea rax, vtable.k.2.0
mov qword [rcx], rax
mov edx, 0xa
add rcx, 0x30
call fcn.14014f11c
lea r11, method..13.virtual_0
mov qword [rbx + 0x30], r11
call fcn.14013d07c
mov rdx, rax
xor r13d, r13d
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14013a475
mov ecx, 0x80004005
call fcn.140001c00
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbx + 0x68], rax
mov dword [rbx + 0x74], 0xffffffff
mov dword [rbx + 0x78], r13d
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov dword [rbx + 0x18], r13d
mov dword [rbx + 0x1c], r13d
mov dword [rbx + 0x24], 0x1e
mov dword [rbx + 0x28], r13d
mov dword [rbx + 0x20], r13d
mov dword [rbx + 0x2c], r13d
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x14019cf88]
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [0x14019cf88]
lea rcx, [rbx + 0x68]
call fcn.140002390
mov dword [rbx + 0x70], 0xffffffff
lea rax, method.j.1.virtual_0
mov qword [rbx], rax
mov qword [rbx + 0x10], r12
mov dword [rbx + 0x18], ebp
test r12, r12
je case.0x14013ad6b.341970974
xor eax, eax
mov dword [rbx + 0x80], eax
mov dword [rbx + 0x84], eax
xor edx, edx
lea r8d, [rax + 0x60]
lea rcx, [rbx + 0x88]
call fcn.140160e90
movzx ecx, word [r12 + 0x44a]
sub ecx, 0x1025
je 0x14013a5d4
sub ecx, 0x1e
je 0x14013a560
cmp ecx, 0x41f
jne 0x14013a63a
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x400000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x548], 0x400
jmp 0x14013a63a
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x1000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x800
mov rax, qword [rbx + 0x10]
or dword [rax + 0x58], 2
movzx eax, word [r12 + 0x448]
and ax, 0xf000
cmp ax, 0x1000
jne 0x14013a5aa
mov dword [rbx + 0x20], r13d
mov dword [rbx + 0x28], 1
mov dword [rbx + 0x24], 0x1e
mov dword [rbx + 0x1c], 1
mov rax, qword [rbx + 0x10]
test byte [rax + 0x1aa], 1
je 0x14013a5be
and dword [rax + 0x2c], 0xfffff7ff
mov rax, qword [rbx + 0x10]
cmp dword [rax + 0x168], 0x11
jne 0x14013a63a
or dword [rax + 0x34], 0x2000000
jmp 0x14013a63a
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x40000000
mov rax, qword [rbx + 0x10]
bt dword [rax + 0x274], 0x15
jae 0x14013a5f7
test byte [rax + 0x70], 0x80
jne 0x14013a5f7
or dword [rax + 0x30], 2
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 1
mov rax, qword [rbx + 0x10]
cmp dword [rax + 0x1d38], 1
jne 0x14013a61e
or dword [rax + 0x30], 0x4000000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x2000000
mov rax, qword [rbx + 0x10]
mov ecx, dword [rax + 0x104]
shl ecx, 2
xor ecx, dword [rbx + 0x80]
and ecx, 8
xor dword [rbx + 0x80], ecx
mov eax, dword [rbx + 0x18]
lea rdx, [0x140000000]
cmp eax, 0x153
jg 0x14013a750
cmp eax, 0x153
je case.0x14013a67c.48
sub eax, 0x24
cmp eax, 0xca
ja case.0x14013a67c.50
cdqe
movzx eax, byte [rdx + rax + 0x13afc4]
mov ecx, dword [rdx + rax*4 + 0x13af88]
add rcx, rdx
jmp rcx
mov rax, qword [rbx + 0x10]
or dword [rax + 0x70], 1
mov rax, qword [rbx + 0x10]
or dword [rax + 0x70], 2
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x70], 2
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x10
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x8000000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 4
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x40
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 8
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x800
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
and dword [rax + 0x2c], 0xfffff7ff
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x40
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x40
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x40
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x100000
or dword [rbx + 0x80], 1
jmp case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x10000000
jmp case.0x14013a67c.50
cmp eax, 0x15b
je case.0x14013a67c.48
add eax, 0xfffffe9e
cmp eax, 1
ja case.0x14013a67c.50
mov rax, qword [rbx + 0x10]
and dword [rax + 0x2c], 0xfffff7ff
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x200000
movzx ecx, word [r12 + 0x44a]
shl ecx, 0x10
movzx eax, word [r12 + 0x448]
or ecx, eax
cmp ecx, 0x104316d3
ja 0x14013aad8
cmp ecx, 0x104316d3
je 0x14013aac8
cmp ecx, 0x1025022b
ja 0x14013a92f
cmp ecx, 0x10250229
jae case.0x14013a96b.270860854
cmp ecx, 0x10250128
ja 0x14013a7fe
cmp ecx, 0x10250128
je case.0x14013a822.270860602
cmp ecx, 0x10192991
je 0x14013a7ee
cmp ecx, 0x1019a88d
jne case.0x14013ad6b.341970974
or dword [rbx + 0x80], 2
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x400
jmp case.0x14013ad6b.341970974
add ecx, 0xefdafec8
cmp ecx, 0xe9
ja case.0x14013ad6b.341970974
movzx eax, byte [rdx + rcx + 0x13b0bc]
mov ecx, dword [rdx + rax*4 + 0x13b090]
add rcx, rdx
jmp rcx
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x8000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x80000
mov dword [rbx + 0x24], 0xa
mov dword [rbx + 0x1c], 1
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x80000
mov dword [rbx + 0x24], 0xa
mov dword [rbx + 0x1c], 1
or dword [rbx + 0x80], 0x400
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x20000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x80000
mov dword [rbx + 0x24], 0xa
mov dword [rbx + 0x1c], 1
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x10
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
or dword [rbx + 0x80], 8
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x2000000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x40000
or dword [rbx + 0x80], 0x40
lea rcx, [rbx + 0x88]
lea rdx, [0x140211d00]
mov r8d, 0x60
call fcn.140161150
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013ad6b.341970974
cmp ecx, 0x10250518
ja 0x14013a9c5
cmp ecx, 0x10250518
je 0x14013aa47
add ecx, 0xefdafdcb
cmp ecx, 0xd6
ja case.0x14013ad6b.341970974
movzx eax, byte [rdx + rcx + 0x13b1c0]
mov ecx, dword [rdx + rax*4 + 0x13b1a8]
add rcx, rdx
jmp rcx
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x40000
or dword [rbx + 0x80], 0x408
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x400
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x2000000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x20000
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x408
jmp case.0x14013ad6b.341970974
cmp ecx, 0x10431153
ja 0x14013aa6c
cmp ecx, 0x10431153
je 0x14013aa54
cmp ecx, 0x10250626
ja 0x14013aa1e
cmp ecx, 0x10250626
je 0x14013aa47
cmp ecx, 0x10250563
jb case.0x14013ad6b.341970974
cmp ecx, 0x10250564
jbe 0x14013aa12
cmp ecx, 0x10250618
je 0x14013aa47
cmp ecx, 0x1025061c
je 0x14013aa47
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 8
jmp case.0x14013ad6b.341970974
cmp ecx, 0x1025063f
jb case.0x14013ad6b.341970974
cmp ecx, 0x10250642
jbe 0x14013aa47
cmp ecx, 0x10431033
je 0x14013aa54
cmp ecx, 0x10431053
je 0x14013aa9a
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x50], 0x40
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x3c], 4
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x8000000
jmp case.0x14013ad6b.341970974
cmp ecx, 0x10431343
ja 0x14013aaaa
cmp ecx, 0x10431343
je 0x14013aabb
sub ecx, 0x10431163
je 0x14013aa9a
sub ecx, 0x60
je 0x14013ac1d
cmp ecx, 0x175
je 0x14013aabb
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x8000000
jmp case.0x14013ad6b.341970974
sub ecx, 0x104313b2
je 0x14013aabb
cmp ecx, 0x11
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x70], 2
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x800
jmp case.0x14013ad6b.341970974
cmp ecx, 0x14621004
ja 0x14013ad3a
cmp ecx, 0x14621004
je case.0x14013ad6b.341970972
cmp ecx, 0x1043831a
ja 0x14013ac2c
cmp ecx, 0x1043831a
je 0x14013ac6d
cmp ecx, 0x104319a3
ja 0x14013aba4
cmp ecx, 0x104319a3
je 0x14013ac1d
cmp ecx, 0x10431873
ja 0x14013ab8e
cmp ecx, 0x10431873
je 0x14013ab5f
sub ecx, 0x10431723
je 0x14013ab52
sub ecx, 0x40
je 0x14013ac1d
cmp ecx, 0xc0
je 0x14013ac1d
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 8
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x80000000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 1
or dword [rbx + 0x80], 0x28
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 2
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 4
jmp case.0x14013ad6b.341970974
sub ecx, 0x10431878
je 0x14013ac1d
cmp ecx, 0x1b
je 0x14013ac1d
jmp case.0x14013ad6b.341970974
sub ecx, 0x104319b3
je 0x14013ac1d
sub ecx, 0x6834
je 0x14013ac10
sub ecx, 0xe4
je 0x14013ac00
sub ecx, 0x3c
je 0x14013abf1
cmp ecx, 0x10
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x80000000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 1
or dword [rbx + 0x80], 0x28
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 2
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x184
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x200
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x200
jmp case.0x14013ad6b.341970974
cmp ecx, 0x104384b0
ja 0x14013ac94
cmp ecx, 0x104384b0
je 0x14013ac7d
sub ecx, 0x10438330
je 0x14013ac6d
sub ecx, 0x1a
je 0x14013ac6d
sub ecx, 0x15
je 0x14013ac5d
sub ecx, 0x39
je 0x14013ac6d
cmp ecx, 0x36
je 0x14013ac6d
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x80
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x4000000
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x4000
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x40
jmp case.0x14013ad6b.341970974
sub ecx, 0x104384bc
je 0x14013ad2a
sub ecx, 0x2dc344
je 0x14013ad09
sub ecx, 0x4808
je 0x14013acef
sub ecx, 0x68
je 0x14013acce
cmp ecx, 0x97104
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
jmp case.0x14013ad6b.341970974
mov dword [rbx + 0x28], 1
mov dword [rbx + 0x20], 1
mov dword [rbx + 0x24], 3
mov dword [rbx + 0x1c], 1
jmp case.0x14013ad6b.341970974
mov dword [rbx + 0x20], 1
mov dword [rbx + 0x24], 3
mov dword [rbx + 0x1c], 1
jmp case.0x14013ad6b.341970974
mov dword [rbx + 0x28], 1
mov dword [rbx + 0x20], 1
mov dword [rbx + 0x24], reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rbx + 0x1c], 1
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x50], 0x4000
jmp case.0x14013ad6b.341970974
cmp ecx, 0x14623783
ja 0x14013ada1
cmp ecx, 0x14623783
je 0x14013ad87
add ecx, 0xeb9defe4
cmp ecx, 0x64
ja case.0x14013ad6b.341970974
movzx eax, byte [rdx + rcx + 0x13b2a4]
mov ecx, dword [rdx + rax*4 + 0x13b298]
add rcx, rdx
jmp rcx
mov rax, qword [rbx + 0x10]
or dword [rax + 0x3c], 0x20
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x44], 1
jmp case.0x14013ad6b.341970974
mov dword [rbx + 0x20], 1
mov dword [rbx + 0x28], 1
mov dword [rbx + 0x1c], 1
jmp case.0x14013ad6b.341970974
cmp ecx, 0x14627517
ja 0x14013aeb1
cmp ecx, 0x14627517
je 0x14013aea4
cmp ecx, 0x14626481
ja 0x14013ae3b
cmp ecx, 0x14626481
je 0x14013ae2f
cmp ecx, 0x1462524b
ja 0x14013adfe
cmp ecx, 0x1462524a
jae 0x14013ae6f
sub ecx, 0x14624aa7
je 0x14013adee
cmp ecx, 0xa
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x400000
jmp case.0x14013ad6b.341970974
cmp ecx, 0x1462531b
je 0x14013ae6f
cmp ecx, 0x14626300
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x20
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 8
mov rax, qword [rbx + 0x10]
or dword [rax + 0x4c], 1
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 4
jmp case.0x14013ad6b.341970974
cmp ecx, 0x1462678a
je 0x14013ae94
cmp ecx, 0x14627248
je 0x14013ae7f
cmp ecx, 0x1462736a
je 0x14013ae6f
cmp ecx, 0x14627441
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x2000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x4000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x40
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 4
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x50], 0x400
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x10
jmp case.0x14013ad6b.341970974
cmp ecx, 0x17ff0594
ja 0x14013af24
cmp ecx, 0x17ff0594
je 0x14013af1b
sub ecx, 0x15093005
je 0x14013af0e
sub ecx, 0x2b6e0d2
je 0x14013aeef
sub ecx, 0x3ef4b9
je 0x14013aee2
cmp ecx, 2
jne case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x2c], 0x400000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x34], 0x40
or dword [rbx + 0x80], 0x1000
mov rax, qword [rbx + 0x10]
mov dword [rax + 0x40], 1
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x30], 0x20000000
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x10
jmp case.0x14013ad6b.341970974
sub ecx, 0x1b0a00ad
je 0x14013af61
sub ecx, 0x1a
je 0x14013af57
sub ecx, 8
je 0x14013af4a
cmp ecx, 0x1fd1
jne case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x8000
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x3c], 0x800
jmp case.0x14013ad6b.341970974
mov rax, qword [rbx + 0x10]
or dword [rax + 0x4c], 8
jmp case.0x14013ad6b.341970974
or dword [rbx + 0x80], 0x800
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x30
pop r13
pop r12
pop rdi
ret