Function at 0x140001700
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x510]
sub rsp, 0x610
xor ebx, ebx
mov dword [rbp + 0x80], 4
mov dword [rbp + 0xb0], ebx
mov rax, qword gs:[0x30]
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140002044
mov rcx, qword [rax + 0x60]
mov qword [rsp + 0x50], rcx
test rcx, rcx
je 0x140002044
mov rax, qword [rcx + 0x18]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140002044
lea rdx, [rax + 0x20]
mov qword [rbp - 8], rdx
test rdx, rdx
je 0x140002044
mov rdx, qword [rdx]
lea r8d, [rbx + 0x12]
mov ecx, 0x50236a46
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea r8d, [rbx + 0x12]
mov dword [rbp - 0x20], eax
mov ecx, 0x9be48422
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0xa91524cf
mov dword [rbp - 0x78], eax
mov r8d, 0xe7ea33ac
lea rcx, [rsp + 0x40]
call fcn.140001040
mov qword [rbp + 0x78], rax
test rax, rax
je 0x140002044
mov edx, 0x5e30a7c
mov r8d, 0x91e0c32
mov rcx, rax
call fcn.1400010d0
mov qword [rbp - 0x28], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xf18471ab
mov r8d, 0xb7b74722
call fcn.1400010d0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0x79f008b6
mov r8d, 0xf93c691e
call fcn.1400010d0
mov qword [rbp + 0x90], rax
test rax, rax
je 0x140002054
mov rcx, qword [rbp + 0x78]
mov edx, 0x71b6ea60
mov r8d, 0x3b07a607
call fcn.1400010d0
mov qword [rbp - 0x48], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0x24a70267
mov r8d, 0xc12989e8
call fcn.1400010d0
mov qword [rbp + 0x58], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0x188f4d26
mov r8d, 0x7e7f5bae
call fcn.1400010d0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xfc9c6f30
mov r8d, 0x9ab3023d
call fcn.1400010d0
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xd444a865
mov r8d, 0x61f7f0ca
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xbc0b77f2
mov r8d, 0x7e1e635c
call fcn.1400010d0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xf492d1a1
mov r8d, 0x7310f20b
call fcn.1400010d0
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xad6c1e44
mov r8d, 0x303d2374
call fcn.1400010d0
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0x1fc59c07
mov r8d, 0x31779e4b
call fcn.1400010d0
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140002044
mov rcx, qword [rbp + 0x78]
mov edx, 0xbd276276
mov r8d, 0x62fcaa59
call fcn.1400010d0
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140002044
mov rax, qword [rbp - 8]
lea r8d, [rbx + 0x12]
mov ecx, 0x521ac845
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0xbe06ee84
mov dword [rbp + 0xc8], eax
mov r9d, 0xe85fce90
mov dword [rsp + 0x20], 0x2e675c15
mov r8d, 0x80ba3355
lea rcx, [rsp + 0x40]
call fcn.140001480
lea rcx, [rsp + 0x40]
call fcn.1400016c0
test eax, eax
je 0x140002044
lea rcx, [rbp + 0x98]
call qword [rbp - 0x28]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140002044
mov edx, 0x71a4c0f5
mov dword [rsp + 0x20], 0x2d5cdcea
mov r9d, 0x44c39599
lea rcx, [rsp + 0x40]
mov r8d, 0x10ff7019
call fcn.140001480
lea rcx, [rbp + 0x98]
call qword [rbp - 0x28]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140002044
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rsp + 0x48]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x140002044
mov qword [rsp + 0x620], rsi
lea rcx, [rsp + 0x40]
mov edx, 0xed589759
mov qword [rsp + 0x628], rdi
mov r9d, 0x82b74d25
mov dword [rsp + 0x20], 0x24917461
mov r8d, 0x6938f6e4
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x10
mov dword [rsp + 0x20], 0xce6bb48b
mov ecx, 0x10
mov edx, 0xa7c39cfb
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x1316cde0
mov r8d, 0xc10da438
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x40
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x78]
mov edx, 0x4cf0334c
mov r8d, 0x86188d02
call fcn.1400010d0
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140002034
mov rcx, qword [rbp + 0xd0]
mov edx, 0xf9e5d102
mov r8d, 0xc550c371
call fcn.1400010d0
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140002034
mov edx, 0xa7ecd87a
mov dword [rsp + 0x20], 0xf3f004e4
mov r9d, 0xa76c7db9
lea rcx, [rsp + 0x40]
mov r8d, 0x43115ed1
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x30
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x30]
mov edx, 0x8219d066
mov r8d, 0xcc211d4
call fcn.1400010d0
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140002034
mov edx, 0xae422930
mov dword [rsp + 0x20], 0x9740c974
mov r9d, 0x2bf01fa2
lea rcx, [rsp + 0x40]
mov r8d, 0x1ca59ed
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x20
mov dword [rsp + 0x20], 0xf6249a14
mov ecx, 0x10
mov edx, 0xd88c1c14
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x33ae423d
mov r8d, 0x260b5488
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x60
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xd0]
mov edx, 0x51772067
mov r8d, 0xe4b97358
call fcn.1400010d0
mov qword [rbp + 0x28], rax
test rax, rax
je 0x140002034
mov rcx, qword [rbp + 0xd0]
mov edx, 0x94de793f
mov r8d, 0x9be8dba7
call fcn.1400010d0
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140002034
mov rcx, qword [rbp + 0xd0]
mov edx, 0xe6d5d470
mov r8d, 0xb48e95f4
call fcn.1400010d0
mov qword [rbp - 0x40], rax
test rax, rax
je 0x140002034
mov edx, 0x4700d0dc
mov dword [rsp + 0x20], 0x417cda75
mov r9d, 0x966476
lea rcx, [rsp + 0x40]
mov r8d, 0x4cdc85d5
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
mov ecx, 0x10
mov edx, 0xa7cc9038
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xd0]
mov r8d, 0xbff0e67e
call fcn.1400010d0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140002034
mov rcx, qword [rbp + 0xd0]
mov edx, 0xc3e2ba23
mov r8d, 0x88cc34e6
call fcn.1400010d0
mov qword [rbp], rax
test rax, rax
je 0x140002034
mov edx, 0x71490beb
mov dword [rsp + 0x20], 0x8e9e1747
mov r9d, 0x35ecbc09
lea rcx, [rsp + 0x40]
mov r8d, 0x58159304
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x50
mov dword [rsp + 0x20], 0xc44b98be
mov ecx, 0x10
mov edx, 0xa4a16eda
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xfc0e8f88
mov r8d, 0x8a82a91a
call fcn.140001480
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x98]
add rdi, 0x70
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xd0]
mov edx, 0x4d969db1
mov r8d, 0xbd99254e
call fcn.1400010d0
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140002034
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call rax
mov qword [rbp + 0x68], rax
test rax, rax
je 0x140002034
mov edx, 0xf8df77ba
mov dword [rsp + 0x20], 0x7a48e5f6
mov r9d, 0xa029cd84
lea rcx, [rsp + 0x40]
mov r8d, 0xe5504f12
call fcn.140001480
mov rcx, qword [rbp + 0x68]
lea rdx, [rbp + 0x98]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x40]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140002034
mov edx, 0xf8f57168
mov dword [rsp + 0x20], 0x74920b78
mov r9d, 0x4ba0301b
lea rcx, [rsp + 0x40]
mov r8d, 0x25383793
call fcn.140001480
mov rcx, qword [rbp - 0x68]
lea r8, [rbp + 0x9c]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x98]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x70]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140002034
lea rdx, [rbp + 0xf0]
mov ecx, 0x104
call qword [rbp + 0x88]
test eax, eax
je 0x140002034
lea rcx, [rbp + 0xf0]
call qword [rbp - 0x60]
test eax, eax
je 0x140002034
lea rdx, [rbp + 0x300]
lea rcx, [rsp + 0x40]
call fcn.140001510
mov rcx, qword [rbp + 0xc0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140002034
mov rdx, qword [rbp + 0x60]
lea r9, [rbp + 0x18]
lea r8d, [rbx + 0x71]
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x60]
test eax, eax
je 0x140002034
mov rcx, qword [rbp + 0xc0]
call qword [rbp + 0x10]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x300]
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp - 0x50]
cmp rax, 0x20
jb 0x140002034
mov rcx, qword [rbp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp - 0x58]
test eax, eax
je 0x140002034
mov rcx, qword [rbp + 0x40]
lea rax, [rbp + 0xb0]
lea r9, [rbp + 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x78]
mov edx, 0x20000005
call qword [rbp + 0xe0]
test eax, eax
je 0x140002034
mov edx, dword [rsp + 0x78]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rsp + 0x48]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140002034
mov r8d, dword [rsp + 0x78]
lea r9, [rbp + 0x20]
mov rcx, qword [rbp + 0x40]
mov rdx, rax
call qword [rbp]
test eax, eax
je 0x140002034
mov eax, dword [rsp + 0x78]
cmp dword [rbp + 0x20], eax
jne 0x140002034
mov rcx, qword [rbp + 0x68]
call qword [rbp + 0x28]
mov rcx, qword [rbp + 0x40]
call qword [rbp + 0x28]
mov rcx, qword [rbp - 0x80]
mov eax, 0x5a4d
mov qword [rbp + 8], rcx
cmp word [rcx], ax
jne 0x140002034
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x30], rcx
cmp dword [rcx], 0x4550
jne 0x140002034
mov eax, 0x8664
cmp word [rcx + 4], ax
jne 0x140002034
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x140002034
mov rcx, qword [rbp - 0x68]
call qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
lea r9d, [rbx + 0x40]
mov r8d, 0x3000
movzx eax, word [rdx + 0x14]
lea rcx, [rdx + 0x18]
add rcx, rax
mov qword [rbp + 0xd8], rcx
xor ecx, ecx
mov edx, dword [rdx + 0x50]
call qword [rsp + 0x48]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140002034
lea rcx, [rsp + 0x40]
call fcn.140001200
mov rax, qword [rbp + 0x30]
mov rdi, qword [rbp + 0x50]
mov rsi, qword [rbp - 0x80]
mov ecx, dword [rax + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001360
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001410
mov rsi, qword [rsp + 0x620]
mov rdi, qword [rsp + 0x628]
mov rax, qword [rbp + 0x90]
test rax, rax
je 0x140002054
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x630]
xor eax, eax
add rsp, 0x610
pop rbp
ret