Function at 0x180001e10
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rbx, rcx
mov rax, qword [0x180081cd8]
test rax, rax
jne 0x180001e4b
lea rdx, str.48_89_5C_24_08_57_48_83_EC_30_83_79_04
call fcn.180001890
mov qword [0x180081cd8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3b8]
call rax
cmp qword [rsp + 0x30], 0
jne 0x180001e94
xor edi, edi
mov qword [rbx], rdi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], dil
xor r8d, r8d
lea rdx, [0x18006ad68]
mov rcx, rbx
call fcn.18000ca20
jmp 0x1800020bf
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1800015e0
nop
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp - 0x80]
call fcn.18003d910
xor edi, edi
mov edx, edi
mov r8, qword [rsp + 0x50]
test r8, r8
je 0x180001ef1
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x40]
nop dword [rax]
lea rcx, [rsp + 0x40]
cmp r9, 0x10
cmovae rcx, r10
movzx eax, byte [rbp + rdx - 0x80]
add al, byte [rcx + rdx]
mov byte [rbp + rdx - 0x80], al
inc rdx
cmp rdx, r8
jb 0x180001ed0
mov r14, qword [rsp + 0x30]
mov rax, qword [0x180081de8]
test rax, rax
jne 0x180001f15
lea rdx, str.48_85_C9_74_2E_53
call fcn.180001890
mov qword [0x180081de8], rax
mov rdx, qword [0x180081ce0]
test rdx, rdx
jne 0x180001fee
mov rax, qword gs:[0x60]
mov rsi, qword [rax + 0x10]
movsxd rcx, dword [rsi + 0x3c]
movzx eax, word [rcx + rsi + 0x14]
lea r8, [rcx + rsi]
add rax, 0x18
add r8, rax
mov dword [rbp + 0x3c8], 0x7865742e
mov byte [rbp + 0x3cc], 0x74
movzx eax, word [rcx + rsi + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x180001fa0
lea r9, [rbp + 0x3c8]
sub r9, r8
mov rax, r8
lea r10, [r8 + 5]
cmp r8, r10
je 0x180001fa0
movsx edx, byte [rax + r9]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x180001f93
inc rax
cmp rax, r10
jmp 0x180001f7d
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x180001f73
mov word [rbp + 0x3c0], 0x26ff
mov ecx, dword [r8 + 0xc]
add rcx, rsi
mov eax, dword [r8 + 8]
lea rdx, [rcx + rax]
cmp rax, 2
jb 0x180001fe0
lea r8, [rdx - 2]
movzx eax, word [rbp + 0x3c0]
cmp ax, word [rcx]
je 0x180001fdd
nop
cmp rcx, r8
je 0x180001fe0
inc rcx
cmp ax, word [rcx]
jne 0x180001fd0
mov rdx, rcx
mov qword [0x180081ce0], rdx
mov rax, qword [0x180081de8]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.18003b350
movzx eax, byte [rbp - 0x80]
test al, al
je 0x18000204b
lea rcx, [rbp - 0x80]
nop word [rax + rax]
cmp al, 0x5f
jne 0x180002041
movzx eax, byte [rcx + 1]
sub al, 0x30
cmp al, 9
ja 0x180002041
mov byte [rcx], dil
inc rcx
movzx eax, byte [rcx]
test al, al
jne 0x180002030
mov qword [rbx], rdi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], dil
lea rax, [rbp - 0x80]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x180002070
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.18000ca20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800020bf
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800020ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800020d0
call fcn.18003b9f4
mov rax, rbx
add rsp, 0x480
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180046fdc
int3