Function at 0x180017820
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x478
mov rax, qword [0x1800393f8]
xor rax, rsp
mov qword [rsp + 0x460], rax
mov rbx, rcx
test r8, r8
mov rsi, rcx
lea r12, str.SCCallIt
lea rdi, str.mdll
mov ecx, 5
cmovne r12, r8
repe cmpsb byte [rsi], byte [rdi]
mov r13, r9
mov rbp, rdx
jne 0x18001798d
xor edi, edi
mov rcx, rdx
mov rbx, rdi
call fcn.180006550
mov rsi, rax
test rax, rax
je 0x180017889
mov rbx, qword [rax + 0x10]
mov edx, dword [rax + 0x18]
test rbx, rbx
je 0x180017967
cmp edx, 0x40
jb 0x180017967
mov eax, 0x5a4d
mov qword [rsp + 0x48], rbx
cmp word [rbx], ax
jne 0x180017967
movsxd r8, dword [rbx + 0x3c]
lea rcx, [r8 + 0x108]
cmp rdx, rcx
jb 0x180017967
cmp dword [r8 + rbx], 0x4550
lea rax, [r8 + rbx]
mov qword [rsp + 0x50], rax
jne 0x180017967
movzx ecx, word [rax + 0x16]
mov r8d, 0x2000
test r8w, cx
je 0x180017967
test cl, 2
je 0x180017967
mov ecx, 0xf0
cmp word [rax + 0x14], cx
jne 0x180017967
movzx r8d, word [rax + 6]
lea rcx, [rax + 0x108]
mov qword [rsp + 0x58], rcx
test r8d, r8d
jle 0x18001792a
add rcx, 0x10
mov eax, dword [rcx + 4]
add eax, dword [rcx]
cmp eax, edx
ja 0x180017967
inc edi
add rcx, 0x28
cmp edi, r8d
jl 0x180017916
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.1800034b0
test eax, eax
je 0x180017967
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x88], 0
je 0x180017967
lea rcx, [rsp + 0x30]
mov rdx, r12
call fcn.1800035e0
test rax, rax
je 0x180017967
mov rcx, r13
call rax
xor eax, eax
jmp 0x180017b2f
cmp dword [rsi], 0
jne 0x180017976
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call fcn.1800183ec
jmp 0x180017b2c
lea rdi, [0x18003322c]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180017a2b
mov qword [rsp + 0x20], r9
mov r8, rdx
lea rcx, [0x180033de0]
mov r9, r12
mov rdx, rbx
call fcn.180003eb0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x180017b2c
lea rcx, [0x180033df8]
mov r9, r12
mov r8, rbp
mov rdx, rbx
mov qword [rsp + 0x20], r13
call fcn.180003eb0
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180017b2c
lea rcx, [0x180033e18]
mov r9, r12
mov r8, rbp
mov rdx, rbx
mov qword [rsp + 0x20], r13
call fcn.180003eb0
mov rcx, r13
call rdi
xor eax, eax
jmp 0x180017b2f
lea rdi, [0x180033230]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180017a72
mov r9, rdx
mov r8, rdx
lea rcx, [rsp + 0x60]
lea rdx, str._s__s
call fcn.180018350
lea rcx, [rsp + 0x60]
call fcn.180005ff0
xor edi, edi
mov ecx, 0xfffffffe
test eax, eax
cmovne ecx, edi
mov eax, ecx
jmp 0x180017b2f
lea rdi, [0x180033934]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180017b2c
lea rdi, [0x180033938]
mov rsi, r12
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180017ad3
lea rcx, str.LogIt_RunIt..._...__s
mov rdx, r9
call fcn.180003eb0
mov rcx, r13
call fcn.1800018c0
mov rcx, rax
mov rdi, rax
call fcn.180001d20
mov r8, qword [rdi + 8]
mov r9d, 5
xor edx, edx
xor ecx, ecx
call fcn.180017c20
jmp 0x180017b24
lea rdi, [0x18003393c]
mov rsi, r12
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180017b2c
mov rcx, r9
call fcn.1800018c0
mov rcx, rax
mov rdi, rax
call fcn.180001d20
xor ecx, ecx
call fcn.180007300
lea rcx, str.GuardIt_nowing..._...___d___s
mov r8, r13
mov edx, eax
call fcn.180003eb0
mov r8, qword [rdi + 8]
mov r9d, 5
xor edx, edx
xor ecx, ecx
call fcn.180017de0
mov rcx, rdi
call fcn.1800012d0
or eax, 0xffffffff
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.180018330
add rsp, 0x478
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret