Function at 0x18009b340
Capabilities:
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x138
mov rdi, r8
mov rsi, rcx
cmp r8, 2
jae 0x18009b470
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 2
mov qword [rsp + 0xd0], rdi
lea rax, [0x1801206d0]
mov qword [rsp + 0x110], rax
lea rax, [fcn.180100a80]
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x80], 2
mov qword [rsp + 0x90], 2
mov qword [rsp + 0xa0], 0
movabs rax, 0x400000020
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 3
lea rax, str.cannot_parse_DOS_signature__offset
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rax, [rsp + 0x80]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
lea rax, [rsp + 0x110]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0xf8]
lea rdx, [rsp + 0x50]
call fcn.1800f9290
lea rcx, [rsp + 0xc0]
call fcn.180097a90
movzx eax, word [rsp + 0xf8]
mov rcx, qword [rsp + 0x108]
mov qword [rsi + 0x20], rcx
movups xmm0, xmmword [rsp + 0xfa]
movups xmmword [rsi + 0x12], xmm0
mov qword [rsi + 8], 5
mov word [rsi + 0x10], ax
jmp 0x18009b640
mov rbx, rdx
movzx eax, word [rdx]
mov qword [rsp + 0x48], 2
mov word [rsp + 0x46], ax
cmp eax, 0x5a4d
jne 0x18009b573
lea rax, [rdi - 2]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 4]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 6]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 8]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0xa]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0xc]
cmp rax, 2
jb 0x18009b54f
movzx ebp, word [rbx + 2]
movzx r15d, word [rbx + 4]
movzx r12d, word [rbx + 6]
movzx r13d, word [rbx + 8]
movzx r14d, word [rbx + 0xa]
movzx ecx, word [rbx + 0xc]
mov qword [rsp + 0x48], 0xe
lea rax, [rdi - 0xe]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0x10]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0x12]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0x14]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0x16]
cmp rax, 2
jb 0x18009b54f
lea rax, [rdi - 0x18]
cmp rax, 2
jb 0x18009b54f
mov word [rsp + 0x44], cx
lea rax, [rdi - 0x1a]
cmp rax, 2
jae 0x18009b65d
mov word [rsi + 0x16], 0
mov dword [rsi + 0x12], 0
mov qword [rsi + 0x18], rax
mov qword [rsi + 8], 0
mov word [rsi + 0x10], 2
jmp 0x18009b640
lea rax, [rsp + 0x46]
mov qword [rsp + 0xf0], rax
lea rax, [fcn.180100940]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x80], 2
mov qword [rsp + 0x90], 2
mov qword [rsp + 0xa0], 0
movabs rax, 0x400000020
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 3
lea rax, str.DOS_header_is_malformed__signature
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rax, [rsp + 0x80]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x50]
call fcn.1800f9290
mov qword [rsi + 8], 5
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsi + 0x10], xmm0
mov rax, qword [rsp + 0xd0]
mov qword [rsi + 0x20], rax
mov dword [rsi], 1
mov rax, rsi
add rsp, 0x138
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, word [rbx + 0xe]
mov word [rsp + 0x42], ax
movzx eax, word [rbx + 0x10]
mov word [rsp + 0x40], ax
movzx eax, word [rbx + 0x12]
mov word [rsp + 0x3e], ax
movzx eax, word [rbx + 0x14]
mov word [rsp + 0x3c], ax
movzx eax, word [rbx + 0x16]
mov word [rsp + 0x3a], ax
movzx eax, word [rbx + 0x18]
mov word [rsp + 0x38], ax
movzx eax, word [rbx + 0x1a]
mov word [rsp + 0x36], ax
mov qword [rsp + 0x48], 0x1c
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x80]
lea r9, [rsp + 0x48]
mov rdx, rbx
mov r8, rdi
call fcn.1800a13a0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0xe8], rcx
cmp rax, 5
jne 0x18009b6fc
mov rax, qword [rsp + 0x48]
mov rcx, rdi
sub rcx, rax
jae 0x18009b71d
mov rdx, rax
shr rdx, 0x10
mov r8d, 1
jmp 0x18009b72c
movups xmm0, xmmword [rsp + 0x90]
movups xmmword [rsi + 0x18], xmm0
mov qword [rsi + 8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsi + 0x10], rax
jmp 0x18009b640
cmp rcx, 2
jae 0x18009b748
mov ax, 2
xor edx, edx
xor r8d, r8d
mov dword [rsi + 0x12], edx
shr rdx, 0x20
mov word [rsi + 0x16], dx
mov qword [rsi + 0x18], rcx
mov qword [rsi + 8], r8
mov word [rsi + 0x10], ax
jmp 0x18009b640
lea rcx, [rax + 2]
mov rdx, rdi
sub rdx, rcx
jae 0x18009b762
mov r8, rcx
shr r8, 0x10
mov eax, 1
jmp 0x18009b771
cmp rdx, 2
jae 0x18009b78f
mov cx, 2
xor eax, eax
xor r8d, r8d
mov dword [rsi + 0x12], r8d
shr r8, 0x20
mov word [rsi + 0x16], r8w
mov qword [rsi + 0x18], rdx
mov qword [rsi + 8], rax
mov word [rsi + 0x10], cx
jmp 0x18009b640
movzx ecx, word [rbx + rax]
mov word [rsp + 0x34], cx
movzx ecx, word [rbx + rax + 2]
mov word [rsp + 0x32], cx
add rax, 4
mov qword [rsp + 0x48], rax
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x80]
lea r9, [rsp + 0x48]
mov rdx, rbx
mov r8, rdi
call fcn.1800a2540
mov rax, qword [rsp + 0x80]
movups xmm0, xmmword [rsp + 0x88]
movaps xmmword [rsp + 0x50], xmm0
mov ecx, dword [rsp + 0x98]
mov dword [rsp + 0x60], ecx
cmp rax, 5
jne 0x18009b815
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x120], xmm0
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x130], eax
cmp rdi, 0x3c
jae 0x18009b838
movaps xmm0, xmmword [0x180120340]
jmp 0x18009b849
mov ecx, dword [rsp + 0x9c]
mov edx, dword [rsp + 0x60]
mov dword [rsi + 0x20], edx
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi + 0x10], xmm0
mov qword [rsi + 8], rax
mov dword [rsi + 0x24], ecx
jmp 0x18009b640
lea rax, [rdi - 0x3c]
cmp rax, 4
jae 0x18009b8bc
movaps xmm0, xmmword [0x180120350]
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x80]
call fcn.18009baf0
mov rax, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x58]
mov dword [rsp + 0x2c], ecx
movups xmm0, xmmword [rsp + 0x5c]
movaps xmmword [rsp + 0xc0], xmm0
mov ecx, dword [rsp + 0x6c]
mov dword [rsp + 0xd0], ecx
cmp rax, 0xa
je 0x18009b8c3
mov ecx, dword [rsp + 0xd0]
mov dword [rsi + 0x24], ecx
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsi + 0x14], xmm0
mov qword [rsi + 8], rax
mov eax, dword [rsp + 0x2c]
mov dword [rsi + 0x10], eax
jmp 0x18009b640
mov eax, dword [rbx + 0x3c]
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x2c]
mov dword [rsp + 0xe4], eax
mov eax, eax
sub rdi, rax
jae 0x18009b8e0
mov eax, 1
mov ecx, dword [rsp + 0x2c]
jmp 0x18009b8f1
cmp rdi, 4
jae 0x18009b96e
mov ecx, 4
xor eax, eax
mov qword [rsp + 0x80], rax
mov eax, ecx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rdi
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0xe4]
lea r8, [rsp + 0x80]
call fcn.18009bbc0
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
movups xmm0, xmmword [rsp + 0x5c]
movaps xmmword [rsp + 0xc0], xmm0
mov edx, dword [rsp + 0x6c]
mov dword [rsp + 0xd0], edx
cmp rcx, 0xa
je 0x18009b971
mov edx, dword [rsp + 0xd0]
mov dword [rsi + 0x24], edx
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsi + 0x14], xmm0
mov qword [rsi + 8], rcx
mov dword [rsi + 0x10], eax
jmp 0x18009b640
mov eax, dword [rbx + rax]
mov dword [rsp + 0x110], eax
cmp eax, 0x4550
jne 0x18009ba2f
mov eax, dword [rsp + 0x130]
mov dword [rsi + 0x3c], eax
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rsi + 0x2c], xmm0
mov word [rsi + 4], 0x5a4d
mov word [rsi + 6], bp
mov word [rsi + 8], r15w
mov word [rsi + 0xa], r12w
mov word [rsi + 0xc], r13w
mov word [rsi + 0xe], r14w
movzx eax, word [rsp + 0x44]
mov word [rsi + 0x10], ax
movzx eax, word [rsp + 0x42]
mov word [rsi + 0x12], ax
movzx eax, word [rsp + 0x40]
mov word [rsi + 0x14], ax
movzx eax, word [rsp + 0x3e]
mov word [rsi + 0x16], ax
movzx eax, word [rsp + 0x3c]
mov word [rsi + 0x18], ax
movzx eax, word [rsp + 0x3a]
mov word [rsi + 0x1a], ax
movzx eax, word [rsp + 0x38]
mov word [rsi + 0x1c], ax
movzx eax, word [rsp + 0x36]
mov word [rsi + 0x1e], ax
mov rax, qword [rsp + 0xe8]
mov qword [rsi + 0x20], rax
movzx eax, word [rsp + 0x34]
mov word [rsi + 0x28], ax
movzx eax, word [rsp + 0x32]
mov word [rsi + 0x2a], ax
mov eax, dword [rsp + 0x2c]
mov dword [rsi + 0x40], eax
mov dword [rsi], 0
jmp 0x18009b646
lea rax, [rsp + 0x110]
mov qword [rsp + 0xf0], rax
lea rax, [fcn.180100a80]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x80], 2
mov qword [rsp + 0x90], 2
mov qword [rsp + 0xa0], 0
movabs rax, 0x400000020
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 3
lea rax, [0x180120620]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rax, [rsp + 0x80]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x50]
call fcn.18009ae70
jmp 0x18009b620