Function at 0x18005ebb0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rbx
push rdi
push r12
lea rbp, [rsp - 0x288]
sub rsp, 0x388
mov rax, qword [0x1800d7110]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov r12, rcx
lea rcx, [0x1800b0254]
mov dword [rsp + 0x5c], r9d
mov dword [rsp + 0x58], r8d
mov qword [rsp + 0x78], rdx
call fcn.18005d630
lea rcx, [0x1800b0250]
mov rdi, rax
mov qword [rbp - 0x80], rax
call fcn.18005d630
lea rcx, [0x1800b0434]
mov rbx, rax
mov qword [rbp - 0x68], rax
call fcn.18005d630
mov qword [rsp + 0x68], rax
test rdi, rdi
je 0x18005f4b5
test rbx, rbx
je 0x18005f4b5
test rax, rax
je 0x18005f4b5
lea rcx, [rbp + 0x110]
xor edx, edx
mov r8d, 0x150
mov qword [rsp + 0x380], r13
xor ebx, ebx
call fcn.180029630
mov rcx, r12
mov dword [rbp + 0x110], 0x150
call fcn.18005dca0
lea r9d, [rbx + 0x40]
lea r8, [rbp - 0x60]
mov r13, rax
xor eax, eax
mov rcx, r12
mov rdx, r13
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x20], rbx
call rdi
test eax, eax
je 0x18005f4a9
movaps xmm0, xmmword [rbp - 0x60]
movaps xmm1, xmmword [rbp - 0x50]
mov eax, 0x5a4d
mov dword [rbp + 0x114], r13d
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm1
movaps xmm0, xmmword [rbp - 0x40]
movaps xmm1, xmmword [rbp - 0x30]
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm1
cmp word [rbp - 0x60], ax
jne 0x18005f4a9
lea rcx, [rbp - 0x20]
xor edx, edx
mov r8d, pe_nt_image_headers64
call fcn.180029630
movsxd rdx, dword [rbp - 0x24]
lea r8, [rbp - 0x20]
add rdx, r13
mov r9d, pe_nt_image_headers64
mov rcx, r12
mov qword [rsp + 0x20], rbx
call rdi
test eax, eax
je 0x18005f4a9
lea rcx, [rbp + 0x164]
lea rdx, [rbp - 0x20]
mov r8d, pe_nt_image_headers64
call fcn.18002a1e0
cmp dword [rbp - 0x20], 0x4550
mov edi, dword [rbp - 0x24]
lea eax, [rdi + r13]
mov dword [rbp + 0x118], eax
jne 0x18005f4a9
mov r8d, dword [rbp + 0x60]
mov ecx, 1
mov eax, ebx
test r8d, r8d
mov r9d, ecx
mov qword [rsp + 0x370], r15
cmove r9d, ebx
cmp edi, 0x40
mov dword [rsp + 0x44], ebx
cmovb eax, ecx
mov r15d, ebx
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x48], r9d
test r9d, r9d
je 0x18005ee05
mov edi, 0x2000
nop word [rax + rax]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], edi
lea r9, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x54]
mov rdx, r13
mov rcx, r12
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call fcn.18005dd60
test eax, eax
jne 0x18005edf2
cmp dword [rsp + 0x40], ebx
je 0x18005f4a1
add edi, 0x8000
cmp edi, 0x1a000
jge 0x18005f4a1
mov r8d, dword [rbp + 0x60]
jmp 0x18005eda0
mov edi, dword [rbp - 0x24]
mov eax, dword [rsp + 0x44]
mov r15d, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x48]
jmp 0x18005ee0a
mov eax, 0x14
mov dword [rsp + 0x50], eax
mov r8d, eax
movabs rax, 0xcccccccccccccccd
mul r8
mov rax, rdx
shr rax, 4
mov qword [rbp - 0x78], rax
test eax, eax
je 0x18005f4a1
mov eax, eax
lea rcx, [rax + rax*4]
shl rcx, 2
cmp rcx, r8
jne 0x18005f4a1
movzx eax, word [rbp - 0xc]
mov qword [rsp + 0x3c8], rsi
mov qword [rsp + 0x378], r14
mov qword [rbp + 0xb0], rbx
mov esi, ebx
mov r8d, ebx
lea ecx, [rax + rdi + 0x18]
mov dword [rsp + 0x44], ebx
mov edx, ebx
mov dword [rsp + 0x40], ebx
mov r14d, ebx
cmp bx, word [rbp - 0x1a]
jae 0x18005ef6e
mov eax, ecx
mov qword [rsp + 0x70], rax
nop word [rax + rax]
xor edx, edx
lea rcx, [rbp + 0xe0]
lea r8d, [rdx + 0x28]
call fcn.180029630
mov rcx, qword [rsp + 0x70]
mov edx, r14d
lea rax, [rdx + rdx*4]
lea r8, [rbp + 0xe0]
mov r9d, 0x28
lea rdx, [rcx + rax*8]
mov rcx, r12
mov qword [rsp + 0x20], rbx
add rdx, r13
call qword [rbp - 0x80]
test eax, eax
je 0x18005f491
mov r9d, dword [rbp + 0xf0]
mov edi, dword [rbp + 0xb8]
mov ecx, dword [rbp + 0xec]
test r9d, r9d
mov edx, r9d
cmove edx, dword [rbp + 0xe8]
test edi, edi
jne 0x18005ef18
mov r8d, dword [rbp + 0x60]
cmp r8d, ecx
jb 0x18005ef18
lea eax, [rcx + rdx]
cmp r8d, eax
jae 0x18005ef18
mov edi, ecx
mov dword [rbp + 0xb8], ecx
mov dword [rbp + 0xbc], edx
mov r8d, dword [rsp + 0x48]
test r8d, r8d
je 0x18005ef40
test edi, edi
jne 0x18005ef40
cmp r15d, ecx
jb 0x18005ef40
lea eax, [rcx + rdx]
cmp r15d, eax
jae 0x18005ef40
mov r8d, ecx
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x40], edx
jmp 0x18005ef49
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
mov ecx, dword [rbp + 0xf4]
movzx eax, word [rbp - 0x1a]
add ecx, r9d
cmp esi, ecx
cmovb esi, ecx
inc r14d
cmp r14d, eax
jb 0x18005ee90
mov r9d, dword [rsp + 0x48]
jmp 0x18005ef74
mov edi, dword [rbp + 0xb8]
test r9d, r9d
je 0x18005ef93
test edi, edi
jne 0x18005ef93
test r8d, r8d
je 0x18005f491
mov dword [rbp + 0xb8], r8d
mov dword [rbp + 0xbc], edx
lea r8, [rbp - 0x20]
mov rdx, r13
mov rcx, r12
call fcn.18005d950
mov ecx, dword [rsp + 0x50]
mov r15d, dword [rbp + 0x64]
mov word [rsp + 0x44], ax
cmp r15d, ecx
cmovb r15d, ecx
mov ecx, dword [rsp + 0x58]
lea eax, [rcx + rcx*4]
mov r14d, ecx
shl eax, 2
shl r14d, 4
mov dword [rsp + 0x50], eax
lea eax, [rax + r15 + 7]
and eax, 0xfffffff8
add r14d, eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x40], r14d
test ecx, ecx
je 0x18005f010
mov rdx, qword [rsp + 0x78]
mov r8d, ecx
nop dword [rax + rax]
mov rdi, qword [rdx]
or rcx, 0xffffffffffffffff
xor eax, eax
repne scasb al, byte [rdi]
add rdx, 8
not rcx
add ecx, 3
and ecx, 0xfffffffc
add r14d, ecx
dec r8
jne 0x18005eff0
mov ecx, r14d
mov edi, r14d
call fcn.180029d7c
mov rsi, rax
test rax, rax
je 0x18005f491
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.180029630
mov ecx, dword [rbp]
mov edx, dword [rbp + 4]
mov eax, dword [rbp + 0xc]
add rdx, rcx
mov ecx, dword [rbp - 4]
add rcx, r13
mov r8d, r14d
add rcx, rdx
mov rdx, r13
add rax, rcx
mov rcx, r12
cmp r13, rax
cmovb rdx, rax
call fcn.18005da10
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x18005f489
mov eax, dword [rsp + 0x48]
mov ecx, ebx
mov dword [rsp + 0x4c], ebx
mov dword [rbp + 0x120], ebx
test eax, eax
je 0x18005f0b5
mov edx, dword [rbp + 0x60]
lea rax, [rsp + 0x4c]
mov r8d, r15d
mov r9d, 0x40
mov rcx, r12
add rdx, r13
mov qword [rsp + 0x20], rax
call qword [rsp + 0x68]
test eax, eax
je 0x18005f489
mov ecx, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x48]
mov r10d, dword [rsp + 0x5c]
mov edx, edi
mov dword [rbp + 0x120], ecx
sub edx, r13d
mov r8, rsi
mov dword [rsp + 0x48], edx
test r10d, r10d
jne 0x18005f0d9
mov r8d, dword [rsp + 0x50]
add r8, rsi
test eax, eax
je 0x18005f102
mov edx, dword [rbp + 0x60]
mov r9d, r15d
mov rcx, r12
add rdx, r13
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x80]
test eax, eax
je 0x18005f489
mov edx, dword [rsp + 0x48]
mov r10d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x58]
movsxd rcx, dword [rsp + 0x54]
mov r9, qword [rbp - 0x78]
mov r8d, dword [rsp + 0x40]
mov dword [rsp + 0x50], ebx
mov r15, rbx
mov rax, rcx
test edi, edi
je 0x18005f207
lea rdi, [rax + rsi + 4]
add ecx, edx
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x54], ecx
nop word [rax + rax]
mov rax, qword [rsp + 0x78]
mov ecx, r8d
mov edx, r14d
sub edx, r8d
mov r8, qword [rax + r15*8]
add rcx, rsi
call fcn.18005eb30
test eax, eax
js 0x18005f489
mov edx, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
mov r9, qword [rbp - 0x78]
mov r10d, dword [rsp + 0x5c]
movsxd rax, r9d
lea rax, [r15 + rax - 1]
test r10d, r10d
cmove rax, r15
inc r15
lea rcx, [rax + rax*4]
lea eax, [rdx + 8]
mov dword [rsi + rcx*4], edx
mov dword [rdi - 4], 0x80000001
mov dword [rdi], ebx
mov dword [rsi + rcx*4 + 0x10], eax
mov eax, dword [rsp + 0x48]
mov dword [rdi + 4], 0x80000001
mov dword [rdi + 8], ebx
mov rdi, qword [rsp + 0x78]
add eax, r8d
mov dword [rsi + rcx*4 + 0xc], eax
mov qword [rsi + rcx*4 + 4], rbx
mov rdi, qword [rdi + r15*8 - 8]
or rcx, 0xffffffffffffffff
xor eax, eax
add edx, 0x10
repne scasb al, byte [rdi]
mov eax, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x70]
not rcx
inc eax
add rdi, 0x10
add ecx, 3
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], edx
and ecx, 0xfffffffc
mov qword [rsp + 0x70], rdi
add r8d, ecx
mov dword [rsp + 0x40], r8d
cmp eax, dword [rsp + 0x58]
jb 0x18005f140
mov edi, dword [rsp + 0x58]
test r10d, r10d
je 0x18005f224
xor ecx, ecx
lea eax, [rdi + r9 - 1]
lea rax, [rax + rax*4]
mov qword [rsi + rax*4], rcx
mov qword [rsi + rax*4 + 8], rcx
mov dword [rsi + rax*4 + 0x10], ecx
add rdi, r9
mov edx, ebx
je 0x18005f246
mov rcx, rsi
nop
cmp dword [rcx], ebx
jne 0x18005f239
cmp dword [rcx + 0x10], ebx
je 0x18005f246
inc edx
add rcx, 0x14
mov eax, edx
cmp rax, rdi
jb 0x18005f230
mov rdx, qword [rbp - 0x70]
mov r15, qword [rbp - 0x68]
mov r9d, r8d
mov r8, rsi
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x18005f489
mov eax, dword [rsp + 0x48]
mov dword [rbp + 0x64], r14d
mov dword [rbp + 0x60], eax
mov eax, dword [rbp + 0xc8]
test eax, eax
je 0x18005f347
cmp dword [rbp + 0xcc], ebx
je 0x18005f347
lea rdi, [r13 + rax]
lea r8, [rbp + 0xe0]
mov r9d, 0x14
mov rcx, r12
mov rdx, rdi
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x80]
test eax, eax
je 0x18005f489
mov r14, qword [rsp + 0x68]
lea eax, [rdi + 0x10]
mov r9d, 4
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0xf0]
lea r8d, [r9 + 0x10]
mov dword [rbp + 0x25c], eax
and eax, 0xfffffffe
mov rdx, rdi
mov dword [rbp + 0xf0], eax
lea rax, [rsp + 0x4c]
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x18005f489
lea r8, [rbp + 0xe0]
mov r9d, 0x14
mov rdx, rdi
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x18005f489
mov r9d, dword [rsp + 0x4c]
lea rax, [rsp + 0x4c]
mov r8d, 0x14
mov rdx, rdi
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x18005f489
jmp 0x18005f34c
mov r14, qword [rsp + 0x68]
mov r8d, dword [rbp + 0x34]
lea rax, [rsp + 0x4c]
mov r9d, 0x40
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x18005f489
mov edi, dword [rsp + 0x60]
test edi, edi
jne 0x18005f37d
mov word [rbp - 0x44], bx
lea r8, [rbp - 0x60]
mov r9d, 0x40
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x18005f489
movsxd rdx, dword [rbp - 0x24]
lea r8, [rbp - 0x20]
mov r9d, pe_nt_image_headers64
mov rcx, r12
add rdx, r13
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x18005f489
test edi, edi
jne 0x18005f3f6
lea r8, [rbp - 0x20]
mov rdx, r13
mov rcx, r12
call fcn.18005d950
movzx edi, word [rsp + 0x44]
movzx edx, di
movzx ecx, ax
call fcn.18005d7e0
movzx ecx, word [rbp - 0x44]
movzx edx, ax
call fcn.18005d7e0
mov word [rbp - 0x44], ax
jmp 0x18005f3fb
movzx edi, word [rsp + 0x44]
lea r8, [rbp - 0x60]
mov r9d, 0x40
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x18005f489
mov r8d, dword [rbp + 0x34]
mov r9d, dword [rsp + 0x4c]
lea rax, [rsp + 0x4c]
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x18005f489
cmp dword [rsp + 0x60], ebx
jne 0x18005f451
lea r8, [rbp - 0x20]
mov rdx, r13
mov rcx, r12
call fcn.18005d950
cmp di, ax
jne 0x18005f489
mov eax, dword [rsp + 0x58]
lea r8, [rbp + 0x110]
lea rdx, [0x1800b04d0]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x78]
mov r9d, 0x150
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.18005e050
test eax, eax
mov eax, 1
cmovne ebx, eax
mov rcx, rsi
call fcn.180029a70
mov r14, qword [rsp + 0x378]
mov rsi, qword [rsp + 0x3c8]
mov r15, qword [rsp + 0x370]
mov r13, qword [rsp + 0x380]
mov eax, ebx
jmp 0x18005f4b7
xor eax, eax
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.180029600
add rsp, 0x388
pop r12
pop rdi
pop rbx
pop rbp
ret