Function at 0x180004e30
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0xf0
mov rsi, rdx
mov rdi, rcx
lea rdx, [rbp - 0x11]
mov rbx, r8
lea rcx, [rbp + 0x6f]
call fcn.18000ba40
lea rdx, [rbp + 0x17]
lea rcx, [rbp + 0x77]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x19], rax
movups xmmword [rbp - 0x29], xmm1
call fcn.18000ba40
lea rdx, str.tier0.dll
lea rcx, [rbp + 0x6f]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x41], rax
movups xmmword [rbp - 0x51], xmm1
call fcn.180006df0
mov rax, qword [rbp + 0x6f]
lea r9, [rbp - 0x61]
mov rdx, qword [rbp + 0x7f]
lea r8, [rbp - 0x39]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1800053c0
mov r9, qword [rdi + 0x1d8]
xor r8d, r8d
mov r10, qword [rdi + 0x1e0]
mov r11d, 0x5a4d
test rbx, rbx
je 0x180004f54
cmp word [rbx], r11w
mov rax, rbx
cmovne rax, r8
test rax, rax
je 0x180004f54
movsxd rcx, dword [rax + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
cmovne rcx, r8
test rcx, rcx
je 0x180004f54
movzx edx, word [rcx + 0x14]
movzx eax, word [rcx + 6]
add rdx, 0x18
add rdx, rcx
lea rax, [rax + rax*4]
lea rcx, [rdx + rax*8]
cmp rdx, rcx
je 0x180004f54
nop word [rax + rax]
test dword [rdx + 0x24], 0x20000000
je 0x180004f4b
cmp dword [rdx], 0x7865742e
jne 0x180004f4b
cmp byte [rdx + 4], 0x74
je 0x180005384
add rdx, 0x28
cmp rdx, rcx
jne 0x180004f30
mov qword [rbp - 0x79], r8
mov qword [rsp + 0x30], r8
test rbx, rbx
je 0x180004fca
cmp word [rbx], r11w
mov rax, rbx
cmovne rax, r8
test rax, rax
je 0x180004fca
movsxd rcx, dword [rax + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
cmovne rcx, r8
test rcx, rcx
je 0x180004fca
movzx edx, word [rcx + 0x14]
movzx eax, word [rcx + 6]
add rdx, 0x18
add rdx, rcx
lea rax, [rax + rax*4]
lea rcx, [rdx + rax*8]
cmp rdx, rcx
je 0x180004fca
test dword [rdx + 0x24], 0x40000000
je 0x180004fc1
cmp dword [rdx], 0x6164722e
jne 0x180004fc1
cmp word [rdx + 4], 0x6174
je 0x18000539b
add rdx, 0x28
cmp rdx, rcx
jne 0x180004fa4
mov qword [rbp - 0x69], r8
mov qword [rbp - 0x71], r8
movups xmm1, xmmword [rsp + 0x30]
movups xmm2, xmmword [rbp - 0x71]
movups xmm0, xmmword [rsi]
movups xmmword [rdi + 0x428], xmm0
mov qword [rdi + 0x438], r8
movups xmmword [rdi + 0x448], xmm1
mov qword [rdi + 0x440], r9
movups xmmword [rdi + 0x458], xmm2
mov byte [rdi + 0x480], 0
mov qword [rdi + 0x488], r8
movups xmmword [rdi + 0x4a0], xmm1
mov qword [rdi + 0x490], r8
movups xmmword [rdi + 0x4b0], xmm2
mov qword [rdi + 0x498], r10
mov byte [rdi + 0x4d8], 0
mov qword [rdi + 0x4e0], r8
mov byte [rdi + 0x4e8], 0
mov qword [rdi + 0x4f0], r8
mov qword [rdi + 0x4f8], r8
mov qword [rdi + 0x500], r8
mov qword [rdi + 0x508], r8
mov qword [rdi + 0x510], r8
mov qword [rdi + 0x518], r8
mov qword [rdi + 0x520], r8
mov qword [rdi + 0x528], r8
mov qword [rdi + 0x530], r8
mov qword [rdi + 0x538], r8
mov qword [rdi + 0x540], r8
mov qword [rdi + 0x548], r8
mov qword [rdi + 0x550], r8
mov qword [rdi + 0x558], r8
mov qword [rdi + 0x560], r8
mov qword [rdi + 0x568], r8
mov qword [rdi + 0x570], r8
mov qword [rdi + 0x578], r8
mov qword [rdi + 0x580], r8
mov qword [rdi + 0x588], r8
mov qword [rdi + 0x590], r8
mov qword [rdi + 0x598], r8
mov qword [rdi + 0x5a0], r8
mov qword [rdi + 0x5a8], r8
mov qword [rdi + 0x5b0], r8
mov qword [rdi + 0x5b8], r8
mov qword [rdi + 0x5c0], r8
mov qword [rdi + 0x5c8], r8
mov qword [rdi + 0x5d0], r8
mov qword [rdi + 0x5d8], r8
mov qword [rdi + 0x5e0], r8
mov qword [rdi + 0x5e8], r8
mov qword [rdi + 0x5f0], r8
mov qword [rdi + 0x5f8], r8
mov qword [rdi + 0x600], r8
mov qword [rdi + 0x608], r8
mov byte [rdi + 0x610], 0
mov dword [rdi + 0x614], 0xffffffff
mov dword [rdi + 0x61c], 0xffffffff
mov dword [rdi + 0x624], 0xffffffff
mov byte [rdi + 0x62c], 0
mov dword [rdi + 0x630], 0xffffffff
mov dword [rdi + 0x638], 0xffffffff
mov byte [rdi + 0x640], 0
mov byte [rdi + 0x644], 0
mov dword [rdi + 0x648], 0xffffffff
mov byte [rdi + 0x650], 0
mov dword [rdi + 0x654], 0xffffffff
mov qword [rdi + 0x660], r8
mov qword [rdi + 0x668], r8
mov qword [rdi + 0x670], r8
mov byte [rdi + 0x678], 0
mov dword [rdi + 0x67c], 0xffffffff
mov qword [rdi + 0x688], r8
mov qword [rdi + 0x690], r8
mov qword [rdi + 0x698], r8
mov byte [rdi + 0x6a0], 0
mov dword [rdi + 0x6a4], 0xffffffff
mov qword [rdi + 0x6b0], r8
mov qword [rdi + 0x6b8], r8
mov qword [rdi + 0x6c0], r8
mov byte [rdi + 0x6c8], 0
mov dword [rdi + 0x6cc], 0xffffffff
mov qword [rdi + 0x6d8], r8
mov qword [rdi + 0x6e0], r8
xor r9b, r9b
mov qword [rdi + 0x6e8], r8
mov byte [rdi + 0x6f0], 0
mov dword [rdi + 0x6f4], 0xffffffff
mov qword [rdi + 0x700], r8
mov qword [rdi + 0x708], r8
mov qword [rdi + 0x710], r8
mov byte [rdi + 0x718], 0
mov dword [rdi + 0x71c], 0xffffffff
mov qword [rdi + 0x728], r8
mov qword [rdi + 0x730], r8
mov qword [rdi + 0x738], r8
mov dword [rdi + 0x740], 0x10000
mov dword [rdi + 0x744], 0x1010001
mov byte [rdi + 0x748], 0xf
mov dword [rdi + 0x74c], 0xffffffff
mov qword [rdi + 0x758], r8
mov qword [rdi + 0x760], r8
mov qword [rdi + 0x768], r8
mov dword [rdi + 0x770], 0x10100
mov word [rdi + 0x774], 0x101
mov byte [rdi + 0x776], 1
mov dword [rdi + 0x778], 0xffffffff
mov dword [rdi + 0x780], 0xffffffff
mov dword [rdi + 0x788], 0xffffffff
mov dword [rdi + 0x790], 0xffffffff
mov byte [rdi + 0x798], 1
mov dword [rdi + 0x79c], 0xffffffff
mov qword [rdi + 0x7a8], r8
mov dword [rdi + 0x7b0], 0
nop dword [rax]
movzx eax, r9b
test r9b, r9b
je 0x18000535a
movzx ecx, r9b
lea r10, [rdi + rcx*8]
movzx edx, al
movzx r8d, byte [rdx + rdi + 0x7b7]
mov rcx, qword [rdi + r8*8 + 0x2a0]
cmp qword [r10 + 0x2a0], rcx
jae 0x18000535a
mov byte [rdx + rdi + 0x7b8], r8b
add al, 0xff
jne 0x180005331
movzx ecx, al
mov byte [rcx + rdi + 0x7b8], r9b
inc r9b
cmp r9b, 0x2b
jb 0x180005320
mov rbx, qword [rsp + 0x110]
mov rax, rdi
add rsp, 0xf0
pop rdi
pop rsi
pop rbp
ret
mov ecx, dword [rdx + 0xc]
mov eax, dword [rdx + 8]
add rcx, rbx
mov qword [rsp + 0x30], rcx
mov qword [rbp - 0x79], rax
jmp 0x180004f5d
mov ecx, dword [rdx + 0xc]
mov eax, dword [rdx + 8]
add rcx, rbx
mov qword [rbp - 0x71], rcx
mov qword [rbp - 0x69], rax
jmp 0x180004fd2