Function at 0x140002cd0
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x20
cmp byte [rcx + 8], 0
mov ebp, r9d
mov r14, r8
mov rdi, rdx
mov rbx, rcx
jne 0x140002d34
mov eax, dword [rcx + 0xc]
mov ecx, dword [rax + 0x3c]
add ecx, dword [rbx + 0xc]
mov eax, dword [rbx + 0xc]
movzx r8d, word [rcx + 6]
mov ecx, dword [rax + 0x3c]
dec r8d
add ecx, dword [rbx + 0xc]
movzx ecx, word [rcx + 6]
cmp r8d, ecx
ja 0x140002d34
mov eax, dword [rbx + 0xc]
mov edx, dword [rax + 0x3c]
mov eax, dword [rbx + 0xc]
add edx, 0x18
add edx, dword [rbx + 0xc]
mov ecx, dword [rax + 0x3c]
lea eax, [r8 + r8*4]
add ecx, dword [rbx + 0xc]
movzx ecx, word [rcx + 0x14]
add edx, ecx
lea esi, [rdx + rax*8]
jmp 0x140002d36
xor esi, esi
mov ecx, 0x28
call fcn.1400034c4
cmp byte [rbx + 8], 0
jne 0x140002d51
mov eax, dword [rbx + 0xc]
mov ecx, dword [rax + 0x3c]
add ecx, dword [rbx + 0xc]
jmp 0x140002d53
xor ecx, ecx
inc word [rcx + 6]
mov eax, dword [rsi + 0x14]
add eax, dword [rsi + 0x10]
mov dword [rdi + 0x14], eax
mov eax, dword [rsi + 0xc]
add eax, 0x1000
mov dword [rdi + 0x10], ebp
cmp byte [rbx + 8], 0
mov dword [rdi + 0xc], eax
jne 0x140002d7f
mov eax, dword [rbx + 0xc]
mov eax, dword [rax + 0x3c]
add eax, dword [rbx + 0xc]
jmp 0x140002d81
xor eax, eax
add dword [rax + 0x54], 0x28
cmp byte [rbx + 8], 0
jne 0x140002d96
mov eax, dword [rbx + 0xc]
mov edx, dword [rax + 0x3c]
add edx, dword [rbx + 0xc]
jmp 0x140002d98
xor edx, edx
lea eax, [rbp + 0x30]
add dword [rdx + 0x50], eax
cmp byte [rbx + 8], 0
jne 0x140002dcb
mov eax, dword [rbx + 0xc]
mov r8d, dword [rax + 0x3c]
mov eax, dword [rbx + 0xc]
add r8d, dword [rbx + 0xc]
add r8, 0x50
mov r10d, dword [rax + 0x3c]
mov eax, dword [rbx + 0xc]
add r10d, dword [rbx + 0xc]
mov r9d, dword [rax + 0x3c]
add r9d, dword [rbx + 0xc]
jmp 0x140002dd7
xor r10d, r10d
mov r8d, 0x50
xor r9d, r9d
mov eax, dword [r10 + 0x50]
xor edx, edx
div dword [r9 + 0x38]
add dword [r8], edx
cmp byte [rbx + 8], 0
jne 0x140002e7d
mov eax, dword [rbx + 0xc]
mov r8d, dword [rax + 0x3c]
mov eax, dword [rbx + 0xc]
add r8d, 0x18
add r8d, dword [rbx + 0xc]
mov ecx, dword [rax + 0x3c]
add ecx, dword [rbx + 0xc]
mov eax, dword [rbx + 0xc]
movzx ecx, word [rcx + 0x14]
add r8d, ecx
mov ecx, dword [rax + 0x3c]
add ecx, dword [rbx + 0xc]
movzx ecx, word [rcx + 6]
lea eax, [rcx + rcx*4]
lea ecx, [rax*8 - 0x28]
mov eax, dword [rbx + 0xc]
sub ecx, eax
add ecx, r8d
mov r8d, dword [rbx + 0x10]
add eax, ecx
mov ecx, eax
jne 0x140002e44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
jmp 0x140002e77
cmp r8, 0x28
jb 0x140002e64
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rax], xmm0
movsd xmm0, qword [rdi + 0x20]
movups xmmword [rax + 0x10], xmm1
movsd qword [rax + 0x20], xmm0
jmp 0x140002e7d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov edx, dword [rdi + 0x14]
mov r9d, ebp
mov r8, r14
mov rcx, rbx
call fcn.140002b00
cmp byte [rbx + 8], 0
jne 0x140002ea2
mov eax, dword [rbx + 0xc]
add rsp, 0x20
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor eax, eax
add rsp, 0x20
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret