Function at 0x140001680
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x3a0]
sub rsp, 0x4a0
mov dword [rbp - 0x48], 4
mov rax, qword gs:[0x30]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0xe8], rcx
test rcx, rcx
je 0x1400022b9
xor ebx, ebx
mov dword [rbp + 0x28], ebx
mov rax, qword [rcx + 0x18]
mov qword [rbp], rax
test rax, rax
je 0x1400022b9
lea rdx, [rax + 0x20]
mov dword [rbp + 0x78], 4
mov dword [rbp + 0x30], ebx
mov qword [rbp + 0xb8], rdx
test rdx, rdx
je 0x1400022b9
mov rdx, qword [rdx]
lea r8d, [rbx + 0x11]
mov ecx, 0x95edde8a
mov rdx, qword [rdx + 0x50]
call section..text
mov dword [rbp + 0xa8], eax
lea r8d, [rbx + 0x11]
mov rax, qword [rbp + 0xb8]
mov ecx, 0x161b9f84
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0x9623ffbf
mov dword [rbp + 0x160], eax
mov r8d, 0xb4e16397
lea rcx, [rsp + 0x40]
call fcn.140001040
mov qword [rbp + 0x98], rax
test rax, rax
je 0x1400022b9
mov edx, 0x483d75dc
mov r8d, 0xfefeebe2
mov rcx, rax
call fcn.1400010d0
mov qword [rbp - 8], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x15ae9a70
mov r8d, 0xb8d77fce
call fcn.1400010d0
mov qword [rbp + 0x140], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x7a573543
mov r8d, 0xf8998d0b
call fcn.1400010d0
mov qword [rbp + 0x168], rax
test rax, rax
je 0x1400022c9
mov rcx, qword [rbp + 0x98]
mov edx, 0x3ecf08a4
mov r8d, 0x30a90e7
call fcn.1400010d0
mov qword [rbp + 0x178], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x1487ca48
mov r8d, 0x3a3fa10a
call fcn.1400010d0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400022b9
mov rax, qword [rbp + 0xb8]
lea r8d, [rbx + 0x11]
mov ecx, 0xc0a4ec59
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov rcx, qword [rbp + 0x98]
or eax, 1
mov edx, 0xfd348f25
mov dword [rsp + 0x50], eax
mov r8d, 0x37f75a18
call fcn.1400010d0
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x4c8475a
mov r8d, 0x2a48b81a
call fcn.1400010d0
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x8dd5a5d6
mov r8d, 0x55afd7d4
call fcn.1400010d0
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x1400022b9
mov edx, 0xfcfd2574
mov dword [rsp + 0x20], 0x988702c4
mov r9d, 0x8522b059
lea rcx, [rsp + 0x40]
mov r8d, 0xcef45d8e
call fcn.140001490
lea rcx, [rsp + 0x40]
call fcn.140001640
test eax, eax
je 0x1400022b9
lea rcx, [rbp + 0x110]
call qword [rbp - 8]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x335c3ad1
mov r8d, 0xdaff9efb
call fcn.1400010d0
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x40d7dfa2
mov r8d, 0xa92e3333
call fcn.1400010d0
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0xefddb417
mov r8d, 0x7a7a0f48
call fcn.1400010d0
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400022b9
mov edx, 0x6bb6fd25
mov dword [rsp + 0x20], 0x9f531a67
mov r9d, 0xd36eb07d
lea rcx, [rsp + 0x40]
mov r8d, 0xa6f02444
call fcn.140001490
lea rcx, [rbp + 0x110]
call qword [rbp - 8]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x1355e3c0
mov r8d, 0x108831a5
call fcn.1400010d0
mov qword [rbp + 0x68], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0xa35fc243
mov r8d, 0x379695f
call fcn.1400010d0
mov qword [rbp - 0x30], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x1a3acc0d
mov r8d, 0x67e21613
call fcn.1400010d0
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0x98]
mov edx, 0x5c8c9a20
mov r8d, 0xd893e34e
call fcn.1400010d0
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x1400022b9
mov rcx, qword [rbp + 0xc0]
mov edx, 0xef120cc4
mov r8d, 0x14275492
call fcn.1400010d0
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1400022b9
lea edx, [rbx + 0x20]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x1400022b9
mov edx, 0x9886cfcb
mov dword [rsp + 0x20], 0x2afee989
mov r9d, 0xce19080
lea rcx, [rsp + 0x40]
mov r8d, 0x90c0bd12
call fcn.140001490
lea rcx, [rbp + 0x110]
call qword [rbp - 8]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x1400022b9
mov edx, 0x933c9d33
mov r8d, 0x74b256b8
mov rcx, rax
call fcn.1400010d0
mov qword [rbp + 0x100], rax
test rax, rax
je 0x1400022b9
lea edx, [rbx + 0x27]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x1400022b9
mov qword [rsp + 0x4b0], rsi
lea rcx, [rsp + 0x40]
mov edx, 0x9c1002af
mov qword [rsp + 0x4b8], rdi
mov r9d, 0xc3966add
mov dword [rsp + 0x20], 0x93d18838
mov r8d, 0x1b2930eb
call fcn.140001490
mov rdi, qword [rbp + 0x130]
lea rsi, [rbp + 0x110]
add rdi, 0x20
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x28]
mov edx, 0x395555f9
mov r8d, 0x65726b41
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400022a9
mov rcx, qword [rbp - 0x20]
mov edx, 0xb4b4fcaa
mov r8d, 0xe71f49c7
call fcn.1400010d0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x1400022a9
mov rcx, qword [rbp - 0x20]
mov edx, 0x8ba6cb87
mov r8d, 0x7869e2c0
call fcn.1400010d0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1400022a9
mov edx, 0x106dd588
mov dword [rsp + 0x20], 0x18761bb
mov r9d, 0xcdd8211
lea rcx, [rsp + 0x40]
mov r8d, 0xb67dedd4
call fcn.140001490
lea rcx, [rbp + 0x110]
call qword [rbp - 8]
mov qword [rbp + 0x148], rax
test rax, rax
je 0x1400022a9
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [rsp + 0x48]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400022a9
lea rdx, [rbp + 0x190]
mov ecx, 0x104
call qword [rbp + 0xe0]
test eax, eax
je 0x1400022a9
lea rcx, [rbp + 0x190]
call qword [rbp + 0x40]
test eax, eax
je 0x1400022a9
mov edx, 0x75403cfe
mov dword [rsp + 0x20], 0x76b36b14
mov r9d, 0x3f9a3778
lea rcx, [rsp + 0x40]
mov r8d, 0x2b2f9026
call fcn.140001490
mov rdi, qword [rbp + 0x130]
lea rsi, [rbp + 0x110]
mov ecx, 0x10
mov edx, 0x66a8b709
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x20]
mov r8d, 0x93611091
call fcn.1400010d0
mov qword [rbp + 0x108], rax
test rax, rax
je 0x1400022a9
mov rcx, qword [rbp - 0x20]
mov edx, 0x77d68288
mov r8d, 0x5c96d2ab
call fcn.1400010d0
mov qword [rbp + 0x128], rax
test rax, rax
je 0x1400022a9
mov rcx, qword [rbp - 0x20]
mov edx, 0xfce3a49f
mov r8d, 0xe9b8bb5e
call fcn.1400010d0
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400022a9
mov edx, 0xae9ffcbc
mov dword [rsp + 0x20], 0xb30c9e07
mov r9d, 0xf3505819
lea rcx, [rsp + 0x40]
mov r8d, 0x45dd9a4e
call fcn.140001490
mov rdi, qword [rbp + 0x130]
lea rsi, [rbp + 0x110]
add rdi, 0x10
mov dword [rsp + 0x20], 0xf2b050c1
mov ecx, 0x10
mov edx, 0x275765b0
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x4072f481
mov r8d, 0x4fc8b51c
call fcn.140001490
mov rdi, qword [rbp + 0xb0]
lea rsi, [rbp + 0x110]
mov ecx, 0x10
mov edx, 0x41bc0669
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x20]
mov r8d, 0xedc49a5a
call fcn.1400010d0
mov qword [rbp + 0x188], rax
test rax, rax
je 0x1400022a9
lea edx, [rbx + 0x13]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400022a9
mov edx, 0xb4cc027f
mov dword [rsp + 0x20], 0x77675a2
mov r9d, 0x367686fc
lea rcx, [rsp + 0x40]
mov r8d, 0x4ee2773
call fcn.140001490
mov rdi, qword [rbp + 0xb0]
lea rsi, [rbp + 0x110]
add rdi, 0x10
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x148]
mov edx, 0xa806cf9f
mov r8d, 0xdc7f2e4c
call fcn.1400010d0
mov qword [rbp - 0x68], rax
test rax, rax
je 0x1400022a9
mov edx, 0x101cb3d1
mov dword [rsp + 0x20], 0x240e1ae9
mov r9d, 0xf4d35595
lea rcx, [rsp + 0x40]
mov r8d, 0x4bb6bcf1
call fcn.140001490
mov rcx, qword [rbp + 0x150]
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x188]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x1400022a9
mov edx, 0xfc6f4fbd
mov dword [rsp + 0x20], 0x4073cadc
mov r9d, 0xba095e7f
lea rcx, [rsp + 0x40]
mov r8d, 0xb65a9449
call fcn.140001490
mov rcx, qword [rbp + 0x50]
lea r8, [rbp + 0x114]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x110]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x68]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1400022a9
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rbp - 0x38]
test eax, eax
je 0x1400022a9
mov edx, 0x730bb15f
mov dword [rsp + 0x20], 0x31bfa029
mov r9d, 0xe3018ce6
lea rcx, [rsp + 0x40]
mov r8d, 0xb138a8d5
call fcn.140001490
mov rdi, qword [rbp - 0x70]
lea rax, [rbp + 0x28]
add rdi, 0x10
mov qword [rsp + 0x20], rax
lea rsi, [rbp + 0x110]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x10]
lea r9, [rbp + 0x78]
lea r8, [rbp + 0x58]
mov edx, 0x20000005
call qword [rbp + 0x128]
test eax, eax
je 0x1400022a9
xor ecx, ecx
call qword [rbp - 0x68]
mov dword [rbp + 0x158], eax
test eax, eax
js 0x1400022a9
lea rcx, [rsp + 0x40]
call fcn.140001520
mov rax, qword [rbp + 0xa0]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400022a9
mov edx, 0x65d08f3c
mov dword [rsp + 0x20], 0xde81044f
mov r9d, 0xc6ae684
lea rcx, [rsp + 0x40]
mov r8d, 0x67f30e82
call fcn.140001490
mov rdi, qword [rbp - 0x70]
lea rsi, [rbp + 0x110]
mov ecx, 0x10
lea r9d, [rbx + 4]
rep movsb byte [rdi], byte [rsi]
mov edx, dword [rbp + 0x58]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 8], rax
test rax, rax
je 0x1400022a9
mov r8d, dword [rbp + 0x58]
lea r9, [rbp + 0x138]
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [rbp + 0x100]
test eax, eax
je 0x1400022a9
mov r8d, dword [rbp + 0x58]
cmp dword [rbp + 0x138], r8d
jne 0x1400022a9
mov rdx, qword [rbp + 8]
lea r9, [rbp + 0x48]
mov rcx, qword [rbp + 0xa0]
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x178]
test eax, eax
je 0x1400022a9
mov rcx, qword [rbp - 0x10]
call qword [rbp + 0x108]
mov rcx, qword [rbp + 0x50]
call qword [rbp + 0x108]
mov rcx, qword [rbp + 0xa0]
call qword [rbp + 0x68]
mov rdx, qword [rbp + 0xb0]
lea r8d, [rbx + 1]
xor ecx, ecx
call qword [rbp + 0x10]
mov dword [rbp + 0x38], eax
test eax, eax
js 0x1400022a9
mov edx, 0xf18e146
mov dword [rsp + 0x20], 0x14cab241
mov r9d, 0xef9febd3
lea rcx, [rsp + 0x40]
mov r8d, 0xe967e993
call fcn.140001490
mov rcx, qword [rbp + 0x150]
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp + 0x188]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x1400022a9
mov edx, 0xf17fb314
mov dword [rsp + 0x20], 0xe090aef2
mov r9d, 0x623b313
lea rcx, [rsp + 0x40]
mov r8d, 0x859f5ca8
call fcn.140001490
mov rcx, qword [rbp - 0x18]
lea r8, [rbp + 0x114]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0x110]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rsp + 0x68]
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400022a9
mov r8, qword [rbp - 0x70]
mov r9d, 0x1040
mov rdx, qword [rbp + 0x130]
xor ecx, ecx
call qword [rsp + 0x60]
mov rcx, qword [rbp + 0x88]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call qword [rbp - 0x38]
test eax, eax
je 0x1400022a9
mov rcx, qword [rbp + 0x88]
lea rax, [rbp + 0x30]
lea r9, [rbp - 0x48]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x70]
mov edx, 0x20000005
call qword [rbp + 0x128]
test eax, eax
je 0x1400022a9
mov edx, dword [rsp + 0x70]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1400022a9
mov r8d, dword [rsp + 0x70]
lea r9, [rbp + 0x70]
mov rcx, qword [rbp + 0x88]
mov rdx, rax
call qword [rbp + 0x100]
test eax, eax
je 0x1400022a9
mov eax, dword [rsp + 0x70]
cmp dword [rbp + 0x70], eax
jne 0x1400022a9
mov rax, qword [rbp - 0x50]
mov ecx, 0x5a4d
mov qword [rbp + 0xf8], rax
cmp word [rax], cx
jne 0x1400022a9
mov rcx, qword [rbp + 0x88]
call qword [rbp + 0x108]
mov rcx, qword [rbp - 0x18]
call qword [rbp + 0x108]
mov rcx, qword [rbp + 0x150]
call qword [rbp + 0x108]
mov rax, qword [rbp + 0xf8]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [rbp - 0x50]
mov qword [rbp + 0x180], rdx
cmp dword [rdx], 0x4550
jne 0x1400022a9
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x1400022a9
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x1400022a9
mov edx, dword [rdx + 0x50]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x140]
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x1400022a9
mov rdi, qword [rbp + 0x180]
mov rsi, qword [rbp - 0x50]
movzx ecx, word [rdi + 0x14]
lea rdx, [rdi + 0x18]
add rdx, rcx
mov qword [rsp + 0x58], rdx
mov ecx, dword [rdi + 0x54]
mov rdi, rax
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001370
lea rcx, [rsp + 0x40]
call fcn.140001420
mov rsi, qword [rsp + 0x4b0]
mov rdi, qword [rsp + 0x4b8]
mov rax, qword [rbp + 0x168]
test rax, rax
je 0x1400022c9
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x4c0]
xor eax, eax
add rsp, 0x4a0
pop rbp
ret