Function at 0x1400a2ae0
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
push rbp
sub rsp, 0x68
mov r15, rdx
mov rbx, r8
mov r13, rcx
mov rcx, r15
lea rdx, [rsp + 0x38]
mov r8d, Ordinal_52
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x1400a2bcb
mov rdi, qword [rsp + 0x40]
movzx eax, word [rdi]
cmp eax, 0x5a4d
jne 0x1400a2bcb
movsxd rdx, dword [rdi + 0x3c]
xor eax, eax
add rdx, rdi
xor ebp, ebp
xor r12d, r12d
movzx esi, word [rdx + 0x14]
movzx ecx, word [rdx + 6]
test ecx, ecx
lea rsi, [rdx + rsi + 0x18]
jbe 0x1400a2bcb
mov qword [rsp + 0x20], r15
mov r15d, eax
mov qword [rsp + 0x28], rbx
mov rbx, rdx
mov rcx, rsi
lea rdx, str..trace
mov r8d, 7
call fcn.14003eb70
test eax, eax
jne 0x1400a2b95
mov r14, rsi
mov ebp, 1
add rsi, 0x28
inc r15d
movzx ecx, word [rbx + 6]
cmp r15d, ecx
jae 0x1400a2c16
test ebp, ebp
je 0x1400a2b5c
test r12d, r12d
jne 0x1400a2bc2
mov rcx, rsi
lea rdx, str..text
mov r8d, 6
call fcn.14003eb70
test eax, eax
jne 0x1400a2bc2
mov r12d, 1
add rsi, 0x28
inc r15d
jmp 0x1400a2b84
add rsi, 0x28
inc r15d
jmp 0x1400a2b84
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov r15, qword [rsp + 0x20]
test ebp, ebp
mov rbx, qword [rsp + 0x28]
je 0x1400a2bcb
mov eax, dword [r14 + 8]
cmp rax, 0x1a
jb 0x1400a2bcb
mov edx, dword [r14 + 0xc]
add rdi, rdx
add rdi, rbx
xor r12d, r12d
mov r14, rdi
jmp 0x1400a2c43
add rdi, rsi
movzx edx, byte [rdi]
test edx, edx
jne 0x1400a2c54
mov esi, 1
jmp 0x1400a3056
cmp edx, 0xa
jne 0x1400a3067
test rbx, rbx
je 0x1400a2c6d
cmp rbx, qword [rdi + 8]
jbe 0x1400a2c6d
mov rcx, rbx
jmp 0x1400a2c6f
xor ecx, ecx
movzx edx, word [rdi + 1]
cmp edx, 2
jne 0x1400a3201
movzx edx, byte [rdi + 3]
test edx, edx
jg 0x1400a3201
mov edx, dword [rdi + 0x14]
add rdx, rcx
mov rbp, qword [rdi + 8]
add rdx, rbp
mov esi, dword [rdi + 4]
cmp r15, rdx
jae 0x1400a3056
cmp r15, rbp
jb 0x1400a3056
mov dword [rsp + 0x30], 0
movzx eax, byte [rdi]
cmp eax, 0xa
jne 0x1400a300b
movzx eax, word [rdi + 1]
cmp eax, 2
jne 0x1400a2ccf
movzx eax, byte [rdi + 3]
test eax, eax
jle 0x1400a2d1a
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov r8d, 4
lea rsi, [rdi + 0x1a]
mov qword [rsp + 0x20], rsi
lea rdx, [rdi + 0x10]
mov ebx, dword [rdi + 4]
lea rcx, [rsp + 0x30]
movzx esi, word [rsi]
lea rbp, [rdi + 0x1c]
mov qword [rsp + 0x28], rbp
mov ebp, 0x1a
call fcn.14002bab0
mov ecx, dword [rsp + 0x30]
test ecx, ecx
jbe 0x1400a2d6e
mov rax, qword [rsp + 0x20]
xor edx, edx
movzx r8d, word [rax]
inc edx
cmp edx, ecx
lea rbp, [rbp + r8 + 2]
lea rax, [r8 + rax + 2]
jb 0x1400a2d5a
imul rbx, rbx, 0x1d
xor r9d, r9d
lea rcx, [rdi + rbp]
xor r8d, r8d
add rbp, r12
mov r11, qword [rsp + 0x20]
xor eax, eax
add rdi, rbx
cmp rbp, rdi
je 0x1400a316b
movzx r10d, byte [rcx]
mov ebx, r10d
and ebx, 0xc0
cmp ebx, 0x80
jne 0x1400a2dc9
movzx ebx, byte [rcx]
inc r8
and ebx, 0x3f
lea rax, [rbx + rax + 1]
cmp rax, r15
jae 0x1400a2ea8
inc rcx
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
cmp ebx, 0xc0
jne 0x1400a2df9
movzx ebp, byte [rcx]
and ebp, 0x3f
movsx rbx, byte [rcx + 1]
add r8, rbx
lea rax, [rbp + rax + 1]
cmp rax, r15
jae 0x1400a2ea8
add rcx, 2
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
cmp r10d, 0xd
ja case.0x1400a2e12.1
lea rbx, [0x140000000]
mov rbx, qword [rbx + r10*8 + 0xc1220]
jmp rbx
cmp rax, r15
jae 0x1400a2ea8
add rcx, 9
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
mov rax, qword [rcx + 4]
cmp r15, rax
jb 0x1400a30b2
movzx r12d, word [rcx + 2]
mov ebp, r12d
test ebp, ebp
lea rbx, [rcx + 0xc]
cmovne r9, rbx
dec ebp
lea rcx, [rcx + rbp + 0xd]
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
mov ebx, dword [rcx + 1]
inc ebx
add rax, rbx
cmp rax, r15
jae 0x1400a2ea8
add rcx, 5
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
movzx ebx, word [rcx + 1]
lea rax, [rbx + rax + 1]
cmp rax, r15
jae 0x1400a2ea8
add rcx, 3
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
movzx ebx, byte [rcx + 1]
lea rax, [rbx + rax + 1]
cmp rax, r15
jb 0x1400a2ded
lea rdx, str._I64u
lea rcx, [r13 + 0x208]
mov qword [rsp + 0x20], r9
call fcn.14002d710
mov r9, qword [rsp + 0x20]
test r9, r9
je 0x1400a30fd
mov rcx, r13
mov rdx, r9
mov r8, r12
call fcn.14002bab0
mov byte [r12 + r13], 0
mov r8, rsi
lea rcx, [r13 + 0x104]
mov rdx, qword [rsp + 0x28]
call fcn.14002bab0
mov byte [rsi + r13 + 0x104], 0
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
movsxd rbx, dword [rcx + 1]
add rcx, 5
mov rbp, rcx
add r8, rbx
sub rbp, r14
jmp 0x1400a2d89
movsx rbx, word [rcx + 1]
add rcx, 3
mov rbp, rcx
add r8, rbx
sub rbp, r14
jmp 0x1400a2d89
movsx rbx, byte [rcx + 1]
add rcx, 2
mov rbp, rcx
add r8, rbx
sub rbp, r14
jmp 0x1400a2d89
mov r10d, dword [rcx + 1]
xor edx, edx
mov rbx, r11
lea rbp, [rbx + 2]
movzx esi, word [rbx]
inc edx
cmp rdx, r10
lea rbx, [rbx + rsi + 2]
jbe 0x1400a2f5e
add rcx, 5
mov qword [rsp + 0x28], rbp
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
mov eax, dword [rcx + 4]
cmp r15, rax
jb 0x1400a3120
movzx r12d, word [rcx + 2]
mov ebp, r12d
test ebp, ebp
lea rbx, [rcx + 8]
cmovne r9, rbx
dec ebp
lea rcx, [rcx + rbp + 9]
mov rbp, rcx
sub rbp, r14
jmp 0x1400a2d89
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
inc rcx
inc rbp
jmp 0x1400a2d89
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
add r12, rsi
cmp r12, rax
jae 0x1400a31b6
jmp 0x1400a2c40
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rcx, [0x1400c1204]
call fcn.14002da80
mov rcx, r13
lea rdx, [0x1400c1204]
mov r8, rax
call fcn.14002bab0
jmp 0x1400a2ee1
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, r13
lea rdx, [0x1400c1204]
call fcn.14002d590
lea rdx, [0x1400c1204]
lea rcx, [r13 + 0x104]
call fcn.14002d590
add r13, 0x208
lea rdx, [0x1400c1204]
mov rcx, r13
call fcn.14002d590
xor eax, eax
add rsp, 0x68
pop rbp
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret