Function at 0x140001fe0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rbx
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp - 8], rax
mov eax, 0x5a4d
mov qword [rbp - 0x60], rdx
mov r15, rdx
mov r12d, ecx
cmp word [rdx], ax
jne 0x14000222c
movsxd rdi, dword [rdx + 0x3c]
add rdi, rdx
cmp dword [rdi], 0x4550
jne 0x14000222c
lea rax, [rbp - 0x48]
mov dword [rbp - 0x20], ecx
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x58]
mov eax, dword [rdi + 0x50]
xor r14d, r14d
mov dword [rbp - 0x10], eax
xor edx, edx
lea rax, [rbp - 0x20]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x50], rax
mov rax, qword [0x14000a9c0]
mov dword [rbp - 0x1c], r14d
mov dword [rbp - 0xc], 0x20
mov dword [rbp - 0x58], 0x92b
mov dword [rbp - 0x54], 0x149
call qword [rax]
mov r13, qword [rbp - 0x48]
mov r8, rdi
mov rcx, r13
mov rdx, r15
call fcn.140001b00
test al, al
je 0x14000222c
mov rdx, rdi
mov rcx, r15
call fcn.140001890
test al, al
je 0x14000222c
movzx ebx, word [rdi + 0x14]
movzx eax, word [rdi + 6]
add rbx, 0x2c
mov qword [rsp + 0xd0], rsi
movzx esi, r14w
cmp r14w, ax
jae 0x140002127
add rbx, rdi
nop word [rax + rax]
mov eax, dword [rbx - 8]
lea rcx, [rbp - 0x58]
add rax, r13
mov dword [rbp - 0x3c], r14d
mov qword [rbp - 0x38], rax
xor edx, edx
mov eax, dword [rbx]
add rax, r15
mov dword [rbp - 0x40], r12d
mov qword [rbp - 0x30], rax
mov eax, dword [rbx - 4]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x40]
mov qword [rbp - 0x50], rax
mov rax, qword [0x14000a9c0]
mov dword [rbp - 0x58], 0x92b
mov dword [rbp - 0x54], 0x139
call qword [rax]
movzx eax, word [rdi + 6]
lea rbx, [rbx + 0x28]
inc si
cmp si, ax
jb 0x1400020d0
movzx esi, word [rdi + 0x14]
xor ecx, ecx
add rsi, 0x28
cmp cx, ax
jae 0x1400021d1
add rsi, rdi
xor r15d, r15d
mov eax, dword [rsi]
test eax, eax
je 0x1400021ba
test dword [rsi + 0x14], 0x2000000
je 0x1400021ba
mov edx, eax
xor ecx, ecx
mov r9d, 4
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [rsi - 4]
xor edx, edx
add rcx, r13
mov qword [rbp - 0x30], rax
mov rbx, rax
mov qword [rbp - 0x38], rcx
mov ecx, dword [rsi]
lea rax, [rbp - 0x40]
mov qword [rbp - 0x50], rax
mov rax, qword [0x14000a9c0]
mov qword [rbp - 0x28], rcx
lea rcx, [rbp - 0x58]
mov dword [rbp - 0x3c], r15d
mov dword [rbp - 0x40], r12d
mov dword [rbp - 0x58], 0x92b
mov dword [rbp - 0x54], 0x139
call qword [rax]
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
inc r14w
add rsi, 0x28
cmp r14w, word [rdi + 6]
jb 0x140002140
mov r15, qword [rbp - 0x60]
lea rdx, str.GTA5
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rsi, qword [rsp + 0xd0]
mov ebx, eax
test eax, eax
je 0x14000222c
lea rcx, str.fuck
call fcn.140001040
mov r9, rdi
mov r8, r13
mov edx, ebx
mov ecx, r12d
call fcn.140001ca0
test al, al
je 0x14000222c
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x14000222e
xor al, al
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140004240
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbx
pop rbp
ret