Function at 0x180001bb0
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0x100
mov r15, rdx
mov rsi, rcx
lea rdx, str.tier0.dll
mov rbx, r8
lea rcx, [rbp + 0x47]
call fcn.180003000
mov rax, qword [rbp + 0x47]
mov rcx, rsi
mov r13, qword [rbp + 0x6f]
mov r14, qword [rbp + 0x67]
mov r8, r13
mov r12, qword [rbp + 0x87]
mov rdx, r14
mov r9, qword [rbp + 0x7f]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
call fcn.180002070
xor edi, edi
mov r8d, 0x5a4d
test rbx, rbx
je 0x180001c94
cmp word [rbx], r8w
mov rax, rbx
cmovne rax, rdi
test rax, rax
je 0x180001c94
movsxd rcx, dword [rax + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
cmovne rcx, rdi
test rcx, rcx
je 0x180001c94
movzx edx, word [rcx + 0x14]
movzx eax, word [rcx + 6]
add rdx, 0x18
add rdx, rcx
lea rax, [rax + rax*4]
lea rcx, [rdx + rax*8]
cmp rdx, rcx
je 0x180001c94
nop dword [rax]
test dword [rdx + 0x24], 0x20000000
je 0x180001c8b
cmp dword [rdx], 0x7865742e
jne 0x180001c8b
cmp byte [rdx + 4], 0x74
je 0x180001d72
add rdx, 0x28
cmp rdx, rcx
jne 0x180001c70
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
test rbx, rbx
je 0x180001d0b
cmp word [rbx], r8w
mov rax, rbx
cmovne rax, rdi
test rax, rax
je 0x180001d0b
movsxd rcx, dword [rax + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
cmovne rcx, rdi
test rcx, rcx
je 0x180001d0b
movzx eax, word [rcx + 0x14]
add rax, 0x18
add rax, rcx
movzx ecx, word [rcx + 6]
lea rcx, [rcx + rcx*4]
lea rdx, [rax + rcx*8]
cmp rax, rdx
je 0x180001d0b
test dword [rax + 0x24], 0x40000000
je 0x180001d02
cmp dword [rax], 0x6164722e
jne 0x180001d02
cmp word [rax + 4], 0x6174
je 0x180001d8a
add rax, 0x28
cmp rax, rdx
jne 0x180001ce5
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r15]
mov r9d, 0xa
lea r8, [0x180013bb0]
lea rdx, [rsp + 0x60]
mov rcx, r14
movups xmmword [rsi + 0x138], xmm0
mov qword [rsi + 0x148], rdi
call fcn.180005000
mov r8, qword [rsp + 0x60]
mov rdx, qword [rbp - 0x79]
test r8, r8
je 0x180001da2
add rdx, 3
test r8, r8
je 0x180001da2
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + rdx]
add rax, 4
add rax, qword [rsp + 0x68]
add rax, rdx
add rax, r8
jmp 0x180001da5
mov ecx, dword [rdx + 0xc]
mov eax, dword [rdx + 8]
add rcx, rbx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rax
jmp 0x180001c9e
mov edx, dword [rax + 0xc]
mov ecx, dword [rax + 8]
add rdx, rbx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rcx
jmp 0x180001d15
mov rax, rdi
movups xmm0, xmmword [rsp + 0x40]
mov qword [rsi + 0x150], rax
mov r9d, 0xd
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsi + 0x198], rdi
lea r8, [0x180013c40]
movups xmmword [rsi + 0x158], xmm0
lea rdx, [rsp + 0x60]
mov rcx, r14
movups xmmword [rsi + 0x168], xmm1
mov byte [rsi + 0x190], 0
mov qword [rsi + 0x1a0], rdi
call fcn.180005000
mov r8, qword [rsp + 0x60]
mov rdx, qword [rbp - 0x79]
test r8, r8
je 0x180001e24
add rdx, 3
test r8, r8
je 0x180001e24
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + rdx]
add rax, 4
add rax, qword [rsp + 0x68]
add rax, rdx
add rax, r8
jmp 0x180001e27
mov rax, rdi
movups xmm0, xmmword [rsp + 0x40]
mov qword [rsi + 0x1a8], rax
lea rdx, [rbp - 0x49]
mov rax, qword [rbp + 0x77]
lea rcx, [rbp + 0x5f]
movups xmmword [rsi + 0x1b0], xmm0
mov qword [rsi + 0x1f0], rdi
movups xmm0, xmmword [rsp + 0x50]
mov qword [rbp + 0x47], r14
mov qword [rbp + 0x67], r13
movups xmmword [rsi + 0x1c0], xmm0
mov byte [rsi + 0x1e8], 0
mov qword [rbp + 0x6f], rax
call fcn.180008480
lea rdx, [rbp - 0x21]
lea rcx, [rbp + 0x57]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rbp - 0x71], xmm0
mov qword [rbp - 0x51], rax
movups xmmword [rbp - 0x61], xmm1
call fcn.180008480
lea rcx, [rsi + 0x1f8]
mov r9, r12
lea r8, [rbp + 0x67]
lea rdx, [rbp + 0x47]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
mov qword [rbp - 0x79], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm1
call fcn.1800015d0
mov byte [rsi + 0x420], 0
mov eax, 0xffffffff
mov dword [rsi + 0x424], eax
mov dword [rsi + 0x42c], eax
mov dword [rsi + 0x434], eax
mov dword [rsi + 0x43c], eax
mov dword [rsi + 0x444], eax
mov dword [rsi + 0x44c], eax
mov dword [rsi + 0x458], eax
mov dword [rsi + 0x460], eax
mov dword [rsi + 0x470], eax
mov dword [rsi + 0x47c], eax
mov byte [rsi + 0x454], 0
mov byte [rsi + 0x468], 0
mov dword [rsi + 0x46a], 0xffffffff
mov byte [rsi + 0x478], 0
mov qword [rsi + 0x488], rdi
mov qword [rsi + 0x490], rdi
mov qword [rsi + 0x498], rdi
mov byte [rsi + 0x4a0], 0
mov dword [rsi + 0x4a4], eax
mov qword [rsi + 0x4b0], rdi
mov qword [rsi + 0x4b8], rdi
mov qword [rsi + 0x4c0], rdi
mov byte [rsi + 0x4c8], 0
mov dword [rsi + 0x4cc], eax
mov qword [rsi + 0x4d8], rdi
mov qword [rsi + 0x4e0], rdi
mov qword [rsi + 0x4e8], rdi
mov byte [rsi + 0x4f0], 0
mov dword [rsi + 0x4f4], eax
mov qword [rsi + 0x500], rdi
mov qword [rsi + 0x508], rdi
mov qword [rsi + 0x510], rdi
mov byte [rsi + 0x518], 0
mov dword [rsi + 0x51c], eax
mov qword [rsi + 0x528], rdi
mov qword [rsi + 0x530], rdi
mov qword [rsi + 0x538], rdi
mov byte [rsi + 0x540], 0
mov dword [rsi + 0x544], eax
mov rbx, qword [rsp + 0x148]
mov qword [rsi + 0x550], rdi
mov qword [rsi + 0x558], rdi
mov qword [rsi + 0x560], rdi
mov dword [rsi + 0x568], 0x10000
mov dword [rsi + 0x56c], 0x3010001
mov dword [rsi + 0x570], eax
mov qword [rsi + 0x578], rdi
mov qword [rsi + 0x580], rdi
mov qword [rsi + 0x588], rdi
mov dword [rsi + 0x590], eax
mov dword [rsi + 0x598], eax
mov dword [rsi + 0x5a0], eax
mov rax, rsi
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret