Function at 0x180014b30
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x280
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x18001b040]
xor rax, rsp
mov qword [rbp + 0x228], rax
movabs rax, 0x5699a9ccf31ea065
movabs rcx, 0xf4aeb253931abeb8
mov qword [rbp], rax
movabs r13, 0x5a59125473d7b335
mov rax, qword [rbp]
movabs r14, 0x39bff5aa09125f07
mov qword [rbp + 0xa0], rax
movabs r15, 0xcdc210e7f28667b4
movabs rax, 0xdc28238f03f7669e
movabs r12, 0xb82a3060571d4629
mov qword [rbp], rax
movabs rdi, 0x4bc7c6fd5260ef86
mov rax, qword [rbp]
xor esi, esi
mov qword [rbp + 0xa8], rax
movabs rax, 0x5a3c123d73bbb376
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x3670b5ecb4a6ab5c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x398bf59c097c5f6e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xcdab108ff2d56799
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xb8443009576d4659
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x4bbfc698524eefe1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xfa01e76385a866e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x56eda9bef371a023
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xdc4d23fb039e66f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x3627b5c1b4d2ab32
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xfa01e76385a860b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x180]
mov qword [rbp + 0x1c8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vmovdqa xmm2, xmmword [rbp + 0xe0]
vxorps xmm2, xmm2, xmmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmmword [rbp + 0xe0], xmm2
mov rax, qword gs:[0x60]
test rax, rax
jne 0x180014dba
mov qword [0x18001b838], rsi
vzeroupper
jmp 0x18001510f
mov r11, qword [rax + 0x18]
add r11, 0x20
mov r10, qword [r11]
cmp r10, r11
vzeroupper
je 0x180015108
movzx ebx, word [rbp + 0xa0]
nop dword [rax + rax]
mov r8, qword [r10 + 0x50]
test r8, r8
je 0x1800150fc
mov rax, r8
mov ecx, esi
cmp word [r8], si
je 0x180014e0b
nop dword [rax + rax]
inc ecx
lea rax, [rax + 2]
cmp word [rax], si
jne 0x180014e00
lea rax, [rbp + 0xa0]
mov edx, esi
test bx, bx
je 0x180014e2b
nop dword [rax]
inc edx
lea rax, [rax + 2]
cmp word [rax], si
jne 0x180014e20
cmp ecx, edx
jne 0x1800150fc
movsxd r9, ecx
mov rdx, rsi
test ecx, ecx
je 0x180014e66
nop dword [rax]
movzx ecx, word [r8 + rdx*2]
movzx eax, word [rbp + rdx*2 + 0xa0]
or cx, 0x20
or ax, 0x20
cmp cx, ax
jne 0x1800150fc
inc rdx
cmp rdx, r9
jb 0x180014e40
mov rax, qword [r10 + 0x20]
mov qword [0x18001b838], rax
test rax, rax
je 0x18001510f
mov ecx, dword [0x18001b730]
movabs rax, 0x62ae89fccb519817
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xe96d1ac323a652d0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x7a6c277443e5930d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x71395f681f29d07
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xc9fc49e29266a27
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xed8628c7cab24782
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xb82a3060571d7e1f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x56eda9bef371a023
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xdc4d23fb039e66f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x3627b5c1b4d2ab32
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x80]
mov rdi, qword [0x18001b838]
mov qword [rbp + 0x218], rax
mov rax, qword gs:[0x58]
vmovdqa ymmword [rbp + 0x60], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
mov edx, 4
mov rax, qword [rax + rcx*8]
vmovdqa ymmword [rbp + 0x80], ymm1
mov ecx, dword [rdx + rax]
cmp dword [0x18001c0b8], ecx
vzeroupper
jle 0x18001503a
lea rcx, [0x18001c0b8]
call fcn.180015ae8
cmp dword [0x18001c0b8], 0xffffffff
jne 0x18001503a
lea rcx, [0x18001c0b8]
call fcn.180015a7c
movsxd rax, dword [rdi + 0x3c]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x30]
mov ebx, dword [rax + rdi + 0x50]
call fcn.1800011a0
mov r11, qword [rbp + 0x38]
mov r10, qword [rbp + 0x30]
sub r11, r10
sar r11, 2
sub rbx, r11
je 0x180015151
mov edx, esi
mov r9d, esi
test r11, r11
je 0x1800150a4
mov rax, rsi
nop dword [rax]
nop dword [rax + rax]
mov r8d, dword [r10 + rax*4]
lea eax, [rdx + r9]
movzx eax, byte [rax + rdi]
cmp eax, r8d
je 0x18001509b
cmp r8d, 0xffffffff
jne 0x18001513f
inc edx
mov eax, edx
cmp rax, r11
jb 0x180015080
mov ebx, r9d
add rbx, rdi
test r10, r10
je 0x1800151a0
mov rdx, qword [rbp + 0x40]
mov rax, r10
sub rdx, r10
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x1800150e3
mov r10, qword [r10 - 8]
add rdx, 0x27
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180015182
mov rcx, r10
call fcn.180015ba4
xorps xmm0, xmm0
mov qword [rbp + 0x40], rsi
movdqu xmmword [rbp + 0x30], xmm0
jmp 0x1800151a0
mov r10, qword [r10]
cmp r10, r11
jne 0x180014de0
mov qword [0x18001b838], rsi
mov rcx, qword [rbp + 0x228]
xor rcx, rsp
call fcn.180015a20
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
inc r9d
mov eax, r9d
cmp rax, rbx
jae 0x180015151
mov edx, esi
jmp 0x180015071
test r10, r10
je 0x18001519d
mov rdx, qword [rbp + 0x40]
mov rax, r10
sub rdx, r10
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x180015189
mov r10, qword [r10 - 8]
add rdx, 0x27
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180015189
call qword [0x180017170]
int3
mov rcx, r10
call fcn.180015ba4
xorps xmm0, xmm0
mov qword [rbp + 0x40], rsi
movdqu xmmword [rbp + 0x30], xmm0
mov rbx, rsi
mov qword [0x18001b7e0], rbx
call fcn.1800052a0
movabs rax, 0x5683a9d1f303a065
movabs rcx, 0x3627b5c1b4d2ab32
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xdc29239503fb6684
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x56eda9bef371a023
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xdc4d23fb039e66f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov rdi, qword [0x18001b838]
mov rdx, qword [0x18001bdf8]
add rdi, 0x1298374
mov qword [rbp + 0x168], rax
test rdx, rdx
vmovdqu ymm0, ymmword [rbp + 0x150]
vpxor ymm1, ymm0, ymmword [rbp + 0x30]
vmovdqu ymmword [rbp + 0x30], ymm1
vzeroupper
jne 0x18001533f
mov rax, qword gs:[0x60]
mov dword [rbp + 0x220], 0x7865742e
mov byte [rbp + 0x224], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x180015303
lea r9, [rbp + 0x220]
sub r9, r8
nop dword [rax + rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x180015303
nop dword [rax]
movsx edx, byte [rax + r9]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x1800152f6
inc rax
cmp rax, r10
jne 0x1800152e0
jmp 0x180015303
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x1800152d0
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rbp + 8], 0x26ff
lea rdx, [rcx + rax]
cmp rax, 2
jb 0x180015338
movzx eax, word [rbp + 8]
lea r8, [rdx - 2]
cmp ax, word [rcx]
je 0x180015335
cmp rcx, r8
je 0x180015338
inc rcx
jmp 0x180015326
mov rdx, rcx
mov qword [0x18001bdf8], rdx
xor eax, eax
mov qword [rbp + 0x150], rdx
xor r9d, r9d
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x150]
mov qword [rsp + 0x28], rsi
lea r8, [rbp + 0x30]
mov qword [rbp + 0x158], rdi
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea rdx, [r9 - 1]
call fcn.1800159d0
mov rdi, rax
test rax, rax
je 0x18001510f
mov rdx, rax
call fcn.1800047a0
mov rsi, rax
lea rcx, [rax + 0x38]
test rcx, rcx
je 0x1800153a0
movups xmm0, xmmword [rcx]
movups xmmword [rbp + 0x20], xmm0
mov rcx, qword [rbp + 0x20]
mov rdx, rdi
mov rbx, qword [rcx]
call fcn.180004860
add rbx, 0x78
je 0x1800153ba
mov rbx, qword [rbx]
jmp 0x1800153be
mov rbx, qword [rbp]
mov rdi, qword [0x18001bd40]
xor eax, eax
mov qword [rbp + 0x18], rax
mov rax, qword [0x18001bfd8]
mov qword [rbp + 0x10], rsi
test rax, rax
jne 0x180015453
movups xmm0, xmmword [str.yZGXSCk_IOYPrV_31k]
lea rdx, [rbp + 0x100]
movups xmm1, xmmword [0x180017b30]
lea rcx, [rbp + 0x100]
mov eax, dword [0x180017b60]
movups xmmword [rbp + 0x100], xmm0
movups xmm0, xmmword [0x180017b40]
movups xmmword [rbp + 0x110], xmm1
movups xmm1, xmmword [str.____]
mov dword [rbp + 0x140], eax
movzx eax, word [0x180017b64]
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm1
mov word [rbp + 0x144], ax
call fcn.180004940
lea r8, [rbp + 0x100]
call fcn.1800012a0
mov qword [0x18001bfd8], rax
lea r8, [rbp + 0x10]
mov rdx, rax
mov rcx, rdi
call fcn.1800013f0
mov rax, qword [rbp + 0x18]
add rax, 0x70
je 0x180015471
mov rax, qword [rax]
jmp 0x180015475
mov rax, qword [rbp]
mov rcx, rbx
mov qword [0x18001b7c8], rax
call fcn.180015710
mov qword [0x18001b810], rax
jmp 0x18001510f