Function at 0x140003500
Capabilities:
Parse pe header

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x240
mov qword [rsp + 0x108], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov rax, qword [0x14003e130]
xor rax, rsp
mov qword [rsp + 0x238], rax
mov rsi, rdx
mov rbx, rcx
mov qword [r11 - 0x168], rcx
xor r13d, r13d
mov qword [rsp + 0x60], r13
mov r12d, 0x50
mov word [r11 - 0x80], r12w
mov ecx, 0x6e
mov word [r11 - 0x7e], cx
mov eax, 0x65
mov word [r11 - 0x7c], ax
mov edx, 0x4d
mov word [r11 - 0x7a], dx
mov word [r11 - 0x78], ax
mov edx, 0x63
mov word [r11 - 0x76], dx
mov eax, 0x77
mov word [r11 - 0x74], ax
mov eax, 0x49
mov word [r11 - 0x72], ax
mov word [r11 - 0x70], dx
mov word [r11 - 0x6e], cx
mov ebp, 0x43
mov word [r11 - 0x6c], bp
mov eax, 0x67
mov word [r11 - 0x6a], ax
mov r15d, 0x59
mov word [r11 - 0x68], r15w
mov word [r11 - 0x66], r13w
mov ecx, 0x79
mov word [rsp + 0x178], cx
mov eax, 0x4a
mov word [rsp + 0x17a], ax
mov word [rsp + 0x17c], cx
mov word [rsp + 0x17e], cx
mov eax, 0x70
mov word [rsp + 0x180], ax
mov word [r11 - 0xf6], r13w
lea rax, [r11 - 0x198]
mov qword [rsp + 0x30], rax
mov qword [r11 - 0x178], 7
mov qword [r11 - 0x180], r13
mov word [r11 - 0x190], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [r11 - 0x100]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [r11 - 0x100]
lea rcx, [r11 - 0x198]
call fcn.140005a30
nop
mov qword [rsp + 0x138], 7
mov qword [rsp + 0x130], r13
mov word [rsp + 0x120], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1f8]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x118]
call fcn.140005a30
nop
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x140]
call fcn.1400012b0
nop
mov eax, 0x53
mov word [rsp + 0x1c8], ax
mov word [rsp + 0x1ca], bp
mov ebp, 0x55
mov word [rsp + 0x1cc], bp
mov eax, 0x52
mov word [rsp + 0x1ce], ax
mov r14d, 0x45
mov word [rsp + 0x1d0], r14w
mov word [rsp + 0x1d2], r12w
mov eax, 0x46
mov word [rsp + 0x1d4], ax
mov word [rsp + 0x1d6], r14w
mov word [rsp + 0x1d8], r13w
mov eax, 0x41
mov word [rsp + 0x1b8], ax
mov eax, 0x4f
mov word [rsp + 0x1ba], ax
mov word [rsp + 0x1bc], r12w
mov word [rsp + 0x1be], r15w
mov r15d, 0x69
mov word [rsp + 0x1c0], r15w
mov word [rsp + 0x1c2], r12w
mov word [rsp + 0x1c4], ax
mov word [rsp + 0x1c6], r13w
call fcn.140001210
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x88], 7
mov qword [rsp + 0x80], r13
mov word [rsp + 0x70], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1b8]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x68]
call fcn.140005a30
nop
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], r13
mov word [rsp + 0xc0], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1c8]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0xb8]
call fcn.140005a30
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x90]
call fcn.1400012b0
mov rdi, rax
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r13
mov byte [rsp + 0x40], r13b
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x38]
call fcn.140005250
cmp qword [rdi + 0x20], 0x10
jb 0x14000386f
mov rdi, qword [rdi + 8]
jmp 0x140003873
add rdi, 8
lea rdx, [rsp + 0x38]
mov rcx, rsi
call fcn.140001b20
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000001
call rax
nop
cmp qword [rsp + 0xb0], 0x10
jb 0x1400038b8
mov rcx, qword [rsp + 0x98]
call fcn.140006958
cmp qword [rsp + 0x60], 0
jne 0x14000391b
cmp qword [rsp + 0x160], 0x10
jb 0x1400038d8
mov rcx, qword [rsp + 0x148]
call fcn.140006958
mov qword [rsp + 0x160], 0xf
mov qword [rsp + 0x158], r13
mov byte [rsp + 0x148], 0
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140003902
call fcn.140006958
mov qword [rbx + 0x18], r13
mov qword [rbx + 0x20], r13
mov qword [rbx + 0x28], r13
mov rcx, qword [rbx]
call fcn.140006958
jmp 0x140003f84
mov eax, 0x51
mov word [rsp + 0x218], ax
mov word [rsp + 0x21a], r15w
mov eax, 0x61
mov word [rsp + 0x21c], ax
mov eax, 0x54
mov word [rsp + 0x21e], ax
mov ecx, 0x6b
mov word [rsp + 0x220], cx
mov eax, 0x6c
mov word [rsp + 0x222], ax
mov word [rsp + 0x224], bp
mov eax, 0x65
mov word [rsp + 0x226], ax
mov eax, 0x66
mov word [rsp + 0x228], ax
mov ebp, 0x76
mov word [rsp + 0x22a], bp
mov word [rsp + 0x22c], cx
mov eax, 0x57
mov word [rsp + 0x22e], ax
mov eax, 0x77
mov word [rsp + 0x230], ax
mov word [rsp + 0x232], r14w
mov word [rsp + 0x234], r13w
mov eax, 0x5a
mov word [rsp + 0x1a8], ax
mov word [rsp + 0x1aa], r14w
mov eax, 0x75
mov word [rsp + 0x1ac], ax
mov eax, 0x62
mov word [rsp + 0x1ae], ax
mov eax, 0x47
mov word [rsp + 0x1b0], ax
mov eax, 0x53
mov word [rsp + 0x1b2], ax
mov word [rsp + 0x1b4], r13w
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x88], 7
mov qword [rsp + 0x80], r13
mov word [rsp + 0x70], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1a8]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x68]
call fcn.140005a30
nop
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r13
mov word [rsp + 0x40], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x218]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x38]
call fcn.140005a30
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x90]
call fcn.1400012b0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.140005250
nop
cmp qword [rsp + 0xb0], 0x10
jb 0x140003af1
mov rcx, qword [rsp + 0x98]
call fcn.140006958
mov eax, 0x6f
mov word [rsp + 0x188], ax
mov r14d, 0x68
mov word [rsp + 0x18a], r14w
mov eax, 0x49
mov word [rsp + 0x18c], ax
mov word [rsp + 0x18e], bp
mov word [rsp + 0x190], r15w
mov eax, 0x79
mov word [rsp + 0x192], ax
mov word [rsp + 0x194], r13w
mov r15d, 0x64
mov word [rsp + 0x198], r15w
mov eax, 0x73
mov word [rsp + 0x19a], ax
mov eax, 0x46
mov word [rsp + 0x19c], ax
mov eax, 0x56
mov word [rsp + 0x19e], ax
mov eax, 0x70
mov word [rsp + 0x1a0], ax
mov eax, 0x59
mov word [rsp + 0x1a2], ax
mov word [rsp + 0x1a4], r13w
call fcn.140001210
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x88], 7
mov qword [rsp + 0x80], r13
mov word [rsp + 0x70], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x198]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x68]
call fcn.140005a30
nop
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r13
mov word [rsp + 0x40], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x188]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x38]
call fcn.140005a30
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x90]
call fcn.1400012b0
mov rdi, rax
mov qword [rsp + 0xd8], 0xf
mov qword [rsp + 0xd0], r13
mov byte [rsp + 0xc0], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xb8]
call fcn.140005250
mov rbp, qword [rbx + 0x20]
sub rbp, qword [rbx + 0x18]
jne 0x140003c8e
call fcn.14001b3e4
mov r12, qword [rbx + 0x18]
cmp qword [rdi + 0x20], 0x10
jb 0x140003c9f
mov rdi, qword [rdi + 8]
jmp 0x140003ca3
add rdi, 8
lea rdx, [rsp + 0xb8]
mov rcx, rsi
call fcn.140001b20
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], r12
mov r9d, 3
xor r8d, r8d
mov rdx, rdi
mov rcx, qword [rsp + 0x60]
call rax
test eax, eax
setne dil
cmp qword [rsp + 0xb0], 0x10
jb 0x140003ced
mov rcx, qword [rsp + 0x98]
call fcn.140006958
test dil, dil
je 0x140003d4d
cmp qword [rsp + 0x160], 0x10
jb 0x140003d0a
mov rcx, qword [rsp + 0x148]
call fcn.140006958
mov qword [rsp + 0x160], 0xf
mov qword [rsp + 0x158], r13
mov byte [rsp + 0x148], 0
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140003d34
call fcn.140006958
mov qword [rbx + 0x18], r13
mov qword [rbx + 0x20], r13
mov qword [rbx + 0x28], r13
mov rcx, qword [rbx]
call fcn.140006958
jmp 0x140003f84
mov eax, 0x54
mov word [rsp + 0x1e0], ax
mov word [rsp + 0x1e2], r14w
mov word [rsp + 0x1e4], r14w
mov eax, 0x57
mov word [rsp + 0x1e6], ax
mov eax, 0x6e
mov word [rsp + 0x1e8], ax
mov eax, 0x72
mov word [rsp + 0x1ea], ax
mov eax, 0x74
mov word [rsp + 0x1ec], ax
mov eax, 0x79
mov word [rsp + 0x1ee], ax
mov eax, 0x4d
mov word [rsp + 0x1f0], ax
mov word [rsp + 0x1f2], r14w
mov eax, 0x7a
mov word [rsp + 0x1f4], ax
mov word [rsp + 0x1f6], r13w
mov eax, 0x63
mov word [rsp + 0x168], ax
mov word [rsp + 0x16a], r15w
mov eax, 0x42
mov word [rsp + 0x16c], ax
mov eax, 0x55
mov word [rsp + 0x16e], ax
mov word [rsp + 0x170], r13w
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x88], 7
mov qword [rsp + 0x80], r13
mov word [rsp + 0x70], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x168]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0x68]
call fcn.140005a30
nop
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r13
mov word [rsp + 0x40], r13w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1e0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x38]
call fcn.140005a30
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x90]
call fcn.1400012b0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.140005250
nop
cmp qword [rsp + 0xb0], 0x10
jb 0x140003ee8
mov rcx, qword [rsp + 0x98]
call fcn.140006958
call fcn.140001210
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], r13
mov byte [rsp + 0x40], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x38]
call fcn.140005250
lea rdx, [rsp + 0x38]
mov rcx, rsi
call fcn.140001b20
mov rcx, qword [rsp + 0x60]
call rax
nop
cmp qword [rsp + 0x160], 0x10
jb 0x140003f46
mov rcx, qword [rsp + 0x148]
call fcn.140006958
mov qword [rsp + 0x160], 0xf
mov qword [rsp + 0x158], r13
mov byte [rsp + 0x148], 0
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140003f70
call fcn.140006958
mov qword [rbx + 0x18], r13
mov qword [rbx + 0x20], r13
mov qword [rbx + 0x28], r13
mov rcx, qword [rbx]
call fcn.140006958
mov rcx, qword [rsp + 0x238]
xor rcx, rsp
call fcn.14001af40
mov rbx, qword [rsp + 0x290]
add rsp, 0x240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret