Function at 0x140002300
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5d0
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rsp + 0x5c0], rax
mov qword [rsp + 0x20], rdx
mov r13, rcx
mov r8d, 0x104
lea rdx, [rsp + 0x4b0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x490], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x4a0], xmm1
lea rax, [rsp + 0x4b0]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140002370
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x14000262e
xor r14d, r14d
cmp rbx, 0xf
ja 0x1400023de
mov qword [rsp + 0x4a0], rbx
mov qword [rsp + 0x4a8], 0xf
mov r8, rbx
lea rdx, [rsp + 0x4b0]
lea rcx, [rsp + 0x490]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x490], r14b
mov rdi, qword [rsp + 0x4a8]
mov rsi, qword [rsp + 0x490]
jmp 0x140002483
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x140002417
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140004560
test rax, rax
je 0x1400025d2
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140002454
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140002442
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002634
jmp 0x1400023f8
test rcx, rcx
je 0x140002451
call fcn.140004560
mov rsi, rax
jmp 0x140002454
mov rsi, r14
mov qword [rsp + 0x490], rsi
mov qword [rsp + 0x4a0], rbx
mov qword [rsp + 0x4a8], rdi
mov r8, rbx
lea rdx, [rsp + 0x4b0]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], r14b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rsp + 0x50], 0x438
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
mov r12, r14
test eax, eax
cmovne r12, qword [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movsxd r15, dword [r12 + 0x3c]
add r15, r12
movzx ebp, word [r15 + 0x14]
add rbp, 0x18
add rbp, r15
xor eax, eax
cmp ax, word [r15 + 6]
jae 0x140002599
lea rbx, str..dll
mov rdx, rbp
lea rcx, [rsp + 0x28]
call fcn.140002e50
mov rdx, rax
mov rax, qword [rax + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140002509
mov rdx, qword [rdx]
cmp rax, 4
jne 0x140002545
xor r8d, r8d
mov ecx, r8d
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rbx + rcx - 1]
jne 0x140002538
cmp rcx, 4
jne 0x140002520
mov eax, r8d
jmp 0x14000253d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140002545
mov bl, 1
jmp 0x140002547
xor bl, bl
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x140002580
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000257b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400025d9
call fcn.1400045a4
test bl, bl
jne 0x1400025e0
add rbp, 0x28
inc r14d
movzx eax, word [r15 + 6]
cmp r14d, eax
jl 0x1400024e4
lea rcx, str.IDK_n
call fcn.140002260
xor bl, bl
cmp rdi, 0xf
jbe 0x140002600
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400025f8
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400025f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [rbp + 0x10]
mov rcx, qword [rsp + 0x20]
mov dword [rcx], eax
mov eax, dword [rbp + 0xc]
add rax, r12
mov qword [r13], rax
mov bl, 1
jmp 0x1400025a7
mov rcx, rsi
call fcn.1400045a4
movzx eax, bl
mov rcx, qword [rsp + 0x5c0]
xor rcx, rsp
call fcn.140004540
mov rbx, qword [rsp + 0x620]
add rsp, 0x5d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400021d0
int3
call fcn.140001110
int3