Function at 0x140035f20
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rbx
push r13
push r15
lea rbp, [rsp - 0x3f]
sub rsp, 0xd8
mov r13, rdx
mov rbx, rcx
mov r15d, 0xffffffff
test rcx, rcx
jne 0x140035f65
lea rdx, str.messageboxdata
lea rcx, str.Parameter__s_is_invalid
call fcn.14005ec50
add rsp, 0xd8
pop r15
pop r13
pop rbx
pop rbp
ret
cmp dword [rcx + 0x20], 0
jge 0x140035f85
lea rcx, str.Invalid_number_of_buttons
call fcn.14005ec50
add rsp, 0xd8
pop r15
pop r13
pop rbx
pop rbp
ret
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0xd0], rdi
xor edi, edi
mov qword [rsp + 0xc8], r12
mov qword [rsp + 0xc0], r14
mov r14, qword [0x140184af0]
test r14, r14
je 0x140035fc8
mov rcx, r14
call fcn.140032250
mov dword [rbp + 0x67], 1
bt eax, 0xe
jb 0x140035fcb
mov dword [rbp + 0x67], edi
mov rsi, qword [0x140183b80]
mov r12d, dword [0x140183bc4]
mov dword [rbp + 0x77], r12d
test rsi, rsi
jne 0x140035ff0
lea rcx, str.That_operation_is_not_supported
call fcn.14005ec50
jmp 0x14003606a
cmp dword [0x140183bf0], edi
mov dword [0x140183bf4], edi
je 0x140036019
lea rcx, [0x140183b40]
call fcn.1400169f0
test eax, eax
je 0x140036019
test r12d, r12d
cmove rdi, qword [0x140184af0]
mov rax, qword [0x140183bf8]
cmp rdi, rax
je 0x14003606a
test rax, rax
je 0x14003604e
xor ecx, ecx
call rsi
mov rax, qword [0x140183bf8]
and dword [rax + 0x40], 0xffffbfff
mov rsi, qword [0x140183b80]
mov qword [0x140183bf8], 0
test rdi, rdi
je 0x140036063
mov rcx, rdi
call rsi
test eax, eax
js 0x14003606a
or dword [rdi + 0x40], 0x4000
mov qword [0x140183bf8], rdi
cmp dword [0x140183bc4], 0
mov rdi, qword [0x140184af0]
je 0x140036183
cmp dword [0x140183bc8], 0
je 0x140036093
mov dword [0x140183bc8], 0
jmp 0x1400360a3
mov rax, qword [0x140183b78]
test rax, rax
je 0x1400360a3
xor ecx, ecx
call rax
xor eax, eax
mov dword [0x140183bc4], eax
mov qword [0x140183bd4], rax
test rdi, rdi
je 0x140036130
mov rcx, rdi
call fcn.140034000
test byte [rdi + 0x40], 0x40
jne 0x140036123
mov rax, qword [0x140183b68]
mov dword [0x140183bc0], 0
test rax, rax
je 0x140036101
cmp dword [0x140183bc4], 0
je 0x1400360ed
cmp dword [0x140183bc8], 0
je 0x140036101
mov r8d, dword [0x140183ba4]
mov rcx, rdi
mov edx, dword [0x140183ba0]
call rax
jmp 0x140036123
mov eax, dword [0x140183ba4]
xor r8d, r8d
mov r9d, dword [0x140183ba0]
mov rcx, rdi
mov edx, dword [0x140183b90]
mov dword [rsp + 0x20], eax
call fcn.140016d50
xor ecx, ecx
call fcn.140017fc0
mov eax, dword [0x140183bc4]
cmp qword [0x140183b98], 0
mov rcx, qword [0x140183c28]
cmovne rcx, qword [0x140183c30]
test rcx, rcx
je 0x140036167
cmp dword [0x140183c38], 0
je 0x140036167
test eax, eax
jne 0x140036167
mov rax, qword [0x140183b50]
test rax, rax
je 0x140036177
jmp 0x140036175
mov rax, qword [0x140183b50]
test rax, rax
je 0x140036177
xor ecx, ecx
call rax
mov edx, 0x400
mov ecx, edx
call fcn.14003ee60
mov r12d, dword [0x140183c38]
mov dword [0x140183c38], 1
cmp r12d, 1
je 0x1400361dd
cmp qword [0x140183b98], 0
mov rcx, qword [0x140183c28]
cmovne rcx, qword [0x140183c30]
test rcx, rcx
je 0x1400361cd
cmp dword [0x140183bc4], 0
jne 0x1400361cd
mov rax, qword [0x140183b50]
test rax, rax
je 0x1400361dd
jmp 0x1400361db
mov rax, qword [0x140183b50]
test rax, rax
je 0x1400361dd
xor ecx, ecx
call rax
xor edi, edi
lea rsi, [0x140184cfa]
cmp byte [rsi], 1
jne 0x1400361f7
mov r8d, edi
xor edx, edx
mov cl, 1
call fcn.140054a10
inc edi
inc rsi
cmp edi, 0x200
jl 0x1400361e6
mov rsi, qword [rsp + 0x108]
lea rdi, [rbp + 0x7f]
test r13, r13
lea rcx, [rbp - 0x69]
mov rax, rbx
cmovne rdi, r13
or rax, rcx
test al, 3
jne 0x14003627d
mov eax, dword [rbx]
mov dword [rbp - 0x69], eax
mov eax, dword [rbx + 4]
mov dword [rbp - 0x65], eax
mov eax, dword [rbx + 8]
mov dword [rbp - 0x61], eax
mov eax, dword [rbx + 0xc]
mov dword [rbp - 0x5d], eax
mov eax, dword [rbx + 0x10]
mov dword [rbp - 0x59], eax
mov eax, dword [rbx + 0x14]
mov dword [rbp - 0x55], eax
mov eax, dword [rbx + 0x18]
mov dword [rbp - 0x51], eax
mov eax, dword [rbx + 0x1c]
mov dword [rbp - 0x4d], eax
mov eax, dword [rbx + 0x20]
mov dword [rbp - 0x49], eax
mov eax, dword [rbx + 0x24]
mov dword [rbp - 0x45], eax
mov eax, dword [rbx + 0x28]
mov dword [rbp - 0x41], eax
mov eax, dword [rbx + 0x2c]
mov dword [rbp - 0x3d], eax
mov eax, dword [rbx + 0x30]
mov dword [rbp - 0x39], eax
mov eax, dword [rbx + 0x34]
mov dword [rbp - 0x35], eax
jmp 0x140036404
movzx eax, byte [rbx]
mov byte [rbp - 0x69], al
movzx eax, byte [rbx + 1]
mov byte [rbp - 0x68], al
movzx eax, byte [rbx + 2]
mov byte [rbp - 0x67], al
movzx eax, byte [rbx + 3]
mov byte [rbp - 0x66], al
movzx eax, byte [rbx + 4]
mov byte [rbp - 0x65], al
movzx eax, byte [rbx + 5]
mov byte [rbp - 0x64], al
movzx eax, byte [rbx + 6]
mov byte [rbp - 0x63], al
movzx eax, byte [rbx + 7]
mov byte [rbp - 0x62], al
movzx eax, byte [rbx + 8]
mov byte [rbp - 0x61], al
movzx eax, byte [rbx + 9]
mov byte [rbp - 0x60], al
movzx eax, byte [rbx + 0xa]
mov byte [rbp - 0x5f], al
movzx eax, byte [rbx + 0xb]
mov byte [rbp - 0x5e], al
movzx eax, byte [rbx + 0xc]
mov byte [rbp - 0x5d], al
movzx eax, byte [rbx + 0xd]
mov byte [rbp - 0x5c], al
movzx eax, byte [rbx + 0xe]
mov byte [rbp - 0x5b], al
movzx eax, byte [rbx + 0xf]
mov byte [rbp - 0x5a], al
movzx eax, byte [rbx + 0x10]
mov byte [rbp - 0x59], al
movzx eax, byte [rbx + 0x11]
mov byte [rbp - 0x58], al
movzx eax, byte [rbx + 0x12]
mov byte [rbp - 0x57], al
movzx eax, byte [rbx + 0x13]
mov byte [rbp - 0x56], al
movzx eax, byte [rbx + 0x14]
mov byte [rbp - 0x55], al
movzx eax, byte [rbx + 0x15]
mov byte [rbp - 0x54], al
movzx eax, byte [rbx + 0x16]
mov byte [rbp - 0x53], al
movzx eax, byte [rbx + 0x17]
mov byte [rbp - 0x52], al
movzx eax, byte [rbx + 0x18]
mov byte [rbp - 0x51], al
movzx eax, byte [rbx + 0x19]
mov byte [rbp - 0x50], al
movzx eax, byte [rbx + 0x1a]
mov byte [rbp - 0x4f], al
movzx eax, byte [rbx + 0x1b]
mov byte [rbp - 0x4e], al
movzx eax, byte [rbx + 0x1c]
mov byte [rbp - 0x4d], al
movzx eax, byte [rbx + 0x1d]
mov byte [rbp - 0x4c], al
movzx eax, byte [rbx + 0x1e]
mov byte [rbp - 0x4b], al
movzx eax, byte [rbx + 0x1f]
mov byte [rbp - 0x4a], al
movzx eax, byte [rbx + 0x20]
mov byte [rbp - 0x49], al
movzx eax, byte [rbx + 0x21]
mov byte [rbp - 0x48], al
movzx eax, byte [rbx + 0x22]
mov byte [rbp - 0x47], al
movzx eax, byte [rbx + 0x23]
mov byte [rbp - 0x46], al
movzx eax, byte [rbx + 0x24]
mov byte [rbp - 0x45], al
movzx eax, byte [rbx + 0x25]
mov byte [rbp - 0x44], al
movzx eax, byte [rbx + 0x26]
mov byte [rbp - 0x43], al
movzx eax, byte [rbx + 0x27]
mov byte [rbp - 0x42], al
movzx eax, byte [rbx + 0x28]
mov byte [rbp - 0x41], al
movzx eax, byte [rbx + 0x29]
mov byte [rbp - 0x40], al
movzx eax, byte [rbx + 0x2a]
mov byte [rbp - 0x3f], al
movzx eax, byte [rbx + 0x2b]
mov byte [rbp - 0x3e], al
movzx eax, byte [rbx + 0x2c]
mov byte [rbp - 0x3d], al
movzx eax, byte [rbx + 0x2d]
mov byte [rbp - 0x3c], al
movzx eax, byte [rbx + 0x2e]
mov byte [rbp - 0x3b], al
movzx eax, byte [rbx + 0x2f]
mov byte [rbp - 0x3a], al
movzx eax, byte [rbx + 0x30]
mov byte [rbp - 0x39], al
movzx eax, byte [rbx + 0x31]
mov byte [rbp - 0x38], al
movzx eax, byte [rbx + 0x32]
mov byte [rbp - 0x37], al
movzx eax, byte [rbx + 0x33]
mov byte [rbp - 0x36], al
movzx eax, byte [rbx + 0x34]
mov byte [rbp - 0x35], al
movzx eax, byte [rbx + 0x35]
mov byte [rbp - 0x34], al
movzx eax, byte [rbx + 0x36]
mov byte [rbp - 0x33], al
movzx eax, byte [rbx + 0x37]
mov byte [rbp - 0x32], al
mov rax, qword [rbp - 0x59]
lea rdx, [0x140159cae]
test rax, rax
mov rcx, rdx
cmovne rcx, rax
mov rax, qword [rbp - 0x51]
test rax, rax
mov qword [rbp - 0x59], rcx
cmovne rdx, rax
mov qword [rbp - 0x51], rdx
call fcn.140036fe0
mov rcx, qword [0x140183f00]
xor ebx, ebx
mov dword [rax], ebx
test rcx, rcx
je 0x140036469
mov rax, qword [rcx + 0x298]
test rax, rax
je 0x140036469
mov r8, rdi
lea rdx, [rbp - 0x69]
call rax
mov r15d, eax
cmp eax, 0xffffffff
jne 0x1400364ea
mov rcx, qword [0x140183f00]
mov rdx, qword [rbp - 0x61]
test rdx, rdx
je 0x14003654b
mov word [rbp - 0x29], 2
mov byte [rbp - 0x27], 0x16
test rcx, rcx
jne 0x140036491
lea rcx, str.Video_subsystem_has_not_been_initialized
jmp 0x140036546
lea rax, [rcx + 0x2f0]
cmp qword [rdx], rax
jne 0x14003653f
mov rax, qword [rcx + 0x170]
mov dword [rbp - 0x25], ebx
test rax, rax
jne 0x1400364bc
lea rcx, str.That_operation_is_not_supported
jmp 0x140036546
lea r8, [rbp - 0x29]
call rax
test eax, eax
je 0x14003654b
cmp dword [rbp - 0x25], 1
je 0x14003654b
call fcn.140036fe0
cmp dword [rax], ebx
je 0x1400364de
cmp byte [rax + 4], bl
jne 0x1400364ea
lea rcx, str.No_message_system_available
call fcn.14005ec50
mov rdi, qword [rsp + 0xd0]
test r14, r14
je 0x14003650e
mov rcx, r14
call fcn.140033290
cmp dword [rbp + 0x67], ebx
je 0x14003650e
mov ecx, 1
call fcn.140018080
mov ecx, r12d
call fcn.140018540
mov ecx, dword [rbp + 0x77]
call fcn.140017da0
mov r14, qword [rsp + 0xc0]
mov eax, r15d
mov r12, qword [rsp + 0xc8]
add rsp, 0xd8
pop r15
pop r13
pop rbx
pop rbp
ret
lea rcx, str.Invalid_window
call fcn.14005ec50
mov rdx, rdi
lea rcx, [rbp - 0x69]
call fcn.14008f870
test eax, eax
jne 0x1400364d0
mov r15d, ebx
jmp 0x1400364ea