Function at 0x18007e4c0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rdi
push r12
push r14
push r15
sub rsp, 0x30
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rsi
mov rax, qword [0x18015f040]
xor rax, rbp
mov qword [rbp + 8], rax
mov r15, r8
mov rsi, rdx
call fcn.18007dd40
mov rbx, rax
test rax, rax
jne 0x18007e5fe
movabs rax, 0x25bce03199a1402d
movabs rdx, 0x83a3939509c7d4c4
mov qword [rbp], rax
movabs r9, 0x6dac971abc27738
mov rax, qword [rbp]
movabs r8, 0x519c8454f5c8214b
movabs rax, 0xecceb3e16ca0f4ab
movabs rcx, 0x6c283c27f776c3f6
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x7de8376f22bc9a1
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x565a5341d713af92
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x2975b50004930d6f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp], rdx
mov rax, qword [rbp]
movabs rax, 0x69bfeb569747bcc5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rcx
mov rax, qword [rbp]
movabs rax, 0x2975b50004932f4f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], r9
mov rax, qword [rbp]
movabs rax, 0x519c8454f5c82169
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp], rdx
mov rax, qword [rbp]
xor eax, eax
jmp 0x18007e8f1
mov eax, 0x5a4d
cmp word [rbx], ax
je 0x18007e6eb
movabs rax, 0x25bce03199a1402d
movabs r8, 0x519c8454f5c8214b
mov qword [rbp], rax
movabs rdx, 0x83a3939509c7d4c4
mov rax, qword [rbp]
movabs rcx, 0x6c283c27f776c3f6
movabs rax, 0xecceb3e16ca0f4ab
movabs r9, 0x6dac971abc27738
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x13d69876f22bc9a1
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x94f5d4a9e56ef93
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x4803db6924e0466f
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x6dac971aba61e54
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp], rdx
mov rax, qword [rbp]
movabs rax, 0x69bfeb569747bcc5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rcx
mov rax, qword [rbp]
movabs rax, 0x2975b50004932f4f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], r9
mov rax, qword [rbp]
xor eax, eax
jmp 0x18007e8f1
movsxd rax, dword [rbx + 0x3c]
cmp dword [rax + rbx], 0x4550
jne 0x18007e60c
movzx r12d, byte [r15]
mov rdi, r15
test r12b, r12b
je 0x18007e710
inc rdi
cmp byte [rdi], 0
jne 0x18007e708
mov r11d, dword [rax + rbx + 0x50]
sub rdi, r15
sub r11, rdi
xor r14d, r14d
add r11, rbx
cmp rbx, r11
jae 0x18007e78f
cmp r12b, 0x3f
je 0x18007e733
movzx eax, byte [rsi]
cmp byte [rbx], al
jne 0x18007e787
cmp rdi, 1
je 0x18007e77c
mov r9, r15
lea rax, [rsi + 1]
sub r9, rsi
mov r8, rbx
mov r10, rsi
sub r8, rsi
not r10
cmp byte [r9 + rax], 0x3f
mov rdx, rbx
je 0x18007e76c
movzx ecx, byte [rax]
lea rbx, [rax - 1]
add rbx, r8
cmp byte [r8 + rax], cl
jne 0x18007e787
mov rbx, rdx
inc rax
lea rcx, [rdi - 1]
lea rdx, [rax + r10]
cmp rdx, rcx
jne 0x18007e74f
test rbx, rbx
jne 0x18007e8ee
jmp 0x18007e792
inc rbx
cmp rbx, r11
jb 0x18007e726
mov rbx, r14
lea rax, [rdi + rdi*2]
mov rdx, r14
lea rcx, [rax + 0x10]
cmp rcx, rax
cmova rdx, rcx
test rdx, rdx
je 0x18007e804
cmp rdx, 0x400
ja 0x18007e7e7
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x18007e7c5
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.1800e1b80
sub rsp, rax
lea rdx, [rsp + 0x20]
test rdx, rdx
je 0x18007e807
mov dword [rdx], 0xcccc
add rdx, 0x10
jmp 0x18007e807
mov rcx, rdx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, rax
test rax, rax
je 0x18007e807
mov dword [rax], 0xdddd
add rdx, 0x10
jmp 0x18007e807
mov rdx, r14
test rdi, rdi
je 0x18007e83a
lea r8, str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
movzx eax, byte [rsi + r14]
inc r14
lea rcx, [r8 + rax*2]
movzx eax, byte [r8 + rax*2]
mov byte [rdx], al
movzx eax, byte [rcx + 1]
mov byte [rdx + 1], al
mov byte [rdx + 2], 0x20
add rdx, 3
cmp r14, rdi
jb 0x18007e813
mov byte [rdx - 1], 0
movabs rcx, 0x6c283c27f776c3f6
movabs rdx, 0x83a3939509c7d4c4
movabs rax, 0x71f2f63181bc403b
mov qword [rbp], rax
movabs r8, 0x519c8454f5c8214b
mov rax, qword [rbp]
movabs rax, 0xedd6fcf329b3bbaa
mov qword [rbp], rax
mov rax, qword [rbp]
movabs rax, 0x69bfeb56b56786a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp], rdx
mov rax, qword [rbp]
movabs rax, 0x69bfeb569747bcc5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rcx
mov rax, qword [rbp]
movabs rax, 0x519c8454f5c82169
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rdx
mov rcx, qword [rbp]
mov qword [rbp], r8
mov rcx, qword [rbp]
mov qword [rbp], rdx
mov rcx, qword [rbp]
mov rax, rbx
mov rcx, qword [rbp + 8]
xor rcx, rbp
call fcn.1800e1360
mov rbx, qword [rbp + 0x40]
mov rsi, qword [rbp + 0x48]
lea rsp, [rbp + 0x10]
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret