Function at 0x140014be0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x140014f60
cmp al, 0x54
je 0x140014f70
cmp al, 0x73
je 0x140014c60
cmp al, 0x66
je 0x140014cd0
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x140014c2c
cmp al, 0x6f
jne 0x140014d68
cmp byte [rdx + 1], 0x6e
jne 0x140014c74
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140014060
mov rsi, rax
test rax, rax
je 0x140014f50
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x140014e98
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x140014e10
cmp al, 0x70
je 0x140015100
mov rcx, rbx
call fcn.140013ec0
mov rsi, rax
test rax, rax
je 0x140014f50
mov eax, dword [rax]
cmp eax, 0x33
je 0x140014dc0
cmp eax, 0x34
je 0x140014fb8
cmp eax, 0x35
jne 0x140014f50
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x140015092
mov rcx, rbx
call fcn.140014be0
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x140014eb3
cmp byte [rdx + 1], 0x70
jne 0x140014c74
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 2]
cmp al, 0x54
je 0x1400150f0
cmp al, 0x5f
je 0x140015080
cmp al, 0x6e
je 0x140014f50
call fcn.140012060
mov ecx, eax
add ecx, 1
js 0x140014f50
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x140014f50
add rdx, 1
mov qword [rbx + 0x18], rdx
cmp ecx, 0x7fffffff
je 0x140014f50
lea edx, [rax + 2]
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x140014f50
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x140014c52
cmp al, 0x69
je 0x140014d74
cmp al, 0x74
jne 0x140014f80
cmp byte [rdx + 1], 0x6c
jne 0x140014c74
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x1400151c0
cmp byte [rdx], 0
je 0x140014f50
cmp byte [rdx + 1], 0
je 0x140014f50
mov edx, 0x45
mov rcx, rbx
call fcn.1400155e0
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x140014eb3
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x140014ec8
cmp byte [rdi + 1], 0x74
jne 0x140014ec8
cmp byte [rdi + 2], 0
jne 0x140014ec8
mov rcx, rbx
call fcn.140012fe0
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x140014eb3
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x140015125
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x14001511d
sub eax, 0x43
cmp al, 0x37
ja 0x140015125
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x140015125
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.140014a60
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x140014e78
add rax, 1
mov qword [rbx + 0x18], rax
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rbx
call fcn.140014060
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140014c52
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140014910
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140011f00
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x140014fe0
jg 0x140015138
test ebp, ebp
je 0x140014fcd
cmp ebp, 1
jne 0x140014f50
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x1400150b0
cmp dl, 0x70
je 0x1400150b0
xor ebp, ebp
cmp eax, 0x73
jne 0x1400150e0
cmp byte [rdi + 1], 0x50
jne 0x1400150e0
cmp byte [rdi + 2], 0
jne 0x1400150e0
mov rcx, rbx
call fcn.140014910
mov r9, rax
test ebp, ebp
je 0x140014cbd
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.140011f00
mov r9, rax
jmp 0x140014cbd
xor esi, esi
jmp 0x140014c52
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140014690
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140012820
cmp al, 0x75
jne 0x140014c74
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.140012c00
mov rcx, rbx
mov rsi, rax
call fcn.140014910
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x140014eb3
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x140014cb2
cmp eax, 3
je 0x140014f50
test eax, eax
jne 0x140014f50
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x140014eb3
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x1400152f4
cmp dl, 0x66
je 0x140015359
cmp eax, 0x64
jne 0x14001533d
cmp byte [rdi + 1], 0x69
jne 0x14001533d
cmp byte [rdi + 2], 0
jne 0x14001533d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140014060
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x140015270
cmp byte [rdi + 1], 0x6c
jne 0x140015270
cmp byte [rdi + 2], 0
jne 0x140015270
mov edx, 0x45
mov rcx, rbx
call fcn.1400155e0
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.140011f00
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x140014eb3
add rdx, 3
mov qword [rcx + 0x18], rdx
mov edx, 1
jmp 0x140014d2e
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400155e0
mov r9, rax
jmp 0x140014cbd
cmp byte [rdi + 1], dl
jne 0x140014efc
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x140014efe
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x140014efc
mov rcx, rbx
call fcn.140014be0
mov r9, rax
jmp 0x140014f26
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x140014d2e
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.140014be0
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x140014eb3
cmp al, 0x2f
jg 0x140014e4e
mov rcx, rbx
call fcn.140012fe0
mov rdx, rax
jmp 0x140014e78
cmp ebp, 3
jne 0x140014f50
cmp eax, 0x71
jne 0x1400151d8
cmp byte [rdi + 1], 0x75
jne 0x1400151d8
cmp byte [rdi + 2], 0
jne 0x1400151d8
mov rcx, rbx
call fcn.140014be0
mov rcx, rbx
mov rdi, rax
call fcn.140014be0
mov rcx, rbx
mov rbp, rax
call fcn.140014be0
mov r9, rax
test rax, rax
je 0x140014f50
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.140011f00
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.140011f00
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x140014eb3
mov rcx, rbx
call fcn.140012fe0
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x140014d90
cmp eax, 0x64
jne 0x1400151ed
cmp byte [rdi + 1], 0x58
jne 0x1400151ed
cmp byte [rdi + 2], 0
je 0x14001515a
movzx eax, byte [rdi]
cmp al, 0x66
je 0x140015369
cmp al, 0x6e
jne 0x140014f50
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x140015210
cmp al, 0x61
jne 0x140014f50
mov edx, 0x5f
mov rcx, rbx
call fcn.1400155e0
mov rcx, rbx
mov rdi, rax
call fcn.140012fe0
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x14001539d
cmp dl, 0x70
je 0x140015376
cmp dl, 0x69
jne 0x140014f50
cmp byte [rax + 1], 0x6c
jne 0x140014f50
mov rcx, rbx
call fcn.140014be0
mov r9, rax
jmp 0x140015184
cmp eax, 0x64
jne 0x140015318
cmp byte [rdi + 1], 0x74
jne 0x140015318
cmp byte [rdi + 2], 0
jne 0x140015318
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x14001534d
cmp dl, 0x73
jne 0x1400152ac
cmp byte [rax + 1], 0x72
je 0x14001532d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140014060
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140015053
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140014910
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.140011f00
mov rdi, rax
jmp 0x140015053
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x140015308
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x140014fed
mov rcx, rbx
call fcn.140012fe0
mov rbp, rax
jmp 0x140015023
cmp eax, 0x70
jne 0x14001532d
cmp byte [rdi + 1], 0x74
jne 0x14001532d
cmp byte [rdi + 2], 0
je 0x14001528d
mov rcx, rbx
call fcn.140014be0
mov rdi, rax
jmp 0x140015053
mov rcx, rbx
call fcn.140014be0
mov rbp, rax
jmp 0x140015023
cmp byte [rax + 1], 0x73
jne 0x1400152ac
jmp 0x14001532d
mov rcx, rbx
call fcn.140013ec0
mov rbp, rax
jmp 0x140015023
mov rcx, rbx
call fcn.140013ec0
jmp 0x140015162
cmp byte [rax + 1], 0x69
jne 0x140014f50
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400155e0
mov r9, rax
jmp 0x140015184
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x140015184