Function at 0x180008470
Capabilities:
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x18003c080]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov rbx, rcx
mov qword [rbp - 0x20], rcx
cmp qword [rcx + 0x18], 8
jb 0x1800084bc
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rsi, rax
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x180008517
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000850e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008509
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008cef
mov rcx, r8
call fcn.18000b394
xor edi, edi
xor eax, eax
jmp 0x180008c83
xor eax, eax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [0x180036ff0]
movdqu xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x40], 0x676e6972
mov byte [rbp + 0x44], al
lea rdx, [rbp + 0x30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x1800085a1
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000850e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008509
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008cc5
jmp 0x180008506
mov r8, rbx
lea rcx, [rbp - 0x18]
call fcn.180009780
nop
lea rdx, [rbp - 0x18]
cmp qword [rbp], 8
cmovae rdx, qword [rbp - 0x18]
lea rcx, [rbp + 0x20]
call rdi
mov dword [rbp - 0x68], 0x30
xor edi, edi
mov qword [rbp - 0x60], rdi
mov dword [rbp - 0x50], 0x40
lea rax, [rbp + 0x20]
mov qword [rbp - 0x58], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x80], rdi
lea r8, [rbp - 0x68]
lea edx, [rdi + 0xc]
lea rcx, [rbp - 0x80]
call qword [0x18003e920]
mov rcx, qword [rbp - 0x80]
test eax, eax
jns 0x1800086a5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x18000864e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008649
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008cf5
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000869e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008699
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008cfb
mov rcx, r8
call fcn.18000b394
xor eax, eax
jmp 0x180008c83
mov qword [rbp - 0x78], rdi
mov qword [rbp + 0x18], rdi
mov dword [rsp + 0x48], 2
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], 1
lea rax, [rbp + 0x18]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp - 0x78]
lea rdx, [r9 - 1]
call qword [0x18003e928]
test eax, eax
jns 0x18000878d
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x180008738
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008733
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d01
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000869e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008699
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008ccb
jmp 0x180008696
xor eax, eax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
lea r9d, [rax + 0x18]
lea r8, [rbp - 0x38]
mov rdx, rsi
lea rcx, [rax - 1]
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
test eax, eax
jne 0x18000884d
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x1800087f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800087f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d07
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000869e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008699
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008cd1
jmp 0x180008696
mov r10, qword [rbp - 0x38]
movsxd rcx, dword [r10 + 0x3c]
mov r8, rdi
movzx r9d, word [rcx + r10 + 6]
test r9, r9
je 0x180008b14
movzx eax, word [rcx + r10 + 0x14]
lea rdx, [r10 + 0x18]
add rdx, rcx
add rdx, rax
lea r11, str..text
nop
mov rcx, rdi
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180008a13
cmp rcx, 6
jne 0x180008883
mov eax, dword [rdx + 0xc]
lea r12, [rax + r10]
mov r10, qword [rbp - 0x78]
add rax, r10
mov qword [rsp + 0x68], rax
mov r13d, dword [rdx + 8]
mov qword [rbp - 0x70], r12
mov qword [rbp + 0x10], r13
movdqa xmm0, xmmword [0x180036f80]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x6f6d654d
mov word [rsp + 0x64], 0x7972
mov byte [rsp + 0x66], dil
mov eax, 0x5a4d
cmp word [r10], ax
jne 0x180008953
movsxd rax, dword [r10 + 0x3c]
cmp dword [rax + r10], 0x4550
jne 0x180008953
mov esi, dword [rax + r10 + 0x88]
add rsi, r10
mov r9d, edi
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x180008953
mov r15d, dword [rsi + 0x20]
mov r14d, r9d
lea rax, [r15 + r14*4]
mov ecx, dword [rax + r10]
add rcx, r10
lea r8, [rsp + 0x50]
sub r8, rcx
nop word [rax + rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + r8]
sub edx, eax
jne 0x180008943
inc rcx
test eax, eax
jne 0x180008930
test edx, edx
je 0x180008a28
inc r9d
cmp r9d, r11d
jb 0x180008910
mov rsi, rdi
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffffffffffff
call rsi
test eax, eax
jns 0x180008a44
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x1800089be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800089b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d0d
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000869e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008699
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008cd7
jmp 0x180008696
inc r8
add rdx, 0x28
cmp r8, r9
jae 0x180008b14
jmp 0x180008880
mov ecx, dword [rsi + 0x24]
add rcx, r10
movzx edx, word [rcx + r14*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov esi, dword [rcx + rdx*4]
add rsi, r10
jmp 0x180008956
mov r8, r13
mov rdx, qword [rsp + 0x68]
mov rcx, r12
call fcn.18000ced0
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 8]
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffffffffffff
call rsi
test eax, eax
jns 0x180008b0f
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x180008aba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008ab5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d13
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000869e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008699
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008cdd
jmp 0x180008696
mov rsi, qword [rsp + 0x70]
movdqa xmm0, xmmword [0x180036f10]
movdqu xmmword [rbp + 0x48], xmm0
mov dword [rbp + 0x58], 0x6e6f6974
mov byte [rbp + 0x5c], dil
lea rdx, [rbp + 0x48]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [rbp - 0x78]
mov rcx, 0xffffffffffffffff
call rax
test eax, eax
jns 0x180008be3
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x180008b8e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008b89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008d19
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18000869e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008699
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008ce3
jmp 0x180008696
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x180008c2e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008c29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008cbf
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], di
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x180008c7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180008c79
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008ce9
mov rcx, r8
call fcn.18000b394
mov eax, 1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.18000b370
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180010e3c
nop
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
nop
call fcn.180010e3c
nop
call fcn.180010e3c
nop
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3