Function at 0x140003020
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
sub rsp, 0x540
mov qword [rsp + 0x450], 0xfffffffffffffffe
mov rax, qword [0x14009c550]
xor rax, rsp
mov qword [rsp + 0x530], rax
mov qword [rsp + 0x68], 0
mov eax, 0x50
mov word [rsp + 0x118], ax
mov eax, 0x6e
mov word [rsp + 0x11a], ax
mov eax, 0x65
mov word [rsp + 0x11c], ax
mov eax, 0x4d
mov word [rsp + 0x11e], ax
mov eax, 0x65
mov word [rsp + 0x120], ax
mov eax, 0x63
mov word [rsp + 0x122], ax
mov eax, 0x77
mov word [rsp + 0x124], ax
mov eax, 0x49
mov word [rsp + 0x126], ax
mov eax, 0x63
mov word [rsp + 0x128], ax
mov eax, 0x6e
mov word [rsp + 0x12a], ax
mov eax, 0x43
mov word [rsp + 0x12c], ax
mov eax, 0x67
mov word [rsp + 0x12e], ax
mov eax, 0x59
mov word [rsp + 0x130], ax
xor eax, eax
mov word [rsp + 0x132], ax
mov eax, 0x79
mov word [rsp + 0xa8], ax
mov eax, 0x4a
mov word [rsp + 0xaa], ax
mov eax, 0x79
mov word [rsp + 0xac], ax
mov eax, 0x79
mov word [rsp + 0xae], ax
mov eax, 0x70
mov word [rsp + 0xb0], ax
xor eax, eax
mov word [rsp + 0xb2], ax
lea rax, [rsp + 0x138]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x190], rax
lea rdx, [rsp + 0xa8]
mov rcx, qword [rsp + 0x160]
call fcn.140005000
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x460], rax
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x190]
call fcn.140005000
mov qword [rsp + 0x468], rax
mov r8, qword [rsp + 0x460]
mov rdx, qword [rsp + 0x468]
lea rcx, [rsp + 0x70]
call fcn.140001810
nop
mov eax, 0x53
mov word [rsp + 0x100], ax
mov eax, 0x43
mov word [rsp + 0x102], ax
mov eax, 0x55
mov word [rsp + 0x104], ax
mov eax, 0x52
mov word [rsp + 0x106], ax
mov eax, 0x45
mov word [rsp + 0x108], ax
mov eax, 0x50
mov word [rsp + 0x10a], ax
mov eax, 0x46
mov word [rsp + 0x10c], ax
mov eax, 0x45
mov word [rsp + 0x10e], ax
xor eax, eax
mov word [rsp + 0x110], ax
mov eax, 0x41
mov word [rsp + 0xb8], ax
mov eax, 0x4f
mov word [rsp + 0xba], ax
mov eax, 0x50
mov word [rsp + 0xbc], ax
mov eax, 0x59
mov word [rsp + 0xbe], ax
mov eax, 0x69
mov word [rsp + 0xc0], ax
mov eax, 0x50
mov word [rsp + 0xc2], ax
mov eax, 0x4f
mov word [rsp + 0xc4], ax
xor eax, eax
mov word [rsp + 0xc6], ax
call fcn.140001740
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x1f0], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x220], rax
lea rax, [rsp + 0x198]
mov qword [rsp + 0x1c0], rax
lea rdx, [rsp + 0xb8]
mov rcx, qword [rsp + 0x1f0]
call fcn.140005000
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x478], rax
lea rdx, [rsp + 0x100]
mov rcx, qword [rsp + 0x220]
call fcn.140005000
mov qword [rsp + 0x480], rax
mov r8, qword [rsp + 0x478]
mov rdx, qword [rsp + 0x480]
lea rcx, [rsp + 0x228]
call fcn.140001810
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x490], rax
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x1c0]
call fcn.140004e90
mov qword [rsp + 0x498], rax
mov rcx, qword [rsp + 0x490]
call fcn.140004fe0
mov rbx, rax
mov rdx, qword [rsp + 0x498]
mov rcx, qword [rsp + 0x568]
call fcn.140001ae0
mov r11, rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rbx
mov rcx, 0xffffffff80000001
call r11
nop
lea rcx, [rsp + 0x228]
call fcn.140004ee0
cmp qword [rsp + 0x68], 0
jne 0x1400033fe
lea rcx, [rsp + 0x70]
call fcn.140004ee0
nop
mov rcx, qword [rsp + 0x560]
call fcn.140005360
jmp 0x1400039e1
mov eax, 0x51
mov word [rsp + 0x48], ax
mov eax, 0x69
mov word [rsp + 0x4a], ax
mov eax, 0x61
mov word [rsp + 0x4c], ax
mov eax, 0x54
mov word [rsp + 0x4e], ax
mov eax, 0x6b
mov word [rsp + 0x50], ax
mov eax, 0x6c
mov word [rsp + 0x52], ax
mov eax, 0x55
mov word [rsp + 0x54], ax
mov eax, 0x65
mov word [rsp + 0x56], ax
mov eax, 0x66
mov word [rsp + 0x58], ax
mov eax, 0x76
mov word [rsp + 0x5a], ax
mov eax, 0x6b
mov word [rsp + 0x5c], ax
mov eax, 0x57
mov word [rsp + 0x5e], ax
mov eax, 0x77
mov word [rsp + 0x60], ax
mov eax, 0x45
mov word [rsp + 0x62], ax
xor eax, eax
mov word [rsp + 0x64], ax
mov eax, 0x5a
mov word [rsp + 0x98], ax
mov eax, 0x45
mov word [rsp + 0x9a], ax
mov eax, 0x75
mov word [rsp + 0x9c], ax
mov eax, 0x62
mov word [rsp + 0x9e], ax
mov eax, 0x47
mov word [rsp + 0xa0], ax
mov eax, 0x53
mov word [rsp + 0xa2], ax
xor eax, eax
mov word [rsp + 0xa4], ax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x278], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x2a8], rax
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x278]
call fcn.140005000
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x4a8], rax
lea rdx, [rsp + 0x48]
mov rcx, qword [rsp + 0x2a8]
call fcn.140005000
mov qword [rsp + 0x4b0], rax
mov r8, qword [rsp + 0x4a8]
mov rdx, qword [rsp + 0x4b0]
lea rcx, [rsp + 0x2b0]
call fcn.140001810
mov qword [rsp + 0x4b8], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0x4c0], rax
mov rdx, qword [rsp + 0x4c0]
lea rcx, [rsp + 0x70]
call fcn.140004f00
nop
lea rcx, [rsp + 0x2b0]
call fcn.140004ee0
mov eax, 0x6f
mov word [rsp + 0xe0], ax
mov eax, 0x68
mov word [rsp + 0xe2], ax
mov eax, 0x49
mov word [rsp + 0xe4], ax
mov eax, 0x76
mov word [rsp + 0xe6], ax
mov eax, 0x69
mov word [rsp + 0xe8], ax
mov eax, 0x79
mov word [rsp + 0xea], ax
xor eax, eax
mov word [rsp + 0xec], ax
mov eax, 0x64
mov word [rsp + 0xf0], ax
mov eax, 0x73
mov word [rsp + 0xf2], ax
mov eax, 0x46
mov word [rsp + 0xf4], ax
mov eax, 0x56
mov word [rsp + 0xf6], ax
mov eax, 0x70
mov word [rsp + 0xf8], ax
mov eax, 0x59
mov word [rsp + 0xfa], ax
xor eax, eax
mov word [rsp + 0xfc], ax
call fcn.140001740
lea rax, [rsp + 0x310]
mov qword [rsp + 0x338], rax
lea rax, [rsp + 0x340]
mov qword [rsp + 0x368], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x308], rax
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0x338]
call fcn.140005000
mov qword [rsp + 0x4c8], rax
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0x4d0], rax
lea rdx, [rsp + 0xe0]
mov rcx, qword [rsp + 0x368]
call fcn.140005000
mov qword [rsp + 0x4d8], rax
mov r8, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x4d8]
lea rcx, [rsp + 0x370]
call fcn.140001810
mov qword [rsp + 0x4e0], rax
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0x4e8], rax
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x308]
call fcn.140004e90
mov qword [rsp + 0x4f0], rax
mov rcx, qword [rsp + 0x560]
call fcn.140005390
mov rsi, rax
xor edx, edx
mov rcx, qword [rsp + 0x560]
call fcn.140005410
mov rdi, rax
mov rcx, qword [rsp + 0x4e8]
call fcn.140004fe0
mov rbx, rax
mov rdx, qword [rsp + 0x4f0]
mov rcx, qword [rsp + 0x568]
call fcn.140001ae0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rsp + 0x68]
call rax
test eax, eax
je 0x140003797
mov dword [rsp + 0x4f8], 1
jmp 0x1400037a2
mov dword [rsp + 0x4f8], 0
movzx eax, byte [rsp + 0x4f8]
mov byte [rsp + 0x2d8], al
lea rcx, [rsp + 0x370]
call fcn.140004ee0
movzx r11d, byte [rsp + 0x2d8]
test r11d, r11d
je 0x1400037e9
lea rcx, [rsp + 0x70]
call fcn.140004ee0
nop
mov rcx, qword [rsp + 0x560]
call fcn.140005360
jmp 0x1400039e1
mov eax, 0x54
mov word [rsp + 0xc8], ax
mov eax, 0x68
mov word [rsp + 0xca], ax
mov eax, 0x68
mov word [rsp + 0xcc], ax
mov eax, 0x57
mov word [rsp + 0xce], ax
mov eax, 0x6e
mov word [rsp + 0xd0], ax
mov eax, 0x72
mov word [rsp + 0xd2], ax
mov eax, 0x74
mov word [rsp + 0xd4], ax
mov eax, 0x79
mov word [rsp + 0xd6], ax
mov eax, 0x4d
mov word [rsp + 0xd8], ax
mov eax, 0x68
mov word [rsp + 0xda], ax
mov eax, 0x7a
mov word [rsp + 0xdc], ax
xor eax, eax
mov word [rsp + 0xde], ax
mov eax, 0x63
mov word [rsp + 0x38], ax
mov eax, 0x64
mov word [rsp + 0x3a], ax
mov eax, 0x42
mov word [rsp + 0x3c], ax
mov eax, 0x55
mov word [rsp + 0x3e], ax
xor eax, eax
mov word [rsp + 0x40], ax
lea rax, [rsp + 0x398]
mov qword [rsp + 0x3c0], rax
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x3f0], rax
lea rdx, [rsp + 0x38]
mov rcx, qword [rsp + 0x3c0]
call fcn.140005000
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x508], rax
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x3f0]
call fcn.140005000
mov qword [rsp + 0x510], rax
mov r8, qword [rsp + 0x508]
mov rdx, qword [rsp + 0x510]
lea rcx, [rsp + 0x3f8]
call fcn.140001810
mov qword [rsp + 0x518], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x520], rax
mov rdx, qword [rsp + 0x520]
lea rcx, [rsp + 0x70]
call fcn.140004f00
nop
lea rcx, [rsp + 0x3f8]
call fcn.140004ee0
call fcn.140001740
lea rax, [rsp + 0x420]
mov qword [rsp + 0x448], rax
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x448]
call fcn.140004e90
mov qword [rsp + 0x528], rax
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rsp + 0x568]
call fcn.140001ae0
mov rcx, qword [rsp + 0x68]
call rax
nop
lea rcx, [rsp + 0x70]
call fcn.140004ee0
nop
mov rcx, qword [rsp + 0x560]
call fcn.140005360
jmp 0x1400039e1
mov rcx, qword [rsp + 0x530]
xor rcx, rsp
call fcn.140058470
add rsp, 0x540
pop rdi
pop rsi
pop rbx
ret