Function at 0x140001700
Capabilities:
Parse pe header

Disassembly:
push rbp
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword gs:[0x30]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x1400021c3
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0xb0], rcx
test rcx, rcx
je 0x1400021c3
mov qword [rsp + 0x3e0], rbx
xor ebx, ebx
mov dword [rbp - 0x40], ebx
mov dword [rbp + 0x28], 4
mov rax, qword [rcx + 0x18]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400021bb
lea rdx, [rax + 0x20]
mov qword [rsp + 0x50], rdx
test rdx, rdx
je 0x1400021bb
mov rdx, qword [rdx]
mov ecx, 0x64afe445
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
mov ecx, 0x89538d22
mov dword [rbp - 0x38], eax
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x6953591b
mov dword [rbp + 0x50], eax
mov r8d, 0x263b6ced
lea rcx, [rsp + 0x40]
call fcn.140001030
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x1400021bb
mov edx, 0x3f7fb1c8
mov r8d, 0xcb8597ae
mov rcx, rax
call fcn.140001090
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x7119227f
mov r8d, 0xf53a735d
call fcn.140001090
mov qword [rbp - 0x30], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x9dc52daa
mov r8d, 0xe753831e
call fcn.140001090
mov qword [rbp - 0x58], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x8c80bbef
mov r8d, 0x71709a15
call fcn.140001090
mov qword [rbp + 0x68], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x447430
mov r8d, 0x7f0f526d
call fcn.140001090
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x72c1dd38
mov r8d, 0x9abb5a57
call fcn.140001090
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0xd3860bc2
mov r8d, 0xee25fded
call fcn.140001090
mov qword [rbp + 0x58], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x7c4e5f2f
mov r8d, 0xd8fcd8b2
call fcn.140001090
mov qword [rbp + 0x80], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x47f7217c
mov r8d, 0x6242593c
call fcn.140001090
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x570f1453
mov r8d, 0x3a7396fa
call fcn.140001090
mov qword [rbp + 8], rax
test rax, rax
je 0x1400021bb
mov edx, 0x10c
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + pe_nt_image_headers64]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x2864e2a8
mov r8d, 0x97816c7f
call fcn.140001090
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0xd07948b6
mov r8d, 0xbadac645
call fcn.140001090
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0x9b781299
mov r8d, 0xb4806bd4
call fcn.140001090
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400021bb
mov rcx, qword [rbp + 0xa0]
mov edx, 0xf502a7ad
mov r8d, 0x608c8b46
call fcn.140001090
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400021bb
mov rax, qword [rsp + 0x50]
mov ecx, 0x5b8bc75e
mov qword [rsp + 0x3e8], rsi
mov qword [rsp + 0x3f0], rdi
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x9fb33c1
mov dword [rbp + 0x38], eax
mov r9d, 0x4fe94482
mov dword [rsp + 0x20], 0x6f0b2a28
mov r8d, 0xcb860b61
lea rcx, [rsp + 0x40]
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
mov ecx, 0x10
mov dword [rsp + 0x20], 0x79cf2827
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov edx, 0x85119336
mov r9d, 0x5b6e91b8
mov r8d, 0xc00df6a7
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x10
mov dword [rsp + 0x20], 0x81f29073
mov ecx, 0x10
mov edx, 0x94224507
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xd8227a90
mov r8d, 0x9ed2f93d
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x20
mov dword [rsp + 0x20], 0xc4b4ef39
mov ecx, 0x10
mov edx, 0xbc087e53
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xd8a6c28f
mov r8d, 0xf741cd14
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x30
mov dword [rsp + 0x20], 0x30b05468
mov ecx, 0x10
mov edx, 0x183b20fa
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x825f0a45
mov r8d, 0xde6aaf95
call fcn.140001410
lea rcx, [rsp + 0x40]
call fcn.1400016c0
test eax, eax
je 0x1400021ab
lea rcx, [rbp + 0x18]
call qword [rbp + 0xa8]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x1400021ab
mov edx, 0x1eed6f0e
mov r8d, 0xc8f3779f
mov rcx, rax
call fcn.140001090
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1400021ab
mov rcx, qword [rbp - 0x68]
mov edx, 0xdea75093
mov r8d, 0xf020e48e
call fcn.140001090
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1400021ab
mov rcx, qword [rbp - 0x68]
mov edx, 0xa8fa66c1
mov r8d, 0x1c493cc5
call fcn.140001090
mov qword [rbp - 0x18], rax
test rax, rax
je 0x1400021ab
mov rcx, qword [rbp - 0x68]
mov edx, 0xb5b15748
mov r8d, 0x9a201357
call fcn.140001090
mov qword [rbp - 0x20], rax
test rax, rax
je 0x1400021ab
mov rcx, qword [rbp - 0x68]
mov edx, 0xa71b462a
mov r8d, 0xd3076d75
call fcn.140001090
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400021ab
mov edx, 0x1e5d9ae5
mov dword [rsp + 0x20], 0x2c40e49e
mov r9d, 0xf511e029
lea rcx, [rsp + 0x40]
mov r8d, 0x80e0f9eb
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x40
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x68]
mov edx, 0x5d618b16
mov r8d, 0xf92fcc29
call fcn.140001090
mov qword [rbp - 8], rax
test rax, rax
je 0x1400021ab
mov edx, 0x4c804e02
mov dword [rsp + 0x20], 0xf99ff32a
mov r9d, 0x12b2b270
lea rcx, [rsp + 0x40]
mov r8d, 0x32ec5106
call fcn.140001410
lea rcx, [rbp + 0x18]
call qword [rbp + 0xa8]
mov qword [rbp - 0x78], rax
test rax, rax
je 0x1400021ab
mov edx, 0x720a568f
mov r8d, 0x8d78e10e
mov rcx, rax
call fcn.140001090
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400021ab
mov rcx, qword [rbp - 0x68]
mov edx, 0x83e1c5f7
mov r8d, 0x801eb295
call fcn.140001090
mov qword [rbp], rax
test rax, rax
je 0x1400021ab
lea rdx, [rbp + 0xc0]
mov ecx, 0x104
call qword [rbp + 8]
test eax, eax
je 0x1400021ab
lea rcx, [rbp + 0xc0]
call qword [rbp + 0x68]
test eax, eax
je 0x1400021ab
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rbp - 0x18]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1400021ab
mov edx, 0x5e9e7731
mov dword [rsp + 0x20], 0x7aa2c02e
mov r9d, 0x9feb7119
lea rcx, [rsp + 0x40]
mov r8d, 0xfc4ff779
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x50
mov dword [rsp + 0x20], 0xf0c833d9
mov ecx, 0x10
mov edx, 0x48d21498
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x6a2948c0
mov r8d, 0xfa00f0d0
call fcn.140001410
mov rcx, qword [rsp + 0x60]
lea rdx, [rbp + 0x18]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400021ab
mov edx, 0x7bae0ff5
mov dword [rsp + 0x20], 0xd6ed4217
mov r9d, 0x7098ba5
lea rcx, [rsp + 0x40]
mov r8d, 0xcde37de3
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x60
mov dword [rsp + 0x20], 0xcba7f514
mov ecx, 0x10
mov edx, 0x6a2e52e5
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xb1a155b2
mov r8d, 0x6d988fc
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x70
mov dword [rsp + 0x20], 0xa03b9944
mov ecx, 0x10
mov edx, 0x5554317
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x3212dafb
mov r8d, 0x57159485
call fcn.140001410
mov rcx, qword [rsp + 0x58]
lea r8, [rbp + 0x1c]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x18]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x20]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1400021ab
mov edx, 0x6fe927bf
mov dword [rsp + 0x20], 0x9084d22d
mov r9d, 0xc2a67b08
lea rcx, [rsp + 0x40]
mov r8d, 0x123ffb2c
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
sub rdi, 0xffffffffffffff80
mov dword [rsp + 0x20], 0xa3845ae4
mov ecx, 0x10
mov edx, 0xc598c6a3
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x47babb7e
mov r8d, 0x1d6c433c
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x90
mov dword [rsp + 0x20], 0xdb40f037
mov ecx, 0x10
mov edx, 0x805c34a0
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x17273bbf
mov r8d, 0x1318fd55
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0xa0
mov dword [rsp + 0x20], 0x790f6bee
mov ecx, 0x10
mov edx, 0xb8619153
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xc7975b9b
mov r8d, 0xcdea4fd7
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0xb0
mov dword [rsp + 0x20], 0x46c9b129
mov ecx, 0x10
mov edx, 0x2f55b0fa
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x2a272341
mov r8d, 0xf5e5b56a
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0xc0
mov dword [rsp + 0x20], 0xb40c1d2b
mov ecx, 0x10
mov edx, 0xd91cb03c
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xfcfa813f
mov r8d, 0xfbadf858
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0xd0
mov dword [rsp + 0x20], 0x512fc599
mov ecx, 0x10
mov edx, 0xe7951d1a
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x6d74cb4
mov r8d, 0x11d1539b
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0xe0
mov dword [rsp + 0x20], 0xfef6b469
mov ecx, 0x10
mov edx, 0xce1e4122
rep movsb byte [rdi], byte [rsi]
mov r9d, 0x32cb1574
mov r8d, 0xe7210a31
lea rcx, [rsp + 0x40]
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0xf0
mov dword [rsp + 0x20], 0x685b4b09
mov ecx, 0x10
mov edx, 0x23999b4c
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xbe4afe82
mov r8d, 0x26f3ebce
call fcn.140001410
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0x18]
add rdi, 0x100
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.1400014b0
mov rcx, qword [rbp - 0x48]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp - 0x10]
test eax, eax
je 0x1400021ab
mov rcx, qword [rbp - 0x48]
lea rax, [rbp - 0x40]
lea r9, [rbp + 0x28]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x48]
mov edx, 0x20000005
call qword [rsp + 0x48]
test eax, eax
je 0x1400021ab
mov edx, dword [rbp + 0x48]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + pe_nt_image_headers64]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x1400021ab
mov r8d, dword [rbp + 0x48]
lea r9, [rbp - 0x80]
mov rcx, qword [rbp - 0x48]
mov rdx, rax
call qword [rbp + 0x40]
test eax, eax
je 0x1400021ab
mov eax, dword [rbp + 0x48]
cmp dword [rbp - 0x80], eax
jne 0x1400021ab
mov rcx, qword [rsp + 0x60]
call qword [rbp - 8]
mov rcx, qword [rbp - 0x48]
call qword [rbp - 8]
mov rcx, qword [rsp + 0x58]
call qword [rbp - 8]
mov rcx, qword [rbp + 0x70]
mov eax, 0x5a4d
mov qword [rbp + 0x90], rcx
cmp word [rcx], ax
jne 0x1400021ab
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp - 0x50], rcx
cmp dword [rcx], 0x4550
jne 0x1400021ab
mov eax, 0x8664
cmp word [rcx + 4], ax
jne 0x1400021ab
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1400021ab
mov edx, dword [rcx + 0x50]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + pe_nt_image_headers64]
mov qword [rbp + 0x98], rax
test rax, rax
je 0x1400021ab
mov rcx, qword [rbp - 0x50]
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0x88], rcx
lea rcx, [rsp + 0x40]
call fcn.1400011b0
lea rcx, [rsp + 0x40]
call fcn.140001300
mov rax, qword [rbp - 0x50]
mov rdi, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x70]
mov ecx, dword [rax + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001220
lea rcx, [rsp + 0x40]
call fcn.1400013a0
mov rsi, qword [rsp + 0x3e8]
mov rdi, qword [rsp + 0x3f0]
mov rbx, qword [rsp + 0x3e0]
xor eax, eax
add rsp, 0x3d0
pop rbp
ret