Function at 0x14005a510
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x70
mov r13, r8
mov r12d, edx
mov rdi, rcx
xor r14b, r14b
mov eax, 0x5a4d
cmp word [rcx], ax
je 0x14005a575
call fcn.1400159c0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, [0x1402e2170]
mov qword [rsp + 0x38], rcx
lea rcx, str.Not_A_Valid_Dos_Stub____ws
lea r15, str.MbCommonSigVerify
mov r9d, 0x356
jmp 0x14005a761
movsxd rcx, dword [rcx + 0x3c]
add rcx, rdi
mov rbx, r12
lea rsi, [r12 + rdi]
lea rax, [rcx + 0x108]
cmp rsi, rax
jb 0x14005a5b3
cmp rdi, rcx
ja 0x14005a5b3
cmp dword [rcx], 0x4550
jne 0x14005a5aa
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x14005a5aa
mov r14b, 1
lea r15, str.MbCommonSigVerify
jmp 0x14005a5f9
call fcn.1400159c0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, str.Not_a_64_bit_header
mov qword [rsp + 0x30], rcx
lea r15, str.MbCommonSigVerify
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 5
mov r9d, 0x35e
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_fileverify.cpp
lea rdx, str.VerifyBuffer
mov rcx, rax
call r10
test r14b, r14b
jne 0x14005a65f
movsxd rcx, dword [rdi + 0x3c]
add rcx, rdi
lea rax, [rcx + 0xf8]
cmp rsi, rax
jb 0x14005a616
cmp rdi, rcx
jbe 0x14005a65a
call fcn.1400159c0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, str.No_NT_Header
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 2
mov r9d, 0x367
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_fileverify.cpp
lea rdx, str.VerifyBuffer
mov rcx, rax
call r10
jmp 0x14005a787
test r14b, r14b
je 0x14005a6b6
movsxd rax, dword [rdi + 0x3c]
cmp dword [rax + rdi], 0x4550
jne 0x14005a73c
mov ecx, dword [rax + rdi + 0xa8]
test ecx, ecx
je 0x14005a73c
lea rdx, [rdi + rcx]
cmp rdx, rsi
ja 0x14005a73c
mov eax, dword [rdx]
add rax, rdx
cmp rax, rsi
ja 0x14005a73c
cmp word [rdx + 6], 2
jne 0x14005a73c
mov eax, 0x200
cmp word [rdx + 4], ax
jne 0x14005a73c
jmp 0x14005a6cb
movsxd rcx, dword [rdi + 0x3c]
add rcx, rdi
mov r8d, r12d
mov rdx, rdi
call fcn.14005a810
mov rdx, rax
test rdx, rdx
je 0x14005a73c
cmp rdx, rsi
ja 0x14005a73c
lea r10, [rdx + 8]
xor r9d, r9d
mov dword [rsp + 0x60], r9d
mov edx, dword [rdx]
movzx eax, byte [rsp + 0xc0]
sub edx, 5
mov byte [rsp + 0x50], al
mov qword [rsp + 0x48], rdi
test r14b, r14b
je 0x14005a713
movsxd r8, dword [rdi + 0x3c]
add r8, rdi
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], r9
movzx r9d, r14b
jmp 0x14005a724
movsxd rcx, dword [rdi + 0x3c]
add rcx, rdi
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x20], r13
mov r8, rbx
mov rcx, r10
call fcn.14005beb0
mov ebx, eax
mov dword [rsp + 0x60], eax
jmp 0x14005a790
call fcn.1400159c0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, [0x1402e2170]
mov qword [rsp + 0x38], rcx
lea rcx, str.The_Certificate_is_not_there_____ws
mov r9d, 0x376
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 5
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_fileverify.cpp
lea rdx, str.VerifyBuffer
mov rcx, rax
call r10
mov ebx, 0xc000007b
mov dword [rsp + 0x60], ebx
jmp 0x14005a7ef
mov eax, ebx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret