Function at 0x140001670
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x3a0]
sub rsp, 0x4a0
xor ebx, ebx
mov dword [rbp - 0x38], 4
mov dword [rbp + 0xd0], ebx
mov dword [rbp + 0x58], ebx
mov dword [rbp + 0x60], 4
mov rax, qword gs:[0x30]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0xc8], rcx
test rcx, rcx
je 0x14000228e
mov rax, qword [rcx + 0x18]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000228e
lea rdx, [rax + 0x20]
mov qword [rbp + 0x150], rdx
test rdx, rdx
je 0x14000228e
mov rdx, qword [rdx]
lea r8d, [rbx + 0x11]
mov ecx, 0x5c47fd14
mov rdx, qword [rdx + 0x50]
call section..text
or eax, 1
lea r8d, [rbx + 0x11]
mov dword [rbp + 0x40], eax
mov ecx, 0xa83c0f78
mov rax, qword [rbp + 0x150]
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov edx, 0xa7bfafe3
mov dword [rbp - 0x78], eax
mov r8d, 0x98b1179b
lea rcx, [rsp + 0x40]
call fcn.140001040
mov qword [rbp - 0x60], rax
test rax, rax
je 0x14000228e
mov edx, 0x7c883ca6
mov r8d, 0xb6c73689
mov rcx, rax
call fcn.1400010d0
mov qword [rbp + 0x110], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x5b49ff6c
mov r8d, 0xd5239415
call fcn.1400010d0
mov qword [rbp + 0x168], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0xa5d190f8
mov r8d, 0xc603f1c0
call fcn.1400010d0
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x14000229e
mov rcx, qword [rbp - 0x60]
mov edx, 0xe1b39464
mov r8d, 0xa05feeca
call fcn.1400010d0
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x64e11008
mov r8d, 0xa6c8257
call fcn.1400010d0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000228e
mov rax, qword [rbp + 0x150]
lea r8d, [rbx + 0x11]
mov ecx, 0x120d404a
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x50]
call section..text
mov rcx, qword [rbp - 0x60]
mov edx, 0x9275ca81
mov r8d, 0xffdede72
mov dword [rbp + 0x30], eax
call fcn.1400010d0
mov qword [rbp - 0x48], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x6bf4da0d
mov r8d, 0xe8213b77
call fcn.1400010d0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0xfb63bd40
mov r8d, 0x6ec057af
call fcn.1400010d0
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x14000228e
mov edx, 0x600f6f6f
mov dword [rsp + 0x20], 0x8c84e83e
mov r9d, 0xaf6f82b6
lea rcx, [rsp + 0x40]
mov r8d, 0xf69b1da9
call fcn.140001490
lea rcx, [rsp + 0x40]
call fcn.140001630
test eax, eax
je 0x14000228e
lea rcx, [rbp + 0xd4]
call qword [rbp + 0x110]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000228e
mov edx, 0xb200a9d3
mov dword [rsp + 0x20], 0xb0241d4b
mov r9d, 0x5887e820
lea rcx, [rsp + 0x40]
mov r8d, 0x93460829
call fcn.140001490
lea rcx, [rbp + 0xd4]
call qword [rbp + 0x110]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x7a47ad20
mov r8d, 0xf4bf516d
call fcn.1400010d0
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x6f6b74c4
mov r8d, 0xb6f5ddab
call fcn.1400010d0
mov qword [rbp + 0x140], rax
test rax, rax
je 0x14000228e
mov edx, 0xed3b75b3
mov dword [rsp + 0x20], 0x72c9ce68
mov r9d, 0xc7e705af
lea rcx, [rsp + 0x40]
mov r8d, 0x9db689c2
call fcn.140001490
lea rcx, [rbp + 0xd4]
call qword [rbp + 0x110]
mov qword [rbp + 0x108], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x97eea663
mov r8d, 0x70a223ba
call fcn.1400010d0
mov qword [rbp + 0x68], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x8ce27060
mov r8d, 0x7b5ff68b
call fcn.1400010d0
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp + 0x108]
mov edx, 0xa41e5873
mov r8d, 0x219679b8
call fcn.1400010d0
mov qword [rbp + 0x188], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x70]
mov edx, 0xfea8b439
mov r8d, 0xdb1c84
call fcn.1400010d0
mov qword [rbp + 0x98], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x2900c554
mov r8d, 0x2389513
call fcn.1400010d0
mov qword [rbp + 0x20], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rsp + 0x70]
mov edx, 0xfadecdae
mov r8d, 0x29a3e29b
call fcn.1400010d0
mov qword [rbp + 0x160], rax
test rax, rax
je 0x14000228e
mov rcx, qword [rbp - 0x60]
mov edx, 0x29ada39
mov r8d, 0xa31063e7
call fcn.1400010d0
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000228e
lea rdx, [rbp + 0x190]
mov ecx, 0x104
call qword [rbp + 0x68]
test eax, eax
je 0x14000228e
lea rcx, [rbp + 0x190]
call qword [rbp + 0x10]
test eax, eax
je 0x14000228e
lea edx, [rbx + 0x27]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x168]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14000228e
lea edx, [rbx + 0x20]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x168]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x14000228e
mov edx, 0xa4c749fd
mov dword [rsp + 0x20], 0x2bd53bf6
mov r9d, 0xccec208d
lea rcx, [rsp + 0x40]
mov r8d, 0x2c7a9c11
call fcn.140001490
lea rcx, [rbp + 0xd4]
call qword [rbp + 0x110]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14000228e
mov qword [rsp + 0x4b0], rsi
lea rcx, [rsp + 0x40]
mov edx, 0xcb235f2
mov qword [rsp + 0x4b8], rdi
mov r9d, 0x858baa8c
mov dword [rsp + 0x20], 0x6770391b
mov r8d, 0x66a9169a
call fcn.140001490
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0xd4]
add rdi, 0x10
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x120]
mov edx, 0xe26a9c2
mov r8d, 0x36bfd331
call fcn.1400010d0
mov qword [rbp + 0x180], rax
test rax, rax
je 0x14000227e
xor ecx, ecx
call qword [rbp + 0x188]
mov dword [rbp + 0x80], eax
test eax, eax
js 0x14000227e
mov edx, 0x7016d887
mov dword [rsp + 0x20], 0xbfe33e5
mov r9d, 0x97ab7500
lea rcx, [rsp + 0x40]
mov r8d, 0x33734706
call fcn.140001490
mov rdi, qword [rsp + 0x58]
lea rsi, [rbp + 0xd4]
add rdi, 0x20
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x120]
mov edx, 0x704aff69
mov r8d, 0x1116b314
call fcn.1400010d0
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14000227e
mov rcx, qword [rbp + 0x120]
mov edx, 0xe0ecc870
mov r8d, 0x8f925b4
call fcn.1400010d0
mov qword [rbp + 0x158], rax
test rax, rax
je 0x14000227e
mov rcx, qword [rbp + 0x120]
mov edx, 0x844cdd13
mov r8d, 0x13ef5805
call fcn.1400010d0
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x14000227e
mov rcx, qword [rbp + 0x120]
mov edx, 0x587517aa
mov r8d, 0xb035e021
call fcn.1400010d0
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14000227e
lea edx, [rbx + 0x13]
xor ecx, ecx
lea r9d, [rbx + 4]
mov r8d, 0x3000
call qword [rbp + 0x168]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000227e
mov edx, 0xdf1944b7
mov dword [rsp + 0x20], 0x9d015100
mov r9d, 0xf27de
lea rcx, [rsp + 0x40]
mov r8d, 0xed74e5d9
call fcn.140001490
mov rdi, qword [rsp + 0x58]
lea rsi, [rbp + 0xd4]
mov ecx, 0x10
mov edx, 0x3cce1b9e
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x120]
mov r8d, 0x287c1166
call fcn.1400010d0
mov qword [rbp - 0x20], rax
test rax, rax
je 0x14000227e
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call rax
mov qword [rbp + 0x100], rax
test rax, rax
je 0x14000227e
mov edx, 0xaa3dc5e4
mov dword [rsp + 0x20], 0xab486b7b
mov r9d, 0xdd4d7ed
lea rcx, [rsp + 0x40]
mov r8d, 0x48c3dfcc
call fcn.140001490
mov rdi, qword [rbp + 0x50]
lea rsi, [rbp + 0xd4]
add rdi, 0x10
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x60]
mov edx, 0x166e7169
mov r8d, 0x6d31752c
call fcn.1400010d0
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14000227e
mov edx, 0x1f7de0fa
mov dword [rsp + 0x20], 0x1cbf8206
mov r9d, 0xe24fa7ee
lea rcx, [rsp + 0x40]
mov r8d, 0x6e2a167b
call fcn.140001490
mov rdi, qword [rbp + 0x78]
lea rsi, [rbp + 0xd4]
mov ecx, 0x10
mov dword [rsp + 0x20], 0x383f4301
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov edx, 0xbc9d3715
mov r9d, 0xbce7084a
mov r8d, 0xa4147917
call fcn.140001490
mov rdi, qword [rbp + 0x50]
lea rsi, [rbp + 0xd4]
mov ecx, 0x10
mov edx, 0xcd591a19
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp + 0x120]
mov r8d, 0x69376c7d
call fcn.1400010d0
mov qword [rbp + 0x88], rax
test rax, rax
je 0x14000227e
mov edx, 0xd1eaabcf
mov dword [rsp + 0x20], 0x802c7a48
mov r9d, 0xc8362045
lea rcx, [rsp + 0x40]
mov r8d, 0x5c0c787e
call fcn.140001490
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0xd4]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x30]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x14000227e
mov edx, 0x720ece1d
mov dword [rsp + 0x20], 0xf0436d4d
mov r9d, 0xcd917376
lea rcx, [rsp + 0x40]
mov r8d, 0x4f165a77
call fcn.140001490
mov rdi, qword [rsp + 0x58]
lea rsi, [rbp + 0xd4]
add rdi, 0x10
mov dword [rsp + 0x20], 0x5f98d989
mov ecx, 0x10
mov edx, 0x6c85a99d
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
mov r9d, 0x278983b4
mov r8d, 0x2319ecf5
call fcn.140001490
mov rcx, qword [rbp + 0x130]
lea r8, [rbp + 0xd8]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0xd4]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xc0]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x14000227e
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rbp + 0x158]
test eax, eax
je 0x14000227e
lea rcx, [rsp + 0x40]
call fcn.140001520
mov rax, qword [rbp - 0x80]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14000227e
mov rcx, qword [rbp - 0x10]
lea rax, [rbp + 0xd0]
lea r9, [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r8, [rbp]
mov edx, 0x20000005
call qword [rbp + 0xf0]
test eax, eax
je 0x14000227e
mov edx, dword [rbp]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x168]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000227e
mov r8d, dword [rbp]
lea r9, [rbp + 0x178]
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [rbp + 0x180]
test eax, eax
je 0x14000227e
mov r8d, dword [rbp]
cmp dword [rbp + 0x178], r8d
jne 0x14000227e
mov rdx, qword [rbp - 0x68]
lea r9, [rbp + 0x128]
mov rcx, qword [rbp - 0x80]
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xe8]
test eax, eax
je 0x14000227e
mov rcx, qword [rbp - 0x10]
call qword [rbp + 0x88]
mov rcx, qword [rbp + 0x130]
call qword [rbp + 0x88]
mov edx, 0x11dacae5
mov dword [rsp + 0x20], 0xca6408bf
mov r9d, 0x9599e4d3
lea rcx, [rsp + 0x40]
mov r8d, 0x9404640f
call fcn.140001490
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0xd4]
mov qword [rsp + 0x38], rbx
mov r8d, 0x1bb
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x30]
mov qword [rbp + 0x170], rax
test rax, rax
je 0x14000227e
mov rcx, qword [rbp - 0x80]
call qword [rsp + 0x48]
mov rdx, qword [rbp + 0x78]
lea r8d, [rbx + 1]
xor ecx, ecx
call qword [rbp + 0x160]
mov dword [rbp + 0x18], eax
test eax, eax
js 0x14000227e
mov r8, qword [rbp + 0x50]
mov r9d, 0x1040
mov rdx, qword [rsp + 0x58]
xor ecx, ecx
call qword [rbp + 0x98]
mov edx, 0x3fc1f859
mov dword [rsp + 0x20], 0xc255ac9
mov r9d, 0xe98b577f
lea rcx, [rsp + 0x40]
mov r8d, 0xae16365c
call fcn.140001490
mov rcx, qword [rbp + 0x170]
lea r8, [rbp + 0xd8]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp + 0xd4]
mov dword [rsp + 0x30], 0x80800000
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [rbp + 0xc0]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000227e
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rbp + 0x158]
test eax, eax
je 0x14000227e
mov rcx, qword [rsp + 0x60]
lea rax, [rbp + 0x58]
lea r9, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 8]
mov edx, 0x20000005
call qword [rbp + 0xf0]
test eax, eax
je 0x14000227e
mov edx, dword [rbp - 8]
lea r9d, [rbx + 4]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x168]
mov qword [rbp + 0x48], rax
test rax, rax
je 0x14000227e
mov r8d, dword [rbp - 8]
lea r9, [rbp + 8]
mov rcx, qword [rsp + 0x60]
mov rdx, rax
call qword [rbp + 0x180]
test eax, eax
je 0x14000227e
mov eax, dword [rbp - 8]
cmp dword [rbp + 8], eax
jne 0x14000227e
mov rcx, qword [rbp + 0x100]
call qword [rbp + 0x88]
mov rcx, qword [rsp + 0x60]
call qword [rbp + 0x88]
mov rax, qword [rbp + 0x48]
mov ecx, 0x5a4d
mov qword [rbp + 0x118], rax
cmp word [rax], cx
jne 0x14000227e
mov rcx, qword [rbp + 0x170]
call qword [rbp + 0x88]
mov rax, qword [rbp + 0x118]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [rbp + 0x48]
mov qword [rbp + 0x70], rdx
cmp dword [rdx], 0x4550
jne 0x14000227e
mov eax, 0x8664
cmp word [rdx + 4], ax
jne 0x14000227e
mov eax, 0x20b
cmp word [rdx + 0x18], ax
jne 0x14000227e
mov edx, dword [rdx + 0x50]
lea r9d, [rbx + 0x40]
xor ecx, ecx
mov r8d, 0x3000
call qword [rbp + 0x168]
mov qword [rbp + 0x138], rax
test rax, rax
je 0x14000227e
mov rdi, qword [rbp + 0x70]
mov rsi, qword [rbp + 0x48]
movzx ecx, word [rdi + 0x14]
lea rdx, [rdi + 0x18]
add rdx, rcx
mov qword [rbp + 0xa0], rdx
mov ecx, dword [rdi + 0x54]
mov rdi, rax
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x40]
call fcn.140001200
lea rcx, [rsp + 0x40]
call fcn.140001280
lea rcx, [rsp + 0x40]
call fcn.140001370
lea rcx, [rsp + 0x40]
call fcn.140001420
mov rsi, qword [rsp + 0x4b0]
mov rdi, qword [rsp + 0x4b8]
mov rax, qword [rbp + 0xb8]
test rax, rax
je 0x14000229e
xor ecx, ecx
call rax
mov rbx, qword [rsp + 0x4c0]
xor eax, eax
add rsp, 0x4a0
pop rbp
ret