Function at 0x180009bc0
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov rax, rsp
push rbp
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xd8
cmp byte [rcx + 0x5b0], 0
mov r14, rcx
jne 0x180009f2a
mov qword [rax + 0x18], rbx
lea rdx, str.panorama.dll
mov qword [rax - 0x18], rsi
lea rcx, [rbp + 0x6f]
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r15
call fcn.180003000
lea rdx, str.client.dll
lea rcx, [rbp + 0x67]
call fcn.180003000
mov rdi, qword [rbp + 0x67]
xor esi, esi
mov r15d, 0x5a4d
test rdi, rdi
je 0x180009c88
cmp word [rdi], r15w
mov rax, rdi
cmovne rax, rsi
test rax, rax
je 0x180009c88
movsxd rdx, dword [rax + 0x3c]
add rdx, rdi
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009c88
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009c88
test dword [rcx + 0x24], 0x20000000
je 0x180009c7f
cmp dword [rcx], 0x7865742e
jne 0x180009c7f
cmp byte [rcx + 4], 0x74
je 0x180009f35
add rcx, 0x28
cmp rcx, rdx
jne 0x180009c64
mov rax, rsi
mov rdx, rsi
mov rbx, qword [rbp + 0x6f]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rdx
test rbx, rbx
je 0x180009d05
cmp word [rbx], r15w
mov rax, rbx
cmovne rax, rsi
test rax, rax
je 0x180009d05
movsxd rdx, dword [rax + 0x3c]
add rdx, rbx
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009d05
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009d05
test dword [rcx + 0x24], 0x20000000
je 0x180009cfc
cmp dword [rcx], 0x7865742e
jne 0x180009cfc
cmp byte [rcx + 4], 0x74
je 0x180009f43
add rcx, 0x28
cmp rcx, rdx
jne 0x180009ce1
mov rax, rsi
mov rdx, rsi
mov qword [rbp + 0xf], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.soundsystem.dll
mov qword [rbp + 7], rax
call fcn.180003000
mov r8, qword [rax]
test r8, r8
je 0x180009d87
cmp word [r8], r15w
jne 0x180009d87
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009d87
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009d87
test dword [rcx + 0x24], 0x20000000
je 0x180009d7e
cmp dword [rcx], 0x7865742e
jne 0x180009d7e
cmp byte [rcx + 4], 0x74
je 0x180009f51
add rcx, 0x28
cmp rcx, rdx
jne 0x180009d63
mov rax, rsi
mov rdx, rsi
mov qword [rbp - 0x31], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.filesystem_stdio.dll
mov qword [rbp - 0x39], rax
call fcn.180003000
mov r8, qword [rax]
test r8, r8
je 0x180009e09
cmp word [r8], r15w
jne 0x180009e09
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009e09
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009e09
test dword [rcx + 0x24], 0x20000000
je 0x180009e00
cmp dword [rcx], 0x7865742e
jne 0x180009e00
cmp byte [rcx + 4], 0x74
je 0x180009f5f
add rcx, 0x28
cmp rcx, rdx
jne 0x180009de5
mov rax, rsi
mov rdx, rsi
mov qword [rbp - 0x21], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.tier0.dll
mov qword [rbp - 0x29], rax
call fcn.180003000
mov r8, qword [rax]
test r8, r8
je 0x180009e8b
cmp word [r8], r15w
jne 0x180009e8b
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009e8b
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009e8b
test dword [rcx + 0x24], 0x20000000
je 0x180009e82
cmp dword [rcx], 0x7865742e
jne 0x180009e82
cmp byte [rcx + 4], 0x74
je 0x180009f6d
add rcx, 0x28
cmp rcx, rdx
jne 0x180009e67
mov rax, rsi
movups xmm0, xmmword [r14 + 8]
mov qword [rbp - 1], rax
lea rcx, [r14 + 8]
lea rax, [rbp - 0x39]
mov qword [rbp - 9], rsi
mov qword [rbp - 0x19], rax
lea rdx, [rbp + 0x27]
lea rax, [rbp - 0x29]
movaps xmmword [rbp + 0x27], xmm0
mov qword [rbp - 0x11], rax
mov r9, rbx
lea rax, [rbp - 0x19]
mov r8, rdi
mov qword [rsp + 0x40], rax
lea rax, [rbp - 9]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 7]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x17]
mov qword [rsp + 0x20], rax
call fcn.180001bb0
mov byte [r14 + 0x5b0], 1
lea rcx, [r14 + 0x598]
mov rdx, qword [r14 + 0x3e0]
call fcn.180009960
mov r15, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0x100]
add rsp, 0xd8
pop r14
pop rbp
ret
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, rdi
jmp 0x180009c8e
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, rbx
jmp 0x180009d0b
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, r8
jmp 0x180009d8d
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, r8
jmp 0x180009e0f
mov esi, dword [rcx + 0xc]
mov eax, dword [rcx + 8]
add rsi, r8
jmp 0x180009e8e