Function at 0x140036610
Capabilities:
Enumerate pe sections

Disassembly:
jmp 0x140036610
mov rax, rsp
push rbp
push rsi
push r15
sub rsp, 0xc0
mov qword [rax + 0x10], rbx
mov r15, rcx
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov r13, rdx
mov qword [rax - 0x38], r14
xor r14d, r14d
mov dword [rsp + 0xe0], r14d
mov ebp, r14d
mov esi, r14d
test rcx, rcx
je 0x140036d6a
test rdx, rdx
je 0x140036d6a
lea r12, [rcx + 0x230]
mov eax, dword [r12]
cmp eax, 1
jae 0x1400366c1
cmp dword [reloc.WSOCK32.dll_accept], 2
jl 0x140036db0
test dword [0x14016ba2e], 0x200
je 0x140036db0
mov dword [rsp + 0x30], eax
lea r9, str.....esif_uf_dspmgr.c
lea rax, str.No_domain_error__number_of_domain___d__less_than_1__n
mov ecx, 0x200
mov qword [rsp + 0x28], rax
lea r8, str.esif_fpc_load
lea edx, [r14 + 2]
mov dword [rsp + 0x20], 0x1e9
call fcn.140003693
jmp 0x140036db0
mov ecx, 0x20
mov qword [rdx + 0x70], r12
call fcn.140002004
mov qword [r13 + 0x78], rax
call fcn.14000155f
mov qword [r13 + 0x90], rax
call fcn.14000155f
mov qword [r13 + 0x80], rax
call fcn.14000155f
mov qword [r13 + 0x88], rax
call fcn.14000155f
mov qword [r13 + 0x98], rax
cmp qword [r13 + 0x78], rsi
je 0x140036d1d
cmp qword [r13 + 0x90], rsi
je 0x140036d1d
cmp qword [r13 + 0x80], rsi
je 0x140036d1d
cmp qword [r13 + 0x88], rsi
je 0x140036d1d
test rax, rax
je 0x140036d1d
cmp dword [reloc.WSOCK32.dll_accept], 4
jl 0x1400367da
test dword [0x14016ba50], 0x200
je 0x1400367da
mov eax, dword [r15 + 0x238]
lea rcx, [r15 + 0x33]
movzx edx, byte [r15 + 0x12]
lea r9, [r15 + 0x13]
movzx r8d, byte [r15 + 0x11]
mov dword [rsp + 0x70], eax
mov eax, dword [r15 + 0x234]
mov dword [rsp + 0x68], eax
mov eax, dword [r12]
mov dword [rsp + 0x60], eax
mov eax, dword [r15]
mov dword [rsp + 0x58], eax
lea rax, str._fpc____p__FPC_name__s_ver__x__x_desc__s_size__u_num_domains__d_num_algorithms__d_num_events__d
mov qword [rsp + 0x50], rcx
mov ecx, 0x200
mov dword [rsp + 0x48], edx
mov edx, 4
mov dword [rsp + 0x40], r8d
lea r8, str.esif_fpc_load
mov qword [rsp + 0x38], r9
lea r9, str.....esif_uf_dspmgr.c
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x205
call fcn.140003693
lea rbx, [r15 + 0x23c]
mov edi, r14d
mov dword [rsp + 0xf8], r14d
cmp dword [r12], esi
jbe 0x140036a8e
cmp dword [reloc.WSOCK32.dll_accept], 4
lea rsi, str.__04lu__Capability__d__0x_x
lea r9, str.__04lu__Domain__d__name__s_size__d_num_of_primitives__d__num_of_capabilites__u__0x_x_
jl 0x140036880
test dword [0x14016ba50], 0x200
je 0x140036880
movzx ecx, byte [rbx + 0xc8]
lea rdx, [rbx + 4]
mov eax, dword [rbx + 0xc4]
mov r8d, ebx
mov dword [rsp + 0x60], eax
sub r8d, r15d
mov eax, dword [rbx + 0xc0]
mov dword [rsp + 0x58], ecx
mov ecx, 0x200
mov dword [rsp + 0x50], eax
mov eax, dword [rbx]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], rdx
mov edx, 4
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r8d
lea r8, str.esif_fpc_load
mov qword [rsp + 0x28], r9
lea r9, str.....esif_uf_dspmgr.c
mov dword [rsp + 0x20], 0x210
call fcn.140003693
mov rdx, rbx
mov rcx, r13
call qword [r13 + 0x128]
mov ebp, eax
test eax, eax
jne 0x140036c28
mov edi, r14d
cmp byte [rbx + 0xc8], al
jbe 0x14003690e
cmp dword [reloc.WSOCK32.dll_accept], 4
jl 0x140036901
test dword [0x14016ba50], 0x200
je 0x140036901
mov eax, edi
lea r9, str.....esif_uf_dspmgr.c
lea r8, str.esif_fpc_load
mov edx, 4
movzx ecx, byte [rax + rbx + 0xcc]
mov eax, ebx
mov dword [rsp + 0x40], ecx
sub eax, r15d
mov dword [rsp + 0x38], edi
add eax, 0xc4
mov dword [rsp + 0x30], eax
mov ecx, 0x200
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x21d
call fcn.140003693
movzx eax, byte [rbx + 0xc8]
inc edi
cmp edi, eax
jb 0x1400368a2
cmp dword [rbx + 0xc0], 0
lea rsi, [rbx + 0xec]
mov edi, r14d
mov dword [rsp + 0xf0], r14d
jbe 0x140036a68
nop dword [rax]
mov r12d, esi
sub r12d, r15d
cmp dword [reloc.WSOCK32.dll_accept], 4
jl 0x140036a26
test dword [0x14016ba50], 0x200
je 0x140036a26
mov r14d, dword [rsi + 0xc]
mov ecx, r14d
sub ecx, 1
je 0x140036976
cmp ecx, 1
je 0x14003696d
lea rbp, [0x14011cf20]
jmp 0x14003697d
lea rbp, str.ESIF_PRIMITIVE_OP_SET
jmp 0x14003697d
lea rbp, str.ESIF_PRIMITIVE_OP_GET
mov r11d, dword [rsi + 0x14]
mov ecx, r11d
mov edi, dword [rsi + 0x10]
call fcn.1400341c0
mov ecx, edi
mov r8, rax
call fcn.1400341c0
mov ecx, dword [rsi + 0x18]
movzx edx, word [rsi + 8]
movzx r9d, word [rsi + 6]
movzx r10d, word [rsi + 4]
mov dword [rsp + 0x90], ecx
mov ecx, 0x200
mov qword [rsp + 0x88], r8
lea r8, str.esif_fpc_load
mov dword [rsp + 0x80], r11d
mov qword [rsp + 0x78], rax
mov eax, dword [rsi]
mov dword [rsp + 0x70], edi
mov edi, dword [rsp + 0xf0]
mov qword [rsp + 0x68], rbp
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x58], edx
mov edx, 4
mov dword [rsp + 0x50], r9d
lea r9, str.....esif_uf_dspmgr.c
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], eax
lea rax, str.__04lu__Primitive__03d_:_size__3d_tuple_id___03u__03u__03u__operation__u__s__req_type__u__s__res_type__u__s__num_actions__u
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x231
call fcn.140003693
mov rdx, rsi
mov rcx, r13
call qword [r13 + 0x118]
mov ebp, eax
test eax, eax
jne 0x140036bf5
mov eax, dword [rsi]
inc edi
inc dword [rsp + 0xe0]
add rsi, rax
mov dword [rsp + 0xf0], edi
cmp edi, dword [rbx + 0xc0]
jb 0x140036930
xor r14d, r14d
lea r12, [r15 + 0x230]
mov edi, dword [rsp + 0xf8]
mov eax, dword [rbx]
inc edi
add rbx, rax
mov dword [rsp + 0xf8], edi
cmp edi, dword [r12]
jb 0x1400367f6
mov esi, dword [rsp + 0xe0]
cmp dword [r15 + 0x234], 0
mov edi, r14d
jbe 0x140036b4d
lea r12, str.__04lu__Algorithm__03d_:__action_type__u__s__temp_xform__u_tempC1__u_percent_xform__u_size__u
cmp dword [reloc.WSOCK32.dll_accept], 4
jl 0x140036b23
test dword [0x14016ba50], 0x200
je 0x140036b23
mov r8d, dword [rbx]
mov ecx, r8d
call fcn.140033e40
mov ecx, dword [rbx + 0x18]
lea r9, str.....esif_uf_dspmgr.c
mov dword [rsp + 0x68], ecx
mov edx, ebx
mov ecx, dword [rbx + 0xc]
sub edx, r15d
mov dword [rsp + 0x60], ecx
mov ecx, dword [rbx + 8]
mov dword [rsp + 0x58], ecx
mov ecx, dword [rbx + 4]
mov dword [rsp + 0x50], ecx
mov ecx, 0x200
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], r8d
lea r8, str.esif_fpc_load
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edx
mov edx, 4
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x24b
call fcn.140003693
mov rdx, rbx
mov rcx, r13
call qword [r13 + pe_nt_image_headers64]
mov ebp, eax
test eax, eax
jne 0x140036c7e
add rbx, 0x1c
inc edi
cmp edi, dword [r15 + 0x234]
jb 0x140036aa6
cmp dword [r15 + 0x238], 0
jbe 0x140036db5
lea rdi, str.__04lu__Event___03d__type__s__d__n
cmp dword [reloc.WSOCK32.dll_accept], 4
jl 0x140036bc5
test dword [0x14016ba50], 0x200
je 0x140036bc5
mov r8d, dword [rbx + 0x30]
mov ecx, r8d
call fcn.140036160
mov dword [rsp + 0x48], r8d
lea r9, str.....esif_uf_dspmgr.c
mov qword [rsp + 0x40], rax
lea r8, str.esif_fpc_load
mov dword [rsp + 0x38], r14d
mov ecx, ebx
sub ecx, r15d
mov edx, 4
mov dword [rsp + 0x30], ecx
mov ecx, 0x200
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x25d
call fcn.140003693
mov rdx, rbx
mov rcx, r13
call qword [r13 + 0x130]
mov ebp, eax
test eax, eax
jne 0x140036cdd
add rbx, 0x4c
inc r14d
cmp r14d, dword [r15 + 0x238]
jb 0x140036b62
jmp 0x140036db5
cmp dword [reloc.WSOCK32.dll_accept], 1
jl 0x140036c72
test dword [0x14016ba1d], 0x200
je 0x140036c72
movzx eax, word [rsi + 4]
mov dword [rsp + 0x30], eax
lea rax, str.Fail_to_insert_primitive__id___d__n
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x235
jmp 0x140036c55
cmp dword [reloc.WSOCK32.dll_accept], 1
jl 0x140036c72
test dword [0x14016ba1d], 0x200
je 0x140036c72
mov dword [rsp + 0x30], edi
lea rax, str.Fail_to_insert_domain__d_n
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x215
lea r9, str.....esif_uf_dspmgr.c
mov edx, 1
lea r8, str.esif_fpc_load
mov ecx, 0x200
call fcn.140003693
mov esi, dword [rsp + 0xe0]
jmp 0x140036db5
cmp dword [reloc.WSOCK32.dll_accept], 1
jl 0x140036db5
test dword [0x14016ba1d], 0x200
je 0x140036db5
mov ecx, dword [rbx]
call fcn.140033e40
mov qword [rsp + 0x30], rax
lea rax, str.Fail_to_insert_algorithm____s_n
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x250
lea r9, str.....esif_uf_dspmgr.c
mov edx, 1
lea r8, str.esif_fpc_load
mov ecx, 0x200
call fcn.140003693
jmp 0x140036db5
cmp dword [reloc.WSOCK32.dll_accept], 1
jl 0x140036db5
test dword [0x14016ba1d], 0x200
je 0x140036db5
mov ecx, dword [rbx + 0x30]
call fcn.140036160
mov qword [rsp + 0x30], rax
lea rax, str.Fail_to_insert_event____s_n
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x262
jmp 0x140036cbb
cmp dword [reloc.WSOCK32.dll_accept], 1
jl 0x140036d63
test dword [0x14016ba1d], 0x200
je 0x140036d63
lea rax, str.Fail_to_allocate_linked_list_or_hash_table_n
mov edx, 1
mov qword [rsp + 0x28], rax
lea r9, str.....esif_uf_dspmgr.c
lea r8, str.esif_fpc_load
mov dword [rsp + 0x20], 0x1f7
mov ecx, 0x200
call fcn.140003693
mov ebp, 0x708
jmp 0x140036db5
cmp dword [reloc.WSOCK32.dll_accept], 1
jl 0x140036db0
test dword [0x14016ba1d], 0x200
je 0x140036db0
lea rax, str.The_fpc_pointer_or_dsp_pointer_is_NULL_n
mov edx, 1
mov qword [rsp + 0x28], rax
lea r9, str.....esif_uf_dspmgr.c
lea r8, str.esif_fpc_load
mov dword [rsp + 0x20], 0x1e2
mov ecx, 0x200
call fcn.140003693
mov ebp, 0x8fc
mov r14, qword [rsp + 0xa0]
mov r13, qword [rsp + 0xa8]
mov r12, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xe8]
test r15, r15
je 0x140036e59
cmp dword [reloc.WSOCK32.dll_accept], 4
jl 0x140036e59
test dword [0x14016ba50], 0x200
je 0x140036e59
mov ecx, ebp
call fcn.140037080
mov qword [rsp + 0x50], rax
lea r9, str.....esif_uf_dspmgr.c
mov eax, dword [r15 + 0x238]
lea r8, str.esif_fpc_load
mov dword [rsp + 0x48], eax
mov edx, 4
mov eax, dword [r15 + 0x234]
mov ecx, 0x200
mov dword [rsp + 0x40], eax
mov eax, dword [r15 + 0x230]
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], eax
lea rax, str._u_domains___u_primitives_and__u_algorithms__u_events_inserted__status__s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x26e
call fcn.140003693
mov eax, ebp
add rsp, 0xc0
pop r15
pop rsi
pop rbp
ret