Function at 0x180009530
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov rax, rsp
push rbp
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xb8
cmp byte [rcx + 0x538], 1
mov r14, rcx
jne 0x180009895
mov qword [rax + 0x18], rbx
lea rdx, str.panorama.dll
mov qword [rax - 0x18], rdi
lea rcx, [rbp + 0x6f]
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r15
mov qword [rax + 0x20], rsi
call fcn.180003ec0
lea rdx, str.client.dll
lea rcx, [rbp + 0x67]
call fcn.180003ec0
mov rdi, qword [rbp + 0x67]
xor esi, esi
mov r15d, 0x5a4d
test rdi, rdi
je 0x180009604
cmp word [rdi], r15w
mov rax, rdi
cmovne rax, rsi
test rax, rax
je 0x180009604
movsxd rdx, dword [rax + 0x3c]
add rdx, rdi
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009604
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009604
nop dword [rax + rax]
test dword [rcx + 0x24], 0x20000000
je 0x1800095fb
cmp dword [rcx], 0x7865742e
jne 0x1800095fb
cmp byte [rcx + 4], 0x74
je 0x180009841
add rcx, 0x28
cmp rcx, rdx
jne 0x1800095e0
mov rax, rsi
mov rdx, rsi
mov rbx, qword [rbp + 0x6f]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rdx
test rbx, rbx
je 0x180009684
cmp word [rbx], r15w
mov rax, rbx
cmovne rax, rsi
test rax, rax
je 0x180009684
movsxd rdx, dword [rax + 0x3c]
add rdx, rbx
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009684
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009684
nop dword [rax]
test dword [rcx + 0x24], 0x20000000
je 0x18000967b
cmp dword [rcx], 0x7865742e
jne 0x18000967b
cmp byte [rcx + 4], 0x74
je 0x18000984f
add rcx, 0x28
cmp rcx, rdx
jne 0x180009660
mov rax, rsi
mov rdx, rsi
mov qword [rbp + 0xf], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.soundsystem.dll
mov qword [rbp + 7], rax
call fcn.180003ec0
mov r8, qword [rax]
test r8, r8
je 0x180009706
cmp word [r8], r15w
jne 0x180009706
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009706
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009706
test dword [rcx + 0x24], 0x20000000
je 0x1800096fd
cmp dword [rcx], 0x7865742e
jne 0x1800096fd
cmp byte [rcx + 4], 0x74
je 0x18000985d
add rcx, 0x28
cmp rcx, rdx
jne 0x1800096e2
mov rax, rsi
mov rdx, rsi
mov qword [rbp - 0x21], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.filesystem_stdio.dll
mov qword [rbp - 0x29], rax
call fcn.180003ec0
mov r8, qword [rax]
test r8, r8
je 0x180009788
cmp word [r8], r15w
jne 0x180009788
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180009788
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180009788
test dword [rcx + 0x24], 0x20000000
je 0x18000977f
cmp dword [rcx], 0x7865742e
jne 0x18000977f
cmp byte [rcx + 4], 0x74
je 0x18000986b
add rcx, 0x28
cmp rcx, rdx
jne 0x180009764
mov rax, rsi
mov rdx, rsi
mov qword [rbp - 0x19], rax
lea rax, [rbp - 0x29]
mov qword [rbp - 9], rax
lea rax, [rbp - 0x19]
mov qword [rbp - 1], rax
mov qword [rbp - 0x11], rdx
add r14, 8
je 0x1800097b9
cmp byte [r14 + 0x530], 1
mov r12, r14
je 0x1800097bc
mov r12, rsi
mov rcx, r14
call fcn.1800063d0
lea rax, [rbp - 9]
mov byte [r14 + 0x530], 0xff
movups xmm0, xmmword [r12]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x27]
lea rax, [rbp - 0x29]
mov r9, rbx
mov qword [rsp + 0x30], rax
mov r8, rdi
lea rax, [rbp + 7]
movaps xmmword [rbp + 0x27], xmm0
mov qword [rsp + 0x28], rax
mov rcx, r14
lea rax, [rbp + 0x17]
mov qword [rsp + 0x20], rax
call fcn.180002010
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xe0]
mov byte [r14 + 0x530], 2
test r14, r14
je 0x180009879
lea rcx, [r14 + 0x518]
jmp 0x180009881
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, rdi
jmp 0x18000960a
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, rbx
jmp 0x18000968a
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, r8
jmp 0x18000970c
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, r8
jmp 0x18000978e
mov ecx, 0x518
mov r14, rsi
mov rdx, qword [r14 + 0x388]
call fcn.180009200
mov rsi, qword [rsp + 0xe8]
add rsp, 0xb8
pop r14
pop rbp
ret