Function at 0x140083790
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [0x1400f7060]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor r12d, r12d
mov dword [rsp + 0x60], r12d
cmp qword [0x1400fbc30], r12
jne 0x140083f93
mov qword [rbp + 0x128], r12
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], 7
mov word [rbp + 0x128], r12w
lea r8d, [r12 + 0x11]
lea rdx, str.dllblacklist.json
lea rcx, [rbp + 0x128]
call fcn.1400043e0
nop
mov dl, 1
lea rcx, [rsp + 0x70]
call fcn.14007c810
nop
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14002acd0
nop
lea rcx, [rsp + 0x70]
call fcn.140003e50
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.1400130f0
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp - 0x60]
call fcn.140009b70
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.1400130f0
nop
lea rcx, [rbp - 0x60]
call fcn.140003e50
nop
lea rcx, [rbp - 0x20]
call fcn.140003e50
nop
lea rcx, [rbp + 0x128]
call fcn.140003e50
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x180]
call fcn.14009ba90
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 8
cmovae rdx, qword [rbp + 0x148]
mov dword [rsp + 0x20], 1
lea r9d, [r12 + 0x40]
lea r8d, [r12 + 1]
lea rcx, [rbp + 0x180]
call fcn.14001d120
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x17c], edx
cmp qword [rbp + 0x210], r12
je 0x140083eff
mov qword [rbp + 0x48], r12
mov byte [rsp + 0x20], r12b
xor r9d, r9d
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x70]
call fcn.1400679c0
movzx edx, byte [0x1400fbd00]
movzx ecx, byte [rax]
mov byte [0x1400fbd00], cl
mov byte [rax], dl
lea rcx, [rax + 8]
mov rdx, qword [0x1400fbd08]
mov r8, qword [rcx]
mov qword [0x1400fbd08], r8
mov qword [rcx], rdx
movzx edx, byte [rax]
call fcn.14007d5c0
nop
cmp byte [0x1400fbd00], 1
jne 0x140083eff
mov rbx, qword [0x1400fbd08]
mov rbx, qword [rbx]
lea rax, [rbx + 8]
mov qword [rsp + 0x60], rax
mov rdi, qword [rax]
mov r15, rbx
lea edx, [r12 + 9]
cmp byte [rdi + 0x19], r12b
jne 0x140083a34
nop dword [rax]
lea rsi, [rdi + 0x20]
mov r14, qword [rsi + 0x10]
mov rcx, rsi
mov r13, qword [rsi + 0x18]
cmp r13, 0x10
jb 0x1400839b8
mov rcx, qword [rsi]
mov r12, r14
cmp r14, 9
cmova r12, rdx
mov r8, r12
lea rdx, str.blacklist
call fcn.14009bcb0
test eax, eax
je 0x140083a02
js 0x140083a08
cmp byte [r15 + 0x19], 0
je 0x140083a17
cmp r13, 0x10
jb 0x1400839e8
mov rsi, qword [rsi]
mov r8, r12
lea rdx, str.blacklist
mov rcx, rsi
call fcn.14009bcb0
test eax, eax
je 0x140083a0e
jle 0x140083a17
jmp 0x140083a14
cmp r14, 9
jae 0x1400839d8
mov rdi, qword [rdi + 0x10]
jmp 0x140083a1d
cmp r14, 0xa
jb 0x140083a17
mov r15, rdi
mov rbx, rdi
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], 0
mov edx, 9
je 0x1400839a0
mov rax, qword [rsp + 0x60]
xor r12d, r12d
cmp byte [r15 + 0x19], 0
cmove rax, r15
mov rdi, qword [rax]
cmp byte [rdi + 0x19], 0
jne 0x140083a8e
nop word [rax + rax]
lea rcx, [rdi + 0x20]
mov rsi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140083a62
mov rcx, qword [rcx]
mov r8, rsi
cmp rsi, 9
cmova r8, rdx
lea rdx, str.blacklist
call fcn.14009bcb0
test eax, eax
je 0x140083acf
jg 0x140083ad5
mov rdi, qword [rdi + 0x10]
cmp byte [rdi + 0x19], 0
mov edx, 9
je 0x140083a50
mov rdx, r12
cmp rbx, r15
je 0x140083eff
nop word [rax + rax]
inc rdx
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140083add
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140083aca
cmp rbx, qword [rax + 0x10]
jne 0x140083aca
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140083ab7
mov rbx, rax
jmp 0x140083aff
cmp rsi, 0xa
jb 0x140083a7f
mov r15, rdi
mov rdi, qword [rdi]
jmp 0x140083a83
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140083aff
nop dword [rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140083af0
cmp rbx, r15
jne 0x140083aa0
test rdx, rdx
je 0x140083eff
lea rdx, str.blacklist
lea rcx, [0x1400fbd00]
call fcn.14005d990
cmp byte [rax], 2
jne 0x140083eff
lea rdx, str.blacklist
lea rcx, [0x1400fbd00]
call fcn.14005d990
mov rbx, rax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x128], xmm1
mov qword [rbp + 0x138], r12
mov dword [rsp + 0x60], 0x13e
mov rcx, rax
cmp byte [rax], 2
jne 0x140083fc9
movzx r8d, byte [rsp + 0x58]
lea rdx, [rbp + 0x128]
call fcn.140065180
nop
mov esi, 0xbe
mov r15, qword [rbp + 0x128]
mov rdi, r15
mov r14, qword [rbp + 0x130]
cmp r15, r14
je 0x140083e60
lea r13, str.black_listed_file:_
nop
lea rcx, [rbp + 0xf8]
call fcn.140074770
mov rax, qword [rax]
cmp dword [rax], 0
je 0x140083d9c
mov rax, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140083bc5
mov rax, qword [rdi]
mov qword [rbp], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x170], xmm0
mov qword [rbp - 0x30], 0xc
lea rax, [rbp + 0x170]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0x15
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140094ec0
bts esi, 9
or esi, 1
mov dword [rsp + 0x60], esi
lea rbx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rbx, qword [rsp + 0x70]
movdqa xmm0, xmmword [0x1400d1e10]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], 0x6e
movdqa xmm0, xmmword [str._DLLPROTECT__::_PerformSecurityCLoadLibraryExA_HLoadLibraryExW_HWinVerifyTrust_Hget_module_path_GenericLoadLibraVerifyEmbeddedSiLoadLibraryA_HooLoadLibraryW_HooreadBlacklistJsoDumpDllProtEventK]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x10], 0
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xd0]
call fcn.14005de70
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400675a0
mov rdx, rax
movzx ecx, byte [rax]
mov byte [rsp + 0x30], cl
movzx ecx, byte [rax + 1]
mov byte [rsp + 0x31], cl
movzx ecx, byte [rax + 2]
mov byte [rsp + 0x32], cl
movzx ecx, byte [rax + 3]
mov byte [rsp + 0x33], cl
movzx ecx, byte [rax + 4]
mov byte [rsp + 0x34], cl
movzx ecx, byte [rax + 5]
mov byte [rsp + 0x35], cl
movzx ecx, byte [rax + 6]
mov byte [rsp + 0x36], cl
movzx eax, byte [rax + 7]
mov byte [rsp + 0x37], al
movzx eax, byte [rdx + 8]
mov byte [rsp + 0x38], al
movzx eax, byte [rdx + 9]
mov byte [rsp + 0x39], al
movzx eax, byte [rdx + 0xa]
mov byte [rsp + 0x3a], al
movzx eax, byte [rdx + 0xb]
mov byte [rsp + 0x3b], al
movzx eax, byte [rdx + 0xc]
mov byte [rsp + 0x3c], al
movzx eax, byte [rdx + 0xd]
mov byte [rsp + 0x3d], al
movzx eax, byte [rdx + 0xe]
mov byte [rsp + 0x3e], al
movzx eax, byte [rdx + 0xf]
mov byte [rsp + 0x3f], al
movzx eax, byte [rdx + 0x10]
mov byte [rsp + 0x40], al
movzx eax, byte [rdx + 0x11]
mov byte [rsp + 0x41], al
movzx eax, byte [rdx + 0x12]
mov byte [rsp + 0x42], al
movzx eax, byte [rdx + 0x13]
mov byte [rsp + 0x43], al
movzx eax, byte [rdx + 0x14]
mov byte [rsp + 0x44], al
movzx eax, byte [rdx + 0x15]
mov byte [rsp + 0x45], al
movzx eax, byte [rdx + 0x16]
mov byte [rsp + 0x46], al
movzx eax, byte [rdx + 0x17]
mov byte [rsp + 0x47], al
movzx eax, byte [rdx + 0x18]
mov byte [rsp + 0x48], al
movzx eax, byte [rdx + 0x19]
mov byte [rsp + 0x49], al
movzx eax, byte [rdx + 0x1a]
mov byte [rsp + 0x4a], al
movzx eax, byte [rdx + 0x1b]
mov byte [rsp + 0x4b], al
movzx eax, byte [rdx + 0x1c]
mov byte [rsp + 0x4c], al
movzx eax, byte [rdx + 0x1d]
mov byte [rsp + 0x4d], al
movzx eax, byte [rdx + 0x1e]
mov byte [rsp + 0x4e], al
movzx eax, byte [rdx + 0x1f]
mov byte [rsp + 0x4f], al
movzx eax, byte [rdx + 0x20]
mov byte [rsp + 0x50], al
mov dword [rsp + 0x51], 0x2d202928
mov word [rsp + 0x55], 0x20
mov r9, rbx
xor r8d, r8d
lea rdx, [rsp + 0x30]
xor ecx, ecx
call fcn.14007c2b0
nop
test sil, 1
je 0x140083de1
and esi, 0xfffffffe
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140083de1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140083ddc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140084020
call fcn.14005be00
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140083dee
mov rdx, qword [rdi]
lea rcx, [rsp + 0x70]
call fcn.140087610
bts esi, 0xa
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x50]
lea rcx, [0x1400fbc28]
call fcn.140066e60
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140083e53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140083e4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140083fc3
call fcn.14005be00
add rdi, 0x20
cmp rdi, r14
jne 0x140083ba0
test r15, r15
je 0x140083eff
mov rbx, r15
cmp r15, r14
je 0x140083ec3
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140083eab
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140083ea6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14008401a
mov rcx, r8
call fcn.14005be00
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x20
cmp rbx, r14
jne 0x140083e71
mov rdx, qword [rbp + 0x138]
sub rdx, r15
and rdx, 0xffffffffffffffe0
mov rax, r15
cmp rdx, 0x1000
jb 0x140083ef6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008401a
mov rcx, r15
call fcn.14005be00
nop
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x17c], edx
lea rcx, [rbp + 0x190]
call fcn.140011980
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x17c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x230]
call fcn.1400350a8
nop
lea rcx, [rbp + 0x148]
call fcn.140003e50
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14005bde0
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400a8018
nop
call fcn.140087990
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.1400041f0
nop
mov r8, rax
lea rdx, str.type_must_be_array__but_is
lea rcx, [rbp + 0xb0]
call fcn.140004c20
nop
mov r9, rbx
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x10]
call fcn.1400644f0
lea rdx, [0x1400f52d0]
lea rcx, [rbp + 0x10]
call fcn.14009b2e4
nop
call fcn.1400a8018
nop
call fcn.1400a8018
int3