Function at 0x180017240
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x478
mov rax, qword [0x1800393f8]
xor rax, rsp
mov qword [rsp + 0x460], rax
mov rbx, rcx
test r8, r8
mov rsi, rcx
lea r12, str.SCCallIt
lea rdi, str.mdll
mov ecx, 5
cmovne r12, r8
repe cmpsb byte [rsi], byte [rdi]
mov r13, r9
mov rbp, rdx
jne 0x1800173ad
xor edi, edi
mov rcx, rdx
mov rbx, rdi
call fcn.180006590
mov rsi, rax
test rax, rax
je 0x1800172a9
mov rbx, qword [rax + 0x10]
mov edx, dword [rax + 0x18]
test rbx, rbx
je 0x180017387
cmp edx, 0x40
jb 0x180017387
mov eax, 0x5a4d
mov qword [rsp + 0x48], rbx
cmp word [rbx], ax
jne 0x180017387
movsxd r8, dword [rbx + 0x3c]
lea rcx, [r8 + 0x108]
cmp rdx, rcx
jb 0x180017387
cmp dword [r8 + rbx], 0x4550
lea rax, [r8 + rbx]
mov qword [rsp + 0x50], rax
jne 0x180017387
movzx ecx, word [rax + 0x16]
mov r8d, 0x2000
test r8w, cx
je 0x180017387
test cl, 2
je 0x180017387
mov ecx, pe_nt_image_headers64
cmp word [rax + 0x14], cx
jne 0x180017387
movzx r8d, word [rax + 6]
lea rcx, [rax + 0x108]
mov qword [rsp + 0x58], rcx
test r8d, r8d
jle 0x18001734a
add rcx, 0x10
mov eax, dword [rcx + 4]
add eax, dword [rcx]
cmp eax, edx
ja 0x180017387
inc edi
add rcx, 0x28
cmp edi, r8d
jl 0x180017336
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.180003460
test eax, eax
je 0x180017387
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x88], 0
je 0x180017387
lea rcx, [rsp + 0x30]
mov rdx, r12
call fcn.180003590
test rax, rax
je 0x180017387
mov rcx, r13
call rax
xor eax, eax
jmp 0x18001754f
cmp dword [rsi], 0
jne 0x180017396
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call fcn.18001802c
jmp 0x18001754c
lea rdi, [0x1800331ec]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x18001744b
mov qword [rsp + 0x20], r9
mov r8, rdx
lea rcx, [0x180033ce0]
mov r9, r12
mov rdx, rbx
call fcn.180003e40
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x18001754c
lea rcx, [0x180033cf8]
mov r9, r12
mov r8, rbp
mov rdx, rbx
mov qword [rsp + 0x20], r13
call fcn.180003e40
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x18001754c
lea rcx, [0x180033d18]
mov r9, r12
mov r8, rbp
mov rdx, rbx
mov qword [rsp + 0x20], r13
call fcn.180003e40
mov rcx, r13
call rdi
xor eax, eax
jmp 0x18001754f
lea rdi, [0x1800331f0]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x180017492
mov r9, rdx
mov r8, rdx
lea rcx, [rsp + 0x60]
lea rdx, str._s__s
call fcn.180017f90
lea rcx, [rsp + 0x60]
call fcn.180006030
xor edi, edi
mov ecx, 0xfffffffe
test eax, eax
cmovne ecx, edi
mov eax, ecx
jmp 0x18001754f
lea rdi, [0x1800338cc]
mov rsi, rbx
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x18001754c
lea rdi, [0x1800338d0]
mov rsi, r12
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x1800174f3
lea rcx, str.LogIt_RunIt..._...__s
mov rdx, r9
call fcn.180003e40
mov rcx, r13
call fcn.1800018c0
mov rcx, rax
mov rdi, rax
call fcn.180001d20
mov r8, qword [rdi + 8]
mov r9d, 5
xor edx, edx
xor ecx, ecx
call fcn.180017640
jmp 0x180017544
lea rdi, [0x1800338d4]
mov rsi, r12
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
jne 0x18001754c
mov rcx, r9
call fcn.1800018c0
mov rcx, rax
mov rdi, rax
call fcn.180001d20
xor ecx, ecx
call fcn.180007340
lea rcx, str.GuardIt_nowing..._...___d___s
mov r8, r13
mov edx, eax
call fcn.180003e40
mov r8, qword [rdi + 8]
mov r9d, 5
xor edx, edx
xor ecx, ecx
call fcn.180017800
mov rcx, rdi
call fcn.180001800
or eax, 0xffffffff
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.180017f70
add rsp, 0x478
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret