Function at 0x14001df96
Capabilities:
Hash data using sha256
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1e8
movaps xmmword [rsp + 0x1d0], xmm6
mov rax, r8
mov rbx, rcx
lea r8, [rsp + 0x60]
mov dword [r8], 0
xorps xmm6, xmm6
movups xmmword [r8 + 8], xmm6
mov dword [r8 + 0x18], 7
mov qword [r8 + 0x1c], 0
mov word [r8 + 0x24], 0
mov byte [r8 + 0x20], 1
mov rcx, rdx
mov rdx, rax
call fcn.140048d20
mov rsi, rdx
test rax, rax
je 0x14001e01b
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rsi
test al, 1
je 0x14001e0a6
lea rcx, [rsp + 0x68]
call fcn.14000286e
jmp 0x14001e0a6
lea rcx, [rsp + 0x28]
mov qword [rcx], rsi
lea rdx, [rsp + 0x190]
movaps xmmword [rdx + 0x30], xmm6
movaps xmmword [rdx + 0x20], xmm6
movaps xmmword [rdx + 0x10], xmm6
movaps xmmword [rdx], xmm6
mov r8d, 0x40
call fcn.140001dde
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14001e05b
lea rcx, [rsp + 0x60]
call fcn.14000286e
jmp 0x14001e09b
cmp word [rsp + 0x190], 0x5a4d
jne 0x14001e09b
mov r8d, dword [rsp + 0x1cc]
mov rcx, rsi
xor edx, edx
call fcn.140049c90
mov rsi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rdx
test sil, 1
je 0x14001e096
lea rcx, [rsp + 0x68]
call fcn.14000286e
test rsi, rsi
je 0x14001e0e9
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x168]
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [rcx], xmm0
movabs rax, 0x8000000000000000
movups xmm0, xmmword [rcx]
movups xmmword [rbx + 8], xmm0
mov qword [rbx], rax
movaps xmm6, xmmword [rsp + 0x1d0]
add rsp, 0x1e8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xorps xmm0, xmm0
lea rdx, [rsp + 0xd0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0x28]
mov r8d, 0x18
call fcn.140001dde
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x14001e04f
cmp dword [rsp + 0xd0], 0x4550
jne 0x14001e09b
movzx ebp, word [rsp + 0xd6]
movzx r8d, word [rsp + 0xe4]
mov r14, qword [rsp + 0x28]
mov edx, 2
mov rcx, r14
call fcn.140049c90
mov rsi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rdx
test sil, 1
je 0x14001e16e
lea rcx, [rsp + 0x68]
call fcn.14000286e
test rsi, rsi
jne 0x14001e09b
xorps xmm6, xmm6
movups xmmword [rsp + 0x148], xmm6
movups xmmword [rsp + 0x138], xmm6
movups xmmword [rsp + 0x128], xmm6
movups xmmword [rsp + 0x118], xmm6
mov byte [rsp + 0x158], 0
movups xmm0, xmmword [0x14008ac50]
movaps xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [0x14008ac60]
movaps xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], 0
test bp, bp
je 0x14001e282
mov qword [rsp + 0x30], r14
lea rsi, [rsp + 0x28]
lea rdi, [rsp + 0x60]
lea r15, [rsp + 0x38]
xor r12d, r12d
mov r13d, 1
mov r14d, 0x7865742e
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
mov qword [rsp + 0x80], 0
mov r8d, 0x28
mov rcx, rsi
mov rdx, rdi
call fcn.140001dde
mov qword [rsp + 0x38], rax
test rax, rax
jne 0x14001e305
mov r8d, 8
mov rcx, r15
mov rdx, rdi
call fcn.140022060
cmp byte [rsp + 0x38], 0
mov rdx, qword [rsp + 0x48]
cmovne rdx, r12
mov rcx, qword [rsp + 0x40]
cmovne rcx, r13
call fcn.140003bac
cmp rdx, 5
jne 0x14001e274
mov ecx, dword [rax]
xor ecx, r14d
movzx eax, byte [rax + 4]
xor eax, 0x74
or eax, ecx
je 0x14001e30f
dec bp
jne 0x14001e1f8
mov r14, qword [rsp + 0x30]
lea rdx, [rsp + 0x60]
lea rsi, [rsp + 0xf0]
mov ecx, 0xe
mov rdi, rdx
rep movsq qword [rdi], qword [rsi]
lea rsi, [rsp + 0x38]
mov rcx, rsi
call fcn.140002114
lea r8, [rsp + 0x58]
lea rdi, [rsp + 0x178]
mov rcx, rdi
mov rdx, rsi
call fcn.14000424f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rdi]
lea rcx, [rsp + 0x168]
movups xmm0, xmmword [rdi + 8]
movups xmmword [rcx], xmm0
mov qword [rcx - 8], rax
movabs rdx, 0x8000000000000001
cmp rax, rdx
jne 0x14001e0c3
call fcn.1400025da
movabs rax, 0x8000000000000000
jmp 0x14001e0ca
lea rcx, [rsp + 0x38]
jmp 0x14001e054
mov edi, dword [rsp + 0x70]
mov esi, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x30]
xor edx, edx
mov r8, rsi
call fcn.140049c90
mov r15, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rdx
test r15b, 1
je 0x14001e343
lea rcx, [rsp + 0x40]
call fcn.14000286e
test r15, r15
jne 0x14001e09b
lea r15, [rsp + 0x38]
mov rcx, r15
mov rdx, rdi
call fcn.14005ffa4
mov rdi, qword [r15 + 8]
mov r15, qword [r15 + 0x10]
lea rcx, [rsp + 0x28]
mov rdx, rdi
mov r8, r15
call fcn.140001dde
mov qword [rsp + 0x58], rax
test rax, rax
je 0x14001e3ab
lea rcx, [rsp + 0x58]
call fcn.14000286e
cmp qword [rsp + 0x38], 0
je 0x14001e09b
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14001e09b
cmp r15, 0x64
mov r14d, 0x64
cmovb r14, r15
test r15, r15
je 0x14001e409
mov rbp, r14
dec rbp
je 0x14001e436
xor r12d, r12d
lea r13, [rsp + 0xf0]
mov rax, r12
xor edx, edx
div rbp
add rax, rsi
cmp rax, r15
jae 0x14001e401
lea r9, [rax + 1]
mov rcx, rdi
mov rdx, r15
mov r8, rax
call fcn.14000588a
mov r8, rdx
mov rcx, r13
mov rdx, rax
call fcn.140002060
add r12, r15
dec r14
jne 0x14001e3d1
cmp qword [rsp + 0x38], 0
je 0x14001e27d
mov rcx, qword [0x1400cdc50]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
jmp 0x14001e27d
lea rcx, [0x1400aac90]
call fcn.140083e30
int3