Function at 0x140006240
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
movaps xmmword [rsp + 0x240], xmm6
mov rax, qword [0x140026040]
xor rax, rsp
mov qword [rbp + 0x130], rax
mov dword [rsp + 0x34], r9d
mov qword [rsp + 0x60], r8
mov r12, rdx
mov r14, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x70], rdx
xor ebx, ebx
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, qword [r12 + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x1c
jb 0x140006ac5
mov r13, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x1400062dc
mov r13, qword [r12]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
lea rsi, [r15 + 0x1c]
mov ebx, 0xf
lea rdi, [rbp - 0x80]
cmp rsi, rbx
jbe 0x140006376
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140006339
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140010be8
test rax, rax
je 0x140006ab7
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140006372
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140006352
xor edi, edi
jmp 0x140006372
cmp rcx, 0x1000
jb 0x14000636a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006acb
jmp 0x14000631a
call fcn.140010be8
mov rdi, rax
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rbx
movups xmm0, xmmword [str.C:WindowsSystem32drivers_]
movups xmmword [rdi], xmm0
movsd xmm0, qword [0x140013a30]
movsd qword [rdi + 0x10], xmm0
mov eax, dword [0x140013a38]
mov dword [rdi + 0x18], eax
lea rcx, [rdi + 0x1c]
mov r8, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x38], rax
call fcn.1400101c0
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp - 0x40]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.1400043c0
nop
lea rcx, [rsp + 0x38]
call fcn.140005680
movzx ebx, al
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x14000643c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006437
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006437
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010be0
test bl, bl
jne 0x14000650a
xorps xmm0, xmm0
movups xmmword [r14 + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [r14], xmm1
xor ebx, ebx
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], bl
movups xmmword [r14 + 0x20], xmm0
mov qword [r14 + 0x30], rbx
mov qword [r14 + 0x38], 0xf
mov byte [r14 + 0x20], bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400064b4
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ab7
call fcn.140010be0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140006500
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x1400064fb
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140006abe
mov rcx, rax
call fcn.140010be0
mov qword [r12 + 0x10], rbx
jmp 0x140006918
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x20]
call fcn.14000ab50
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x20], rax
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1c], edx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rax
mov rax, qword [rbp + 0x20]
movsxd rbx, dword [rax + 4]
mov rbx, qword [rbp + rbx + 0x68]
test rbx, rbx
sete r15b
mov byte [rbp - 0x38], r15b
mov byte [rbp - 0x37], 0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
mov rsi, qword [rbp - 0x38]
shr rsi, 8
mov r13b, 1
xor edi, edi
test rbx, rbx
je 0x1400065e7
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x1400065bc
movzx esi, al
jmp 0x1400065be
xor ebx, ebx
mov r15b, 1
test r13b, r13b
jne 0x1400065de
test rdi, rdi
je 0x1400065d9
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
jne 0x1400065db
xor edi, edi
mov r13b, 1
test rbx, rbx
jne 0x140006729
test rdi, rdi
jne 0x140006732
mov eax, 0x5a4d
mov rcx, qword [rbp - 0x60]
xorps xmm0, xmm0
cmp word [rcx], ax
je 0x14000679b
movups xmmword [r14 + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [r14], xmm1
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 0
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
movups xmmword [r14 + 0x20], xmm0
mov qword [r14 + 0x30], 0
mov qword [r14 + 0x38], 0xf
mov byte [r14 + 0x20], 0
mov rdx, qword [rbp - 0x50]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000667b
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006a57
call fcn.140010be0
xor edi, edi
xorps xmm0, xmm0
mov qword [rbp - 0x50], rdi
movdqu xmmword [rbp - 0x60], xmm0
lea rcx, [rbp + 0x20]
call fcn.140006b90
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400066d3
inc rdx
mov rcx, qword [rbp - 0x80]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400066ce
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ab7
call fcn.140010be0
mov byte [rbp - 0x80], 0
mov qword [rbp - 0x68], 0xf
mov qword [rbp - 0x70], rdi
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000671f
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r12]
jb 0x14000671a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006abe
mov rcx, r8
call fcn.140010be0
mov qword [r12 + 0x10], rdi
jmp 0x140006918
test rdi, rdi
jne 0x1400065f0
test r15b, r15b
jne 0x140006751
test rbx, rbx
je 0x14000674f
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x14000674f
movzx esi, al
jmp 0x140006751
xor ebx, ebx
mov byte [rsp + 0x30], sil
mov rax, qword [rbp - 0x58]
cmp rax, qword [rbp - 0x50]
je 0x140006769
mov byte [rax], sil
inc qword [rbp - 0x58]
jmp 0x14000677b
lea r8, [rsp + 0x30]
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x60]
call fcn.14000c5e0
test rbx, rbx
je 0x1400065bc
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sbumpc_void____ptr64]
cmp eax, 0xffffffff
jne 0x1400065a9
jmp 0x1400065bc
movsxd rbx, dword [rcx + 0x3c]
add rbx, rcx
cmp dword [rbx], 0x4550
jne 0x140006605
movups xmmword [rsp + 0x38], xmm0
xor esi, esi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov r8, 0xffffffffffffffff
mov rax, qword [rsp + 0x60]
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x1400067d0
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140002870
lea r8, [rsp + 0x38]
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.140006100
mov eax, dword [rsp + 0x34]
mov rdi, qword [rbp - 0x40]
xorps xmm0, xmm0
cmp rax, rdi
jbe 0x14000695b
movups xmmword [r14 + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [r14], xmm1
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 0xf
mov byte [r14], sil
movups xmmword [r14 + 0x20], xmm0
mov qword [r14 + 0x30], rsi
mov qword [r14 + 0x38], 0xf
mov byte [r14 + 0x20], sil
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140006882
mov rdx, qword [rbp - 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006871
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006a57
call fcn.140010be0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
lea rcx, [rbp + 0x20]
call fcn.140006b90
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400068c7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ab7
call fcn.140010be0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140006913
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x14000690e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006abe
mov rcx, r8
call fcn.140010be0
mov qword [r12 + 0x10], rsi
mov byte [r12], 0
mov qword [r12 + 0x18], 0xf
mov rax, r14
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140010bc0
mov rbx, qword [rsp + 0x2a8]
movaps xmm6, xmmword [rsp + 0x240]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movups xmmword [rbp - 0x30], xmm0
movdqa xmm6, xmmword [0x140020e70]
movdqa xmmword [rbp - 0x20], xmm6
mov byte [rbp - 0x30], sil
movups xmmword [rbp - 0x10], xmm0
movdqa xmmword [rbp], xmm6
mov byte [rbp - 0x10], sil
movups xmmword [rbp + 0x10], xmm0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.1400025e0
lea rax, [rbp - 0x10]
cmp rax, r12
je 0x1400069ca
mov rdx, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x1400069b4
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
lea rcx, [rbp - 0x10]
call fcn.1400025e0
movdqa xmm6, xmmword [0x140020e70]
movzx ecx, word [rbx + 6]
mov dword [rbp + 0x18], ecx
mov rax, qword [rbp - 0x38]
mov dword [rbp + 0x10], eax
mov dword [rbp + 0x14], edi
movaps xmm0, xmmword [rbp - 0x30]
movups xmmword [r14], xmm0
movaps xmm1, xmmword [rbp - 0x20]
movups xmmword [r14 + 0x10], xmm1
movdqa xmmword [rbp - 0x20], xmm6
mov byte [rbp - 0x30], 0
movaps xmm0, xmmword [rbp - 0x10]
movups xmmword [r14 + 0x20], xmm0
movaps xmm1, xmmword [rbp]
movups xmmword [r14 + 0x30], xmm1
movdqa xmmword [rbp], xmm6
mov byte [rbp - 0x10], 0
mov dword [r14 + 0x40], eax
mov dword [r14 + 0x44], edi
mov dword [r14 + 0x48], ecx
lea rcx, [rbp - 0x30]
call fcn.140006ae0
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140006a6f
mov rdx, qword [rbp - 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010be0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
lea rcx, [rbp + 0x20]
call fcn.140006b90
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400068c7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400068c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001480
int3
call fcn.1400013c0
int3