Function at 0x1800ce080
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x80
mov rax, qword [0x180232200]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rbx, rdx
mov rdi, rcx
xor esi, esi
xor edx, edx
mov r8d, 0x454
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x1a8]
test al, al
jne 0x1800ce838
mov ecx, dword [rdi + 0xc]
call fcn.18002cff0
test al, al
je 0x1800ce838
mov rax, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [rax + 0x2a0]
mov dword [rbx + 0x94], esi
mov ecx, dword [rdi + 0xc]
cmp ecx, 0x10798400
jg 0x1800ce435
je 0x1800ce426
cmp ecx, 0x10538200
jg 0x1800ce2bc
je 0x1800ce2ad
cmp ecx, 0x10322950
jg 0x1800ce1ee
je 0x1800ce1df
cmp ecx, 0x10280300
jg 0x1800ce196
je 0x1800ce187
cmp ecx, 0xffffffff
je case.default.0x1800ce639
cmp ecx, 0x10244800
je 0x1800ce178
cmp ecx, 0x10266400
je 0x1800ce169
cmp ecx, 0x10266401
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x5d
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x1b
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x16
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x1c
jmp case.default.0x1800ce639
cmp ecx, 0x10293000
je 0x1800ce1d0
cmp ecx, 0x10294700
je 0x1800ce1c1
cmp ecx, 0x10294900
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x1d
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x18
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x17
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x1e
jmp case.default.0x1800ce639
cmp ecx, 0x10478300
jg 0x1800ce267
je 0x1800ce258
cmp ecx, 0x10352300
je 0x1800ce249
cmp ecx, 0x10378800
je 0x1800ce23a
cmp ecx, 0x10402100
je 0x1800ce22b
cmp ecx, 0x10416000
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x23
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x21
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x20
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x1f
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x25
jmp case.default.0x1800ce639
sub ecx, 0x10478350
je 0x1800ce29e
sub ecx, 0xa00b0
je 0x1800ce28f
cmp ecx, 0x50
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x28
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x27
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x26
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x29
jmp case.default.0x1800ce639
cmp ecx, 0x10646700
jg 0x1800ce307
je 0x1800ce2f8
cmp ecx, 0x10565400
je 0x1800ce2e9
cmp ecx, 0x10634500
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x2b
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x2a
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x2c
jmp case.default.0x1800ce639
cmp ecx, 0x10668200
jg 0x1800ce398
je 0x1800ce15a
sub ecx, 0x10646701
cmp ecx, 6
ja case.default.0x1800ce639
movsxd rax, ecx
lea rcx, [0x180000000]
mov eax, dword [rcx + rax*4 + 0xce85c]
add rax, rcx
jmp rax
mov dword [rbx + 0x94], 0x2e
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x31
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x35
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x4f
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x2f
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x2d
jmp case.default.0x1800ce639
cmp ecx, 0x10710852
jg 0x1800ce3f4
je 0x1800ce3e5
sub ecx, 0x10710800
je 0x1800ce3d6
sub ecx, 0x50
je 0x1800ce3c7
cmp ecx, 1
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x34
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x33
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x32
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x50
jmp case.default.0x1800ce639
cmp ecx, 0x10756600
je 0x1800ce417
cmp ecx, 0x10767400
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x37
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x36
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x38
jmp case.default.0x1800ce639
cmp ecx, 0x10832400
jg 0x1800ce57a
je 0x1800ce56b
sub ecx, 0x10798401
cmp ecx, 0x1f
ja case.default.0x1800ce639
movsxd rax, ecx
lea rcx, [0x180000000]
mov eax, dword [rcx + rax*4 + 0xce878]
add rax, rcx
jmp rax
mov dword [rbx + 0x94], 0x3e
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x40
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x3b
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x39
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x43
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x44
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x45
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x46
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x47
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x48
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x49
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x4a
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x4b
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x4c
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x4d
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x4e
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x59
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x3a
jmp case.default.0x1800ce639
cmp ecx, 0x10922400
jg 0x1800ce608
je 0x1800ce5f9
sub ecx, 0x10832401
je 0x1800ce5ea
sub ecx, 1
je 0x1800ce5db
sub ecx, 1
je 0x1800ce5cc
sub ecx, 0x46bfd
je 0x1800ce5bd
cmp ecx, 0xa7600
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x42
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x3d
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x41
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x3f
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x3c
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x58
jmp case.default.0x1800ce639
cmp ecx, 0x10922499
jg 0x1800ce69b
je 0x1800ce68f
sub ecx, 0x10922401
cmp ecx, 6
ja case.default.0x1800ce639
movsxd rax, ecx
lea rcx, [0x180000000]
mov eax, dword [rcx + rax*4 + 0xce8f8]
add rax, rcx
jmp rax
mov dword [rbx + 0x94], 0x51
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x52
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x53
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x54
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x55
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x56
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x57
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x5a
jmp case.default.0x1800ce639
sub ecx, 0x10958500
je 0x1800ce6b4
cmp ecx, 1
jne case.default.0x1800ce639
mov dword [rbx + 0x94], 0x5b
jmp case.default.0x1800ce639
mov dword [rbx + 0x94], 0x5c
mov qword [rbx], rsi
mov dword [rbx + 8], 0x454
mov dword [rbx + 0xa8], esi
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8 + 0x30], sil
jne 0x1800ce6e6
lea rdx, [rbx + 0x30]
lea rcx, [rsp + 0x38]
call fcn.18000d910
nop
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1800ce740
lea rax, [rcx + 4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov dword [rax + rcx], 0x7469622e
mov byte [rax + rcx + 4], 0
lea rax, [rsp + 0x38]
jmp 0x1800ce762
mov qword [rsp + 0x20], 4
lea r9, [0x1801e88e4]
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x38]
call fcn.180041ae0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1800ce7d3
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ce7ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800ce7ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180187890
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8d, 0x63
lea rcx, [rbx + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1800ce834
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ce82f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800ce82f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180187890
mov al, 1
jmp 0x1800ce83a
xor al, al
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.180187870
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret