Function at 0x14001ed70
Capabilities:
Inspect section memory permissions
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rbx, qword [rdx + 0x300]
mov rdi, rdx
mov rsi, rcx
test rbx, rbx
je 0x14001ed48
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001ed48
mov r8, qword [rsi + 0x4a08]
xor eax, eax
cmp byte [rbx + 0x28], al
jne 0x14001ed2a
mov rdx, qword [rdx + 0x20]
xor r9d, r9d
mov qword [rsp + 0x28], r8
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0x20], rax
call fcn.14001a1f0
test eax, eax
setns cl
mov byte [rbx + 0x28], cl
test eax, eax
js 0x14001ed5c
mov rdx, rdi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
jmp 0x14001ed70
lea r8, str.pCacheEntry_hLdrMod_is_NIL__Impossible_
mov edx, 0xffffff9b
mov rcx, rsi
call fcn.14001ec20
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0xe8
mov rax, qword [0x1400bf848]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rax, qword [rdx + 0x300]
mov rdi, rcx
mov rbx, rdx
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [rax + 0x10]
lea rdx, [rdi + 0x3788]
mov rax, qword [rcx + 8]
call qword [case.0x14002098f.0]
test eax, eax
jns 0x14001eddf
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Error_reading_image_header:__Rrc
mov edx, 0xffffea09
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f92f
mov qword [rsp + 0xd0], r15
mov eax, 0x5a4d
xor r15d, r15d
cmp word [rdi + 0x3788], ax
jne 0x14001ee2c
mov r15d, dword [rdi + 0x37c4]
lea eax, [r15 - 0x40]
cmp eax, 0x1c0
jbe 0x14001ee2c
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_e_lfanew_value:__x
mov edx, 0xffffea18
mov dword [rsp + 0x20], r15d
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f927
mov qword [rsp + 0x120], r12
lea rsi, [rdi + 0x3788]
mov r12d, r15d
add rsi, r12
mov eax, dword [rsi]
cmp eax, 0x4550
je 0x14001ee70
mov r9, qword [rbx + 0x10]
lea r8, str._s:_No_PE_signature_at__x:__x
mov dword [rsp + 0x28], eax
mov edx, 0xffffea1a
mov rcx, rdi
mov dword [rsp + 0x20], r15d
call fcn.14001ec20
jmp 0x14001f91f
mov qword [rsp + 0xd8], r14
mov eax, 0x8664
movzx r14d, word [rsi + 4]
cmp r14w, ax
je 0x14001eeb3
cmp byte [rbx + 0x2fb], 0
jne 0x14001eeb3
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_machine:__x
mov edx, 0xffffe9f1
mov dword [rsp + 0x20], r14d
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f917
movzx ecx, word [rsi + 0x14]
mov r9d, 0x14c
cmp r14w, r9w
mov eax, 0xf0
mov edx, 0xe0
cmove eax, edx
cmp rcx, rax
je 0x14001eef4
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_optional_header_size:__x
mov dword [rsp + 0x20], ecx
mov edx, 0xffffea17
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f917
movzx ecx, word [rsi + 0x18]
cmp r14w, r9w
mov eax, 0x20b
mov edx, 0x10b
cmove eax, edx
cmp ecx, eax
je 0x14001ef2e
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_optional_header_magic:__x
mov dword [rsp + 0x20], ecx
mov edx, 0xffffea17
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f917
cmp r14w, r9w
jne 0x14001ef39
mov eax, dword [rsi + 0x74]
jmp 0x14001ef3f
mov eax, dword [rsi + 0x84]
cmp eax, 0x10
je 0x14001ef65
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_data_dirs:__x
mov edx, 0xffffea17
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f917
movzx eax, word [rsi + 6]
mov dword [rbp - 0x4d], eax
cmp eax, 0x10
jbe 0x14001ef92
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Too_many_section_headers:__x
mov edx, 0xffffe9f2
mov dword [rsp + 0x20], eax
mov rcx, rdi
call fcn.14001ec20
jmp 0x14001f917
lea r8, [rax + rax*4]
mov qword [rsp + 0xe0], r13
shl r8, 3
lea rcx, [rdi + 0x4788]
cmp r14w, r9w
mov edx, 0xf8
mov r13d, 0x108
cmovne edx, r13d
add rdx, rsi
call fcn.140016d90
mov eax, 0x14c
cmp r14w, ax
jne 0x14001efd4
mov eax, dword [rsi + 0x34]
jmp 0x14001efd8
mov rax, qword [rsi + 0x30]
test rax, 0xfff
je 0x14001eff6
mov qword [rsp + 0x20], rax
lea r8, str._s:_Invalid_image_base:__p
mov edx, 0xffffea1b
jmp 0x14001f903
mov edx, dword [rsi + 0x50]
mov ecx, dword [rbx + 8]
add ecx, 0xfff
mov dword [rbp - 0x45], edx
lea eax, [rdx + 0xfff]
xor ecx, eax
test ecx, 0xfffff000
je 0x14001f048
cmp byte [rbx + 0x2fa], 0
jne 0x14001f048
mov rax, qword [rbx + 8]
lea r8, str._s:_SizeOfImage___x__isnt_close_enough_to_the_mapping_size___x_
mov r9, qword [rbx + 0x10]
mov rcx, rdi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov edx, 0xffffea19
call fcn.14001ec20
jmp 0x14001f90f
mov rcx, qword [rbx + 0x300]
mov rcx, qword [rcx + 8]
call fcn.140020970
mov ecx, dword [rbp - 0x45]
cmp rcx, rax
je 0x14001f099
mov rcx, qword [rbx + 0x300]
mov rcx, qword [rcx + 8]
call fcn.140020970
mov r9, qword [rbx + 0x10]
lea r8, str._s:_SizeOfImage___x__differs_from_what_RTLdrSize_returns___zx_
mov qword [rsp + 0x28], rax
mov edx, 0xffffea19
mov eax, dword [rbp - 0x45]
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.14001ec20
jmp 0x14001f90f
mov ecx, dword [rsi + 0x38]
mov dword [rbp - 0x49], ecx
lea eax, [rcx - 1]
mov dword [rbp - 0x31], eax
test ecx, eax
jne 0x14001f8f3
cmp ecx, 0x1000
jb 0x14001f8f3
movzx r10d, byte [rbx + 0x2fa]
mov eax, 0x1000
test r10b, r10b
mov edx, 0x10000
cmovne eax, edx
cmp ecx, eax
ja 0x14001f8f3
mov edx, dword [rsi + 0x3c]
mov dword [rbp - 0x3d], edx
lea r8d, [rdx - 1]
test edx, r8d
jne 0x14001f8d1
lea eax, [rdx - 0x200]
cmp eax, 0xe00
ja 0x14001f8d1
cmp edx, ecx
ja 0x14001f8d1
mov r11d, dword [rbp - 0x4d]
mov eax, 0x14c
mov edx, dword [rsi + 0x54]
cmp r14w, ax
mov eax, 0xf8
cmove r13d, eax
lea ecx, [r11 + r11*4]
lea eax, [r15 + r13]
lea r9d, [rax + rcx*8]
cmp edx, r9d
jae 0x14001f15a
mov dword [rsp + 0x30], r11d
lea r8, str._s:_Headers_are_too_small:__x____x__cSections_x_
mov dword [rsp + 0x28], r9d
mov rcx, rdi
mov r9, qword [rbx + 0x10]
mov dword [rsp + 0x20], edx
mov edx, 0xffffea12
call fcn.14001ec20
jmp 0x14001f90f
mov eax, dword [rbp - 0x3d]
not r8d
dec eax
add eax, edx
and eax, r8d
mov dword [rbp - 0x51], eax
cmp eax, 0x1000
jbe 0x14001f19f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Headers_are_larger_than_expected:__x__x__expected_max__zx_
mov qword [rsp + 0x30], 0x1000
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov edx, 0xffffea12
call fcn.14001ec20
jmp 0x14001f90f
movzx eax, word [rsi + 0x16]
mov word [rbx + 0x2f4], ax
movzx eax, word [rsi + 0x5e]
mov word [rbx + 0x2f6], ax
test r10b, r10b
je 0x14001f1de
mov eax, dword [rdi + 0x4794]
sub qword [rbx], rax
mov eax, dword [rdi + 0x4794]
add qword [rbx + 8], rax
mov eax, dword [rdi + 0x4794]
mov r8, qword [rbx]
mov dword [rbx + 0x234], eax
jmp 0x14001f1e1
mov r8, qword [rbx]
mov rcx, qword [rbx + 0x300]
lea rax, [0x14001dd00]
xor r15d, r15d
lea rdx, [rbp - 0x39]
cmp dword [rdi], 2
mov r9d, r15d
cmovne r9, rax
mov rax, qword [rdi + 0x4a08]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.14001f950
test eax, eax
js 0x14001f90f
cmp dword [0x1400c1908], 0x60000000
jb 0x14001f24c
mov eax, 0x14c
cmp r14w, ax
mov r14, qword [rbp - 0x39]
jne 0x14001f242
mov eax, dword [rbx]
mov dword [r12 + r14 + 0x34], eax
jmp 0x14001f250
mov rax, qword [rbx]
mov qword [r12 + r14 + 0x30], rax
jmp 0x14001f250
mov r14, qword [rbp - 0x39]
mov esi, r15d
mov dword [rbp - 0x41], r15d
mov r12d, 2
cmp byte [rbx + 0x2f9], sil
je 0x14001f4a6
cmp dword [rdi], 1
jne 0x14001f31e
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.NtCreateSection
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400201e0
test eax, eax
jns 0x14001f2ba
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_NtCreateSection:__Rrc
mov edx, eax
jmp 0x14001f903
mov eax, dword [rbp - 0x59]
mov r9d, 0xffffffff
mov rcx, qword [rbx + 0x300]
xor r8d, r8d
mov dword [rbp - 0x21], eax
mov rdx, r14
lea rax, [rbp - 0x59]
mov dword [rbp - 0x1d], 0xc
mov qword [rsp + 0x28], rax
lea rax, str.LdrLoadDll
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x20], rax
call fcn.1400201e0
test eax, eax
jns 0x14001f30e
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_LdrLoadDll:__Rrc
mov edx, eax
jmp 0x14001f903
mov eax, dword [rbp - 0x59]
mov esi, r12d
mov dword [rbp - 0x19], eax
mov dword [rbp - 0x15], 0xc
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.LdrInitializeThunk
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400201e0
test eax, eax
jns 0x14001f365
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_LdrInitializeThunk:__Rrc
mov edx, eax
jmp 0x14001f903
mov eax, esi
mov r9d, 0xffffffff
xor r8d, r8d
mov rdx, r14
inc esi
lea rcx, [rax*8]
mov eax, dword [rbp - 0x59]
mov dword [rbp + rcx - 0x21], eax
lea rax, [rbp - 0x59]
mov dword [rbp + rcx - 0x1d], 0xe
mov rcx, qword [rbx + 0x300]
mov qword [rsp + 0x28], rax
lea rax, str.KiUserApcDispatcher
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400201e0
test eax, eax
jns 0x14001f3c7
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_KiUserApcDispatcher:__Rrc
mov edx, eax
jmp 0x14001f903
mov eax, dword [rbp - 0x59]
lea rcx, [rsi*8]
mov dword [rbp + rcx - 0x21], eax
mov r9d, 0xffffffff
mov dword [rbp + rcx - 0x1d], 0xe
lea rax, [rbp - 0x59]
mov rcx, qword [rbx + 0x300]
xor r8d, r8d
mov qword [rsp + 0x28], rax
mov rdx, r14
lea rax, str.KiUserExceptionDispatcher
inc esi
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
call fcn.1400201e0
test eax, eax
jns 0x14001f427
mov dword [rsp + 0x20], eax
lea r8, str._s:_Failed_to_find_KiUserExceptionDispatcher:__Rrc
mov edx, eax
jmp 0x14001f903
mov eax, dword [rbp - 0x59]
lea rcx, [rsi*8]
inc eax
mov dword [rbp + rcx - 0x1d], 0xd
mov dword [rbp + rcx - 0x21], eax
inc esi
mov rcx, qword [rbx + 0x300]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov r9d, 0xffffffff
lea rax, str.LdrSystemDllInitBlock
mov dword [rbp - 0x41], esi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
mov rdx, r14
call fcn.1400201e0
test eax, eax
js 0x14001f4a6
mov rax, qword [rbp - 0x59]
lea rdx, [rsi*8]
mov dword [rbp + rdx - 0x21], eax
mov eax, eax
movzx ecx, byte [rax + r14]
mov eax, ecx
cmp cl, 0x50
jae 0x14001f49d
mov eax, 0x50
inc esi
mov dword [rbp + rdx - 0x1d], eax
mov dword [rbp - 0x41], esi
cmp byte [rbx + 0x2fa], r15b
jne 0x14001f509
mov dword [rsp + 0x40], r12d
mov esi, r12d
mov r12d, dword [rbp - 0x51]
xor r8d, r8d
mov dword [rsp + 0x38], r15d
mov r9d, r12d
mov qword [rsp + 0x30], r15
mov rdx, rbx
mov dword [rsp + 0x28], 0xffffffff
mov rcx, rdi
mov qword [rsp + 0x20], r14
call fcn.14001d170
test eax, eax
js 0x14001f90f
mov r9d, r12d
mov dword [rsp + 0x20], esi
xor r8d, r8d
mov rdx, rbx
mov rcx, rdi
call fcn.14001d040
test eax, eax
jns 0x14001f512
jmp 0x14001f90f
mov r12d, dword [rbp - 0x51]
mov esi, 2
mov r11d, esi
mov dword [rbp - 0x51], esi
mov r13d, r15d
cmp dword [rbp - 0x4d], r15d
jbe 0x14001f7f8
lea r9, [rdi + 0x4790]
mov qword [rbp - 0x29], r9
mov r14d, dword [r9 + 4]
mov ecx, dword [rbp - 0x45]
mov r10d, dword [rbp - 0x49]
cmp r14d, r12d
jb 0x14001f89f
cmp r14d, ecx
ja 0x14001f89f
mov r8d, dword [rbp - 0x31]
lea eax, [r10 - 1]
add eax, r14d
not r8d
and eax, r8d
cmp eax, r14d
jne 0x14001f89f
mov r15d, dword [r9]
cmp r15d, ecx
ja 0x14001f86d
lea eax, [r15 + r12]
cmp eax, ecx
ja 0x14001f86d
mov eax, dword [rbp - 0x3d]
mov edx, dword [r9 + 8]
lea ecx, [rax - 1]
neg eax
add ecx, edx
and ecx, eax
cmp edx, ecx
jne 0x14001f83d
lea eax, [r10 - 1]
add eax, r15d
and eax, r8d
mov dword [rbp - 0x59], eax
cmp edx, eax
ja 0x14001f83d
cmp byte [rbx + 0x2fa], 0
je 0x14001f5be
test r13d, r13d
jne 0x14001f7df
mov eax, dword [r9 + 0x1c]
mov ecx, eax
and ecx, 0xe0000000
cmp ecx, 0x20000000
je 0x14001f66c
cmp ecx, 0x40000000
je 0x14001f671
cmp ecx, 0x60000000
je 0x14001f665
cmp ecx, 0xc0000000
je 0x14001f61d
cmp ecx, 0xe0000000
jne 0x14001f7ff
cmp byte [rbx + 0x2f8], 0
jne 0x14001f7ff
cmp dword [rdi], 2
mov esi, 0x40
mov ecx, 0x20
cmovne esi, ecx
jmp 0x14001f671
mov eax, dword [rdi]
mov esi, 4
dec eax
cmp eax, 1
jbe 0x14001f65f
mov eax, r13d
lea r8d, [rsi + 4]
lea rdx, str..mrdata
lea rcx, [rax*4 + 0x8f1]
add rcx, rax
lea rcx, [rdi + rcx*8]
call fcn.140016d30
mov r9, qword [rbp - 0x29]
test eax, eax
mov r11d, dword [rbp - 0x51]
mov eax, 2
cmove esi, eax
mov eax, dword [r9 + 0x1c]
jmp 0x14001f671
mov esi, 0x20
jmp 0x14001f671
mov esi, 0x10
test eax, 0x20000020
je 0x14001f67c
test eax, eax
jns 0x14001f6a6
and eax, 0xc0000000
cmp eax, 0x40000000
je 0x14001f6a6
mov eax, dword [rdi]
cmp eax, 1
jne 0x14001f69d
cmp byte [rbx + 0x2f8], 0
jne 0x14001f6a6
jmp 0x14001f7a5
cmp eax, 2
jne 0x14001f7a5
cmp r12d, r14d
jae 0x14001f6f4
cmp byte [rbx + 0x2fa], 0
jne 0x14001f6f4
mov dword [rsp + 0x40], r11d
lea eax, [r13 - 1]
xor edx, edx
mov ecx, r12d
add rcx, qword [rbp - 0x39]
mov r9d, r14d
mov dword [rsp + 0x38], edx
sub r9d, r12d
mov qword [rsp + 0x30], rdx
mov r8d, r12d
mov dword [rsp + 0x28], eax
mov rdx, rbx
mov qword [rsp + 0x20], rcx
mov rcx, rdi
call fcn.14001d170
test eax, eax
js 0x14001f90f
mov ecx, dword [rbp - 0x41]
mov rax, r14
add rax, qword [rbp - 0x39]
mov r9d, r15d
mov dword [rsp + 0x40], esi
mov r8d, r14d
mov dword [rsp + 0x38], ecx
mov rdx, rbx
lea rcx, [rbp - 0x21]
mov qword [rsp + 0x30], rcx
mov rcx, rdi
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call fcn.14001d170
test eax, eax
js 0x14001f90f
lea eax, [r13 + 1]
cmp eax, dword [rbp - 0x4d]
jae 0x14001f758
cmp byte [rbx + 0x2fa], 0
jne 0x14001f758
mov ecx, dword [rbp - 0x49]
mov r9d, ecx
neg r9d
lea eax, [rcx - 1]
add eax, r15d
and r9d, eax
jmp 0x14001f766
lea r9d, [r15 + 0xfff]
and r9d, 0xfffff000
cmp r9d, r15d
jbe 0x14001f7a5
xor eax, eax
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], eax
lea r8d, [r15 + r14]
mov qword [rsp + 0x30], rax
sub r9d, r15d
lea rax, [sym.VBoxHeadless.exe_g_abRTZero16K]
mov dword [rsp + 0x28], r13d
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.14001d170
test eax, eax
js 0x14001f90f
lea r9d, [r15 + 0xfff]
mov dword [rsp + 0x20], esi
and r9d, 0xfffff000
mov r8d, r14d
mov rdx, rbx
mov rcx, rdi
call fcn.14001d040
test eax, eax
js 0x14001f90f
mov r9, qword [rbp - 0x29]
mov r11d, esi
mov eax, dword [rbp - 0x59]
mov dword [rbp - 0x51], esi
mov esi, 2
add r9, 0x28
lea r12d, [rax + r14]
inc r13d
mov qword [rbp - 0x29], r9
cmp r13d, dword [rbp - 0x4d]
jb 0x14001f530
xor eax, eax
jmp 0x14001f90f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Unexpected_characteristics:__x__uSectRva_x__cbMap_x_
mov eax, r13d
mov edx, 0xffffe9f0
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r14d
lea rcx, [rax + rax*4]
mov eax, dword [rdi + rcx*8 + 0x47ac]
mov rcx, rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r13d
call fcn.14001ec20
jmp 0x14001f90f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_file_size:__x__cbMap_x__uSectRva_x_
mov dword [rsp + 0x38], r14d
mov rcx, rdi
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], edx
mov edx, 0xffffea15
mov dword [rsp + 0x20], r13d
call fcn.14001ec20
jmp 0x14001f90f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_virtual_size:__x__uSectRva_x__uRva_x__cbImage_x_
mov dword [rsp + 0x40], ecx
mov edx, 0xffffea13
mov dword [rsp + 0x38], r12d
mov rcx, rdi
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r13d
call fcn.14001ec20
jmp 0x14001f90f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Section__u:_Invalid_virtual_address:__x__uRva_x__cbImage_x__cbSectAlign_x_
mov dword [rsp + 0x40], r10d
mov edx, 0xffffea14
mov dword [rsp + 0x38], ecx
mov rcx, rdi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r13d
call fcn.14001ec20
jmp 0x14001f90f
mov r9, qword [rbx + 0x10]
lea r8, str._s:_Unexpected_FileAlignment_value:__x__cbSectAlign_x_
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov dword [rsp + 0x20], edx
mov edx, 0xffffea1c
call fcn.14001ec20
jmp 0x14001f90f
mov dword [rsp + 0x20], ecx
lea r8, str._s:_Unexpected_SectionAlignment_value:__x
mov edx, 0xffffea16
mov r9, qword [rbx + 0x10]
mov rcx, rdi
call fcn.14001ec20
mov r13, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xd8]
mov r12, qword [rsp + 0x120]
mov r15, qword [rsp + 0xd0]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140020b30
add rsp, 0xe8
pop rdi
pop rsi
pop rbx
pop rbp
ret