Function at 0x1400016f0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x520]
sub rsp, 0x620
xor ebx, ebx
mov dword [rsp + 0x58], 4
mov dword [rbp + 0x88], ebx
mov rax, qword gs:[0x30]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x140002018
mov rcx, qword [rax + 0x60]
mov qword [rsp + 0x40], rcx
test rcx, rcx
je 0x140002018
mov rax, qword [rcx + 0x18]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x140002018
lea rdx, [rax + 0x20]
mov qword [rbp - 0x40], rdx
test rdx, rdx
je 0x140002018
mov rdx, qword [rdx]
lea r8d, [rbx + 0x12]
mov ecx, 0x51b7b24f
mov rdx, qword [rdx + 0x50]
call section..text
mov dword [rbp + 0xc8], eax
lea r8d, [rbx + 0x12]
mov rax, qword [rbp - 0x40]
mov ecx, 0xf2a9c356
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea rcx, [rsp + 0x40]
mov edx, 0xd4052f4d
mov dword [rbp + 0x80], eax
mov r8d, 0xd030b945
call fcn.140001040
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140002018
mov edx, 0x481b17d
mov r8d, 0xb4430b31
mov rcx, rax
call fcn.1400010d0
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140002018
mov rcx, qword [rbp - 0x70]
mov edx, 0xfaa3d28c
mov r8d, 0xd8093a30
call fcn.1400010d0
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140002018
mov rcx, qword [rbp - 0x70]
mov edx, 0x53889a20
mov r8d, 0xd55b9968
call fcn.1400010d0
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x140002028
mov rcx, qword [rbp - 0x70]
mov edx, 0x1b3c5980
mov r8d, 0x37cbc6d5
call fcn.1400010d0
mov qword [rbp + 8], rax
test rax, rax
je 0x140002018
mov rcx, qword [rbp - 0x70]
mov edx, 0x7da137d0
mov r8d, 0x9faba8ac
call fcn.1400010d0
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140002018
mov rcx, qword [rbp - 0x70]
mov edx, 0x2dbbd2c9
mov r8d, 0x4cf79d63
call fcn.1400010d0
mov qword [rbp - 0x48], rax
test rax, rax
je 0x140002018
mov rax, qword [rbp - 0x40]
lea r8d, [rbx + 0x12]
mov ecx, 0xbe3231c3
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x1fef404e
mov dword [rbp + 0x68], eax
mov r9d, 0x22d24693
mov dword [rsp + 0x20], 0xd65aaeb9
mov r8d, 0x5528f64c
lea rcx, [rsp + 0x40]
call fcn.140001480
lea rcx, [rsp + 0x40]
call fcn.1400016c0
test eax, eax
je 0x140002018
lea rcx, [rbp - 0x64]
call qword [rbp + 0x48]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140002018
mov edx, 0x4720e380
mov dword [rsp + 0x20], 0xd4219681
mov r9d, 0xd9ea3da6
lea rcx, [rsp + 0x40]
mov r8d, 0xfdd245c8
call fcn.140001480
lea rcx, [rbp - 0x64]
call qword [rbp + 0x48]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140002018
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x30]
mov qword [rbp - 8], rax
test rax, rax
je 0x140002018
mov qword [rsp + 0x630], rsi
lea rcx, [rsp + 0x40]
mov edx, 0xa0553f18
mov qword [rsp + 0x638], rdi
mov r9d, 0x5860e41c
mov dword [rsp + 0x20], 0xc427766f
mov r8d, 0xa730d8ba
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x50
mov dword [rsp + 0x20], 0x8ceddc9c
mov ecx, 0x10
mov edx, 0x8c55d847
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x19ef45c8
mov r8d, 0x894e060f
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x60
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x60]
mov edx, 0x269dbd48
mov r8d, 0x57d37e53
call fcn.1400010d0
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x70]
mov edx, 0x54a681fb
mov r8d, 0x29d9e5c
call fcn.1400010d0
mov qword [rbp + 0x28], rax
test rax, rax
je 0x140002008
mov edx, 0x6cd41c4d
mov dword [rsp + 0x20], 0x354f00d2
mov r9d, 0x7907a4d9
lea rcx, [rsp + 0x40]
mov r8d, 0xea28744
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x10
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x70]
mov edx, 0x7601942e
mov r8d, 0xfd338848
call fcn.1400010d0
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x70]
mov edx, 0x34bbc75b
mov r8d, 0x425a0d39
call fcn.1400010d0
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140002008
mov rcx, qword [rsp + 0x60]
mov edx, 0xd29e58fb
mov r8d, 0x749a8ae5
call fcn.1400010d0
mov qword [rbp + 0x18], rax
test rax, rax
je 0x140002008
mov rcx, qword [rsp + 0x60]
mov edx, 0x59db22c4
mov r8d, 0x8269df33
call fcn.1400010d0
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x70]
mov edx, 0x15e89b4c
mov r8d, 0xd8007aaa
call fcn.1400010d0
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x140002008
mov rcx, qword [rsp + 0x60]
mov edx, 0xb6aedf3
mov r8d, 0xb1d59132
call fcn.1400010d0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140002008
mov rcx, qword [rsp + 0x60]
mov edx, 0xa4dda648
mov r8d, 0xdb37989c
call fcn.1400010d0
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x70]
mov edx, 0xc846464e
mov r8d, 0x4c250c43
call fcn.1400010d0
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140002008
mov edx, 0x2df456
mov dword [rsp + 0x20], 0x9b8e22ec
mov r9d, 0x6a01629d
lea rcx, [rsp + 0x40]
mov r8d, 0x8e93e5e4
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x30
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x60]
mov edx, 0x4f175c32
mov r8d, 0xebdba745
call fcn.1400010d0
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140002008
mov edx, 0x58eaedab
mov dword [rsp + 0x20], 0xfaed1a78
mov r9d, 0x50ab452a
lea rcx, [rsp + 0x40]
mov r8d, 0xffeb3b5f
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x40
mov dword [rsp + 0x20], 0xe83af0bb
mov ecx, 0x10
mov edx, 0x8f043fa5
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x7b72e3be
mov r8d, 0xbb51e56b
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
mov ecx, 0x10
mov edx, 0xfc580cbc
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x70]
mov r8d, 0xf778f63d
call fcn.1400010d0
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140002008
mov edx, 0x9ae15f49
mov dword [rsp + 0x20], 0xf5d588fa
mov r9d, 0x84ee681e
lea rcx, [rsp + 0x40]
mov r8d, 0xc34bda58
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x70
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x60]
mov edx, 0x3f1a421c
mov r8d, 0x18929bee
call fcn.1400010d0
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x70]
mov edx, 0x922ba238
mov r8d, 0x3dbdfeb9
call fcn.1400010d0
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp + 0x50]
mov edx, 0xe587e3e9
mov r8d, 0xa4ec08a
call fcn.1400010d0
mov qword [rbp + 0x60], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x70]
mov edx, 0x6664fc08
mov r8d, 0x1706b80f
call fcn.1400010d0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140002008
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rbp + 0xb8]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140002008
lea rdx, [rbp + 0x100]
mov ecx, 0x104
call qword [rbp + 0x40]
test eax, eax
je 0x140002008
lea rcx, [rbp + 0x100]
call qword [rbp + 0xf0]
test eax, eax
je 0x140002008
mov edx, 0x3872dec0
mov dword [rsp + 0x20], 0xf612fb36
mov r9d, 0xcb101ad4
lea rcx, [rsp + 0x40]
mov r8d, 0x9084ffd
call fcn.140001480
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x64]
add rdi, 0x20
lea rdx, [rbp + 0x310]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001510
mov rax, qword [rbp + 0x98]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140002008
mov edx, 0xf6bf419
mov dword [rsp + 0x20], 0xf5a9644a
mov r9d, 0x56f878b7
lea rcx, [rsp + 0x40]
mov r8d, 0x65458b2d
call fcn.140001480
mov rcx, qword [rbp + 0x10]
lea rdx, [rbp - 0x64]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x18]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x140002008
mov rdx, qword [rbp - 8]
lea r9, [rbp]
mov rcx, qword [rbp + 0x98]
lea r8d, [rbx + 0x71]
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x50]
test eax, eax
je 0x140002008
mov rcx, qword [rbp + 0x98]
call qword [rbp + 0xe0]
mov edx, 0x9a316df9
mov dword [rsp + 0x20], 0x1dbc8ef0
mov r9d, 0xfe1ac062
lea rcx, [rsp + 0x40]
mov r8d, 0xb0f75f36
call fcn.140001480
mov rcx, qword [rbp + 0xa0]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp - 0x64]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140002008
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x310]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp + 0x60]
cmp rax, 0x20
jb 0x140002008
mov rcx, qword [rbp - 0x80]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp + 0xc0]
test eax, eax
je 0x140002008
mov rcx, qword [rbp - 0x80]
lea rax, [rbp + 0x88]
lea r9, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
mov edx, 0x20000005
call qword [rbp - 0x10]
test eax, eax
je 0x140002008
mov edx, dword [rsp + 0x48]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x30]
mov qword [rbp + 0x58], rax
test rax, rax
je 0x140002008
mov r8d, dword [rsp + 0x48]
lea r9, [rbp - 0x28]
mov rcx, qword [rbp - 0x80]
mov rdx, rax
call qword [rbp + 0xd0]
test eax, eax
je 0x140002008
mov eax, dword [rsp + 0x48]
cmp dword [rbp - 0x28], eax
jne 0x140002008
mov rcx, qword [rbp + 0x10]
call qword [rbp - 0x30]
mov rcx, qword [rbp - 0x80]
call qword [rbp - 0x30]
mov rax, qword [rbp + 0x58]
mov ecx, 0x5a4d
mov qword [rsp + 0x78], rax
cmp word [rax], cx
jne 0x140002008
mov rcx, qword [rbp + 0xa0]
call qword [rbp - 0x30]
mov rax, qword [rsp + 0x78]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [rbp + 0x58]
mov qword [rbp + 0xe8], rdx
cmp dword [rdx], 0x4550
jne 0x140002008
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x140002008
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x140002008
movzx ecx, word [rdx + 0x14]
lea r9d, [rbx + 0x40]
add rcx, 0x18
mov r8d, 0x3000
add rcx, rdx
mov qword [rbp + 0x20], rcx
xor ecx, ecx
mov edx, dword [rdx + 0x50]
call qword [rbp + 0x30]
mov qword [rbp - 0x38], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp + 0xe8]
mov rdi, rax
mov rsi, qword [rbp + 0x58]
mov ecx, dword [rcx + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001360
lea rcx, [rsp + 0x40]
call fcn.140001410
mov rsi, qword [rsp + 0x630]
mov rdi, qword [rsp + 0x638]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x140002028
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x640]
xor eax, eax
add rsp, 0x620
pop rbp
ret