Function at 0x140033be7
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rax, qword [rcx + 0x18]
mov dl, byte [rax]
mov rbx, rcx
cmp dl, 0x4c
jne 0x140033c0a
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14003219f
cmp dl, 0x54
jne 0x140033c1c
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14002fad0
cmp dl, 0x73
jne 0x140033ccc
mov cl, byte [rax + 1]
cmp cl, 0x72
jne 0x140033ca3
lea rdx, [rax + 2]
cmp dword [rbx + 0x54], 0
mov qword [rbx + 0x18], rdx
je 0x140033c85
mov al, byte [rax + 2]
cmp al, 0x39
jg 0x140033c48
cmp al, 0x2f
jle 0x140033c85
jmp 0x140033c5f
sub eax, 0x43
cmp al, 0x37
ja 0x140033c85
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x140033c85
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.140033ad2
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x140033c90
inc rax
mov qword [rbx + 0x18], rax
jmp 0x140033c90
mov rcx, rbx
call fcn.140032be6
mov rdx, rax
xor r8d, r8d
mov rcx, rbx
call fcn.140033685
mov r8, rax
jmp 0x140033d63
cmp cl, 0x70
jne 0x140033d8f
add rax, 2
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140033be7
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x1400341a2
cmp dl, 0x66
jne 0x140033d33
cmp byte [rax + 1], 0x70
jne 0x140033d8f
lea rdx, [rax + 2]
mov qword [rcx + 0x18], rdx
cmp byte [rax + 2], 0x54
jne 0x140033cf6
add rax, 3
xor r9d, r9d
mov qword [rcx + 0x18], rax
jmp 0x140033d10
call fcn.14002fa92
lea r9d, [rax + 1]
not eax
test eax, 0x7fffffff
jne 0x140033d10
xor r8d, r8d
jmp 0x1400341d8
mov rcx, rbx
call fcn.14002f7cf
mov r8, rax
test rax, rax
je 0x1400341d8
mov dword [rax], 6
mov dword [rax + 0x10], r9d
jmp 0x1400341d8
lea ecx, [rdx - 0x30]
cmp cl, 9
jbe 0x140033d4e
cmp dl, 0x6f
jne 0x140033d8f
cmp byte [rax + 1], 0x6e
jne 0x140033d8f
add rax, 2
mov qword [rbx + 0x18], rax
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140033685
mov r8, rax
test rax, rax
je 0x140033d08
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x1400341d8
mov rcx, rbx
mov qword [rsp + 0x28], r8
call fcn.1400344a0
mov r8, qword [rsp + 0x28]
mov edx, 4
mov r9, rax
jmp 0x1400341a2
cmp dl, 0x69
je 0x140033d99
cmp dl, 0x74
jne 0x140033df9
cmp byte [rax + 1], 0x6c
jne 0x140033e2c
add rax, 2
xor r8d, r8d
mov qword [rbx + 0x18], rax
cmp dl, 0x74
jne 0x140033dbe
mov rcx, rbx
call fcn.140032be6
mov r8, rax
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x28], r8
cmp byte [rax], 0
je 0x140033d08
cmp byte [rax + 1], 0
je 0x140033d08
mov edx, 0x45
mov rcx, rbx
call fcn.1400344bd
mov r8, qword [rsp + 0x28]
mov edx, 0x32
mov r9, rax
jmp 0x1400341a2
cmp dl, 0x75
jne 0x140033e2c
inc rax
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14002fdc1
mov rcx, rbx
mov qword [rsp + 0x28], rax
call fcn.1400343f3
mov r8, qword [rsp + 0x28]
mov edx, 0x40
mov r9, rax
jmp 0x1400341a2
mov rcx, rbx
call fcn.140033545
mov rdi, rax
test rax, rax
je 0x140033d08
mov eax, dword [rax]
cmp eax, 0x33
jne 0x140033e85
mov rbp, qword [rdi + 0x10]
lea rdx, [0x140053b81]
mov eax, dword [rbp + 0x10]
mov rsi, qword [rbp]
sub eax, 2
add dword [rbx + 0x48], eax
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140033e78
mov rcx, rbx
call fcn.140032be6
jmp 0x140033f48
mov ebp, dword [rbp + 0x14]
cmp ebp, 2
jne 0x140033ea2
jmp 0x140033f58
cmp eax, 0x34
je 0x140033e94
cmp eax, 0x35
je 0x140033ed3
jmp 0x140033d08
mov ebp, dword [rdi + 0x10]
cmp ebp, 2
je 0x140033d08
xor esi, esi
cmp ebp, 2
jg 0x140033eb5
test ebp, ebp
je 0x140033ec3
cmp ebp, 1
je 0x140033ef2
jmp 0x140033d08
cmp ebp, 3
je 0x14003407d
jmp 0x140033d08
xor r9d, r9d
mov r8, rdi
mov edx, 0x37
jmp 0x1400341a2
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
jne 0x140033f27
inc rax
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400344bd
jmp 0x140033f48
test rsi, rsi
je 0x140033f27
mov al, byte [rsi]
cmp al, 0x70
je 0x140033f05
cmp al, 0x6d
jne 0x1400341b2
cmp al, byte [rsi + 1]
jne 0x1400341b2
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
jne 0x1400341b4
inc rax
mov qword [rbx + 0x18], rax
jmp 0x1400341b2
xor ebp, ebp
mov rcx, rbx
call fcn.140033be7
test ebp, ebp
je 0x140033f48
mov r9, rax
mov r8, rax
mov edx, 0x3a
mov rcx, rbx
call fcn.14002f7f1
mov r9, rax
mov r8, rdi
mov edx, 0x38
jmp 0x1400341a2
mov rcx, qword [rdi + 0x10]
call fcn.1400301b9
test eax, eax
je 0x140033f6f
mov rcx, rbx
call fcn.140032be6
jmp 0x140033fa8
cmp byte [rsi], 0x66
jne 0x140033f7e
mov rcx, rbx
call fcn.140033545
jmp 0x140033fa8
lea rdx, [0x1400540f8]
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140033fa0
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140033685
jmp 0x140033fa8
mov rcx, rbx
call fcn.140033be7
lea rdx, [0x140053b8a]
mov rcx, rsi
mov rbp, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140033fd0
mov edx, 0x45
mov rcx, rbx
call fcn.1400344bd
jmp 0x140034057
lea rdx, [0x1400540fb]
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x140033ff6
lea rdx, [0x1400540fe]
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140034012
mov rax, qword [rbx + 0x18]
mov dl, byte [rax]
cmp dl, 0x67
jne 0x140034007
cmp byte [rax + 1], 0x73
jmp 0x140034010
cmp dl, 0x73
jne 0x14003401c
cmp byte [rax + 1], 0x72
jne 0x14003401c
mov rcx, rbx
call fcn.140033be7
jmp 0x140034057
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140033685
mov r8, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x14003405a
mov rcx, rbx
mov qword [rsp + 0x28], r8
call fcn.1400344a0
mov r8, qword [rsp + 0x28]
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.14002f7f1
mov r8, rax
mov r9, r8
mov edx, 0x3a
mov r8, rbp
mov rcx, rbx
call fcn.14002f7f1
mov r8, rdi
mov edx, 0x39
mov r9, rax
jmp 0x1400341a2
test rsi, rsi
je 0x140033d08
lea rdx, [0x140053b90]
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x1400340ac
lea rdx, [0x140054101]
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400340b6
mov rcx, rbx
call fcn.140033be7
jmp 0x1400340c4
mov al, byte [rsi]
cmp al, 0x66
jne 0x1400340e8
mov rcx, rbx
call fcn.140033545
mov rcx, rbx
mov rsi, rax
call fcn.140033be7
mov rcx, rbx
mov rbp, rax
call fcn.140033be7
test rax, rax
jne 0x140034171
jmp 0x140033d08
cmp al, 0x6e
jne 0x140033d08
mov al, byte [rsi + 1]
cmp al, 0x77
je 0x1400340ff
cmp al, 0x61
jne 0x140033d08
mov edx, 0x5f
mov rcx, rbx
call fcn.1400344bd
mov rcx, rbx
mov rsi, rax
call fcn.140032be6
mov rbp, rax
mov rax, qword [rbx + 0x18]
mov dl, byte [rax]
cmp dl, 0x45
jne 0x140034130
inc rax
mov qword [rbx + 0x18], rax
xor eax, eax
jmp 0x140034171
cmp dl, 0x70
jne 0x140034156
cmp byte [rax + 1], 0x69
jne 0x140033d08
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.1400344bd
jmp 0x140034171
cmp dl, 0x69
jne 0x140033d08
cmp byte [rax + 1], 0x6c
jne 0x140033d08
mov rcx, rbx
call fcn.140033be7
mov r9, rax
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.14002f7f1
mov r8, rsi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.14002f7f1
mov r8, rdi
mov edx, 0x3b
mov r9, rax
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.14002f7f1
xor ebp, ebp
lea rdx, [0x140053b7b]
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140033f29
mov rcx, rbx
call fcn.1400343f3
jmp 0x140033f31
mov rax, r8
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
ret