Function at 0x140002410
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r13
push r14
sub rsp, 0x38
xor ebp, ebp
mov r13, r9
mov r14, r8
mov rsi, rdx
mov rdi, rcx
test rcx, rcx
je 0x1400024a4
mov edx, 0x40
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1400024a4
mov eax, 0x5a4d
cmp word [rdi], ax
jne 0x1400024a4
movsxd rax, dword [rdi + 0x3c]
cmp eax, 0x400
jg 0x1400024a4
lea rbx, [rdi + rax]
mov edx, 0xf8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1400024a4
cmp dword [rbx], 0x4550
jne 0x1400024a4
test rbx, rbx
je 0x1400024a4
mov edx, 0xf8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x140002498
movzx r10d, bp
mov dword [rsp + 0x20], r10d
jmp 0x1400024ab
movzx r10d, word [rbx + 0x18]
mov dword [rsp + 0x20], r10d
jmp 0x1400024ab
mov r10d, ebp
mov dword [rsp + 0x20], ebp
mov qword [rsp + 0x78], r12
mov r11b, 1
mov byte [rsp + 0x70], r11b
mov r8, r14
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbp
test rdi, rdi
je 0x1400027c2
mov ebp, 0x20b
test r8, r8
je 0x1400027c2
cmp r8, rdi
jb 0x1400027c2
mov rax, r8
sub rax, rdi
lea rcx, [rax + 0x14]
cmp rcx, rsi
ja 0x1400027c2
cmp rcx, 0x14
jb 0x1400027c2
cmp rcx, rax
jb 0x1400027c2
mov r9d, dword [r8]
test r9d, r9d
jne 0x14000251d
cmp dword [r8 + 0x10], r9d
je 0x1400027c2
mov eax, dword [r8 + 0xc]
lea r12, [rax + rdi]
lea rcx, [rax + 1]
nop dword [rax]
lea rdx, [rdi - 1]
add rdx, rcx
je 0x1400027be
cmp rdx, rdi
jb 0x1400027be
cmp rcx, rsi
ja 0x1400027be
cmp rcx, 1
jb 0x1400027be
lea rax, [rcx - 1]
cmp rcx, rax
jb 0x1400027be
movzx eax, byte [rdx]
test al, al
je 0x14000257c
sub al, 0x21
cmp al, 0x5c
ja 0x1400027be
inc rcx
jmp 0x140002530
mov r15d, dword [r8 + 0x10]
test r9d, r9d
cmove r9d, r15d
mov ebx, r9d
sub r15, rbx
cmp r10w, bp
mov bpl, 1
jne 0x1400026a2
add rbx, 8
lea r14, [rdi - 8]
add r14, r15
nop word [rax + rax]
lea rax, [r14 + rbx]
test rax, rax
je 0x14000277e
cmp rax, rdi
jb 0x14000277e
lea rcx, [r15 + rbx]
cmp rcx, rsi
ja 0x14000277e
cmp rcx, 8
jb 0x14000277e
lea rax, [rbx - 8]
add rax, r15
cmp rcx, rax
jb 0x14000277e
lea rax, [rdi - 8]
add rax, rbx
je 0x14000277e
cmp rax, rdi
jb 0x14000277e
cmp rbx, rsi
ja 0x14000277e
cmp rbx, 8
jb 0x14000277e
lea rax, [rbx - 8]
cmp rbx, rax
jb 0x14000277e
cmp qword [r14 + rbx], 0
je 0x14000277b
mov rax, qword [rdi + rbx - 8]
test rax, rax
je 0x14000277e
js 0x140002674
lea rcx, [rax + rdi]
test rcx, rcx
je 0x14000277e
cmp rcx, rdi
jb 0x14000277e
lea rcx, [rax + 4]
cmp rcx, rsi
ja 0x14000277e
cmp rcx, 4
jb 0x14000277e
cmp rcx, rax
jb 0x14000277e
mov rax, qword [r13]
lea r8, [rdi - 8]
lea r9, [r14 + rbx]
add r8, rbx
mov rdx, r12
mov rcx, r13
call qword [rax]
test al, al
movzx ebp, bpl
mov eax, 0
cmove ebp, eax
add rbx, 8
jmp 0x1400025b0
add rbx, 4
lea r14, [rdi - 4]
add r14, r15
nop dword [rax]
lea rax, [r14 + rbx]
test rax, rax
je 0x14000277e
cmp rax, rdi
jb 0x14000277e
lea rcx, [r15 + rbx]
cmp rcx, rsi
ja 0x14000277e
cmp rcx, 4
jb 0x14000277e
lea rax, [rbx - 4]
add rax, r15
cmp rcx, rax
jb 0x14000277e
lea rax, [rdi - 4]
add rax, rbx
je 0x14000277e
cmp rax, rdi
jb 0x14000277e
cmp rbx, rsi
ja 0x14000277e
cmp rbx, 4
jb 0x14000277e
lea rax, [rbx - 4]
cmp rbx, rax
jb 0x14000277e
cmp dword [r14 + rbx], 0
je 0x14000277b
mov ecx, dword [rdi + rbx - 4]
test ecx, ecx
je 0x14000277e
mov eax, ecx
shr eax, 0x1f
test al, al
jne 0x14000274d
lea rax, [rcx + rdi]
test rax, rax
je 0x14000277e
cmp rax, rdi
jb 0x14000277e
lea rax, [rcx + 4]
cmp rax, rsi
ja 0x14000277e
cmp rax, 4
jb 0x14000277e
cmp rax, rcx
jb 0x14000277e
mov rax, qword [r13]
lea r8, [rdi - 4]
lea r9, [r14 + rbx]
add r8, rbx
mov rdx, r12
mov rcx, r13
call qword [rax]
test al, al
movzx ebp, bpl
mov eax, 0
cmove ebp, eax
add rbx, 4
jmp 0x1400026b0
mov bpl, 1
movzx r11d, byte [rsp + 0x70]
mov r10, qword [rsp + 0x28]
mov r14, qword [rsp + 0x80]
inc r10
mov qword [rsp + 0x28], r10
lea rax, [r10 + r10*4]
mov r10d, dword [rsp + 0x20]
lea r8, [r14 + rax*4]
xor eax, eax
test bpl, bpl
mov ecx, eax
cmovne ecx, r11d
movzx r11d, cl
mov byte [rsp + 0x70], cl
jmp 0x1400024ce
xor al, al
jmp 0x1400027c6
movzx eax, r11b
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x78]
add rsp, 0x38
pop r14
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret