Function at 0x140002ed0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov rsi, rcx
xor r13d, r13d
mov qword [rsp + 0x20], r13
lea r9d, [r13 + 0x40]
lea r8, [rbp - 0x50]
mov rdx, qword [rcx + 0x10]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400032b0
mov eax, 0x5a4d
cmp word [rbp - 0x50], ax
jne 0x1400032b0
movsxd rdx, dword [rbp - 0x14]
add rdx, qword [rsi + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 0x108
lea r8, [rbp + 0xf0]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400032b0
cmp dword [rbp + 0xf0], 0x4550
jne 0x1400032b0
mov r12d, dword [rbp + 0x180]
test r12d, r12d
je 0x1400032b0
lea rdx, str._n___Imported_IAT_modules
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011ae0
lea rdx, [0x140011cb0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, r12d
mov qword [rsp + 0x20], r13
mov r9d, 0x14
lea r8, [rsp + 0x58]
add rdx, qword [rsi + 0x10]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400032b0
mov eax, dword [rsp + 0x64]
test eax, eax
je 0x1400032b0
mov edx, eax
add rdx, qword [rsi + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 0x100
lea r8, [rbp + 0x200]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400032b0
lea rdx, [rbp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011ae0
lea rdx, [0x140011cb0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15d, r13d
mov edx, dword [rsp + 0x68]
add rdx, qword [rsi + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x340]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140003296
mov rdi, r13
nop word [rax + rax]
mov edx, dword [rsp + 0x58]
add rdx, rdi
add rdx, qword [rsi + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x348]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140003296
cmp qword [rbp + 0x340], 0
je 0x14000325d
mov rdx, qword [rbp + 0x348]
add rdx, qword [rsi + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 0x100
lea r8, [rbp - 0x10]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000325d
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
lea rax, [rbp - 0x10]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400030d4
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x70]
call fcn.140014220
nop
cmp qword [rbp - 0x80], 5
jbe 0x140003225
mov ebx, dword [rsp + 0x68]
add rbx, rdi
add rbx, qword [rsi + 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
lea rax, [rbp - 0xe]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140003120
lea rdx, [rbp - 0xe]
lea rcx, [rsp + 0x30]
call fcn.140014220
mov qword [rsp + 0x50], rbx
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x70]
lea rcx, [rsi + 0x2078]
call fcn.140013900
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140003190
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000318b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032a2
call fcn.140045f24
mov rdi, qword [rbp + 0x340]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
lea rax, [rbp - 0xe]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400031b4
lea rdx, [rbp - 0xe]
lea rcx, [rsp + 0x30]
call fcn.140014220
mov qword [rsp + 0x50], rdi
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x60]
lea rcx, [rsi + 0x2038]
call fcn.140013900
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140003225
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000321f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032a2
call fcn.140045f24
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14000325d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003258
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032a9
call fcn.140045f24
inc r15d
movsxd rdi, r15d
shl rdi, 3
mov edx, dword [rsp + 0x68]
add rdx, rdi
add rdx, qword [rsi + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x340]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140003050
add r12d, 0x14
mov edx, r12d
jmp 0x140002f99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [rsp + 0x450]
add rsp, 0x400
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret