Function at 0x140025390
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14006a100]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rax, qword gs:[0x58]
movabs rsi, 0x8843c2eeca0db22b
mov edi, 4
mov ebx, 1
movabs r14, 0x12d624f331561b4c
add rdi, qword [rax]
mov eax, dword [rdi]
cmp dword [0x14006d5d0], eax
jle 0x14002545c
lea rcx, [0x14006d5d0]
call fcn.14002a9d8
cmp dword [0x14006d5d0], 0xffffffff
jne 0x14002545c
movabs rax, 0xe42db085b962c645
mov qword [rbp + 0x37], rsi
mov qword [rbp - 0x29], rax
lea rcx, [rbp - 0x29]
movabs rax, 0x12d624f3542e7e62
mov qword [rbp + 0x3f], r14
mov qword [rbp - 0x21], rax
mov r8d, ebx
movdqa xmm0, xmmword [rbp - 0x29]
xor edx, edx
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 0x29], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
lea rcx, [0x14006d5d0]
mov qword [0x14006d4d8], rax
call fcn.14002a96c
mov eax, dword [rdi]
cmp dword [0x14006d4fc], eax
jle 0x140025495
lea rcx, [0x14006d4fc]
call fcn.14002a9d8
cmp dword [0x14006d4fc], 0xffffffff
jne 0x140025495
mov rax, qword [0x14006d4d8]
lea rcx, [0x14006d4fc]
mov qword [0x14006d690], rax
call fcn.14002a96c
mov rax, qword [0x14006d690]
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x140025744
mov eax, dword [rdi]
cmp dword [0x14006d5f4], eax
jle 0x1400254ee
lea rcx, [0x14006d5f4]
call fcn.14002a9d8
cmp dword [0x14006d5f4], 0xffffffff
jne 0x1400254ee
mov rax, qword [0x14006d690]
lea rcx, [0x14006d5f4]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [0x14006d4d8]
mov qword [0x14006d568], rdx
call fcn.14002a96c
mov rax, qword [0x14006d568]
cmp dword [rax], 0x4550
jne 0x140025744
mov eax, dword [rdi]
cmp dword [0x14006d49c], eax
jle 0x140025540
lea rcx, [0x14006d49c]
call fcn.14002a9d8
cmp dword [0x14006d49c], 0xffffffff
jne 0x140025540
mov rax, qword [0x14006d568]
lea rcx, [0x14006d49c]
add rax, 0x108
mov qword [0x14006d638], rax
call fcn.14002a96c
mov eax, dword [rdi]
cmp dword [0x14006d5e0], eax
jle 0x140025579
lea rcx, [0x14006d5e0]
call fcn.14002a9d8
cmp dword [0x14006d5e0], 0xffffffff
jne 0x140025579
mov rax, qword [0x14006d638]
lea rcx, [0x14006d5e0]
mov qword [0x14006d678], rax
call fcn.14002a96c
mov eax, dword [rdi]
cmp dword [0x14006d560], eax
jle 0x1400255b6
lea rcx, [0x14006d560]
call fcn.14002a9d8
cmp dword [0x14006d560], 0xffffffff
jne 0x1400255b6
mov rax, qword [0x14006d568]
lea rcx, [0x14006d560]
movzx edx, word [rax + 6]
mov word [0x14006d614], dx
call fcn.14002a96c
xchg byte [0x14006d488], bl
mov r8, qword [0x14006d638]
test bl, bl
jne 0x140025647
movzx eax, word [0x14006d614]
lea rcx, [rax + rax*4]
mov rax, qword [0x14006d678]
lea r10, [rax + rcx*8]
cmp r8, r10
jae 0x140025647
mov qword [rbp + 0x37], rsi
movabs r11, 0x8843c2ee8f4af37b
mov qword [rbp + 0x3f], r14
movdqa xmm1, xmmword [rbp + 0x37]
nop dword [rax]
mov qword [rbp - 0x19], r11
lea r9, [rbp - 0x19]
mov qword [rbp - 0x11], r14
mov rax, r8
movdqa xmm0, xmmword [rbp - 0x19]
sub r9, r8
xorps xmm0, xmm1
movdqa xmmword [rbp - 0x19], xmm0
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r9]
sub edx, ecx
jne 0x140025633
inc rax
test ecx, ecx
jne 0x140025620
test edx, edx
je 0x140025647
add r8, 0x28
mov qword [0x14006d638], r8
cmp r8, r10
jb 0x140025600
mov eax, dword [rdi]
cmp dword [0x14006d650], eax
jle 0x140025691
lea rcx, [0x14006d650]
call fcn.14002a9d8
cmp dword [0x14006d650], 0xffffffff
jne 0x14002568a
mov rax, qword [0x14006d638]
lea rcx, [0x14006d650]
mov edx, dword [rax + 0xc]
add rdx, qword [0x14006d4d8]
mov qword [0x14006d490], rdx
call fcn.14002a96c
mov r8, qword [0x14006d638]
mov ecx, dword [r8 + 0x10]
movdqa xmm0, xmmword [0x140062da0]
mov r9, qword [0x14006d490]
movdqa xmm1, xmmword [0x140062d70]
mov dword [rbp + 0x27], 0x3f003f00
mov dword [rbp + 0x2b], 0x3f003f00
mov word [rbp + 0x2f], 0x78e8
lea r10, [r9 + rcx]
mov rax, r10
movdqu xmmword [rbp - 9], xmm0
movdqa xmm0, xmmword [0x140062db0]
movdqu xmmword [rbp + 7], xmm1
movdqu xmmword [rbp + 0x17], xmm0
cmp rcx, 0x1d
jb 0x140025729
lea r11, [r10 - 0x1d]
nop dword [rax + rax]
mov rdx, r9
lea rax, [rbp - 9]
nop word [rax + rax]
movzx r8d, word [rax]
movzx ecx, r8w
shr cx, 8
cmp cl, 0x3f
je 0x140025716
cmp byte [rdx], r8b
jne 0x140025737
inc rdx
lea rcx, [rbp + 0x31]
add rax, 2
cmp rax, rcx
jne 0x140025700
mov rax, r9
xor ecx, ecx
cmp rax, r10
cmovne rcx, rax
mov rax, rcx
jmp 0x140025746
mov rax, r10
cmp r9, r11
je 0x140025729
inc r9
jmp 0x1400256f0
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.14002a8a0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret