Function at 0x140003a90
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x140003e10
cmp al, 0x54
je 0x140003e20
cmp al, 0x73
je 0x140003b10
cmp al, 0x66
je 0x140003b80
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x140003adc
cmp al, 0x6f
jne 0x140003c18
cmp byte [rdx + 1], 0x6e
jne 0x140003b24
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003460
mov rsi, rax
test rax, rax
je 0x140003e00
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x140003d50
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x140003cc0
cmp al, 0x70
je 0x140003fb0
mov rcx, rbx
call fcn.1400032c0
mov rsi, rax
test rax, rax
je 0x140003e00
mov eax, dword [rax]
cmp eax, 0x33
je 0x140003c70
cmp eax, 0x34
je 0x140003e68
cmp eax, 0x35
jne 0x140003e00
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x140003f42
mov rcx, rbx
call fcn.140003a90
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x140003d6b
cmp byte [rdx + 1], 0x70
jne 0x140003b24
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 2]
cmp al, 0x54
je 0x140003fa0
cmp al, 0x5f
je 0x140003f30
cmp al, 0x6e
je 0x140003e00
call fcn.1400014e0
mov ecx, eax
add ecx, 1
js 0x140003e00
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x140003e00
add rdx, 1
mov qword [rbx + 0x18], rdx
cmp ecx, 0x7fffffff
je 0x140003e00
lea edx, [rax + 2]
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x140003e00
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x140003b02
cmp al, 0x69
je 0x140003c24
cmp al, 0x74
jne 0x140003e30
cmp byte [rdx + 1], 0x6c
jne 0x140003b24
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x140004070
cmp byte [rdx], 0
je 0x140003e00
cmp byte [rdx + 1], 0
je 0x140003e00
mov edx, 0x45
mov rcx, rbx
call fcn.140004260
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x140003d6b
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x140003d80
cmp byte [rdi + 1], 0x74
jne 0x140003d80
cmp byte [rdi + 2], 0
jne 0x140003d80
mov rcx, rbx
call fcn.140002430
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x140003d6b
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x140003fd5
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x140003fcd
sub eax, 0x43
cmp al, 0x37
ja 0x140003fd5
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x140003fd5
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.140004660
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x140003d30
add rax, 1
mov qword [rbx + 0x18], rax
nop word cs:[rax + rax]
nop
xor r8d, r8d
mov rcx, rbx
call fcn.140003460
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140003b02
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004540
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140001380
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x140003e90
jg 0x140003fe8
test ebp, ebp
je 0x140003e7d
cmp ebp, 1
jne 0x140003e00
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x140003f60
cmp dl, 0x70
je 0x140003f60
xor ebp, ebp
cmp eax, 0x73
jne 0x140003f90
cmp byte [rdi + 1], 0x50
jne 0x140003f90
cmp byte [rdi + 2], 0
jne 0x140003f90
mov rcx, rbx
call fcn.140004540
mov r9, rax
test ebp, ebp
je 0x140003b6d
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.140001380
mov r9, rax
jmp 0x140003b6d
xor esi, esi
jmp 0x140003b02
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140005490
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140001cd0
cmp al, 0x75
jne 0x140003b24
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.140002040
mov rcx, rbx
mov rsi, rax
call fcn.140004540
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x140003d6b
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x140003b62
cmp eax, 3
je 0x140003e00
test eax, eax
jne 0x140003e00
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x140003d6b
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x1400041a4
cmp dl, 0x66
je 0x140004209
cmp eax, 0x64
jne 0x1400041ed
cmp byte [rdi + 1], 0x69
jne 0x1400041ed
cmp byte [rdi + 2], 0
jne 0x1400041ed
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003460
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x140004120
cmp byte [rdi + 1], 0x6c
jne 0x140004120
cmp byte [rdi + 2], 0
jne 0x140004120
mov edx, 0x45
mov rcx, rbx
call fcn.140004260
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.140001380
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x140003d6b
add rdx, 3
mov qword [rcx + 0x18], rdx
mov edx, 1
jmp 0x140003bde
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004260
mov r9, rax
jmp 0x140003b6d
cmp byte [rdi + 1], dl
jne 0x140003db4
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x140003db6
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x140003db4
mov rcx, rbx
call fcn.140003a90
mov r9, rax
jmp 0x140003dde
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x140003bde
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.140003a90
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x140003d6b
cmp al, 0x2f
jg 0x140003cfe
mov rcx, rbx
call fcn.140002430
mov rdx, rax
jmp 0x140003d30
cmp ebp, 3
jne 0x140003e00
cmp eax, 0x71
jne 0x140004088
cmp byte [rdi + 1], 0x75
jne 0x140004088
cmp byte [rdi + 2], 0
jne 0x140004088
mov rcx, rbx
call fcn.140003a90
mov rcx, rbx
mov rdi, rax
call fcn.140003a90
mov rcx, rbx
mov rbp, rax
call fcn.140003a90
mov r9, rax
test rax, rax
je 0x140003e00
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.140001380
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.140001380
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x140003d6b
mov rcx, rbx
call fcn.140002430
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x140003c40
cmp eax, 0x64
jne 0x14000409d
cmp byte [rdi + 1], 0x58
jne 0x14000409d
cmp byte [rdi + 2], 0
je 0x14000400a
movzx eax, byte [rdi]
cmp al, 0x66
je 0x140004219
cmp al, 0x6e
jne 0x140003e00
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x1400040c0
cmp al, 0x61
jne 0x140003e00
mov edx, 0x5f
mov rcx, rbx
call fcn.140004260
mov rcx, rbx
mov rdi, rax
call fcn.140002430
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x14000424d
cmp dl, 0x70
je 0x140004226
cmp dl, 0x69
jne 0x140003e00
cmp byte [rax + 1], 0x6c
jne 0x140003e00
mov rcx, rbx
call fcn.140003a90
mov r9, rax
jmp 0x140004034
cmp eax, 0x64
jne 0x1400041c8
cmp byte [rdi + 1], 0x74
jne 0x1400041c8
cmp byte [rdi + 2], 0
jne 0x1400041c8
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x1400041fd
cmp dl, 0x73
jne 0x14000415c
cmp byte [rax + 1], 0x72
je 0x1400041dd
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003460
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140003f03
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004540
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.140001380
mov rdi, rax
jmp 0x140003f03
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x1400041b8
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x140003e9d
mov rcx, rbx
call fcn.140002430
mov rbp, rax
jmp 0x140003ed3
cmp eax, 0x70
jne 0x1400041dd
cmp byte [rdi + 1], 0x74
jne 0x1400041dd
cmp byte [rdi + 2], 0
je 0x14000413d
mov rcx, rbx
call fcn.140003a90
mov rdi, rax
jmp 0x140003f03
mov rcx, rbx
call fcn.140003a90
mov rbp, rax
jmp 0x140003ed3
cmp byte [rax + 1], 0x73
jne 0x14000415c
jmp 0x1400041dd
mov rcx, rbx
call fcn.1400032c0
mov rbp, rax
jmp 0x140003ed3
mov rcx, rbx
call fcn.1400032c0
jmp 0x140004012
cmp byte [rax + 1], 0x69
jne 0x140003e00
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004260
mov r9, rax
jmp 0x140004034
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x140004034