Function at 0x14020f760
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x14020fae0
cmp al, 0x54
je 0x14020faf0
cmp al, 0x73
je 0x14020f7e0
cmp al, 0x66
je 0x14020f850
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x14020f7ac
cmp al, 0x6f
jne 0x14020f8e8
cmp byte [rdx + 1], 0x6e
jne 0x14020f7f4
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14020ebe0
mov rsi, rax
test rax, rax
je 0x14020fad0
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x14020fa18
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x14020f990
cmp al, 0x70
je 0x14020fc80
mov rcx, rbx
call fcn.14020ea40
mov rsi, rax
test rax, rax
je 0x14020fad0
mov eax, dword [rax]
cmp eax, 0x33
je 0x14020f940
cmp eax, 0x34
je 0x14020fb38
cmp eax, 0x35
jne 0x14020fad0
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x14020fc12
mov rcx, rbx
call fcn.14020f760
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x14020fa33
cmp byte [rdx + 1], 0x70
jne 0x14020f7f4
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 2]
cmp al, 0x54
je 0x14020fc70
cmp al, 0x5f
je 0x14020fc00
cmp al, 0x6e
je 0x14020fad0
call fcn.14020cbe0
mov ecx, eax
add ecx, 1
js 0x14020fad0
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x14020fad0
add rdx, 1
mov qword [rbx + 0x18], rdx
cmp ecx, 0x7fffffff
je 0x14020fad0
lea edx, [rax + 2]
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x14020fad0
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x14020f7d2
cmp al, 0x69
je 0x14020f8f4
cmp al, 0x74
jne 0x14020fb00
cmp byte [rdx + 1], 0x6c
jne 0x14020f7f4
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x14020fd40
cmp byte [rdx], 0
je 0x14020fad0
cmp byte [rdx + 1], 0
je 0x14020fad0
mov edx, 0x45
mov rcx, rbx
call fcn.140210160
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x14020fa33
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x14020fa48
cmp byte [rdi + 1], 0x74
jne 0x14020fa48
cmp byte [rdi + 2], 0
jne 0x14020fa48
mov rcx, rbx
call fcn.14020db60
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x14020fa33
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x14020fca5
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x14020fc9d
sub eax, 0x43
cmp al, 0x37
ja 0x14020fca5
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x14020fca5
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.14020f5e0
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x14020f9f8
add rax, 1
mov qword [rbx + 0x18], rax
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rbx
call fcn.14020ebe0
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x14020f7d2
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14020f490
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14020ca80
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x14020fb60
jg 0x14020fcb8
test ebp, ebp
je 0x14020fb4d
cmp ebp, 1
jne 0x14020fad0
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x14020fc30
cmp dl, 0x70
je 0x14020fc30
xor ebp, ebp
cmp eax, 0x73
jne 0x14020fc60
cmp byte [rdi + 1], 0x50
jne 0x14020fc60
cmp byte [rdi + 2], 0
jne 0x14020fc60
mov rcx, rbx
call fcn.14020f490
mov r9, rax
test ebp, ebp
je 0x14020f83d
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.14020ca80
mov r9, rax
jmp 0x14020f83d
xor esi, esi
jmp 0x14020f7d2
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14020f210
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14020d3a0
cmp al, 0x75
jne 0x14020f7f4
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.14020d780
mov rcx, rbx
mov rsi, rax
call fcn.14020f490
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x14020fa33
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x14020f832
cmp eax, 3
je 0x14020fad0
test eax, eax
jne 0x14020fad0
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x14020fa33
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x14020fe74
cmp dl, 0x66
je 0x14020fed9
cmp eax, 0x64
jne 0x14020febd
cmp byte [rdi + 1], 0x69
jne 0x14020febd
cmp byte [rdi + 2], 0
jne 0x14020febd
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14020ebe0
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x14020fdf0
cmp byte [rdi + 1], 0x6c
jne 0x14020fdf0
cmp byte [rdi + 2], 0
jne 0x14020fdf0
mov edx, 0x45
mov rcx, rbx
call fcn.140210160
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.14020ca80
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x14020fa33
add rdx, 3
mov qword [rcx + 0x18], rdx
mov edx, 1
jmp 0x14020f8ae
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140210160
mov r9, rax
jmp 0x14020f83d
cmp byte [rdi + 1], dl
jne 0x14020fa7c
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x14020fa7e
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x14020fa7c
mov rcx, rbx
call fcn.14020f760
mov r9, rax
jmp 0x14020faa6
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x14020f8ae
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.14020f760
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x14020fa33
cmp al, 0x2f
jg 0x14020f9ce
mov rcx, rbx
call fcn.14020db60
mov rdx, rax
jmp 0x14020f9f8
cmp ebp, 3
jne 0x14020fad0
cmp eax, 0x71
jne 0x14020fd58
cmp byte [rdi + 1], 0x75
jne 0x14020fd58
cmp byte [rdi + 2], 0
jne 0x14020fd58
mov rcx, rbx
call fcn.14020f760
mov rcx, rbx
mov rdi, rax
call fcn.14020f760
mov rcx, rbx
mov rbp, rax
call fcn.14020f760
mov r9, rax
test rax, rax
je 0x14020fad0
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.14020ca80
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.14020ca80
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x14020fa33
mov rcx, rbx
call fcn.14020db60
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x14020f910
cmp eax, 0x64
jne 0x14020fd6d
cmp byte [rdi + 1], 0x58
jne 0x14020fd6d
cmp byte [rdi + 2], 0
je 0x14020fcda
movzx eax, byte [rdi]
cmp al, 0x66
je 0x14020fee9
cmp al, 0x6e
jne 0x14020fad0
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x14020fd90
cmp al, 0x61
jne 0x14020fad0
mov edx, 0x5f
mov rcx, rbx
call fcn.140210160
mov rcx, rbx
mov rdi, rax
call fcn.14020db60
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x14020ff1d
cmp dl, 0x70
je 0x14020fef6
cmp dl, 0x69
jne 0x14020fad0
cmp byte [rax + 1], 0x6c
jne 0x14020fad0
mov rcx, rbx
call fcn.14020f760
mov r9, rax
jmp 0x14020fd04
cmp eax, 0x64
jne 0x14020fe98
cmp byte [rdi + 1], 0x74
jne 0x14020fe98
cmp byte [rdi + 2], 0
jne 0x14020fe98
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x14020fecd
cmp dl, 0x73
jne 0x14020fe2c
cmp byte [rax + 1], 0x72
je 0x14020fead
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14020ebe0
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x14020fbd3
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14020f490
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.14020ca80
mov rdi, rax
jmp 0x14020fbd3
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x14020fe88
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x14020fb6d
mov rcx, rbx
call fcn.14020db60
mov rbp, rax
jmp 0x14020fba3
cmp eax, 0x70
jne 0x14020fead
cmp byte [rdi + 1], 0x74
jne 0x14020fead
cmp byte [rdi + 2], 0
je 0x14020fe0d
mov rcx, rbx
call fcn.14020f760
mov rdi, rax
jmp 0x14020fbd3
mov rcx, rbx
call fcn.14020f760
mov rbp, rax
jmp 0x14020fba3
cmp byte [rax + 1], 0x73
jne 0x14020fe2c
jmp 0x14020fead
mov rcx, rbx
call fcn.14020ea40
mov rbp, rax
jmp 0x14020fba3
mov rcx, rbx
call fcn.14020ea40
jmp 0x14020fce2
cmp byte [rax + 1], 0x69
jne 0x14020fad0
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140210160
mov r9, rax
jmp 0x14020fd04
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x14020fd04