Function at 0x1400045b0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x140004930
cmp al, 0x54
je 0x140004940
cmp al, 0x73
je 0x140004630
cmp al, 0x66
je 0x1400046a0
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x1400045fc
cmp al, 0x6f
jne 0x140004738
cmp byte [rdx + 1], 0x6e
jne 0x140004644
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003a70
test rax, rax
mov rsi, rax
je 0x140004920
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x140004868
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x1400047e0
cmp al, 0x70
je 0x140004ad0
mov rcx, rbx
call fcn.1400038d0
test rax, rax
mov rsi, rax
je 0x140004920
mov eax, dword [rax]
cmp eax, 0x33
je 0x140004790
cmp eax, 0x34
je 0x140004988
cmp eax, 0x35
jne 0x140004920
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x140004a62
mov rcx, rbx
call fcn.1400045b0
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x140004883
cmp byte [rdx + 1], 0x70
jne 0x140004644
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 2]
cmp al, 0x54
je 0x140004ac0
cmp al, 0x5f
je 0x140004a50
cmp al, 0x6e
je 0x140004920
call fcn.140001b30
mov ecx, eax
add ecx, 1
js 0x140004920
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x140004920
add rdx, 1
cmp ecx, 0x7fffffff
mov qword [rbx + 0x18], rdx
je 0x140004920
lea edx, [rax + 2]
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x140004920
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x140004622
cmp al, 0x69
je 0x140004744
cmp al, 0x74
jne 0x140004950
cmp byte [rdx + 1], 0x6c
jne 0x140004644
add rdx, 2
xor esi, esi
cmp al, 0x74
mov qword [rbx + 0x18], rdx
je 0x140004b90
cmp byte [rdx], 0
je 0x140004920
cmp byte [rdx + 1], 0
je 0x140004920
mov edx, 0x45
mov rcx, rbx
call fcn.140004fa0
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x140004883
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x140004898
cmp byte [rdi + 1], 0x74
jne 0x140004898
cmp byte [rdi + 2], 0
jne 0x140004898
mov rcx, rbx
call fcn.140002a60
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x140004883
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x140004af5
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x140004aed
sub eax, 0x43
cmp al, 0x37
ja 0x140004af5
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x140004af5
xor edx, edx
mov dword [rbx + 0x54], 0xffffffff
mov rcx, rbx
call fcn.140004430
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x140004848
add rax, 1
mov qword [rbx + 0x18], rax
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rbx
call fcn.140003a70
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140004622
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004310
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400019c0
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x1400049b0
jg 0x140004b08
test ebp, ebp
je 0x14000499d
cmp ebp, 1
jne 0x140004920
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x140004a80
cmp dl, 0x70
je 0x140004a80
xor ebp, ebp
cmp eax, 0x73
jne 0x140004ab0
cmp byte [rdi + 1], 0x50
jne 0x140004ab0
cmp byte [rdi + 2], 0
jne 0x140004ab0
mov rcx, rbx
call fcn.140004310
mov r9, rax
test ebp, ebp
je 0x14000468d
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.1400019c0
mov r9, rax
jmp 0x14000468d
xor esi, esi
jmp 0x140004622
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140004090
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140002310
cmp al, 0x75
jne 0x140004644
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.140002680
mov rcx, rbx
mov rsi, rax
call fcn.140004310
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x140004883
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x140004682
cmp eax, 3
je 0x140004920
test eax, eax
jne 0x140004920
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x140004883
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x140004cc4
cmp dl, 0x66
je 0x140004d29
cmp eax, 0x64
jne 0x140004d0d
cmp byte [rdi + 1], 0x69
jne 0x140004d0d
cmp byte [rdi + 2], 0
jne 0x140004d0d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003a70
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x140004c40
cmp byte [rdi + 1], 0x6c
jne 0x140004c40
cmp byte [rdi + 2], 0
jne 0x140004c40
mov edx, 0x45
mov rcx, rbx
call fcn.140004fa0
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.1400019c0
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x140004883
add rdx, 3
mov qword [rcx + 0x18], rdx
mov edx, 1
jmp 0x1400046fe
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004fa0
mov r9, rax
jmp 0x14000468d
cmp byte [rdi + 1], dl
jne 0x1400048cc
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x1400048ce
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x1400048cc
mov rcx, rbx
call fcn.1400045b0
mov r9, rax
jmp 0x1400048f6
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x1400046fe
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.1400045b0
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x140004883
cmp al, 0x2f
jg 0x14000481e
mov rcx, rbx
call fcn.140002a60
mov rdx, rax
jmp 0x140004848
cmp ebp, 3
jne 0x140004920
cmp eax, 0x71
jne 0x140004ba8
cmp byte [rdi + 1], 0x75
jne 0x140004ba8
cmp byte [rdi + 2], 0
jne 0x140004ba8
mov rcx, rbx
call fcn.1400045b0
mov rcx, rbx
mov rdi, rax
call fcn.1400045b0
mov rcx, rbx
mov rbp, rax
call fcn.1400045b0
test rax, rax
mov r9, rax
je 0x140004920
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.1400019c0
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.1400019c0
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x140004883
mov rcx, rbx
call fcn.140002a60
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x140004760
cmp eax, 0x64
jne 0x140004bbd
cmp byte [rdi + 1], 0x58
jne 0x140004bbd
cmp byte [rdi + 2], 0
je 0x140004b2a
movzx eax, byte [rdi]
cmp al, 0x66
je 0x140004d39
cmp al, 0x6e
jne 0x140004920
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x140004be0
cmp al, 0x61
jne 0x140004920
mov edx, 0x5f
mov rcx, rbx
call fcn.140004fa0
mov rcx, rbx
mov rdi, rax
call fcn.140002a60
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x140004d6d
cmp dl, 0x70
je 0x140004d46
cmp dl, 0x69
jne 0x140004920
cmp byte [rax + 1], 0x6c
jne 0x140004920
mov rcx, rbx
call fcn.1400045b0
mov r9, rax
jmp 0x140004b54
cmp eax, 0x64
jne 0x140004ce8
cmp byte [rdi + 1], 0x74
jne 0x140004ce8
cmp byte [rdi + 2], 0
jne 0x140004ce8
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x140004d1d
cmp dl, 0x73
jne 0x140004c7c
cmp byte [rax + 1], 0x72
je 0x140004cfd
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003a70
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140004a23
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004310
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.1400019c0
mov rdi, rax
jmp 0x140004a23
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x140004cd8
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x1400049bd
mov rcx, rbx
call fcn.140002a60
mov rbp, rax
jmp 0x1400049f3
cmp eax, 0x70
jne 0x140004cfd
cmp byte [rdi + 1], 0x74
jne 0x140004cfd
cmp byte [rdi + 2], 0
je 0x140004c5d
mov rcx, rbx
call fcn.1400045b0
mov rdi, rax
jmp 0x140004a23
mov rcx, rbx
call fcn.1400045b0
mov rbp, rax
jmp 0x1400049f3
cmp byte [rax + 1], 0x73
jne 0x140004c7c
jmp 0x140004cfd
mov rcx, rbx
call fcn.1400038d0
mov rbp, rax
jmp 0x1400049f3
mov rcx, rbx
call fcn.1400038d0
jmp 0x140004b32
cmp byte [rax + 1], 0x69
jne 0x140004920
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140004fa0
mov r9, rax
jmp 0x140004b54
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x140004b54