Function at 0x180008d20
Capabilities:
Enumerate pe sections

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x18003c080]
xor rax, rsp
mov qword [rbp + 0x68], rax
mov rbx, rcx
mov qword [rbp - 0x48], rcx
mov dword [rbp + 8], 0x74006e
mov dword [rbp + 0xc], 0x6c0064
mov dword [rbp + 0x10], 0x2e006c
mov dword [rbp + 0x14], 0x6c0064
mov dword [rbp + 0x18], 0x6c
xor r13d, r13d
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r12, rax
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x180008da2
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
test r12, r12
je 0x1800094b5
test rax, rax
je 0x1800094b5
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
mov qword [rbp - 8], rax
mov qword [rbp], rax
movdqa xmm0, xmmword [0x180036ff0]
movdqu xmmword [rbp + 0x38], xmm0
mov dword [rbp + 0x48], 0x676e6972
mov byte [rbp + 0x4c], al
lea rdx, [rbp + 0x38]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
jne 0x180008e51
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009539
jmp 0x1800094ec
mov r8, rbx
lea rcx, [rbp - 0x40]
call fcn.180009780
nop
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rbp - 8]
call rsi
mov dword [rsp + 0x70], 0x30
mov qword [rsp + 0x78], r13
mov dword [rbp - 0x78], 0x40
lea rax, [rbp - 8]
mov qword [rbp - 0x80], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rsp + 0x58], r13
lea r8, [rsp + 0x70]
mov edx, 0xc
lea rcx, [rsp + 0x58]
call qword [0x18003e920]
mov rcx, qword [rsp + 0x58]
test eax, eax
jns 0x180008f5a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180008f04
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008eff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009569
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000953f
jmp 0x1800094ec
mov qword [rsp + 0x60], r13
mov qword [rbp - 0x10], r13
mov dword [rsp + 0x48], 2
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], 1
lea rax, [rbp - 0x10]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rsp + 0x60]
lea rdx, [r9 - 1]
call qword [0x18003e928]
test eax, eax
jns 0x180009047
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180008ff1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008fec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000956f
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009545
jmp 0x1800094ec
xor eax, eax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
lea r9d, [rax + 0x18]
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rax - 1]
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
test eax, eax
jne 0x180009108
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800090b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800090ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009575
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000954b
jmp 0x1800094ec
mov r10, qword [rbp - 0x60]
movsxd rcx, dword [r10 + 0x3c]
mov r8, r13
movzx r9d, word [rcx + r10 + 6]
test r9, r9
je 0x180009274
movzx eax, word [rcx + r10 + 0x14]
lea rdx, [r10 + 0x18]
add rdx, rcx
add rdx, rax
lea r11, str..text
nop dword [rax]
mov rcx, r13
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180009264
cmp rcx, 6
jne 0x180009143
mov ecx, dword [rdx + 0xc]
lea rdi, [rcx + r10]
mov r15, qword [rsp + 0x60]
add r15, rcx
mov esi, dword [rdx + 8]
mov qword [rsp + 0x68], rdi
mov qword [rbp - 0x18], rsi
movdqa xmm0, xmmword [0x180036f80]
movdqu xmmword [rbp + 0x20], xmm0
mov dword [rbp + 0x30], 0x6f6d654d
mov word [rbp + 0x34], 0x7972
mov byte [rbp + 0x36], 0
lea rdx, [rbp + 0x20]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [rbp - 0x18]
lea rdx, [rsp + 0x68]
mov rcx, 0xffffffffffffffff
call r14
test eax, eax
jns 0x180009345
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18000920e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009209
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000957b
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009551
jmp 0x1800094ec
inc r8
add rdx, 0x28
cmp r8, r9
jb 0x180009140
movdqa xmm0, xmmword [0x180036f10]
movdqu xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], 0x6e6f6974
mov byte [rbp + 0x64], 0
lea rdx, [rbp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [rsp + 0x60]
mov rcx, 0xffffffffffffffff
call rax
test eax, eax
jns 0x180009411
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800092ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800092ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009581
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009557
jmp 0x1800094ec
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.18000ced0
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x20]
lea r8, [rbp - 0x18]
lea rdx, [rsp + 0x68]
mov rcx, 0xffffffffffffffff
call r14
test eax, eax
jns 0x180009274
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800093bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800093b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009587
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000955d
jmp 0x1800094ec
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18000945d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009458
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000958d
call fcn.18000b394
movdqa xmm0, xmmword [0x180036d30]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094a9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009533
mov rcx, r8
call fcn.18000b394
mov eax, 1
jmp 0x1800094f6
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800094f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800094ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009563
mov rcx, r8
call fcn.18000b394
xor eax, eax
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 7
mov word [rbx], r13w
mov rcx, qword [rbp + 0x68]
xor rcx, rsp
call fcn.18000b370
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
nop
call fcn.180010e3c
nop
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3
call fcn.180010e3c
int3