Function at 0x7ff7e151bd90
Capabilities:
Parse pe header

Disassembly:
push rbx
push rbp
push r13
push r14
sub rsp, 0x88
xor ebx, ebx
movzx ebp, r8w
mov dword [r9], ebx
mov r14, r9
movzx r10d, dl
mov r13, rcx
test rcx, rcx
jne 0x7ff7e151bdc6
xor eax, eax
add rsp, 0x88
pop r14
pop r13
pop rbp
pop rbx
ret
movsxd rax, dword [rcx + 0x3c]
mov edx, 0x5a4d
add rcx, rax
mov qword [rsp + 0x80], r15
cmp word [r13], dx
jne 0x7ff7e151bdfe
test eax, eax
jle 0x7ff7e151bdfe
cmp eax, 0x10000000
jae 0x7ff7e151bdfe
cmp dword [rcx], 0x4550
jne 0x7ff7e151bdfe
lea r15, [rcx + 4]
add rcx, 0x18
jmp 0x7ff7e151be05
mov r15, r13
lea rcx, [r13 + 0x14]
movzx edx, word [rcx]
sub edx, 0x107
je 0x7ff7e151be80
sub edx, 4
je 0x7ff7e151be71
cmp edx, 0x100
je 0x7ff7e151be24
xor eax, eax
jmp 0x7ff7e151c064
cmp ebp, dword [rcx + 0x6c]
jae 0x7ff7e151c061
lea rdx, [rbp + 0xe]
cmp dword [rcx + rdx*8], ebx
lea rdx, [rcx + rdx*8]
je 0x7ff7e151c061
cmp dword [rdx + 4], ebx
je 0x7ff7e151c061
mov r9d, dword [rcx + 0x3c]
mov r8, r14
mov qword [rsp + 0x30], rcx
mov rcx, r13
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rdx
movzx edx, r10b
call fcn.7ff7e151c080
mov rbx, rax
jmp 0x7ff7e151c061
cmp ebp, dword [rcx + 0x5c]
jae 0x7ff7e151c061
lea rdx, [rbp + 0xc]
jmp 0x7ff7e151be31
mov qword [rsp + 0xc0], rdi
cmp word [r15 + 2], bx
jbe 0x7ff7e151c059
movzx eax, word [r15 + 0x10]
test ax, ax
je 0x7ff7e151c059
mov qword [rsp + 0xb8], rsi
lea rdi, [rcx + rax]
mov qword [rsp + 0xc8], r12
movzx esi, bx
movabs r12, 0x1af486e7eaac4954
movabs rax, 0xbd6ca7f674e6564d
movabs rcx, 0xbd6cc68215822663
movabs rdx, 0xbd6ca7f674e6544d
cmp ebp, 3
jne 0x7ff7e151bf6a
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x40]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0xb0], r12
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xb0], rcx
mov rcx, rdi
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0xb0], r12
mov rax, qword [rsp + 0xb0]
movdqa xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x68], rax
pxor xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x40], xmm0
call qword [sym.imp.ucrtbase.dll__stricmp]
test eax, eax
je 0x7ff7e151c03c
jmp 0x7ff7e151bfeb
cmp ebp, 6
jne 0x7ff7e151c009
mov qword [rsp + 0xb0], rdx
lea rdx, [rsp + 0x50]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0xb0], r12
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xb0], rcx
mov rcx, rdi
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0xb0], r12
mov rax, qword [rsp + 0xb0]
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x78], rax
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.ucrtbase.dll__stricmp]
test eax, eax
je 0x7ff7e151c01d
movabs rdx, 0xbd6ca7f674e6544d
movabs rax, 0xbd6ca7f674e6564d
movabs rcx, 0xbd6cc68215822663
inc si
add rdi, 0x28
cmp si, word [r15 + 2]
jb 0x7ff7e151bee0
jmp 0x7ff7e151c03c
mov dword [r14], ebx
lea rcx, [r13 + 0xc]
mov eax, dword [rdi + 0x14]
add rcx, rax
cmp dword [rcx], ebx
je 0x7ff7e151c03c
nop
add dword [r14], 0x1c
lea rcx, [rcx + 0x1c]
cmp dword [rcx], ebx
jne 0x7ff7e151c030
cmp si, word [r15 + 2]
mov rsi, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xc8]
jae 0x7ff7e151c059
mov ebx, dword [rdi + 0x14]
add rbx, r13
mov rdi, qword [rsp + 0xc0]
mov rax, rbx
mov r15, qword [rsp + 0x80]
add rsp, 0x88
pop r14
pop r13
pop rbp
pop rbx
ret