Function at 0x140053b00
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
mov qword [rsp + 0x28], rdx
mov r13, rcx
mov rax, qword [0x14013aa80]
xor rax, rsp
mov qword [rsp + 0x190], rax
mov rbp, rcx
sub rbp, 0xffffffffffffffc0
mov qword [rsp + 0x30], rcx
jae 0x140053bcf
mov rbx, qword [0x14013b988]
lea r14, [rsp + 0x150]
lea rsi, [rsp + 0x3c]
lea r15, [rsp + 0x48]
lea r12, [rsp + 0x40]
mov rdi, r13
mov qword [rsp + 0x20], rsi
mov rcx, rbx
mov rdx, rdi
mov r8, r15
mov r9, r12
call fcn.140053530
test al, al
je 0x140053dcc
mov r13, rbp
sub r13, rdi
mov eax, dword [rsp + 0x40]
sub eax, dword [rsp + 0x3c]
cmp r13, rax
cmovae r13, rax
mov rcx, qword [rsp + 0x48]
mov rdx, r14
mov r8, r13
call qword [0x14013b960]
test al, al
je 0x140053dcc
add rdi, r13
add r14, r13
cmp rbp, rdi
ja 0x140053b60
movzx eax, word [rsp + 0x150]
cmp eax, 0x5a4d
mov r13, qword [rsp + 0x30]
jne 0x140053dcc
movsxd rbx, dword [rsp + 0x18c]
add rbx, r13
mov rbp, rbx
sub rbp, 0xfffffffffffffef8
jae 0x140053c7a
mov r14, qword [0x14013b988]
lea r15, [rsp + 0x48]
lea rsi, [rsp + 0x38]
lea r12, [rsp + 0x40]
lea r13, [rsp + 0x3c]
nop word cs:[rax + rax]
mov qword [rsp + 0x20], rsi
mov rcx, r14
mov rdx, rbx
mov r8, r12
mov r9, r13
call fcn.140053530
test al, al
je 0x140053dcc
mov rdi, rbp
sub rdi, rbx
mov eax, dword [rsp + 0x3c]
sub eax, dword [rsp + 0x38]
cmp rdi, rax
cmovae rdi, rax
mov rcx, qword [rsp + 0x40]
mov rdx, r15
mov r8, rdi
call qword [0x14013b960]
test al, al
je 0x140053dcc
add rbx, rdi
add r15, rdi
cmp rbp, rbx
ja 0x140053c10
cmp dword [rsp + 0x48], 0x4550
mov r13, qword [rsp + 0x30]
jne 0x140053dcc
mov esi, dword [rsp + 0xd0]
test rsi, rsi
je 0x140053dcc
mov r14d, dword [rsp + 0xd4]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
lea r15, [rsi + r13]
lea rdi, [r15 + r14]
cmp rdi, r15
jbe 0x140053d4d
mov r12, qword [0x14013b988]
mov rbx, rbp
nop dword [rax]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov rcx, r12
mov rdx, r15
lea r8, [rsp + 0x40]
lea r9, [rsp + 0x3c]
call fcn.140053530
test al, al
je 0x140053dcc
mov r13, rdi
sub r13, r15
mov eax, dword [rsp + 0x3c]
sub eax, dword [rsp + 0x38]
cmp r13, rax
cmovae r13, rax
mov rcx, qword [rsp + 0x40]
mov rdx, rbx
mov r8, r13
call qword [0x14013b960]
test al, al
je 0x140053dcc
add r15, r13
add rbx, r13
cmp rdi, r15
ja 0x140053cc0
mov ebx, dword [rbp + 0x14]
test rbx, rbx
mov r15, qword [rsp + 0x28]
je 0x140053dc3
mov r13d, dword [rbp + 0x1c]
mov eax, dword [rbp + 0x24]
mov r12d, dword [rbp + 0x20]
mov rdi, rbp
sub rdi, rsi
add r13, rdi
add rax, rdi
add r12, rdi
jmp 0x140053d63
mov r12, rbp
sub r12, rsi
xor ebx, ebx
mov rax, r12
mov r13, r12
mov rdi, r12
mov r15, qword [rsp + 0x28]
cmp qword [r15 + 0x18], 0x10
mov qword [rsp + 0x28], rax
jb 0x140053d72
mov r15, qword [r15]
add r14, rbp
xor esi, esi
jmp 0x140053d88
inc rsi
cmp rbx, rsi
je 0x140053dc3
mov ecx, dword [r12 + rsi*4]
add rcx, rdi
cmp rbp, rcx
ja 0x140053d80
cmp r14, rcx
jb 0x140053d80
mov rdx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x140053d80
mov rax, qword [rsp + 0x28]
movzx eax, word [rax + rsi*2]
mov ebx, dword [r13 + rax*4]
add rbx, qword [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140053dce
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor ebx, ebx
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1400d2000
mov rax, rbx
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret