Function at 0x1400016f0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x520]
sub rsp, 0x620
mov dword [rbp + 0x98], 4
mov rax, qword gs:[0x30]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140002018
xor ebx, ebx
mov dword [rbp + 0xb0], ebx
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0xe0], rcx
test rcx, rcx
je 0x140002018
mov rax, qword [rcx + 0x18]
mov qword [rbp + 0x58], rax
test rax, rax
je 0x140002018
lea rdx, [rax + 0x20]
mov qword [rbp - 0x38], rdx
test rdx, rdx
je 0x140002018
mov rdx, qword [rdx]
lea r8d, [rbx + 0x12]
mov ecx, 0x8d0e015
mov rdx, qword [rdx + 0x50]
call section..text
mov dword [rbp + 0xd0], eax
lea r8d, [rbx + 0x12]
mov rax, qword [rbp - 0x38]
mov ecx, 0xb7a227be
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov dword [rbp + 0x68], eax
lea r8d, [rbx + 0x12]
mov rax, qword [rbp - 0x38]
mov ecx, 0x4c4c96b7
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea rcx, [rsp + 0x40]
mov edx, 0x9f4db7eb
mov dword [rbp + 0x20], eax
mov r8d, 0xced93fa3
call fcn.140001040
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140002018
mov edx, 0xd666bf6f
mov r8d, 0x986c7960
mov rcx, rax
call fcn.1400010d0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140002018
mov rcx, qword [rbp - 0x50]
mov edx, 0xb8cfc305
mov r8d, 0x445fb665
call fcn.1400010d0
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140002018
mov edx, 0xce96aa9e
mov dword [rsp + 0x20], 0xa819986d
mov r9d, 0x66552128
lea rcx, [rsp + 0x40]
mov r8d, 0xe39afb71
call fcn.140001480
lea rcx, [rsp + 0x40]
call fcn.1400016c0
test eax, eax
je 0x140002018
lea rcx, [rsp + 0x74]
call qword [rsp + 0x48]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140002018
mov edx, 0x466177f2
mov dword [rsp + 0x20], 0x62c65c40
mov r9d, 0xb2e4e215
lea rcx, [rsp + 0x40]
mov r8d, 0x40f8fff4
call fcn.140001480
lea rcx, [rsp + 0x74]
call qword [rsp + 0x48]
mov qword [rbp + 0x48], rax
test rax, rax
je 0x140002018
mov rcx, qword [rbp - 0x50]
mov edx, 0x31e3ca03
mov r8d, 0x218f2948
call fcn.1400010d0
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x140002028
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp - 0x20]
mov qword [rbp + 8], rax
test rax, rax
je 0x140002018
mov qword [rsp + 0x630], rsi
lea rcx, [rsp + 0x40]
mov edx, 0x9bdabe65
mov qword [rsp + 0x638], rdi
mov r9d, 0xa4386a47
mov dword [rsp + 0x20], 0x27f249fb
mov r8d, 0x9637958e
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x70
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x48]
mov edx, 0x594fa9c5
mov r8d, 0x53bfcd86
call fcn.1400010d0
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140002008
mov rcx, qword [rsp + 0x60]
mov edx, 0xd963274e
mov r8d, 0xd439c394
call fcn.1400010d0
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0x5dca4fed
mov r8d, 0xf36886d7
call fcn.1400010d0
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x140002008
mov edx, 0xea0f59ca
mov dword [rsp + 0x20], 0x32a02bb5
mov r9d, 0x5b98b0b2
lea rcx, [rsp + 0x40]
mov r8d, 0x9db51fcf
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x10
mov dword [rsp + 0x20], 0x3829cdd3
mov ecx, 0x10
mov edx, 0x7ea96a82
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x8affb609
mov r8d, 0x4c48a1a0
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x20
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x50]
mov edx, 0x91020e2
mov r8d, 0xa228583d
call fcn.1400010d0
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140002008
mov edx, 0xc785f9ec
mov dword [rsp + 0x20], 0xd811dd12
mov r9d, 0xc75d1626
lea rcx, [rsp + 0x40]
mov r8d, 0x5928b7b9
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x40
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x48]
mov edx, 0xdf60d406
mov r8d, 0xf0b13478
call fcn.1400010d0
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0x60c1f70d
mov r8d, 0x3029644f
call fcn.1400010d0
mov qword [rbp], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0x52f83e1a
mov r8d, 0x45729e15
call fcn.1400010d0
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0xdc72b9e8
mov r8d, 0x7591a44f
call fcn.1400010d0
mov qword [rbp - 8], rax
test rax, rax
je 0x140002008
mov edx, 0x6d8a65a5
mov dword [rsp + 0x20], 0x8f8ee5e9
mov r9d, 0x311854a7
lea rcx, [rsp + 0x40]
mov r8d, 0xa92e9ef2
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x60
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x48]
mov edx, 0x897589fc
mov r8d, 0x4cb3c8e2
call fcn.1400010d0
mov qword [rbp + 0x38], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0x64de21a2
mov r8d, 0x5a164c74
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp + 0x48]
mov edx, 0xcb8f6222
mov r8d, 0x797764f3
call fcn.1400010d0
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0xfde69dac
mov r8d, 0x136e9de3
call fcn.1400010d0
mov qword [rbp + 0x28], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0x78e9cab2
mov r8d, 0xdd8deaf0
call fcn.1400010d0
mov qword [rbp + 0x78], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0xbf069047
mov r8d, 0x11f96f44
call fcn.1400010d0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140002008
mov edx, 0x914bf845
mov dword [rsp + 0x20], 0xe7e69ece
mov r9d, 0x8a3ca718
lea rcx, [rsp + 0x40]
mov r8d, 0xe1854c21
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
mov ecx, 0x10
mov dword [rsp + 0x20], 0x6817ec1c
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov edx, 0x1662d772
mov r9d, 0x393a6bc4
mov r8d, 0x3600b426
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x50
mov dword [rsp + 0x20], 0xb4260038
mov ecx, 0x10
mov edx, 0x296f27ca
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x1ce3ebc7
mov r8d, 0xd83711e6
call fcn.140001480
mov rdi, qword [rbp + 8]
lea rsi, [rsp + 0x74]
add rdi, 0x30
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x48]
mov edx, 0xb140a2ba
mov r8d, 0xbd8009f8
call fcn.1400010d0
mov qword [rbp + 0x60], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp + 0x48]
mov edx, 0x239f6686
mov r8d, 0x4127a336
call fcn.1400010d0
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x140002008
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rbp + 0x60]
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0xe7cc485d
mov r8d, 0x40d12230
call fcn.1400010d0
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp + 0x48]
mov edx, 0x59bc8b48
mov r8d, 0xe5526b32
call fcn.1400010d0
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140002008
mov edx, 0xd54d4e
mov dword [rsp + 0x20], 0x3c25c650
mov r9d, 0x830ab73d
lea rcx, [rsp + 0x40]
mov r8d, 0xd45efbb5
call fcn.140001480
mov rcx, qword [rbp - 0x78]
lea rdx, [rsp + 0x74]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xa0]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x140002008
mov rcx, qword [rbp - 0x50]
mov edx, 0xfa06156
mov r8d, 0x4bfe8803
call fcn.1400010d0
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140002008
mov edx, 0x9a7b7819
mov dword [rsp + 0x20], 0x45cb8841
mov r9d, 0x8200dac1
lea rcx, [rsp + 0x40]
mov r8d, 0xc5b5c189
call fcn.140001480
mov rcx, qword [rbp + 0x70]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x38], rbx
lea rdx, [rsp + 0x74]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xa8]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140002008
lea rdx, [rbp + 0x100]
mov ecx, 0x104
call qword [rbp - 0x60]
test eax, eax
je 0x140002008
lea rcx, [rbp + 0x100]
call qword [rbp]
test eax, eax
je 0x140002008
lea rdx, [rbp + 0x310]
lea rcx, [rsp + 0x40]
call fcn.140001510
mov rcx, qword [rbp + 0xc0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140002008
mov rdx, qword [rbp + 8]
lea r9, [rbp + 0x90]
lea r8d, [rbx + 0x71]
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x78]
test eax, eax
je 0x140002008
mov rcx, qword [rbp + 0xc0]
call qword [rbp + 0xb8]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x310]
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp - 0x68]
cmp rax, 0x20
jb 0x140002008
mov rcx, qword [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp + 0xf0]
test eax, eax
je 0x140002008
mov rcx, qword [rsp + 0x40]
lea rax, [rbp + 0xb0]
lea r9, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x28]
mov edx, 0x20000005
call qword [rbp + 0xe8]
test eax, eax
je 0x140002008
mov edx, dword [rbp - 0x28]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp - 0x20]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140002008
mov r8d, dword [rbp - 0x28]
lea r9, [rbp - 0x40]
mov rcx, qword [rsp + 0x40]
mov rdx, rax
call qword [rbp + 0x88]
test eax, eax
je 0x140002008
mov eax, dword [rbp - 0x28]
cmp dword [rbp - 0x40], eax
jne 0x140002008
mov rcx, qword [rbp - 0x78]
call qword [rbp + 0x38]
mov rcx, qword [rbp + 0x70]
call qword [rbp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [rbp + 0x38]
mov rcx, qword [rbp - 0x58]
mov eax, 0x5a4d
mov qword [rsp + 0x68], rcx
cmp word [rcx], ax
jne 0x140002008
movsxd rdx, dword [rcx + 0x3c]
add rdx, rcx
mov qword [rbp + 0x30], rdx
cmp dword [rdx], 0x4550
jne 0x140002008
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x140002008
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x140002008
movzx ecx, word [rdx + 0x14]
lea r9d, [rbx + 0x40]
add rcx, 0x18
mov r8d, 0x3000
add rcx, rdx
mov qword [rbp - 0x30], rcx
xor ecx, ecx
mov edx, dword [rdx + 0x50]
call qword [rbp - 0x20]
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x140002008
lea rcx, [rsp + 0x40]
call fcn.140001200
mov rax, qword [rbp + 0x30]
mov rdi, qword [rbp + 0xc8]
mov rsi, qword [rbp - 0x58]
mov ecx, dword [rax + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001360
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001410
mov rsi, qword [rsp + 0x630]
mov rdi, qword [rsp + 0x638]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x140002028
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x640]
xor eax, eax
add rsp, 0x620
pop rbp
ret