Function at 0x14000b420
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
mov eax, 0x5a4d
mov r8, rdx
cmp word [rcx], ax
jne 0x14000b572
movsxd rax, dword [rcx + 0x3c]
add rax, rcx
cmp dword [rax], 0x4550
jne 0x14000b572
test rax, rax
je 0x14000b572
mov edx, dword [rax + 0xd8]
test edx, edx
jne 0x14000b485
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.___Load_config_directory_wasnt_found__probably_StackCookie_not_defined__fix_cookie_skipped
call fcn.140006010
lea rdx, [0x1400061f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov al, 1
add rsp, 0x28
ret
mov qword [rsp + 0x20], rdi
mov rdi, qword [rdx + rcx + 0x58]
test rdi, rdi
jne 0x14000b4c3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.___StackCookie_not_defined__fix_cookie_skipped
call fcn.140006010
lea rdx, [0x1400061f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rdi, qword [rsp + 0x20]
mov al, 1
add rsp, 0x28
ret
sub rcx, r8
mov qword [rsp + 0x38], rsi
add rdi, rcx
movabs rsi, 0x2b992ddfa232
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
cmp qword [rdi], rsi
je 0x14000b511
lea rdx, str.____StackCookie_already_fixed___this_probably_wrong
call fcn.140006010
lea rdx, [0x1400061f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rsi, qword [rsp + 0x38]
xor al, al
mov rdi, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rdx, str.___Fixing_stack_cookie
mov qword [rsp + 0x30], rbx
call fcn.140006010
lea rdx, [0x1400061f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
movabs rax, 0x2b992ddfa233
xor rcx, rbx
mov rbx, qword [rsp + 0x30]
xor rcx, rsi
cmp rcx, rsi
mov rsi, qword [rsp + 0x38]
cmove rcx, rax
mov al, 1
mov qword [rdi], rcx
mov rdi, qword [rsp + 0x20]
add rsp, 0x28
ret
xor al, al
add rsp, 0x28
ret