Function at 0x180122b30
Capabilities:
Check for software breakpoints
Enumerate pe sections
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x180717100]
xor rax, rsp
mov qword [rbp + 0x78], rax
xor r14d, r14d
lea rdx, [rbp - 0x68]
call fcn.1801275a0
nop
lea rdx, [0x18071e5c0]
lea rcx, [0x180719570]
call fcn.180281424
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180122ba0
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.18004af90
nop
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
inc rbx
cmp byte [rdx + rbx], 0
jne 0x180122bd6
mov r8, rbx
lea rcx, [rsp + 0x58]
call fcn.18004af90
nop
lea rcx, [rsp + 0x58]
call fcn.18016d4b0
mov rbx, rax
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x180122c37
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180122c32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180123394
call fcn.18027f3e4
movdqa xmm0, xmmword [0x180339840]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
test rbx, rbx
jne 0x180122e55
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
mov r13, qword [rbp - 0x38]
sub rax, r13
cmp rax, 0x16
jb 0x18012339a
lea r9, [rbp - 0x48]
mov rsi, qword [rbp - 0x48]
mov r15, qword [rbp - 0x30]
cmp r15, 0xf
cmova r9, rsi
mov qword [rsp + 0x20], r9
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
lea r12, [r13 + 0x16]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp - 8]
cmp r12, rbx
jbe 0x180122d2a
mov rbx, r12
or rbx, 0xf
cmp rbx, rdx
jbe 0x180122ce7
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18027f030
test rax, rax
je 0x1801233a0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180122d21
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x180122d01
mov rdi, r14
jmp 0x180122d26
cmp rcx, 0x1000
jb 0x180122d19
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180123388
jmp 0x180122cc8
call fcn.18027f030
mov rdi, rax
mov r9, qword [rsp + 0x20]
mov qword [rbp - 8], rdi
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], rbx
movups xmm0, xmmword [str.Assure_Sig_not_valid__]
movups xmmword [rdi], xmm0
mov ecx, dword [0x180310f38]
mov dword [rdi + 0x10], ecx
movzx eax, word [0x180310f3c]
mov word [rdi + 0x14], ax
lea rcx, [rdi + 0x16]
mov r8, r13
mov rdx, r9
call fcn.1802bfb00
mov byte [rdi + r12], 0
mov r8d, 1
lea rdx, [0x18030e258]
lea rcx, [rbp - 8]
call fcn.18004cc50
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x180122de4
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180122ddf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233a0
call fcn.18027f3e4
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r8, qword [rsp + 0x78]
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
xor ecx, ecx
mov r9d, select
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1801232e3
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180122e4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233a6
call fcn.18027f3e4
jmp 0x1801232e3
add rbx, 5
mov edi, 0x5a4d
nop
movzx eax, byte [rbx]
cmp al, 0xe8
je 0x180122e70
cmp al, 0xcc
je 0x180122e60
inc rbx
jmp 0x180122e60
lea r13, [rbx + 1]
mov r12d, dword [r13]
add r12, 5
add r12, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r15, rax
cmp word [rax], di
jne 0x180122eec
movsxd rsi, dword [rax + 0x3c]
add rsi, rax
cmp dword [rsi], 0x4550
jne 0x180122eec
test rsi, rsi
je 0x180122eec
movzx ebx, word [rsi + 0x14]
add rbx, 0x18
add rbx, rsi
mov edi, r14d
cmp r14w, word [rsi + 6]
jae 0x180122ee7
nop dword [rax + rax]
mov r8d, 8
mov rdx, rbx
lea rcx, str..text
call fcn.180298c90
test eax, eax
je 0x180122f00
inc edi
add rbx, 0x28
movzx eax, word [rsi + 6]
cmp edi, eax
jl 0x180122ec0
mov edi, 0x5a4d
mov rcx, r14
mov rax, r14
test r12b, 0xf
je 0x180122f10
mov rbx, r13
jmp 0x180122e60
mov ecx, dword [rbx + 8]
mov eax, dword [rbx + 0xc]
add rax, r15
mov edi, 0x5a4d
jmp 0x180122ef2
cmp r12, rax
jb 0x180122f1d
add rax, rcx
cmp r12, rax
jb 0x180122f25
mov rbx, r13
jmp 0x180122e60
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov rdx, r12
lea rcx, [rbp + 0x58]
call fcn.18014a8b0
mov qword [rsp + 0x28], rax
movabs rdx, 0x7fffffffffffffff
mov rcx, rdx
mov r13, qword [rbp - 0x38]
sub rcx, r13
cmp rcx, 0x14
jb 0x1801233ac
lea r9, [rbp - 0x48]
mov rsi, qword [rbp - 0x48]
mov r15, qword [rbp - 0x30]
cmp r15, 0xf
cmova r9, rsi
mov qword [rsp + 0x20], r9
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea r8, [r13 + 0x14]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp - 0x28]
cmp r8, rbx
jbe 0x18012301f
mov rbx, r8
or rbx, 0xf
cmp rbx, rdx
jbe 0x180122fd8
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18027f030
test rax, rax
je 0x1801233c4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180123012
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x180122ff2
mov rdi, r14
jmp 0x18012301b
cmp rcx, 0x1000
jb 0x18012300a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18012338e
jmp 0x180122fb9
call fcn.18027f030
mov rdi, rax
mov r9, qword [rsp + 0x20]
lea r8, [r13 + 0x14]
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x18], r8
mov qword [rbp - 0x10], rbx
movups xmm0, xmmword [str.Assure_function_for]
movups xmmword [rdi], xmm0
mov ecx, dword [0x180310f78]
mov dword [rdi + 0x10], ecx
lea rcx, [rdi + 0x14]
mov r8, r13
mov rdx, r9
call fcn.1802bfb00
mov byte [rdi + r13 + 0x14], 0
mov r8d, 0xa
lea rdx, str._found_at
lea rcx, [rbp - 0x28]
call fcn.18004cc50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r14
mov byte [rax], 0
mov r9, qword [rsp + 0x28]
lea r8, [rbp + 0x38]
lea rcx, [rbp + 0x18]
call fcn.180058360
nop
mov r8d, 6
lea rdx, str._Sig:
lea rcx, [rbp + 0x18]
call fcn.18004cc50
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
mov r8, qword [rbp - 0x58]
lea rcx, [rsp + 0x58]
call fcn.18004cc50
xorps xmm0, xmm0
lea rbx, [rsp + 0x38]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov qword [rbp - 0x80], r14
mov ecx, 0x20
call fcn.18027f030
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], 0x18
mov qword [rbp - 0x70], 0x1f
movups xmm0, xmmword [str.Actor::resolveAssureFunc]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x180310f58]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0
lea rcx, [rsp + 0x78]
call fcn.18003cb40
mov rcx, rbx
call fcn.18003cb40
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1801231b7
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801231b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233b2
call fcn.18027f3e4
movdqa xmm0, xmmword [0x180339840]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x18012320d
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180123200
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233b8
call fcn.18027f3e4
movdqa xmm0, xmmword [0x180339840]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x180123259
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18012324c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233be
call fcn.18027f3e4
movdqa xmm0, xmmword [0x180339840]
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18012329c
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18012328f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233c4
call fcn.18027f3e4
movdqa xmm0, xmmword [0x180339840]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x1801232e0
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801232db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233ca
call fcn.18027f3e4
mov r14, r12
cmp r15, 0xf
jbe 0x18012331b
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180123312
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801233d0
mov rcx, rsi
call fcn.18027f3e4
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x180123352
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18012334d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180123382
call fcn.18027f3e4
mov rax, r14
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.18027f010
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18028d834
nop
call fcn.18003c8b0
nop
call fcn.18003c8b0
nop
call fcn.18028d834
int3
call fcn.18003c950
int3
call fcn.18028d834
int3
call fcn.18028d834
nop
call fcn.18003c950
nop
call fcn.18028d834
nop
call fcn.18028d834
nop
call fcn.18028d834
nop
call fcn.18028d834
nop
call fcn.18028d834
nop
call fcn.18028d834
int3