Function at 0x180016b70
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x478
mov rax, qword [0x1800393f8]
xor rax, rsp
mov qword [rsp + 0x460], rax
mov rbx, rcx
test r8, r8
mov rsi, rcx
lea r12, str.SCCallIt
lea rdi, str.mdll
mov ecx, 5
cmovne r12, r8
repe cmpsb byte [rsi], byte [rdi]
mov r13, r9
mov rbp, rdx
jne 0x180016cdd
xor edi, edi
mov rcx, rdx
mov rbx, rdi
call fcn.180006270
mov rsi, rax
test rax, rax
je 0x180016bd9
mov rbx, qword [rax + 0x10]
mov edx, dword [rax + 0x18]
test rbx, rbx
je 0x180016cb7
cmp edx, 0x40
jb 0x180016cb7
mov eax, 0x5a4d
mov qword [rsp + 0x48], rbx
cmp word [rbx], ax
jne 0x180016cb7
movsxd r8, dword [rbx + 0x3c]
lea rcx, [r8 + 0x108]
cmp rdx, rcx
jb 0x180016cb7
cmp dword [r8 + rbx], 0x4550
lea rax, [r8 + rbx]
mov qword [rsp + 0x50], rax
jne 0x180016cb7
movzx ecx, word [rax + 0x16]
mov r8d, 0x2000
test r8w, cx
je 0x180016cb7
test cl, 2
je 0x180016cb7
mov ecx, 0xf0
cmp word [rax + 0x14], cx
jne 0x180016cb7
movzx r8d, word [rax + 6]
lea rcx, [rax + 0x108]
mov qword [rsp + 0x58], rcx
test r8d, r8d
jle 0x180016c7a
add rcx, 0x10
mov eax, dword [rcx + 4]
add eax, dword [rcx]
cmp eax, edx
ja 0x180016cb7
inc edi
add rcx, 0x28
cmp edi, r8d
jl 0x180016c66
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.180003180
test eax, eax
je 0x180016cb7
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x88], 0
je 0x180016cb7
lea rcx, [rsp + 0x30]
mov rdx, r12
call fcn.1800032b0
test rax, rax
je 0x180016cb7
mov rcx, r13
call rax
xor eax, eax
jmp 0x180016e7f
cmp dword [rsi], 0
jne 0x180016cc6
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call fcn.18001795c
jmp 0x180016e7c
lea rdi, [0x1800330ac]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180016d7b
mov qword [rsp + 0x20], r9
mov r8, rdx
lea rcx, [0x180033b10]
mov r9, r12
mov rdx, rbx
call fcn.180003b60
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x180016e7c
lea rcx, [0x180033b28]
mov r9, r12
mov r8, rbp
mov rdx, rbx
mov qword [rsp + 0x20], r13
call fcn.180003b60
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x180016e7c
lea rcx, [0x180033b48]
mov r9, r12
mov r8, rbp
mov rdx, rbx
mov qword [rsp + 0x20], r13
call fcn.180003b60
mov rcx, r13
call rdi
xor eax, eax
jmp 0x180016e7f
lea rdi, [0x1800330b0]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180016dc2
mov r9, rdx
mov r8, rdx
lea rcx, [rsp + 0x60]
lea rdx, str._s__s
call fcn.1800178c0
lea rcx, [rsp + 0x60]
call fcn.180005d10
xor edi, edi
mov ecx, 0xfffffffe
test eax, eax
cmovne ecx, edi
mov eax, ecx
jmp 0x180016e7f
lea rdi, [0x18003375c]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180016e7c
lea rdi, [0x180033760]
mov rsi, r12
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180016e23
lea rcx, str.LogIt_RunIt..._...__s
mov rdx, r9
call fcn.180003b60
mov rcx, r13
call fcn.180001830
mov rcx, rax
mov rdi, rax
call fcn.180001c90
mov r8, qword [rdi + 8]
mov r9d, 5
xor edx, edx
xor ecx, ecx
call fcn.180016f70
jmp 0x180016e74
lea rdi, [0x180033764]
mov rsi, r12
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180016e7c
mov rcx, r9
call fcn.180001830
mov rcx, rax
mov rdi, rax
call fcn.180001c90
xor ecx, ecx
call fcn.180007030
lea rcx, str.GuardIt_nowing..._...___d___s
mov r8, r13
mov edx, eax
call fcn.180003b60
mov r8, qword [rdi + 8]
mov r9d, 5
xor edx, edx
xor ecx, ecx
call fcn.180017130
mov rcx, rdi
call fcn.180001770
or eax, 0xffffffff
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.1800178a0
add rsp, 0x478
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret