Function at 0x140003f30
Capabilities:
Parse pe header

Disassembly:
jmp 0x140003f30
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
sub rsp, 0x730
mov rdi, rsp
movabs rcx, 0x1cc
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x750]
mov qword [rsp + 0x640], 0xfffffffffffffffe
mov rax, qword [0x1402e9ae8]
xor rax, rsp
mov qword [rsp + 0x720], rax
mov qword [rsp + 0x38], 0
mov eax, 0x50
mov word [rsp + 0x58], ax
mov eax, VarBstrFromDate
mov word [rsp + 0x5a], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x5c], ax
mov eax, 0x4d
mov word [rsp + 0x5e], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x60], ax
mov eax, 0x63
mov word [rsp + 0x62], ax
mov eax, 0x77
mov word [rsp + 0x64], ax
mov eax, 0x49
mov word [rsp + 0x66], ax
mov eax, 0x63
mov word [rsp + 0x68], ax
mov eax, VarBstrFromDate
mov word [rsp + 0x6a], ax
mov eax, 0x43
mov word [rsp + 0x6c], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x6e], ax
mov eax, 0x59
mov word [rsp + 0x70], ax
xor eax, eax
mov word [rsp + 0x72], ax
mov eax, 0x79
mov word [rsp + 0x98], ax
mov eax, 0x4a
mov word [rsp + 0x9a], ax
mov eax, 0x79
mov word [rsp + 0x9c], ax
mov eax, 0x79
mov word [rsp + 0x9e], ax
mov eax, VarBstrFromDate
mov word [rsp + 0xa0], ax
xor eax, eax
mov word [rsp + 0xa2], ax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x2d0], rax
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x308], rax
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x2d0]
call fcn.1400016b8
mov qword [rsp + 0x648], rax
mov rax, qword [rsp + 0x648]
mov qword [rsp + 0x650], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [rsp + 0x308]
call fcn.1400016b8
mov qword [rsp + 0x658], rax
mov r8, qword [rsp + 0x650]
mov rdx, qword [rsp + 0x658]
lea rcx, [rsp + 0xc8]
call fcn.140001235
nop
mov eax, 0x53
mov word [rsp + 0x118], ax
mov eax, 0x43
mov word [rsp + 0x11a], ax
mov eax, 0x55
mov word [rsp + 0x11c], ax
mov eax, 0x52
mov word [rsp + 0x11e], ax
mov eax, 0x45
mov word [rsp + 0x120], ax
mov eax, 0x50
mov word [rsp + 0x122], ax
mov eax, 0x46
mov word [rsp + 0x124], ax
mov eax, 0x45
mov word [rsp + 0x126], ax
xor eax, eax
mov word [rsp + 0x128], ax
mov eax, 0x41
mov word [rsp + 0x148], ax
mov eax, 0x4f
mov word [rsp + reloc.OLEAUT32.dll_VarUdateFromDate], ax
mov eax, 0x50
mov word [rsp + 0x14c], ax
mov eax, 0x59
mov word [rsp + 0x14e], ax
mov eax, 0x69
mov word [rsp + 0x150], ax
mov eax, 0x50
mov word [rsp + 0x152], ax
mov eax, 0x4f
mov word [rsp + 0x154], ax
xor eax, eax
mov word [rsp + 0x156], ax
call fcn.140001032
lea rax, [rsp + 0x348]
mov qword [rsp + 0x378], rax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x3b0], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x340], rax
lea rdx, [rsp + 0x148]
mov rcx, qword [rsp + 0x378]
call fcn.1400016b8
mov qword [rsp + 0x660], rax
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0x668], rax
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x3b0]
call fcn.1400016b8
mov qword [rsp + 0x670], rax
mov r8, qword [rsp + 0x668]
mov rdx, qword [rsp + 0x670]
lea rcx, [rsp + 0x3b8]
call fcn.140001235
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0x680], rax
mov rcx, qword [rsp + 0x680]
call fcn.1400012a8
mov rbx, rax
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x340]
call fcn.14000118b
mov qword [rsp + 0x688], rax
mov rdx, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x758]
call fcn.1400012e4
mov r11, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rbx
mov rcx, 0xffffffff80000001
call r11
nop
lea rcx, [rsp + 0x3b8]
call fcn.1400013d9
cmp qword [rsp + 0x38], 0
jne 0x140004306
lea rcx, [rsp + 0xc8]
call fcn.1400013d9
nop
mov rcx, qword [rsp + 0x750]
call fcn.1400015a5
jmp 0x14000493d
mov eax, 0x51
mov word [rsp + 0x178], ax
mov eax, 0x69
mov word [rsp + 0x17a], ax
mov eax, 0x61
mov word [rsp + 0x17c], ax
mov eax, 0x54
mov word [rsp + 0x17e], ax
mov eax, 0x6b
mov word [rsp + 0x180], ax
mov eax, 0x6c
mov word [rsp + 0x182], ax
mov eax, 0x55
mov word [rsp + 0x184], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x186], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x188], ax
mov eax, 0x76
mov word [rsp + 0x18a], ax
mov eax, 0x6b
mov word [rsp + 0x18c], ax
mov eax, 0x57
mov word [rsp + 0x18e], ax
mov eax, 0x77
mov word [rsp + 0x190], ax
mov eax, 0x45
mov word [rsp + 0x192], ax
xor eax, eax
mov word [rsp + 0x194], ax
mov eax, VarDateFromDisp
mov word [rsp + 0x1b8], ax
mov eax, 0x45
mov word [rsp + 0x1ba], ax
mov eax, 0x75
mov word [rsp + 0x1bc], ax
mov eax, 0x62
mov word [rsp + 0x1be], ax
mov eax, 0x47
mov word [rsp + 0x1c0], ax
mov eax, 0x53
mov word [rsp + 0x1c2], ax
xor eax, eax
mov word [rsp + 0x1c4], ax
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x418], rax
lea rax, [rsp + 0x420]
mov qword [rsp + 0x450], rax
lea rdx, [rsp + 0x1b8]
mov rcx, qword [rsp + 0x418]
call fcn.1400016b8
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x698], rax
lea rdx, [rsp + 0x178]
mov rcx, qword [rsp + 0x450]
call fcn.1400016b8
mov qword [rsp + 0x6a0], rax
mov r8, qword [rsp + 0x698]
mov rdx, qword [rsp + 0x6a0]
lea rcx, [rsp + 0x458]
call fcn.140001235
mov qword [rsp + 0x6a8], rax
mov rax, qword [rsp + 0x6a8]
mov qword [rsp + 0x6b0], rax
mov rdx, qword [rsp + 0x6b0]
lea rcx, [rsp + 0xc8]
call fcn.140001663
nop
lea rcx, [rsp + 0x458]
call fcn.1400013d9
mov eax, VarBstrFromDate
mov word [rsp + 0x1e8], ax
mov eax, reloc.OLEAUT32.dll_VarCyFromDisp
mov word [rsp + 0x1ea], ax
mov eax, 0x49
mov word [rsp + 0x1ec], ax
mov eax, 0x76
mov word [rsp + 0x1ee], ax
mov eax, 0x69
mov word [rsp + 0x1f0], ax
mov eax, 0x79
mov word [rsp + 0x1f2], ax
xor eax, eax
mov word [rsp + 0x1f4], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x218], ax
mov eax, 0x73
mov word [rsp + 0x21a], ax
mov eax, 0x46
mov word [rsp + 0x21c], ax
mov eax, 0x56
mov word [rsp + 0x21e], ax
mov eax, VarBstrFromDate
mov word [rsp + 0x220], ax
mov eax, 0x59
mov word [rsp + 0x222], ax
xor eax, eax
mov word [rsp + 0x224], ax
call fcn.140001032
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x4f8], rax
lea rax, [rsp + 0x500]
mov qword [rsp + 0x530], rax
lea rax, [rsp + 0x490]
mov qword [rsp + 0x4c0], rax
mov rcx, qword [rsp + 0x750]
call fcn.1400012d5
mov rsi, rax
xor edx, edx
mov rcx, qword [rsp + 0x750]
call fcn.1400016a9
mov rdi, rax
lea rdx, [rsp + 0x218]
mov rcx, qword [rsp + 0x4f8]
call fcn.1400016b8
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x6c0], rax
lea rdx, [rsp + 0x1e8]
mov rcx, qword [rsp + 0x530]
call fcn.1400016b8
mov qword [rsp + 0x6c8], rax
mov r8, qword [rsp + 0x6c0]
mov rdx, qword [rsp + 0x6c8]
lea rcx, [rsp + 0x538]
call fcn.140001235
mov qword [rsp + 0x6d0], rax
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x6d8], rax
mov rcx, qword [rsp + 0x6d8]
call fcn.1400012a8
mov rbx, rax
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x4c0]
call fcn.14000118b
mov qword [rsp + 0x6e0], rax
mov rdx, qword [rsp + 0x6e0]
mov rcx, qword [rsp + 0x758]
call fcn.1400012e4
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rsp + 0x38]
call rax
test eax, eax
je 0x1400046d5
mov dword [rsp + 0x6e8], 1
jmp 0x1400046e0
mov dword [rsp + 0x6e8], 0
movzx eax, byte [rsp + 0x6e8]
mov byte [rsp + 0x488], al
lea rcx, [rsp + 0x538]
call fcn.1400013d9
movzx r11d, byte [rsp + 0x488]
test r11d, r11d
je 0x14000472a
lea rcx, [rsp + 0xc8]
call fcn.1400013d9
nop
mov rcx, qword [rsp + 0x750]
call fcn.1400015a5
jmp 0x14000493d
mov eax, 0x54
mov word [rsp + 0x248], ax
mov eax, reloc.OLEAUT32.dll_VarCyFromDisp
mov word [rsp + 0x24a], ax
mov eax, reloc.OLEAUT32.dll_VarCyFromDisp
mov word [rsp + 0x24c], ax
mov eax, 0x57
mov word [rsp + 0x24e], ax
mov eax, VarBstrFromDate
mov word [rsp + 0x250], ax
mov eax, reloc.OLEAUT32.dll_VarBstrFromDisp
mov word [rsp + 0x252], ax
mov eax, 0x74
mov word [rsp + 0x254], ax
mov eax, 0x79
mov word [rsp + 0x256], ax
mov eax, 0x4d
mov word [rsp + 0x258], ax
mov eax, reloc.OLEAUT32.dll_VarCyFromDisp
mov word [rsp + 0x25a], ax
mov eax, 0x7a
mov word [rsp + 0x25c], ax
xor eax, eax
mov word [rsp + 0x25e], ax
mov eax, 0x63
mov word [rsp + 0x278], ax
mov eax, VarCyFromDisp
mov word [rsp + 0x27a], ax
mov eax, 0x42
mov word [rsp + 0x27c], ax
mov eax, 0x55
mov word [rsp + 0x27e], ax
xor eax, eax
mov word [rsp + 0x280], ax
lea rax, [rsp + 0x568]
mov qword [rsp + 0x598], rax
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x5d0], rax
lea rdx, [rsp + 0x278]
mov rcx, qword [rsp + 0x598]
call fcn.1400016b8
mov qword [rsp + 0x6f0], rax
mov rax, qword [rsp + 0x6f0]
mov qword [rsp + 0x6f8], rax
lea rdx, [rsp + 0x248]
mov rcx, qword [rsp + 0x5d0]
call fcn.1400016b8
mov qword [rsp + 0x700], rax
mov r8, qword [rsp + 0x6f8]
mov rdx, qword [rsp + 0x700]
lea rcx, [rsp + 0x5d8]
call fcn.140001235
mov qword [rsp + 0x708], rax
mov rax, qword [rsp + 0x708]
mov qword [rsp + 0x710], rax
mov rdx, qword [rsp + 0x710]
lea rcx, [rsp + 0xc8]
call fcn.140001663
nop
lea rcx, [rsp + 0x5d8]
call fcn.1400013d9
call fcn.140001032
lea rax, [rsp + 0x608]
mov qword [rsp + 0x638], rax
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x638]
call fcn.14000118b
mov qword [rsp + 0x718], rax
mov rdx, qword [rsp + 0x718]
mov rcx, qword [rsp + 0x758]
call fcn.1400012e4
mov rcx, qword [rsp + 0x38]
call rax
nop
lea rcx, [rsp + 0xc8]
call fcn.1400013d9
nop
mov rcx, qword [rsp + 0x750]
call fcn.1400015a5
jmp 0x14000493d
mov rcx, rsp
lea rdx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call fcn.140153d00
mov rcx, qword [rsp + 0x720]
xor rcx, rsp
call fcn.140153ce0
add rsp, 0x730
pop rdi
pop rsi
pop rbx
ret