Function at 0x140030420
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
mov rax, qword [0x140075100]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rax, qword gs:[0x58]
movabs rsi, 0xa7cef4eb5823ef28
mov ebx, 4
mov edi, 1
movabs r14, 0xe2fe1ebe4d8024b3
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x1400786d0], eax
jle 0x1400304ec
lea rcx, [0x1400786d0]
call fcn.140036b28
cmp dword [0x1400786d0], 0xffffffff
jne 0x1400304ec
movabs rax, 0x8e906cd53eef50dd
mov qword [rbp + 0x37], r14
mov qword [rbp - 0x49], rax
lea rcx, [rbp - 0x49]
movabs rax, 0xa7cef4eb3d5b8a06
mov qword [rbp + 0x3f], rsi
mov qword [rbp - 0x41], rax
mov r8d, edi
movdqa xmm0, xmmword [rbp - 0x49]
xor edx, edx
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 0x49], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
lea rcx, [0x1400786d0]
mov qword [0x140078528], rax
call fcn.140036abc
mov eax, dword [rbx]
cmp dword [0x1400786e8], eax
jle 0x140030525
lea rcx, [0x1400786e8]
call fcn.140036b28
cmp dword [0x1400786e8], 0xffffffff
jne 0x140030525
mov rax, qword [0x140078528]
lea rcx, [0x1400786e8]
mov qword [0x140078698], rax
call fcn.140036abc
mov rax, qword [0x140078698]
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x14003096f
mov eax, dword [rbx]
cmp dword [0x1400787e0], eax
jle 0x14003057e
lea rcx, [0x1400787e0]
call fcn.140036b28
cmp dword [0x1400787e0], 0xffffffff
jne 0x14003057e
mov rax, qword [0x140078698]
lea rcx, [0x1400787e0]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [0x140078528]
mov qword [0x1400786a8], rdx
call fcn.140036abc
mov rax, qword [0x1400786a8]
cmp dword [rax], 0x4550
jne 0x14003096f
mov eax, dword [rbx]
cmp dword [0x140078758], eax
jle 0x1400305d0
lea rcx, [0x140078758]
call fcn.140036b28
cmp dword [0x140078758], 0xffffffff
jne 0x1400305d0
mov rax, qword [0x1400786a8]
lea rcx, [0x140078758]
add rax, 0x108
mov qword [0x140078750], rax
call fcn.140036abc
mov eax, dword [rbx]
cmp dword [0x1400785c0], eax
jle 0x140030609
lea rcx, [0x1400785c0]
call fcn.140036b28
cmp dword [0x1400785c0], 0xffffffff
jne 0x140030609
mov rax, qword [0x140078750]
lea rcx, [0x1400785c0]
mov qword [0x140078550], rax
call fcn.140036abc
mov eax, dword [rbx]
cmp dword [0x140078558], eax
jle 0x140030646
lea rcx, [0x140078558]
call fcn.140036b28
cmp dword [0x140078558], 0xffffffff
jne 0x140030646
mov rax, qword [0x1400786a8]
lea rcx, [0x140078558]
movzx edx, word [rax + 6]
mov word [0x1400786b0], dx
call fcn.140036abc
xchg byte [0x1400784d9], dil
mov r9, qword [0x140078750]
test dil, dil
jne 0x1400306d7
movzx eax, word [0x1400786b0]
lea rcx, [rax + rax*4]
mov rax, qword [0x140078550]
lea r10, [rax + rcx*8]
cmp r9, r10
jae 0x1400306d7
mov qword [rbp + 0x37], r14
movabs r11, 0xe2fe1ebe08c765e3
mov qword [rbp + 0x3f], rsi
movdqa xmm1, xmmword [rbp + 0x37]
nop
mov qword [rbp - 0x39], r11
lea r8, [rbp - 0x39]
mov qword [rbp - 0x31], rsi
mov rax, r9
movdqa xmm0, xmmword [rbp - 0x39]
sub r8, r9
xorps xmm0, xmm1
movdqa xmmword [rbp - 0x39], xmm0
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400306c3
inc rax
test ecx, ecx
jne 0x1400306b0
test edx, edx
je 0x1400306d7
add r9, 0x28
mov qword [0x140078750], r9
cmp r9, r10
jb 0x140030690
mov eax, dword [rbx]
cmp dword [0x140078564], eax
jle 0x140030721
lea rcx, [0x140078564]
call fcn.140036b28
cmp dword [0x140078564], 0xffffffff
jne 0x14003071a
mov rax, qword [0x140078750]
lea rcx, [0x140078564]
mov edx, dword [rax + 0xc]
add rdx, qword [0x140078528]
mov qword [0x1400787e8], rdx
call fcn.140036abc
mov r9, qword [0x140078750]
mov r11d, dword [r9 + 0x10]
lea r8, [rbp - 0x26]
mov r10, qword [0x1400787e8]
lea r9, [0x140000000]
xorps xmm0, xmm0
mov qword [rbp + 0x27], 0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x29], xmm0
xor edi, edi
movdqu xmmword [rbp - 0x19], xmm1
movdqu xmmword [rbp - 9], xmm0
mov edx, edi
movdqu xmmword [rbp + 7], xmm1
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 0x2f], 0
nop dword [rax + rax]
movzx ecx, byte [rdx + r9 + 0x698e0]
mov byte [r8 - 3], cl
lea r8, [r8 + 0x1e]
movzx eax, byte [rdx + r9 + 0x698b0]
mov byte [r8 - 0x20], al
movzx ecx, byte [rdx + r9 + 0x698e1]
mov byte [r8 - 0x1f], cl
movzx eax, byte [rdx + r9 + 0x698b1]
mov byte [r8 - 0x1e], al
movzx ecx, byte [rdx + r9 + 0x698e2]
mov byte [r8 - 0x1d], cl
movzx eax, byte [rdx + r9 + 0x698b2]
mov byte [r8 - 0x1c], al
movzx ecx, byte [rdx + r9 + 0x698e3]
movzx eax, byte [rdx + r9 + 0x698b3]
mov byte [r8 - 0x1b], cl
movzx ecx, byte [rdx + r9 + 0x698e4]
mov byte [r8 - 0x1a], al
movzx eax, byte [rdx + r9 + 0x698b4]
mov byte [r8 - 0x19], cl
movzx ecx, byte [rdx + r9 + 0x698e5]
mov byte [r8 - 0x18], al
movzx eax, byte [rdx + r9 + 0x698b5]
mov byte [r8 - 0x17], cl
movzx ecx, byte [rdx + r9 + 0x698e6]
mov byte [r8 - 0x16], al
movzx eax, byte [rdx + r9 + 0x698b6]
mov byte [r8 - 0x15], cl
movzx ecx, byte [rdx + r9 + 0x698e7]
mov byte [r8 - 0x14], al
movzx eax, byte [rdx + r9 + 0x698b7]
mov byte [r8 - 0x13], cl
movzx ecx, byte [rdx + r9 + 0x698e8]
mov byte [r8 - 0x12], al
movzx eax, byte [rdx + r9 + 0x698b8]
mov byte [r8 - 0x11], cl
movzx ecx, byte [rdx + r9 + 0x698e9]
mov byte [r8 - 0x10], al
movzx eax, byte [rdx + r9 + 0x698b9]
mov byte [r8 - 0xf], cl
movzx ecx, byte [rdx + r9 + 0x698ea]
mov byte [r8 - 0xe], al
movzx eax, byte [rdx + r9 + 0x698ba]
mov byte [r8 - 0xd], cl
movzx ecx, byte [rdx + r9 + 0x698eb]
mov byte [r8 - 0xc], al
movzx eax, byte [rdx + r9 + 0x698bb]
mov byte [r8 - 0xb], cl
movzx ecx, byte [rdx + r9 + 0x698ec]
mov byte [r8 - 0xa], al
movzx eax, byte [rdx + r9 + 0x698bc]
mov byte [r8 - 9], cl
movzx ecx, byte [rdx + r9 + 0x698ed]
mov byte [r8 - 8], al
movzx eax, byte [rdx + r9 + 0x698bd]
mov byte [r8 - 7], cl
movzx ecx, byte [rdx + r9 + 0x698ee]
mov byte [r8 - 6], al
movzx eax, byte [rdx + r9 + 0x698be]
add rdx, 0xf
mov byte [r8 - 5], cl
mov byte [r8 - 4], al
cmp rdx, 0x2d
jb 0x140030770
lea rbx, [r11 + r10]
mov rax, rbx
cmp r11, 0x2d
jb 0x140030959
lea r11, [rbx - 0x2d]
nop dword [rax]
mov r8, r10
lea rdx, [rbp - 0x29]
nop word [rax + rax]
movzx r9d, word [rdx]
movzx ecx, r9w
shr cx, 8
cmp cl, 0x3f
je 0x140030946
cmp byte [r8], r9b
jne 0x140030965
inc r8
lea rcx, [rbp + 0x31]
add rdx, 2
cmp rdx, rcx
jne 0x140030930
mov rax, r10
cmp rax, rbx
cmovne rdi, rax
mov rax, rdi
jmp 0x140030971
cmp r10, r11
je 0x140030959
inc r10
jmp 0x140030920
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400369f0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret