Function at 0x140009550
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
lea rbx, [0x140103400]
mov r8d, 0x400
or edx, 0xffffffff
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
lea rdi, [0x140103800]
mov r8d, 0x2ba
mov rcx, rdi
or edx, 0xffffffff
call sub.VCRUNTIME140.dll_memset
mov eax, 0x31
mov dword [0x140103414], 0x300039
mov word [0x140103404], ax
mov eax, 0x32
mov word [0x140103406], ax
mov eax, 0x33
mov word [0x140103408], ax
mov eax, 0x34
mov word [0x14010340a], ax
mov eax, 0x35
mov word [0x14010340c], ax
mov eax, 0x36
mov word [0x14010340e], ax
mov eax, 0x37
mov word [0x140103410], ax
mov eax, 0x38
mov word [0x140103412], ax
mov eax, 0x41
mov word [0x14010343c], ax
mov eax, 0x42
mov word [0x140103460], ax
mov eax, 0x43
mov word [0x14010345c], ax
mov eax, 0x44
mov word [0x140103440], ax
mov eax, 0x45
mov word [0x140103424], ax
mov eax, 0x46
mov word [0x140103442], ax
mov eax, 0x47
mov word [0x140103444], ax
mov eax, 0x48
mov word [0x140103446], ax
mov eax, 0x49
mov word [0x14010342e], ax
mov eax, 0x4a
mov word [0x140103448], ax
mov eax, 0x4b
mov word [0x14010344a], ax
mov eax, 0x4c
mov word [0x14010344c], ax
mov eax, 0x4d
mov word [0x140103464], ax
mov eax, 0x4e
mov word [0x140103462], ax
mov eax, 0x4f
mov word [0x140103430], ax
mov eax, 0x50
mov word [0x140103432], ax
mov eax, 0x51
mov word [0x140103420], ax
mov eax, 0x52
mov word [0x140103426], ax
mov eax, 0x53
mov word [0x14010343e], ax
mov eax, 0x54
mov word [0x140103428], ax
mov eax, 0x55
mov word [0x14010342c], ax
mov eax, 0x56
mov word [0x14010345e], ax
mov eax, 0x57
mov word [0x140103422], ax
mov eax, 0x58
mov word [0x14010345a], ax
mov eax, 0x59
mov word [0x14010342a], ax
mov eax, 0x5a
mov word [0x140103458], ax
mov eax, 0x27
mov word [0x140103450], ax
mov eax, 0x5c
mov word [0x140103456], ax
mov eax, 0x2c
mov word [0x140103466], ax
mov eax, 0x3d
mov word [0x14010341a], ax
mov eax, 0x60
mov word [0x140103452], ax
mov eax, 0x5b
mov word [0x140103434], ax
mov eax, 0x2d
mov word [0x140103418], ax
mov eax, 0x2e
mov word [0x140103468], ax
mov eax, 0x5d
mov word [0x140103436], ax
mov eax, 0x3b
mov word [0x14010344e], ax
mov eax, 0x2f
mov word [0x14010346a], ax
mov eax, 0xa2
mov word [0x1401034ac], ax
mov eax, 0x103
mov word [0x14010341c], ax
mov eax, 0x105
mov word [0x1401036a6], ax
mov eax, 0x10d
mov word [0x14010369e], ax
mov eax, 0x101
mov word [0x140103438], ax
mov eax, 0x100
mov word [0x140103402], ax
mov eax, 0x10c
mov word [0x14010368e], ax
mov eax, 0x104
mov word [0x1401036a4], ax
mov eax, 0x15c
mov word [0x1401036ba], ax
mov eax, 0x10b
mov word [0x1401036a2], ax
mov eax, 0x10a
mov word [0x140103692], ax
mov eax, 0x11c
mov word [0x14010348a], ax
mov word [0x14010368c], ax
mov eax, 0x20
mov word [0x140103472], ax
mov eax, 0x102
mov word [0x14010341e], ax
mov eax, 0x118
mov word [0x140103474], ax
mov eax, 0x11a
mov word [0x14010368a], ax
mov eax, 0x119
mov word [0x14010348c], ax
mov eax, 0x122
mov word [0x140103476], ax
mov eax, 0x123
mov word [0x140103478], ax
mov eax, 0x124
mov word [0x14010347a], ax
mov eax, 0x125
mov word [0x14010347c], ax
mov eax, 0x126
mov word [0x14010347e], ax
mov eax, 0x127
mov word [0x140103480], ax
mov eax, pe_nt_image_headers64
mov word [0x140103482], ax
mov eax, 0x129
mov word [0x140103484], ax
mov eax, 0x12a
mov word [0x140103486], ax
mov eax, 0x12b
mov word [0x140103488], ax
mov eax, 0x12c
mov word [0x1401034ae], ax
mov eax, 0x12d
mov word [0x1401034b0], ax
mov eax, 0x12e
mov word [0x1401034c8], ax
mov eax, 0x12f
xor ecx, ecx
mov word [0x1401034ca], ax
mov eax, 0x130
mov word [0x1401034cc], ax
mov eax, 0x131
mov word [0x1401034ce], ax
mov eax, 0x132
mov word [0x1401034d0], ax
mov eax, 0x133
mov word [0x1401034d2], ax
mov eax, 0x134
mov word [0x1401034d4], ax
mov eax, 0x135
mov word [0x1401034d6], ax
mov eax, 0x136
mov word [0x1401034d8], ax
mov eax, 0x137
mov word [0x1401034da], ax
mov eax, 0x138
mov word [0x1401034dc], ax
mov eax, 0x139
mov word [0x1401034ec], ax
mov eax, 0x156
mov word [0x140103470], ax
mov eax, 0x155
mov word [0x14010343a], ax
mov eax, 0x154
mov word [0x140103454], ax
mov eax, 0x157
mov word [0x1401036b6], ax
mov eax, 0x11b
mov word [0x14010366e], ax
mov eax, 0x15a
mov word [0x140103670], ax
mov eax, 0x159
mov word [0x14010363a], ax
mov eax, 0x158
mov word [0x14010346c], ax
mov eax, 0x15b
mov word [0x1401036b8], ax
mov eax, 0x108
mov word [0x1401036a0], ax
mov eax, 0x107
mov word [0x140103696], ax
mov eax, 0x106
mov word [0x14010369a], ax
mov eax, 0x109
mov word [0x140103690], ax
mov eax, 0x140
mov word [0x1401034a4], ax
mov eax, 0x141
mov word [0x14010349e], ax
mov eax, 0x142
mov word [0x1401034a0], ax
mov eax, 0x143
mov word [0x1401034a2], ax
mov eax, 0x144
mov word [0x140103496], ax
mov eax, 0x145
mov word [0x140103498], ax
mov eax, 0x146
mov word [0x14010349a], ax
mov eax, 0x147
mov word [0x14010348e], ax
mov eax, 0x148
mov word [0x140103490], ax
mov eax, 0x149
mov word [0x140103492], ax
mov eax, 0x14e
mov word [0x14010349c], ax
mov eax, 0x14a
mov word [0x1401034a6], ax
mov eax, 0x14b
mov word [0x14010366a], ax
mov eax, 0x14f
mov word [0x140103638], ax
mov eax, 0x14c
mov word [0x14010346e], ax
mov eax, 0x14d
mov word [0x140103494], ax
movzx eax, word [rbx]
test ax, ax
jle 0x140009b11
movsx rax, ax
mov word [rdi + rax*2], cx
inc ecx
add rbx, 2
cmp ecx, 0x200
jl 0x140009b01
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret