Function at 0x1400772e0
Capabilities:
Parse pe header

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
mov rax, qword [0x140238500]
xor rax, rsp
mov qword [rsp + 0xb8], rax
mov rsi, rdx
mov r14, rcx
mov qword [r11 - 0x70], rdx
mov qword [r11 - 0x60], r8
mov qword [r11 - 0x58], r9
movzx r15d, byte [rsp + 0x138]
mov byte [rsp + 0x40], r15b
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x70], rax
mov rcx, qword [rdx]
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x14007736a
movsxd rbp, dword [rcx + 0x3c]
add rbp, rcx
cmp dword [rbp], 0x4550
jne 0x14007736a
mov eax, 0x20b
cmp word [rbp + 0x18], ax
je 0x1400773a4
mov rdx, qword [rdx + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140077396
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007776f
mov rcx, r8
call fcn.1400999e0
xor ebx, ebx
xor eax, eax
jmp 0x140077740
mov edi, dword [rbp + 0x50]
mov edx, edi
xor ecx, ecx
mov r9d, 4
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r13, rax
movzx ecx, word [rbp + 0x14]
mov ecx, dword [rcx + rbp + 0x24]
mov dword [rsp + 0x48], ecx
xor ebx, ebx
mov eax, ebx
test r15b, r15b
cmovne eax, ecx
mov dword [rsp + 0x50], eax
sub edi, eax
mov qword [rsp + 0x58], rbx
mov r15d, edi
mov qword [rsp + 0x60], r15
mov rcx, r14
cmp byte [rsp + 0x140], bl
je 0x1400774de
mov eax, r15d
and rax, 0xfffffffffffff000
add rax, 0x1000
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, 0xffffffffffffffff
mov edx, ebx
call fcn.1400763a0
mov rdi, rax
test rax, rax
jne 0x14007742e
mov r12d, ebx
jmp 0x1400774eb
mov dword [rsp + 0xa0], ebx
lea rdx, [rax + 0x28]
mov r9d, 4
lea r8, [rsp + 0xa0]
mov rcx, r14
call fcn.1400769d0
test al, al
jne 0x14007745b
mov r12, rbx
jmp 0x1400774eb
mov eax, dword [rsp + 0xa0]
mov rdx, rdi
mov rcx, r14
cmp rax, r15
jae 0x140077482
call fcn.1400764e0
mov rdx, rdi
mov rcx, r14
call fcn.1400755a0
mov r12, rbx
jmp 0x1400774eb
mov dword [rsp + 0x30], 0x10
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
call fcn.140076600
mov r12, rax
mov rdx, rdi
mov rcx, r14
test rax, rax
je 0x14007746d
mov r8d, 0x40
call fcn.140076770
test al, al
jne 0x1400774d4
mov r8, rdi
mov rdx, r12
mov rcx, r14
call fcn.1400768b0
mov rdx, rdi
mov rcx, r14
jmp 0x14007746d
mov rax, rdi
mov qword [rsp + 0x58], rax
jmp 0x1400774eb
mov r8, r15
xor edx, edx
call fcn.140074370
mov r12, rax
mov qword [rsp + 0x78], r12
test r12, r12
je 0x1400776ec
mov r8, qword [rsi]
mov edx, ebx
cmp dword [rbp + 0x54], ebx
jbe 0x140077522
mov rcx, r13
sub r8, r13
nop dword [rax]
movzx eax, byte [rcx + r8]
mov byte [rcx], al
inc edx
lea rcx, [rcx + 1]
cmp edx, dword [rbp + 0x54]
jb 0x140077510
movzx r9d, word [rbp + 0x14]
add r9, 0x24
mov r11d, ebx
cmp bx, word [rbp + 6]
jae 0x140077595
add r9, rbp
nop word [rax + rax]
test dword [r9 + 0x18], 0x80
ja 0x140077585
mov ecx, dword [r9]
add rcx, r13
mov r10d, dword [r9 + 4]
mov r8d, dword [r9 + 8]
add r8, qword [rsi]
mov edx, ebx
test r10, r10
je 0x140077585
sub r8, rcx
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
mov byte [rcx], al
inc edx
lea rcx, [rcx + 1]
movsxd rax, edx
cmp rax, r10
jb 0x140077570
inc r11d
add r9, 0x28
movzx eax, word [rbp + 6]
cmp r11d, eax
jl 0x140077540
mov r15, r12
cmp byte [rsp + 0x40], bl
je 0x1400775a5
mov eax, dword [rsp + 0x48]
sub r12, rax
mov rdi, r12
sub rdi, qword [rbp + 0x30]
mov rdx, r13
lea rcx, [rsp + 0x80]
call fcn.140078850
mov rdx, rdi
mov rcx, rax
call fcn.140077780
mov rdx, r13
lea rcx, [rsp + 0x80]
call fcn.140078530
mov rdx, rax
mov rcx, r14
call fcn.140077880
test al, al
je 0x1400776ec
mov r8d, dword [rsp + 0x50]
add r8, r13
mov r9, qword [rsp + 0x60]
mov rdx, r15
mov rcx, r14
call fcn.140076cf0
test al, al
je 0x1400776ec
mov edi, dword [rbp + 0x28]
add rdi, r12
mov rax, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x58]
test rax, rax
je 0x140077646
mov qword [rsp + 0x20], rbp
mov r9, qword [rsp + 0x60]
mov r8, r15
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xa8]
call rax
test al, al
je 0x1400776ec
mov dword [rsp + 0xa0], ebx
mov r9, qword [rsp + 0xa8]
cmp byte [rsp + 0x148], bl
cmovne r9, r15
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rsp + 0xa0]
mov rcx, r14
call fcn.140076ea0
test al, al
je 0x1400776ec
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140077697
mov eax, dword [rsp + 0xa0]
mov dword [rcx], eax
cmp byte [rsp + 0x130], bl
je 0x1400776cd
mov rdx, r15
mov rcx, r14
cmp byte [rsp + 0x140], bl
je 0x1400776c8
mov r8, rbp
call fcn.1400768b0
mov rdx, rbp
mov rcx, r14
call fcn.1400764e0
mov rdx, rbp
mov rcx, r14
call fcn.1400755a0
xor edx, edx
mov r8d, 0x8000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
mov rcx, rsi
call fcn.140030ce0
mov rax, r15
jmp 0x14007774b
xor edx, edx
mov r8d, 0x8000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x78]
mov rcx, r14
call fcn.1400755a0
nop
mov rcx, qword [rsi]
test rcx, rcx
je 0x14007774b
mov rdx, qword [rsi + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14007773b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007776f
mov rcx, r8
call fcn.1400999e0
mov qword [rsi], rbx
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], rbx
mov rcx, qword [rsp + 0xb8]
xor rcx, rsp
call fcn.140099880
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3