Function at 0x1400a9130
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov r12, rdx
mov rbx, rcx
mov qword [rsp + 0x40], rcx
test rdx, rdx
je 0x1400a9747
mov edx, 0x5a4d
cmp word [r12], dx
sete al
mov byte [rcx + 8], al
jne 0x1400a9785
movsxd rdx, dword [r12 + 0x3c]
add rdx, r12
cmp dword [rdx], 0x4550
sete al
mov byte [rcx + 9], al
jne 0x1400a97f4
movzx ecx, word [rdx + 4]
mov word [rbx + 0xa], cx
cmp dword [rdx + 0x58], 0
setne al
mov byte [rbx + 0xc], al
mov eax, 0x14c
cmp cx, ax
jne 0x1400a91af
mov eax, dword [rdx + 0x50]
jmp 0x1400a91f1
mov eax, 0x8664
cmp cx, ax
jne 0x1400a91be
mov eax, dword [rdx + 0x50]
jmp 0x1400a91f1
mov eax, 0xaa64
cmp cx, ax
jne 0x1400a91cd
mov eax, dword [rdx + 0x50]
jmp 0x1400a91f1
mov dword [rsp + 0x20], ecx
lea r9, str.Unsupported_MachineType:_0x_d
xor r8d, r8d
mov edx, 0xc1
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov eax, 0xff
mov dword [rbx + 0x10], eax
lea r13, [0x14045ffd8]
mov rsi, r13
cmp qword [0x14045fff0], 8
cmovae rsi, qword [0x14045ffd8]
mov rax, qword [0x14045ffe8]
lea rdi, [rax + rax]
mov r14d, dword [rbx + 0x10]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r12
lea r9, str.Haystack:__p__HaystackSize:__d__Needle:__p__NeedleLength:__d
xor r8d, r8d
mov edx, 0x590
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
test rsi, rsi
je 0x1400a9866
test r14, r14
je 0x1400a9866
test rdi, rdi
je 0x1400a9866
cmp rdi, r14
ja 0x1400a9866
lfence
lea r15, [r12 - 1]
add r15, r14
mov rbx, r12
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
lea r9, str.pCurrent:__p__pEnd:__p
xor r8d, r8d
mov edx, 0x5a9
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
cmp rdi, r14
jne 0x1400a92c0
mov r8d, r14d
mov rdx, rsi
mov rcx, r12
call fcn.140299030
xor edi, edi
test eax, eax
cmove rdi, r12
jmp 0x1400a9325
xor r14b, r14b
nop dword [rax]
nop word [rax + rax]
mov rax, r15
sub rax, rdi
inc rax
cmp rbx, rax
jae 0x1400a931c
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.140299030
test eax, eax
jne 0x1400a942b
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rsi
lea r9, str.Found__p_at_pos:__p
xor r8d, r8d
mov edx, 0x5b5
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
mov r14b, 1
xor edi, edi
test r14b, r14b
cmovne rdi, rbx
test rdi, rdi
je 0x1400a9866
cmp qword [0x14045fff0], 8
cmovae r13, qword [0x14045ffd8]
mov rax, rdi
sub rax, r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, str.Found__S_at_offset:_0x_x
xor r8d, r8d
mov edx, 0xd1
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x1400a9370
mov r14, qword [rsp + 0x40]
lea rcx, [r14 + 0x18]
mov rdx, rdi
call fcn.14003c410
lea r15, str.UEFI_REV
mov edi, dword [r14 + 0x10]
mov qword [rsp + 0x38], 8
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
lea r9, str.Haystack:__p__HaystackSize:__d__Needle:__p__NeedleLength:__d
xor r8d, r8d
mov edx, 0x590
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
test rdi, rdi
je 0x1400a9479
cmp rdi, 8
jb 0x1400a9479
lfence
lea rsi, [rdi - 1]
add rsi, r12
mov rbx, r12
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
lea r9, str.pCurrent:__p__pEnd:__p
xor r8d, r8d
mov edx, 0x5a9
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
movabs rdx, 0x5645525f49464555
cmp rdi, 8
jne 0x1400a9433
xor edi, edi
cmp qword [r12], rdx
cmove rdi, r12
jmp 0x1400a947b
inc rbx
jmp 0x1400a92d0
xor cl, cl
lea rax, [rsi - 7]
cmp rbx, rax
jae 0x1400a946a
cmp qword [rbx], rdx
jne 0x1400a9474
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r9, str.Found__p_at_pos:__p
xor r8d, r8d
mov edx, 0x5b5
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
mov cl, 1
xor edi, edi
test cl, cl
cmovne rdi, rbx
jmp 0x1400a947b
inc rbx
jmp 0x1400a9435
xor edi, edi
mov ecx, 0x10
call fcn.140296bf0
mov qword [r14 + 0x78], rax
xor r8d, r8d
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
test rdi, rdi
jne 0x1400a94ba
mov qword [rsp + 0x20], r15
lea r9, str._s_not_found
mov edx, 0xef
call fcn.1400e7220
xorps xmm0, xmm0
mov rax, qword [r14 + 0x78]
movups xmmword [rax], xmm0
jmp 0x1400a94e5
mov rax, rdi
sub rax, r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, str.Found__S_at_offset:_0x_x
mov edx, 0xf7
call fcn.1400e7220
mov rax, qword [r14 + 0x78]
movups xmm0, xmmword [rdi]
movups xmmword [rax], xmm0
lea r15, str.BIOS_IDTF
mov edi, dword [r14 + 0x10]
mov qword [rsp + 0x38], 9
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
lea r9, str.Haystack:__p__HaystackSize:__d__Needle:__p__NeedleLength:__d
xor r8d, r8d
mov edx, 0x590
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
cmp rdi, 9
jb 0x1400a9620
lfence
lea rsi, [rdi - 1]
add rsi, r12
mov rbx, r12
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
lea r9, str.pCurrent:__p__pEnd:__p
xor r8d, r8d
mov edx, 0x5a9
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
movabs rdx, 0x5444495f534f4942
cmp rdi, 9
jne 0x1400a9594
mov rcx, qword [r12]
sub rcx, rdx
jne 0x1400a9589
movzx ecx, byte [r12 + 8]
mov eax, 0x46
movzx eax, al
sub rcx, rax
xor edi, edi
test rcx, rcx
cmove rdi, r12
jmp 0x1400a95dc
xor r8b, r8b
lea rax, [rsi - 8]
cmp rbx, rax
jae 0x1400a95d3
cmp qword [rbx], rdx
jne 0x1400a9618
cmp byte [rbx + 8], 0x46
jne 0x1400a9618
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r9, str.Found__p_at_pos:__p
xor r8d, r8d
mov edx, 0x5b5
lea rcx, str.D:JenkinsworkspaceCommoneeb7ab0aCommonCommonimpl_src_neutralUtils.cpp
call fcn.1400e7220
mov r8b, 1
xor edi, edi
test r8b, r8b
cmovne rdi, rbx
test rdi, rdi
je 0x1400a9620
mov rax, rdi
sub rax, r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, str.Found__S_at_offset:_0x_x
xor r8d, r8d
mov edx, 0x108
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov eax, dword [rdi + 0xa]
mov dword [r14 + 0x80], eax
jmp 0x1400a9640
inc rbx
jmp 0x1400a9597
mov qword [rsp + 0x20], r15
lea r9, str._s_not_found
xor r8d, r8d
mov edx, 0x10e
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov rbx, r12
xor edi, edi
mov r15d, 0xaa55
lea rsi, str.PCIR
mov eax, dword [r14 + 0x10]
dec eax
cmp edi, eax
jae 0x1400a96e6
cmp word [rbx], r15w
jne 0x1400a9739
mov rax, rbx
sub rax, r12
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
lea r9, str.Found_0x_x_at_offset:_0x_x
xor r8d, r8d
mov edx, 0x11b
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
movzx edx, word [rbx + 0x18]
lea r8, [rdx + rbx]
xor ecx, ecx
nop
movzx eax, byte [r8 + rcx]
inc rcx
cmp al, byte [rsi + rcx - 1]
jne 0x1400a9739
cmp rcx, 5
jne 0x1400a96a0
sub rdx, r12
add rdx, rbx
mov qword [rsp + 0x20], rdx
lea r9, str.Found_PCIR_at_Offset:_0x_x
xor r8d, r8d
mov edx, 0x12a
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov byte [r14 + 0x84], 1
cmp byte [r14 + 0x84], 0
jne 0x1400a9710
mov dword [rsp + 0x20], r15d
lea r9, str.0x_x_not_found
xor r8d, r8d
mov edx, 0x136
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov dword [rsp + 0x40], 0
mov eax, dword [rsp + 0x40]
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
inc rbx
inc edi
jmp 0x1400a9652
mov dword [rsp + 0x20], 0x80004003
lea r9, str.NULL_Exception__p_thrown:
xor r8d, r8d
mov edx, 0x91
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
lea rcx, [rsp + 0x58]
call fcn.14003d940
lea rdx, [0x14043a520]
lea rcx, [rsp + 0x58]
call fcn.140298f00
movzx eax, word [r12]
mov dword [rsp + 0x20], eax
lea r9, str.The_DOS_Signature_is_invalid._Signature:_0x_x
xor r8d, r8d
mov edx, 0x9b
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov dword [rsp + 0x20], 0x80004005
lea r9, str.Exception_0x_x_thrown:
xor r8d, r8d
mov edx, 0x9c
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov r8d, 0x80004005
lea rdx, str.Exception_thrown
lea rcx, [rsp + 0x68]
call fcn.14003b310
lea rdx, [0x14043a468]
lea rcx, [rsp + 0x68]
call fcn.140298f00
mov eax, dword [rdx]
mov dword [rsp + 0x20], eax
lea r9, str.The_NT_Signature_is_invalid._Signature:_0x_x
xor r8d, r8d
mov edx, 0xa6
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov dword [rsp + 0x20], 0x80004005
lea r9, str.Exception_0x_x_thrown:
xor r8d, r8d
mov edx, 0xa7
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov r8d, 0x80004005
lea rdx, str.Exception_thrown
lea rcx, [rsp + 0x80]
call fcn.14003b310
lea rdx, [0x14043a468]
lea rcx, [rsp + 0x80]
call fcn.140298f00
mov rcx, r13
call fcn.14003fb30
mov qword [rsp + 0x20], rax
lea r9, str._S_not_found
xor r8d, r8d
mov edx, 0xcd
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov dword [rsp + 0x20], 0x8000ffff
lea r9, str.Exception_0x_x_thrown:
xor r8d, r8d
mov edx, 0xce
lea rcx, str.D:JenkinsworkspaceToollib_f541e707ToollibGPUToolLibVBFlashimpl_src_neutralCompressedImage.cpp
call fcn.1400e7220
mov r8d, 0x8000ffff
lea rdx, str.Exception_thrown
lea rcx, [rsp + 0x98]
call fcn.14003b310
lea rdx, [0x14043a468]
lea rcx, [rsp + 0x98]
call fcn.140298f00
int3