Function at 0x140125988
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1401259d2
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x1401259d2
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x1401259d2
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1401259d2
cmp dword [rcx + 0x84], 0xe
jbe 0x1401259d2
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x1401259d4
xor al, al
add rsp, 0x28
ret

Function at 0x1400027b0
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400027fa
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x1400027fa
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x1400027fa
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1400027fa
cmp dword [rcx + 0x84], 0xe
jbe 0x1400027fa
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x1400027fc
xor al, al
add rsp, 0x28
ret

Function at 0x1411a7058
Capabilities:
Decompress data using aplib

Disassembly:
call fcn.1411a71df
push r10
mov r10, rsp
push r10
mov rsi, qword [r10 + 0x10]
mov rdi, qword [r10 + 0x20]
cld
mov dl, 0x80
mov al, byte [rsi]
inc rsi
mov byte [rdi], al
inc rdi
mov ebx, 2
add dl, dl
jne 0x1411a7089
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1411a706f
add dl, dl
jne 0x1411a7096
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1411a70f6
xor eax, eax
add dl, dl
jne 0x1411a70a5
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1411a71ad
add dl, dl
jne 0x1411a70b6
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1411a70c3
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1411a70d0
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1411a70dd
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
je 0x1411a70ea
push rdi
mov eax, eax
sub rdi, rax
mov al, byte [rdi]
pop rdi
mov byte [rdi], al
inc rdi
mov ebx, 2
jmp 0x1411a707e
mov eax, 1
add dl, dl
jne 0x1411a7106
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1411a7113
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x1411a70fb
sub eax, ebx
mov ebx, 1
jne 0x1411a714c
mov ecx, 1
add dl, dl
jne 0x1411a712e
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x1411a713b
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x1411a7123
push rsi
mov rsi, rdi
sub rsi, rbp
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x1411a707e
dec eax
shl eax, 8
mov al, byte [rsi]
inc rsi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x1411a7168
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x1411a7175
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x1411a715d
cmp eax, 0x7d00
jae 0x1411a719b
cmp eax, 0x500
jb 0x1411a7196
inc ecx
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x1411a707e
cmp eax, 0x7f
ja 0x1411a719e
add ecx, 2
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x1411a707e
mov al, byte [rsi]
inc rsi
xor ecx, ecx
shr al, 1
je 0x1411a71d2
adc ecx, 2
mov ebp, eax
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
mov ebx, 1
jmp 0x1411a707e
pop r10
sub rdi, qword [r10 + 0x20]
mov eax, edi
pop r10
ret 0x20