Function at 0x14001d100
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x80
mov rax, qword [0x140062100]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rax, qword gs:[0x58]
movabs rsi, 0x3f86baac8c50dc57
mov edi, 4
movabs rbp, 0xd049d761c705d738
mov ebx, 1
add rdi, qword [rax]
mov eax, dword [rdi]
cmp dword [0x1400653ec], eax
jle 0x14001d1cb
lea rcx, [0x1400653ec]
call fcn.140022498
cmp dword [0x1400653ec], 0xffffffff
jne 0x14001d1cb
movabs rax, 0x53e8c8c7ff3fa839
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
movabs rax, 0xd049d761a27db216
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x28], rax
mov r8d, ebx
movdqa xmm0, xmmword [rsp + 0x20]
xor edx, edx
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x20], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
lea rcx, [0x1400653ec]
mov qword [0x1400654f8], rax
call fcn.14002242c
mov eax, dword [rdi]
cmp dword [0x1400654d8], eax
jle 0x14001d204
lea rcx, [0x1400654d8]
call fcn.140022498
cmp dword [0x1400654d8], 0xffffffff
jne 0x14001d204
mov rax, qword [0x1400654f8]
lea rcx, [0x1400654d8]
mov qword [0x1400655b0], rax
call fcn.14002242c
mov rax, qword [0x1400655b0]
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x14001d495
mov eax, dword [rdi]
cmp dword [0x140065444], eax
jle 0x14001d25d
lea rcx, [0x140065444]
call fcn.140022498
cmp dword [0x140065444], 0xffffffff
jne 0x14001d25d
mov rax, qword [0x1400655b0]
lea rcx, [0x140065444]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [0x1400654f8]
mov qword [0x140065558], rdx
call fcn.14002242c
mov rax, qword [0x140065558]
cmp dword [rax], 0x4550
jne 0x14001d495
mov eax, dword [rdi]
cmp dword [0x1400654b8], eax
jle 0x14001d2af
lea rcx, [0x1400654b8]
call fcn.140022498
cmp dword [0x1400654b8], 0xffffffff
jne 0x14001d2af
mov rax, qword [0x140065558]
lea rcx, [0x1400654b8]
add rax, 0x108
mov qword [0x140065410], rax
call fcn.14002242c
mov eax, dword [rdi]
cmp dword [0x140065540], eax
jle 0x14001d2e8
lea rcx, [0x140065540]
call fcn.140022498
cmp dword [0x140065540], 0xffffffff
jne 0x14001d2e8
mov rax, qword [0x140065410]
lea rcx, [0x140065540]
mov qword [0x140065528], rax
call fcn.14002242c
mov eax, dword [rdi]
cmp dword [0x14006559c], eax
jle 0x14001d325
lea rcx, [0x14006559c]
call fcn.140022498
cmp dword [0x14006559c], 0xffffffff
jne 0x14001d325
mov rax, qword [0x140065558]
lea rcx, [0x14006559c]
movzx edx, word [rax + 6]
mov word [0x140065494], dx
call fcn.14002242c
xchg byte [0x1400652fc], bl
mov r8, qword [0x140065410]
test bl, bl
jne 0x14001d3bb
movzx eax, word [0x140065494]
lea rcx, [rax + rax*4]
mov rax, qword [0x140065528]
lea r10, [rax + rcx*8]
cmp r8, r10
jae 0x14001d3bb
mov qword [rsp + 0x60], rsi
movabs r11, 0x3f86baacc9179d07
mov qword [rsp + 0x68], rbp
movdqa xmm1, xmmword [rsp + 0x60]
nop
mov qword [rsp + 0x30], r11
lea r9, [rsp + 0x30]
mov qword [rsp + 0x38], rbp
mov rax, r8
movdqa xmm0, xmmword [rsp + 0x30]
sub r9, r8
xorps xmm0, xmm1
movdqa xmmword [rsp + 0x30], xmm0
movzx edx, byte [rax]
movzx ecx, byte [rax + r9]
sub edx, ecx
jne 0x14001d3a7
inc rax
test ecx, ecx
jne 0x14001d394
test edx, edx
je 0x14001d3bb
add r8, 0x28
mov qword [0x140065410], r8
cmp r8, r10
jb 0x14001d370
mov eax, dword [rdi]
cmp dword [0x1400654bc], eax
jle 0x14001d405
lea rcx, [0x1400654bc]
call fcn.140022498
cmp dword [0x1400654bc], 0xffffffff
jne 0x14001d3fe
mov rax, qword [0x140065410]
lea rcx, [0x1400654bc]
mov edx, dword [rax + 0xc]
add rdx, qword [0x1400654f8]
mov qword [0x140065460], rdx
call fcn.14002242c
mov r8, qword [0x140065410]
mov ecx, dword [r8 + 0x10]
mov r9, qword [0x140065460]
movdqa xmm0, xmmword [0x14005ac20]
movdqa xmm1, xmmword [0x14005ac00]
movdqu xmmword [rsp + 0x40], xmm0
lea r10, [r9 + rcx]
mov rax, r10
movdqu xmmword [rsp + 0x50], xmm1
cmp rcx, 0x10
jb 0x14001d47a
lea r11, [r10 - 0x10]
nop dword [rax]
mov rdx, r9
lea rax, [rsp + 0x40]
nop dword [rax + rax]
movzx r8d, word [rax]
movzx ecx, r8w
shr cx, 8
cmp cl, 0x3f
je 0x14001d466
cmp byte [rdx], r8b
jne 0x14001d488
inc rdx
lea rcx, [rsp + 0x60]
add rax, 2
cmp rax, rcx
jne 0x14001d450
mov rax, r9
xor ecx, ecx
cmp rax, r10
cmovne rcx, rax
mov rax, rcx
jmp 0x14001d497
mov rax, r10
cmp r9, r11
je 0x14001d47a
inc r9
jmp 0x14001d440
xor eax, eax
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.140022360
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret