Function at 0x1400011e0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov r15, rdx
mov r13, rcx
test rdx, rdx
je 0x14000152d
mov r11d, 0xffff
mov word [rsp + 0x20], r11w
movzx r10d, r11w
cmp rdx, r11
jae 0x140001238
movzx r10d, dx
mov word [rsp + 0x20], dx
jmp 0x14000126d
cmp byte [rdx], 0x23
jne 0x14000126d
lea rcx, [rdx + 1]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov r11d, 0xffff
lea ecx, [rax - 1]
cmp ecx, 0xfffd
ja 0x140001267
movzx r10d, ax
mov word [rsp + 0x20], r10w
mov r15d, r10d
jmp 0x14000126d
movzx r10d, word [rsp + 0x20]
test r13, r13
je 0x14000152d
mov eax, 0x5a4d
cmp word [r13], ax
jne 0x14000152d
movsxd rcx, dword [r13 + 0x3c]
mov rax, rcx
cmp dword [rcx + r13], 0x4550
jne 0x14000152d
test ecx, ecx
jle 0x1400012b0
cmp ecx, 0x10000000
jae 0x1400012b0
lea rcx, [r13 + 0x18]
add rcx, rax
jmp 0x1400012b4
lea rcx, [r13 + 0x14]
movzx edx, word [rcx]
sub edx, 0x107
je 0x14000152d
sub edx, 4
je 0x1400012ed
cmp edx, 0x100
jne 0x14000152d
xor r14d, r14d
mov ebp, r14d
cmp dword [rcx + 0x6c], r14d
jbe 0x140001322
mov eax, dword [rcx + 0x70]
test eax, eax
je 0x140001322
mov r8d, dword [rcx + 0x74]
jmp 0x140001304
xor r14d, r14d
mov ebp, r14d
cmp dword [rcx + 0x5c], r14d
jbe 0x140001322
mov eax, dword [rcx + 0x60]
test eax, eax
je 0x140001322
mov r8d, dword [rcx + 0x64]
test r8d, r8d
je 0x140001322
mov edx, dword [rcx + 0x3c]
lea rsi, [rax + r13]
test edx, edx
jne 0x140001317
mov rsi, r14
test edx, edx
mov ebp, r8d
cmove ebp, r14d
jmp 0x140001325
mov rsi, r14
test rsi, rsi
je 0x14000152d
test ebp, ebp
je 0x14000152d
mov ecx, dword [rsi + 0x14]
test ecx, ecx
je 0x14000152d
cmp ebp, 0x28
ja 0x14000135c
mov eax, dword [rsi + 0x18]
cmp ecx, eax
cmova eax, ecx
imul ebp, eax, 0xff
add ebp, dword [rsi + 0x24]
sub ebp, esi
add ebp, r13d
mov r8d, dword [rsi + 0x20]
mov r12d, r14d
mov edx, dword [rsi + 0x1c]
add r8, r13
mov eax, dword [rsi + 0x24]
add rdx, r13
add rax, r13
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rax
test ecx, ecx
je 0x14000152d
nop dword [rax]
mov ecx, r12d
movzx r9d, word [rax + rcx*2]
mov edx, dword [rdx + r9*4]
test edx, edx
je 0x14000141f
mov r8d, dword [r8 + rcx*4]
lea rdi, [rdx + r13]
add r8, r13
cmp rdi, rsi
jbe 0x1400014f6
mov eax, ebp
add rax, rsi
cmp rdi, rax
jae 0x1400014f6
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x1400013d0
inc ebx
cmp ebx, 0x100
jae 0x14000141a
mov r8d, ebx
lea rcx, [rsp + 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov ecx, r14d
test ebx, ebx
je 0x14000140e
lea rax, [rsp + 0x40]
nop
cmp byte [rax], 0x2e
je 0x14000143b
inc ecx
inc rax
cmp ecx, ebx
jb 0x140001400
movzx r10d, word [rsp + 0x20]
mov r11d, 0xffff
mov r8, qword [rsp + 0x28]
inc r12d
cmp r12d, dword [rsi + 0x14]
jae 0x14000152d
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
jmp 0x140001390
mov eax, ecx
cmp rax, 0x100
jae 0x14000155a
lea ebx, [rcx + 1]
mov byte [rsp + rax + 0x40], 0
add rbx, rdi
je 0x14000140e
cmp byte [rbx], 0x23
jne 0x1400014b2
movzx r10d, word [rsp + 0x20]
lea rcx, [rbx + 1]
mov r11d, 0xffff
test rcx, rcx
je 0x14000141a
cmp r10w, r11w
jae 0x14000141a
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ebx, eax
lea ecx, [rbx - 1]
cmp ecx, 0xfffe
ja 0x14000140e
movzx r10d, word [rsp + 0x20]
cmp ebx, r10d
jne 0x140001414
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movzx edx, bx
mov r8b, 1
mov rcx, rax
call fcn.1400011e0
jmp 0x14000152f
mov r8, rbx
mov rax, r15
sub r8, r15
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400014d3
inc rax
test ecx, ecx
jne 0x1400014c0
test edx, edx
jne 0x14000140e
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.1400011e0
jmp 0x14000152f
cmp r15, r11
jbe 0x140001518
mov rax, r15
sub r8, r15
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140001514
inc rax
test ecx, ecx
jne 0x140001501
test edx, edx
je 0x140001528
lea ecx, [r9 + 1]
movzx eax, r10w
cmp ecx, eax
jne 0x14000141a
mov rax, rdi
jmp 0x14000152f
xor eax, eax
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.140001970
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001a98
int3