Function at 0x1400e62d0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x70
mov r12, r9
mov r13, r8
mov esi, edx
mov rbx, rcx
xor dil, dil
mov eax, 0x5a4d
cmp word [rcx], ax
je 0x1400e6337
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, [0x14050f8c8]
mov qword [rsp + 0x38], rcx
lea rcx, str.Not_A_Valid_Dos_Stub____ws
lea r14, str.MbCommonSigVerify
mov r9d, 0x357
jmp 0x1400e65bf
movsxd rcx, dword [rcx + 0x3c]
add rcx, rbx
lea r15, [rbx + rsi]
lea rax, [rcx + 0x108]
cmp r15, rax
jb 0x1400e6372
cmp rbx, rcx
ja 0x1400e6372
cmp dword [rcx], 0x4550
jne 0x1400e6369
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1400e6369
mov dil, 1
lea r14, str.MbCommonSigVerify
jmp 0x1400e63b8
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, str.Not_a_64_bit_header
mov qword [rsp + 0x30], rcx
lea r14, str.MbCommonSigVerify
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 5
mov r9d, 0x35f
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
lea rdx, str.VerifyBuffer
mov rcx, rax
call r10
test dil, dil
jne 0x1400e6419
movsxd rcx, dword [rbx + 0x3c]
add rcx, rbx
lea rax, [rcx + 0xf8]
cmp r15, rax
jb 0x1400e63d5
cmp rbx, rcx
jbe 0x1400e6419
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, str.No_NT_Header
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 2
mov r9d, 0x368
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
lea rdx, str.VerifyBuffer
mov rcx, rax
call r10
jmp 0x1400e65e5
movsxd rcx, dword [rbx + 0x3c]
add rcx, rbx
test dil, dil
je 0x1400e647e
cmp dword [rcx], 0x4550
jne 0x1400e659a
mov eax, dword [rcx + 0xa8]
test eax, eax
je 0x1400e659a
lea rdx, [rbx + rax]
lea rax, [rbx + rsi]
cmp rdx, rax
ja 0x1400e659a
mov ecx, dword [rdx]
add rcx, rdx
lea rax, [rbx + rsi]
cmp rcx, rax
ja 0x1400e659a
cmp word [rdx + 6], 2
jne 0x1400e659a
mov eax, 0x200
cmp word [rdx + 4], ax
jne 0x1400e659a
jmp 0x1400e648c
mov r8d, esi
mov rdx, rbx
call fcn.1400e6670
mov rdx, rax
test rdx, rdx
je 0x1400e659a
lea rcx, [rbx + rsi]
cmp rdx, rcx
ja 0x1400e659a
lea r10, [rdx + 8]
mov r8, rsi
xor r9d, r9d
mov dword [rsp + 0x60], r9d
movsxd rax, dword [rbx + 0x3c]
mov edx, dword [rdx]
sub edx, 5
cmp byte [rsp + 0xb8], r9b
jne 0x1400e652a
add rax, rbx
mov qword [rsp + 0x48], rbx
mov rcx, r10
test dil, dil
je 0x1400e6501
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
movzx r9d, dil
call fcn.1400eb2b0
mov ebx, eax
mov dword [rsp + 0x60], eax
jmp 0x1400e65ee
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
call fcn.1400eb2b0
mov ebx, eax
mov dword [rsp + 0x60], eax
jmp 0x1400e65ee
lea rcx, [rbx + rax]
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x50], al
mov qword [rsp + 0x48], rbx
test dil, dil
je 0x1400e6571
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
movzx r9d, dil
mov rcx, r10
call fcn.1400e8030
mov ebx, eax
mov dword [rsp + 0x60], eax
jmp 0x1400e65ee
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
mov rcx, r10
call fcn.1400e8030
mov ebx, eax
mov dword [rsp + 0x60], eax
jmp 0x1400e65ee
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
lea rcx, [0x14050f8c8]
mov qword [rsp + 0x38], rcx
lea rcx, str.The_Certificate_is_not_there_____ws
mov r9d, 0x377
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 5
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonFileVerify.cpp
lea rdx, str.VerifyBuffer
mov rcx, rax
call r10
mov ebx, 0xc000007b
mov dword [rsp + 0x60], ebx
jmp 0x1400e664d
mov eax, ebx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret