Function at 0x140010335
Capabilities:
Authenticate hmac
Parse pe header

Disassembly:
push rax
push rdx
pushfq
add rdx, r15
popfq
pop rdx
pushf
push rdi
pushfq
sub rdi, r9
popfq
pop rdi
mov eax, 0x5a3b0d11
pushf
not eax
add eax, 0xe9c5696d
xor eax, 0xd0ff283b
rol eax, 0xd4
popf
push r9
pushfq
add r9, 0xf
popfq
pop r9
pushf
push r11
pushfq
add r11, 0xdb
popfq
pop r11
not eax
push r14
pushfq
sub r14, r9
popfq
pop r14
add eax, 0xf816967a
push r9
pushfq
add r9, rdx
popfq
pop r9
xor eax, 0xb1490aeb
push r8
pushfq
sub r8, r9
popfq
pop r8
rol eax, 0xb5
push rax
pushfq
add rax, 0xb8
popfq
pop rax
popf
push r9
pushfq
sub r9, rdx
popfq
pop r9
pushf
push r8
pushfq
sub r8, 0xed
popfq
pop r8
not eax
push rbx
pushfq
sub rbx, r15
popfq
pop rbx
add eax, 0xb47b9f2c
push rbx
pushfq
sub rbx, rsi
popfq
pop rbx
xor eax, 0xfb5b33f9
push rbx
pushfq
add rbx, 0x39
popfq
pop rbx
rol eax, 0x22
push rdi
pushfq
sub rdi, 0x19
popfq
pop rdi
popf
push r9
pushfq
add r9, rdx
popfq
pop r9
cmp eax, 4
push r10
pushfq
add r10, 0x4e
popfq
pop r10
jne 0x14001043b
push r12
pushfq
sub r12, 0x2d
popfq
pop r12
popf
push rdx
pushfq
sub rdx, 0x62
popfq
pop rdx
pop rax
push r11
pushfq
sub r11, 0x3a
popfq
pop r11
jmp 0x140010c20
cmp eax, 0
push r8
pushfq
add r8, rdi
popfq
pop r8
jne 0x14001047d
push r8
pushfq
add r8, 0x79
popfq
pop r8
popf
push r14
pushfq
sub r14, rax
popfq
pop r14
pop rax
push r13
pushfq
add r13, 0x48
popfq
pop r13
jmp 0x140010665
cmp eax, 3
push r9
pushfq
add r9, rdx
popfq
pop r9
jne 0x1400104b9
push r8
pushfq
add r8, 0xe
popfq
pop r8
popf
push r14
pushfq
sub r14, rcx
popfq
pop r14
pop rax
push rsi
pushfq
sub rsi, rcx
popfq
pop rsi
jmp 0x140010b7a
cmp eax, 1
push rax
pushfq
sub rax, 0x30
popfq
pop rax
jne 0x1400104f8
push r11
pushfq
sub r11, 0xee
popfq
pop r11
popf
push rax
pushfq
sub rax, r11
popfq
pop rax
pop rax
push r13
pushfq
sub r13, rdi
popfq
pop r13
jmp 0x1400107f9
cmp eax, 5
push r14
pushfq
add r14, rbx
popfq
pop r14
jne 0x14001053b
push r13
pushfq
add r13, r15
popfq
pop r13
popf
push rsi
pushfq
add rsi, 0xf9
popfq
pop rsi
pop rax
push r8
pushfq
add r8, 0xfe
popfq
pop r8
jmp 0x140010d79
cmp eax, 7
push rbx
pushfq
sub rbx, 0x6a
popfq
pop rbx
jne 0x140010573
push rdx
pushfq
add rdx, r11
popfq
pop rdx
popf
push r13
pushfq
sub r13, rsi
popfq
pop r13
pop rax
push rcx
pushfq
sub rcx, 0x41
popfq
pop rcx
jmp 0x14001127a
cmp eax, 6
push r8
pushfq
add r8, 0x56
popfq
pop r8
jne 0x1400105b1
push rsi
pushfq
sub rsi, r15
popfq
pop rsi
popf
push r13
pushfq
add r13, rdx
popfq
pop r13
pop rax
push rbx
pushfq
add rbx, 0xd1
popfq
pop rbx
jmp 0x140010e73
cmp eax, 2
push r8
pushfq
sub r8, 0xe1
popfq
pop r8
jne 0x1400105ef
push rcx
pushfq
add rcx, rdx
popfq
pop rcx
popf
push r11
pushfq
sub r11, rbx
popfq
pop r11
pop rax
push rax
pushfq
sub rax, 0xef
popfq
pop rax
jmp 0x140010934
cmp eax, 9
push rbx
pushfq
sub rbx, 0x34
popfq
pop rbx
jne 0x14001062b
push r12
pushfq
sub r12, 0x50
popfq
pop r12
popf
push r13
pushfq
sub r13, 0x45
popfq
pop r13
pop rax
push r15
pushfq
add r15, 0x15
popfq
pop r15
jmp 0x140011458
cmp eax, 8
push r8
pushfq
sub r8, r13
popfq
pop r8
jne 0x140010665
push r9
pushfq
sub r9, r14
popfq
pop r9
popf
push r8
pushfq
sub r8, rdi
popfq
pop r8
pop rax
push rsi
pushfq
sub rsi, r14
popfq
pop rsi
jmp 0x140011366
mov qword [rsp + 8], rcx
push r13
pushfq
sub r13, 0xa3
popfq
pop r13
sub rsp, 0x58
push r11
pushfq
sub r11, 4
popfq
pop r11
mov rax, qword [rsp + 0x60]
push r15
pushfq
sub r15, rbx
popfq
pop r15
mov qword [rsp + 0x28], rax
push r14
pushfq
sub r14, r8
popfq
pop r14
mov rax, qword [rsp + 0x28]
push rbx
pushfq
add rbx, rdi
popfq
pop rbx
movzx eax, word [rax]
push rdi
pushfq
sub rdi, 0xec
popfq
pop rdi
cmp eax, 0x5a4d
push r15
pushfq
sub r15, 0xf4
popfq
pop r15
je 0x14001076c
push rdx
pushfq
add rdx, 0x41
popfq
pop rdx
push rax
push rax
pushfq
add rax, r13
popfq
pop rax
pushf
push r11
pushfq
sub r11, r12
popfq
pop r11
mov eax, 0x5a68f90d
pushf
not eax
add eax, 0xb2cb4f93
xor eax, 0xa91c8f4e
rol eax, 0x3c
popf
push rcx
pushfq
sub rcx, rdx
popfq
pop rcx
pushf
push r13
pushfq
add r13, 0xac
popfq
pop r13
not eax
push rdi
pushfq
sub rdi, r15
popfq
pop rdi
add eax, 0x9b0d5ce9
push r8
pushfq
sub r8, 0x93
popfq
pop r8
xor eax, 0xdbfd6f4c
push rsi
pushfq
sub rsi, rdx
popfq
pop rsi
rol eax, 0x8d
push r15
pushfq
sub r15, r14
popfq
pop r15
popf
push rcx
pushfq
add rcx, 0xb5
popfq
pop rcx
jmp 0x1400103fd
push rax
push r10
pushfq
sub r10, r12
popfq
pop r10
pushf
push r11
pushfq
sub r11, rbx
popfq
pop r11
mov eax, 0x77dd5df7
pushf
not eax
add eax, 0xbbf1d2d2
xor eax, 0xf8979e0b
rol eax, 0xd8
popf
push r11
pushfq
sub r11, rcx
popfq
pop r11
pushf
push r13
pushfq
sub r13, r10
popfq
pop r13
not eax
push rcx
pushfq
add rcx, rbx
popfq
pop rcx
add eax, 0xc2c354b5
push r11
pushfq
sub r11, 0xf7
popfq
pop r11
xor eax, 0xf106d04a
push rbx
pushfq
add rbx, 0x52
popfq
pop rbx
rol eax, 0x7a
push rcx
pushfq
add rcx, r12
popfq
pop rcx
popf
push rdx
pushfq
add rdx, 0x48
popfq
pop rdx
jmp 0x1400103fd
xor al, al
push rbx
pushfq
add rbx, 0x6e
popfq
pop rbx
jmp 0x140011458
mov rax, qword [rsp + 0x28]
push r8
pushfq
sub r8, rsi
popfq
pop r8
movsxd rax, dword [rax + 0x3c]
push rcx
pushfq
sub rcx, 0xb2
popfq
pop rcx
mov rcx, qword [rsp + 0x60]
push r13
pushfq
add r13, 0x95
popfq
pop r13
push rax
not rax
sub rcx, rax
pop rax
sub rcx, 1
push rsi
pushfq
sub rsi, rcx
popfq
pop rsi
mov rax, rcx
push rdi
pushfq
sub rdi, r12
popfq
pop rdi
mov qword [rsp + 0x20], rax
push r8
pushfq
add r8, rdx
popfq
pop r8
mov rax, qword [rsp + 0x20]
push r14
pushfq
sub r14, rdi
popfq
pop r14
cmp dword [rax], 0x4550
push rdx
pushfq
sub rdx, 0x62
popfq
pop rdx
je 0x140010a52
push rdx
pushfq
add rdx, r10
popfq
pop rdx
push rax
push r9
pushfq
add r9, 0xbc
popfq
pop r9
pushf
push r11
pushfq
add r11, r14
popfq
pop r11
mov eax, 0x48371369
pushf
not eax
add eax, 0x92f9dc6f
xor eax, 0xe58d46d9
rol eax, 0x9e
popf
push r13
pushfq
sub r13, rdi
popfq
pop r13
pushf
push r10
pushfq
add r10, r8
popfq
pop r10
not eax
push r10
pushfq
add r10, 0x92
popfq
pop r10
add eax, 0xe52da40a
push r9
pushfq
sub r9, 0xc1
popfq
pop r9
xor eax, 0xb959c192
push r11
pushfq
add r11, 0x51
popfq
pop r11
rol eax, 0x79
push r12
pushfq
add r12, rax
popfq
pop r12
popf
push r8
pushfq
add r8, rsi
popfq
pop r8
jmp 0x1400103fd
push rax
push r8
pushfq
add r8, rdi
popfq
pop r8
pushf
push rbx
pushfq
sub rbx, r11
popfq
pop rbx
mov eax, 0xa9d55a73
pushf
not eax
add eax, 0xb919f90f
xor eax, 0xad818e7d
rol eax, 0x74
popf
push rbx
pushfq
sub rbx, rsi
popfq
pop rbx
pushf
push rcx
pushfq
sub rcx, 0xb9
popfq
pop rcx
not eax
push r12
pushfq
add r12, rdx
popfq
pop r12
add eax, 0xdde1921a
push r10
pushfq
sub r10, rdx
popfq
pop r10
xor eax, 0xc41ad9de
push r10
pushfq
add r10, 0x80
popfq
pop r10
rol eax, 0x25
push rax
pushfq
add rax, 0xd2
popfq
pop rax
popf
push r9
pushfq
sub r9, r12
popfq
pop r9
pushf
push r15
pushfq
add r15, 0xe0
popfq
pop r15
not eax
push r13
pushfq
add r13, 0x36
popfq
pop r13
add eax, 0xc54a99d8
push rbx
pushfq
add rbx, 0xb9
popfq
pop rbx
xor eax, 0xd08dfe96
push rdi
pushfq
add rdi, r12
popfq
pop rdi
rol eax, 0x99
push r15
pushfq
sub r15, r10
popfq
pop r15
popf
push r13
pushfq
add r13, 0x92
popfq
pop r13
pushf
push rax
pushfq
add rax, 0x1d
popfq
pop rax
not eax
push r10
pushfq
sub r10, rdi
popfq
pop r10
add eax, 0xf0a5b597
push rbx
pushfq
add rbx, r10
popfq
pop rbx
xor eax, 0xef9777d3
push rdx
pushfq
sub rdx, r11
popfq
pop rdx
rol eax, 0xfe
push rdi
pushfq
sub rdi, 0x65
popfq
pop rdi
popf
push r12
pushfq
sub r12, 0xfa
popfq
pop r12
jmp 0x1400103fd
xor al, al
push r13
pushfq
sub r13, 0x5c
popfq
pop r13
jmp 0x140011458
mov rax, qword [rsp + 0x20]
push r12
pushfq
add r12, 0xf1
popfq
pop r12
movzx eax, word [rax + 4]
push rbx
pushfq
add rbx, 0x7f
popfq
pop rbx
cmp eax, 0x8664
push r8
pushfq
sub r8, r9
popfq
pop r8
je 0x140010ceb
push r10
pushfq
sub r10, 0x9b
popfq
pop r10
push rax
push rcx
pushfq
sub rcx, rsi
popfq
pop rcx
pushf
push r12
pushfq
sub r12, 0xb1
popfq
pop r12
mov eax, 0x9ad400b7
pushf
not eax
add eax, 0x82bbb48b
xor eax, 0xc194e688
rol eax, 0xf
popf
push rcx
pushfq
sub rcx, r11
popfq
pop rcx
pushf
push r13
pushfq
sub r13, 0x34
popfq
pop r13
not eax
push r8
pushfq
add r8, r13
popfq
pop r8
add eax, 0x8cb8ffb0
push r11
pushfq
sub r11, r15
popfq
pop r11
xor eax, 0xe2236c76
push r9
pushfq
sub r9, r11
popfq
pop r9
rol eax, 0xcd
push r14
pushfq
add r14, rdi
popfq
pop r14
popf
push rsi
pushfq
add rsi, 0x39
popfq
pop rsi
jmp 0x1400103fd
push rax
push r15
pushfq
add r15, rdx
popfq
pop r15
pushf
push rax
pushfq
sub rax, r10
popfq
pop rax
mov eax, 0x139c7434
pushf
not eax
add eax, 0xf1ad7cd0
xor eax, 0xb97e6d8d
rol eax, 0xc6
popf
push rax
pushfq
sub rax, 0xc5
popfq
pop rax
pushf
push r14
pushfq
add r14, r15
popfq
pop r14
not eax
push r9
pushfq
add r9, rsi
popfq
pop r9
add eax, 0xd29137dc
push r14
pushfq
add r14, 0x7c
popfq
pop r14
xor eax, 0xf5b7f242
push r13
pushfq
sub r13, 0xbc
popfq
pop r13
rol eax, 0x49
push rcx
pushfq
sub rcx, rdi
popfq
pop rcx
popf
push r14
pushfq
add r14, rbx
popfq
pop r14
jmp 0x1400103fd
xor al, al
push rax
pushfq
sub rax, rcx
popfq
pop rax
jmp 0x140011458
mov eax, 0xc4dbc602
pushf
not eax
add eax, 0xef64e379
xor eax, 0xe3baef14
rol eax, 0xd2
popf
push rcx
pushfq
sub rcx, r11
popfq
pop rcx
pushf
push r13
pushfq
sub r13, 0x31
popfq
pop r13
not eax
push rsi
pushfq
add rsi, 0xf4
popfq
pop rsi
add eax, 0xfdcb9baa
push rsi
pushfq
add rsi, 0xaa
popfq
pop rsi
xor eax, 0xe628bada
push rax
pushfq
sub rax, r15
popfq
pop rax
rol eax, 0x5e
push rax
pushfq
add rax, 0x6a
popfq
pop rax
popf
push rsi
pushfq
add rsi, r13
popfq
pop rsi
pushf
push r8
pushfq
sub r8, r13
popfq
pop r8
not eax
push rdi
pushfq
sub rdi, 0x3f
popfq
pop rdi
add eax, 0xcfa9f97f
push r13
pushfq
add r13, 0xf4
popfq
pop r13
xor eax, 0x9b0fc47e
push rdx
pushfq
sub rdx, 0x38
popfq
pop rdx
rol eax, 0xda
push rdi
pushfq
add rdi, r9
popfq
pop rdi
popf
push r9
pushfq
add r9, rbx
popfq
pop r9
imul rax, rax, 0
push r8
pushfq
add r8, 0xbd
popfq
pop r8
mov rcx, qword [rsp + 0x20]
push rdi
pushfq
sub rdi, r10
popfq
pop rdi
mov eax, dword [rcx + rax + 0x88]
push r15
pushfq
add r15, rdx
popfq
pop r15
mov rcx, qword [rsp + 0x60]
push rax
pushfq
add rax, 0x59
popfq
pop rax
push rax
not rax
sub rcx, rax
pop rax
sub rcx, 1
push r9
pushfq
add r9, 0xd8
popfq
pop r9
mov rax, rcx
push r8
pushfq
add r8, 0x4c
popfq
pop r8
mov qword [rsp + 0x30], rax
push r8
pushfq
add r8, rdi
popfq
pop r8
mov rax, qword [rsp + 0x30]
push rcx
pushfq
add rcx, r9
popfq
pop rcx
mov eax, dword [rax + 0xc]
push rax
pushfq
sub rax, 0xf7
popfq
pop rax
mov rcx, qword [rsp + 0x60]
push rcx
pushfq
sub rcx, 0x4b
popfq
pop rcx
push rax
not rax
sub rcx, rax
pop rax
sub rcx, 1
push rbx
pushfq
sub rbx, 0x92
popfq
pop rbx
mov rax, rcx
push r11
pushfq
sub r11, rsi
popfq
pop r11
mov qword [rsp + 0x38], rax
push r15
pushfq
add r15, rax
popfq
pop r15
mov rcx, qword [rsp + 0x38]
push rax
pushfq
sub rax, rbx
popfq
pop rax
call fcn.14002f631
push r10
pushfq
add r10, 0x5b
popfq
pop r10
mov qword [rsp + 0x40], rax
push rdx
pushfq
sub rdx, 0x9b
popfq
pop rdx
movabs rax, 0xbe7f70165ddcd623
pushf
not rax
add rax, 0x67093aaf
xor rax, 0x4258690f
rol rax, 0x40
popf
push r13
pushfq
add r13, 0x2f
popfq
pop r13
pushf
push r11
pushfq
add r11, 0x18
popfq
pop r11
not rax
push r9
pushfq
add r9, r12
popfq
pop r9
add rax, 0x5241c300
push rbx
pushfq
add rbx, r15
popfq
pop rbx
xor rax, 0x49f00a72
push r14
pushfq
add r14, rax
popfq
pop r14
rol rax, 0xfc
push r13
pushfq
sub r13, 0x9c
popfq
pop r13
popf
push r15
pushfq
sub r15, 0x20
popfq
pop r15
cmp qword [rsp + 0x40], rax
push r8
pushfq
add r8, 0xb2
popfq
pop r8
je 0x14001114b
push r14
pushfq
sub r14, 0xe9
popfq
pop r14
push rax
push r13
pushfq
sub r13, rcx
popfq
pop r13
pushf
push rcx
pushfq
add rcx, r9
popfq
pop rcx
mov eax, 0x8744ac53
pushf
not eax
add eax, 0xde3c657a
xor eax, 0xd831852e
rol eax, 0x88
popf
push rcx
pushfq
sub rcx, r11
popfq
pop rcx
pushf
push r14
pushfq
sub r14, 0x95
popfq
pop r14
not eax
push rdx
pushfq
sub rdx, r13
popfq
pop rdx
add eax, 0xb2cfa07b
push rdx
pushfq
add rdx, 0xba
popfq
pop rdx
xor eax, 0xec9017ec
push r14
pushfq
sub r14, 0x6e
popfq
pop r14
rol eax, 0x51
push r10
pushfq
add r10, 0xeb
popfq
pop r10
popf
push r13
pushfq
add r13, 0xa5
popfq
pop r13
jmp 0x1400103fd
push rax
push r13
pushfq
sub r13, 0x7a
popfq
pop r13
pushf
push r9
pushfq
sub r9, r14
popfq
pop r9
mov eax, 0xe0693b90
pushf
not eax
add eax, 0xd54fb09e
xor eax, 0xd4e0c0a2
rol eax, 0xc
popf
push r15
pushfq
sub r15, 0x5a
popfq
pop r15
pushf
push r9
pushfq
add r9, r8
popfq
pop r9
not eax
push rcx
pushfq
add rcx, 0xb9
popfq
pop rcx
add eax, 0x934e500f
push rcx
pushfq
sub rcx, r8
popfq
pop rcx
xor eax, 0xf7d29598
push r12
pushfq
sub r12, r13
popfq
pop r12
rol eax, 0x3f
push r13
pushfq
sub r13, r11
popfq
pop r13
popf
push r12
pushfq
sub r12, 0x3f
popfq
pop r12
pushf
push r10
pushfq
add r10, 0x83
popfq
pop r10
not eax
push r11
pushfq
sub r11, 0x30
popfq
pop r11
add eax, 0xeb605f0e
push r14
pushfq
sub r14, r11
popfq
pop r14
xor eax, 0x9f7227cb
push r12
pushfq
add r12, 0xed
popfq
pop r12
rol eax, 0x4f
push r14
pushfq
add r14, rdx
popfq
pop r14
popf
push rsi
pushfq
sub rsi, r15
popfq
pop rsi
pushf
push r12
pushfq
add r12, 0xf8
popfq
pop r12
not eax
push r15
pushfq
sub r15, 0xb5
popfq
pop r15
add eax, 0x99b80e16
push r15
pushfq
add r15, r10
popfq
pop r15
xor eax, 0xea735ff7
push r9
pushfq
sub r9, r13
popfq
pop r9
rol eax, 0x36
push r15
pushfq
sub r15, r10
popfq
pop r15
popf
push rsi
pushfq
sub rsi, rax
popfq
pop rsi
jmp 0x1400103fd
xor al, al
push rbx
pushfq
sub rbx, r14
popfq
pop rbx
jmp 0x140011458
mov al, 0x46
pushf
not al
add al, 0xdc
xor al, 0xe
rol al, 0x64
popf
push rax
pushfq
add rax, 0xa2
popfq
pop rax
pushf
push r8
pushfq
add r8, 0xf1
popfq
pop r8
not al
push rax
pushfq
sub rax, 0xc4
popfq
pop rax
add al, 0x21
push r9
pushfq
sub r9, r11
popfq
pop r9
xor al, 0xfb
push rbx
pushfq
add rbx, 0x72
popfq
pop rbx
rol al, 0xd1
push r14
pushfq
add r14, rax
popfq
pop r14
popf
push r15
pushfq
add r15, 0x91
popfq
pop r15
pushf
push rcx
pushfq
add rcx, 0x68
popfq
pop rcx
not al
push rax
pushfq
sub rax, rdi
popfq
pop rax
add al, 0x2e
push rax
pushfq
sub rax, 0xd0
popfq
pop rax
xor al, 0xc8
push r10
pushfq
sub r10, 0x17
popfq
pop r10
rol al, 0xb2
push r8
pushfq
sub r8, rbx
popfq
pop r8
popf
push r8
pushfq
add r8, 0x98
popfq
pop r8
pushf
push r15
pushfq
add r15, rbx
popfq
pop r15
not al
push r15
pushfq
add r15, rsi
popfq
pop r15
add al, 0x22
push r15
pushfq
add r15, 0xba
popfq
pop r15
xor al, 0x21
push r14
pushfq
add r14, 0x5c
popfq
pop r14
rol al, 0x64
push r12
pushfq
sub r12, rdi
popfq
pop r12
popf
push r15
pushfq
sub r15, r13
popfq
pop r15
add rsp, 0x58
push r11
pushfq
sub r11, 0x86
popfq
pop r11
ret