Function at 0x140002840
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rbp, rcx
mov r12d, edx
add rcx, 0x70
call fcn.140002060
mov r8, qword [rbp + 0x70]
lea r13, str..reloc
mov r15d, eax
movsxd r9, dword [r8 + 0x3c]
add r9, r8
jne 0x1400025bd
mov ecx, 2
call fcn.140010d04
mov rcx, rax
lea rdx, str.Failed_to_get_NT_Headers_n
call fcn.140001150
xor ebx, ebx
mov edx, ebx
mov rax, qword [rbp + 0x70]
lea edi, [r15 + rdx]
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
jne 0x14000261a
mov ecx, 2
call fcn.140010d04
mov rcx, rax
lea rdx, str.Failed_to_get_NT_Headers_n
call fcn.140001150
mov esi, ebx
jmp 0x140002620
movzx edx, word [r9 + 0x14]
xor ebx, ebx
movzx r10d, word [r9 + 6]
add rdx, 0x18
add rdx, r9
mov r8d, ebx
test r10d, r10d
je 0x14000258d
nop dword [rax + rax]
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x140002609
cmp rcx, 7
jne 0x1400025f0
mov edx, dword [rdx + 0xc]
jmp 0x14000258f
add rdx, 0x28
inc r8d
cmp r8d, r10d
jl 0x1400025e0
jmp 0x14000258d
mov esi, dword [rcx + 0x28]
mov dword [rcx + 0x28], edi
mov r8d, r12d
lea rcx, [rbp + 0x70]
call fcn.140002250
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
jne 0x140002654
mov ecx, 2
call fcn.140010d04
mov rcx, rax
lea rdx, str.Failed_to_get_NT_Headers_n
call fcn.140001150
jmp 0x1400026ab
movzx edx, word [rcx + 0x14]
mov r8d, ebx
movzx r9d, word [rcx + 6]
add rdx, 0x18
add rdx, rcx
test r9d, r9d
je 0x1400026ab
lea r10, [0x140039c98]
nop dword [rax]
nop word [rax + rax]
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r10 + rcx - 1]
jne 0x1400026d3
cmp rcx, 6
jne 0x140002690
mov dword [rdx + 0x24], 0xe0000000
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
jne 0x1400026e1
mov ecx, 2
call fcn.140010d04
mov rcx, rax
lea rdx, str.Failed_to_get_NT_Headers_n
call fcn.140001150
jmp 0x14000272b
add rdx, 0x28
inc r8d
cmp r8d, r9d
jl 0x140002680
jmp 0x1400026ab
movzx edx, word [rcx + 0x14]
mov r8d, ebx
movzx r9d, word [rcx + 6]
add rdx, 0x18
add rdx, rcx
test r9d, r9d
je 0x14000272b
nop dword [rax]
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x140002766
cmp rcx, 7
jne 0x140002710
mov dword [rdx + 0x24], 0xe0000000
movsxd r8, edi
lea rax, [r8 + 0x70]
mov qword [rbp + 0xb], rax
lea rax, [r8 + 0x74]
mov qword [rbp + 0x15], rax
mov rax, qword [rbp + 0x70]
movsxd r9, dword [rax + 0x3c]
add r9, rax
jne 0x140002774
mov ecx, 2
call fcn.140010d04
mov rcx, rax
lea rdx, str.Failed_to_get_NT_Headers_n
call fcn.140001150
jmp 0x1400027ae
add rdx, 0x28
inc r8d
cmp r8d, r9d
jl 0x140002700
jmp 0x14000272b
movzx edx, word [r9 + 0x14]
mov r8d, ebx
movzx r10d, word [r9 + 6]
add rdx, 0x18
add rdx, r9
test r10d, r10d
je 0x1400027ae
nop dword [rax]
mov rax, rbx
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [rax + r13 - 1]
jne 0x14000282b
cmp rax, 7
jne 0x140002793
mov ebx, dword [rdx + 0x14]
mov rax, qword [rbp + 0x70]
lea edx, [rbx + r15]
movups xmm0, xmmword [rbp]
mov rbx, qword [rsp + 0x50]
movsxd rcx, edx
movups xmmword [rcx + rax], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rcx + rax + 0x10], xmm1
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rcx + rax + 0x20], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rcx + rax + 0x30], xmm1
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [rcx + rax + 0x40], xmm0
movups xmm1, xmmword [rbp + 0x50]
movups xmmword [rcx + rax + 0x50], xmm1
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rcx + rax + 0x60], xmm0
mov rax, qword [rbp + 0x70]
movsxd rcx, edx
mov dword [rcx + rax + 0x70], esi
mov rax, qword [rbp + 0x70]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
movsxd rcx, edx
mov dword [rcx + rax + 0x74], r12d
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
add rdx, 0x28
inc r8d
cmp r8d, r10d
jl 0x140002790
jmp 0x1400027ae
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x20
mov rax, qword [rcx + 0x70]
lea rsi, [rcx + 0x70]
mov rbx, rcx
mov ebp, edx
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
jne 0x140002891
mov ecx, 2
call fcn.140010d04
mov rcx, rax
lea rdx, str.Failed_to_get_NT_Headers_n
call fcn.140001150
mov edx, ebp
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop rdi
pop rsi
pop rbp
jmp 0x140002530
movzx edx, word [rcx + 0x14]
xor r9d, r9d
movzx r10d, word [rcx + 6]
add rdx, 0x18
add rdx, rcx
mov r8d, r9d
cmp r9w, r10w
jae 0x14000287b
mov r11d, dword [rcx + 0x28]
lea rdi, str..reloc
mov ecx, dword [rdx + 0xc]
cmp r11d, ecx
jb 0x140002927
add ecx, dword [rdx + 8]
cmp r11d, ecx
jae 0x140002927
mov rax, r9
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [rdi + rax - 1]
jne 0x140002927
cmp rax, 7
jne 0x1400028d0
mov rdi, qword [rsi]
movsxd rcx, dword [rdi + 0x3c]
lea rdx, [rdi + 0x18]
add rdx, rcx
movzx eax, word [rcx + rdi + 0x14]
movzx r10d, word [rcx + rdi + 6]
add rdx, rax
cmp r9w, r10w
jae 0x140002941
mov r8d, dword [rdx + 0xc]
cmp r11d, r8d
jb 0x140002919
mov ecx, dword [rdx + 8]
add ecx, r8d
cmp r11d, ecx
jb 0x140002938
add rdx, 0x28
inc r9d
cmp r9d, r10d
jl 0x140002905
jmp 0x140002941
add rdx, 0x28
inc r8d
cmp r8d, r10d
jl 0x1400028b8
jmp 0x14000287b
mov eax, dword [rdx + 0x14]
sub eax, r8d
add r11d, eax
lea eax, [r11 + 0x74]
mov rcx, rsi
movsxd rbx, eax
mov r8d, dword [rbx + rdi]
call fcn.140002250
mov r8d, ebp
mov rcx, rsi
call fcn.140002250
mov rax, qword [rsi]
mov dword [rbx + rax], ebp
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret