Function at 0x1800bb9c8
Capabilities:
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push r12
push r14
push r15
sub rsp, 0x1b0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rsi, rcx
lea rbx, [rcx + 0x10]
mov rdx, qword [rcx + 0x20]
xor r12d, r12d
test rdx, rdx
je 0x1800bbaa4
cmp qword [rcx + 0x28], 0x10
jb 0x1800bba1e
mov r14, qword [rbx]
mov r9, r14
lea rdi, [rdx + r14]
add r14, rdx
jmp 0x1800bba29
mov r9, rbx
lea rdi, [rbx + rdx]
lea r14, [rbx + rdx]
mov r8b, 0x22
mov rdx, rdi
mov rcx, r9
call fcn.180157230
mov rcx, rax
cmp rax, rdi
je 0x1800bba55
jmp 0x1800bba4d
mov dl, byte [rax]
cmp dl, 0x22
je 0x1800bba4d
mov byte [rcx], dl
inc rcx
inc rax
cmp rax, rdi
jne 0x1800bba41
mov rax, rbx
cmp qword [rsi + 0x28], 0x10
jb 0x1800bba62
mov rax, qword [rbx]
mov rdx, rcx
sub rdx, rax
sub r14, rcx
mov rdi, qword [rsi + 0x20]
mov rax, rdi
sub rax, rdx
cmp rax, r14
cmovb r14, rax
cmp qword [rsi + 0x28], 0x10
jb 0x1800bba86
mov rbx, qword [rbx]
lea rcx, [rbx + rdx]
sub rdi, r14
mov r8, rdi
sub r8, rdx
inc r8
lea rdx, [rcx + r14]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov qword [rsi + 0x20], rdi
mov rcx, rsi
call fcn.1800bc26c
test al, al
jne 0x1800bbac3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0x7c
jmp 0x1800bc076
cmp byte [rsi + 0x409], r12b
jne 0x1800bbb02
lea rdx, [rsi + 0x30]
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov ecx, dword [rsi + 0x54]
mov qword [rsi + 0x68], rcx
cmp byte [rsi + 4], r12b
jne 0x1800bbb02
cmp byte [rsi + 0x488], r12b
jne 0x1800bbafb
mov rcx, rsi
call fcn.1800bf250
mov al, 1
jmp 0x1800bc080
lea rbx, [rsi + 0x70]
mov byte [rsp + 0x28], r12b
mov r15d, 2
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea edi, [r15 + 0x3e]
mov r8d, edi
mov rdx, rbx
mov rcx, rsi
call fcn.1800be4b8
test al, al
jne 0x1800bbb59
mov qword [rsi + 0x470], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, 0x80006
lea r8d, [rdi + 0x57]
jmp 0x1800bc076
mov eax, 0x5a4d
cmp ax, word [rbx]
je 0x1800bbb6d
mov eax, 0x4d5a
cmp ax, word [rbx]
jne 0x1800bbb77
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1800bbb87
mov edx, 0x80003
mov r8d, 0x9d
jmp 0x1800bc076
cmp byte [rsi + 0x409], r12b
jne 0x1800bbbac
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, eax
jmp 0x1800bbbae
mov ecx, edi
mov eax, dword [rsi + 0xac]
cmp eax, edi
jb 0x1800bc06b
cmp eax, 0x400
jg 0x1800bc06b
sub eax, ecx
lea rdi, [rsi + 0x360]
mov ebx, eax
mov edx, eax
mov rcx, rdi
call fcn.1800255bc
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, ebx
mov rdx, qword [rdi]
mov rcx, rsi
call fcn.1800be4b8
test al, al
jne 0x1800bbc0b
mov edx, 0x80006
mov r8d, 0xb2
jmp 0x1800bc076
mov edi, 0xf8
mov r8d, edi
xor edx, edx
lea rcx, [rsp + 0xb0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r9 + 0x14]
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call fcn.1800be4b8
test al, al
jne 0x1800bbc55
mov edx, 0x80006
lea r8d, [rdi - 0x41]
jmp 0x1800bc076
mov edx, 0x14c
movzx ecx, word [rsp + 0xb4]
and cx, dx
cmp cx, dx
sete al
mov byte [rsi + 0x430], al
movsxd r9, dword [rsi + 0xac]
mov byte [rsp + 0x28], 1
mov rcx, rsi
mov dword [rsp + 0x20], 1
jne 0x1800bbcfb
mov qword [rsi + 0x438], 4
lea rbx, [rsi + 0xb0]
mov r8, rdi
mov rdx, rbx
call fcn.1800be4b8
test al, al
jne 0x1800bbcbb
mov edx, 0x80006
mov r8d, 0xbf
jmp 0x1800bc076
cmp dword [rbx], 0x4550
je 0x1800bbcd3
mov edx, 0x80003
mov r8d, 0xc3
jmp 0x1800bc076
movzx ecx, word [rsi + 0xb6]
mov eax, 0x60
cmp ecx, eax
jbe 0x1800bbcec
mov word [rsi + 0xb6], ax
mov ecx, eax
test ecx, ecx
jne 0x1800bbd60
mov r8d, 0xe3
jmp 0x1800bc071
mov qword [rsi + 0x438], 8
lea rbx, [rsi + 0x1a8]
mov r8d, pe_nt_image_headers64
mov rdx, rbx
call fcn.1800be4b8
test al, al
jne 0x1800bbd2f
mov edx, 0x80006
mov r8d, 0xd2
jmp 0x1800bc076
cmp dword [rbx], 0x4550
je 0x1800bbd47
mov edx, 0x80003
mov r8d, 0xd7
jmp 0x1800bc076
movzx ecx, word [rsi + 0x1ae]
mov eax, 0x60
cmp ecx, eax
jbe 0x1800bbcec
mov word [rsi + 0x1ae], ax
mov ecx, eax
mov byte [rsp + 0x30], r12b
xor eax, eax
mov qword [rsp + 0x31], rax
mov rbx, r12
mov rdi, r12
mov r14d, ecx
test ecx, ecx
je 0x1800bbeeb
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r9 + 0x28]
lea rdx, [rsp + 0x80]
mov rcx, rsi
call fcn.1800be4b8
test al, al
je 0x1800bbfaf
mov r8d, 8
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x30]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov rax, r12
cmp byte [rsp + rax + 0x30], 0x20
jge 0x1800bbdce
mov byte [rsp + rax + 0x30], r12b
inc rax
cmp rax, 9
jb 0x1800bbdc2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x41], xmm0
movups xmmword [rsp + 0x51], xmm0
movups xmmword [rsp + 0x61], xmm0
mov word [rsp + 0x71], ax
mov byte [rsp + 0x73], al
movups xmm0, xmmword [rsp + 0x80]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [rsp + 0xa0]
movsd qword [rsp + 0x60], xmm0
lea r9d, [rax + 8]
lea r8, [rsp + 0x30]
lea edx, [rax + 9]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
lea rcx, [rsi + 0x378]
mov rdx, qword [rsi + 0x380]
cmp rdx, qword [rsi + 0x388]
je 0x1800bbe76
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x20], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rdx + 0x30], eax
add qword [rsi + 0x380], 0x34
jmp 0x1800bbe80
lea r8, [rsp + 0x40]
call fcn.1800cd3ac
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.1800bd70c
cmp byte [rsi + 0x409], r12b
je 0x1800bbecf
dec eax
xor edx, edx
cmp byte [rsi + 0x430], r12b
je 0x1800bbeab
mov ecx, dword [rsi + 0xe8]
jmp 0x1800bbeb1
mov ecx, dword [rsi + 0x1e0]
add eax, ecx
div ecx
mov r8d, eax
imul r8, rcx
mov ecx, dword [rsp + 0x4c]
add rcx, r8
cmp rcx, rbx
cmovbe rcx, rbx
mov rbx, rcx
jmp 0x1800bbedf
mov edx, dword [rsp + 0x54]
mov eax, eax
add rdx, rax
cmp rdx, rbx
cmova rbx, rdx
inc rdi
cmp rdi, r14
jb 0x1800bbd7d
cmp byte [rsi + 0x488], r12b
jne 0x1800bbefc
mov rcx, rsi
call fcn.1800bf250
cmp byte [rsi + 0x430], r12b
je 0x1800bbfc4
lea rdi, [rsi + 0x128]
mov r14, rdi
lea r15, [rdi + 0x80]
cmp rdi, r15
je 0x1800bbf4f
mov eax, dword [r14]
cmp byte [rsi + 0x409], r12b
jne 0x1800bbf35
mov edx, eax
mov rcx, rsi
call fcn.1800bc61c
mov ecx, dword [r14 + 4]
add rax, rcx
cmp rax, rbx
cmovbe rax, rbx
mov rbx, rax
add r14, 8
cmp r14, r15
jne 0x1800bbf1f
cmp dword [rsi + 0x130], r12d
je 0x1800bbf70
xor edx, edx
mov rcx, rsi
call fcn.1800bc738
test al, al
jne 0x1800bbf70
cmp dword [rsi + 8], 4
jne 0x1800bc080
cmp dword [rdi], r12d
je 0x1800bbf8b
mov rcx, rsi
call fcn.1800bd158
test al, al
jne 0x1800bbf8b
cmp dword [rsi + 8], 4
jne 0x1800bc080
cmp dword [rsi + 0x150], r12d
je 0x1800bbfaa
mov rcx, rsi
call fcn.1800bd758
test al, al
jne 0x1800bbfaa
cmp dword [rsi + 8], 4
jne 0x1800bc080
jmp 0x1800bc059
mov edx, 0x80006
mov r8d, 0xef
jmp 0x1800bc076
lea rdi, [rsi + 0x230]
mov r14, rdi
lea r15, [rdi + 0x80]
cmp rdi, r15
je 0x1800bc00a
mov eax, dword [r14]
cmp byte [rsi + 0x409], r12b
jne 0x1800bbff0
mov edx, eax
mov rcx, rsi
call fcn.1800bc61c
mov ecx, dword [r14 + 4]
add rax, rcx
cmp rax, rbx
cmovbe rax, rbx
mov rbx, rax
add r14, 8
cmp r14, r15
jne 0x1800bbfda
cmp dword [rsi + 0x238], r12d
je 0x1800bc027
xor edx, edx
mov rcx, rsi
call fcn.1800bc738
test al, al
jne 0x1800bc027
cmp dword [rsi + 8], 4
jne 0x1800bc080
cmp dword [rdi], r12d
je 0x1800bc03e
mov rcx, rsi
call fcn.1800bd158
test al, al
jne 0x1800bc03e
cmp dword [rsi + 8], 4
jne 0x1800bc080
cmp dword [rsi + 0x258], r12d
je 0x1800bc059
mov rcx, rsi
call fcn.1800bd758
test al, al
jne 0x1800bc059
cmp dword [rsi + 8], 4
jne 0x1800bc080
cmp qword [rsi + 0x68], rbx
seta al
mov byte [rsi + 0x48b], al
jmp 0x1800bbafb
mov r8d, 0xa9
mov edx, 0x8000c
mov rcx, rsi
call fcn.1800bb4fc
xor al, al
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret