Function at 0x1402672a7
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rax, qword [0x14033f038]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0
mov rax, qword [rcx + 0x38]
mov rcx, qword [rax + 0x20]
cmp byte [rcx], 0x3c
jne 0x14026730b
cmp byte [rcx + 1], 0x21
jne 0x14026730b
cmp byte [rcx + 2], 0x45
jne 0x14026730b
cmp byte [rcx + 3], 0x4c
jne 0x14026730b
cmp byte [rcx + 4], 0x45
jne 0x14026730b
cmp byte [rcx + 5], 0x4d
jne 0x14026730b
cmp byte [rcx + 6], 0x45
jne 0x14026730b
cmp byte [rcx + 7], 0x4e
jne 0x14026730b
cmp byte [rcx + 8], 0x54
je 0x140267326
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
nop
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov ebp, dword [rax + 0x5c]
add rcx, 9
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 9
mov rcx, qword [rsi + 0x38]
mov rax, qword [rcx + 0x20]
cmp byte [rax], 0
jne 0x140267350
mov edx, 0xfa
call fcn.1400f75fb
mov rcx, rsi
call fcn.140091996
test eax, eax
jne 0x14026738c
lea rdi, str.Space_required_after_ELEMENT_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov edx, 0x41
mov r8, rdi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp fcn.140262db5
mov rcx, rsi
call fcn.1400fa1dd
test rax, rax
je 0x140267562
mov rdi, rax
mov rcx, rsi
call fcn.140091996
test eax, eax
je 0x140267583
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 0x20]
movzx edx, byte [rcx]
cmp edx, 0x44
jg 0x140267482
cmp edx, 0x41
jne 0x140267539
cmp byte [rcx + 1], 0x4e
jne 0x140267633
cmp byte [rcx + 2], 0x59
jne 0x140267633
add rcx, 3
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 3
mov rcx, qword [rsi + 0x38]
mov rax, qword [rcx + 0x20]
mov ebx, 2
cmp byte [rax], 0
jne 0x14026740d
mov edx, 0xfa
call fcn.1400f75fb
mov rcx, rsi
call fcn.140091996
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 0x20]
cmp byte [rcx], 0x3e
jne 0x14026759c
cmp ebp, dword [rax + 0x5c]
jne 0x1402675b1
mov rcx, rsi
call fcn.14009207a
mov rax, qword [rsi]
test rax, rax
je 0x14026744c
cmp dword [rsi + 0x13c], 0
je 0x1402674d5
mov rdi, qword [rsp + 0x28]
test rdi, rdi
je 0x14026730b
mov rsi, qword [rsi + 0x10]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov rdx, rdi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp fcn.140273660
cmp edx, 0x45
jne 0x140267633
cmp byte [rcx + 1], 0x4d
jne 0x140267633
cmp byte [rcx + 2], 0x50
jne 0x140267633
cmp byte [rcx + 3], 0x54
jne 0x140267633
cmp byte [rcx + 4], 0x59
jne 0x140267633
add rcx, 5
mov qword [rax + 0x20], rcx
mov rax, qword [rsi + 0x38]
add dword [rax + 0x38], 5
mov rcx, qword [rsi + 0x38]
mov rax, qword [rcx + 0x20]
mov ebx, 1
jmp 0x1402673fe
mov r15, qword [rax + 0x48]
test r15, r15
je 0x14026744c
mov r14, qword [rsp + 0x28]
test r14, r14
je 0x1402675ca
mov qword [r14 + 0x20], 0
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov rax, qword [rax + 0x48]
mov rdx, rdi
mov r8d, ebx
mov r9, r14
call qword [case.0x140211850.0]
cmp qword [r14 + 0x20], 0
jne 0x14026730b
mov rsi, qword [rsi + 0x10]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov rdx, r14
jmp 0x140267471
cmp edx, 0x25
je 0x140267603
cmp edx, 0x28
jne 0x140267633
lea r8, [rsp + 0x28]
mov rcx, rsi
mov rdx, rdi
call fcn.14026719b
mov ebx, eax
jmp 0x14026740d
lea rdi, str.xmlParseElementDecl:_no_name_for_Element_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov edx, 0x44
jmp 0x140267378
lea r8, str.Space_required_after_the_element_name_n
mov rcx, rsi
mov edx, 0x41
call fcn.140262db5
jmp 0x1402673b0
mov rcx, rsi
mov edx, 0x49
xor r8d, r8d
call fcn.1400fbd3a
jmp 0x14026744c
lea r8, str.Element_declaration_doesnt_start_and_stop_in_the_same_entity_n
mov rcx, rsi
mov edx, 0x5a
call fcn.140262db5
jmp 0x14026742f
mov rsi, qword [rsi + 8]
mov r14, qword [case.0x140211850.0]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov rdx, rdi
mov r8d, ebx
xor r9d, r9d
mov rax, r15
mov r10, r14
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp r10
cmp dword [rsi + 0x8c], 0
jne 0x140267633
cmp dword [rsi + 0x40], 1
jne 0x140267633
lea rdi, str.PEReference:_forbidden_within_markup_decl_in_internal_subset_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov edx, 0x15
jmp 0x140267378
lea rdi, str.xmlParseElementDecl:_EMPTY__ANY_or___expected_n
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140171860
mov rcx, rsi
mov edx, 0x36
jmp 0x140267378