Function at 0x18007f860
Capabilities:
Parse pe header

Disassembly:
push rbp
push rbx
push rdi
push r12
lea rbp, [rsp - 0x288]
sub rsp, 0x388
mov rax, qword [0x1801003f0]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov r12, rcx
lea rcx, [0x1800d44b4]
mov dword [rsp + 0x5c], r9d
mov dword [rsp + 0x58], r8d
mov qword [rsp + 0x78], rdx
call fcn.18007e320
lea rcx, [0x1800d44b0]
mov rdi, rax
mov qword [rbp - 0x80], rax
call fcn.18007e320
lea rcx, [0x1800d467c]
mov rbx, rax
mov qword [rbp - 0x68], rax
call fcn.18007e320
mov qword [rsp + 0x68], rax
test rdi, rdi
je 0x180080165
test rbx, rbx
je 0x180080165
test rax, rax
je 0x180080165
lea rcx, [rbp + 0x110]
xor edx, edx
mov r8d, 0x150
mov qword [rsp + 0x380], r13
xor ebx, ebx
call fcn.1800369b0
mov rcx, r12
mov dword [rbp + 0x110], 0x150
call fcn.18007e990
lea r9d, [rbx + 0x40]
lea r8, [rbp - 0x60]
mov r13, rax
xor eax, eax
mov rcx, r12
mov rdx, r13
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x20], rbx
call rdi
test eax, eax
je 0x180080159
movaps xmm0, xmmword [rbp - 0x60]
movaps xmm1, xmmword [rbp - 0x50]
mov eax, 0x5a4d
mov dword [rbp + 0x114], r13d
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm1
movaps xmm0, xmmword [rbp - 0x40]
movaps xmm1, xmmword [rbp - 0x30]
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm1
cmp word [rbp - 0x60], ax
jne 0x180080159
lea rcx, [rbp - 0x20]
xor edx, edx
mov r8d, pe_nt_image_headers64
call fcn.1800369b0
movsxd rdx, dword [rbp - 0x24]
lea r8, [rbp - 0x20]
add rdx, r13
mov r9d, pe_nt_image_headers64
mov rcx, r12
mov qword [rsp + 0x20], rbx
call rdi
test eax, eax
je 0x180080159
lea rcx, [rbp + 0x164]
lea rdx, [rbp - 0x20]
mov r8d, pe_nt_image_headers64
call fcn.1800378f0
cmp dword [rbp - 0x20], 0x4550
mov edi, dword [rbp - 0x24]
lea eax, [rdi + r13]
mov dword [rbp + 0x118], eax
jne 0x180080159
mov r8d, dword [rbp + 0x60]
mov ecx, 1
mov eax, ebx
test r8d, r8d
mov r9d, ecx
mov qword [rsp + 0x370], r15
cmove r9d, ebx
cmp edi, 0x40
mov dword [rsp + 0x44], ebx
cmovb eax, ecx
mov r15d, ebx
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x48], r9d
test r9d, r9d
je 0x18007fab5
mov edi, 0x2000
nop word [rax + rax]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], edi
lea r9, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x54]
mov rdx, r13
mov rcx, r12
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x20], rax
call fcn.18007ea50
test eax, eax
jne 0x18007faa2
cmp dword [rsp + 0x40], ebx
je 0x180080151
add edi, 0x8000
cmp edi, 0x1a000
jge 0x180080151
mov r8d, dword [rbp + 0x60]
jmp 0x18007fa50
mov edi, dword [rbp - 0x24]
mov eax, dword [rsp + 0x44]
mov r15d, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x48]
jmp 0x18007faba
mov eax, 0x14
mov dword [rsp + 0x50], eax
mov r8d, eax
movabs rax, 0xcccccccccccccccd
mul r8
mov rax, rdx
shr rax, 4
mov qword [rbp - 0x78], rax
test eax, eax
je 0x180080151
mov eax, eax
lea rcx, [rax + rax*4]
shl rcx, 2
cmp rcx, r8
jne 0x180080151
movzx eax, word [rbp - 0xc]
mov qword [rsp + 0x3c8], rsi
mov qword [rsp + 0x378], r14
mov qword [rbp + 0xb0], rbx
mov esi, ebx
mov r8d, ebx
lea ecx, [rax + rdi + 0x18]
mov dword [rsp + 0x44], ebx
mov edx, ebx
mov dword [rsp + 0x40], ebx
mov r14d, ebx
cmp bx, word [rbp - 0x1a]
jae 0x18007fc1e
mov eax, ecx
mov qword [rsp + 0x70], rax
nop word [rax + rax]
xor edx, edx
lea rcx, [rbp + 0xe0]
lea r8d, [rdx + 0x28]
call fcn.1800369b0
mov rcx, qword [rsp + 0x70]
mov edx, r14d
lea rax, [rdx + rdx*4]
lea r8, [rbp + 0xe0]
mov r9d, 0x28
lea rdx, [rcx + rax*8]
mov rcx, r12
mov qword [rsp + 0x20], rbx
add rdx, r13
call qword [rbp - 0x80]
test eax, eax
je 0x180080141
mov r9d, dword [rbp + 0xf0]
mov edi, dword [rbp + 0xb8]
mov ecx, dword [rbp + 0xec]
test r9d, r9d
mov edx, r9d
cmove edx, dword [rbp + 0xe8]
test edi, edi
jne 0x18007fbc8
mov r8d, dword [rbp + 0x60]
cmp r8d, ecx
jb 0x18007fbc8
lea eax, [rcx + rdx]
cmp r8d, eax
jae 0x18007fbc8
mov edi, ecx
mov dword [rbp + 0xb8], ecx
mov dword [rbp + 0xbc], edx
mov r8d, dword [rsp + 0x48]
test r8d, r8d
je 0x18007fbf0
test edi, edi
jne 0x18007fbf0
cmp r15d, ecx
jb 0x18007fbf0
lea eax, [rcx + rdx]
cmp r15d, eax
jae 0x18007fbf0
mov r8d, ecx
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x40], edx
jmp 0x18007fbf9
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
mov ecx, dword [rbp + 0xf4]
movzx eax, word [rbp - 0x1a]
add ecx, r9d
cmp esi, ecx
cmovb esi, ecx
inc r14d
cmp r14d, eax
jb 0x18007fb40
mov r9d, dword [rsp + 0x48]
jmp 0x18007fc24
mov edi, dword [rbp + 0xb8]
test r9d, r9d
je 0x18007fc43
test edi, edi
jne 0x18007fc43
test r8d, r8d
je 0x180080141
mov dword [rbp + 0xb8], r8d
mov dword [rbp + 0xbc], edx
lea r8, [rbp - 0x20]
mov rdx, r13
mov rcx, r12
call fcn.18007e640
mov ecx, dword [rsp + 0x50]
mov r15d, dword [rbp + 0x64]
mov word [rsp + 0x44], ax
cmp r15d, ecx
cmovb r15d, ecx
mov ecx, dword [rsp + 0x58]
lea eax, [rcx + rcx*4]
mov r14d, ecx
shl eax, 2
shl r14d, 4
mov dword [rsp + 0x50], eax
lea eax, [rax + r15 + 7]
and eax, 0xfffffff8
add r14d, eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x40], r14d
test ecx, ecx
je 0x18007fcc0
mov rdx, qword [rsp + 0x78]
mov r8d, ecx
nop dword [rax + rax]
mov rdi, qword [rdx]
or rcx, 0xffffffffffffffff
xor eax, eax
repne scasb al, byte [rdi]
add rdx, 8
not rcx
add ecx, 3
and ecx, 0xfffffffc
add r14d, ecx
dec r8
jne 0x18007fca0
mov ecx, r14d
mov edi, r14d
call fcn.18003783c
mov rsi, rax
test rax, rax
je 0x180080141
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.1800369b0
mov ecx, dword [rbp]
mov edx, dword [rbp + 4]
mov eax, dword [rbp + 0xc]
add rdx, rcx
mov ecx, dword [rbp - 4]
add rcx, r13
mov r8d, r14d
add rcx, rdx
mov rdx, r13
add rax, rcx
mov rcx, r12
cmp r13, rax
cmovb rdx, rax
call fcn.18007e700
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x180080139
mov eax, dword [rsp + 0x48]
mov ecx, ebx
mov dword [rsp + 0x4c], ebx
mov dword [rbp + 0x120], ebx
test eax, eax
je 0x18007fd65
mov edx, dword [rbp + 0x60]
lea rax, [rsp + 0x4c]
mov r8d, r15d
mov r9d, 0x40
mov rcx, r12
add rdx, r13
mov qword [rsp + 0x20], rax
call qword [rsp + 0x68]
test eax, eax
je 0x180080139
mov ecx, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x48]
mov r10d, dword [rsp + 0x5c]
mov edx, edi
mov dword [rbp + 0x120], ecx
sub edx, r13d
mov r8, rsi
mov dword [rsp + 0x48], edx
test r10d, r10d
jne 0x18007fd89
mov r8d, dword [rsp + 0x50]
add r8, rsi
test eax, eax
je 0x18007fdb2
mov edx, dword [rbp + 0x60]
mov r9d, r15d
mov rcx, r12
add rdx, r13
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x80]
test eax, eax
je 0x180080139
mov edx, dword [rsp + 0x48]
mov r10d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x58]
movsxd rcx, dword [rsp + 0x54]
mov r9, qword [rbp - 0x78]
mov r8d, dword [rsp + 0x40]
mov dword [rsp + 0x50], ebx
mov r15, rbx
mov rax, rcx
test edi, edi
je 0x18007feb7
lea rdi, [rax + rsi + 4]
add ecx, edx
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x54], ecx
nop word [rax + rax]
mov rax, qword [rsp + 0x78]
mov ecx, r8d
mov edx, r14d
sub edx, r8d
mov r8, qword [rax + r15*8]
add rcx, rsi
call fcn.18007f7e0
test eax, eax
js 0x180080139
mov edx, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
mov r9, qword [rbp - 0x78]
mov r10d, dword [rsp + 0x5c]
movsxd rax, r9d
lea rax, [r15 + rax - 1]
test r10d, r10d
cmove rax, r15
inc r15
lea rcx, [rax + rax*4]
lea eax, [rdx + 8]
mov dword [rsi + rcx*4], edx
mov dword [rdi - 4], 0x80000001
mov dword [rdi], ebx
mov dword [rsi + rcx*4 + 0x10], eax
mov eax, dword [rsp + 0x48]
mov dword [rdi + 4], 0x80000001
mov dword [rdi + 8], ebx
mov rdi, qword [rsp + 0x78]
add eax, r8d
mov dword [rsi + rcx*4 + 0xc], eax
mov qword [rsi + rcx*4 + 4], rbx
mov rdi, qword [rdi + r15*8 - 8]
or rcx, 0xffffffffffffffff
xor eax, eax
add edx, 0x10
repne scasb al, byte [rdi]
mov eax, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x70]
not rcx
inc eax
add rdi, 0x10
add ecx, 3
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], edx
and ecx, 0xfffffffc
mov qword [rsp + 0x70], rdi
add r8d, ecx
mov dword [rsp + 0x40], r8d
cmp eax, dword [rsp + 0x58]
jb 0x18007fdf0
mov edi, dword [rsp + 0x58]
test r10d, r10d
je 0x18007fed4
xor ecx, ecx
lea eax, [rdi + r9 - 1]
lea rax, [rax + rax*4]
mov qword [rsi + rax*4], rcx
mov qword [rsi + rax*4 + 8], rcx
mov dword [rsi + rax*4 + 0x10], ecx
add rdi, r9
mov edx, ebx
je 0x18007fef6
mov rcx, rsi
nop
cmp dword [rcx], ebx
jne 0x18007fee9
cmp dword [rcx + 0x10], ebx
je 0x18007fef6
inc edx
add rcx, 0x14
mov eax, edx
cmp rax, rdi
jb 0x18007fee0
mov rdx, qword [rbp - 0x70]
mov r15, qword [rbp - 0x68]
mov r9d, r8d
mov r8, rsi
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x180080139
mov eax, dword [rsp + 0x48]
mov dword [rbp + 0x64], r14d
mov dword [rbp + 0x60], eax
mov eax, dword [rbp + 0xc8]
test eax, eax
je 0x18007fff7
cmp dword [rbp + 0xcc], ebx
je 0x18007fff7
lea rdi, [r13 + rax]
lea r8, [rbp + 0xe0]
mov r9d, 0x14
mov rcx, r12
mov rdx, rdi
mov qword [rsp + 0x20], rbx
call qword [rbp - 0x80]
test eax, eax
je 0x180080139
mov r14, qword [rsp + 0x68]
lea eax, [rdi + 0x10]
mov r9d, 4
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0xf0]
lea r8d, [r9 + 0x10]
mov dword [rbp + 0x25c], eax
and eax, 0xfffffffe
mov rdx, rdi
mov dword [rbp + 0xf0], eax
lea rax, [rsp + 0x4c]
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x180080139
lea r8, [rbp + 0xe0]
mov r9d, 0x14
mov rdx, rdi
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x180080139
mov r9d, dword [rsp + 0x4c]
lea rax, [rsp + 0x4c]
mov r8d, 0x14
mov rdx, rdi
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x180080139
jmp 0x18007fffc
mov r14, qword [rsp + 0x68]
mov r8d, dword [rbp + 0x34]
lea rax, [rsp + 0x4c]
mov r9d, 0x40
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x180080139
mov edi, dword [rsp + 0x60]
test edi, edi
jne 0x18008002d
mov word [rbp - 0x44], bx
lea r8, [rbp - 0x60]
mov r9d, 0x40
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x180080139
movsxd rdx, dword [rbp - 0x24]
lea r8, [rbp - 0x20]
mov r9d, pe_nt_image_headers64
mov rcx, r12
add rdx, r13
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x180080139
test edi, edi
jne 0x1800800a6
lea r8, [rbp - 0x20]
mov rdx, r13
mov rcx, r12
call fcn.18007e640
movzx edi, word [rsp + 0x44]
movzx edx, di
movzx ecx, ax
call fcn.18007e4d0
movzx ecx, word [rbp - 0x44]
movzx edx, ax
call fcn.18007e4d0
mov word [rbp - 0x44], ax
jmp 0x1800800ab
movzx edi, word [rsp + 0x44]
lea r8, [rbp - 0x60]
mov r9d, 0x40
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rbx
call r15
test eax, eax
je 0x180080139
mov r8d, dword [rbp + 0x34]
mov r9d, dword [rsp + 0x4c]
lea rax, [rsp + 0x4c]
mov rdx, r13
mov rcx, r12
mov qword [rsp + 0x20], rax
call r14
test eax, eax
je 0x180080139
cmp dword [rsp + 0x60], ebx
jne 0x180080101
lea r8, [rbp - 0x20]
mov rdx, r13
mov rcx, r12
call fcn.18007e640
cmp di, ax
jne 0x180080139
mov eax, dword [rsp + 0x58]
lea r8, [rbp + 0x110]
lea rdx, [0x1800d4718]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x78]
mov r9d, 0x150
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.18007ed40
test eax, eax
mov eax, 1
cmovne ebx, eax
mov rcx, rsi
call fcn.180038270
mov r14, qword [rsp + 0x378]
mov rsi, qword [rsp + 0x3c8]
mov r15, qword [rsp + 0x370]
mov r13, qword [rsp + 0x380]
mov eax, ebx
jmp 0x180080167
xor eax, eax
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.180036980
add rsp, 0x388
pop r12
pop rdi
pop rbx
pop rbp
ret