Function at 0x7ff7c010ac20
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
lea rcx, [0x7ff7c018d298]
nop dword [rax + rax]
call qword [sym.imp.kernel32.dll_LoadLibraryW]
lea rcx, [0x7ff7c018d2b8]
mov rdi, rax
call qword [sym.imp.kernel32.dll_LoadLibraryW]
xor ebx, ebx
mov ebp, 0x5a4d
mov rsi, rax
test rdi, rdi
je 0x7ff7c010b0e2
movzx ecx, word [rdi]
cmp cx, bp
jne 0x7ff7c010accb
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010accb
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010accb
lea r8, [rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010acc2
cmp dword [r8 + 4], ebx
je 0x7ff7c010acc2
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d2d0]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word ds:[rdi]
jmp 0x7ff7c010acce
mov qword [0x7ff7c01d78a0], rbx
jmp 0x7ff7c010acda
mov rax, rbx
mov qword [0x7ff7c01d78a0], rax
cmp cx, bp
jne 0x7ff7c010ad2c
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010ad2c
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010ad2c
lea r8, ds:[rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010ad2c
cmp dword [r8 + 4], ebx
je 0x7ff7c010ad2c
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d2f8]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010ad2f
mov rax, rbx
mov qword [0x7ff7c01d7848], rax
cmp cx, bp
jne 0x7ff7c010ad95
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010ad95
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010ad95
lea r8, ds:[rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010ad8c
cmp dword [r8 + 4], ebx
je 0x7ff7c010ad8c
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d320]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010ad98
mov qword [0x7ff7c01d7860], rbx
jmp 0x7ff7c010ada5
mov rax, rbx
mov qword [0x7ff7c01d7860], rax
nop
cmp cx, bp
jne 0x7ff7c010adfd
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010adfd
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010adfd
lea r8, [rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010adf4
cmp dword [r8 + 4], ebx
je 0x7ff7c010adf4
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d340]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010ae00
mov qword [0x7ff7c01d7890], rbx
jmp 0x7ff7c010ae0c
mov rax, rbx
mov qword [0x7ff7c01d7890], rax
cmp cx, bp
jne 0x7ff7c010ae64
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010ae64
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010ae64
lea r8, [rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010ae5b
cmp dword [r8 + 4], ebx
je 0x7ff7c010ae5b
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d360]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010ae67
mov qword [0x7ff7c01d7870], rbx
jmp 0x7ff7c010ae73
mov rax, rbx
mov qword [0x7ff7c01d7870], rax
cmp cx, bp
jne 0x7ff7c010aed5
mov edx, dword ds:[rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010aed5
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010aed5
lea r8, ds:[rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010aecc
cmp dword [r8 + 4], ebx
je 0x7ff7c010aecc
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d388]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010aed8
mov qword [0x7ff7c01d7850], rbx
jmp 0x7ff7c010aee5
mov rax, rbx
mov qword [0x7ff7c01d7850], rax
nop
cmp cx, bp
jne 0x7ff7c010af3d
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010af3d
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010af3d
lea r8, [rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010af34
cmp dword [r8 + 4], ebx
je 0x7ff7c010af34
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d3a8]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010af40
mov qword [0x7ff7c01d7838], rbx
jmp 0x7ff7c010af4c
mov rax, rbx
mov qword [0x7ff7c01d7838], rax
cmp cx, bp
jne 0x7ff7c010afa4
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010afa4
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010afa4
lea r8, [rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010af9b
cmp dword [r8 + 4], ebx
je 0x7ff7c010af9b
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d3d0]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010afa7
mov qword [0x7ff7c01d7840], rbx
jmp 0x7ff7c010afb3
mov rax, rbx
mov qword [0x7ff7c01d7840], rax
cmp cx, bp
jne 0x7ff7c010b015
mov edx, dword ds:[rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010b015
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010b015
lea r8, ds:[rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010b00c
cmp dword [r8 + 4], ebx
je 0x7ff7c010b00c
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d3f0]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010b018
mov qword [0x7ff7c01d7898], rbx
jmp 0x7ff7c010b025
mov rax, rbx
mov qword [0x7ff7c01d7898], rax
nop
cmp cx, bp
jne 0x7ff7c010b07d
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010b07d
cmp dword [rdx + rdi], 0x4550
jne 0x7ff7c010b07d
lea r8, [rdi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010b074
cmp dword [r8 + 4], ebx
je 0x7ff7c010b074
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d410]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rdi]
jmp 0x7ff7c010b080
mov qword [0x7ff7c01d7858], rbx
jmp 0x7ff7c010b08c
mov rax, rbx
mov qword [0x7ff7c01d7858], rax
cmp cx, bp
jne 0x7ff7c010b0d8
mov ecx, dword [rdi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010b0d8
cmp dword [rcx + rdi], 0x4550
jne 0x7ff7c010b0d8
lea r8, [rdi + 0x88]
add r8, rcx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010b0d8
cmp dword [r8 + 4], ebx
je 0x7ff7c010b0d8
lea r9, [rdi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d430]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
jmp 0x7ff7c010b0db
mov rax, rbx
mov qword [0x7ff7c01d7888], rax
test rsi, rsi
je 0x7ff7c010b219
movzx ecx, word [rsi]
cmp cx, bp
jne 0x7ff7c010b155
mov edx, dword ds:[rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010b155
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c010b155
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010b14c
cmp dword [r8 + 4], ebx
je 0x7ff7c010b14c
lea r9, [rsi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d440]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c010b158
mov qword [0x7ff7c01d7868], rbx
jmp 0x7ff7c010b165
mov rax, rbx
mov qword [0x7ff7c01d7868], rax
nop
cmp cx, bp
jne 0x7ff7c010b1b4
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010b1b4
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c010b1b4
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010b1b4
cmp dword [r8 + 4], ebx
je 0x7ff7c010b1b4
lea r9, [rsi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d450]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c010b1b7
mov rax, rbx
mov qword [0x7ff7c01d7878], rax
nop
cmp cx, bp
jne 0x7ff7c010b212
mov ecx, dword [rsi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c010b212
cmp dword [rcx + rsi], 0x4550
jne 0x7ff7c010b212
lea r8, [rsi + 0x88]
add r8, rcx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c010b212
cmp dword [r8 + 4], ebx
je 0x7ff7c010b212
lea r9, [rsi + rax]
mov word [rsp + 0x28], bx
lea rax, [0x7ff7c018d470]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
mov rbx, rax
mov qword [0x7ff7c01d7880], rbx
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret