Function at 0x140001690
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x3c0]
sub rsp, 0x4c0
mov rax, qword gs:[0x30]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x140002295
xor ebx, ebx
mov dword [rbp + 0x70], 4
mov dword [rbp + 0x38], ebx
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x40], 4
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0xf0], rcx
test rcx, rcx
je 0x140002295
mov rax, qword [rcx + 0x18]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140002295
lea rdx, [rax + 0x20]
mov qword [rbp + 0x1a0], rdx
test rdx, rdx
je 0x140002295
mov rdx, qword [rdx]
lea r8d, [rbx + 0x11]
mov ecx, 0xfecf60ee
mov rdx, qword [rdx + 0x50]
call section..text
mov dword [rbp + 0x100], eax
lea r8d, [rbx + 0x11]
mov rax, qword [rbp + 0x1a0]
mov ecx, 0x4ec182bb
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea rcx, [rsp + 0x40]
mov edx, 0x4f27431b
mov dword [rbp + 0x1a8], eax
mov r8d, 0xb2c56cd2
call fcn.140001040
mov qword [rbp + 8], rax
test rax, rax
je 0x140002295
mov edx, 0x24f22bc9
mov r8d, 0x4d0d854
mov rcx, rax
call fcn.1400010d0
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0xe7a317df
mov r8d, 0xb154c398
call fcn.1400010d0
mov qword [rbp + 0x140], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x11f45edd
mov r8d, 0x13f54ba
call fcn.1400010d0
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400022a5
mov rcx, qword [rbp + 8]
mov edx, 0x878ee43
mov r8d, 0x9535769a
call fcn.1400010d0
mov qword [rbp + 0x78], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x2917c913
mov r8d, 0x59392341
call fcn.1400010d0
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0xa22b4fdb
mov r8d, 0xa74b85b8
call fcn.1400010d0
mov qword [rbp + 0x178], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x2e63fd25
mov r8d, 0xb11757ef
call fcn.1400010d0
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x4fc5c5e4
mov r8d, 0xda75304a
call fcn.1400010d0
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x78c32197
mov r8d, 0x7a84ad3b
call fcn.1400010d0
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x5c33fee8
mov r8d, 0xf3fd6fb7
call fcn.1400010d0
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0xf9519982
mov r8d, 0xe3fe2c26
call fcn.1400010d0
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x140002295
mov rax, qword [rbp + 0x1a0]
lea r8d, [rbx + 0x11]
mov ecx, 0x51a90c92
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov rcx, qword [rbp + 8]
mov edx, 0x66eeca3e
mov r8d, 0x8e03be67
mov dword [rbp - 0x78], eax
call fcn.1400010d0
mov qword [rbp + 0x198], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0xad7abe77
mov r8d, 0xf658a7a9
call fcn.1400010d0
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140002295
mov edx, 0x729d9d
mov dword [rsp + 0x20], 0x5688220b
mov r9d, 0x618f977f
lea rcx, [rsp + 0x40]
mov r8d, 0xc95a83c4
call fcn.140001490
lea rcx, [rsp + 0x40]
call fcn.140001650
test eax, eax
je 0x140002295
lea rcx, [rbp + 0x10c]
call qword [rbp + 0xe8]
mov qword [rbp - 8], rax
test rax, rax
je 0x140002295
mov edx, 0x435cbb98
mov dword [rsp + 0x20], 0xeff47498
mov r9d, 0x69239a43
lea rcx, [rsp + 0x40]
mov r8d, 0x6f62c214
call fcn.140001490
lea rcx, [rbp + 0x10c]
call qword [rbp + 0xe8]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140002295
mov edx, 0x6881480f
mov dword [rsp + 0x20], 0x68d35a4c
mov r9d, 0xb2ef1162
lea rcx, [rsp + 0x40]
mov r8d, 0x64ddd7d7
call fcn.140001490
lea rcx, [rbp + 0x10c]
call qword [rbp + 0xe8]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140002295
mov edx, 0xac765600
mov dword [rsp + 0x20], 0xd097c797
mov r9d, 0xa4dea10a
lea rcx, [rsp + 0x40]
mov r8d, 0x766e9f8
call fcn.140001490
lea rcx, [rbp + 0x10c]
call qword [rbp + 0xe8]
mov qword [rbp + 0x188], rax
test rax, rax
je 0x140002295
mov edx, 0x4cbea874
mov r8d, 0xe178aab4
mov rcx, rax
call fcn.1400010d0
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140002295
mov rcx, qword [rsp + 0x68]
mov edx, 0x6e25cb97
mov r8d, 0xa05e12e0
call fcn.1400010d0
mov qword [rbp - 0x28], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 0x188]
mov edx, 0xf9878014
mov r8d, 0x8619509f
call fcn.1400010d0
mov qword [rbp + 0x160], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp - 8]
mov edx, 0x4d438cd3
mov r8d, 0x7955e8b7
call fcn.1400010d0
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x9b42006e
mov r8d, 0xac7ed5e
call fcn.1400010d0
mov qword [rbp + 0x138], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 0x188]
mov edx, 0xe214fe3b
mov r8d, 0xc1203c1c
call fcn.1400010d0
mov qword [rbp + 0x190], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 0x188]
mov edx, 0xa2055f97
mov r8d, 0x260dd2bb
call fcn.1400010d0
mov qword [rbp + 0x58], rax
test rax, rax
je 0x140002295
lea rdx, [rbp + 0x1b0]
mov ecx, 0x104
call qword [rbp - 0x70]
test eax, eax
je 0x140002295
lea rcx, [rbp + 0x1b0]
call qword [rbp + 0xc8]
test eax, eax
je 0x140002295
mov rcx, qword [rbp + 8]
mov edx, 0x7666d61b
mov r8d, 0xd974e871
call fcn.1400010d0
mov qword [rbp + 0x98], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 0x188]
mov edx, 0x8c9a0087
mov r8d, 0xb1ec52fe
call fcn.1400010d0
mov qword [rbp + 0x18], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp + 0x188]
mov edx, 0xf2a9095
mov r8d, 0x7de4b306
call fcn.1400010d0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x140002295
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rbp + 0x160]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x140002295
mov rcx, qword [rbp - 0x30]
mov edx, 0xf5e0e55
mov r8d, 0xe0386736
call fcn.1400010d0
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140002295
lea edx, [rbx + 0x27]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140002295
lea edx, [rbx + 0x13]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x140002295
mov edx, 0x3112f28d
mov dword [rsp + 0x20], 0x721b081e
mov r9d, 0x7ef002d1
lea rcx, [rsp + 0x40]
mov r8d, 0x19d3b5c9
call fcn.140001490
mov rcx, qword [rbp - 0x48]
lea rdx, [rbp + 0x10c]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x58]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140002295
mov qword [rsp + 0x4d0], rsi
lea rcx, [rsp + 0x40]
mov edx, 0xb45d65bf
mov qword [rsp + 0x4d8], rdi
mov r9d, 0xdf516b9b
mov dword [rsp + 0x20], 0x911b3081
mov r8d, 0x7be32aac
call fcn.140001490
mov rdi, qword [rbp + 0xe0]
lea rsi, [rbp + 0x10c]
mov ecx, 0x10
lea edx, [rbx + 0x20]
rep movsb byte [rdi], byte [rsi]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x140002285
xor ecx, ecx
call qword [rsp + 0x58]
mov dword [rbp + 0x168], eax
test eax, eax
js 0x140002285
mov edx, 0x79894ee4
mov dword [rsp + 0x20], 0x310f0d12
mov r9d, 0xb5854a2f
lea rcx, [rsp + 0x40]
mov r8d, 0xca65f0d9
call fcn.140001490
mov rcx, qword [rbp - 0x60]
lea r8, [rbp + 0x110]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x10c]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x38]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140002285
mov edx, 0x3eba83ed
mov dword [rsp + 0x20], 0x81c782b
mov r9d, 0x697ad42f
lea rcx, [rsp + 0x40]
mov r8d, 0x8d4f3d64
call fcn.140001490
mov rdi, qword [rbp + 0xf8]
lea rsi, [rbp + 0x10c]
add rdi, 0x10
mov dword [rsp + 0x20], 0xc9f8f0ee
mov ecx, 0x10
mov edx, 0x175158a8
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x90c7ba36
mov r8d, 0x2f3c9f3e
call fcn.140001490
mov rdi, qword [rbp + 0xe0]
lea rsi, [rbp + 0x10c]
add rdi, 0x10
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x188]
mov edx, 0xccb15f37
mov r8d, 0xf6a6efff
call fcn.1400010d0
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x140002285
mov edx, 0x9bd51d9f
mov dword [rsp + 0x20], 0x9b99c2d3
mov r9d, 0xdd177d25
lea rcx, [rsp + 0x40]
mov r8d, 0xbf1e860c
call fcn.140001490
mov rdi, qword [rbp + 0xf8]
lea rsi, [rbp + 0x10c]
mov ecx, 0x10
mov dword [rsp + 0x20], 0xc71bc4fd
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov edx, 0xe4b912
mov r9d, 0xf0e0f16e
mov r8d, 0x3c8dedba
call fcn.140001490
mov rdi, qword [rbp + 0xe0]
lea rsi, [rbp + 0x10c]
add rdi, 0x20
mov dword [rsp + 0x20], 0xa0c73854
mov ecx, 0x10
mov edx, 0xbf87adb9
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x27fb9935
mov r8d, 0xea67b784
call fcn.140001490
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x10c]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001520
mov rax, qword [rbp + 0x28]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140002285
mov edx, 0xdb856a3b
mov dword [rsp + 0x20], 0xf9fc23d6
mov r9d, 0xa8dd9a64
lea rcx, [rsp + 0x40]
mov r8d, 0xad5be5e
call fcn.140001490
mov rdi, qword [rbp + 0x60]
lea rsi, [rbp + 0x10c]
add rdi, 0x10
mov dword [rsp + 0x20], ebx
mov ecx, 0x10
xor r9d, r9d
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x48]
xor r8d, r8d
xor edx, edx
call qword [rbp + 0xa0]
test eax, eax
je 0x140002285
mov rcx, qword [rsp + 0x48]
lea rax, [rbp + 0x38]
lea r9, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc0]
mov edx, 0x20000005
call qword [rbp + 0x50]
test eax, eax
je 0x140002285
mov edx, dword [rbp + 0xc0]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140002285
mov r8d, dword [rbp + 0xc0]
lea r9, [rbp - 0x40]
mov rcx, qword [rsp + 0x48]
mov rdx, rax
call qword [rbp + 0x190]
test eax, eax
je 0x140002285
mov r8d, dword [rbp + 0xc0]
cmp dword [rbp - 0x40], r8d
jne 0x140002285
mov rdx, qword [rbp + 0x10]
lea r9, [rbp - 0x68]
mov rcx, qword [rbp + 0x28]
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x98]
test eax, eax
je 0x140002285
mov rcx, qword [rsp + 0x48]
call qword [rbp + 0x18]
mov rcx, qword [rbp - 0x60]
call qword [rbp + 0x18]
mov edx, 0x2b2e602f
mov dword [rsp + 0x20], 0xb55b5d30
mov r9d, 0xc35c7d17
lea rcx, [rsp + 0x40]
mov r8d, 0xadabb7a5
call fcn.140001490
mov rcx, qword [rbp - 0x48]
lea rdx, [rbp + 0x10c]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x58]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140002285
mov edx, 0xdfc1ccb4
mov dword [rsp + 0x20], 0xe67567b4
mov r9d, 0xc7477e60
lea rcx, [rsp + 0x40]
mov r8d, 0x2177abd9
call fcn.140001490
mov rcx, qword [rbp + 0x80]
lea r8, [rbp + 0x110]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x10c]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x38]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140002285
mov rcx, qword [rbp + 0x28]
call qword [rbp + 0x178]
mov rdx, qword [rbp + 0xf8]
lea r8d, [rbx + 1]
xor ecx, ecx
call qword [rbp - 0x50]
mov dword [rbp], eax
test eax, eax
js 0x140002285
mov r8, qword [rbp + 0x60]
mov r9d, 0x1040
mov rdx, qword [rbp + 0xe0]
xor ecx, ecx
call qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp + 0xa0]
test eax, eax
je 0x140002285
mov rcx, qword [rbp - 0x20]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x50]
mov edx, 0x20000005
call qword [rbp + 0x50]
test eax, eax
je 0x140002285
mov edx, dword [rsp + 0x50]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140002285
mov r8d, dword [rsp + 0x50]
lea r9, [rbp + 0xa8]
mov rcx, qword [rbp - 0x20]
mov rdx, rax
call qword [rbp + 0x190]
test eax, eax
je 0x140002285
mov eax, dword [rsp + 0x50]
cmp dword [rbp + 0xa8], eax
jne 0x140002285
mov rcx, qword [rbp - 0x48]
call qword [rbp + 0x18]
mov rcx, qword [rbp + 0x80]
call qword [rbp + 0x18]
mov rcx, qword [rbp - 0x20]
call qword [rbp + 0x18]
mov rcx, qword [rbp - 0x18]
mov eax, 0x5a4d
mov qword [rbp + 0xb0], rcx
cmp word [rcx], ax
jne 0x140002285
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x30], rcx
cmp dword [rcx], 0x4550
jne 0x140002285
mov eax, 0x8664
cmp word [rcx + 4], ax
jne 0x140002285
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x140002285
mov edx, dword [rcx + 0x50]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140002285
mov rdi, qword [rbp + 0x30]
mov rsi, qword [rbp - 0x18]
movzx ecx, word [rdi + 0x14]
lea rdx, [rdi + 0x18]
add rdx, rcx
mov qword [rbp + 0x158], rdx
mov ecx, dword [rdi + 0x54]
mov rdi, rax
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001370
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001420
mov rsi, qword [rsp + 0x4d0]
mov rdi, qword [rsp + 0x4d8]
mov rax, qword [rbp + 0x150]
test rax, rax
je 0x1400022a5
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x4e0]
xor eax, eax
add rsp, 0x4c0
pop rbp
ret