Function at 0x1400d2aa0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x1400d2e20
cmp al, 0x54
je 0x1400d2e30
cmp al, 0x73
je 0x1400d2b20
cmp al, 0x66
je 0x1400d2b90
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x1400d2aec
cmp al, 0x6f
jne 0x1400d2c28
cmp byte [rdx + 1], 0x6e
jne 0x1400d2b34
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400d1f20
mov rsi, rax
test rax, rax
je 0x1400d2e10
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x1400d2d58
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x1400d2cd0
cmp al, 0x70
je 0x1400d2fc0
mov rcx, rbx
call fcn.1400d1d80
mov rsi, rax
test rax, rax
je 0x1400d2e10
mov eax, dword [rax]
cmp eax, 0x33
je 0x1400d2c80
cmp eax, 0x34
je 0x1400d2e78
cmp eax, 0x35
jne 0x1400d2e10
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x1400d2f52
mov rcx, rbx
call fcn.1400d2aa0
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x1400d2d73
cmp byte [rdx + 1], 0x70
jne 0x1400d2b34
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 2]
cmp al, 0x54
je 0x1400d2fb0
cmp al, 0x5f
je 0x1400d2f40
cmp al, 0x6e
je 0x1400d2e10
call fcn.1400cff20
mov ecx, eax
add ecx, 1
js 0x1400d2e10
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x1400d2e10
add rdx, 1
mov qword [rbx + 0x18], rdx
cmp ecx, 0x7fffffff
je 0x1400d2e10
lea edx, [rax + 2]
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x1400d2e10
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x1400d2b12
cmp al, 0x69
je 0x1400d2c34
cmp al, 0x74
jne 0x1400d2e40
cmp byte [rdx + 1], 0x6c
jne 0x1400d2b34
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x1400d3080
cmp byte [rdx], 0
je 0x1400d2e10
cmp byte [rdx + 1], 0
je 0x1400d2e10
mov edx, 0x45
mov rcx, rbx
call fcn.1400d34a0
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x1400d2d73
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x1400d2d88
cmp byte [rdi + 1], 0x74
jne 0x1400d2d88
cmp byte [rdi + 2], 0
jne 0x1400d2d88
mov rcx, rbx
call fcn.1400d0ea0
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x1400d2d73
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x1400d2fe5
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x1400d2fdd
sub eax, 0x43
cmp al, 0x37
ja 0x1400d2fe5
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x1400d2fe5
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.1400d2920
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x1400d2d38
add rax, 1
mov qword [rbx + 0x18], rax
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rbx
call fcn.1400d1f20
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x1400d2b12
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400d27d0
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400cfdc0
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x1400d2ea0
jg 0x1400d2ff8
test ebp, ebp
je 0x1400d2e8d
cmp ebp, 1
jne 0x1400d2e10
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x1400d2f70
cmp dl, 0x70
je 0x1400d2f70
xor ebp, ebp
cmp eax, 0x73
jne 0x1400d2fa0
cmp byte [rdi + 1], 0x50
jne 0x1400d2fa0
cmp byte [rdi + 2], 0
jne 0x1400d2fa0
mov rcx, rbx
call fcn.1400d27d0
mov r9, rax
test ebp, ebp
je 0x1400d2b7d
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.1400cfdc0
mov r9, rax
jmp 0x1400d2b7d
xor esi, esi
jmp 0x1400d2b12
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400d2550
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400d06e0
cmp al, 0x75
jne 0x1400d2b34
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.1400d0ac0
mov rcx, rbx
mov rsi, rax
call fcn.1400d27d0
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x1400d2d73
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x1400d2b72
cmp eax, 3
je 0x1400d2e10
test eax, eax
jne 0x1400d2e10
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x1400d2d73
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x1400d31b4
cmp dl, 0x66
je 0x1400d3219
cmp eax, 0x64
jne 0x1400d31fd
cmp byte [rdi + 1], 0x69
jne 0x1400d31fd
cmp byte [rdi + 2], 0
jne 0x1400d31fd
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400d1f20
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x1400d3130
cmp byte [rdi + 1], 0x6c
jne 0x1400d3130
cmp byte [rdi + 2], 0
jne 0x1400d3130
mov edx, 0x45
mov rcx, rbx
call fcn.1400d34a0
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.1400cfdc0
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x1400d2d73
add rdx, 3
mov qword [rcx + 0x18], rdx
mov edx, 1
jmp 0x1400d2bee
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400d34a0
mov r9, rax
jmp 0x1400d2b7d
cmp byte [rdi + 1], dl
jne 0x1400d2dbc
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x1400d2dbe
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x1400d2dbc
mov rcx, rbx
call fcn.1400d2aa0
mov r9, rax
jmp 0x1400d2de6
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x1400d2bee
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.1400d2aa0
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x1400d2d73
cmp al, 0x2f
jg 0x1400d2d0e
mov rcx, rbx
call fcn.1400d0ea0
mov rdx, rax
jmp 0x1400d2d38
cmp ebp, 3
jne 0x1400d2e10
cmp eax, 0x71
jne 0x1400d3098
cmp byte [rdi + 1], 0x75
jne 0x1400d3098
cmp byte [rdi + 2], 0
jne 0x1400d3098
mov rcx, rbx
call fcn.1400d2aa0
mov rcx, rbx
mov rdi, rax
call fcn.1400d2aa0
mov rcx, rbx
mov rbp, rax
call fcn.1400d2aa0
mov r9, rax
test rax, rax
je 0x1400d2e10
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.1400cfdc0
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.1400cfdc0
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x1400d2d73
mov rcx, rbx
call fcn.1400d0ea0
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x1400d2c50
cmp eax, 0x64
jne 0x1400d30ad
cmp byte [rdi + 1], 0x58
jne 0x1400d30ad
cmp byte [rdi + 2], 0
je 0x1400d301a
movzx eax, byte [rdi]
cmp al, 0x66
je 0x1400d3229
cmp al, 0x6e
jne 0x1400d2e10
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x1400d30d0
cmp al, 0x61
jne 0x1400d2e10
mov edx, 0x5f
mov rcx, rbx
call fcn.1400d34a0
mov rcx, rbx
mov rdi, rax
call fcn.1400d0ea0
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x1400d325d
cmp dl, 0x70
je 0x1400d3236
cmp dl, 0x69
jne 0x1400d2e10
cmp byte [rax + 1], 0x6c
jne 0x1400d2e10
mov rcx, rbx
call fcn.1400d2aa0
mov r9, rax
jmp 0x1400d3044
cmp eax, 0x64
jne 0x1400d31d8
cmp byte [rdi + 1], 0x74
jne 0x1400d31d8
cmp byte [rdi + 2], 0
jne 0x1400d31d8
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x1400d320d
cmp dl, 0x73
jne 0x1400d316c
cmp byte [rax + 1], 0x72
je 0x1400d31ed
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400d1f20
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x1400d2f13
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400d27d0
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.1400cfdc0
mov rdi, rax
jmp 0x1400d2f13
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x1400d31c8
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x1400d2ead
mov rcx, rbx
call fcn.1400d0ea0
mov rbp, rax
jmp 0x1400d2ee3
cmp eax, 0x70
jne 0x1400d31ed
cmp byte [rdi + 1], 0x74
jne 0x1400d31ed
cmp byte [rdi + 2], 0
je 0x1400d314d
mov rcx, rbx
call fcn.1400d2aa0
mov rdi, rax
jmp 0x1400d2f13
mov rcx, rbx
call fcn.1400d2aa0
mov rbp, rax
jmp 0x1400d2ee3
cmp byte [rax + 1], 0x73
jne 0x1400d316c
jmp 0x1400d31ed
mov rcx, rbx
call fcn.1400d1d80
mov rbp, rax
jmp 0x1400d2ee3
mov rcx, rbx
call fcn.1400d1d80
jmp 0x1400d3022
cmp byte [rax + 1], 0x69
jne 0x1400d2e10
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400d34a0
mov r9, rax
jmp 0x1400d3044
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x1400d3044