Function at 0x140003780
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x490
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140092040]
xor rax, rsp
mov qword [rbp + 0x440], rax
mov rbx, qword [rcx + 0x270]
lea r8, [rbp + 0x180]
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rbp + 0x180], ymm0
vmovups ymmword [rbp + 0x1a0], ymm0
mov rdx, rbx
mov r15, rcx
mov r9d, 0x40
vzeroupper
call fcn.14006b860
mov esi, 0x5a4d
cmp word [rbp + 0x180], si
je 0x140003f9a
movabs rax, 0xdf9c5274915d36aa
movabs rdi, 0x119918cd11a889de
mov qword [rbp], rax
movabs r14, 0x8fbc3906f03f5bef
movabs rax, 0x226e934a0506064e
mov qword [rbp + 0x18], rdi
mov qword [rbp + 8], rax
movabs r12, 0x704efe2f6964693c
movabs rax, 0xd1921f72b775876c
mov qword [rbp + 0x2e0], r14
mov qword [rbp + 0x10], rax
movabs r13, 0xd1e07a04db1af409
vmovdqu ymm0, ymmword [rbp]
movabs rax, 0xfcd15c63831f2fa6
mov qword [rbp + 0x2e8], r12
mov qword [rbp + 0x60], rax
movabs rax, 0x521de4a020d051c
mov qword [rbp + 0x68], rax
movabs rax, 0xb08c0f63be68d47b
mov qword [rbp + 0x70], rax
movabs rax, 0x74f776ac72dba9ac
mov qword [rbp + 0x78], rax
movabs rax, 0x56fc60c979f09561
mov qword [rbp + 0x80], rax
movabs rax, 0x3e06d9b76ad6fa03
mov qword [rbp + 0x88], rax
movabs rax, 0x97939abe828eb19
mov qword [rbp + 0x90], rax
movabs rax, 0xff8ff492485094ce
mov qword [rbp + 0x98], rax
movabs rax, 0x924da9fe342a9ddd
mov qword [rbp + 0xa0], rax
movabs rax, 0x7677d249959a2104
mov qword [rbp + 0xa8], rax
movabs rax, 0x79a4eb65b5bef9be
mov qword [rbp + 0xb0], rax
movabs rax, 0x501f854cf74465cb
mov qword [rbp + 0xb8], rax
movabs rax, 0xe8e4895278b38555
mov qword [rbp + 0xc0], rax
movabs rax, 0xa636be294c12186d
mov qword [rbp + 0xc8], rax
movabs rax, 0xbe7c54d62253dd0a
mov qword [rbp + 0xd0], rax
movabs rax, 0xd730d5d95afcfe24
mov qword [rbp + 0xd8], rax
movabs rax, 0x3d4ef2d78969f416
mov qword [rbp + 0xe0], rax
movabs rax, 0xf087f4ffe1e50128
mov qword [rbp + 0xe8], rax
movabs rax, 0xeb533451786adbb9
mov qword [rbp + 0xf0], rax
movabs rax, 0x68747a1871b5fe9c
mov qword [rbp + 0xf8], rax
movabs rax, 0x70fceb4aaa9f3b03
mov qword [rbp + 0x100], rax
movabs rax, 0x33ad65b82b3baf83
mov qword [rbp + 0x108], rax
movabs rax, 0xf8dfb8fa0a6fd04e
mov qword [rbp + 0x110], rax
movabs rax, 0x384b8a78dd301453
mov qword [rbp + 0x118], rax
movabs rax, 0xacc8fc6dad1b8ebb
mov qword [rbp + 0x120], rax
movabs rax, 0xc1a9a99120282759
mov qword [rbp + 0x128], rax
movabs rax, 0xbb71ee1042ce100f
mov qword [rbp + 0x130], rax
movabs rax, 0x930a12301b13a342
mov qword [rbp + 0x138], rax
movabs rax, 0x95b829cc4eb7162e
mov qword [rbp + 0x140], rax
movabs rax, 0x883a58624de9aafd
mov qword [rbp + 0x148], rax
movabs rax, 0xe61dcf34c1322629
mov qword [rbp + 0x2f0], r13
mov qword [rbp + 0x2f8], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
mov qword [rbp + 0x150], rax
movabs rax, 0x774e44cc664de03f
vmovdqu ymmword [rbp], ymm1
mov qword [rbp + 0x158], rax
movabs rcx, 0xd161f3ad0e497d7e
vmovdqu ymm0, ymmword [rbp + 0x60]
vmovdqu ymm2, ymmword [rbp + 0x80]
movabs rax, 0x5ef181d26c9da6d8
mov qword [rbp + 0x320], r14
mov qword [rbp + 0x160], rax
movabs rax, 0x2c5df5e167826d35
mov qword [rbp + 0x168], rax
movabs rax, 0x366e34647b8c6351
mov qword [rbp + 0x170], rax
movabs rax, 0x389940ba1898b513
mov qword [rbp + 0x340], rax
movabs rax, 0x5b74bcc304a39560
mov qword [rbp + 0x348], rax
movabs rax, 0x651854d8c849cb7d
mov qword [rbp + 0x350], rax
movabs rax, 0xd1ea81e13b39b4a2
mov qword [rbp + 0x358], rax
movabs rax, 0xf73fc8de517d97d7
mov qword [rbp + 0x360], rax
movabs rax, 0x257b527fcf54624
mov qword [rbp + 0x368], rax
movabs rax, 0x16d7cb1cc7cad9d1
mov qword [rbp + 0x370], rax
movabs rax, 0x7078eb259f3000a6
mov qword [rbp + 0x378], rax
movabs rax, 0x8385e47254c4e03b
mov qword [rbp + 0x380], rax
movabs rax, 0xdf16db5b39613808
mov qword [rbp + 0x388], rax
movabs rax, 0xca0e3b900221a865
mov qword [rbp + 0x390], rax
movabs rax, 0xf743bcf93f88974a
mov qword [rbp + 0x398], rax
movabs rax, 0x58229eb6fd1a9a7f
mov qword [rbp + 0x3a0], rax
movabs rax, 0x95ef80df8f8c214c
mov qword [rbp + 0x3a8], rax
movabs rax, 0x842757340a03bf99
mov qword [rbp + 0x3b0], rax
movabs rax, 0x1f1b167d139587ee
mov qword [rbp + 0x3b8], rax
movabs rax, 0x158e9b6acef15a23
mov qword [rbp + 0x3c0], rax
movabs rax, 0x39a74bf3641bdcf0
mov qword [rbp + 0x3c8], rax
movabs rax, 0x8ab8d7885a33ea0d
mov qword [rbp + 0x3d0], rax
movabs rax, 0x4b2ee6119b107932
mov qword [rbp + 0x3d8], rax
movabs rax, 0xcd8fdc0ec46bcbe7
mov qword [rbp + 0x3e0], rax
movabs rax, 0xb5dbc6d77c5b4234
mov qword [rbp + 0x3e8], rax
movabs rax, 0xc91ea84c27ba7961
mov qword [rbp + 0x3f0], rax
movabs rax, 0xfe6b55556f7acd36
mov qword [rbp + 0x3f8], rax
movabs rax, 0xfcca48a227f54a4b
mov qword [rbp + 0x400], rax
movabs rax, 0xbc0c360b1ab5d998
mov qword [rbp + 0x408], rax
movabs rax, 0x9274a140b35d6075
mov qword [rbp + 0x410], rax
movabs rax, 0x5a3a2aa90f21a35a
mov qword [rbp + 0x418], rax
movabs rax, 0x36a2ace65af3cf8f
mov qword [rbp + 0x420], rax
movabs rax, 0x4973928f0ef21d5c
mov qword [rbp + 0x328], r12
mov qword [rbp + 0x330], r13
mov qword [rbp + 0x338], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vpxor ymm0, ymm2, ymmword [rbp + 0x340]
mov qword [rbp + 0x428], rax
movabs rax, 0x366e34647b8c0629
mov qword [rbp + 0x430], rax
mov qword [rbp + 0x178], rcx
mov qword [rbp + 0x438], rcx
vmovdqu ymmword [rbp + 0x60], ymm1
vmovdqu ymm1, ymmword [rbp + 0xa0]
vpxor ymm2, ymm1, ymmword [rbp + 0x360]
vmovdqu ymmword [rbp + 0x80], ymm0
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqu ymmword [rbp + 0xa0], ymm2
vmovdqu ymm2, ymmword [rbp + 0xe0]
vpxor ymm0, ymm2, ymmword [rbp + 0x3a0]
vmovdqu ymmword [rbp + 0xc0], ymm1
vmovdqu ymm1, ymmword [rbp + 0x100]
vpxor ymm2, ymm1, ymmword [rbp + 0x3c0]
vmovdqu ymmword [rbp + 0xe0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqu ymmword [rbp + 0x100], ymm2
vmovdqu ymm2, ymmword [rbp + 0x140]
vpxor ymm0, ymm2, ymmword [rbp + 0x400]
vmovdqu ymmword [rbp + 0x120], ymm1
vmovdqu ymm1, ymmword [rbp + 0x160]
vpxor ymm2, ymm1, ymmword [rbp + 0x420]
vmovdqu ymmword [rbp + 0x160], ymm2
vmovdqu ymmword [rbp + 0x140], ymm0
mov r9d, 0x30
lea r8, [rbp]
lea rdx, [rbp + 0x60]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r9d, 0x40
lea r8, [rbp + 0x20]
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rbp + 0x20], ymm0
vmovups ymmword [rbp + 0x40], ymm0
mov rdx, rbx
mov rcx, r15
vzeroupper
call fcn.14006b860
vmovups ymm1, ymmword [rbp + 0x20]
vmovups ymm0, ymmword [rbp + 0x40]
vmovd eax, xmm1
vmovups ymmword [rbp + 0x180], ymm1
vmovups ymmword [rbp + 0x1a0], ymm0
cmp ax, si
je 0x140003f9a
mov qword [rbp + 0x2e0], r14
lea r8, [rbp]
mov qword [rbp + 0x2e8], r12
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x2f0], r13
movabs rax, 0xdf9c5274915d36aa
mov qword [rbp], rax
movabs rcx, 0x389940ba1898b513
mov qword [rbp + 0x2f8], rdi
movabs rax, 0x226e934a0506064e
mov qword [rbp + 8], rax
mov r9d, 0x10
movabs rax, 0xd1921f72b775876c
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x10], rax
movabs rax, 0xafd94b63871f3eb8
vmovdqu ymm0, ymmword [rbp]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
mov qword [rbp + 0x20], rax
movabs rax, 0x46e9b430b050749
mov qword [rbp + 0x28], rax
movabs rax, 0xa78c1577be68d466
mov qword [rbp + 0x30], rax
movabs rax, 0x62f038a879dca9bb
mov qword [rbp + 0x38], rax
movabs rax, 0x389940ba36fdc060
vmovdqu ymm0, ymmword [rbp + 0x20]
mov qword [rbp + 0x40], rax
movabs rax, 0x5b74bcc304a39560
mov qword [rbp + 0x48], rax
vmovdqu xmm2, xmmword [rbp + 0x40]
vmovdqu ymmword [rbp], ymm1
mov qword [rbp + 0x300], rcx
xor ecx, ecx
mov qword [rbp + 0x2e0], r14
mov qword [rbp + 0x2e8], r12
mov qword [rbp + 0x2f0], r13
mov qword [rbp + 0x2f8], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
mov qword [rbp + 0x308], rax
vpxor xmm0, xmm2, xmmword [rbp + 0x300]
vmovdqu xmmword [rbp + 0x40], xmm0
vmovdqu ymmword [rbp + 0x20], ymm1
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1400783b0
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
lea rcx, [rbp + 0x1c0]
mov r8d, 0x108
vzeroupper
call sub.VCRUNTIME140.dll_memset
movsxd rdx, dword [rbp + 0x1bc]
lea r8, [rbp + 0x1c0]
add rdx, rbx
mov r9d, 0x108
mov rcx, r15
call fcn.14006b860
cmp dword [rbp + 0x1c0], 0x4550
jne 0x140003f68
xor r14d, r14d
mov r13d, r14d
cmp r14w, word [rbp + 0x1c6]
jae 0x140003f68
xor eax, eax
lea r8, [rbp + 0x2e0]
mov qword [rbp + 0x300], rax
mov r9d, 0x28
movsxd rax, r13d
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rbp + 0x2e0], ymm0
lea rcx, [rax + rax*4]
movzx eax, word [rbp + 0x1d4]
lea rdx, [rax + rcx*8]
movsxd rax, dword [rbp + 0x1bc]
add rdx, rax
mov rcx, r15
mov rax, qword [r15 + 0x270]
add rax, 0x18
add rdx, rax
vzeroupper
call fcn.14006b860
test dword [rbp + 0x304], 0x20000000
je 0x1400040f7
mov edi, dword [rbp + 0x2ec]
mov rbx, r14
add rdi, qword [r15 + 0x270]
mov rsi, r14
mov r12d, dword [rbp + 0x2e8]
test r12, r12
je 0x1400040f4
nop word [rax + rax]
mov rdx, rdi
mov rcx, r15
call fcn.140008880
xor r9d, r9d
lea rcx, [0x140116040]
mov r8, rdi
mov eax, r9d
sub r8, rcx
nop
cmp rbx, 0xe
jge 0x14000410f
lea rdx, [rax + rcx]
lea rcx, [0x1400920d8]
movzx ecx, byte [rbx + rcx]
cmp byte [rdx], cl
je 0x1400040c3
cmp cl, 0x90
je 0x1400040c3
mov rbx, r9
jmp 0x1400040cf
test rbx, rbx
jne 0x1400040cc
lea rsi, [r8 + rdx]
inc rbx
inc rax
lea rcx, [0x140116040]
cmp rax, 0x700
jb 0x1400040a0
add r14, 0x700
add rdi, 0x700
cmp r14, r12
jb 0x140004080
xor r14d, r14d
movzx eax, word [rbp + 0x1c6]
inc r13d
cmp r13d, eax
jl 0x140003ff0
jmp 0x140003f68
mov rax, rsi
jmp 0x140003f6a