Function at 0x140038654
Capabilities:
Parse pe header

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x18
lea rbp, [rsp + 0x10]
cmp byte [0x1400430ec], 0
jne 0x1400387dc
mov byte [0x1400430ec], 1
mov rdi, qword [0x14003c010]
movzx eax, word [rdi]
cmp eax, 0x5a4d
jne 0x1400386b7
movsxd rax, dword [rdi + 0x3c]
cmp dword [rdi + rax], 0x4550
jne 0x1400386b7
movzx ecx, word [rdi + rax + 0x18]
cmp ecx, 0x20b
jne 0x1400386b7
movzx eax, word [rdi + rax + 6]
shl rax, 3
lea rax, [rax + rax*4]
jmp 0x1400386b9
xor eax, eax
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.140001685
sub rsp, rax
mov rax, rsp
mov qword [0x140043150], rax
mov dword [0x140043114], 0
lea r14, [0x14003f4f0]
lea rbx, [0x14003f4f0]
mov rax, rbx
sub rax, r14
cmp rax, 7
jle 0x1400387dc
cmp rax, 0xc
jl 0x140038733
lea r14, [0x14003f4f0]
cmp dword [0x14003f4f0], 0
jne 0x140038744
cmp dword [0x14003f4f4], 0
jne 0x140038744
cmp dword [0x14003f4f8], 0
lea rax, [0x14003f4f0]
lea r14, [0x14003f4fc]
cmovne r14, rax
cmp dword [r14], 0
jne 0x140038744
cmp dword [r14 + 4], 0
je 0x1400387ed
cmp r14, rbx
jae 0x14003877c
lea rsi, [rbp + 4]
mov eax, dword [r14]
mov ecx, dword [r14 + 4]
add eax, dword [rcx + rdi]
add rcx, rdi
mov dword [rbp + 4], eax
sub rsp, 0x20
mov r8d, 4
mov rdx, rsi
call fcn.140038960
add rsp, 0x20
add r14, 8
cmp r14, rbx
jb 0x14003874d
mov eax, dword [0x140043114]
test eax, eax
jle 0x1400387dc
mov edi, 0x10
mov rdx, qword [0x140043150]
xor ebx, ebx
lea rsi, [rbp - 8]
mov r14, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rdx + rdi - 0x10]
test r8d, r8d
je 0x1400387cd
mov rcx, qword [rdx + rdi - 8]
mov rdx, qword [rdx + rdi]
sub rsp, 0x20
mov r9, rsi
call r14
add rsp, 0x20
mov rdx, qword [0x140043150]
mov eax, dword [0x140043114]
inc rbx
movsxd rcx, eax
add rdi, 0x28
cmp rbx, rcx
jl 0x14003879f
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov edx, dword [r14 + 8]
cmp edx, 1
jne 0x14003892e
add r14, 0xc
cmp r14, rbx
jae 0x14003877c
lea r15, [0x140038940]
mov r12d, 0x8b
lea r13, [0x14003f478]
lea rsi, [rbp - 8]
mov ecx, dword [r14 + 8]
mov r8d, ecx
and r8d, 0xf8
add r8d, 0xfffffff8
shrd r8d, ecx, 3
cmp r8d, 7
ja case.0x140038855.2
mov edx, dword [r14]
mov eax, dword [r14 + 4]
add rax, rdi
mov r9, qword [rdx + rdi]
movsxd r10, dword [r15 + r8*4]
add r10, r15
jmp r10
movzx r11d, byte [rax]
lea r10, [r11 - 0x100]
test r11b, r11b
jmp 0x14003888c
movzx r11d, word [rax]
lea r10, [r11 - 0x10000]
test r11w, r11w
jmp 0x14003888c
mov r11d, dword [rax]
movabs r10, 0xffffffff00000000
add r10, r11
test r11d, r11d
cmovns r10, r11
jmp 0x140038895
mov r10, qword [rax]
add rdx, rdi
sub r10, rdx
add r10, r9
mov qword [rbp - 8], r10
movzx edx, cl
cmp edx, 0x3f
ja 0x1400388d0
mov r11, 0xffffffffffffffff
mov ecx, edx
shl r11, cl
not r11
cmp r10, r11
jg 0x140038903
lea ecx, [rdx - 1]
mov r11, 0xffffffffffffffff
shl r11, cl
cmp r10, r11
jl 0x140038903
bt r12d, r8d
jae 0x1400388f1
mov ecx, r8d
mov r8, qword [r13 + rcx*8]
sub rsp, 0x20
mov rcx, rax
mov rdx, rsi
call fcn.140038960
add rsp, 0x20
add r14, 0xc
cmp r14, rbx
jb 0x14003881f
jmp 0x14003877c
sub rsp, 0x30
mov qword [rsp + 0x20], r10
lea rcx, str._d_bit_pseudo_relocation_at__p_out_of_range__targeting__p__yielding_the_value__p._n
mov r8, rax
call fcn.140038b1d
movzx edx, cl
sub rsp, 0x20
lea rcx, str.__Unknown_pseudo_relocation_bit_size__d._n
call fcn.140038b1d
sub rsp, 0x20
lea rcx, str.__Unknown_pseudo_relocation_protocol_version__d._n
call fcn.140038b1d
int3