Function at 0x14002fc50
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
mov rax, qword [0x140075100]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rax, qword gs:[0x58]
movabs rsi, 0xe2fe1ebe4d8024b3
mov ebx, 4
mov edi, 1
movabs r14, 0xa7cef4eb5823ef28
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x140078774], eax
jle 0x14002fd1c
lea rcx, [0x140078774]
call fcn.140036b28
cmp dword [0x140078774], 0xffffffff
jne 0x14002fd1c
movabs rax, 0x8e906cd53eef50dd
mov qword [rbp + 0x37], rsi
mov qword [rbp - 0x49], rax
lea rcx, [rbp - 0x49]
movabs rax, 0xa7cef4eb3d5b8a06
mov qword [rbp + 0x3f], r14
mov qword [rbp - 0x41], rax
mov r8d, edi
movdqa xmm0, xmmword [rbp - 0x49]
xor edx, edx
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 0x49], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
lea rcx, [0x140078774]
mov qword [0x140078690], rax
call fcn.140036abc
mov eax, dword [rbx]
cmp dword [0x1400786c0], eax
jle 0x14002fd55
lea rcx, [0x1400786c0]
call fcn.140036b28
cmp dword [0x1400786c0], 0xffffffff
jne 0x14002fd55
mov rax, qword [0x140078690]
lea rcx, [0x1400786c0]
mov qword [0x140078730], rax
call fcn.140036abc
mov rax, qword [0x140078730]
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x140030014
mov eax, dword [rbx]
cmp dword [0x140078578], eax
jle 0x14002fdae
lea rcx, [0x140078578]
call fcn.140036b28
cmp dword [0x140078578], 0xffffffff
jne 0x14002fdae
mov rax, qword [0x140078730]
lea rcx, [0x140078578]
movsxd rdx, dword [rax + 0x3c]
add rdx, qword [0x140078690]
mov qword [0x1400786d8], rdx
call fcn.140036abc
mov rax, qword [0x1400786d8]
cmp dword [rax], 0x4550
jne 0x140030014
mov eax, dword [rbx]
cmp dword [0x1400785f8], eax
jle 0x14002fe00
lea rcx, [0x1400785f8]
call fcn.140036b28
cmp dword [0x1400785f8], 0xffffffff
jne 0x14002fe00
mov rax, qword [0x1400786d8]
lea rcx, [0x1400785f8]
add rax, 0x108
mov qword [0x140078540], rax
call fcn.140036abc
mov eax, dword [rbx]
cmp dword [0x1400787a4], eax
jle 0x14002fe39
lea rcx, [0x1400787a4]
call fcn.140036b28
cmp dword [0x1400787a4], 0xffffffff
jne 0x14002fe39
mov rax, qword [0x140078540]
lea rcx, [0x1400787a4]
mov qword [0x1400786c8], rax
call fcn.140036abc
mov eax, dword [rbx]
cmp dword [0x14007868c], eax
jle 0x14002fe76
lea rcx, [0x14007868c]
call fcn.140036b28
cmp dword [0x14007868c], 0xffffffff
jne 0x14002fe76
mov rax, qword [0x1400786d8]
lea rcx, [0x14007868c]
movzx edx, word [rax + 6]
mov word [0x140078588], dx
call fcn.140036abc
xchg byte [0x1400784d8], dil
mov r8, qword [0x140078540]
test dil, dil
jne 0x14002ff07
movzx eax, word [0x140078588]
lea rcx, [rax + rax*4]
mov rax, qword [0x1400786c8]
lea r10, [rax + rcx*8]
cmp r8, r10
jae 0x14002ff07
mov qword [rbp + 0x37], rsi
movabs r11, 0xe2fe1ebe08c765e3
mov qword [rbp + 0x3f], r14
movdqa xmm1, xmmword [rbp + 0x37]
nop
mov qword [rbp - 0x39], r11
lea r9, [rbp - 0x39]
mov qword [rbp - 0x31], r14
mov rax, r8
movdqa xmm0, xmmword [rbp - 0x39]
sub r9, r8
xorps xmm0, xmm1
movdqa xmmword [rbp - 0x39], xmm0
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r9]
sub edx, ecx
jne 0x14002fef3
inc rax
test ecx, ecx
jne 0x14002fee0
test edx, edx
je 0x14002ff07
add r8, 0x28
mov qword [0x140078540], r8
cmp r8, r10
jb 0x14002fec0
mov eax, dword [rbx]
cmp dword [0x140078808], eax
jle 0x14002ff51
lea rcx, [0x140078808]
call fcn.140036b28
cmp dword [0x140078808], 0xffffffff
jne 0x14002ff4a
mov rax, qword [0x140078540]
lea rcx, [0x140078808]
mov edx, dword [rax + 0xc]
add rdx, qword [0x140078690]
mov qword [0x1400787b8], rdx
call fcn.140036abc
mov r8, qword [0x140078540]
mov ecx, dword [r8 + 0x10]
movdqa xmm0, xmmword [0x14006d290]
movdqa xmm1, xmmword [0x14006d2c0]
mov r9, qword [0x1400787b8]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm0, xmmword [0x14006d2a0]
movdqu xmmword [rbp - 9], xmm0
movdqa xmm0, xmmword [0x14006d280]
lea r10, [r9 + rcx]
movdqu xmmword [rbp - 0x19], xmm1
mov rax, r10
movdqa xmm1, xmmword [0x14006d2b0]
movdqu xmmword [rbp + 0x17], xmm0
movdqu xmmword [rbp + 7], xmm1
mov dword [rbp + 0x27], 0x788b784c
mov dword [rbp + 0x2b], 0x78243f00
cmp rcx, 0x2c
jb 0x14002fff9
lea r11, [r10 - 0x2c]
nop dword [rax]
mov rdx, r9
lea rax, [rbp - 0x29]
nop word [rax + rax]
movzx r8d, word [rax]
movzx ecx, r8w
shr cx, 8
cmp cl, 0x3f
je 0x14002ffe6
cmp byte [rdx], r8b
jne 0x140030007
inc rdx
lea rcx, [rbp + 0x2f]
add rax, 2
cmp rax, rcx
jne 0x14002ffd0
mov rax, r9
xor ecx, ecx
cmp rax, r10
cmovne rcx, rax
mov rax, rcx
jmp 0x140030016
mov rax, r10
cmp r9, r11
je 0x14002fff9
inc r9
jmp 0x14002ffc0
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400369f0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret