Function at 0x140b33e5f
Capabilities:
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x1057276a
pushf
not eax
add eax, 0xe623e1d8
xor eax, 0xaf6705ef
rol eax, 0x65
popf
pushf
not eax
add eax, 0x888a8147
xor eax, 0xd1d2e6e1
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd44bbb91
xor eax, 0xc588df38
rol eax, 0x2a
popf
cmp eax, 4
jne 0x140b33eaf
popf
pop rax
jmp 0x140b342c3
cmp eax, 0
jne 0x140b33ebe
popf
pop rax
jmp 0x140b33f63
cmp eax, 3
jne 0x140b33ecd
popf
pop rax
jmp 0x140b34243
cmp eax, 1
jne 0x140b33edc
popf
pop rax
jmp 0x140b340c0
cmp eax, 0xa
jne 0x140b33eeb
popf
pop rax
jmp 0x140b344f7
cmp eax, 7
jne 0x140b33efa
popf
pop rax
jmp 0x140b34441
cmp eax, 6
jne 0x140b33f09
popf
pop rax
jmp 0x140b343af
cmp eax, 0xb
jne 0x140b33f18
popf
pop rax
jmp 0x140b34536
cmp eax, 0xc
jne 0x140b33f27
popf
pop rax
jmp 0x140b3456c
cmp eax, 8
jne 0x140b33f36
popf
pop rax
jmp 0x140b34480
cmp eax, 5
jne 0x140b33f45
popf
pop rax
jmp 0x140b3432d
cmp eax, 2
jne 0x140b33f54
popf
pop rax
jmp 0x140b3412d
cmp eax, 9
jne 0x140b33f63
popf
pop rax
jmp 0x140b344f0
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x190], rax
mov edi, r8d
mov rbx, rdx
mov r8d, 0x6359fa9b
pushf
not r8d
add r8d, 0xa0b4a41b
xor r8d, 0xfe4ffc80
rol r8d, 0x50
popf
pushf
not r8d
add r8d, 0x87b9cc4e
xor r8d, 0x8872469c
rol r8d, 0xfc
popf
pushf
not r8d
add r8d, 0xbcc44b5d
xor r8d, 0x9ddd216b
rol r8d, 0xbd
popf
pushf
not r8d
add r8d, 0xddde4f05
xor r8d, 0x883ef22b
rol r8d, 0x85
popf
lea rdx, [rbp - 0x80]
jmp 0x140b34003
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x140b34066
push rax
pushf
mov eax, 0x556f390a
pushf
not eax
add eax, 0xece91424
xor eax, 0xf681201a
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x87a93188
xor eax, 0xbb2c443f
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xbace9519
xor eax, 0x8c848eda
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xe4b024f1
xor eax, 0x87eeae9e
rol eax, 0xff
popf
jmp 0x140b33ea0
push rax
pushf
mov eax, 0x7352c3c5
pushf
not eax
add eax, 0xc7e82197
xor eax, 0x93e12b03
rol eax, 0x27
popf
pushf
not eax
add eax, 0xd825640f
xor eax, 0xc68372ef
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x8cc40322
xor eax, 0xb1404241
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x8c929d71
xor eax, 0xf260f454
rol eax, 0xf5
popf
jmp 0x140b33ea0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140afa8a0
xor eax, eax
jmp 0x140b34583
and qword [rsp + 0x68], 0
lea rcx, [rsp + 0x28]
mov rax, rdi
mov qword [rsp + 0x48], rbx
xor edx, edx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rbx
mov byte [rsp + 0x70], 0
call fcn.140b261a5
mov rax, qword [rsp + 0x30]
mov r9d, 0xf764a621
pushf
not r9d
add r9d, 0x823851ec
xor r9d, 0x8dd2c0c9
rol r9d, 0x27
popf
pushf
not r9d
add r9d, 0xaef61d95
xor r9d, 0x90fa7373
rol r9d, 0xa7
popf
pushf
not r9d
add r9d, 0x825396db
xor r9d, 0xd932e57b
rol r9d, 0x50
popf
cmp dword [rax + 0xc], r9d
jne 0x140b34210
push rax
pushf
mov eax, 0x6e610c2c
pushf
not eax
add eax, 0xc55282b8
xor eax, 0xa240d10f
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xca8747bb
xor eax, 0x9606c0c1
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf67b6ef7
xor eax, 0xea31d74b
rol eax, 0x84
popf
pushf
not eax
add eax, 0xe1c32d06
xor eax, 0xd8f926d5
rol eax, 0xfa
popf
jmp 0x140b33ea0
push rax
pushf
mov eax, 0x1bff94ec
pushf
not eax
add eax, 0xf61be815
xor eax, 0xa9e7eee6
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xf33edba7
xor eax, 0xabff1fca
rol eax, 0x23
popf
jmp 0x140b33ea0
cmp byte [rsp + 0x40], 0
je 0x140b34290
push rax
pushf
mov eax, 0xcaf76536
pushf
not eax
add eax, 0xdb10e69d
xor eax, 0x8b1ab941
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xc2b495d6
xor eax, 0xbd1fb121
rol eax, 0x46
popf
pushf
not eax
add eax, 0x8f19480e
xor eax, 0xccb38df6
rol eax, 0x53
popf
jmp 0x140b33ea0
push rax
pushf
mov eax, 0x381efd79
pushf
not eax
add eax, 0x8a481c65
xor eax, 0xc2450d69
rol eax, 0x73
popf
pushf
not eax
add eax, 0x8190b941
xor eax, 0xe54c35e0
rol eax, 0x2e
popf
jmp 0x140b33ea0
mov rax, qword [rsp + 0x28]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x140b3456c
call fcn.140b32e32
test eax, eax
jne 0x140b3437c
push rax
pushf
mov eax, 0xaa808f8e
pushf
not eax
add eax, 0xcdb48b6c
xor eax, 0x90eb6091
rol eax, 0x45
popf
pushf
not eax
add eax, 0xac52112f
xor eax, 0xd0101709
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xd890326c
xor eax, 0x910b6fa9
rol eax, 0x16
popf
jmp 0x140b33ea0
push rax
pushf
mov eax, 0x993fd2d3
pushf
not eax
add eax, 0xc71cb1fe
xor eax, 0xe1bbc804
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xbeb998b7
xor eax, 0xb3067ef3
rol eax, 0xc2
popf
jmp 0x140b33ea0
cmp byte [rsp + 0x40], al
je 0x140b343fb
push rax
pushf
mov eax, 0x2a4a3916
pushf
not eax
add eax, 0xa17c4569
xor eax, 0x8040a4a5
rol eax, 0x97
popf
pushf
not eax
add eax, 0xd1dbf43c
xor eax, 0xd88b0720
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x9224a111
xor eax, 0xbb77c498
rol eax, 0x10
popf
jmp 0x140b33ea0
push rax
pushf
mov eax, 0xdbd4beb0
pushf
not eax
add eax, 0xed52d9fa
xor eax, 0xa6ce8d86
rol eax, 0x13
popf
pushf
not eax
add eax, 0xac1d0b21
xor eax, 0xfcc7196c
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x9651a245
xor eax, 0x95269786
rol eax, 0xde
popf
jmp 0x140b33ea0
mov rax, qword [rsp + 0x28]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x5054d43e
pushf
not eax
add eax, 0xb7d3b75e
xor eax, 0xe2c3a4cc
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x909c1d46
xor eax, 0xeb90a2b6
rol eax, 0x4a
popf
jmp 0x140b33ea0
mov r9d, 0xb33778e7
pushf
not r9d
add r9d, 0xd78fccae
xor r9d, 0x985b03b6
rol r9d, 0x35
popf
pushf
not r9d
add r9d, 0xaf51a9dc
xor r9d, 0xa1382971
rol r9d, 0xcf
popf
jmp 0x140b3456c
cmp byte [rsp + 0x40], 0
je 0x140b34536
mov rax, qword [rsp + 0x28]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xcf651c37
pushf
not eax
add eax, 0x84129aef
xor eax, 0xb80fdf87
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xe780ac33
xor eax, 0xe45803ed
rol eax, 0xa0
popf
jmp 0x140b33ea0
xor r9d, r9d
push rax
pushf
mov eax, 0x46d71b95
pushf
not eax
add eax, 0xc8654e13
xor eax, 0x996de50b
rol eax, 0x40
popf
pushf
not eax
add eax, 0xd0844975
xor eax, 0xb79071fe
rol eax, 0xce
popf
jmp 0x140b33ea0
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x80]
call fcn.140afd592
mov eax, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.140b1dac3
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret