Function at 0x14027aec0
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rax, qword [0x140346038]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0
mov rax, qword [rcx + 0x38]
mov rcx, qword [rax + 0x20]
cmp byte [rcx], 0x3c
jne 0x14027af53
cmp byte [rcx + 1], 0x21
jne 0x14027af53
add rcx, 2
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 2
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 0x20]
mov dl, byte [rcx]
test dl, dl
jne 0x14027af2a
mov rcx, rsi
call fcn.140111048
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 0x20]
mov dl, byte [rcx]
cmp dl, 0x45
jne 0x14027af53
cmp byte [rcx + 1], 0x4c
jne 0x14027af53
cmp byte [rcx + 2], 0x45
jne 0x14027af53
cmp byte [rcx + 3], 0x4d
jne 0x14027af53
cmp byte [rcx + 4], 0x45
jne 0x14027af53
cmp byte [rcx + 5], 0x4e
jne 0x14027af53
cmp byte [rcx + 6], 0x54
je 0x14027af6e
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
nop
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov ebp, dword [rax + 0x5c]
add rcx, 7
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 7
mov rax, qword [rsi + 0x38]
mov rax, qword [rax + 0x20]
cmp byte [rax], 0
jne 0x14027af96
mov rcx, rsi
call fcn.140111048
mov rcx, rsi
call fcn.1400e8e8b
test eax, eax
jne 0x14027b028
lea rdi, str.Space_required_after_ELEMENT_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov edx, 0x41
mov r8, rdi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp fcn.140277857
lea rdi, str.xmlParseElementDecl:_EMPTY__ANY_or___expected_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov edx, 0x36
jmp 0x14027afc2
lea rdi, str.xmlParseElementDecl:_no_name_for_Element_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov edx, 0x44
jmp 0x14027afc2
lea r8, str.Space_required_after_the_element_name_n
mov rcx, rsi
mov edx, 0x41
call fcn.140277857
jmp 0x14027b044
mov rcx, rsi
call fcn.14011322f
test rax, rax
je 0x14027aff4
mov rdi, rax
mov rcx, rsi
call fcn.1400e8e8b
test eax, eax
je 0x14027b012
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 0x20]
movzx edx, byte [rcx]
cmp edx, 0x44
jg 0x14027b146
cmp edx, 0x41
jne 0x14027b1f8
cmp byte [rcx + 1], 0x4e
jne 0x14027afd6
cmp byte [rcx + 2], 0x59
jne 0x14027afd6
add rcx, 3
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 3
mov rax, qword [rsi + 0x38]
mov rax, qword [rax + 0x20]
mov ebx, 2
cmp byte [rax], 0
jne 0x14027b09f
mov rcx, rsi
call fcn.140111048
mov rcx, rsi
call fcn.1400e8e8b
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 0x20]
cmp byte [rcx], 0x3e
jne 0x14027b199
cmp ebp, dword [rax + 0x5c]
jne 0x14027b1df
mov rcx, rsi
call fcn.1400e903b
mov rax, qword [rsi]
test rax, rax
je 0x14027b1a9
cmp dword [rsi + 0x13c], 0
jne 0x14027b1a9
mov r15, qword [rax + 0x48]
test r15, r15
je 0x14027b1a9
mov r14, qword [rsp + 0x28]
test r14, r14
je 0x14027b255
mov qword [r14 + 0x20], 0
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov rax, qword [rax + 0x48]
mov rdx, rdi
mov r8d, ebx
mov r9, r14
call qword [0x14037e008]
cmp qword [r14 + 0x20], 0
jne 0x14027af53
mov rsi, qword [rsi + 0x10]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov rdx, r14
jmp 0x14027b1ce
cmp edx, 0x45
jne 0x14027afd6
cmp byte [rcx + 1], 0x4d
jne 0x14027afd6
cmp byte [rcx + 2], 0x50
jne 0x14027afd6
cmp byte [rcx + 3], 0x54
jne 0x14027afd6
cmp byte [rcx + 4], 0x59
jne 0x14027afd6
add rcx, 5
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 5
mov rax, qword [rsi + 0x38]
mov rax, qword [rax + 0x20]
mov ebx, 1
jmp 0x14027b092
mov rcx, rsi
mov edx, 0x49
xor r8d, r8d
call fcn.1401155db
mov rdi, qword [rsp + 0x28]
test rdi, rdi
je 0x14027af53
mov rsi, qword [rsi + 0x10]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov rdx, rdi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp fcn.14028688f
lea r8, str.Element_declaration_doesnt_start_and_stop_in_the_same_entity_n
mov rcx, rsi
mov edx, 0x5a
call fcn.140277857
jmp 0x14027b0c1
cmp edx, 0x25
je 0x14027b21d
cmp edx, 0x28
jne 0x14027afd6
lea r8, [rsp + 0x28]
mov rcx, rsi
mov rdx, rdi
call fcn.14027adbb
mov ebx, eax
jmp 0x14027b09f
cmp dword [rsi + 0x8c], 0
jne 0x14027afd6
cmp dword [rsi + 0x40], 1
jne 0x14027afd6
lea rdi, str.PEReference:_forbidden_within_markup_decl_in_internal_subset_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov edx, 0x15
jmp 0x14027afc2
mov rsi, qword [rsi + 8]
mov r14, qword [0x14037e008]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140156fe0
mov rcx, rsi
mov rdx, rdi
mov r8d, ebx
xor r9d, r9d
mov rax, r15
mov r10, r14
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp r10