Function at 0x140030a44
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x12f30
call fcn.14004d4a0
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x12f88], rbx
mov rax, qword [0x14005b870]
xor rax, rsp
mov qword [rsp + 0x12f20], rax
mov rbx, r8
mov rsi, rdx
mov rbp, rcx
mov qword [rsp + 0x50], rcx
xor r12d, r12d
mov r14d, r12d
mov dword [rsp + 0x44], r12d
mov rdx, rcx
lea rcx, [rsp + 0x8bb0]
call fcn.140009368
nop
mov rdx, rbp
lea rcx, [rsp + 0xa0]
call fcn.140009368
nop
mov r8, rbx
mov rdx, rsi
lea rcx, [rsp + 0x8bb0]
call fcn.14001aab8
lea r13d, [r12 + 1]
mov byte [rsp + 0x8bc9], r13b
mov word [rsp + 0x11ee0], r12w
mov word [rsp + 0x12700], r12w
lea rcx, [rsp + 0x11ad0]
lea r15, [0x140000000]
mov eax, dword [r15 + 0x51f3c]
mov dword [rcx], eax
movzx eax, word [r15 + 0x51f40]
mov word [rcx + 4], ax
mov al, byte [r15 + 0x51f42]
mov byte [rcx + 6], al
mov rcx, rsi
call fcn.140027f88
mov r11, rax
lea rdi, [rsp + 0x11ad0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
sub rdi, r13
xor edx, edx
mov cl, byte [r11 + rdx]
mov byte [rdi + rdx], cl
add rdx, r13
test cl, cl
jne 0x140030b3b
xor edx, edx
lea rcx, [rsp + 0x11ad0]
call fcn.140028fd0
lea rdx, [rsp + 0x116c0]
mov rax, qword [r15 + 0x51f30]
mov qword [rdx], rax
mov al, byte [r15 + 0x51f38]
mov byte [rdx + 8], al
mov rcx, rsi
call fcn.140027f88
mov r11, rax
lea rdi, [rsp + 0x116c0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
sub rdi, r13
xor edx, edx
mov cl, byte [r11 + rdx]
mov byte [rdi + rdx], cl
add rdx, r13
test cl, cl
jne 0x140030b94
lea rdx, [0x1400507e4]
mov rcx, rsi
call fcn.140028408
cmp al, r12b
jne 0x140030bca
lea rdx, [0x1400507e0]
mov rcx, rsi
call fcn.140028408
cmp al, r12b
je 0x140030bde
lea rdx, [0x1400507dc]
lea rcx, [rsp + 0x116c0]
call fcn.140029d44
xor edx, edx
lea rcx, [rsp + 0x116c0]
call fcn.140028fd0
cmp word [rbx], r12w
je 0x140030cef
mov rcx, r12
movzx eax, word [rcx + r15 + 0x51f20]
mov word [rsp + rcx + 0x12700], ax
add rcx, 2
cmp ax, r12w
jne 0x140030bfa
mov rcx, rbx
call fcn.140028020
mov r11, rax
lea rdi, [rsp + 0x12700]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x140030c33
xor edx, edx
lea rcx, [rsp + 0x12700]
call fcn.140027b8c
mov rdx, r12
movzx eax, word [rdx + r15 + 0x51f08]
mov word [rsp + rdx + 0x11ee0], ax
add rdx, 2
cmp ax, r12w
jne 0x140030c58
mov rcx, rbx
call fcn.140028020
mov r11, rax
lea rdi, [rsp + 0x11ee0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor ecx, ecx
movzx edx, word [r11 + rcx]
mov word [rdi + rcx - 2], dx
add rcx, 2
test dx, dx
jne 0x140030c91
lea rdx, [0x140051ae8]
mov rcx, rbx
call fcn.140028444
cmp al, r12b
jne 0x140030ccc
lea rdx, [0x140051af0]
mov rcx, rbx
call fcn.140028444
cmp al, r12b
je 0x140030ce0
lea rdx, [0x140051ae0]
lea rcx, [rsp + 0x11ee0]
call fcn.140029dc8
xor edx, edx
lea rcx, [rsp + 0x11ee0]
call fcn.140027b8c
mov dword [rsp + 0x38], r12d
movabs rdi, 0x7fffffff7fffffff
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x3924]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x12700]
lea r8, [rsp + 0x11ad0]
lea rdx, [rsp + 0xa0]
mov rcx, rbp
call fcn.140019cb8
cmp al, r12b
jne 0x140030d8b
mov dil, byte [rsp + 0x40]
cmp dil, r12b
jne 0x140030d78
mov edx, 9
lea rcx, [0x140067098]
call fcn.140015a70
lea r8, [rsp + 0x12700]
lea rdx, [rsp + 0x11ad0]
lea rcx, [0x140067098]
call fcn.14001611c
mov dil, byte [rsp + 0x40]
lea rcx, [rsp + 0xa0]
call fcn.140001f44
nop
jmp 0x140031790
mov ebx, 0xdda
mov ecx, ebx
call fcn.140032268
mov rcx, rax
lea rdx, [rsp + 0x11ad0]
call fcn.140011f74
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x8bb0]
call fcn.14002ff74
cmp eax, r12d
jne 0x140030df7
lea rcx, [rsp + 0xa0]
call fcn.14001a404
cmp rax, r12
jle 0x140030de1
lea rcx, [rsp + 0xa0]
call fcn.14001a120
nop
lea rcx, [rsp + 0xa0]
call fcn.140001f44
nop
mov dil, r13b
jmp 0x140031790
cmp eax, 2
jne 0x140030e51
lea rcx, [rsp + 0xa0]
call fcn.14001a120
cmp byte [rbp + 0x3974], r12b
jne 0x140030e63
mov ecx, 0xdee
call fcn.140032268
mov rcx, rax
call fcn.140011fc8
mov ecx, 0xbba
call fcn.140032268
mov rcx, rax
call fcn.1400121e8
cmp eax, r13d
je 0x140030e63
lea rcx, [rsp + 0xa0]
call fcn.140001f44
nop
mov dil, r13b
jmp 0x140031790
cmp eax, r13d
jne 0x140030e63
lea rcx, [rsp + 0xa0]
call fcn.14001a1d8
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x8bb0]
call fcn.14001ab00
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x3924]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x11ee0]
lea r8, [rsp + 0x116c0]
lea rdx, [rsp + 0xa0]
mov rcx, rbp
call fcn.140019cb8
cmp al, r12b
jne 0x140030f0c
mov al, byte [rsp + 0x40]
cmp al, r12b
jne 0x140030ef2
mov edx, 9
lea rcx, [0x140067098]
call fcn.140015a70
lea r8, [rsp + 0x11ee0]
lea rdx, [rsp + 0x116c0]
lea rcx, [0x140067098]
call fcn.14001611c
mov al, byte [rsp + 0x40]
cmp al, r12b
sete dil
lea rcx, [rsp + 0xa0]
call fcn.140001f44
nop
jmp 0x140031790
lea rcx, [rsp + 0x8bb0]
call fcn.14001a404
mov rdi, rax
mov ecx, 0xdd8
call fcn.140032268
mov rcx, rax
mov rdx, rsi
call fcn.140011f74
mov ecx, ebx
call fcn.140032268
mov rcx, rax
lea rdx, [rsp + 0x116c0]
call fcn.140011f74
mov byte [rsp + 0x41], r12b
xor edx, edx
lea rcx, [rsp + 0x8bb0]
call fcn.140007264
cmp al, r12b
je 0x140030fc1
mov byte [rsp + 0x41], r13b
movzx ecx, word [rsp + 0xe380]
mov word [rsp + 0x5870], cx
movzx eax, word [rsp + 0xe382]
mov word [rsp + 0x5872], ax
cmp byte [rsp + 0x10a80], r12b
je 0x140030fc9
mov ecx, 0xddc
call fcn.140032268
mov rdx, rax
lea rcx, [rsp + 0x8bcf]
call fcn.140012848
nop
lea rcx, [rsp + 0xa0]
call fcn.140001f44
nop
mov dil, r13b
jmp 0x140031790
mov cx, word [rsp + 0x5870]
mov dword [rsp + 0x5878], r12d
mov word [rsp + 0x5874], r12w
mov eax, 0xff9f
and cx, ax
mov word [rsp + 0x5870], cx
xor r8d, r8d
lea edx, [r8 + 0x72]
lea rcx, [rsp + 0xa0]
call fcn.140007938
xor r8d, r8d
lea edx, [r8 + 0x73]
lea rcx, [rsp + 0xa0]
call fcn.140007938
mov rdx, qword [rsp + 0x10a70]
add rdx, 0xd
xor r8d, r8d
lea rcx, [rsp + 0x8bb0]
call fcn.14001ab00
movzx edx, word [rsp + 0x5872]
sub edx, 0xd
movsxd r8, edx
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x8bb0]
call fcn.14001af04
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x8bb0]
call fcn.14001ab00
mov edx, 0x10000
lea rcx, [rsp + 0x58]
call fcn.140006ce4
nop
mov rsi, r12
mov rbx, qword [rsp + 0x60]
mov r8, rbx
mov r12, qword [rsp + 0x58]
mov rdx, r12
lea rcx, [rsp + 0x8bb0]
call fcn.14001ad3c
lea r13, [rbx - 0x1000]
mov r15, r13
lea rax, [rdi - 0x20]
mov qword [rsp + 0x48], rax
mov r11d, 0x100
mov rbp, rbx
mov r8d, 1
mov eax, dword [0x140067cf8]
add eax, r8d
mov dword [0x140067cf8], eax
test eax, 0xfffff
jne 0x1400310dc
call fcn.1400372f8
mov r8d, 1
mov r11d, 0x100
xor edx, edx
mov rax, rsi
div r13
lea rbx, [r12 + rdx]
movzx ecx, byte [rbx + 2]
mov dword [rsp + 0x5884], ecx
movzx edx, byte [rbx + 6]
imul dx, r11w
movzx eax, byte [rbx + 5]
add dx, ax
mov word [rsp + 0x588a], dx
movzx edi, byte [rbx + 0x1b]
imul di, r11w
movzx eax, byte [rbx + 0x1a]
add di, ax
mov word [rsp + 0x58a2], di
cmp ecx, 0x74
jne 0x1400315e7
mov eax, 0x1000
cmp dx, ax
jae 0x1400315df
movzx eax, di
sub ax, r8w
mov ecx, 0x3fe
cmp ax, cx
ja 0x1400315d7
movzx ecx, byte [rbx + 1]
imul cx, r11w
movzx eax, byte [rbx]
add cx, ax
mov word [rsp + 0x5880], cx
movzx r10d, byte [rbx + 4]
imul r10w, r11w
movzx eax, byte [rbx + 3]
add r10w, ax
mov word [rsp + 0x5888], r10w
movzx r8d, byte [rbx + 0xa]
shl r8d, 8
movzx eax, byte [rbx + 9]
add r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 8]
add r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 7]
add r8d, eax
mov dword [rsp + 0x588c], r8d
movzx r9d, byte [rbx + 0xe]
shl r9d, 8
movzx eax, byte [rbx + 0xd]
add r9d, eax
shl r9d, 8
movzx eax, byte [rbx + 0xc]
add r9d, eax
shl r9d, 8
movzx eax, byte [rbx + 0xb]
add r9d, eax
mov dword [rsp + 0x5890], r9d
mov al, byte [rbx + 0xf]
mov byte [rsp + 0x5894], al
movzx ecx, byte [rbx + 0x13]
shl ecx, 8
movzx eax, byte [rbx + 0x12]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x11]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x10]
add ecx, eax
mov dword [rsp + 0x5898], ecx
movzx ecx, byte [rbx + 0x17]
shl ecx, 8
movzx eax, byte [rbx + 0x16]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x15]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x14]
add ecx, eax
mov dword [rsp + 0x589c], ecx
mov al, byte [rbx + 0x18]
mov byte [rsp + 0x58a0], al
mov al, byte [rbx + 0x19]
mov byte [rsp + 0x58a1], al
movzx ecx, byte [rbx + 0x1f]
shl ecx, 8
movzx eax, byte [rbx + 0x1e]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x1d]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x1c]
add ecx, eax
mov dword [rsp + 0x58a4], ecx
and r10w, r11w
je 0x1400312c4
movzx ecx, byte [rbx + 0x23]
shl ecx, 8
movzx eax, byte [rbx + 0x22]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x21]
add ecx, eax
shl ecx, 8
movzx eax, byte [rbx + 0x20]
add ecx, eax
mov dword [rsp + 0x58a8], ecx
movzx edx, byte [rbx + 0x27]
shl edx, 8
movzx eax, byte [rbx + 0x26]
add edx, eax
shl edx, 8
movzx eax, byte [rbx + 0x25]
add edx, eax
shl edx, 8
movzx eax, byte [rbx + 0x24]
add edx, eax
mov dword [rsp + 0x58ac], edx
xor r11d, r11d
jmp 0x1400312db
xor r11d, r11d
mov edx, r11d
mov dword [rsp + 0x58ac], edx
mov ecx, r11d
mov dword [rsp + 0x58a8], ecx
shl rcx, 0x20
mov eax, r8d
add rcx, rax
mov qword [rsp + 0x6560], rcx
mov ecx, edx
shl rcx, 0x20
mov eax, r9d
add rcx, rax
mov qword [rsp + 0x6568], rcx
mov eax, 0x20
cmp r10w, r11w
lea ecx, [rax + 8]
cmovne eax, ecx
movzx r8d, di
movsxd rdx, eax
add rdx, rbx
lea rcx, [rsp + 0x58b0]
call fcn.140040980
movzx edx, word [rsp + 0x5888]
mov eax, 0x200
test ax, dx
je 0x1400313ab
lea rcx, [rsp + 0x78]
call fcn.1400154e4
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x58b0]
repne scasb al, byte [rdi]
not rcx
mov eax, 1
sub rcx, rax
add rcx, rax
movzx r9d, word [rsp + 0x58a2]
sub r9, rcx
lea r8, [rsp + rcx + 0x58b0]
mov eax, 0x400
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x5cb0]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58b0]
lea rcx, [rsp + 0x78]
call fcn.140015530
mov dx, word [rsp + 0x5888]
xor r8d, r8d
jmp 0x1400313b7
xor r8d, r8d
mov word [rsp + 0x5cb0], r8w
movzx edi, dx
mov eax, 0x400
and di, ax
je 0x1400313f4
mov r11d, 0x100
test r11w, dx
mov ecx, 0x20
lea r10d, [rcx + 8]
cmovne rcx, r10
movzx eax, word [rsp + 0x58a2]
add rax, rcx
mov rax, qword [rax + rbx]
mov qword [rsp + 0x64c8], rax
jmp 0x140031400
mov r11d, 0x100
mov r10d, 0x28
movzx eax, word [rsp + 0x588a]
sub eax, 2
cmp eax, r8d
jle 0x1400315cb
mov r9d, 8
test byte [rsp + 0x5888], r9b
je 0x140031445
test r11w, dx
lea ecx, [r9 + 0x18]
cmovne ecx, r10d
cmp di, r8w
je 0x140031439
add ecx, r9d
movzx eax, word [rsp + 0x58a2]
lea eax, [rax + rcx - 2]
movsxd r8, eax
lea rdx, [rbx + 2]
or ecx, 0xffffffff
call fcn.140012914
not ax
mov word [rsp + 0x7f8a], ax
mov al, byte [rsp + 0x58a0]
sub al, 0xf
cmp al, 0x19
ja 0x1400314c5
mov al, byte [rsp + 0x58a1]
sub al, 0x30
cmp al, 8
ja 0x140031625
mov eax, 0x400
cmp word [rsp + 0x58a2], ax
ja 0x140031601
cmp byte [rsp + 0x5894], 0x20
ja 0x140031613
movzx eax, word [rsp + 0x58a2]
xor edi, edi
mov byte [rsp + rax + 0x58b0], dil
movzx eax, word [rsp + 0x5880]
cmp word [rsp + 0x7f8a], ax
sete al
jmp 0x1400314ca
xor edi, edi
mov al, dil
cmp al, dil
je 0x1400315ef
movzx edx, word [rsp + 0x588a]
add rdx, rsi
xor r8d, r8d
lea rcx, [rsp + 0x8bb0]
call fcn.14001ab00
movzx edx, word [rsp + 0x58a2]
mov byte [rsp + rdx + 0x58b0], dil
call fcn.1400372f8
cmp word [rsp + 0x5cb0], di
jne 0x14003151c
mov dl, 1
lea rcx, [rsp + 0x58b0]
call fcn.140028fd0
movzx ecx, word [rsp + 0x5888]
mov eax, ecx
btr eax, 0xc
mov ebx, dword [rsp + 0x44]
or ebx, eax
mov dword [rsp + 0x44], ebx
mov eax, 0x100
test ax, cx
mov eax, 0x20
lea edx, [rax + 8]
cmovne eax, edx
mov edx, 0x400
test dx, cx
je 0x140031554
add eax, 8
add ax, word [rsp + 0x58a2]
mov word [rsp + 0x588a], ax
lea rcx, [rsp + 0x58b0]
call fcn.140036e18
mov rdi, rax
mov ecx, 0xdde
call fcn.140032268
mov rcx, rax
mov rdx, rdi
call fcn.140011f74
inc r14d
xor r8d, r8d
lea edx, [r8 + 0x74]
lea rcx, [rsp + 0xa0]
call fcn.140007938
mov r8d, dword [rsp + 0x588c]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x8bb0]
call fcn.14001af04
xor edi, edi
lea r8d, [rdi + 1]
mov r11d, 0x100
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
lea r8d, [rdi + 1]
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
mov r8d, 1
mov r11d, 0x100
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
lea r8d, [rdi + 1]
mov r11d, 0x100
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
lea r8d, [rdi + 1]
mov r11d, 0x100
jmp 0x140031635
mov ebx, dword [rsp + 0x44]
xor edi, edi
lea r8d, [rdi + 1]
mov r11d, 0x100
add rsi, r8
cmp rsi, qword [rsp + 0x48]
jge 0x14003168a
xor edx, edx
mov rax, rsi
div r13
cmp rdx, rdi
jne 0x1400310b5
xor r8d, r8d
mov rdx, r15
lea rcx, [rsp + 0x8bb0]
call fcn.14001ab00
mov r8, rbp
mov rdx, r12
lea rcx, [rsp + 0x8bb0]
call fcn.14001ad3c
add r15, r13
mov r8d, 1
mov r11d, 0x100
jmp 0x1400310b5
test bl, 3
mov rbp, qword [rsp + 0x50]
je 0x14003169d
or word [rsp + 0x5870], r8w
cmp r14d, edi
jle 0x1400316fa
cmp byte [rsp + 0x41], dil
jne 0x1400316f3
cmp byte [rbp + 0x3974], dil
jne 0x1400316ec
mov ecx, 0xde0
call fcn.140032268
mov rcx, rax
call fcn.140011fc8
mov ecx, 0xbba
call fcn.140032268
mov rcx, rax
call fcn.1400121e8
mov ebx, 1
cmp eax, ebx
jne 0x1400316ff
lea eax, [rbx + 7]
or word [rsp + 0x5870], ax
jmp 0x1400316ff
mov ebx, 1
jmp 0x1400316ff
mov ebx, 1
jmp 0x1400316ff
mov ebx, 1
cmp r14d, edi
jne 0x140031729
mov ecx, 0xde2
call fcn.140032268
mov rcx, rax
call fcn.140011f74
mov edx, 0xa
lea rcx, [0x140067098]
call fcn.140015a70
jmp 0x140031771
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.14001ab00
xor r8d, r8d
lea edx, [r8 + 0x72]
lea rcx, [rsp + 0xa0]
call fcn.140007938
xor r8d, r8d
lea edx, [r8 + 0x73]
lea rcx, [rsp + 0xa0]
call fcn.140007938
lea rcx, [rsp + 0xa0]
call fcn.14001a120
nop
cmp r12, rdi
je 0x14003177f
mov rcx, r12
call fcn.140040644
nop
lea rcx, [rsp + 0xa0]
call fcn.140001f44
nop
mov dil, bl
lea rcx, [rsp + 0x8bb0]
call fcn.140001f44
mov al, dil
mov rcx, qword [rsp + 0x12f20]
xor rcx, rsp
call fcn.1400407f0
mov rbx, qword [rsp + 0x12f88]
add rsp, 0x12f30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret