Function at 0x140003360
Capabilities:
Inspect section memory permissions

Disassembly:
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x40
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x28], rax
mov r14, rdx
mov rdi, rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___Overwriting_the_mapping_n
mov rsi, r8
call fcn.1400028f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rdi
mov dword [rsp + 0x20], 0
call fcn.140004f40
mov ebx, eax
mov r12d, 2
test eax, eax
je 0x1400033fe
lea r9, [rsp + 0x20]
mov edx, ebx
lea r8d, [r12 + 2]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x14000348d
mov r8d, ebx
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
lea r9, [rsp + 0x20]
mov r8d, r12d
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x14000348d
lea r9, [rsp + 0x20]
mov r8d, 4
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x140003494
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.implant_size:
call fcn.1400028f0
mov rcx, rax
mov rdx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140008d10]
call fcn.1400028f0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.prev_size:
call fcn.1400028f0
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140008d10]
call fcn.1400028f0
cmp rsi, rbx
jbe 0x14000348d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.____The_implant_is_too_big_for_the_target__n
call fcn.1400028f0
xor al, al
jmp 0x1400035a7
mov r8, rsi
mov qword [rsp + 0x38], rbp
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea r9, [rsp + 0x24]
mov dword [rsp + 0x24], 0
mov r8d, r12d
mov edx, 0x1000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1400034d1
xor bpl, bpl
jmp 0x14000359c
mov rdx, rsi
mov qword [rsp + 0x30], r15
mov rcx, r14
mov bpl, 1
call fcn.140005188
xor ebx, ebx
mov r15, rax
test rax, rax
je 0x140003597
mov r8, rbx
mov rdx, rsi
mov rcx, r14
call fcn.1400050e4
mov r9, rax
test rax, rax
je 0x140003597
mov edx, dword [rax + 0x24]
mov ecx, edx
and ecx, 0xe0000000
cmp ecx, 0xe0000000
jne 0x140003527
mov r8d, 0x40
jmp 0x140003567
mov eax, edx
and eax, 0x60000000
cmp eax, 0x60000000
jne 0x14000353d
mov r8d, 0x20
jmp 0x140003567
bt edx, 0x1d
jae 0x14000354b
mov r8d, 0x20
jmp 0x140003567
mov eax, edx
mov r8d, 4
and eax, 0xc0000000
cmp eax, 0xc0000000
je 0x140003567
bt edx, 0x1e
cmovb r8d, r12d
mov ecx, dword [r9 + 0xc]
inc rbx
mov edx, dword [r9 + 8]
add rcx, rdi
lea r9, [rsp + 0x24]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xor edx, edx
movzx ecx, bpl
test eax, eax
cmovne edx, ecx
movzx ebp, dl
cmp rbx, r15
jb 0x1400034f2
mov r15, qword [rsp + 0x30]
test bpl, bpl
mov rbp, qword [rsp + 0x38]
setne al
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140006450
add rsp, 0x40
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret