Function at 0x14000bed0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
mov rbx, rcx
mov r14, rdx
test rcx, rcx
je 0x14000bef5
cmp word [rcx], 0x5a4d
je 0x14000bf10
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rax, dword [rcx + 0x3c]
add rax, rcx
cmp dword [rax], 0x4550
jne 0x14000bef5
mov dword [rsp + 0x110], r8d
test byte [rax + 0x17], 0x20
je 0x14000bef5
movdqu xmm0, xmmword [rax + 0x88]
movdqu xmm1, xmmword [rax + 0x98]
movdqu xmm2, xmmword [rax + 0xa8]
movdqu xmm3, xmmword [rax + 0xb8]
movaps xmmword [rsp + 0x30], xmm0
movdqu xmm4, xmmword [rax + 0xc8]
mov edx, dword [rsp + 0x34]
movdqu xmm5, xmmword [rax + 0xd8]
movdqu xmm0, xmmword [rax + 0xe8]
movaps xmmword [rsp + 0x40], xmm1
movdqu xmm1, xmmword [rax + 0xf8]
movaps xmmword [rsp + 0x50], xmm2
movaps xmmword [rsp + 0x60], xmm3
movaps xmmword [rsp + 0x70], xmm4
movaps xmmword [rsp + 0x80], xmm5
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm1
test edx, edx
je 0x14000bef5
movsxd rsi, dword [rsp + 0x30]
test esi, esi
je 0x14000bef5
add rsi, rcx
mov edx, 0x4fd6ec0e
lea rcx, [0x1400197e0]
call fcn.140009c50
mov edx, 0x741ffdde
mov rcx, rax
call fcn.14000a290
movsxd r15, dword [rsi + 0x1c]
mov eax, dword [rsi + 0x18]
xor ecx, ecx
mov edx, 0x3d559a0a
add r15, rbx
mov dword [rsp + 0x24], eax
mov eax, dword [r15]
mov rdi, r15
mov dword [rsp + 0x28], eax
movsxd rax, dword [rsi + 0x20]
mov ebp, dword [rax + rbx]
call fcn.140009c50
mov r8d, dword [rsp + 0x110]
lea rdx, [0x140019100]
test rax, rax
je 0x14000c021
cmp qword [rax], 0
je 0x14000c021
lea rdx, [rax + 0x10]
mov dword [rsp + 0x110], r8d
cmp r14, rdx
je 0x14000c042
mov rcx, r14
call sub.ucrtbase.dll_strcmp
mov r8d, dword [rsp + 0x110]
test eax, eax
jne 0x14000c060
movsxd rax, dword [r15 - 4]
add rbx, rax
mov edx, 0x2e731b9e
lea rcx, [0x1400195a0]
call fcn.14000a290
jmp 0x14000bef7
mov eax, dword [rsp + 0x24]
xor esi, esi
test eax, eax
js 0x14000c150
mov qword [rsp + 0x100], rbx
mov r13, rdi
mov r12d, esi
mov qword [rsp + 0x108], r14
mov dword [rsp + 0x110], r8d
nop dword [rax]
mov edx, 0x2c5ca47a
lea rcx, [0x1400197c0]
movsxd rsi, ebp
add rsi, qword [rsp + 0x100]
call fcn.14000a290
lea r14, [0x140019100]
test rax, rax
je 0x14000c0c2
cmp qword [rax], 0
je 0x14000c0c2
lea r14, [rax + 0x10]
test rsi, rsi
je 0x14000c130
mov rcx, rsi
xor ebx, ebx
xor r15d, r15d
call sub.ucrtbase.dll_strlen
mov rdi, rax
jmp 0x14000c0f5
mov rcx, r14
add rbx, 1
call sub.ucrtbase.dll_strlen
cmp rax, rbx
je 0x14000c160
add r15, 1
cmp rdi, r15
jle 0x14000c238
movzx eax, byte [rsi + r15]
lea ecx, [rax - 0x41]
mov edx, eax
xor edx, 0x20
cmp cl, 0x1a
cmovb eax, edx
movzx edx, byte [r14 + rbx]
lea r8d, [rdx - 0x41]
mov ecx, edx
xor ecx, 0x20
cmp r8b, 0x1a
cmovb edx, ecx
cmp dl, al
je 0x14000c0e0
xor ebx, ebx
jmp 0x14000c0f1
mov eax, dword [r13 + 4]
add r13, 4
add ebp, 1
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x24]
add r12d, 1
cmp r12d, eax
jle 0x14000c090
xor ebx, ebx
jmp 0x14000c049
add dword [rsp + 0x24], 1
mov r8d, dword [rsp + 0x28]
cmp qword [rsp + 0x108], rsi
je 0x14000c1a0
mov rcx, qword [rsp + 0x108]
mov rdx, rsi
mov dword [rsp + 0x2c], r8d
call sub.ucrtbase.dll_strcmp
mov r8d, dword [rsp + 0x2c]
test eax, eax
je 0x14000c1a0
mov dword [rsp + 0x28], r8d
lea ebp, [rbp + rdi + 1]
jmp 0x14000c13f
mov edx, 0x4fd6ec0e
lea rcx, [0x1400197a0]
movsxd r15, r8d
mov rbx, qword [rsp + 0x100]
call fcn.14000a290
mov edx, 0x3d559a0a
lea rcx, [0x140019760]
call fcn.14000a290
mov edx, 0x17c17dbe
lea rcx, [0x140019740]
call fcn.14000a290
mov edx, 0x2398f21a
lea rcx, [0x140019700]
call fcn.14000a290
mov edx, 0x23c51eee
lea rcx, [0x1400196c0]
call fcn.14000a290
mov edx, 0x3d4fb0aa
lea rcx, [0x1400196a0]
call fcn.14000a290
mov r8d, dword [rsp + 0x110]
test r8d, r8d
jne 0x14000c230
movsxd rax, dword [rsp + 0x28]
add rbx, rax
jmp 0x14000c049
add rbx, r15
jmp 0x14000c049
add r13, 4
mov r8d, dword [r13]
jmp 0x14000c16a