Function at 0x140006710
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov rax, qword [0x140027040]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov dword [rsp + 0x34], r9d
mov qword [rsp + 0x60], r8
mov r12, rdx
mov r15, rcx
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x80], rdx
xor ebx, ebx
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, qword [r12 + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x1c
jb 0x140006ff2
mov r13, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x1400067a2
mov r13, qword [r12]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
lea rsi, [r14 + 0x1c]
mov ebx, 0xf
lea rdi, [rbp - 0x70]
cmp rsi, rbx
jbe 0x14000683c
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400067ff
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140011818
test rax, rax
je 0x140006fe4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140006838
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140006827
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006ff8
jmp 0x1400067e0
test rcx, rcx
je 0x140006836
call fcn.140011818
mov rdi, rax
jmp 0x140006838
xor edi, edi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [str.C:WindowsSystem32drivers_]
movups xmmword [rdi], xmm0
movsd xmm0, qword [0x140014ae0]
movsd qword [rdi + 0x10], xmm0
mov eax, dword [0x140014ae8]
mov dword [rdi + 0x18], eax
lea rcx, [rdi + 0x1c]
mov r8, r14
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov rdi, qword [rbp - 0x60]
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rbx, qword [rbp - 0x70]
call fcn.140010df0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rdi
lea r8, [rbp - 0x30]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.1400043d0
nop
lea rcx, [rsp + 0x38]
call fcn.140005560
movzx ebx, al
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x1400068f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400068f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011810
test bl, bl
jne 0x1400069c7
xorps xmm0, xmm0
movups xmmword [r15 + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [r15], xmm1
xor ebx, ebx
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], 0xf
mov byte [r15], bl
movups xmmword [r15 + 0x20], xmm0
mov qword [r15 + 0x30], rbx
mov qword [r15 + 0x38], 0xf
mov byte [r15 + 0x20], bl
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006971
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000696c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006fe4
call fcn.140011810
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x1400069bd
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x1400069b8
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140006feb
mov rcx, rax
call fcn.140011810
mov qword [r12 + 0x10], rbx
jmp 0x140006dd8
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x30]
call fcn.14000b5c0
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2c], edx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x78]
mov qword [rbp - 0x30], rax
test rax, rax
sete byte [rbp - 0x28]
mov byte [rbp - 0x27], 0
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 0
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
mov r13b, 1
xor edi, edi
movzx esi, byte [rbp - 0x27]
mov rbx, qword [rbp - 0x30]
test rax, rax
jne 0x140006a76
movzx r14d, byte [rbp - 0x28]
jmp 0x140006ab0
test rbx, rbx
je 0x140006a8e
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140006a8e
movzx esi, al
jmp 0x140006a90
xor ebx, ebx
mov r14b, 1
test r13b, r13b
jne 0x140006ab0
test rdi, rdi
je 0x140006aab
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
jne 0x140006aad
xor edi, edi
mov r13b, 1
test rbx, rbx
jne 0x140006be5
test rdi, rdi
jne 0x140006bee
mov eax, 0x5a4d
mov rcx, qword [rbp - 0x50]
xorps xmm0, xmm0
cmp word [rcx], ax
je 0x140006c5b
movups xmmword [r15 + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [r15], xmm1
xor ebx, ebx
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], 0xf
mov byte [r15], bl
movups xmmword [r15 + 0x20], xmm0
mov qword [r15 + 0x30], rbx
mov qword [r15 + 0x38], 0xf
mov byte [r15 + 0x20], bl
mov rdx, qword [rbp - 0x40]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x140006b35
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006f84
call fcn.140011810
xorps xmm0, xmm0
mov qword [rbp - 0x40], rbx
movdqu xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x30]
call fcn.1400070b0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006b8b
inc rdx
mov rcx, qword [rbp - 0x70]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140006b86
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006fe4
call fcn.140011810
mov byte [rbp - 0x70], 0
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], rbx
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x1400069bd
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r12]
jb 0x140006bd6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006feb
mov rcx, r8
call fcn.140011810
mov qword [r12 + 0x10], rbx
jmp 0x140006dd8
test rdi, rdi
jne 0x140006ac2
test r14b, r14b
jne 0x140006c0d
test rbx, rbx
je 0x140006c0b
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140006c0b
movzx esi, al
jmp 0x140006c0d
xor ebx, ebx
mov byte [rsp + 0x30], sil
mov rax, qword [rbp - 0x48]
cmp rax, qword [rbp - 0x40]
je 0x140006c25
mov byte [rax], sil
inc qword [rbp - 0x48]
jmp 0x140006c37
lea r8, [rsp + 0x30]
mov rdx, qword [rbp - 0x48]
lea rcx, [rbp - 0x50]
call fcn.14000ce60
test rbx, rbx
je 0x140006a8e
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sbumpc_void____ptr64]
cmp eax, 0xffffffff
je 0x140006a8e
mov byte [rbp - 0x28], 0
jmp 0x140006a76
movsxd rsi, dword [rcx + 0x3c]
add rsi, rcx
cmp dword [rsi], 0x4550
jne 0x140006ad7
movups xmmword [rsp + 0x38], xmm0
xor r13d, r13d
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov r8, 0xffffffffffffffff
mov rax, qword [rsp + 0x60]
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140006c90
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140002750
lea r8, [rsp + 0x38]
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.1400065d0
mov eax, dword [rsp + 0x34]
mov r14, qword [rbp - 0x30]
xorps xmm0, xmm0
cmp rax, r14
jbe 0x140006e13
movups xmmword [r15 + 0x40], xmm0
xorps xmm1, xmm1
movups xmmword [r15], xmm1
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], 0xf
mov byte [r15], r13b
movups xmmword [r15 + 0x20], xmm0
mov qword [r15 + 0x30], r13
mov qword [r15 + 0x38], 0xf
mov byte [r15 + 0x20], r13b
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140006d42
mov rdx, qword [rbp - 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006f84
call fcn.140011810
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
lea rcx, [rbp + 0x30]
call fcn.1400070b0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006d87
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006fe4
call fcn.140011810
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140006dd3
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x140006dce
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006feb
mov rcx, r8
call fcn.140011810
mov qword [r12 + 0x10], r13
mov byte [r12], 0
mov qword [r12 + 0x18], 0xf
mov rax, r15
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1400117f0
mov rbx, qword [rsp + 0x2a8]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movups xmmword [rbp - 0x20], xmm0
movdqa xmm2, xmmword [0x140021f20]
movdqa xmmword [rbp - 0x10], xmm2
mov byte [rbp - 0x20], r13b
movups xmmword [rbp], xmm0
movdqa xmm1, xmm2
movdqa xmmword [rbp + 0x10], xmm2
mov byte [rbp], r13b
movups xmmword [rbp + 0x20], xmm0
mov rdi, qword [rbp - 0x60]
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
psrldq xmm2, 8
movq rax, xmm2
cmp rdi, rax
ja 0x140006e83
lea rbx, [rbp - 0x20]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x20]
mov qword [rbp - 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x140006e8f
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.140002b60
lea rax, [rbp]
cmp rax, r12
je 0x140006ee6
mov rdi, qword [r12 + 0x10]
mov r9, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x140006eac
mov r9, qword [r12]
mov rax, qword [rbp + 0x18]
cmp rdi, rax
ja 0x140006eda
lea rbx, [rbp]
cmp rax, 0xf
cmova rbx, qword [rbp]
mov qword [rbp + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x140006ee6
mov rdx, rdi
lea rcx, [rbp]
call fcn.140002b60
movzx ecx, word [rsi + 6]
mov dword [rbp + 0x28], ecx
mov rax, qword [rbp - 0x28]
mov dword [rbp + 0x20], eax
mov dword [rbp + 0x24], r14d
movaps xmm0, xmmword [rbp - 0x20]
movups xmmword [r15], xmm0
movaps xmm1, xmmword [rbp - 0x10]
movups xmmword [r15 + 0x10], xmm1
movdqa xmm0, xmmword [0x140021f20]
movdqa xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
movaps xmm0, xmmword [rbp]
movups xmmword [r15 + 0x20], xmm0
movaps xmm1, xmmword [rbp + 0x10]
movups xmmword [r15 + 0x30], xmm1
movdqa xmm0, xmmword [0x140021f20]
movdqa xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov dword [r15 + 0x40], eax
mov dword [r15 + 0x44], r14d
mov dword [r15 + 0x48], ecx
lea rcx, [rbp - 0x20]
call fcn.140007000
nop
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140006f9c
mov rdx, qword [rbp - 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011810
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
lea rcx, [rbp + 0x30]
call fcn.1400070b0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006d87
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001480
int3
call fcn.1400013c0
int3