Function at 0x14009a9c3
Capabilities:
Parse pe header

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, rdx
mov eax, 0
cmp word [rcx], 0x5a4d
jne 0x14009cbcf
movsxd rdx, dword [rcx + 0x3c]
add rdx, rcx
cmp dword [rdx], 0x4550
jne 0x14009cbcf
mov r13d, dword [rdx + 0x88]
test r13d, r13d
je 0x14009efc0
mov r13d, r13d
add r13, rcx
mov r12d, dword [r13 + 0x20]
mov ebp, dword [r13 + 0x18]
test ebp, ebp
je 0x14009efc0
mov ebp, ebp
mov ebx, 0
add r12, rcx
lea rax, [0x14009af29]
push rax
push r12
push r14
push rbp
mov rbp, rsp
sub rsp, 0xd0
mov eax, dword [rbp - 0xa]
mov dword [rbp - 0x99], edx
mov qword [rbp - 0xb0], r10
mov rcx, rcx
mov dword [rbp - 0x4b], edx
cmp eax, ecx
jo 0x14009aa98
sub dword [rbp - 0x3d], edx
mov dword [rbp - 0x31], edx
mov qword [rbp - 0x3e], rax
mov eax, dword [rbp - 0x53]
mov dword [rbp - 0x7e], edx
mov r14, qword [rbp - 0x7b]
sub eax, dword [rbp - 0xc8]
add r8, 0x89ee
mov word [0x1400cec66], ax
movzx eax, dl
mov ecx, dword [rbp - 0x6e]
cmp eax, dword [0x1400cf14a]
jne 0x14009aa95
movzx ecx, dl
movzx edx, ah
mov r12, r12
mov cl, al
mov rax, r14
mov eax, dword [rbp - 0x4c]
mov ecx, 0x785f
mov qword [rbp - 0x82], r10
movzx edx, al
cmp edx, dword [0x1400cead7]
je 0x14009aac0
movzx ecx, cl
mov dword [rbp - 0xa8], ecx
mov rcx, r11
mov edx, dword [rbp - 0xc]
mov word [rbp - 0x4e], cx
lea r8, [rbp - 0x21]
mov edx, dword [rbp - 0x8f]
cmp r11, r9
je 0x14009abcf
mov r14, qword [rbp - 0x44]
or edx, dword [rbp - 0xbc]
cmp r9, qword [0x1400cd333]
je 0x14009abc8
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009aba1
mov eax, dword [rbp - 0x86]
and rcx, qword [0x1400ce11a]
mov dword [rbp - 0xa3], eax
mov dword [rbp - 0x8c], eax
or ecx, dword [rbp - 0xb7]
mov edx, 0x9735
mov qword [rbp - 0x6b], r8
and ch, byte [rbp - 0x31]
sub qword [rbp - 0x28], r10
movzx ecx, cl
and rcx, 0xca90
xor ecx, dword [rbp - 0x7a]
mov r8, qword [rbp - 0x12]
mov r14, qword [rbp - 0xca]
mov r10, qword [rbp - 5]
mov rcx, 0xa4e6
sub edx, 0x854
mov rax, r11
mov qword [rbp - 0xcc], rcx
sub r11, 0x125e
mov ecx, dword [rbp - 0x8f]
or dword [rbp - 0x6f], ecx
sub dword [0x1400cd858], eax
add r14, r12
or dword [rbp - 0x6e], edx
add r8, 0xba8c
sub eax, dword [rbp - 0x76]
mov r12, qword [rbp - 0x9f]
mov edx, 0x5274
mov ax, word [rbp - 0x7b]
inc qword [rsp]
mov r11, 8
cmp qword [rsp], r11
jle 0x14009ab05
add rsp, 0x10
sub r11, qword [rbp - 0x70]
test dword [0x1400ce6a0], ecx
jb 0x14009abc2
lea r14, [rbp - 0x20]
mov edx, eax
add qword [rbp - 0xc3], rcx
mov rax, qword [rbp - 0x18]
mov r14, qword [rbp - 0x5a]
cmp r9, 0xffffffffe3ed7950
jae 0x14009ac1a
xor dword [rbp - 0x6a], eax
mov rax, r8
lea r11, [rbp - 0x99]
and qword [rbp - 0x98], r8
mov dx, word [rbp - 0x5b]
add r12, qword [rbp - 0x81]
mov qword [rbp - 0x5c], r8
lea rcx, [rbp - 0x8b]
mov r11, qword [rbp - 0x22]
add ecx, 0x29bf
and edx, dword [rbp - 0x90]
mov eax, dword [rbp - 0x33]
mov qword [rbp - 0xbf], r8
mov r10, r9
add r11, r8
or ecx, dword [rbp - 0xaa]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009ac49
mov eax, ecx
mov edx, edx
mov dword [rbp - 0x4f], eax
inc qword [rsp]
mov ecx, 5
cmp ecx, dword [rsp]
jl 0x14009ac3e
add rsp, 0x10
mov rcx, 0x31c7
cmp ecx, 0x45999cb3
jo 0x14009ac71
mov r11, qword [rbp - 7]
sub eax, ecx
mov eax, edx
movzx ecx, cx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009acbe
movzx edx, dl
mov rdx, rax
mov qword [rbp - 0x7f], rdx
mov qword [0x1400cd425], r14
mov qword [0x1400cd7c0], r8
movzx eax, dl
mov r11, 0xc703
mov qword [rbp - 0x5e], rdx
add edx, dword [rbp - 0x6f]
mov edx, dword [rbp - 0x40]
mov edx, dword [rbp - 0xad]
mov ecx, dword [rbp - 0x9d]
lea edx, [rbp - 0x3f]
inc qword [rsp]
cmp qword [rsp], 0x24
jle 0x14009ac7f
add rsp, 0x10
cmp r10, 0x624a6c69
ja 0x14009ade5
and dword [rbp - 0x94], eax
mov eax, dword [rbp - 0xa0]
mov dword [rbp - 0x9b], edx
mov qword [rbp - 0x5c], rcx
mov dword [0x1400cd80a], edx
mov r9, rdx
mov qword [rbp - 0x98], rax
cmp edx, dword [0x1400cd274]
jmp 0x14009ada5
mov dword [rbp - 0x49], ecx
movzx eax, al
mov dword [rbp - 0x7f], eax
mov r8, r9
mov dword [0x1400cbf94], edx
sub r14, r9
and edx, eax
mov qword [rbp - 0x25], r14
xor edx, dword [rbp - 0x64]
mov qword [rbp - 0x6d], r12
movzx eax, cl
sub rdx, qword [rbp - 0x2d]
add dword [rbp - 0xb0], edx
mov r11, rcx
mov qword [rbp - 0x3d], rcx
mov r8, qword [rbp - 0xc2]
movzx eax, dh
add eax, 0x4558
sub ecx, dword [rbp - 0x2c]
cmp edx, dword [0x1400cc85e]
jno 0x14009adf5
and ecx, dword [rbp - 0x17]
cmp r10, qword [0x1400cb080]
ja 0x14009ae0f
sub r12, qword [rbp - 0x6a]
mov r14, qword [rbp - 0x97]
add dword [rbp - 0x38], eax
add ax, word [rbp - 0x2f]
or r14, qword [rbp - 0xa2]
cmp eax, edx
jb 0x14009ae21
mov r9, rax
mov qword [rbp - 0xab], r8
movzx ecx, ch
mov edx, dword [rbp - 0x91]
mov eax, dword [rbp - 0xf]
mov r14, r14
mov eax, eax
mov r11, qword [rbp - 0x4c]
add r10, r12
mov dword [rbp - 0xb0], eax
and edx, dword [0x1400cd385]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009af0b
mov ecx, ecx
xor r11, qword [rbp - 0xcb]
mov eax, eax
mov edx, ecx
mov ch, ch
mov r11, r9
mov edx, dword [rbp - 0x79]
mov ecx, dword [rbp - 0x35]
mov ecx, dword [rbp - 0x5f]
mov qword [rbp - 0x25], rdx
mov r8, 0x58f1
mov ecx, dword [rbp - 0x29]
mov dword [0x1400ce6dd], ecx
mov qword [rbp - 0x5d], r10
add dword [rbp - 0x95], ecx
mov eax, dword [rbp - 0x83]
mov dword [rbp - 0x60], ecx
mov qword [rbp - 0xce], r12
mov qword [rbp - 0xa0], rax
add r14, qword [rbp - 0x49]
sub rcx, qword [0x1400cb870]
mov dword [rbp - 0x38], ecx
mov ecx, dword [rbp - 0x75]
add cl, 0x1f
mov edx, dword [rbp - 0x41]
lea r12, [rbp - 0x1a]
mov qword [rbp - 0x1d], r9
sub dword [rbp - 0x3e], eax
add rax, 0xd485
mov edx, 0xee2d
mov dword [rbp - 0x61], ecx
add ecx, edx
mov dword [rbp - 0x38], eax
mov qword [rbp - 0xc2], rcx
mov qword [rbp - 0xae], rcx
mov edx, dword [rbp - 0xc3]
mov rax, qword [rbp - 0x49]
sub qword [rbp - 0x9c], r14
mov ecx, dword [rbp - 0x8d]
inc qword [rsp]
cmp dword [rsp], 7
jl 0x14009ae5d
add rsp, 0x10
sub rax, qword [0x1400cd685]
leave
pop r14
pop r12
ret
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov eax, 0
jmp 0x14009cbcf