Function at 0x1400aa4d0
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
movzx edi, dl
mov rbx, rcx
xor r15d, r15d
mov dword [rcx + 0xa8], r15d
mov rax, qword [rcx + 0xa0]
mov r14, qword [rax + 0x20]
mov qword [rsp + 0xa0], r14
lea rax, vtable.CZipAutoBuffer.0
mov qword [rsp + 0x20], rax
lea ecx, [r15 + 0x2e]
call fcn.1400934b0
mov r13, rax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0x2e
mov r9b, 1
mov rcx, r14
test dil, dil
je 0x1400aa556
lea r8d, [r15 + 0x2e]
mov rdx, rax
call fcn.1400aee80
mov eax, dword [r13]
cmp eax, dword [0x1403a9924]
jne 0x1400aaac9
lea rsi, [r13 + 4]
jmp 0x1400aa568
lea rsi, [rax + 4]
mov r8d, 0x2a
mov rdx, rsi
call fcn.1400aee80
movzx esi, word [rsi]
mov word [rbx + 0xa], r15w
movzx eax, word [r13 + 6]
mov word [rbx + 0xa], ax
mov word [rbx + 0xc], r15w
movzx eax, word [r13 + 8]
mov word [rbx + 0xc], ax
mov word [rbx + 0xe], r15w
movzx eax, word [r13 + 0xa]
mov word [rbx + 0xe], ax
mov word [rbx + 0x10], r15w
movzx eax, word [r13 + 0xc]
mov word [rbx + 0x10], ax
mov word [rbx + 0x12], r15w
movzx eax, word [r13 + 0xe]
mov word [rbx + 0x12], ax
mov dword [rbx + 0x14], r15d
mov eax, dword [r13 + 0x10]
mov dword [rbx + 0x14], eax
mov qword [rbx + 0x18], r15
mov eax, dword [r13 + 0x14]
mov dword [rbx + 0x18], eax
mov qword [rbx + 0x20], r15
mov eax, dword [r13 + 0x18]
mov dword [rbx + 0x20], eax
movzx edi, word [r13 + 0x1c]
movzx ebp, word [r13 + 0x1e]
movzx eax, word [r13 + 0x20]
mov word [rsp + 0x98], ax
mov dword [rbx + 0x28], r15d
movzx eax, word [r13 + 0x22]
mov word [rbx + 0x28], ax
mov word [rbx + 0x2c], r15w
movzx eax, word [r13 + 0x24]
mov word [rbx + 0x2c], ax
mov dword [rbx + 0x90], r15d
mov eax, dword [r13 + 0x26]
mov dword [rbx + 0x90], eax
mov qword [rbx + 0x40], r15
mov eax, dword [r13 + 0x2a]
mov dword [rbx + 0x40], eax
mov rcx, r13
call fcn.1400934c0
mov dword [rsp + 0x30], r15d
mov r13, r15
mov qword [rsp + 0x28], r15
mov byte [rbx + 8], sil
mov eax, esi
shr eax, 8
mov byte [rbx + 0xf0], al
test byte [rbx + 0xc], 1
mov eax, 0xff
cmovne eax, r15d
mov byte [rbx + 0x96], al
mov eax, dword [r14 + 0x48]
mov dword [rsp + 0x90], eax
lea rsi, [rbx + 0xb0]
mov r12d, edi
cmp edi, dword [rsi + 0x10]
je 0x1400aa6a2
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400aa687
call fcn.1400934c0
mov dword [rsi + 0x10], r15d
mov qword [rsi + 8], r15
test r12d, r12d
je 0x1400aa69e
mov rcx, r12
call fcn.1400934b0
mov qword [rsi + 8], rax
mov dword [rsi + 0x10], r12d
jmp 0x1400aa6a2
mov qword [rsi + 8], r15
mov r9b, 1
mov r8d, r12d
mov rdx, qword [rbx + 0xb8]
mov rcx, r14
call fcn.1400aee80
movzx r8d, bp
mov rdx, r14
lea rcx, [rbx + 0x60]
call fcn.1400b7a60
test al, al
jne 0x1400aa6e3
mov rax, qword [rbx + 0xa0]
mov ecx, dword [rax + 0x10]
shr ecx, 0xc
not cl
test cl, 1
jne 0x1400aaac9
xor r10d, r10d
mov edx, r10d
mov r9, qword [rbx + 0x60]
mov rcx, qword [rbx + 0x68]
sub rcx, r9
sar rcx, 3
test ecx, ecx
jle 0x1400aa84e
mov eax, r10d
cmp rcx, rax
jbe 0x1400aad95
mov r8, qword [r9 + rax*8]
cmp word [r8 + 0x1a], 0xa
je 0x1400aa726
inc edx
inc rax
cmp edx, ecx
jl 0x1400aa703
jmp 0x1400aa84e
test r8, r8
je 0x1400aa84e
cmp dword [r8 + 0x10], 0x20
jb 0x1400aa84e
mov rax, qword [r8 + 8]
cmp word [rax + 4], 1
jne 0x1400aa84e
cmp word [rax + 6], 0x18
jne 0x1400aa84e
mov edx, dword [rax + 8]
mov ecx, dword [rax + 0xc]
movabs rdi, 0x19db1ded53e8000
movabs r11, 0xd6bf94d5e57a42bd
test edx, edx
jne 0x1400aa77b
test ecx, ecx
jne 0x1400aa77b
mov rdx, r10
jmp 0x1400aa7a2
shl rcx, 0x20
or rcx, rdx
sub rcx, rdi
mov rax, r11
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
test rdx, rdx
setg cl
mov rax, r10
test cl, cl
cmovne rax, rdx
mov qword [rbx + 0x78], rax
mov rax, qword [r8 + 8]
mov edx, dword [rax + 0x10]
mov ecx, dword [rax + 0x14]
test edx, edx
jne 0x1400aa7c6
test ecx, ecx
jne 0x1400aa7c6
mov rdx, r10
jmp 0x1400aa7ed
shl rcx, 0x20
or rcx, rdx
sub rcx, rdi
mov rax, r11
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
test rdx, rdx
setg cl
mov rax, r10
test cl, cl
cmovne rax, rdx
mov qword [rbx + 0x80], rax
mov rax, qword [r8 + 8]
mov edx, dword [rax + 0x18]
mov ecx, dword [rax + 0x1c]
test edx, edx
jne 0x1400aa814
test ecx, ecx
jne 0x1400aa814
mov rdx, r10
jmp 0x1400aa83e
mov r8, rcx
shl r8, 0x20
or r8, rdx
sub r8, rdi
mov rax, r11
imul r8
add rdx, r8
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
test rdx, rdx
setg cl
mov rax, r10
test cl, cl
cmovne rax, rdx
mov qword [rbx + 0x88], rax
mov eax, 0x800
test word [rbx + 0xc], ax
je 0x1400aa860
or dword [rbx + 0xa8], 4
mov edx, r10d
mov rcx, qword [rbx + 0x68]
sub rcx, r9
sar rcx, 3
test ecx, ecx
jle 0x1400aa9dd
mov rax, r10
mov r8d, 0x7075
nop
cmp rcx, rax
jbe 0x1400aad95
mov rdi, qword [r9 + rax*8]
cmp word [rdi + 0x1a], r8w
je 0x1400aa8a2
inc edx
inc rax
cmp edx, ecx
jl 0x1400aa880
jmp 0x1400aa9dd
test rdi, rdi
je 0x1400aa9dd
movzx ebp, word [rdi + 0x10]
cmp ebp, 5
jb 0x1400aa9dd
mov r14, qword [rdi + 8]
cmp byte [r14], 1
jne 0x1400aa9d5
mov r8, r12
mov rdx, qword [rbx + 0xb8]
xor ecx, ecx
call fcn.14009f5c0
cmp eax, dword [r14 + 1]
jne 0x1400aa9cb
mov r14d, ebp
add ebp, 0xfffffffb
test ebp, ebp
jle 0x1400aa9cb
cmp ebp, dword [rsi + 0x10]
je 0x1400aa92c
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400aa90f
call fcn.1400934c0
xor r12d, r12d
mov dword [rsi + 0x10], r12d
mov qword [rsi + 8], r12
jmp 0x1400aa912
xor r12d, r12d
test ebp, ebp
je 0x1400aa926
mov ecx, ebp
call fcn.1400934b0
mov qword [rsi + 8], rax
mov dword [rsi + 0x10], ebp
jmp 0x1400aa92f
mov qword [rsi + 8], r12
jmp 0x1400aa92f
xor r12d, r12d
lea r8, [r14 - 5]
mov rdx, qword [rdi + 8]
add rdx, 5
mov rcx, qword [rbx + 0xb8]
call fcn.14029d6c0
mov eax, dword [rbx + 0xa8]
shr eax, 2
test al, 1
jne 0x1400aa9cb
mov rcx, rsi
call fcn.1400aa120
mov r8d, 0xfde9
mov rdx, rsi
mov rcx, qword [rbx + 0xc8]
call fcn.1400b6b50
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400aa987
call fcn.1400934c0
mov dword [rsi + 0x10], r12d
mov qword [rsi + 8], r12
mov r8, qword [rbx + 0xc8]
mov rax, r8
cmp qword [r8 + 0x18], 8
jb 0x1400aa9a0
mov rax, qword [r8]
nop dword [rax + rax]
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x1400aa9ad
mov rdx, qword [r8]
mov rcx, qword [r8 + 0x10]
lea rdx, [rdx + rcx*2]
cmp rax, rdx
je 0x1400aa9cb
cmp word [rax], 0x2f
jne 0x1400aa9c5
mov word [rax], 0x5c
add rax, 2
jmp 0x1400aa9a0
or dword [rbx + 0xa8], 1
xor r10d, r10d
mov r14, qword [rsp + 0xa0]
mov r8d, r10d
mov r9, qword [rbx + 0x60]
mov rcx, qword [rbx + 0x68]
sub rcx, r9
sar rcx, 3
test ecx, ecx
jle 0x1400aaae2
mov rax, r10
nop word [rax + rax]
cmp rcx, rax
jbe 0x1400aad95
mov rdx, qword [r9 + rax*8]
cmp word [rdx + 0x1a], 1
je 0x1400aaa24
inc r8d
inc rax
cmp r8d, ecx
jl 0x1400aaa00
jmp 0x1400aaae2
test rdx, rdx
je 0x1400aaae2
movzx r8d, r10w
movzx ecx, word [rdx + 0x10]
mov r11d, 0xffffffff
cmp qword [rbx + 0x20], r11
jne 0x1400aaa5c
mov r8d, 8
cmp r8w, cx
ja 0x1400aaac9
mov rax, qword [rdx + 8]
mov qword [rbx + 0x20], r10
mov rax, qword [rax]
mov qword [rbx + 0x20], rax
mov r9d, ecx
cmp qword [rbx + 0x18], r11
jne 0x1400aaa89
movzx eax, r8w
add eax, 8
cmp eax, ecx
ja 0x1400aaac9
mov rcx, qword [rdx + 8]
mov qword [rbx + 0x18], r10
movzx eax, r8w
mov rcx, qword [rax + rcx]
mov qword [rbx + 0x18], rcx
add r8w, 8
cmp qword [rbx + 0x40], r11
jne 0x1400aaab4
movzx eax, r8w
add eax, 8
cmp eax, r9d
ja 0x1400aaac9
mov rcx, qword [rdx + 8]
mov qword [rbx + 0x40], r10
movzx eax, r8w
mov rcx, qword [rax + rcx]
mov qword [rbx + 0x40], rcx
add r8w, 8
cmp dword [rbx + 0x28], 0xffff
jne 0x1400aaae2
movzx eax, r8w
add eax, 4
cmp eax, r9d
jbe 0x1400aaad0
xor bl, bl
jmp 0x1400aad74
mov rcx, qword [rdx + 8]
mov dword [rbx + 0x28], r10d
movzx eax, r8w
mov ecx, dword [rax + rcx]
mov dword [rbx + 0x28], ecx
cmp word [rbx + 0xe], 0x63
jne 0x1400aab94
cmp byte [rbx + 0x96], 0xff
je 0x1400aab94
mov edx, r10d
mov r9, qword [rbx + 0x60]
mov rcx, qword [rbx + 0x68]
sub rcx, r9
sar rcx, 3
test ecx, ecx
jle 0x1400aab94
mov rax, r10
mov r11d, 0x9901
nop dword [rax]
cmp rcx, rax
jbe 0x1400aad95
mov r8, qword [r9 + rax*8]
cmp word [r8 + 0x1a], r11w
je 0x1400aab3f
inc edx
inc rax
cmp edx, ecx
jl 0x1400aab20
jmp 0x1400aab94
test r8, r8
je 0x1400aab94
cmp dword [r8 + 0x10], 7
jb 0x1400aab94
mov rcx, qword [r8 + 8]
movzx edx, word [rcx]
lea eax, [rdx - 1]
cmp ax, 1
ja 0x1400aab94
mov eax, 0x4541
cmp word [rcx + 2], ax
jne 0x1400aab94
movzx eax, byte [rcx + 4]
mov byte [rbx + 0x96], al
dec al
cmp al, 2
ja 0x1400aab94
mov rax, qword [r8 + 8]
mov word [rbx + 0xe], r10w
movzx eax, word [rax + 5]
mov word [rbx + 0xe], ax
cmp dx, 2
sete al
mov byte [rbx + 0x97], al
movzx r9d, word [rsp + 0x98]
test r9w, r9w
je 0x1400aac14
mov edi, r9d
cmp r9d, dword [rbx + 0xe0]
je 0x1400aabf3
mov rcx, qword [rbx + 0xd8]
test rcx, rcx
je 0x1400aabd1
call fcn.1400934c0
xor r10d, r10d
mov dword [rbx + 0xe0], r10d
mov qword [rbx + 0xd8], r10
test edi, edi
je 0x1400aabec
mov rcx, rdi
call fcn.1400934b0
mov qword [rbx + 0xd8], rax
mov dword [rbx + 0xe0], edi
jmp 0x1400aabf3
mov qword [rbx + 0xd8], r10
mov r9b, 1
mov r8d, edi
mov rdx, qword [rbx + 0xd8]
mov rcx, r14
call fcn.1400aee80
movzx r9d, word [rsp + 0x98]
xor r10d, r10d
mov edx, r10d
mov r8, qword [rbx + 0x60]
mov rcx, qword [rbx + 0x68]
sub rcx, r8
sar rcx, 3
test ecx, ecx
jle 0x1400aac50
mov rax, r10
mov r10d, 0x6375
cmp rcx, rax
jbe 0x1400aad95
mov rsi, qword [r8 + rax*8]
cmp word [rsi + 0x1a], r10w
je 0x1400aac86
inc edx
inc rax
cmp edx, ecx
jl 0x1400aac33
lea rcx, [rbx + 0x60]
call fcn.1400b7d10
mov rax, qword [rsp + 0xa0]
mov ecx, dword [rsp + 0x90]
cmp dword [rax + 0x48], ecx
je 0x1400aad72
mov eax, dword [rax + 0x70]
and eax, 0x70
cmp al, 0x70
je 0x1400aad72
xor bl, bl
jmp 0x1400aad74
test rsi, rsi
je 0x1400aac50
movzx edi, word [rsi + 0x10]
cmp edi, 5
jb 0x1400aac50
mov rbp, qword [rsi + 8]
cmp byte [rbp], 1
jne 0x1400aac50
movzx r8d, r9w
mov rdx, qword [rbx + 0xd8]
xor ecx, ecx
call fcn.14009f5c0
cmp eax, dword [rbp + 1]
jne 0x1400aad66
mov r14d, edi
lea ebp, [rdi - 5]
test ebp, ebp
jle 0x1400aad66
lea rdi, [rbx + 0xd0]
cmp ebp, dword [rdi + 0x10]
je 0x1400aad0b
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400aacee
call fcn.1400934c0
xor r12d, r12d
mov dword [rdi + 0x10], r12d
mov qword [rdi + 8], r12
jmp 0x1400aacf1
xor r12d, r12d
test ebp, ebp
je 0x1400aad05
mov ecx, ebp
call fcn.1400934b0
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], ebp
jmp 0x1400aad0e
mov qword [rdi + 8], r12
jmp 0x1400aad0e
xor r12d, r12d
mov rdx, qword [rsi + 8]
lea r8, [r14 - 5]
add rdx, 5
mov rcx, qword [rbx + 0xd8]
call fcn.14029d6c0
mov eax, dword [rbx + 0xa8]
shr eax, 2
test al, 1
jne 0x1400aad66
mov rcx, rdi
call fcn.1400aa120
mov r8d, 0xfde9
mov rdx, rdi
mov rcx, qword [rbx + 0xe8]
call fcn.1400b6b50
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400aad66
call fcn.1400934c0
mov dword [rdi + 0x10], r12d
mov qword [rdi + 8], r12
or dword [rbx + 0xa8], 2
jmp 0x1400aac50
mov bl, 1
test r13, r13
je 0x1400aad81
mov rcx, r13
call fcn.1400934c0
movzx eax, bl
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400a8b00
nop
int3