Function at 0x7ff75f7e9d10
Capabilities:
Parse pe header

Disassembly:
push rbp
push rbx
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [0x7ff75f965010]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0xe8]
mov r14, rdx
mov qword [rsp + 0x40], rax
mov r12, rcx
mov eax, 0x5a4d
cmp word [rdx], ax
jne 0x7ff75f7ea284
movsxd rdi, dword [rdx + 0x3c]
add rdi, rdx
cmp dword [rdi], 0x4550
jne 0x7ff75f7ea284
mov eax, 0x20b
cmp word [rdi + 0x18], ax
jne 0x7ff75f7ea284
mov ebx, dword [rdi + 0x50]
movabs rcx, 0xf57f633be1ddbcb5
movabs rdx, 0x5894dfb2498dd26e
movabs rax, 0xb413024e95afd5e3
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x70], rax
movabs rax, 0x5894dfb22ae2be02
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x48], rdx
mov qword [rbp + 0x30], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x38], rax
movabs rax, 0xc74c0f5e8fafd9de
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x80], rax
movabs rax, 0x5894dfb225e1b640
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x48], rcx
lea rcx, [rbp - 0x80]
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x48], rdx
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [0x7ff75f9112d8]
test rax, rax
jne 0x7ff75f7e9e68
xor r8d, r8d
lea rcx, [rbp - 0x80]
xor edx, edx
call qword [0x7ff75f9112e8]
test rax, rax
je 0x7ff75f7ea284
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.7ff75f7e1120
test rax, rax
je 0x7ff75f7ea284
mov r9d, 4
mov r8d, 0x3000
mov edx, ebx
xor ecx, ecx
call rax
mov r15, rax
test rax, rax
je 0x7ff75f7ea284
movzx ecx, word [rdi + 0x14]
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x1b0], rsi
mov eax, dword [rcx + rdi + 0x24]
sub ebx, eax
mov dword [rsp + 0x70], eax
mov rcx, r12
mov eax, ebx
mov r8d, ebx
mov qword [rbp - 0x60], rax
call fcn.7ff75f7e2f10
mov r13, rax
mov rbx, rax
test rax, rax
je 0x7ff75f7ea15e
mov r8d, dword [rdi + 0x54]
mov rdx, r14
mov rcx, r15
call fcn.7ff75f90d17b
movzx ebx, word [rdi + 0x14]
xor eax, eax
add rbx, 0x28
mov esi, eax
cmp ax, word [rdi + 6]
jae 0x7ff75f7e9f2b
add rbx, rdi
nop dword [rax]
test dword [rbx + 0x14], 0x80
ja 0x7ff75f7e9f1d
mov edx, dword [rbx + 4]
mov ecx, dword [rbx - 4]
add rdx, r14
mov r8d, dword [rbx]
add rcx, r15
call fcn.7ff75f90d17b
movzx eax, word [rdi + 6]
inc esi
add rbx, 0x28
cmp esi, eax
jl 0x7ff75f7e9f00
mov r14d, dword [rsp + 0x70]
lea rcx, [rbp - 0x58]
mov rsi, r13
mov rdx, r15
sub r13, r14
mov rbx, r13
sub rbx, qword [rdi + 0x30]
call fcn.7ff75f7eb400
mov rdx, rbx
mov rcx, rax
call fcn.7ff75f7ea290
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.7ff75f7eb550
mov rdx, rax
mov rcx, r12
call fcn.7ff75f7ea390
test al, al
je 0x7ff75f7ea15b
lea rax, [r14 + r15]
test rax, rax
je 0x7ff75f7ea15b
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x7ff75f7ea15b
xor ebx, ebx
mov qword [rbp], rcx
mov qword [rsp + 0x38], rbx
lea rcx, [rbp - 0x24]
mov qword [rsp + 0x30], rcx
lea r8, [rbp - 0x20]
mov qword [rbp - 0x10], rax
mov edx, 0x80862007
mov rax, qword [0x7ff75f967538]
lea r9d, [rbx + 0x28]
mov dword [rsp + 0x28], ebx
mov rcx, r12
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x20], 0x33
mov qword [rbp - 8], rsi
mov dword [rbp - 0x24], ebx
mov qword [rsp + 0x20], rbx
call rax
test eax, eax
je 0x7ff75f7ea15b
mov r8d, dword [rdi + 0x28]
lea rdx, [rbp - 0x28]
add r8, r13
mov dword [rbp - 0x28], ebx
xor r9d, r9d
mov qword [rsp + 0x20], rbx
mov rcx, r12
call fcn.7ff75f7ea690
test al, al
je 0x7ff75f7ea15b
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x7ff75f7ea017
mov eax, dword [rbp - 0x28]
mov dword [rcx], eax
movabs rcx, 0xf57f633be1ddbcb5
movabs rdx, 0x5894dfb2498dd26e
movabs rax, 0xb313024e95afd5e3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x5894dfb249e8b71c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdx
mov qword [rbp + 0x10], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x18], rax
movabs rax, 0xc74c0f5e8fafd9de
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x5894dfb225e1b640
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x40], rdx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp + 0x28], rax
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x50], xmm0
call qword [0x7ff75f9112d8]
test rax, rax
jne 0x7ff75f7ea10c
xor r8d, r8d
lea rcx, [rsp + 0x50]
xor edx, edx
call qword [0x7ff75f9112e8]
test rax, rax
je 0x7ff75f7ea12b
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.7ff75f7e1120
test rax, rax
je 0x7ff75f7ea12b
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call rax
mov rax, rsi
mov rsi, qword [rsp + 0x1b0]
mov r13, qword [rsp + 0x160]
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.7ff75f8a6770
add rsp, 0x168
pop r15
pop r14
pop r12
pop rdi
pop rbx
pop rbp
ret
mov rbx, rsi
movabs rcx, 0xf57f633be1ddbcb5
movabs rdx, 0x5894dfb2498dd26e
movabs rax, 0xb313024e95afd5e3
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
movabs rax, 0x5894dfb249e8b71c
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdx
mov qword [rbp + 0x20], rax
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x28], rax
movabs rax, 0xc74c0f5e8fafd9de
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0x5894dfb225e1b640
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x40], rdx
mov rax, qword [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp + 0x18], rax
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x50], xmm0
call qword [0x7ff75f9112d8]
test rax, rax
jne 0x7ff75f7ea253
xor r8d, r8d
lea rcx, [rsp + 0x50]
xor edx, edx
call qword [0x7ff75f9112e8]
test rax, rax
je 0x7ff75f7ea272
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.7ff75f7e1120
test rax, rax
je 0x7ff75f7ea272
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call rax
mov rdx, rbx
mov rcx, r12
call fcn.7ff75f7e3150
xor eax, eax
jmp 0x7ff75f7ea12e
xor eax, eax
jmp 0x7ff75f7ea13e