Function at 0x14000b6d0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x58]
sub rsp, 0x158
mov qword [rbp - 0x60], 0xfffffffffffffffe
mov rax, qword [0x140075088]
xor rax, rsp
mov qword [rbp + 0x48], rax
mov r13, r9
mov r15, r8
mov r14, rdx
mov rsi, rcx
mov qword [rbp - 0x70], rcx
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x68], rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x68], rax
or rbx, 0xffffffffffffffff
mov dword [rsp + 0x60], ebx
lea rcx, [rsp + 0x60]
call fcn.140011ce0
xor dil, dil
movzx r12d, byte [rbp + 0xd8]
test r12b, r12b
je 0x14000b8bb
mov qword [rbp + 0x38], 0xf
mov qword [rbp + 0x30], 0
mov byte [rbp + 0x20], dil
movzx r9d, byte [rbp + 0xd0]
lea r8, [rbp + 0x20]
lea rdx, [rsp + 0x70]
mov ecx, eax
call fcn.140019fc0
test al, al
je 0x14000b818
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14000b818
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
call fcn.14000f610
test eax, eax
je 0x14000b7e8
mov rdx, qword [rsp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400162a0
test eax, eax
je 0x14000b7bf
mov dil, 1
jmp 0x14000b859
mov word [rbp + 0x40], 0x3231
mov byte [rbp + 0x42], 0
lea rax, [rbp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000b7d0
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.140029900
jmp 0x14000b859
mov word [rbp + 0x41], 0x31
mov byte [rbp + 0x40], 0x31
lea rax, [rbp + 0x40]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b800
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.140029900
jmp 0x14000b859
mov word [rbp + 0x41], 0x5f30
mov byte [rbp + 0x43], 0
mov byte [rbp + 0x40], 0x31
lea rax, [rbp + 0x40]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b830
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.140029900
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x20]
mov rcx, r13
call fcn.140029c10
nop
mov rax, qword [rbp + 0x38]
cmp rax, 0x10
jb 0x14000b8af
inc rax
mov rcx, qword [rbp + 0x20]
cmp rax, 0x1000
jb 0x14000b8aa
test cl, 0x1f
je 0x14000b87d
call fcn.14003147c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14000b88c
call fcn.14003147c
int3
sub rcx, rax
cmp rcx, 8
jae 0x14000b89b
call fcn.14003147c
int3
cmp rcx, 0x27
jbe 0x14000b8a7
call fcn.14003147c
int3
mov rcx, rax
call fcn.14002d0c4
test dil, dil
jne 0x14000b8bb
xor al, al
jmp 0x14000bc82
mov eax, 0x5a4d
cmp word [rsi], ax
jne 0x14000bc1b
movsxd rsi, dword [rsi + 0x3c]
add rsi, qword [rbp - 0x70]
cmp dword [rsi], 0x4550
jne 0x14000bbfb
lea rdx, [rsp + 0x78]
mov rcx, r14
call fcn.140008c50
movzx ecx, word [rsi + 4]
mov edx, 0x14c
mov eax, dword [rsp + 0x78]
cmp cx, dx
jne 0x14000b900
test eax, eax
jne 0x14000b8b4
mov edx, 0x8664
cmp cx, dx
jne 0x14000b90f
cmp eax, 6
jne 0x14000b8b4
lea rdi, [rbp + 0x20]
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], 0x68
mov dword [rbp - 0x14], 0x101
mov word [rbp - 0x10], ax
lea rax, [rbp + 0x20]
test r12b, r12b
je 0x14000b96b
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x38], rax
mov r8, r15
mov rdx, r14
mov rcx, qword [rsp + 0x68]
call fcn.14001fa00
jmp 0x14000b984
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x40], rax
mov rdx, r15
mov rcx, r14
call fcn.140025870
test eax, eax
je 0x14000bbdf
mov edx, 0xc
call fcn.14001fbd0
mov r15, rax
mov dword [rax + 0x30], 0x100002
mov rdx, rax
mov rcx, qword [rbp + 0x28]
call fcn.140009b90
test eax, eax
je 0x14000bbc6
mov rdx, qword [r15 + 0x88]
add rdx, 0x10
lea r8, [rbp - 0x78]
mov rcx, qword [rbp + 0x20]
call fcn.140016400
mov dword [rsp + 0x60], 0x5f3777
lea rax, [rsp + 0x60]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b9e0
lea rdx, [rsp + 0x60]
mov rdi, qword [rbp - 0x68]
mov rcx, rdi
call fcn.140029900
mov eax, dword [rbp - 0x78]
mov word [rbp + 0x40], 0x6d69
mov r8, rbx
cmp rax, qword [rsi + 0x30]
lea rax, [rbp + 0x40]
jne 0x14000ba2d
mov word [rbp + 0x42], 0x6f67
mov word [rbp + 0x45], 0x5f
mov byte [rbp + 0x44], 0x6f
inc r8
cmp byte [rax + r8], 0
jne 0x14000ba21
jmp 0x14000ba4a
mov dword [rbp + 0x43], 0x5f6666
mov byte [rbp + 0x42], 0x67
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000ba40
lea rdx, [rbp + 0x40]
mov rcx, rdi
call fcn.140029900
mov rdx, qword [rbp - 0x78]
mov eax, edx
cmp rax, qword [rsi + 0x30]
jne 0x14000bab6
mov rcx, qword [rbp + 0x20]
call fcn.140016570
mov r8, rbx
test eax, eax
lea rax, [rbp + 0x40]
jne 0x14000ba8c
mov dword [rbp + 0x40], 0x637573
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000ba80
jmp 0x14000baaa
mov word [rbp + 0x41], 0x6666
mov byte [rbp + 0x43], 0
mov byte [rbp + 0x40], 0x66
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000baa0
lea rdx, [rbp + 0x40]
mov rcx, rdi
call fcn.140029900
mov eax, 4
mov ecx, 0x40
cmp byte [rbp + 0xc8], 0
cmovne eax, ecx
mov r8d, dword [rsi + 0x50]
mov dword [rsp + 0x20], eax
mov rdx, qword [rsi + 0x30]
mov rcx, qword [rbp + 0x20]
call fcn.14001fd40
mov r14, rax
test rax, rax
je 0x14000bb8f
mov r9d, dword [rsi + 0x54]
mov r13, qword [rbp - 0x70]
mov r8, r13
mov rdx, rax
mov rcx, qword [rbp + 0x20]
call fcn.14001fec0
movzx eax, word [rsi + 0x14]
xor ecx, ecx
mov ebx, ecx
cmp cx, word [rsi + 6]
jae 0x14000bb47
lea rdi, [rsi + 0x2c]
add rdi, rax
nop word [rax + rax]
mov r9d, dword [rdi - 4]
mov r8d, dword [rdi]
add r8, r13
mov edx, dword [rdi - 8]
add rdx, r14
mov rcx, qword [rbp + 0x20]
call fcn.14001fec0
add rdi, 0x28
inc ebx
movzx eax, word [rsi + 6]
cmp ebx, eax
jl 0x14000bb20
mov rdx, qword [r15 + 0x88]
add rdx, 0x10
mov r9d, 8
lea r8, [rsi + 0x30]
mov rcx, qword [rbp + 0x20]
call fcn.14001fec0
mov eax, dword [rsi + 0x28]
add rax, r14
mov qword [r15 + 0x80], rax
mov rdx, r15
mov rcx, qword [rbp + 0x28]
call fcn.140025a20
mov rcx, qword [rbp + 0x28]
call fcn.14000f790
mov dil, 1
jmp 0x14000bc4b
mov word [rbp + 0x40], 0x3831
mov byte [rbp + 0x42], 0
lea rax, [rbp + 0x40]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bba0
mov r8, rbx
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.140029900
mov rcx, qword [rbp + 0x20]
call fcn.140009cf0
jmp 0x14000bc48
mov word [rbp + 0x40], 0x3731
mov byte [rbp + 0x42], 0
lea rax, [rbp + 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bbd4
jmp 0x14000bba9
mov word [rbp + 0x41], 0x36
mov byte [rbp + 0x40], 0x31
lea rax, [rbp + 0x40]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bbf0
jmp 0x14000bc39
mov word [rbp + 0x40], 0x3531
mov byte [rbp + 0x42], 0
lea rax, [rbp + 0x40]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bc10
jmp 0x14000bc39
mov word [rbp + 0x40], 0x3431
mov byte [rbp + 0x42], 0
lea rax, [rbp + 0x40]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bc30
mov r8, rbx
lea rdx, [rbp + 0x40]
mov rcx, r13
call fcn.140029900
xor dil, dil
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14000bc59
call fcn.14000f8f0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14000bc6f
call fcn.14000ead0
xor eax, eax
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14000bc7e
call fcn.14000ead0
movzx eax, dil
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.14002d0a0
add rsp, 0x158
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret