Function at 0x140002cc4
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140002d0e
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x140002d0e
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x140002d0e
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x140002d0e
cmp dword [rcx + 0x84], 0xe
jbe 0x140002d0e
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x140002d10
xor al, al
add rsp, 0x28
ret

Function at 0x141090058
Capabilities:
Decompress data using aplib

Disassembly:
call fcn.1410901df
push r10
mov r10, rsp
push r10
mov rsi, qword [r10 + 0x10]
mov rdi, qword [r10 + 0x20]
cld
mov dl, 0x80
mov al, byte [rsi]
inc rsi
mov byte [rdi], al
inc rdi
mov ebx, 2
add dl, dl
jne 0x141090089
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x14109006f
add dl, dl
jne 0x141090096
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1410900f6
xor eax, eax
add dl, dl
jne 0x1410900a5
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1410901ad
add dl, dl
jne 0x1410900b6
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1410900c3
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1410900d0
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1410900dd
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
je 0x1410900ea
push rdi
mov eax, eax
sub rdi, rax
mov al, byte [rdi]
pop rdi
mov byte [rdi], al
inc rdi
mov ebx, 2
jmp 0x14109007e
mov eax, 1
add dl, dl
jne 0x141090106
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x141090113
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x1410900fb
sub eax, ebx
mov ebx, 1
jne 0x14109014c
mov ecx, 1
add dl, dl
jne 0x14109012e
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x14109013b
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x141090123
push rsi
mov rsi, rdi
sub rsi, rbp
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x14109007e
dec eax
shl eax, 8
mov al, byte [rsi]
inc rsi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x141090168
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x141090175
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x14109015d
cmp eax, 0x7d00
jae 0x14109019b
cmp eax, 0x500
jb 0x141090196
inc ecx
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x14109007e
cmp eax, 0x7f
ja 0x14109019e
add ecx, 2
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x14109007e
mov al, byte [rsi]
inc rsi
xor ecx, ecx
shr al, 1
je 0x1410901d2
adc ecx, 2
mov ebp, eax
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
mov ebx, 1
jmp 0x14109007e
pop r10
sub rdi, qword [r10 + 0x20]
mov eax, edi
pop r10
ret 0x20

Function at 0x140001b28
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140001b72
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x140001b72
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x140001b72
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x140001b72
cmp dword [rcx + 0x84], 0xe
jbe 0x140001b72
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x140001b74
xor al, al
add rsp, 0x28
ret