Function at 0x14001ef60
Capabilities:
Inspect section memory permissions
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rbx, qword [rdx + 0x300]
mov rdi, rdx
mov rsi, rcx
test rbx, rbx
je 0x14001ef38
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001ef38
mov r8, qword [rsi + 0x4a08]
xor eax, eax
cmp byte [rbx + 0x28], al
jne 0x14001ef1a
mov rdx, qword [rdx + 0x20]
xor r9d, r9d
mov qword [rsp + 0x28], r8
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0x20], rax
call fcn.14001a3e0
test eax, eax
setns cl
mov byte [rbx + 0x28], cl
test eax, eax
js 0x14001ef4c
mov rdx, rdi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
jmp 0x14001ef60
lea r8, str.pCacheEntry_hLdrMod_is_NIL__Impossible_
mov edx, 0xffffff9b
mov rcx, rsi
call fcn.14001ee10
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0xe8
mov rax, qword [0x1400bf848]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rax, qword [rdx + 0x300]
mov rdi, rcx
mov rbx, rdx
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [rax + 0x10]
lea rdx, [rdi + 0x3788]
mov rax, qword [rcx + 8]
call qword [case.0x140020b7f.0]
test eax, eax
jns 0x14001efcf
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Error_reading_image_header:__Rrc
mov edx, 0xffffea09
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb1f
mov qword [rsp + 0xd0], r15
mov eax, 0x5a4d
xor r15d, r15d
cmp word [rdi + 0x3788], ax
jne 0x14001f01c
mov r15d, dword [rdi + 0x37c4]
lea eax, [r15 - 0x40]
cmp eax, 0x1c0
jbe 0x14001f01c
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_e_lfanew_value:__x
mov edx, 0xffffea18
mov dword [rsp + 0x20], r15d
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb17
mov qword [rsp + 0x120], r12
lea rsi, [rdi + 0x3788]
mov r12d, r15d
add rsi, r12
mov eax, dword [rsi]
cmp eax, 0x4550
je 0x14001f060
mov r9, qword [rbx + 0x10]
lea r8, str._s:_No_PE_signature_at__x:__x
mov dword [rsp + 0x28], eax
mov edx, 0xffffea1a
mov rcx, rdi
mov dword [rsp + 0x20], r15d
call fcn.14001ee10
jmp 0x14001fb0f
mov qword [rsp + 0xd8], r14
mov eax, 0x8664
movzx r14d, word [rsi + 4]
cmp r14w, ax
je 0x14001f0a3
cmp byte [rbx + 0x2fb], 0
jne 0x14001f0a3
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_machine:__x
mov edx, 0xffffe9f1
mov dword [rsp + 0x20], r14d
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb07
movzx ecx, word [rsi + 0x14]
mov r9d, 0x14c
cmp r14w, r9w
mov eax, 0xf0
mov edx, 0xe0
cmove eax, edx
cmp rcx, rax
je 0x14001f0e4
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_optional_header_size:__x
mov dword [rsp + 0x20], ecx
mov edx, 0xffffea17
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb07
movzx ecx, word [rsi + 0x18]
cmp r14w, r9w
mov eax, 0x20b
mov edx, 0x10b
cmove eax, edx
cmp ecx, eax
je 0x14001f11e
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_optional_header_magic:__x
mov dword [rsp + 0x20], ecx
mov edx, 0xffffea17
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb07
cmp r14w, r9w
jne 0x14001f129
mov eax, dword [rsi + 0x74]
jmp 0x14001f12f
mov eax, dword [rsi + 0x84]
cmp eax, 0x10
je 0x14001f155
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_data_dirs:__x
mov edx, 0xffffea17
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb07
movzx eax, word [rsi + 6]
mov dword [rbp - 0x4d], eax
cmp eax, 0x10
jbe 0x14001f182
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Too_many_section_headers:__x
mov edx, 0xffffe9f2
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001ee10
jmp 0x14001fb07
lea r8, [rax + rax*4]
mov qword [rsp + 0xe0], r13
shl r8, 3
lea rcx, [rdi + 0x4788]
cmp r14w, r9w
mov edx, 0xf8
mov r13d, 0x108
cmovne edx, r13d
add rdx, rsi
call fcn.140016f80
mov eax, 0x14c
cmp r14w, ax
jne 0x14001f1c4
mov eax, dword [rsi + 0x34]
jmp 0x14001f1c8
mov rax, qword [rsi + 0x30]
test rax, 0xfff
je 0x14001f1e6
mov qword [rsp + 0x20], rax
lea r8, str._s:_Invalid_image_base:__p
mov edx, 0xffffea1b
jmp 0x14001faf3
mov edx, dword [rsi + 0x50]
mov ecx, dword [rbx + 8]
add ecx, 0xfff
mov dword [rbp - 0x45], edx
lea eax, [rdx + 0xfff]
xor ecx, eax
test ecx, 0xfffff000
je 0x14001f238
cmp byte [rbx + 0x2fa], 0
jne 0x14001f238
mov rax, qword [rbx + 8]
lea r8, str._s:_SizeOfImage___x__isnt_close_enough_to_the_mapping_size___x_
mov r9, qword [rbx + 0x10]
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov edx, 0xffffea19
call fcn.14001ee10
jmp 0x14001faff
mov rcx, qword [rbx + 0x300]
mov rcx, qword [rcx + 8]
call fcn.140020b60
mov ecx, dword [rbp - 0x45]
cmp rcx, rax
je 0x14001f289
mov rcx, qword [rbx + 0x300]
mov rcx, qword [rcx + 8]
call fcn.140020b60
mov r9, qword [rbx + 0x10]
lea r8, str._s:_SizeOfImage___x__differs_from_what_RTLdrSize_returns___zx_
mov qword [rsp + 0x28], rax
mov edx, 0xffffea19
mov eax, dword [rbp - 0x45]
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.14001ee10
jmp 0x14001faff
mov ecx, dword [rsi + 0x38]
mov dword [rbp - 0x49], ecx
lea eax, [rcx - 1]
mov dword [rbp - 0x31], eax
test ecx, eax
jne 0x14001fae3
cmp ecx, 0x1000
jb 0x14001fae3
movzx r10d, byte [rbx + 0x2fa]
mov eax, 0x1000
test r10b, r10b
mov edx, 0x10000
cmovne eax, edx
cmp ecx, eax
ja 0x14001fae3
mov edx, dword [rsi + 0x3c]
mov dword [rbp - 0x3d], edx
lea r8d, [rdx - 1]
test edx, r8d
jne 0x14001fac1
lea eax, [rdx - 0x200]
cmp eax, 0xe00
ja 0x14001fac1
cmp edx, ecx
ja 0x14001fac1
mov r11d, dword [rbp - 0x4d]
mov eax, 0x14c
mov edx, dword [rsi + 0x54]
cmp r14w, ax
mov eax, 0xf8
cmove r13d, eax
lea ecx, [r11 + r11*4]
lea eax, [r15 + r13]
lea r9d, [rax + rcx*8]
cmp edx, r9d
jae 0x14001f34a
mov dword [rsp + 0x30], r11d
lea r8, str._s:_Headers_are_too_small:__x____x__cSections_x_
mov dword [rsp + 0x28], r9d
mov rcx, rdi
mov r9, qword [rbx + 0x10]
mov dword [rsp + 0x20], edx
mov edx, 0xffffea12
call fcn.14001ee10
jmp 0x14001faff
mov eax, dword [rbp - 0x3d]
not r8d
dec eax
add eax, edx
and eax, r8d
mov dword [rbp - 0x51], eax
cmp eax, 0x1000
jbe 0x14001f38f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Headers_are_larger_than_expected:__x__x__expected_max__zx_
mov qword [rsp + 0x30], 0x1000
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov edx, 0xffffea12
call fcn.14001ee10
jmp 0x14001faff
movzx eax, word [rsi + 0x16]
mov word [rbx + 0x2f4], ax
movzx eax, word [rsi + 0x5e]
mov word [rbx + 0x2f6], ax
test r10b, r10b
je 0x14001f3ce
mov eax, dword [rdi + 0x4794]
sub qword [rbx], rax
mov eax, dword [rdi + 0x4794]
add qword [rbx + 8], rax
mov eax, dword [rdi + 0x4794]
mov r8, qword [rbx]
mov dword [rbx + 0x234], eax
jmp 0x14001f3d1
mov r8, qword [rbx]
mov rcx, qword [rbx + 0x300]
lea rax, [0x14001def0]
xor r15d, r15d
lea rdx, [rbp - 0x39]
cmp dword [rdi], 2
mov r9d, r15d
cmovne r9, rax
mov rax, qword [rdi + 0x4a08]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.14001fb40
test eax, eax
js 0x14001faff
cmp dword [0x1400c1908], 0x60000000
jb 0x14001f43c
mov eax, 0x14c
cmp r14w, ax
mov r14, qword [rbp - 0x39]
jne 0x14001f432
mov eax, dword [rbx]
mov dword [r12 + r14 + 0x34], eax
jmp 0x14001f440
mov rax, qword [rbx]
mov qword [r12 + r14 + 0x30], rax
jmp 0x14001f440
mov r14, qword [rbp - 0x39]
mov esi, r15d
mov dword [rbp - 0x41], r15d
mov r12d, 2
cmp byte [rbx + 0x2f9], sil
je 0x14001f696
cmp dword [rdi], 1
jne 0x14001f50e
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.NtCreateSection
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400203d0
test eax, eax
jns 0x14001f4aa
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_NtCreateSection:__Rrc
mov edx, eax
jmp 0x14001faf3
mov eax, dword [rbp - 0x59]
mov r9d, 0xffffffff
mov rcx, qword [rbx + 0x300]
xor r8d, r8d
mov dword [rbp - 0x21], eax
mov rdx, r14
lea rax, [rbp - 0x59]
mov dword [rbp - 0x1d], 0xc
mov qword [rsp + 0x28], rax
lea rax, str.LdrLoadDll
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x20], rax
call fcn.1400203d0
test eax, eax
jns 0x14001f4fe
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_LdrLoadDll:__Rrc
mov edx, eax
jmp 0x14001faf3
mov eax, dword [rbp - 0x59]
mov esi, r12d
mov dword [rbp - 0x19], eax
mov dword [rbp - 0x15], 0xc
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.LdrInitializeThunk
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400203d0
test eax, eax
jns 0x14001f555
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_LdrInitializeThunk:__Rrc
mov edx, eax
jmp 0x14001faf3
mov eax, esi
mov r9d, 0xffffffff
xor r8d, r8d
mov rdx, r14
inc esi
lea rcx, [rax*8]
mov eax, dword [rbp - 0x59]
mov dword [rbp + rcx - 0x21], eax
lea rax, [rbp - 0x59]
mov dword [rbp + rcx - 0x1d], 0xe
mov rcx, qword [rbx + 0x300]
mov qword [rsp + 0x28], rax
lea rax, str.KiUserApcDispatcher
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400203d0
test eax, eax
jns 0x14001f5b7
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_KiUserApcDispatcher:__Rrc
mov edx, eax
jmp 0x14001faf3
mov eax, dword [rbp - 0x59]
lea rcx, [rsi*8]
mov dword [rbp + rcx - 0x21], eax
mov r9d, 0xffffffff
mov dword [rbp + rcx - 0x1d], 0xe
lea rax, [rbp - 0x59]
mov rcx, qword [rbx + 0x300]
xor r8d, r8d
mov qword [rsp + 0x28], rax
mov rdx, r14
lea rax, str.KiUserExceptionDispatcher
inc esi
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400203d0
test eax, eax
jns 0x14001f617
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_KiUserExceptionDispatcher:__Rrc
mov edx, eax
jmp 0x14001faf3
mov eax, dword [rbp - 0x59]
lea rcx, [rsi*8]
inc eax
mov dword [rbp + rcx - 0x1d], 0xd
mov dword [rbp + rcx - 0x21], eax
inc esi
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.LdrSystemDllInitBlock
mov dword [rbp - 0x41], esi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
mov rdx, r14
call fcn.1400203d0
test eax, eax
js 0x14001f696
mov rax, qword [rbp - 0x59]
lea rdx, [rsi*8]
mov dword [rbp + rdx - 0x21], eax
mov eax, eax
movzx ecx, byte [rax + r14]
mov eax, ecx
cmp cl, 0x50
jae 0x14001f68d
mov eax, 0x50
inc esi
mov dword [rbp + rdx - 0x1d], eax
mov dword [rbp - 0x41], esi
cmp byte [rbx + 0x2fa], r15b
jne 0x14001f6f9
mov dword [rsp + 0x40], r12d
mov esi, r12d
mov r12d, dword [rbp - 0x51]
xor r8d, r8d
mov dword [rsp + 0x38], r15d
mov r9d, r12d
mov qword [rsp + 0x30], r15
mov rdx, rbx
mov dword [rsp + 0x28], 0xffffffff
mov rcx, rdi
mov qword [rsp + 0x20], r14
call fcn.14001d360
test eax, eax
js 0x14001faff
mov r9d, r12d
mov dword [rsp + 0x20], esi
xor r8d, r8d
mov rdx, rbx
mov rcx, rdi
call fcn.14001d230
test eax, eax
jns 0x14001f702
jmp 0x14001faff
mov r12d, dword [rbp - 0x51]
mov esi, 2
mov r11d, esi
mov dword [rbp - 0x51], esi
mov r13d, r15d
cmp dword [rbp - 0x4d], r15d
jbe 0x14001f9e8
lea r9, [rdi + 0x4790]
mov qword [rbp - 0x29], r9
mov r14d, dword [r9 + 4]
mov ecx, dword [rbp - 0x45]
mov r10d, dword [rbp - 0x49]
cmp r14d, r12d
jb 0x14001fa8f
cmp r14d, ecx
ja 0x14001fa8f
mov r8d, dword [rbp - 0x31]
lea eax, [r10 - 1]
add eax, r14d
not r8d
and eax, r8d
cmp eax, r14d
jne 0x14001fa8f
mov r15d, dword [r9]
cmp r15d, ecx
ja 0x14001fa5d
lea eax, [r15 + r12]
cmp eax, ecx
ja 0x14001fa5d
mov eax, dword [rbp - 0x3d]
mov edx, dword [r9 + 8]
lea ecx, [rax - 1]
neg eax
add ecx, edx
and ecx, eax
cmp edx, ecx
jne 0x14001fa2d
lea eax, [r10 - 1]
add eax, r15d
and eax, r8d
mov dword [rbp - 0x59], eax
cmp edx, eax
ja 0x14001fa2d
cmp byte [rbx + 0x2fa], 0
je 0x14001f7ae
test r13d, r13d
jne 0x14001f9cf
mov eax, dword [r9 + 0x1c]
mov ecx, eax
and ecx, 0xe0000000
cmp ecx, 0x20000000
je 0x14001f85c
cmp ecx, 0x40000000
je 0x14001f861
cmp ecx, 0x60000000
je 0x14001f855
cmp ecx, 0xc0000000
je 0x14001f80d
cmp ecx, 0xe0000000
jne 0x14001f9ef
cmp byte [rbx + 0x2f8], 0
jne 0x14001f9ef
cmp dword [rdi], 2
mov esi, 0x40
mov ecx, 0x20
cmovne esi, ecx
jmp 0x14001f861
mov eax, dword [rdi]
mov esi, 4
dec eax
cmp eax, 1
jbe 0x14001f84f
mov eax, r13d
lea r8d, [rsi + 4]
lea rdx, str..mrdata
lea rcx, [rax*4 + 0x8f1]
add rcx, rax
lea rcx, [rdi + rcx*8]
call fcn.140016f20
mov r9, qword [rbp - 0x29]
test eax, eax
mov r11d, dword [rbp - 0x51]
mov eax, 2
cmove esi, eax
mov eax, dword [r9 + 0x1c]
jmp 0x14001f861
mov esi, 0x20
jmp 0x14001f861
mov esi, 0x10
test eax, 0x20000020
je 0x14001f86c
test eax, eax
jns 0x14001f896
and eax, 0xc0000000
cmp eax, 0x40000000
je 0x14001f896
mov eax, dword [rdi]
cmp eax, 1
jne 0x14001f88d
cmp byte [rbx + 0x2f8], 0
jne 0x14001f896
jmp 0x14001f995
cmp eax, 2
jne 0x14001f995
cmp r12d, r14d
jae 0x14001f8e4
cmp byte [rbx + 0x2fa], 0
jne 0x14001f8e4
mov dword [rsp + 0x40], r11d
lea eax, [r13 - 1]
xor edx, edx
mov ecx, r12d
add rcx, qword [rbp - 0x39]
mov r9d, r14d
mov dword [rsp + 0x38], edx
sub r9d, r12d
mov qword [rsp + 0x30], rdx
mov r8d, r12d
mov dword [rsp + 0x28], eax
mov rdx, rbx
mov qword [rsp + 0x20], rcx
mov rcx, rdi
call fcn.14001d360
test eax, eax
js 0x14001faff
mov ecx, dword [rbp - 0x41]
mov rax, r14
add rax, qword [rbp - 0x39]
mov r9d, r15d
mov dword [rsp + 0x40], esi
mov r8d, r14d
mov dword [rsp + 0x38], ecx
mov rdx, rbx
lea rcx, [rbp - 0x21]
mov qword [rsp + 0x30], rcx
mov rcx, rdi
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call fcn.14001d360
test eax, eax
js 0x14001faff
lea eax, [r13 + 1]
cmp eax, dword [rbp - 0x4d]
jae 0x14001f948
cmp byte [rbx + 0x2fa], 0
jne 0x14001f948
mov ecx, dword [rbp - 0x49]
mov r9d, ecx
neg r9d
lea eax, [rcx - 1]
add eax, r15d
and r9d, eax
jmp 0x14001f956
lea r9d, [r15 + 0xfff]
and r9d, 0xfffff000
cmp r9d, r15d
jbe 0x14001f995
xor eax, eax
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], eax
lea r8d, [r15 + r14]
mov qword [rsp + 0x30], rax
sub r9d, r15d
lea rax, [sym.VirtualBoxVM.exe_g_abRTZero16K]
mov dword [rsp + 0x28], r13d
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.14001d360
test eax, eax
js 0x14001faff
lea r9d, [r15 + 0xfff]
mov dword [rsp + 0x20], esi
and r9d, 0xfffff000
mov r8d, r14d
mov rdx, rbx
mov rcx, rdi
call fcn.14001d230
test eax, eax
js 0x14001faff
mov r9, qword [rbp - 0x29]
mov r11d, esi
mov eax, dword [rbp - 0x59]
mov dword [rbp - 0x51], esi
mov esi, 2
add r9, 0x28
lea r12d, [rax + r14]
inc r13d
mov qword [rbp - 0x29], r9
cmp r13d, dword [rbp - 0x4d]
jb 0x14001f720
xor eax, eax
jmp 0x14001faff
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Unexpected_characteristics:__x__uSectRva_x__cbMap_x_
mov eax, r13d
mov edx, 0xffffe9f0
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r14d
lea rcx, [rax + rax*4]
mov eax, dword [rdi + rcx*8 + 0x47ac]
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r13d
call fcn.14001ee10
jmp 0x14001faff
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_file_size:__x__cbMap_x__uSectRva_x_
mov dword [rsp + 0x38], r14d
mov rcx, rdi
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], edx
mov edx, 0xffffea15
mov dword [rsp + 0x20], r13d
call fcn.14001ee10
jmp 0x14001faff
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_virtual_size:__x__uSectRva_x__uRva_x__cbImage_x_
mov dword [rsp + 0x40], ecx
mov edx, 0xffffea13
mov dword [rsp + 0x38], r12d
mov rcx, rdi
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r13d
call fcn.14001ee10
jmp 0x14001faff
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_virtual_address:__x__uRva_x__cbImage_x__cbSectAlign_x_
mov dword [rsp + 0x40], r10d
mov edx, 0xffffea14
mov dword [rsp + 0x38], ecx
mov rcx, rdi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r13d
call fcn.14001ee10
jmp 0x14001faff
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_FileAlignment_value:__x__cbSectAlign_x_
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov dword [rsp + 0x20], edx
mov edx, 0xffffea1c
call fcn.14001ee10
jmp 0x14001faff
mov dword [rsp + 0x20], ecx
lea r8, str._s:_Unexpected_SectionAlignment_value:__x
mov edx, 0xffffea16
mov r9, qword [rbx + 0x10]
mov rcx, rdi
call fcn.14001ee10
mov r13, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xd8]
mov r12, qword [rsp + 0x120]
mov r15, qword [rsp + 0xd0]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140020d20
add rsp, 0xe8
pop rdi
pop rsi
pop rbx
pop rbp
ret