Function at 0x180001070
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x20
movsxd rdi, dword [rcx + 0x3c]
mov eax, 0x20b
add rdi, rcx
mov r15, rcx
cmp word [rdi + 0x18], ax
jne 0x180001259
movzx ebx, word [rdi + 0x14]
xor r12d, r12d
mov r8d, dword [rdi + 0x88]
add rbx, 0x18
add rbx, rdi
mov esi, dword [rbx + 0x14]
cmp r8d, esi
jb 0x180001111
movzx r11d, word [rdi + 6]
movzx edx, r12w
cmp r12w, r11w
jae 0x18000110e
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rbx + rcx*8 + 0xc]
lea r9, [rbx + rcx*8]
cmp r8d, r10d
jb 0x180001105
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x18000127a
inc dx
cmp dx, r11w
jb 0x1800010e0
mov r8d, r12d
mov ebp, r8d
add rbp, r15
mov r8d, dword [rbp + 0x20]
cmp r8d, esi
jb 0x180001161
movzx r11d, word [rdi + 6]
movzx edx, r12w
cmp r12w, r11w
jae 0x18000115e
nop
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rbx + rcx*8 + 0xc]
lea r9, [rbx + rcx*8]
cmp r8d, r10d
jb 0x180001155
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x180001289
inc dx
cmp dx, r11w
jb 0x180001130
mov r8d, r12d
mov r14d, r8d
mov r8d, dword [rbp + 0x24]
add r14, r15
cmp r8d, esi
jb 0x1800011b1
movzx r11d, word [rdi + 6]
movzx edx, r12w
cmp r12w, r11w
jae 0x1800011ae
nop
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rbx + rcx*8 + 0xc]
lea r9, [rbx + rcx*8]
cmp r8d, r10d
jb 0x1800011a5
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x180001298
inc dx
cmp dx, r11w
jb 0x180001180
mov r8d, r12d
mov edi, dword [rbp + 0x18]
mov esi, r8d
add rsi, r15
test edi, edi
je 0x180001259
nop dword [rax]
nop word [rax + rax]
movsxd rcx, dword [r15 + 0x3c]
lea rbx, [r15 + 0x18]
mov r8d, dword [r14]
add rbx, rcx
dec edi
movzx eax, word [rcx + r15 + 0x14]
add rbx, rax
cmp r8d, dword [rbx + 0x14]
jb 0x180001231
movzx r11d, word [rcx + r15 + 6]
movzx edx, r12w
cmp r12w, r11w
jae 0x18000122e
nop
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rbx + rcx*8 + 0xc]
lea r9, [rbx + rcx*8]
cmp r8d, r10d
jb 0x180001225
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x1800012a7
inc dx
cmp dx, r11w
jb 0x180001200
mov r8d, r12d
mov ecx, r8d
lea rdx, str.ReflectiveLoader
add rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800012b6
add r14, 4
add rsi, 2
test edi, edi
jne 0x1800011d0
xor eax, eax
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop r12
ret
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x180001111
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x180001161
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x1800011b1
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x180001231
movsxd rcx, dword [r15 + 0x3c]
lea rbx, [r15 + 0x18]
mov r8d, dword [rbp + 0x1c]
add rbx, rcx
movzx eax, word [rcx + r15 + 0x14]
add rbx, rax
cmp r8d, dword [rbx + 0x14]
jb 0x180001321
movzx r11d, word [rcx + r15 + 6]
movzx edx, r12w
cmp r12w, r11w
jae 0x18000131e
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rbx + rcx*8 + 0xc]
lea r9, [rbx + rcx*8]
cmp r8d, r10d
jb 0x180001315
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x180001395
inc dx
cmp dx, r11w
jb 0x1800012f0
mov r8d, r12d
movsxd r11, dword [r15 + 0x3c]
lea rbx, [r15 + 0x18]
movzx edx, word [rsi]
add rbx, r11
mov ecx, r8d
add rcx, r15
movzx eax, word [r11 + r15 + 0x14]
add rbx, rax
mov r8d, dword [rcx + rdx*4]
cmp r8d, dword [rbx + 0x14]
jb 0x18000138d
movzx r11d, word [r11 + r15 + 6]
movzx edx, r12w
cmp r12w, r11w
jae 0x18000138a
nop dword [rax + rax]
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rbx + rcx*8 + 0xc]
lea r9, [rbx + rcx*8]
cmp r8d, r10d
jb 0x180001381
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x1800013a4
inc dx
cmp dx, r11w
jb 0x180001360
mov r8d, r12d
mov eax, r8d
jmp 0x18000125b
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x180001321
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
mov eax, r8d
jmp 0x18000125b