Function at 0x140001720
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x540]
sub rsp, 0x640
xor ebx, ebx
mov dword [rbp + 0x68], 4
mov dword [rbp + 0xc0], ebx
mov rax, qword gs:[0x30]
mov qword [rbp + 0x98], rax
test rax, rax
je 0x140002067
mov rax, qword [rax + 0x60]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140002067
mov rax, qword [rax + 0x18]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140002067
add rax, 0x20
mov qword [rbp + 0x20], rax
je 0x140002067
mov edx, 0xa88f067d
lea rcx, [rsp + 0x40]
mov r8d, 0x698c29a2
call section..text
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x140002067
mov edx, 0xccaf1232
mov r8d, 0xc525e27e
mov rcx, rax
call fcn.1400010f0
mov qword [rbp + 0x70], rax
test rax, rax
je 0x140002067
mov rcx, qword [rbp + 0xb8]
mov edx, 0x1678dde9
mov r8d, 0xaa9c0ecb
call fcn.1400010f0
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x140002067
mov rcx, qword [rbp + 0xb8]
mov edx, 0xc6fbb254
mov r8d, 0x6826103d
call fcn.1400010f0
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140002074
mov edx, 0xbcd993
lea rcx, [rsp + 0x40]
call fcn.140001090
mov rcx, qword [rbp + 0xb8]
or eax, 1
mov edx, 0xd2960ba
mov dword [rbp + 0x18], eax
mov r8d, 0xa36c32b3
call fcn.1400010f0
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140002067
mov edx, 0x17551b7d
lea rcx, [rsp + 0x40]
call fcn.140001090
mov rcx, qword [rbp + 0xb8]
mov edx, 0xa76e1c79
mov r8d, 0xce563e30
mov dword [rbp + 0x88], eax
call fcn.1400010f0
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140002067
mov rcx, qword [rbp + 0xb8]
mov edx, 0x69a8d80b
mov r8d, 0xe3b6ceed
call fcn.1400010f0
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140002067
mov edx, 0x17ea2186
lea rcx, [rsp + 0x40]
call fcn.140001090
mov edx, 0x95c91977
mov dword [rbp + 0xc8], eax
mov r9d, 0x9bb18c94
mov dword [rsp + 0x20], 0x4d45b2b2
mov r8d, 0x2bcf7325
lea rcx, [rsp + 0x40]
call fcn.1400014b0
lea rcx, [rsp + 0x40]
call fcn.1400016e0
test eax, eax
je 0x140002067
lea rcx, [rbp + 0x28]
call qword [rbp + 0x70]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140002067
mov edx, 0xfd13c73d
mov dword [rsp + 0x20], 0xdc392c74
mov r9d, 0xd7ec6374
lea rcx, [rsp + 0x40]
mov r8d, 0xbf410f34
call fcn.1400014b0
lea rcx, [rbp + 0x28]
call qword [rbp + 0x70]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140002067
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0xa8]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140002067
mov qword [rsp + 0x650], rsi
lea rcx, [rsp + 0x40]
mov edx, 0x3c72553d
mov qword [rsp + 0x658], rdi
mov r9d, 0xe5d450b4
mov dword [rsp + 0x20], 0x8ece0f85
mov r8d, 0xfacde895
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
mov ecx, 0x10
mov edx, 0xb816334
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x50]
mov r8d, 0xa6ad842a
call fcn.1400010f0
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0x74e2b1cc
mov r8d, 0x2731fb2
call fcn.1400010f0
mov qword [rbp + 0x110], rax
test rax, rax
je 0x140002057
mov rcx, qword [rsp + 0x50]
mov edx, 0x88d599b7
mov r8d, 0xb89d1ace
call fcn.1400010f0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0xb864e8dc
mov r8d, 0xafc025f6
call fcn.1400010f0
mov qword [rbp - 0x40], rax
test rax, rax
je 0x140002057
mov rcx, qword [rsp + 0x50]
mov edx, 0x198c0129
mov r8d, 0x91370ac
call fcn.1400010f0
mov qword [rbp + 0x58], rax
test rax, rax
je 0x140002057
mov edx, 0x7abb910a
mov dword [rsp + 0x20], 0x928c0585
mov r9d, 0x7241fbe0
lea rcx, [rsp + 0x40]
mov r8d, 0x63f98c42
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x10
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x50]
mov edx, 0x147c834b
mov r8d, 0xb4897e37
call fcn.1400010f0
mov qword [rbp - 0x28], rax
test rax, rax
je 0x140002057
mov edx, 0xc01b35bf
mov dword [rsp + 0x20], 0xf77b0597
mov r9d, 0x7334468
lea rcx, [rsp + 0x40]
mov r8d, 0xde17ef83
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x50
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x50]
mov edx, 0x64664163
mov r8d, 0x6d579c77
call fcn.1400010f0
mov qword [rbp - 8], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0xf2d3b0a9
mov r8d, 0x64047d3a
call fcn.1400010f0
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140002057
mov edx, 0xe8db4fa9
mov dword [rsp + 0x20], 0x51bd31cc
mov r9d, 0x21552a52
lea rcx, [rsp + 0x40]
mov r8d, 0x8dbfaf9b
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x70
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x50]
mov edx, 0xb4b73e91
mov r8d, 0xe156c056
call fcn.1400010f0
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140002057
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rbp + 0x58]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140002057
mov edx, 0xe769fb6e
mov dword [rsp + 0x20], 0x37d1c46a
mov r9d, 0x7977c365
lea rcx, [rsp + 0x40]
mov r8d, 0x11c23e3a
call fcn.1400014b0
mov rcx, qword [rbp + 0xf0]
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp - 8]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0x84e02b64
mov r8d, 0x3680b969
call fcn.1400010f0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x140002057
mov rcx, qword [rsp + 0x50]
mov edx, 0xf375950
mov r8d, 0x57213619
call fcn.1400010f0
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0x24718e0f
mov r8d, 0x5d85e96f
call fcn.1400010f0
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140002057
mov edx, 0xb89ee99
mov dword [rsp + 0x20], 0xa385a384
mov r9d, 0x1aa9cc0a
lea rcx, [rsp + 0x40]
mov r8d, 0xa7af24c9
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x40
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x10]
mov edx, 0x69ae779f
mov r8d, 0x264974a2
call fcn.1400010f0
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0xe9b298a7
mov r8d, 0xb30963da
call fcn.1400010f0
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0xb8]
mov edx, 0xbc9e08b4
mov r8d, 0x318307ba
call fcn.1400010f0
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140002057
mov edx, 0x2fa8fd7e
mov dword [rsp + 0x20], 0xa162c412
mov r9d, 0xd58280a8
lea rcx, [rsp + 0x40]
mov r8d, 0x2a4c4081
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x20
lea rdx, [rbp + 0x120]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov ecx, 0x104
call qword [rbp - 0x60]
test eax, eax
je 0x140002057
lea rcx, [rbp + 0x120]
call qword [rbp - 0x68]
test eax, eax
je 0x140002057
mov edx, 0xaf56b70e
mov dword [rsp + 0x20], 0xeb0e5870
mov r9d, 0xf781690d
lea rcx, [rsp + 0x40]
mov r8d, 0xbc4553f7
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x60
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xb8]
mov edx, 0x8fccee06
mov r8d, 0x8164605e
call fcn.1400010f0
mov qword [rbp - 0x48], rax
test rax, rax
je 0x140002057
mov edx, 0xe6e393cc
mov dword [rsp + 0x20], 0xa8ed6c05
mov r9d, 0x138a126e
lea rcx, [rsp + 0x40]
mov r8d, 0x16e37afd
call fcn.1400014b0
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x28]
add rdi, 0x30
lea rdx, [rbp + 0x330]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001550
mov rcx, qword [rsp + 0x48]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140002057
mov rdx, qword [rbp - 0x70]
lea r9, [rbp]
lea r8d, [rbx + 0x71]
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x48]
test eax, eax
je 0x140002057
mov edx, 0x9ac7094a
mov dword [rsp + 0x20], 0x9dfd5a07
mov r9d, 0x36ab002d
lea rcx, [rsp + 0x40]
mov r8d, 0x408f4fa2
call fcn.1400014b0
mov rcx, qword [rbp + 0xb0]
lea r8, [rbp + 0x2c]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x28]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xd0]
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x140002057
mov rcx, qword [rsp + 0x48]
call qword [rbp + 0x110]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x330]
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp - 0x20]
cmp rax, 0x20
jb 0x140002057
mov rcx, qword [rbp + 0xf8]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp - 0x58]
test eax, eax
je 0x140002057
mov rcx, qword [rbp + 0xf8]
lea rax, [rbp + 0xc0]
lea r9, [rbp + 0x68]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x108]
mov edx, 0x20000005
call qword [rbp + 0xd8]
test eax, eax
je 0x140002057
mov edx, dword [rbp + 0x108]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0xa8]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140002057
mov r8d, dword [rbp + 0x108]
lea r9, [rbp + 0xe8]
mov rcx, qword [rbp + 0xf8]
mov rdx, rax
call qword [rbp - 0x28]
test eax, eax
je 0x140002057
mov eax, dword [rbp + 0x108]
cmp dword [rbp + 0xe8], eax
jne 0x140002057
mov rcx, qword [rbp + 0xb0]
call qword [rsp + 0x40]
mov rcx, qword [rbp + 0xf0]
call qword [rsp + 0x40]
mov rcx, qword [rsp + 0x78]
mov eax, 0x5a4d
mov qword [rbp + 0x10], rcx
cmp word [rcx], ax
jne 0x140002057
movsxd rdx, dword [rcx + 0x3c]
add rdx, rcx
mov qword [rbp + 0x78], rdx
cmp dword [rdx], 0x4550
jne 0x140002057
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x140002057
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x140002057
movzx ecx, word [rdx + 0x14]
lea r9d, [rbx + 0x40]
add rcx, 0x18
mov r8d, 0x3000
add rcx, rdx
mov qword [rbp + 8], rcx
xor ecx, ecx
mov edx, dword [rdx + 0x50]
call qword [rbp + 0xa8]
mov qword [rbp + 0x38], rax
test rax, rax
je 0x140002057
mov rcx, qword [rbp + 0x78]
mov rdi, rax
mov rsi, qword [rsp + 0x78]
mov ecx, dword [rcx + 0x54]
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xf8]
call qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140001220
lea rcx, [rsp + 0x40]
call fcn.1400012a0
lea rcx, [rsp + 0x40]
call fcn.140001390
lea rcx, [rsp + 0x40]
call fcn.140001440
mov rsi, qword [rsp + 0x650]
mov rdi, qword [rsp + 0x658]
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x140002074
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x660]
xor eax, eax
add rsp, 0x640
pop rbp
ret