Function at 0x1401e5470
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x68
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_139]
xor eax, eax
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
movzx eax, word [rax]
cmp eax, 0x5a4d
jne 0x1401e57f0
mov rax, qword [rsp + 0x50]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp dword [rax], 0x4550
jne 0x1401e57f0
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax + 0x88]
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
je 0x1401e57f0
mov eax, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax + 0x8c]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
sub rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.1401e5150
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
je 0x1401e57f0
xor eax, eax
mov word [rsp + 0x20], ax
mov qword [rsp + 0x48], 0
jmp 0x1401e5578
mov rax, qword [rsp + 0x28]
add rax, 2
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
movzx eax, word [rax]
test eax, eax
je 0x1401e561b
mov rax, qword [rsp + 0x28]
movzx eax, word [rax]
cmp eax, 0x2e
jne 0x1401e55a4
mov rax, qword [rsp + 0x48]
inc rax
mov qword [rsp + 0x48], rax
jmp 0x1401e5616
cmp qword [rsp + 0x48], 2
jne 0x1401e5616
mov rax, qword [rsp + 0x28]
movzx eax, word [rax]
mov word [rsp + 0x30], ax
mov rax, qword [rsp + 0x28]
add rax, 2
mov qword [rsp + 0x28], rax
movzx eax, word [rsp + 0x30]
mov word [rsp + 0x24], ax
movzx eax, word [rsp + 0x24]
test eax, eax
je 0x1401e5614
movzx eax, word [rsp + 0x24]
cmp eax, 0x30
jl 0x1401e5610
movzx eax, word [rsp + 0x24]
cmp eax, 0x39
jg 0x1401e5610
movzx eax, word [rsp + 0x20]
imul eax, eax, 0xa
mov word [rsp + 0x20], ax
movzx eax, word [rsp + 0x24]
movzx ecx, word [rsp + 0x20]
lea eax, [rcx + rax - 0x30]
mov word [rsp + 0x20], ax
jmp 0x1401e5612
jmp 0x1401e5614
jmp 0x1401e55ac
jmp 0x1401e561b
jmp 0x1401e556a
movzx eax, word [rsp + 0x20]
cmp eax, 0xa28
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0xece
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x1770
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x1771
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x1772
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x1db0
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x1db1
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x23f0
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x2580
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x2800
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x295a
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x3839
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x3ad7
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x3fab
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x42ee
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x4563
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x47ba
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x47bb
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x4a61
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x4a62
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x4a63
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x4a64
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x4a65
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x55f0
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x585d
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x5867
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x5b9b
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x5bb9
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x6531
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x657e
je 0x1401e57df
movzx eax, word [rsp + 0x20]
cmp eax, 0x65a0
jne 0x1401e57e1
jmp 0x1401e57f0
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x38], rax
jmp 0x1401e552a
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_539]
movzx eax, word [rsp + 0x20]
add rsp, 0x68
ret