Function at 0x180074aa0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x100
mov rax, qword [0x180090f80]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r15, qword [rbp + 0x7f]
mov r14d, edx
mov esi, 0x4d
mov qword [rsp + 0x30], r9
mov r13, r8
mov qword [rsp + 0x38], rcx
mov r10, r9
lea r8, [0x180000000]
lea r12d, [r14 - 0xb]
mov rdx, rcx
lea edi, [rsi - 0x1a]
cmp r14d, r12d
jbe 0x180075370
lea ebx, [r14 - 0x46]
movabs r11, 0x656d6954656761
lea r9d, [rsi + 0x25]
cmp ebx, 0xb
ja case.0x180074b26.1
mov ecx, dword [r8 + rbx*4 + 0x7539c]
add rcx, r8
jmp rcx
mov dword [rbp - 0x59], 0x656550
jmp case.0x180074b26.1
mov eax, 0x6c
mov dword [rbp - 0xb], 0x6c0064
mov word [rbp - 7], ax
jmp case.0x180074b26.1
mov dword [rbp - 0x13], 0x330072
mov dword [rbp - 0xf], 0x2e0032
jmp case.0x180074b26.1
mov dword [rbp - 1], 0x746547
xor eax, eax
mov word [rbp + 2], si
mov dword [rbp + 3], 0x737365
mov qword [rbp + 6], r11
mov word [rbp - 5], ax
jmp case.0x180074b26.1
mov dword [rbp - 0x47], 0x650073
mov word [rbp - 0x43], r9w
jmp case.0x180074b26.1
mov eax, 0x6b
lea rcx, [rbp - 0x59]
mov word [rbp - 0x56], ax
dec rcx
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180074ba0
movzx eax, word [0x18007c784]
mov word [rcx], ax
movzx eax, byte [0x18007c786]
mov byte [rcx + 2], al
jmp case.0x180074b26.1
mov eax, 0x75
mov dword [rbp - 0x17], 0x650073
mov word [rbp - 0x19], ax
jmp case.0x180074b26.1
mov eax, 0x75
mov word [rbp - 0x49], ax
jmp case.0x180074b26.1
mov eax, dword [str.ssageW]
mov dword [rbp - 0x53], eax
movzx eax, word [0x18007c78c]
mov word [rbp - 0x4f], ax
movzx eax, byte [0x18007c78e]
mov byte [rbp - 0x4d], al
jmp case.0x180074b26.1
mov word [rbp - 0x41], di
jmp case.0x180074b26.1
movsxd rax, dword [r15]
cmp eax, 7
ja 0x180075370
mov ecx, dword [r13]
test ecx, ecx
jne 0x180074c28
cmp byte [r10 + 0x39], cl
je 0x180074c28
mov cl, 3
mov byte [rax + r10 + 0x54], cl
mov rax, qword [r10 + 0x218]
test rax, rax
je case.0x180074b26.1
mov r9d, dword [rdx]
mov rcx, r10
mov edx, dword [r15]
mov r8d, dword [r13]
call rax
mov rdx, qword [rsp + 0x38]
lea r8, [0x180000000]
mov r10, qword [rsp + 0x30]
mov r9d, 0x72
movabs r11, 0x656d6954656761
dec ebx
lea eax, [rbx + 0x46]
cmp eax, r12d
ja 0x180074b12
cmp r14d, r12d
jbe 0x180075370
mov r13, qword [rsp + 0x40]
mov edx, 0x64
mov ebx, 0x100
lea r9d, [rdx + 0xf]
lea r11d, [rdx + 1]
nop word [rax + rax]
lea eax, [r14 - 0x47]
cmp eax, 0xa
ja case.default.0x180074cb8
mov ecx, dword [r8 + rax*4 + 0x753cc]
add rcx, r8
jmp rcx
movzx eax, word [0x18007c7a9]
lea rdx, [0x18007c829]
mov word [rbp - 0x60], ax
lea rcx, [rbp - 0x5d]
movzx eax, byte [0x18007c7ab]
mov r8d, 1
mov byte [rbp - 0x5e], al
mov byte [rbp - 0x5d], 0
jmp 0x180074e25
mov dword [rbp - 0x3f], 0x2e0032
mov dword [rbp - 0x3b], 0x6c0064
mov dword [rbp - 0x37], 0x6c
jmp case.default.0x180074cb8
xor eax, eax
lea r8, [rbp - 0x59]
mov edx, 0xb2
mov word [rbp - 0x1d], ax
lea rcx, [rbp - 0x19]
call fcn.18005f890
lea r8, [rbp - 1]
mov edx, 0xb2
lea rcx, [rbp - 0x49]
mov r13, rax
call fcn.18005f890
lea r8, [rbp - 0x69]
mov qword [rsp + 0x40], rax
mov edx, 0xb2
lea rcx, [rbp - 0x31]
call fcn.18005f890
movzx ecx, word [r15 + 2]
mov qword [rsp + 0x38], rax
test bx, cx
jne 0x180074e2b
movzx ecx, cl
mov edx, 1
call rax
add eax, 0xfffffff4
cmp eax, 0x63
ja case.0x180074d85.13
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x75438]
mov ecx, dword [rdx + rax*4 + 0x753f8]
add rcx, rdx
jmp rcx
mov r14d, 0x49
jmp 0x180074e2b
mov r8d, 1
mov byte [rbp - 0x5c], 0
lea rdx, [0x18007c87c]
lea rcx, [rbp - 0x69]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x180074e2b
mov word [rbp - 0x23], dx
mov dword [rbp - 0x21], 0x6c006c
jmp case.default.0x180074cb8
mov dword [rbp - 0x2b], 0x330072
jmp case.default.0x180074cb8
mov dword [rbp - 0x31], 0x730075
mov word [rbp - 0x2d], r11w
jmp case.default.0x180074cb8
mov rax, qword [r10]
add rax, 0xfffffffffffffff8
cmp rax, 0xda
ja case.0x180074df6.122
movzx eax, byte [r8 + rax + 0x75668]
mov ecx, dword [r8 + rax*4 + 0x7549c]
add rcx, r8
jmp rcx
mov r14d, 0x48
jmp case.default.0x180074cb8
mov dword [rbp - 0x27], 0x2e0032
jmp case.default.0x180074cb8
mov dword [rbp - 0x69], 0x5670614d
lea rdx, [0x18007c88c]
mov byte [rbp - 0x65], 0
lea rcx, [rbp - 0x65]
mov r8d, 5
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, 0x64
lea r9d, [rdx + 0xf]
lea r11d, [rdx + 1]
dec r14d
cmp r14d, r12d
jbe 0x180075370
mov r10, qword [rsp + 0x30]
lea r8, [0x180000000]
jmp 0x180074ca0
xor edx, edx
mov ecx, 0xa1
call qword [rsp + 0x38]
mov ecx, dword [r15]
sar rcx, 0x10
and ecx, 0x1ff
cmp ecx, eax
jne 0x180074e7b
mov eax, 0x158
jmp 0x180075374
mov eax, 0x154
jmp 0x180075374
mov eax, dword [rsp + 0x30]
mov ebx, 0x97
mov rsi, qword [rsp + 0x40]
mov ecx, ebx
sub ecx, 0x97
je 0x180074ea8
cmp ecx, 1
je 0x180075374
jmp 0x180074eff
mov eax, dword [r15]
bt rax, 0x18
jb 0x180074f27
call rsi
mov edi, eax
lea rcx, [rsp + 0x48]
xor eax, eax
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], eax
xor edx, edx
call r13
test eax, eax
je 0x180074efa
mov ecx, dword [rsp + 0x50]
add ecx, 0xffffff00
test ecx, 0xfffffffa
jne 0x180074efa
cmp qword [rsp + 0x58], 0x12
jne 0x180074efa
test qword [rsp + 0x60], 0x1000000
je 0x180074efa
cmp dword [rbp - 0x79], edi
je 0x180074f1d
mov eax, 0x155
inc ebx
cmp ebx, 0x99
jb 0x180074e93
mov eax, dword [r15]
bt rax, 0x18
jae 0x180074f31
mov eax, 0x15a
jmp 0x180075374
mov eax, 0xfffffffe
jmp 0x180075374
mov eax, 0x159
jmp 0x180075374
mov eax, 0x156
jmp 0x180075374
mov eax, dword [r15]
bt rax, 0x18
jae 0x180074f4f
mov eax, 0x14f
jmp 0x180075374
mov eax, 0x101
jmp 0x180075374
mov eax, ebx
jmp 0x180075374
mov eax, 0x102
jmp 0x180075374
mov eax, 0x103
jmp 0x180075374
mov eax, 0x10c
jmp 0x180075374
mov eax, 0x10d
jmp 0x180075374
mov eax, 0x10a
jmp 0x180075374
mov eax, 0x10b
jmp 0x180075374
mov eax, 0x104
jmp 0x180075374
mov eax, 0x105
jmp 0x180075374
mov eax, 0x107
jmp 0x180075374
mov eax, 0x109
jmp 0x180075374
mov eax, 0x106
jmp 0x180075374
mov eax, pe_nt_image_headers64
jmp 0x180075374
mov eax, 0x122
jmp 0x180075374
mov eax, 0x123
jmp 0x180075374
mov eax, 0x124
jmp 0x180075374
mov eax, 0x125
jmp 0x180075374
mov eax, 0x126
jmp 0x180075374
mov eax, 0x127
jmp 0x180075374
mov eax, 0x128
jmp 0x180075374
mov eax, 0x129
jmp 0x180075374
mov eax, 0x12a
jmp 0x180075374
mov eax, 0x12b
jmp 0x180075374
mov eax, 0x12c
jmp 0x180075374
mov eax, 0x12d
jmp 0x180075374
mov eax, 0x12e
jmp 0x180075374
mov eax, 0x12f
jmp 0x180075374
mov eax, 0x130
jmp 0x180075374
mov eax, 0x131
jmp 0x180075374
mov eax, 0x132
jmp 0x180075374
mov eax, 0x133
jmp 0x180075374
mov eax, 0x134
jmp 0x180075374
mov eax, 0x135
jmp 0x180075374
mov eax, 0x136
jmp 0x180075374
mov eax, 0x137
jmp 0x180075374
mov eax, 0x138
jmp 0x180075374
mov eax, 0x139
jmp 0x180075374
mov eax, 0x11a
jmp 0x180075374
mov eax, 0x118
jmp 0x180075374
mov eax, 0x11b
jmp 0x180075374
mov eax, 0x119
jmp 0x180075374
mov eax, 0x11c
jmp 0x180075374
mov eax, 0x157
jmp 0x180075374
mov eax, 0x15b
jmp 0x180075374
mov eax, 0x15c
jmp 0x180075374
mov eax, 0x140
jmp 0x180075374
mov eax, 0x141
jmp 0x180075374
mov eax, 0x142
jmp 0x180075374
mov eax, 0x143
jmp 0x180075374
mov eax, 0x144
jmp 0x180075374
mov eax, 0x145
jmp 0x180075374
mov eax, 0x146
jmp 0x180075374
mov eax, 0x147
jmp 0x180075374
mov eax, 0x148
jmp 0x180075374
mov eax, 0x149
jmp 0x180075374
mov eax, 0x14b
jmp 0x180075374
mov eax, 0x14c
jmp 0x180075374
mov eax, 0x14d
jmp 0x180075374
mov eax, 0x14e
jmp 0x180075374
mov eax, 0x14a
jmp 0x180075374
mov eax, 0x20
jmp 0x180075374
mov eax, 0x30
jmp 0x180075374
mov eax, 0x31
jmp 0x180075374
mov eax, 0x32
jmp 0x180075374
mov eax, edi
jmp 0x180075374
mov eax, 0x34
jmp 0x180075374
mov eax, 0x35
jmp 0x180075374
mov eax, 0x36
jmp 0x180075374
mov eax, 0x37
jmp 0x180075374
mov eax, 0x38
jmp 0x180075374
mov eax, 0x39
jmp 0x180075374
mov eax, 0x41
jmp 0x180075374
mov eax, 0x42
jmp 0x180075374
mov eax, 0x43
jmp 0x180075374
mov eax, 0x44
jmp 0x180075374
mov eax, 0x45
jmp 0x180075374
mov eax, 0x46
jmp 0x180075374
mov eax, 0x47
jmp 0x180075374
mov eax, 0x48
jmp 0x180075374
mov eax, 0x49
jmp 0x180075374
mov eax, 0x4a
jmp 0x180075374
mov eax, 0x4b
jmp 0x180075374
mov eax, 0x4c
jmp 0x180075374
mov eax, esi
jmp 0x180075374
mov eax, 0x4e
jmp 0x180075374
mov eax, 0x4f
jmp 0x180075374
mov eax, 0x50
jmp 0x180075374
mov eax, 0x51
jmp 0x180075374
mov eax, 0x52
jmp 0x180075374
mov eax, 0x53
jmp 0x180075374
mov eax, 0x54
jmp 0x180075374
mov eax, 0x55
jmp 0x180075374
mov eax, 0x56
jmp 0x180075374
mov eax, 0x57
jmp 0x180075374
mov eax, 0x58
jmp 0x180075374
mov eax, 0x59
jmp 0x180075374
mov eax, 0x5a
jmp 0x180075374
mov eax, 0x2d
jmp 0x180075374
mov eax, 0x3d
jmp 0x180075374
mov eax, 0x5b
jmp 0x180075374
mov eax, 0x5d
jmp 0x180075374
mov eax, 0x5c
jmp 0x180075374
mov eax, 0x3b
jmp 0x180075374
mov eax, 0x27
jmp 0x180075374
mov eax, 0x60
jmp 0x180075374
mov eax, 0x2c
jmp 0x180075374
mov eax, 0x2e
jmp 0x180075374
mov eax, 0x2f
jmp 0x180075374
mov eax, 0xa1
jmp 0x180075374
mov eax, 0xa2
jmp 0x180075374
mov eax, 0xffffffff
jmp 0x180075374
mov eax, dword [rsp + 0x30]
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.180076c30
mov rbx, qword [rsp + 0x148]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret