Function at 0x1400235a0
Capabilities:
Enumerate pe sections

Disassembly:
push r12
push r13
push r14
push r15
sub rsp, 0x2c8
mov rax, qword [0x1400b7c40]
xor rax, rsp
mov qword [rsp + 0x298], rax
mov r13, r9
mov r14, r8
mov r12, rdx
mov r15, rcx
call fcn.140023030
test al, al
jne 0x1400235fd
lea rdx, str.____Failed_to_resolve_cheat_imports_
lea rcx, [0x140106ea0]
call fcn.140014590
mov rcx, rax
call fcn.140014800
call fcn.14002ba30
xor eax, eax
jmp 0x1400237ee
mov qword [rsp + 0x2c0], rbx
mov r8, r13
mov qword [rsp + 0x2b8], rbp
mov rdx, r14
mov qword [rsp + 0x2b0], rsi
mov rcx, r12
mov qword [rsp + 0x2a8], rdi
call fcn.140023400
xor edx, edx
lea rcx, [rsp + 0x5c]
mov r8d, 0x22c
call fcn.140064be0
mov eax, dword [r15]
lea r8, [rsp + 0x40]
mov rcx, qword [r15 + 8]
xor ebx, ebx
mov dword [rsp + 0x44], eax
mov r9d, 0x248
movzx eax, word [r14 + 0x14]
mov edx, 0x220da4
add eax, 0x18
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x58], eax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x248
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x290], ebx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movzx edi, word [r14 + 0x14]
mov ebp, ebx
movzx ecx, word [r14 + 6]
add rdi, 0x20
cmp bx, cx
jae 0x140023776
add rdi, r14
nop word [rax + rax]
mov esi, dword [rdi + 8]
cmp esi, dword [rdi]
cmovae esi, dword [rdi]
test esi, esi
je 0x140023760
xor edx, edx
lea rcx, [rsp + 0x5c]
mov r8d, 0x22c
call fcn.140064be0
mov eax, dword [r15]
lea r8, [rsp + 0x40]
mov rcx, qword [r15 + 8]
mov r9d, 0x248
mov dword [rsp + 0x44], eax
mov edx, 0x220da4
mov eax, dword [rdi + 4]
add rax, r13
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x48], rax
mov eax, dword [rdi + 0xc]
add rax, r12
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 0x248
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x290], ebx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movzx eax, word [r14 + 6]
inc ebp
add rdi, 0x28
cmp ebp, eax
jl 0x1400236d0
movzx ecx, ax
mov eax, dword [r14 + 0x28]
mov rbp, qword [rsp + 0x2b8]
add rax, r13
cmp byte [rsp + 0x310], bl
je 0x1400237d6
mov edi, dword [r14 + 0x88]
test edi, edi
je 0x1400237d4
movzx eax, word [r14 + 0x14]
lea rdx, [r14 + 0x18]
add rdx, rax
movzx r10d, cx
mov r8, rdx
mov r9d, ebx
test r10d, r10d
je 0x1400237d4
mov r11d, dword [r8 + 0xc]
cmp edi, r11d
jb 0x1400237c8
mov ecx, dword [r8 + 8]
add ecx, r11d
cmp edi, ecx
jb 0x14002380e
inc r9d
add r8, 0x28
cmp r9d, r10d
jl 0x1400237b4
xor eax, eax
mov rsi, qword [rsp + 0x2b0]
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x2a8]
mov rcx, qword [rsp + 0x298]
xor rcx, rsp
call fcn.140062540
add rsp, 0x2c8
pop r15
pop r14
pop r13
pop r12
ret
mov esi, dword [r8 + 0x14]
sub edi, r11d
mov eax, edi
add rax, r12
add rsi, rax
je 0x1400237d4
mov edi, dword [rsi + 0x1c]
mov r8, rdx
mov r9d, ebx
nop dword [rax + rax]
mov r11d, dword [r8 + 0xc]
cmp edi, r11d
jb 0x140023844
mov ecx, dword [r8 + 8]
add ecx, r11d
cmp edi, ecx
jb 0x140023852
inc r9d
add r8, 0x28
cmp r9d, r10d
jl 0x140023830
jmp 0x1400237d4
sub edi, r11d
mov r11d, dword [r8 + 0x14]
mov eax, edi
add rax, r12
add r11, rax
je 0x1400237d4
mov r9d, dword [rsi + 0x24]
nop dword [rax + rax]
mov r8d, dword [rdx + 0xc]
cmp r9d, r8d
jb 0x140023884
mov ecx, dword [rdx + 8]
add ecx, r8d
cmp r9d, ecx
jb 0x140023894
inc ebx
add rdx, 0x28
cmp ebx, r10d
jl 0x140023870
jmp 0x1400237d4
mov ecx, dword [rdx + 0x14]
sub r9d, r8d
mov eax, r9d
add rax, r12
add rcx, rax
je 0x1400237d4
movzx eax, word [rcx]
mov eax, dword [r11 + rax*4]
add rax, r13
jmp 0x1400237d6