Function at 0x140003820
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rdi
push r12
push r14
sub rsp, 0x38
movzx eax, word [r9 + 0x14]
lea r10, [r9 + 0x18]
mov r11d, dword [r9 + 0x90]
add r10, rax
movzx eax, word [r9 + 6]
mov r14, r9
mov r12, r8
mov ebx, edx
mov rdi, rcx
lea r9, [rax + rax*4]
lea r8, [r10 + r9*8]
cmp r10, r8
jae 0x140003884
mov ecx, dword [r10 + 0xc]
cmp r11, rcx
jb 0x14000387b
mov eax, dword [r10 + 8]
add eax, ecx
cmp r11, rax
jb 0x14000390c
add r10, 0x28
cmp r10, r8
jb 0x140003863
xor eax, eax
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r15
test r11d, r11d
je 0x140003a79
cmp dword [r14 + 0x94], 0
je 0x140003a79
lea r13, [rax + 0x10]
nop word [rax + rax]
movzx r10d, word [r14 + 0x14]
movzx r8d, word [r14 + 6]
add r10, 0x18
mov r9d, dword [r13 - 4]
add r10, r14
mov rdx, r10
lea rax, [r8 + r8*4]
lea rcx, [r10 + rax*8]
cmp r10, rcx
jae 0x140003a79
mov ecx, dword [rdx + 0xc]
cmp r9, rcx
jb 0x1400038fb
mov eax, dword [rdx + 8]
add eax, ecx
cmp r9, rax
jb 0x14000391e
lea rcx, [r8 + r8*4]
add rdx, 0x28
lea rax, [r10 + rcx*8]
cmp rdx, rax
jmp 0x1400038e3
mov eax, dword [r10 + 0x14]
sub rax, rcx
add rax, r11
add rax, r12
jmp 0x140003886
mov ebp, dword [rdx + 0x14]
sub rbp, rcx
add rbp, r9
add rbp, r12
je 0x140003a79
mov r8, rbp
mov edx, ebx
mov rcx, rdi
call fcn.1400030c0
mov r15, rax
test rax, rax
je 0x140003a77
movzx r10d, word [r14 + 0x14]
movzx r8d, word [r14 + 6]
add r10, 0x18
mov r9d, dword [r13]
add r10, r14
mov rdx, r10
lea rax, [r8 + r8*4]
lea rcx, [r10 + rax*8]
cmp r10, rcx
jae 0x14000399f
mov ecx, dword [rdx + 0xc]
cmp r9, rcx
jb 0x140003980
mov eax, dword [rdx + 8]
add eax, ecx
cmp r9, rax
jb 0x140003991
lea rcx, [r8 + r8*4]
add rdx, 0x28
lea rax, [r10 + rcx*8]
cmp rdx, rax
jmp 0x14000396c
mov esi, dword [rdx + 0x14]
sub rsi, rcx
add rsi, r9
add rsi, r12
jmp 0x1400039a1
xor esi, esi
mov rax, qword [rsi]
test rax, rax
je 0x140003a6e
jns 0x1400039c7
movzx ebx, word [rsi]
xor edx, edx
mov r8d, 1
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edx, ebx
jmp 0x140003a33
movzx r10d, word [r14 + 0x14]
movzx r8d, word [r14 + 6]
add r10, 0x18
mov r9, qword [rsi]
add r10, r14
mov rax, r10
lea rcx, [r8 + r8*4]
lea rdx, [r10 + rcx*8]
cmp r10, rdx
jae 0x140003a1c
mov edx, dword [rax + 0xc]
cmp r9, rdx
jb 0x1400039fd
mov ecx, dword [rax + 8]
add ecx, edx
cmp r9, rcx
jb 0x140003a0e
lea rdx, [r8 + r8*4]
add rax, 0x28
lea rcx, [r10 + rdx*8]
cmp rax, rcx
jmp 0x1400039e9
mov ebx, dword [rax + 0x14]
sub rbx, rdx
add rbx, r9
add rbx, r12
jmp 0x140003a1e
xor ebx, ebx
xor edx, edx
mov r8d, 1
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
lea rdx, [rbx + 2]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov rcx, rdi
sub rbx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rax, [rbx + r15]
mov qword [rsi], rax
add rsi, 8
mov rax, qword [rsi]
test rax, rax
jne 0x1400039ad
mov ebx, dword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
add r13, 0x14
jmp 0x1400038c0
jmp 0x140003a7e
mov eax, 1
mov r15, qword [rsp + 0x20]
mov r13, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x70]
add rsp, 0x38
pop r14
pop r12
pop rdi
pop rbx
ret