Function at 0x14001ec50
Capabilities:
Inspect section memory permissions
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rbx, qword [rdx + 0x300]
mov rdi, rdx
mov rsi, rcx
test rbx, rbx
je 0x14001ecc8
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001ecc8
mov r8, qword [rsi + 0x4a08]
xor eax, eax
cmp byte [rbx + 0x28], al
jne 0x14001ecaa
mov rdx, qword [rdx + 0x20]
xor r9d, r9d
mov qword [rsp + 0x28], r8
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0x20], rax
call fcn.14001a030
test eax, eax
setns cl
mov byte [rbx + 0x28], cl
test eax, eax
js 0x14001ecdc
mov rdx, rdi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
jmp 0x14001ecf0
lea r8, str.pCacheEntry_hLdrMod_is_NIL__Impossible_
mov edx, 0xffffff9b
mov rcx, rsi
call fcn.14001eba0
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0xe8
mov rax, qword [0x1400bf848]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rax, qword [rdx + 0x300]
mov rdi, rcx
mov rbx, rdx
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [rax + 0x10]
lea rdx, [rdi + 0x3788]
mov rax, qword [rcx + 8]
call qword [case.0x14002090f.0]
test eax, eax
jns 0x14001ed5f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Error_reading_image_header:__Rrc
mov edx, 0xffffea09
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f8af
mov qword [rsp + 0xd0], r15
mov eax, 0x5a4d
xor r15d, r15d
cmp word [rdi + 0x3788], ax
jne 0x14001edac
mov r15d, dword [rdi + 0x37c4]
lea eax, [r15 - 0x40]
cmp eax, 0x1c0
jbe 0x14001edac
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_e_lfanew_value:__x
mov edx, 0xffffea18
mov dword [rsp + 0x20], r15d
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f8a7
mov qword [rsp + 0x120], r12
lea rsi, [rdi + 0x3788]
mov r12d, r15d
add rsi, r12
mov eax, dword [rsi]
cmp eax, 0x4550
je 0x14001edf0
mov r9, qword [rbx + 0x10]
lea r8, str._s:_No_PE_signature_at__x:__x
mov dword [rsp + 0x28], eax
mov edx, 0xffffea1a
mov rcx, rdi
mov dword [rsp + 0x20], r15d
call fcn.14001eba0
jmp 0x14001f89f
mov qword [rsp + 0xd8], r14
mov eax, 0x8664
movzx r14d, word [rsi + 4]
cmp r14w, ax
je 0x14001ee33
cmp byte [rbx + 0x2fb], 0
jne 0x14001ee33
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_machine:__x
mov edx, 0xffffe9f1
mov dword [rsp + 0x20], r14d
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f897
movzx ecx, word [rsi + 0x14]
mov r9d, 0x14c
cmp r14w, r9w
mov eax, 0xf0
mov edx, pe_nt_image_headers64
cmove eax, edx
cmp rcx, rax
je 0x14001ee74
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_optional_header_size:__x
mov dword [rsp + 0x20], ecx
mov edx, 0xffffea17
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f897
movzx ecx, word [rsi + 0x18]
cmp r14w, r9w
mov eax, 0x20b
mov edx, 0x10b
cmove eax, edx
cmp ecx, eax
je 0x14001eeae
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_optional_header_magic:__x
mov dword [rsp + 0x20], ecx
mov edx, 0xffffea17
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f897
cmp r14w, r9w
jne 0x14001eeb9
mov eax, dword [rsi + 0x74]
jmp 0x14001eebf
mov eax, dword [rsi + 0x84]
cmp eax, 0x10
je 0x14001eee5
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_data_dirs:__x
mov edx, 0xffffea17
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f897
movzx eax, word [rsi + 6]
mov dword [rbp - 0x4d], eax
cmp eax, 0x10
jbe 0x14001ef12
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Too_many_section_headers:__x
mov edx, 0xffffe9f2
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001eba0
jmp 0x14001f897
lea r8, [rax + rax*4]
mov qword [rsp + 0xe0], r13
shl r8, 3
lea rcx, [rdi + 0x4788]
cmp r14w, r9w
mov edx, 0xf8
mov r13d, 0x108
cmovne edx, r13d
add rdx, rsi
call fcn.140016b50
mov eax, 0x14c
cmp r14w, ax
jne 0x14001ef54
mov eax, dword [rsi + 0x34]
jmp 0x14001ef58
mov rax, qword [rsi + 0x30]
test rax, 0xfff
je 0x14001ef76
mov qword [rsp + 0x20], rax
lea r8, str._s:_Invalid_image_base:__p
mov edx, 0xffffea1b
jmp 0x14001f883
mov edx, dword [rsi + 0x50]
mov ecx, dword [rbx + 8]
add ecx, 0xfff
mov dword [rbp - 0x45], edx
lea eax, [rdx + 0xfff]
xor ecx, eax
test ecx, 0xfffff000
je 0x14001efc8
cmp byte [rbx + 0x2fa], 0
jne 0x14001efc8
mov rax, qword [rbx + 8]
lea r8, str._s:_SizeOfImage___x__isnt_close_enough_to_the_mapping_size___x_
mov r9, qword [rbx + 0x10]
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov edx, 0xffffea19
call fcn.14001eba0
jmp 0x14001f88f
mov rcx, qword [rbx + 0x300]
mov rcx, qword [rcx + 8]
call fcn.1400208f0
mov ecx, dword [rbp - 0x45]
cmp rcx, rax
je 0x14001f019
mov rcx, qword [rbx + 0x300]
mov rcx, qword [rcx + 8]
call fcn.1400208f0
mov r9, qword [rbx + 0x10]
lea r8, str._s:_SizeOfImage___x__differs_from_what_RTLdrSize_returns___zx_
mov qword [rsp + 0x28], rax
mov edx, 0xffffea19
mov eax, dword [rbp - 0x45]
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.14001eba0
jmp 0x14001f88f
mov ecx, dword [rsi + 0x38]
mov dword [rbp - 0x49], ecx
lea eax, [rcx - 1]
mov dword [rbp - 0x31], eax
test ecx, eax
jne 0x14001f873
cmp ecx, 0x1000
jb 0x14001f873
movzx r10d, byte [rbx + 0x2fa]
mov eax, 0x1000
test r10b, r10b
mov edx, 0x10000
cmovne eax, edx
cmp ecx, eax
ja 0x14001f873
mov edx, dword [rsi + 0x3c]
mov dword [rbp - 0x3d], edx
lea r8d, [rdx - 1]
test edx, r8d
jne 0x14001f851
lea eax, [rdx - 0x200]
cmp eax, 0xe00
ja 0x14001f851
cmp edx, ecx
ja 0x14001f851
mov r11d, dword [rbp - 0x4d]
mov eax, 0x14c
mov edx, dword [rsi + 0x54]
cmp r14w, ax
mov eax, 0xf8
cmove r13d, eax
lea ecx, [r11 + r11*4]
lea eax, [r15 + r13]
lea r9d, [rax + rcx*8]
cmp edx, r9d
jae 0x14001f0da
mov dword [rsp + 0x30], r11d
lea r8, str._s:_Headers_are_too_small:__x____x__cSections_x_
mov dword [rsp + 0x28], r9d
mov rcx, rdi
mov r9, qword [rbx + 0x10]
mov dword [rsp + 0x20], edx
mov edx, 0xffffea12
call fcn.14001eba0
jmp 0x14001f88f
mov eax, dword [rbp - 0x3d]
not r8d
dec eax
add eax, edx
and eax, r8d
mov dword [rbp - 0x51], eax
cmp eax, 0x1000
jbe 0x14001f11f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Headers_are_larger_than_expected:__x__x__expected_max__zx_
mov qword [rsp + 0x30], 0x1000
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov edx, 0xffffea12
call fcn.14001eba0
jmp 0x14001f88f
movzx eax, word [rsi + 0x16]
mov word [rbx + 0x2f4], ax
movzx eax, word [rsi + 0x5e]
mov word [rbx + 0x2f6], ax
test r10b, r10b
je 0x14001f15e
mov eax, dword [rdi + 0x4794]
sub qword [rbx], rax
mov eax, dword [rdi + 0x4794]
add qword [rbx + 8], rax
mov eax, dword [rdi + 0x4794]
mov r8, qword [rbx]
mov dword [rbx + 0x234], eax
jmp 0x14001f161
mov r8, qword [rbx]
mov rcx, qword [rbx + 0x300]
lea rax, [0x14001db40]
xor r15d, r15d
lea rdx, [rbp - 0x39]
cmp dword [rdi], 2
mov r9d, r15d
cmovne r9, rax
mov rax, qword [rdi + 0x4a08]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.14001f8d0
test eax, eax
js 0x14001f88f
cmp dword [0x1400c5dc4], 0x60000000
jb 0x14001f1cc
mov eax, 0x14c
cmp r14w, ax
mov r14, qword [rbp - 0x39]
jne 0x14001f1c2
mov eax, dword [rbx]
mov dword [r12 + r14 + 0x34], eax
jmp 0x14001f1d0
mov rax, qword [rbx]
mov qword [r12 + r14 + 0x30], rax
jmp 0x14001f1d0
mov r14, qword [rbp - 0x39]
mov esi, r15d
mov dword [rbp - 0x41], r15d
mov r12d, 2
cmp byte [rbx + 0x2f9], sil
je 0x14001f426
cmp dword [rdi], 1
jne 0x14001f29e
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.NtCreateSection
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.140020160
test eax, eax
jns 0x14001f23a
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_NtCreateSection:__Rrc
mov edx, eax
jmp 0x14001f883
mov eax, dword [rbp - 0x59]
mov r9d, 0xffffffff
mov rcx, qword [rbx + 0x300]
xor r8d, r8d
mov dword [rbp - 0x21], eax
mov rdx, r14
lea rax, [rbp - 0x59]
mov dword [rbp - 0x1d], 0xc
mov qword [rsp + 0x28], rax
lea rax, str.LdrLoadDll
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x20], rax
call fcn.140020160
test eax, eax
jns 0x14001f28e
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_LdrLoadDll:__Rrc
mov edx, eax
jmp 0x14001f883
mov eax, dword [rbp - 0x59]
mov esi, r12d
mov dword [rbp - 0x19], eax
mov dword [rbp - 0x15], 0xc
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.LdrInitializeThunk
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.140020160
test eax, eax
jns 0x14001f2e5
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_LdrInitializeThunk:__Rrc
mov edx, eax
jmp 0x14001f883
mov eax, esi
mov r9d, 0xffffffff
xor r8d, r8d
mov rdx, r14
inc esi
lea rcx, [rax*8]
mov eax, dword [rbp - 0x59]
mov dword [rbp + rcx - 0x21], eax
lea rax, [rbp - 0x59]
mov dword [rbp + rcx - 0x1d], 0xe
mov rcx, qword [rbx + 0x300]
mov qword [rsp + 0x28], rax
lea rax, str.KiUserApcDispatcher
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.140020160
test eax, eax
jns 0x14001f347
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_KiUserApcDispatcher:__Rrc
mov edx, eax
jmp 0x14001f883
mov eax, dword [rbp - 0x59]
lea rcx, [rsi*8]
mov dword [rbp + rcx - 0x21], eax
mov r9d, 0xffffffff
mov dword [rbp + rcx - 0x1d], 0xe
lea rax, [rbp - 0x59]
mov rcx, qword [rbx + 0x300]
xor r8d, r8d
mov qword [rsp + 0x28], rax
mov rdx, r14
lea rax, str.KiUserExceptionDispatcher
inc esi
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.140020160
test eax, eax
jns 0x14001f3a7
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_KiUserExceptionDispatcher:__Rrc
mov edx, eax
jmp 0x14001f883
mov eax, dword [rbp - 0x59]
lea rcx, [rsi*8]
inc eax
mov dword [rbp + rcx - 0x1d], 0xd
mov dword [rbp + rcx - 0x21], eax
inc esi
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.LdrSystemDllInitBlock
mov dword [rbp - 0x41], esi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
mov rdx, r14
call fcn.140020160
test eax, eax
js 0x14001f426
mov rax, qword [rbp - 0x59]
lea rdx, [rsi*8]
mov dword [rbp + rdx - 0x21], eax
mov eax, eax
movzx ecx, byte [rax + r14]
mov eax, ecx
cmp cl, 0x50
jae 0x14001f41d
mov eax, 0x50
inc esi
mov dword [rbp + rdx - 0x1d], eax
mov dword [rbp - 0x41], esi
cmp byte [rbx + 0x2fa], r15b
jne 0x14001f489
mov dword [rsp + 0x40], r12d
mov esi, r12d
mov r12d, dword [rbp - 0x51]
xor r8d, r8d
mov dword [rsp + 0x38], r15d
mov r9d, r12d
mov qword [rsp + 0x30], r15
mov rdx, rbx
mov dword [rsp + 0x28], 0xffffffff
mov rcx, rdi
mov qword [rsp + 0x20], r14
call fcn.14001cf90
test eax, eax
js 0x14001f88f
mov r9d, r12d
mov dword [rsp + 0x20], esi
xor r8d, r8d
mov rdx, rbx
mov rcx, rdi
call fcn.14001ce60
test eax, eax
jns 0x14001f492
jmp 0x14001f88f
mov r12d, dword [rbp - 0x51]
mov esi, 2
mov r11d, esi
mov dword [rbp - 0x51], esi
mov r13d, r15d
cmp dword [rbp - 0x4d], r15d
jbe 0x14001f778
lea r9, [rdi + 0x4790]
mov qword [rbp - 0x29], r9
mov r14d, dword [r9 + 4]
mov ecx, dword [rbp - 0x45]
mov r10d, dword [rbp - 0x49]
cmp r14d, r12d
jb 0x14001f81f
cmp r14d, ecx
ja 0x14001f81f
mov r8d, dword [rbp - 0x31]
lea eax, [r10 - 1]
add eax, r14d
not r8d
and eax, r8d
cmp eax, r14d
jne 0x14001f81f
mov r15d, dword [r9]
cmp r15d, ecx
ja 0x14001f7ed
lea eax, [r15 + r12]
cmp eax, ecx
ja 0x14001f7ed
mov eax, dword [rbp - 0x3d]
mov edx, dword [r9 + 8]
lea ecx, [rax - 1]
neg eax
add ecx, edx
and ecx, eax
cmp edx, ecx
jne 0x14001f7bd
lea eax, [r10 - 1]
add eax, r15d
and eax, r8d
mov dword [rbp - 0x59], eax
cmp edx, eax
ja 0x14001f7bd
cmp byte [rbx + 0x2fa], 0
je 0x14001f53e
test r13d, r13d
jne 0x14001f75f
mov eax, dword [r9 + 0x1c]
mov ecx, eax
and ecx, 0xe0000000
cmp ecx, 0x20000000
je 0x14001f5ec
cmp ecx, 0x40000000
je 0x14001f5f1
cmp ecx, 0x60000000
je 0x14001f5e5
cmp ecx, 0xc0000000
je 0x14001f59d
cmp ecx, 0xe0000000
jne 0x14001f77f
cmp byte [rbx + 0x2f8], 0
jne 0x14001f77f
cmp dword [rdi], 2
mov esi, 0x40
mov ecx, 0x20
cmovne esi, ecx
jmp 0x14001f5f1
mov eax, dword [rdi]
mov esi, 4
dec eax
cmp eax, 1
jbe 0x14001f5df
mov eax, r13d
lea r8d, [rsi + 4]
lea rdx, str..mrdata
lea rcx, [rax*4 + 0x8f1]
add rcx, rax
lea rcx, [rdi + rcx*8]
call fcn.140016af0
mov r9, qword [rbp - 0x29]
test eax, eax
mov r11d, dword [rbp - 0x51]
mov eax, 2
cmove esi, eax
mov eax, dword [r9 + 0x1c]
jmp 0x14001f5f1
mov esi, 0x20
jmp 0x14001f5f1
mov esi, 0x10
test eax, 0x20000020
je 0x14001f5fc
test eax, eax
jns 0x14001f626
and eax, 0xc0000000
cmp eax, 0x40000000
je 0x14001f626
mov eax, dword [rdi]
cmp eax, 1
jne 0x14001f61d
cmp byte [rbx + 0x2f8], 0
jne 0x14001f626
jmp 0x14001f725
cmp eax, 2
jne 0x14001f725
cmp r12d, r14d
jae 0x14001f674
cmp byte [rbx + 0x2fa], 0
jne 0x14001f674
mov dword [rsp + 0x40], r11d
lea eax, [r13 - 1]
xor edx, edx
mov ecx, r12d
add rcx, qword [rbp - 0x39]
mov r9d, r14d
mov dword [rsp + 0x38], edx
sub r9d, r12d
mov qword [rsp + 0x30], rdx
mov r8d, r12d
mov dword [rsp + 0x28], eax
mov rdx, rbx
mov qword [rsp + 0x20], rcx
mov rcx, rdi
call fcn.14001cf90
test eax, eax
js 0x14001f88f
mov ecx, dword [rbp - 0x41]
mov rax, r14
add rax, qword [rbp - 0x39]
mov r9d, r15d
mov dword [rsp + 0x40], esi
mov r8d, r14d
mov dword [rsp + 0x38], ecx
mov rdx, rbx
lea rcx, [rbp - 0x21]
mov qword [rsp + 0x30], rcx
mov rcx, rdi
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call fcn.14001cf90
test eax, eax
js 0x14001f88f
lea eax, [r13 + 1]
cmp eax, dword [rbp - 0x4d]
jae 0x14001f6d8
cmp byte [rbx + 0x2fa], 0
jne 0x14001f6d8
mov ecx, dword [rbp - 0x49]
mov r9d, ecx
neg r9d
lea eax, [rcx - 1]
add eax, r15d
and r9d, eax
jmp 0x14001f6e6
lea r9d, [r15 + 0xfff]
and r9d, 0xfffff000
cmp r9d, r15d
jbe 0x14001f725
xor eax, eax
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], eax
lea r8d, [r15 + r14]
mov qword [rsp + 0x30], rax
sub r9d, r15d
lea rax, [sym.VBoxNetDHCP.exe_g_abRTZero16K]
mov dword [rsp + 0x28], r13d
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.14001cf90
test eax, eax
js 0x14001f88f
lea r9d, [r15 + 0xfff]
mov dword [rsp + 0x20], esi
and r9d, 0xfffff000
mov r8d, r14d
mov rdx, rbx
mov rcx, rdi
call fcn.14001ce60
test eax, eax
js 0x14001f88f
mov r9, qword [rbp - 0x29]
mov r11d, esi
mov eax, dword [rbp - 0x59]
mov dword [rbp - 0x51], esi
mov esi, 2
add r9, 0x28
lea r12d, [rax + r14]
inc r13d
mov qword [rbp - 0x29], r9
cmp r13d, dword [rbp - 0x4d]
jb 0x14001f4b0
xor eax, eax
jmp 0x14001f88f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Unexpected_characteristics:__x__uSectRva_x__cbMap_x_
mov eax, r13d
mov edx, 0xffffe9f0
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r14d
lea rcx, [rax + rax*4]
mov eax, dword [rdi + rcx*8 + 0x47ac]
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r13d
call fcn.14001eba0
jmp 0x14001f88f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_file_size:__x__cbMap_x__uSectRva_x_
mov dword [rsp + 0x38], r14d
mov rcx, rdi
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], edx
mov edx, 0xffffea15
mov dword [rsp + 0x20], r13d
call fcn.14001eba0
jmp 0x14001f88f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_virtual_size:__x__uSectRva_x__uRva_x__cbImage_x_
mov dword [rsp + 0x40], ecx
mov edx, 0xffffea13
mov dword [rsp + 0x38], r12d
mov rcx, rdi
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r13d
call fcn.14001eba0
jmp 0x14001f88f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_virtual_address:__x__uRva_x__cbImage_x__cbSectAlign_x_
mov dword [rsp + 0x40], r10d
mov edx, 0xffffea14
mov dword [rsp + 0x38], ecx
mov rcx, rdi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r13d
call fcn.14001eba0
jmp 0x14001f88f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_FileAlignment_value:__x__cbSectAlign_x_
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov dword [rsp + 0x20], edx
mov edx, 0xffffea1c
call fcn.14001eba0
jmp 0x14001f88f
mov dword [rsp + 0x20], ecx
lea r8, str._s:_Unexpected_SectionAlignment_value:__x
mov edx, 0xffffea16
mov r9, qword [rbx + 0x10]
mov rcx, rdi
call fcn.14001eba0
mov r13, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xd8]
mov r12, qword [rsp + 0x120]
mov r15, qword [rsp + 0xd0]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140020ab0
add rsp, 0xe8
pop rdi
pop rsi
pop rbx
pop rbp
ret