Function at 0x14000cad0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x14000ce50
cmp al, 0x54
je 0x14000ce60
cmp al, 0x73
je 0x14000cb50
cmp al, 0x66
je 0x14000cbc0
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x14000cb1c
cmp al, 0x6f
jne 0x14000cc58
cmp byte [rdx + 1], 0x6e
jne 0x14000cb64
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14000c4a0
mov rsi, rax
test rax, rax
je 0x14000ce40
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x14000cd90
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x14000cd00
cmp al, 0x70
je 0x14000cff0
mov rcx, rbx
call fcn.14000c300
mov rsi, rax
test rax, rax
je 0x14000ce40
mov eax, dword [rax]
cmp eax, 0x33
je 0x14000ccb0
cmp eax, 0x34
je 0x14000cea8
cmp eax, 0x35
jne 0x14000ce40
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x14000cf82
mov rcx, rbx
call fcn.14000cad0
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x14000cdab
cmp byte [rdx + 1], 0x70
jne 0x14000cb64
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 2]
cmp al, 0x54
je 0x14000cfe0
cmp al, 0x5f
je 0x14000cf70
cmp al, 0x6e
je 0x14000ce40
call fcn.14000a520
mov ecx, eax
add ecx, 1
js 0x14000ce40
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x14000ce40
add rdx, 1
mov qword [rbx + 0x18], rdx
cmp ecx, 0x7fffffff
je 0x14000ce40
lea edx, [rax + 2]
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x14000ce40
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x14000cb42
cmp al, 0x69
je 0x14000cc64
cmp al, 0x74
jne 0x14000ce70
cmp byte [rdx + 1], 0x6c
jne 0x14000cb64
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x14000d0b0
cmp byte [rdx], 0
je 0x14000ce40
cmp byte [rdx + 1], 0
je 0x14000ce40
mov edx, 0x45
mov rcx, rbx
call fcn.14000d2a0
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x14000cdab
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x14000cdc0
cmp byte [rdi + 1], 0x74
jne 0x14000cdc0
cmp byte [rdi + 2], 0
jne 0x14000cdc0
mov rcx, rbx
call fcn.14000b470
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x14000cdab
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x14000d015
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x14000d00d
sub eax, 0x43
cmp al, 0x37
ja 0x14000d015
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x14000d015
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.14000d6a0
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x14000cd70
add rax, 1
mov qword [rbx + 0x18], rax
nop word cs:[rax + rax]
nop
xor r8d, r8d
mov rcx, rbx
call fcn.14000c4a0
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x14000cb42
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14000d580
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14000a3c0
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x14000ced0
jg 0x14000d028
test ebp, ebp
je 0x14000cebd
cmp ebp, 1
jne 0x14000ce40
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x14000cfa0
cmp dl, 0x70
je 0x14000cfa0
xor ebp, ebp
cmp eax, 0x73
jne 0x14000cfd0
cmp byte [rdi + 1], 0x50
jne 0x14000cfd0
cmp byte [rdi + 2], 0
jne 0x14000cfd0
mov rcx, rbx
call fcn.14000d580
mov r9, rax
test ebp, ebp
je 0x14000cbad
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.14000a3c0
mov r9, rax
jmp 0x14000cbad
xor esi, esi
jmp 0x14000cb42
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14000e4d0
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14000ad10
cmp al, 0x75
jne 0x14000cb64
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.14000b080
mov rcx, rbx
mov rsi, rax
call fcn.14000d580
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x14000cdab
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x14000cba2
cmp eax, 3
je 0x14000ce40
test eax, eax
jne 0x14000ce40
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x14000cdab
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x14000d1e4
cmp dl, 0x66
je 0x14000d249
cmp eax, 0x64
jne 0x14000d22d
cmp byte [rdi + 1], 0x69
jne 0x14000d22d
cmp byte [rdi + 2], 0
jne 0x14000d22d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14000c4a0
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x14000d160
cmp byte [rdi + 1], 0x6c
jne 0x14000d160
cmp byte [rdi + 2], 0
jne 0x14000d160
mov edx, 0x45
mov rcx, rbx
call fcn.14000d2a0
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.14000a3c0
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x14000cdab
add rdx, 3
mov qword [rcx + 0x18], rdx
mov edx, 1
jmp 0x14000cc1e
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14000d2a0
mov r9, rax
jmp 0x14000cbad
cmp byte [rdi + 1], dl
jne 0x14000cdf4
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x14000cdf6
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x14000cdf4
mov rcx, rbx
call fcn.14000cad0
mov r9, rax
jmp 0x14000ce1e
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x14000cc1e
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.14000cad0
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x14000cdab
cmp al, 0x2f
jg 0x14000cd3e
mov rcx, rbx
call fcn.14000b470
mov rdx, rax
jmp 0x14000cd70
cmp ebp, 3
jne 0x14000ce40
cmp eax, 0x71
jne 0x14000d0c8
cmp byte [rdi + 1], 0x75
jne 0x14000d0c8
cmp byte [rdi + 2], 0
jne 0x14000d0c8
mov rcx, rbx
call fcn.14000cad0
mov rcx, rbx
mov rdi, rax
call fcn.14000cad0
mov rcx, rbx
mov rbp, rax
call fcn.14000cad0
mov r9, rax
test rax, rax
je 0x14000ce40
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.14000a3c0
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.14000a3c0
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x14000cdab
mov rcx, rbx
call fcn.14000b470
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x14000cc80
cmp eax, 0x64
jne 0x14000d0dd
cmp byte [rdi + 1], 0x58
jne 0x14000d0dd
cmp byte [rdi + 2], 0
je 0x14000d04a
movzx eax, byte [rdi]
cmp al, 0x66
je 0x14000d259
cmp al, 0x6e
jne 0x14000ce40
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x14000d100
cmp al, 0x61
jne 0x14000ce40
mov edx, 0x5f
mov rcx, rbx
call fcn.14000d2a0
mov rcx, rbx
mov rdi, rax
call fcn.14000b470
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x14000d28d
cmp dl, 0x70
je 0x14000d266
cmp dl, 0x69
jne 0x14000ce40
cmp byte [rax + 1], 0x6c
jne 0x14000ce40
mov rcx, rbx
call fcn.14000cad0
mov r9, rax
jmp 0x14000d074
cmp eax, 0x64
jne 0x14000d208
cmp byte [rdi + 1], 0x74
jne 0x14000d208
cmp byte [rdi + 2], 0
jne 0x14000d208
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x14000d23d
cmp dl, 0x73
jne 0x14000d19c
cmp byte [rax + 1], 0x72
je 0x14000d21d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14000c4a0
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x14000cf43
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14000d580
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.14000a3c0
mov rdi, rax
jmp 0x14000cf43
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x14000d1f8
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x14000cedd
mov rcx, rbx
call fcn.14000b470
mov rbp, rax
jmp 0x14000cf13
cmp eax, 0x70
jne 0x14000d21d
cmp byte [rdi + 1], 0x74
jne 0x14000d21d
cmp byte [rdi + 2], 0
je 0x14000d17d
mov rcx, rbx
call fcn.14000cad0
mov rdi, rax
jmp 0x14000cf43
mov rcx, rbx
call fcn.14000cad0
mov rbp, rax
jmp 0x14000cf13
cmp byte [rax + 1], 0x73
jne 0x14000d19c
jmp 0x14000d21d
mov rcx, rbx
call fcn.14000c300
mov rbp, rax
jmp 0x14000cf13
mov rcx, rbx
call fcn.14000c300
jmp 0x14000d052
cmp byte [rax + 1], 0x69
jne 0x14000ce40
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14000d2a0
mov r9, rax
jmp 0x14000d074
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x14000d074