Function at 0x180008970
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov rax, rsp
push rbp
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xb8
cmp byte [rcx + 0x4e8], 1
mov r14, rcx
jne 0x180008cd5
mov qword [rax + 0x18], rbx
lea rdx, str.panorama.dll
mov qword [rax - 0x18], rdi
lea rcx, [rbp + 0x6f]
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r15
mov qword [rax + 0x20], rsi
call fcn.180003a60
lea rdx, str.client.dll
lea rcx, [rbp + 0x67]
call fcn.180003a60
mov rdi, qword [rbp + 0x67]
xor esi, esi
mov r15d, 0x5a4d
test rdi, rdi
je 0x180008a44
cmp word [rdi], r15w
mov rax, rdi
cmovne rax, rsi
test rax, rax
je 0x180008a44
movsxd rdx, dword [rax + 0x3c]
add rdx, rdi
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180008a44
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180008a44
nop dword [rax + rax]
test dword [rcx + 0x24], 0x20000000
je 0x180008a3b
cmp dword [rcx], 0x7865742e
jne 0x180008a3b
cmp byte [rcx + 4], 0x74
je 0x180008c81
add rcx, 0x28
cmp rcx, rdx
jne 0x180008a20
mov rax, rsi
mov rdx, rsi
mov rbx, qword [rbp + 0x6f]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rdx
test rbx, rbx
je 0x180008ac4
cmp word [rbx], r15w
mov rax, rbx
cmovne rax, rsi
test rax, rax
je 0x180008ac4
movsxd rdx, dword [rax + 0x3c]
add rdx, rbx
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180008ac4
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180008ac4
nop dword [rax]
test dword [rcx + 0x24], 0x20000000
je 0x180008abb
cmp dword [rcx], 0x7865742e
jne 0x180008abb
cmp byte [rcx + 4], 0x74
je 0x180008c8f
add rcx, 0x28
cmp rcx, rdx
jne 0x180008aa0
mov rax, rsi
mov rdx, rsi
mov qword [rbp + 0xf], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.soundsystem.dll
mov qword [rbp + 7], rax
call fcn.180003a60
mov r8, qword [rax]
test r8, r8
je 0x180008b46
cmp word [r8], r15w
jne 0x180008b46
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180008b46
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180008b46
test dword [rcx + 0x24], 0x20000000
je 0x180008b3d
cmp dword [rcx], 0x7865742e
jne 0x180008b3d
cmp byte [rcx + 4], 0x74
je 0x180008c9d
add rcx, 0x28
cmp rcx, rdx
jne 0x180008b22
mov rax, rsi
mov rdx, rsi
mov qword [rbp - 0x21], rdx
lea rcx, [rbp + 0x67]
lea rdx, str.filesystem_stdio.dll
mov qword [rbp - 0x29], rax
call fcn.180003a60
mov r8, qword [rax]
test r8, r8
je 0x180008bc8
cmp word [r8], r15w
jne 0x180008bc8
movsxd rdx, dword [r8 + 0x3c]
add rdx, r8
cmp dword [rdx], 0x4550
cmovne rdx, rsi
test rdx, rdx
je 0x180008bc8
movzx ecx, word [rdx + 0x14]
movzx eax, word [rdx + 6]
add rcx, 0x18
add rcx, rdx
lea rax, [rax + rax*4]
lea rdx, [rcx + rax*8]
cmp rcx, rdx
je 0x180008bc8
test dword [rcx + 0x24], 0x20000000
je 0x180008bbf
cmp dword [rcx], 0x7865742e
jne 0x180008bbf
cmp byte [rcx + 4], 0x74
je 0x180008cab
add rcx, 0x28
cmp rcx, rdx
jne 0x180008ba4
mov rax, rsi
mov rdx, rsi
mov qword [rbp - 0x19], rax
lea rax, [rbp - 0x29]
mov qword [rbp - 9], rax
lea rax, [rbp - 0x19]
mov qword [rbp - 1], rax
mov qword [rbp - 0x11], rdx
add r14, 8
je 0x180008bf9
cmp byte [r14 + 0x4e0], 1
mov r12, r14
je 0x180008bfc
mov r12, rsi
mov rcx, r14
call fcn.180005ee0
lea rax, [rbp - 9]
mov byte [r14 + 0x4e0], 0xff
movups xmm0, xmmword [r12]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x27]
lea rax, [rbp - 0x29]
mov r9, rbx
mov qword [rsp + 0x30], rax
mov r8, rdi
lea rax, [rbp + 7]
movaps xmmword [rbp + 0x27], xmm0
mov qword [rsp + 0x28], rax
mov rcx, r14
lea rax, [rbp + 0x17]
mov qword [rsp + 0x20], rax
call fcn.180001d70
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xe0]
mov byte [r14 + 0x4e0], 2
test r14, r14
je 0x180008cb9
lea rcx, [r14 + 0x4c8]
jmp 0x180008cc1
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, rdi
jmp 0x180008a4a
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, rbx
jmp 0x180008aca
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, r8
jmp 0x180008b4c
mov eax, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
add rax, r8
jmp 0x180008bce
mov ecx, 0x4c8
mov r14, rsi
mov rdx, qword [r14 + 0x360]
call fcn.180008680
mov rsi, qword [rsp + 0xe8]
add rsp, 0xb8
pop r14
pop rbp
ret