Function at 0x14014f9e0
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x38
test byte [0x1402bb8d0], 1
jne 0x14014fc8a
lock bts qword [0x1402bb8d0], 0x1f
jae 0x14014fa28
test byte [0x1402bb8d0], 1
jne 0x14014fc8a
xor edx, edx
lea rcx, [0x1402bb8d0]
call sym.SystemInformer.exe_PhfWaitForEvent
cmp qword [0x1402c2f28], 0
setne al
add rsp, 0x38
ret
xor edx, edx
mov qword [rsp + 0x40], rbx
mov r8d, 0x800
lea rcx, str.comctl32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r10, rax
test rax, rax
jne 0x14014fa99
xor edx, edx
lea rcx, str.comctl32.dll
mov r8d, 0x200
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r10, rax
test rax, rax
jne 0x14014fa99
cmp dword [0x1402b5e88], 0x3e
jae 0x14014fc6d
xor r8d, r8d
lea rcx, str.comctl32.dll
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r10, rax
test rax, rax
je 0x14014fc6d
mov qword [rsp + 0x30], rdi
mov rcx, r10
mov edi, 0x5a4d
mov qword [0x1402c2f28], rcx
cmp word [r10], di
jne 0x14014fb0e
mov edx, dword ds:[r10 + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14014fb0e
cmp dword [rdx + r10], 0x4550
jne 0x14014fb0e
add rdx, 0x88
add rdx, r10
mov eax, dword [rdx]
test eax, eax
je 0x14014fb0e
cmp dword [rdx + 4], 0
je 0x14014fb0e
xor ebx, ebx
lea r8, [r10 + rax]
lea r9, str.CreateMRUListW
mov word [rsp + 0x20], bx
call fcn.140174840
mov rcx, qword [0x1402c2f28]
jmp 0x14014fb12
xor ebx, ebx
mov eax, ebx
mov qword [0x1402c2f50], rax
cmp word [rcx], di
jne 0x14014fb68
mov edx, dword [rcx + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14014fb68
cmp dword [rdx + rcx], 0x4550
jne 0x14014fb68
add rdx, 0x88
add rdx, rcx
mov eax, dword [rdx]
test eax, eax
je 0x14014fb68
cmp dword [rdx + 4], 0
je 0x14014fb68
lea r8, [rcx + rax]
mov word [rsp + 0x20], bx
lea r9, str.AddMRUStringW
call fcn.140174840
mov rcx, qword [0x1402c2f28]
jmp 0x14014fb6b
mov rax, rbx
mov qword [0x1402c2f70], rax
cmp word [rcx], di
jne 0x14014fbcb
mov edx, dword ds:[rcx + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14014fbcb
cmp dword [rdx + rcx], 0x4550
jne 0x14014fbcb
add rdx, 0x88
add rdx, rcx
mov eax, dword [rdx]
test eax, eax
je 0x14014fbcb
cmp dword [rdx + 4], 0
je 0x14014fbcb
lea r8, [rcx + rax]
mov word [rsp + 0x20], bx
lea r9, str.EnumMRUListW
call fcn.140174840
mov rcx, qword [0x1402c2f28]
mov rdx, rax
jmp 0x14014fbce
mov rdx, rbx
cmp word [rcx], di
mov rdi, qword [rsp + 0x30]
mov qword [0x1402c2e80], rdx
jne 0x14014fc3c
mov r8d, dword [rcx + 0x3c]
lea eax, [r8 - 1]
cmp eax, 0x7ffffffd
ja 0x14014fc3c
cmp dword [rcx + r8], 0x4550
lea rax, [rcx + r8]
jne 0x14014fc3c
mov r8d, dword [rax + 0x88]
test r8d, r8d
je 0x14014fc3c
cmp dword [rax + 0x8c], 0
je 0x14014fc3c
add r8, rcx
mov word [rsp + 0x20], bx
lea r9, str.FreeMRUList
lea rdx, [rax + 0x88]
call fcn.140174840
mov rcx, qword [0x1402c2f28]
mov rdx, qword [0x1402c2e80]
jmp 0x14014fc3f
mov rax, rbx
cmp qword [0x1402c2f50], 0
mov qword [0x1402c2f78], rax
je 0x14014fc65
cmp qword [0x1402c2f70], 0
je 0x14014fc65
test rdx, rdx
je 0x14014fc65
nop
test rax, rax
jne 0x14014fc76
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x14014fc6f
xor ebx, ebx
mov qword [0x1402c2f28], rbx
lea rcx, [0x1402bb8d0]
nop dword [rax]
call sym.SystemInformer.exe_PhfSetEvent
mov rbx, qword [rsp + 0x40]
cmp qword [0x1402c2f28], 0
setne al
add rsp, 0x38
ret