Function at 0x180014c70
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x280
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x18001b040]
xor rax, rsp
mov qword [rbp + 0x228], rax
movabs rax, 0x2672ae972a42a483
movabs rcx, 0x2e237cc8ba464902
mov qword [rbp], rax
movabs r13, 0xf2d446f4e906ec7
mov rax, qword [rbp]
movabs r14, 0x496715e9d7ff6149
mov qword [rbp + 0xa0], rax
movabs r15, 0xfea7da450c85f9e
movabs rax, 0xa5490da4b29cce34
movabs r12, 0x4385cc132dd2ed4b
mov qword [rbp], rax
movabs rdi, 0x290ca756f36bef80
mov rax, qword [rbp]
xor esi, esi
mov qword [rbp + 0xa8], rax
movabs rax, 0xf4844064efc6e84
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x9dd79c2f980f0862
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x495315dfd7916120
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xf837dcc509b5fb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x43ebcc7a2da2ed3b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x2974a733f345efe7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xaaaeb2dd9e0360e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x2606aee52a2da4c5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xa52c0dd0b2f5ce5a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x9d809c02987b080c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xaaaeb2dd9e03608d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x180]
mov qword [rbp + 0x1c8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vmovdqa xmm2, xmmword [rbp + 0xe0]
vxorps xmm2, xmm2, xmmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmmword [rbp + 0xe0], xmm2
mov rax, qword gs:[0x60]
test rax, rax
jne 0x180014efa
mov qword [0x18001b838], rsi
vzeroupper
jmp 0x18001524f
mov r11, qword [rax + 0x18]
add r11, 0x20
mov r10, qword [r11]
cmp r10, r11
vzeroupper
je 0x180015248
movzx ebx, word [rbp + 0xa0]
nop dword [rax + rax]
mov r8, qword [r10 + 0x50]
test r8, r8
je 0x18001523c
mov rax, r8
mov ecx, esi
cmp word [r8], si
je 0x180014f4b
nop dword [rax + rax]
inc ecx
lea rax, [rax + 2]
cmp word [rax], si
jne 0x180014f40
lea rax, [rbp + 0xa0]
mov edx, esi
test bx, bx
je 0x180014f6b
nop dword [rax]
inc edx
lea rax, [rax + 2]
cmp word [rax], si
jne 0x180014f60
cmp ecx, edx
jne 0x18001523c
movsxd r9, ecx
mov rdx, rsi
test ecx, ecx
je 0x180014fa6
nop dword [rax]
movzx ecx, word [r8 + rdx*2]
movzx eax, word [rbp + rdx*2 + 0xa0]
or cx, 0x20
or ax, 0x20
cmp cx, ax
jne 0x18001523c
inc rdx
cmp rdx, r9
jb 0x180014f80
mov rax, qword [r10 + 0x20]
mov qword [0x18001b838], rax
test rax, rax
je 0x18001524f
mov ecx, dword [0x18001b730]
movabs rax, 0x12458ea7120d9cf1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x900c34e892cdfa7a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x2f18714f7ea24eff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xacb4bc35ad5b3e39
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x7c4724ddf7cb5469
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x2fae458468fc7fa8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x4385cc132dd2d57d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x2606aee52a2da4c5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xa52c0dd0b2f5ce5a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x9d809c02987b080c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x80]
mov rdi, qword [0x18001b838]
mov qword [rbp + 0x218], rax
mov rax, qword gs:[0x58]
vmovdqa ymmword [rbp + 0x60], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
mov edx, 4
mov rax, qword [rax + rcx*8]
vmovdqa ymmword [rbp + 0x80], ymm1
mov ecx, dword [rdx + rax]
cmp dword [0x18001c098], ecx
vzeroupper
jle 0x18001517a
lea rcx, [0x18001c098]
call fcn.180015c28
cmp dword [0x18001c098], 0xffffffff
jne 0x18001517a
lea rcx, [0x18001c098]
call fcn.180015bbc
movsxd rax, dword [rdi + 0x3c]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x30]
mov ebx, dword [rax + rdi + 0x50]
call fcn.1800011a0
mov r11, qword [rbp + 0x38]
mov r10, qword [rbp + 0x30]
sub r11, r10
sar r11, 2
sub rbx, r11
je 0x180015291
mov edx, esi
mov r9d, esi
test r11, r11
je 0x1800151e4
mov rax, rsi
nop dword [rax]
nop dword [rax + rax]
mov r8d, dword [r10 + rax*4]
lea eax, [rdx + r9]
movzx eax, byte [rax + rdi]
cmp eax, r8d
je 0x1800151db
cmp r8d, 0xffffffff
jne 0x18001527f
inc edx
mov eax, edx
cmp rax, r11
jb 0x1800151c0
mov ebx, r9d
add rbx, rdi
test r10, r10
je 0x1800152e0
mov rdx, qword [rbp + 0x40]
mov rax, r10
sub rdx, r10
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x180015223
mov r10, qword [r10 - 8]
add rdx, 0x27
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152c2
mov rcx, r10
call fcn.180015ce4
xorps xmm0, xmm0
mov qword [rbp + 0x40], rsi
movdqu xmmword [rbp + 0x30], xmm0
jmp 0x1800152e0
mov r10, qword [r10]
cmp r10, r11
jne 0x180014f20
mov qword [0x18001b838], rsi
mov rcx, qword [rbp + 0x228]
xor rcx, rsp
call fcn.180015b60
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
inc r9d
mov eax, r9d
cmp rax, rbx
jae 0x180015291
mov edx, esi
jmp 0x1800151b1
test r10, r10
je 0x1800152dd
mov rdx, qword [rbp + 0x40]
mov rax, r10
sub rdx, r10
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x1800152c9
mov r10, qword [r10 - 8]
add rdx, 0x27
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800152c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r10
call fcn.180015ce4
xorps xmm0, xmm0
mov qword [rbp + 0x40], rsi
movdqu xmmword [rbp + 0x30], xmm0
mov rbx, rsi
mov qword [0x18001b7e0], rbx
call fcn.1800052a0
movabs rax, 0x2668ae8a2a5fa483
movabs rcx, 0x9d809c02987b080c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xa5480dbeb290ce2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x2606aee52a2da4c5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xa52c0dd0b2f5ce5a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov rdi, qword [0x18001b838]
mov rdx, qword [0x18001bde0]
add rdi, 0x1639504
mov qword [rbp + 0x168], rax
test rdx, rdx
vmovdqu ymm0, ymmword [rbp + 0x150]
vpxor ymm1, ymm0, ymmword [rbp + 0x30]
vmovdqu ymmword [rbp + 0x30], ymm1
vzeroupper
jne 0x18001547f
mov rax, qword gs:[0x60]
mov dword [rbp + 0x220], 0x7865742e
mov byte [rbp + 0x224], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x180015443
lea r9, [rbp + 0x220]
sub r9, r8
nop dword [rax + rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x180015443
nop dword [rax]
movsx edx, byte [rax + r9]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x180015436
inc rax
cmp rax, r10
jne 0x180015420
jmp 0x180015443
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x180015410
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rbp + 8], 0x26ff
lea rdx, [rcx + rax]
cmp rax, 2
jb 0x180015478
movzx eax, word [rbp + 8]
lea r8, [rdx - 2]
cmp ax, word [rcx]
je 0x180015475
cmp rcx, r8
je 0x180015478
inc rcx
jmp 0x180015466
mov rdx, rcx
mov qword [0x18001bde0], rdx
xor eax, eax
mov qword [rbp + 0x150], rdx
xor r9d, r9d
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x150]
mov qword [rsp + 0x28], rsi
lea r8, [rbp + 0x30]
mov qword [rbp + 0x158], rdi
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea rdx, [r9 - 1]
call fcn.180015b10
mov rdi, rax
test rax, rax
je 0x18001524f
mov rdx, rax
call fcn.1800047a0
mov rsi, rax
lea rcx, [rax + 0x38]
test rcx, rcx
je 0x1800154e0
movups xmm0, xmmword [rcx]
movups xmmword [rbp + 0x20], xmm0
mov rcx, qword [rbp + 0x20]
mov rdx, rdi
mov rbx, qword [rcx]
call fcn.180004860
add rbx, 0x78
je 0x1800154fa
mov rbx, qword [rbx]
jmp 0x1800154fe
mov rbx, qword [rbp]
mov rdi, qword [0x18001bd28]
xor eax, eax
mov qword [rbp + 0x18], rax
mov rax, qword [0x18001bfc0]
mov qword [rbp + 0x10], rsi
test rax, rax
jne 0x180015593
movups xmm0, xmmword [0x180018330]
lea rdx, [rbp + 0x100]
movups xmm1, xmmword [0x180018340]
lea rcx, [rbp + 0x100]
mov eax, dword [0x180018370]
movups xmmword [rbp + 0x100], xmm0
movups xmm0, xmmword [0x180018350]
movups xmmword [rbp + 0x110], xmm1
movups xmm1, xmmword [str.99]
mov dword [rbp + 0x140], eax
movzx eax, word [0x180018374]
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm1
mov word [rbp + 0x144], ax
call fcn.180004940
lea r8, [rbp + 0x100]
call fcn.1800012a0
mov qword [0x18001bfc0], rax
lea r8, [rbp + 0x10]
mov rdx, rax
mov rcx, rdi
call fcn.1800013f0
mov rax, qword [rbp + 0x18]
add rax, 0x70
je 0x1800155b1
mov rax, qword [rax]
jmp 0x1800155b5
mov rax, qword [rbp]
mov rcx, rbx
mov qword [0x18001b7c8], rax
call fcn.180015850
mov qword [0x18001b810], rax
jmp 0x18001524f