Function at 0x140343d30
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov eax, dword [0x140b74f28]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp dword [0x140b74f2c], 0xa
setl dl
or dl, al
mov r13d, 0xcc8deeff
mov eax, 0xbb3cf18a
cmove r13d, eax
mov r8d, 0x564e349d
cmove r8d, eax
mov r9d, 0x20ab4f07
mov eax, 0xf45b43f4
cmove r9d, eax
mov r10d, 0x334d03ab
cmove r10d, eax
mov r11d, 0x7ec28e7d
mov eax, 0x509198cd
cmove r11d, eax
mov edx, 0x28111554
cmove edx, eax
mov r12d, 0xd7213288
mov eax, 0xc24e2d52
cmove r12d, eax
mov ebx, 0xe1e3ab59
cmove ebx, eax
mov qword [rsp + 0x18], rcx
mov esi, 0xfbf94842
mov r14d, 0xc9049e3b
mov r15d, 0x34b117de
jmp 0x140343de0
mov esi, 0x564e349d
nop dword [rax + rax]
mov edi, esi
cmp esi, 0xfbf94841
jg 0x140343e40
cmp edi, 0xcc8deefe
jle 0x140343ea0
cmp edi, 0xedb30709
jg 0x140343f1e
cmp edi, 0xcc8deeff
je 0x140343ff5
cmp edi, 0xd7213288
je 0x140344004
mov esi, edi
cmp edi, 0xe1e3ab59
jne 0x140343de0
mov rsi, qword [rsp + 0x18]
movzx esi, word [rsi]
mov dword [rsp + 0x14], esi
mov esi, r12d
jmp 0x140343de0
cmp edi, 0x448dd3a0
jle 0x140343ee0
cmp edi, 0x61551c47
jle 0x140343f76
cmp edi, 0x61551c48
je 0x14034400e
mov esi, edx
cmp edi, 0x7aba2516
je 0x140343de0
mov esi, edi
cmp edi, 0x7ec28e7d
jne 0x140343de0
cmp byte [rsp + 6], 0
mov esi, 0x91890867
cmovne esi, r15d
jmp 0x140343de0
cmp edi, 0xbb3cf189
jle 0x140343fa4
cmp edi, 0xbb3cf18a
je 0x140343dd6
cmp edi, 0xc24e2d52
je 0x14034401b
mov esi, edi
cmp edi, 0xc9049e3b
jne 0x140343de0
mov esi, 0x61551c48
xor ebp, ebp
jmp 0x140343de0
cmp edi, 0x28111553
jle 0x140343fc6
cmp edi, 0x28111554
je 0x14034402a
cmp edi, 0x334d03ab
je 0x140344041
mov esi, edi
cmp edi, 0x34b117de
jne 0x140343de0
mov esi, 0x448dd3a1
xor eax, eax
jmp 0x140343de0
cmp edi, 0xedb3070a
je 0x14034406b
cmp edi, 0xeebe3070
je 0x140344083
mov esi, edi
cmp edi, 0xf45b43f4
jne 0x140343de0
mov rsi, qword [rsp + 0x20]
mov rsi, qword [rsp + 8]
mov rsi, qword [rsp + 8]
mov rsi, qword [rsp + 8]
mov rsi, qword [rsp + 8]
mov rsi, qword [rsp + 8]
mov rsi, qword [rsp + 8]
mov rsi, qword [rsp + 8]
mov esi, 0x334d03ab
jmp 0x140343de0
cmp edi, 0x509198cd
je 0x140344092
mov esi, r13d
cmp edi, 0x564e349d
je 0x140343de0
mov esi, edi
cmp edi, 0x448dd3a1
jne 0x140343de0
jmp 0x1403440af
cmp edi, 0x91890867
je 0x1403440a0
mov esi, edi
cmp edi, 0xad2b0ade
jne 0x140343de0
mov esi, r10d
jmp 0x140343de0
mov esi, ebx
cmp edi, 0xfbf94842
je 0x140343de0
mov esi, edi
cmp edi, 0x20ab4f07
jne 0x140343de0
cmp byte [rsp + 7], 0
mov esi, 0xeebe3070
cmovne esi, r14d
jmp 0x140343de0
mov esi, 0x448dd3a1
mov rax, qword [rsp + 0x30]
jmp 0x140343de0
mov esi, 0x7aba2516
jmp 0x140343de0
mov qword [rsp + 0x30], rbp
mov esi, r8d
jmp 0x140343de0
mov rsi, qword [rsp + 0x18]
mov esi, 0xe1e3ab59
jmp 0x140343de0
mov esi, dword [rsp + 0x14]
cmp esi, 0x5a4d
setne byte [rsp + 6]
mov esi, r11d
jmp 0x140343de0
mov rsi, qword [rsp + 0x20]
movsxd rsi, dword [rsi]
add rsi, qword [rsp + 8]
mov qword [rsp + 0x28], rsi
mov rsi, qword [rsp + 0x28]
cmp dword [rsi], 0x4550
setne byte [rsp + 7]
mov esi, r9d
jmp 0x140343de0
mov rsi, qword [rsp + 0x18]
add rsi, 0x3c
mov qword [rsp + 0x20], rsi
mov esi, 0xad2b0ade
jmp 0x140343de0
mov esi, 0x61551c48
mov rbp, qword [rsp + 0x28]
jmp 0x140343de0
mov esi, dword [rsp + 0x14]
mov esi, 0x28111554
jmp 0x140343de0
mov qword [rsp + 8], rcx
mov esi, 0xedb3070a
jmp 0x140343de0
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret