Function at 0x140001710
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x520]
sub rsp, 0x620
mov rax, qword gs:[0x30]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x14000205d
xor ebx, ebx
mov dword [rsp + 0x60], 4
mov dword [rbp + 0x68], ebx
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0x90], rcx
test rcx, rcx
je 0x14000205d
mov rax, qword [rcx + 0x18]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000205d
lea rdx, [rax + 0x20]
mov qword [rbp + 0x70], rdx
test rdx, rdx
je 0x14000205d
mov rdx, qword [rdx]
lea r8d, [rbx + 0x12]
mov ecx, 0x9a470b1a
mov rdx, qword [rdx + 0x50]
call section..text
mov dword [rbp - 0x60], eax
lea r8d, [rbx + 0x12]
mov rax, qword [rbp + 0x70]
mov ecx, 0x3bf0587f
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea rcx, [rsp + 0x40]
mov edx, 0x9c65b05b
mov dword [rbp + 0xd0], eax
mov r8d, 0xf6d5af9e
call fcn.140001040
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000205d
mov edx, 0x787e8673
mov r8d, 0xb0b0a18d
mov rcx, rax
call fcn.1400010d0
mov qword [rbp - 8], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0x9d063ca3
mov r8d, 0x10f655d6
call fcn.1400010d0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0x21d1102d
mov r8d, 0x7203736b
call fcn.1400010d0
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x14000206d
mov rcx, qword [rbp - 0x58]
mov edx, 0x91b5414f
mov r8d, 0x48de7fa5
call fcn.1400010d0
mov qword [rbp + 0x18], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0x94499dba
mov r8d, 0xac13e067
call fcn.1400010d0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0xffc3ef37
mov r8d, 0x2a434a67
call fcn.1400010d0
mov qword [rbp], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0xa395986
mov r8d, 0xce98442
call fcn.1400010d0
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0x6fad020a
mov r8d, 0x9359fcd1
call fcn.1400010d0
mov qword [rbp + 0x80], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0xda6cc8ef
mov r8d, 0x758539b7
call fcn.1400010d0
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14000205d
mov rcx, qword [rbp - 0x58]
mov edx, 0xab7d8964
mov r8d, 0x31c5d7b3
call fcn.1400010d0
mov qword [rbp + 0x98], rax
test rax, rax
je 0x14000205d
mov rax, qword [rbp + 0x70]
lea r8d, [rbx + 0x12]
mov ecx, 0x94c5f88d
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x14188ea4
mov dword [rbp - 0x18], eax
mov r9d, 0xe0d4a456
mov dword [rsp + 0x20], 0x8f666477
mov r8d, 0x7659d277
lea rcx, [rsp + 0x40]
call fcn.140001490
lea rcx, [rsp + 0x40]
call fcn.1400016d0
test eax, eax
je 0x14000205d
lea rcx, [rbp + 0x20]
call qword [rbp - 8]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14000205d
mov edx, 0xff9762c8
mov dword [rsp + 0x20], 0x19c26ca2
mov r9d, 0x24c3008e
lea rcx, [rsp + 0x40]
mov r8d, 0xab6bb706
call fcn.140001490
lea rcx, [rbp + 0x20]
call qword [rbp - 8]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14000205d
lea edx, [rbx + 0x71]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rsp + 0x70]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x14000205d
mov qword [rsp + 0x630], rsi
lea rcx, [rsp + 0x40]
mov edx, 0x3281d994
mov qword [rsp + 0x638], rdi
mov r9d, 0x3fc0246f
mov dword [rsp + 0x20], 0x41271062
mov r8d, 0xa60a70b1
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x60
mov dword [rsp + 0x20], 0x5d58991e
mov ecx, 0x10
mov edx, 0xfb5db24b
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xd0baf93c
mov r8d, 0x88caf9df
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x50
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x58]
mov edx, 0x2506bff4
mov r8d, 0x48dc765e
call fcn.1400010d0
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp + 0xc0]
mov edx, 0xecb6b94a
mov r8d, 0xe4f00c97
call fcn.1400010d0
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14000204d
mov edx, 0x88597d20
mov dword [rsp + 0x20], 0xf053d2ca
mov r9d, 0x3b63828f
lea rcx, [rsp + 0x40]
mov r8d, 0xbb55c2a4
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x70
mov dword [rsp + 0x20], 0xf84b34df
mov ecx, 0x10
mov edx, 0x879f3c77
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0xe8b2914e
mov r8d, 0x6ac0a436
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x20
mov dword [rsp + 0x20], 0xe215ed3b
mov ecx, 0x10
mov edx, 0x851ad27b
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x1c00fd16
mov r8d, 0xfc9e5380
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
mov ecx, 0x10
mov edx, 0xc27891ab
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xc0]
mov r8d, 0xa3e6f51c
call fcn.1400010d0
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp + 0xc0]
mov edx, 0xea2b47bf
mov r8d, 0x7d0f6704
call fcn.1400010d0
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp - 0x58]
mov edx, 0xcee2074c
mov r8d, 0xcc0ebe77
call fcn.1400010d0
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x14000204d
mov edx, 0xa0869ae
mov dword [rsp + 0x20], 0xdf100a0e
mov r9d, 0xf14c34c
lea rcx, [rsp + 0x40]
mov r8d, 0x6217ac79
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x40
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xc0]
mov edx, 0x94e519cb
mov r8d, 0xa6029842
call fcn.1400010d0
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp + 0xc0]
mov edx, 0xe641aa5d
mov r8d, 0x5a4213aa
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp + 0xc0]
mov edx, 0x82508dcf
mov r8d, 0x72d8fa95
call fcn.1400010d0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp + 0x30]
mov edx, 0x297f889a
mov r8d, 0xb774b4a0
call fcn.1400010d0
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14000204d
mov edx, 0x453d7a85
mov dword [rsp + 0x20], 0x6e0c62d8
mov r9d, 0x4555f649
lea rcx, [rsp + 0x40]
mov r8d, 0x352b9ab7
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x10
mov dword [rsp + 0x20], 0xe37790af
mov ecx, 0x10
mov edx, 0xdaec60c1
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x306201e9
mov r8d, 0xff0dade8
call fcn.140001490
mov rdi, qword [rbp - 0x10]
lea rsi, [rbp + 0x20]
add rdi, 0x30
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0xc0]
mov edx, 0xd3fbfd6d
mov r8d, 0x1d53ab3c
call fcn.1400010d0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp - 0x58]
mov edx, 0x9404bb6d
mov r8d, 0xd5056159
call fcn.1400010d0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14000204d
lea rdx, [rbp + 0x100]
mov ecx, 0x104
call qword [rbp + 0x18]
test eax, eax
je 0x14000204d
lea rcx, [rbp + 0x100]
call qword [rsp + 0x48]
test eax, eax
je 0x14000204d
mov rcx, qword [rbp - 0x58]
mov edx, 0xa254322b
mov r8d, 0xa786a308
call fcn.1400010d0
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14000204d
lea rdx, [rbp + 0x310]
lea rcx, [rsp + 0x40]
call fcn.140001520
mov rcx, qword [rbp + 0xe0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14000204d
mov rdx, qword [rbp - 0x10]
lea r9, [rbp + 0x38]
lea r8d, [rbx + 0x71]
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x68]
test eax, eax
je 0x14000204d
mov rcx, qword [rbp + 0xe0]
call qword [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rsp + 0x40]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000204d
mov dword [rsp + 0x28], 1
lea r8, [rbp + 0x310]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [rbp + 0x40]
cmp rax, 0x20
jb 0x14000204d
mov edx, 0x27b18a21
mov dword [rsp + 0x20], 0x39aa2ab
mov r9d, 0x1b02b2a7
lea rcx, [rsp + 0x40]
mov r8d, 0xab3aa130
call fcn.140001490
mov rcx, qword [rbp + 0x50]
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x50]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14000204d
mov edx, 0x47ddcdd1
mov dword [rsp + 0x20], 0x35d4c62d
mov r9d, 0xeb903aae
lea rcx, [rsp + 0x40]
mov r8d, 0xdf3fc0c7
call fcn.140001490
mov rcx, qword [rbp + 0x60]
lea r8, [rbp + 0x24]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x20]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x70]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x14000204d
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rbp + 0xb0]
test eax, eax
je 0x14000204d
mov rcx, qword [rbp + 0x78]
lea rax, [rbp + 0x68]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xa8]
mov edx, 0x20000005
call qword [rbp + 0x10]
test eax, eax
je 0x14000204d
mov edx, dword [rbp + 0xa8]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rsp + 0x70]
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x14000204d
mov r8d, dword [rbp + 0xa8]
lea r9, [rsp + 0x58]
mov rcx, qword [rbp + 0x78]
mov rdx, rax
call qword [rbp - 0x50]
test eax, eax
je 0x14000204d
mov eax, dword [rbp + 0xa8]
cmp dword [rsp + 0x58], eax
jne 0x14000204d
mov rax, qword [rbp + 0xf8]
mov ecx, 0x5a4d
mov qword [rbp + 0xb8], rax
cmp word [rax], cx
jne 0x14000204d
mov rcx, qword [rbp + 0x78]
call qword [rsp + 0x78]
mov rax, qword [rbp + 0xb8]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [rbp + 0xf8]
mov qword [rbp + 8], rdx
cmp dword [rdx], 0x4550
jne 0x14000204d
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x14000204d
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x14000204d
mov rcx, qword [rbp + 0x60]
call qword [rsp + 0x78]
mov rax, qword [rbp + 8]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
mov edx, dword [rax + 0x50]
call qword [rsp + 0x70]
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x14000204d
mov rcx, qword [rbp + 8]
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp - 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001370
lea rcx, [rsp + 0x40]
call fcn.140001280
mov rcx, qword [rbp + 0x50]
call qword [rsp + 0x78]
mov rax, qword [rbp + 8]
mov rdi, qword [rbp + 0xe8]
mov rsi, qword [rbp + 0xf8]
mov ecx, dword [rax + 0x54]
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001420
mov rsi, qword [rsp + 0x630]
mov rdi, qword [rsp + 0x638]
mov rax, qword [rbp + 0xd8]
test rax, rax
je 0x14000206d
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x640]
xor eax, eax
add rsp, 0x620
pop rbp
ret