Function at 0x7ff75f8b0400
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x280
mov rax, qword [0x7ff75f965010]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rbp, rcx
mov byte [rsp + 0x40], dl
xor ecx, ecx
call qword [0x7ff75f9112f8]
mov r15, rax
test rax, rax
je 0x7ff75f8b0663
mov r13d, 0x5a4d
cmp word [rax], r13w
jne 0x7ff75f8b0663
movsxd rdi, dword [rax + 0x3c]
add rdi, rax
cmp dword [rdi], 0x4550
jne 0x7ff75f8b0663
movzx ebx, word [rdi + 0x14]
add rbx, 0x18
mov dword [rsp + 0x50], 0x104
add rbx, rdi
call qword [case.0x7ff75f8a6b09.2]
lea r9, [rsp + 0x50]
xor edx, edx
mov rcx, rax
lea r8, [rsp + 0x60]
call qword [0x7ff75f9113b0]
xor esi, esi
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [rsi + 1]
call qword [0x7ff75f9112c8]
mov r14, rax
mov qword [rsp + 0x48], rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x7ff75f8b0663
mov qword [rsp + 0x28], rsi
lea r8d, [rsi + 2]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor edx, edx
mov rcx, rax
call qword [0x7ff75f9113a0]
test rax, rax
je 0x7ff75f8b065a
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
lea edx, [rsi + 4]
mov rcx, rax
call qword [0x7ff75f911410]
mov r12, rax
test rax, rax
je 0x7ff75f8b0663
cmp word [rax], r13w
jne 0x7ff75f8b0651
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x7ff75f8b0651
movzx edx, word [rcx + 6]
cmp dx, word [rdi + 6]
jne 0x7ff75f8b0651
movzx r14d, word [rcx + 0x14]
xor r13b, r13b
add r14, 0x18
mov r9d, esi
add r14, rcx
mov r10d, edx
test edx, edx
je 0x7ff75f8b0637
mov r8, rbp
mov rax, rbx
sub r8, rbx
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x7ff75f8b0593
inc rax
test ecx, ecx
jne 0x7ff75f8b0580
test edx, edx
jne 0x7ff75f8b05a0
test dword [rbx + 0x24], 0x20000000
jne 0x7ff75f8b05b5
inc r9d
add rbx, 0x28
add r14, 0x28
cmp r9d, r10d
jl 0x7ff75f8b0570
jmp 0x7ff75f8b0637
mov edx, dword [rbx + 0x10]
test edx, edx
je 0x7ff75f8b0637
nop dword [rax]
mov eax, dword [r14 + 0x14]
mov ecx, dword [rbx + 0xc]
mov edi, esi
add rax, rdi
add rcx, rdi
add rcx, r15
movzx ebp, byte [rax + r12]
mov eax, edx
cmp byte [rcx], bpl
je 0x7ff75f8b062f
cmp byte [rsp + 0x40], 0
je 0x7ff75f8b062c
mov edx, 1
mov dword [rsp + 0x50], 0x40
lea r9, [rsp + 0x54]
lea r8d, [rdx + 0x3f]
call qword [0x7ff75f911378]
mov eax, dword [rbx + 0xc]
lea r9, [rsp + 0x50]
add rax, rdi
mov edx, 1
mov byte [rax + r15], bpl
mov ecx, dword [rbx + 0xc]
mov r8d, dword [rsp + 0x54]
add rcx, rdi
add rcx, r15
call qword [0x7ff75f911378]
mov eax, dword [rbx + 0x10]
mov r13b, 1
inc esi
mov edx, eax
cmp esi, eax
jb 0x7ff75f8b05c0
mov rcx, r12
call qword [0x7ff75f911248]
mov rcx, qword [rsp + 0x48]
call qword [0x7ff75f911390]
movzx eax, r13b
jmp 0x7ff75f8b0665
mov rcx, r12
call qword [0x7ff75f911248]
mov rcx, r14
call qword [0x7ff75f911390]
mov al, 1
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.7ff75f8a6770
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret