Function at 0x1401b9c36
Capabilities:
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0xb356ed03
pushf
not eax
add eax, 0xe57adc43
xor eax, 0xb358dbda
rol eax, 0x67
popf
pushf
not eax
add eax, 0xb96a322f
xor eax, 0xc1d39ad6
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x99d69c5d
xor eax, 0x90688dd5
rol eax, 0
popf
cmp eax, 4
jne 0x1401b9c86
popf
pop rax
jmp 0x1401ba100
cmp eax, 0
jne 0x1401b9c95
popf
pop rax
jmp 0x1401b9e0c
cmp eax, 3
jne 0x1401b9ca4
popf
pop rax
jmp 0x1401ba050
cmp eax, 1
jne 0x1401b9cb3
popf
pop rax
jmp 0x1401b9f12
cmp eax, 0xd
jne 0x1401b9cc2
popf
pop rax
jmp 0x1401ba5a6
cmp eax, 0x1a
jne 0x1401b9cd1
popf
pop rax
jmp 0x1401bab2f
cmp eax, 0xe
jne 0x1401b9ce0
popf
pop rax
jmp 0x1401ba65e
cmp eax, 0xb
jne 0x1401b9cef
popf
pop rax
jmp 0x1401ba4f7
cmp eax, 0x19
jne 0x1401b9cfe
popf
pop rax
jmp 0x1401baae3
cmp eax, 8
jne 0x1401b9d0d
popf
pop rax
jmp 0x1401ba35f
cmp eax, 0x10
jne 0x1401b9d1c
popf
pop rax
jmp 0x1401ba74a
cmp eax, 0x17
jne 0x1401b9d2b
popf
pop rax
jmp 0x1401baa2c
cmp eax, 9
jne 0x1401b9d3a
popf
pop rax
jmp 0x1401ba3e9
cmp eax, 0x12
jne 0x1401b9d49
popf
pop rax
jmp 0x1401ba86b
cmp eax, 0x18
jne 0x1401b9d58
popf
pop rax
jmp 0x1401baaaa
cmp eax, 0x11
jne 0x1401b9d67
popf
pop rax
jmp 0x1401ba7dd
cmp eax, 5
jne 0x1401b9d76
popf
pop rax
jmp 0x1401ba1c8
cmp eax, 0x16
jne 0x1401b9d85
popf
pop rax
jmp 0x1401ba9f0
cmp eax, 0xa
jne 0x1401b9d94
popf
pop rax
jmp 0x1401ba453
cmp eax, 0x14
jne 0x1401b9da3
popf
pop rax
jmp 0x1401ba91a
cmp eax, 0xf
jne 0x1401b9db2
popf
pop rax
jmp 0x1401ba6fa
cmp eax, 0x13
jne 0x1401b9dc1
popf
pop rax
jmp 0x1401ba8b4
cmp eax, 0x15
jne 0x1401b9dd0
popf
pop rax
jmp 0x1401ba9a0
cmp eax, 2
jne 0x1401b9ddf
popf
pop rax
jmp 0x1401b9fdc
cmp eax, 6
jne 0x1401b9dee
popf
pop rax
jmp 0x1401ba2ba
cmp eax, 0xc
jne 0x1401b9dfd
popf
pop rax
jmp 0x1401ba54a
cmp eax, 7
jne 0x1401b9e0c
popf
pop rax
jmp 0x1401ba352
push rdi
push r12
push r14
push r15
sub rsp, 0x38
mov r12, qword [rcx + 0x10]
movabs rdi, 0x24c598dbd757f425
pushf
not rdi
add rdi, 0x4670565d
xor rdi, 0x5c587184
rol rdi, 0x90
popf
pushf
not rdi
add rdi, 0x6d9c7f4b
xor rdi, 0x59e8a72b
rol rdi, 0x56
popf
pushf
not rdi
add rdi, 0x69bd34e0
xor rdi, 0x65290213
rol rdi, 3
popf
mov rax, rdi
mov r15, r9
sub rax, r12
mov r14, rcx
cmp rax, rdx
jb 0x1401b9eb9
push rax
pushf
mov eax, 0x13260ac8
pushf
not eax
add eax, 0x88e44eef
xor eax, 0xb701f285
rol eax, 0xff
popf
pushf
not eax
add eax, 0xb9d3bbc2
xor eax, 0xd873e030
rol eax, 0x9a
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x5aad705
pushf
not eax
add eax, 0xe875e3db
xor eax, 0x9b453626
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe8743e84
xor eax, 0x87e2114f
rol eax, 0x23
popf
pushf
not eax
add eax, 0xdc79aace
xor eax, 0xbb1bf8b1
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xf5420747
xor eax, 0x80f8e5e7
rol eax, 0xdc
popf
jmp 0x1401b9c77
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x30], rbp
mov rbp, qword [rcx + 0x18]
mov qword [rsp + 0x28], rsi
lea rsi, [rdx + r12]
mov rdx, rsi
mov qword [rsp + 0x20], r13
or rdx, 7
xor r13d, r13d
cmp rdx, rdi
jbe 0x1401b9f96
push rax
pushf
mov eax, 0xa67dabf
pushf
not eax
add eax, 0x8b4b4020
xor eax, 0xb8c03a58
rol eax, 0x89
popf
pushf
not eax
add eax, 0x81daa3f3
xor eax, 0xdd13f77a
rol eax, 0xd
popf
pushf
not eax
add eax, 0x964eecc5
xor eax, 0xe3045694
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9e3daa4a
xor eax, 0xae603977
rol eax, 0xce
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x7306494e
pushf
not eax
add eax, 0xb990d6c1
xor eax, 0xe5b948a9
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd3a5a915
xor eax, 0xb9c33bc7
rol eax, 0xee
popf
pushf
not eax
add eax, 0xd4bf8b01
xor eax, 0x97220179
rol eax, 0xec
popf
jmp 0x1401b9c77
movabs rax, 0x959ffffed2dba2b
pushf
not rax
add rax, 0x46b423a0
xor rax, 0x4987a385
rol rax, 0xcf
popf
pushf
not rax
add rax, 0x6706da15
xor rax, 0x7e72213e
rol rax, 0x94
popf
lea rcx, [rax + rax]
jmp 0x1401ba352
mov rcx, rbp
mov rax, rdi
shr rcx, 1
sub rax, rcx
cmp rbp, rax
jbe 0x1401ba0a7
push rax
pushf
mov eax, 0xc155d1f8
pushf
not eax
add eax, 0xf8773c2a
xor eax, 0xf270275a
rol eax, 0x10
popf
pushf
not eax
add eax, 0x871180cd
xor eax, 0xd7709c7e
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xc95ba4a2
xor eax, 0xb0a05005
rol eax, 0xea
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x6c123c5c
pushf
not eax
add eax, 0xdfedadb5
xor eax, 0xef1980c2
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xc14c97b9
xor eax, 0xd61b43c8
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xbcdbb6d4
xor eax, 0xcdb83d78
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xcf65ac4e
xor eax, 0xce177464
rol eax, 0xd3
popf
jmp 0x1401b9c77
movabs rax, 0xb76b8180cb00c752
pushf
not rax
add rax, 0x63a962f3
xor rax, 0x51974aa0
rol rax, 0x5d
popf
pushf
not rax
add rax, 0x4a87d13b
xor rax, 0x4acfc96f
rol rax, 0xf3
popf
pushf
not rax
add rax, 0x77aa672e
xor rax, 0x48aa0960
rol rax, 0x5a
popf
pushf
not rax
add rax, 0x7c04fca7
xor rax, 0x4afa827e
rol rax, 0x62
popf
lea rcx, [rax + rax]
jmp 0x1401ba352
lea rax, [rcx + rbp]
mov rdi, rdx
cmp rdx, rax
cmovb rdi, rax
movabs rax, 0xffffe6f71e7a2f54
pushf
not rax
add rax, 0x4386a3e3
xor rax, 0x4db3f48e
rol rax, 0xf3
popf
pushf
not rax
add rax, 0x61db5b5d
xor rax, 0x666feb9f
rol rax, 0xf7
popf
lea rcx, [rdi + 1]
cmp rcx, rax
ja 0x1401ba261
push rax
pushf
mov eax, 0xf9c49778
pushf
not eax
add eax, 0xfdacaeb6
xor eax, 0x99affdd0
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xf2d7c872
xor eax, 0xe6efc823
rol eax, 0xae
popf
pushf
not eax
add eax, 0x879a53ee
xor eax, 0x9e298c31
rol eax, 0x29
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x47cca609
pushf
not eax
add eax, 0xe285a140
xor eax, 0xb5e399f8
rol eax, 0x16
popf
pushf
not eax
add eax, 0xdb5a3082
xor eax, 0xd2781470
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xfa4d32dd
xor eax, 0xa4accedd
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xf39d1cc4
xor eax, 0xfa297438
rol eax, 0xd6
popf
jmp 0x1401b9c77
add rcx, rcx
cmp rcx, 0x1000
jb 0x1401ba31f
push rax
pushf
mov eax, 0x90ef6142
pushf
not eax
add eax, 0xa90c9249
xor eax, 0xc2fa84a7
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb9e2a319
xor eax, 0xf3c73c5c
rol eax, 0x62
popf
pushf
not eax
add eax, 0x9ad84189
xor eax, 0x8754f72f
rol eax, 0xc
popf
pushf
not eax
add eax, 0xc8fe9925
xor eax, 0xd38fbc15
rol eax, 0xb7
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x107b9da1
pushf
not eax
add eax, 0xe2d587b3
xor eax, 0xbdea495b
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb357c8cd
xor eax, 0xc6cef631
rol eax, 0x6c
popf
jmp 0x1401b9c77
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401baae3
mov rcx, rax
call fcn.140120390
test rax, rax
je 0x1401ba3a3
push rax
pushf
mov eax, 0x5ad5c241
pushf
not eax
add eax, 0xe1902218
xor eax, 0xa0e2f794
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xca357230
xor eax, 0x9530301e
rol eax, 0xaa
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0xc5f344da
pushf
not eax
add eax, 0xc35b0360
xor eax, 0xe62ca7f5
rol eax, 0x68
popf
pushf
not eax
add eax, 0xf775b5bb
xor eax, 0x8fc98d75
rol eax, 6
popf
pushf
not eax
add eax, 0xdd1ced27
xor eax, 0xf7aad29e
rol eax, 0xf6
popf
jmp 0x1401b9c77
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1401ba5a6
test rcx, rcx
je 0x1401ba49e
push rax
pushf
mov eax, 0x2f2ac3d6
pushf
not eax
add eax, 0xbb34fb03
xor eax, 0xba9aab44
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xd4faec6e
xor eax, 0xda012095
rol eax, 0xd
popf
pushf
not eax
add eax, 0x87986792
xor eax, 0xea244b70
rol eax, 0x5c
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x659a3b78
pushf
not eax
add eax, 0x87bbdf5b
xor eax, 0xff93410a
rol eax, 2
popf
pushf
not eax
add eax, 0xfa278e9a
xor eax, 0x802bc228
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8fb8ac12
xor eax, 0xb7678891
rol eax, 0x50
popf
pushf
not eax
add eax, 0xeb0bb778
xor eax, 0xd24b1fd3
rol eax, 0xa2
popf
jmp 0x1401b9c77
call fcn.140120390
mov rbx, rax
jmp 0x1401ba5a6
mov rbx, r13
push rax
pushf
mov eax, 0x542dc377
pushf
not eax
add eax, 0xc33b2b24
xor eax, 0x90022247
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xfac5b497
xor eax, 0xabf0b3b6
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xa87e35a7
xor eax, 0xcba2b6ab
rol eax, 0x60
popf
pushf
not eax
add eax, 0xf1ba90c7
xor eax, 0xcca32460
rol eax, 0x54
popf
jmp 0x1401b9c77
mov qword [r14 + 0x18], rdi
lea r8, [r12 + r12]
mov qword [r14 + 0x10], rsi
lea rdi, [r8 + rbx]
mov rcx, rbx
cmp rbp, 7
jbe 0x1401ba618
push rax
pushf
mov eax, 0x926077f6
pushf
not eax
add eax, 0xa1fae73b
xor eax, 0xb7d473cf
rol eax, 0x37
popf
pushf
not eax
add eax, 0xc1df7602
xor eax, 0xc8c4aefd
rol eax, 0x20
popf
pushf
not eax
add eax, 0x9fbeeac6
xor eax, 0xbfaff440
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe806b470
xor eax, 0x9276b4fa
rol eax, 0x55
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x2a24e5b1
pushf
not eax
add eax, 0xf98d0405
xor eax, 0xbe9ad2f5
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd2e65bd7
xor eax, 0xa32f19ad
rol eax, 0xc
popf
pushf
not eax
add eax, 0xf3777d08
xor eax, 0x88a878d4
rol eax, 0x53
popf
jmp 0x1401b9c77
mov rsi, qword [r14]
mov rdx, rsi
call fcn.14001fa00
test r15, r15
je 0x1401ba6b4
push rax
pushf
mov eax, 0xb239fd73
pushf
not eax
add eax, 0xc0cec679
xor eax, 0xf87c17fb
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xaee4d2ba
xor eax, 0xabee24f4
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x8bdcebd7
xor eax, 0x8296a2d4
rol eax, 0x29
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0xe92236c2
pushf
not eax
add eax, 0x85226121
xor eax, 0xbcc65c23
rol eax, 0x17
popf
pushf
not eax
add eax, 0x87834b48
xor eax, 0x9deb3270
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xdac104f4
xor eax, 0x857a8e54
rol eax, 0x27
popf
jmp 0x1401b9c77
movzx eax, r13w
mov rcx, r15
rep stosw word [rdi], ax
push rax
pushf
mov eax, 0x2f7d67c1
pushf
not eax
add eax, 0xb831142f
xor eax, 0xee569004
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xff31eabd
xor eax, 0xcf2d7669
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xa9af3c0e
xor eax, 0xfbbec8de
rol eax, 0x1a
popf
jmp 0x1401b9c77
lea rdx, [rbp*2 + 2]
lea rax, [r15 + r12]
mov word [rbx + rax*2], r13w
cmp rdx, 0x1000
jb 0x1401ba7aa
push rax
pushf
mov eax, 0xe44644b5
pushf
not eax
add eax, 0xf333b419
xor eax, 0xaa45bf95
rol eax, 0xab
popf
pushf
not eax
add eax, 0x91fba880
xor eax, 0x8c70f696
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xe00a2d8a
xor eax, 0x8339fd59
rol eax, 0xd2
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0x78dbe2e0
pushf
not eax
add eax, 0xc9d61aff
xor eax, 0x8d33af29
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb8e7b9bd
xor eax, 0xaa02ee23
rol eax, 0x83
popf
jmp 0x1401b9c77
mov rcx, qword [rsi - 8]
add rdx, 0x27
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x1401ba825
push rax
pushf
mov eax, 0xfa7b058e
pushf
not eax
add eax, 0x9ecc160f
xor eax, 0x8e581278
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xde21790f
xor eax, 0xc91cf7b6
rol eax, 0x5f
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0xce51a68a
pushf
not eax
add eax, 0xcc65f869
xor eax, 0xd5299667
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xc3ba35bd
xor eax, 0xd57ab087
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xe2bf1281
xor eax, 0xb392c063
rol eax, 0x5d
popf
jmp 0x1401b9c77
mov rsi, rcx
push rax
pushf
mov eax, 0xb9c8ff31
pushf
not eax
add eax, 0xe347ad50
xor eax, 0x964fe122
rol eax, 0x24
popf
pushf
not eax
add eax, 0x82aad426
xor eax, 0xc4e619c6
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa75eded4
xor eax, 0xe4f7cbf7
rol eax, 0x66
popf
jmp 0x1401b9c77
mov rcx, rsi
call fcn.140155251
jmp 0x1401baa2c
mov rdx, r14
call fcn.14001fa00
test r15, r15
je 0x1401ba95a
push rax
pushf
mov eax, 0x2016b5b0
pushf
not eax
add eax, 0xb21fdcb3
xor eax, 0xa7ad6e71
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xab3bbcdd
xor eax, 0xd4d50853
rol eax, 0x45
popf
jmp 0x1401b9c77
push rax
pushf
mov eax, 0xda125f89
pushf
not eax
add eax, 0xf97183f3
xor eax, 0xf4796b43
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb880b943
xor eax, 0xa746bb79
rol eax, 0x66
popf
pushf
not eax
add eax, 0xdedcab0a
xor eax, 0xa3a6b39a
rol eax, 0x23
popf
jmp 0x1401b9c77
movzx eax, r13w
mov rcx, r15
rep stosw word [rdi], ax
push rax
pushf
mov eax, 0x50e39d1c
pushf
not eax
add eax, 0xba462902
xor eax, 0x83edeeed
rol eax, 0x83
popf
pushf
not eax
add eax, 0xca4e8d65
xor eax, 0xbd24ee45
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x9657e63f
xor eax, 0xdc7d1ff7
rol eax, 0xa
popf
jmp 0x1401b9c77
lea rcx, [r15 + r12]
mov word [rbx + rcx*2], r13w
push rax
pushf
mov eax, 0x24b943a
pushf
not eax
add eax, 0xf3561346
xor eax, 0x907813c6
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x821206e2
xor eax, 0xb85fa15c
rol eax, 0x14
popf
jmp 0x1401b9c77
mov qword [r14], rbx
mov rax, r14
mov rsi, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x70]
mov r13, qword [rsp + 0x20]
add rsp, 0x38
pop r15
pop r14
pop r12
pop rdi
ret
call fcn.140149650
int3
call fcn.1401238a3
int3
call fcn.14017b264
int3