Function at 0x140083f50
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [0x1400f7060]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor r12d, r12d
mov dword [rsp + 0x60], r12d
cmp qword [0x1400fbc30], r12
jne 0x140084753
mov qword [rbp + 0x128], r12
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], 7
mov word [rbp + 0x128], r12w
lea r8d, [r12 + 0x11]
lea rdx, str.dllblacklist.json
lea rcx, [rbp + 0x128]
call fcn.1400043e0
nop
mov dl, 1
lea rcx, [rsp + 0x70]
call fcn.14007cfd0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14002b490
nop
lea rcx, [rsp + 0x70]
call fcn.140003e50
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.1400138b0
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp - 0x60]
call fcn.140009b70
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.1400138b0
nop
lea rcx, [rbp - 0x60]
call fcn.140003e50
nop
lea rcx, [rbp - 0x20]
call fcn.140003e50
nop
lea rcx, [rbp + 0x128]
call fcn.140003e50
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x180]
call fcn.14009c250
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 8
cmovae rdx, qword [rbp + 0x148]
mov dword [rsp + 0x20], 1
lea r9d, [r12 + 0x40]
lea r8d, [r12 + 1]
lea rcx, [rbp + 0x180]
call fcn.14001d8e0
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x17c], edx
cmp qword [rbp + 0x210], r12
je 0x1400846bf
mov qword [rbp + 0x48], r12
mov byte [rsp + 0x20], r12b
xor r9d, r9d
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x70]
call fcn.140068180
movzx edx, byte [0x1400fbd00]
movzx ecx, byte [rax]
mov byte [0x1400fbd00], cl
mov byte [rax], dl
lea rcx, [rax + 8]
mov rdx, qword [0x1400fbd08]
mov r8, qword [rcx]
mov qword [0x1400fbd08], r8
mov qword [rcx], rdx
movzx edx, byte [rax]
call fcn.14007dd80
nop
cmp byte [0x1400fbd00], 1
jne 0x1400846bf
mov rbx, qword [0x1400fbd08]
mov rbx, qword [rbx]
lea rax, [rbx + 8]
mov qword [rsp + 0x60], rax
mov rdi, qword [rax]
mov r15, rbx
lea edx, [r12 + 9]
cmp byte [rdi + 0x19], r12b
jne 0x1400841f4
nop dword [rax]
lea rsi, [rdi + 0x20]
mov r14, qword [rsi + 0x10]
mov rcx, rsi
mov r13, qword [rsi + 0x18]
cmp r13, 0x10
jb 0x140084178
mov rcx, qword [rsi]
mov r12, r14
cmp r14, 9
cmova r12, rdx
mov r8, r12
lea rdx, str.blacklist
call fcn.14009c470
test eax, eax
je 0x1400841c2
js 0x1400841c8
cmp byte [r15 + 0x19], 0
je 0x1400841d7
cmp r13, 0x10
jb 0x1400841a8
mov rsi, qword [rsi]
mov r8, r12
lea rdx, str.blacklist
mov rcx, rsi
call fcn.14009c470
test eax, eax
je 0x1400841ce
jle 0x1400841d7
jmp 0x1400841d4
cmp r14, 9
jae 0x140084198
mov rdi, qword [rdi + 0x10]
jmp 0x1400841dd
cmp r14, 0xa
jb 0x1400841d7
mov r15, rdi
mov rbx, rdi
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], 0
mov edx, 9
je 0x140084160
mov rax, qword [rsp + 0x60]
xor r12d, r12d
cmp byte [r15 + 0x19], 0
cmove rax, r15
mov rdi, qword [rax]
cmp byte [rdi + 0x19], 0
jne 0x14008424e
nop word [rax + rax]
lea rcx, [rdi + 0x20]
mov rsi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140084222
mov rcx, qword [rcx]
mov r8, rsi
cmp rsi, 9
cmova r8, rdx
lea rdx, str.blacklist
call fcn.14009c470
test eax, eax
je 0x14008428f
jg 0x140084295
mov rdi, qword [rdi + 0x10]
cmp byte [rdi + 0x19], 0
mov edx, 9
je 0x140084210
mov rdx, r12
cmp rbx, r15
je 0x1400846bf
nop word [rax + rax]
inc rdx
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14008429d
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14008428a
cmp rbx, qword [rax + 0x10]
jne 0x14008428a
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140084277
mov rbx, rax
jmp 0x1400842bf
cmp rsi, 0xa
jb 0x14008423f
mov r15, rdi
mov rdi, qword [rdi]
jmp 0x140084243
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400842bf
nop dword [rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400842b0
cmp rbx, r15
jne 0x140084260
test rdx, rdx
je 0x1400846bf
lea rdx, str.blacklist
lea rcx, [0x1400fbd00]
call fcn.14005e150
cmp byte [rax], 2
jne 0x1400846bf
lea rdx, str.blacklist
lea rcx, [0x1400fbd00]
call fcn.14005e150
mov rbx, rax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x128], xmm1
mov qword [rbp + 0x138], r12
mov dword [rsp + 0x60], 0x13e
mov rcx, rax
cmp byte [rax], 2
jne 0x140084789
movzx r8d, byte [rsp + 0x58]
lea rdx, [rbp + 0x128]
call fcn.140065940
nop
mov esi, 0xbe
mov r15, qword [rbp + 0x128]
mov rdi, r15
mov r14, qword [rbp + 0x130]
cmp r15, r14
je 0x140084620
lea r13, str.black_listed_file:_
nop
lea rcx, [rbp + 0xf8]
call fcn.140074f30
mov rax, qword [rax]
cmp dword [rax], 0
je 0x14008455c
mov rax, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140084385
mov rax, qword [rdi]
mov qword [rbp], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x170], xmm0
mov qword [rbp - 0x30], 0xc
lea rax, [rbp + 0x170]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0x15
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140095680
bts esi, 9
or esi, 1
mov dword [rsp + 0x60], esi
lea rbx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rbx, qword [rsp + 0x70]
movdqa xmm0, xmmword [0x1400d1e10]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], 0x6e
movdqa xmm0, xmmword [str._DLLPROTECT__::_PerformSecurityCLoadLibraryExA_HLoadLibraryExW_HWinVerifyTrust_Hget_module_path_GenericLoadLibraVerifyEmbeddedSiLoadLibraryA_HooLoadLibraryW_HooreadBlacklistJsoDumpDllProtEventK]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x10], 0
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xd0]
call fcn.14005e630
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140067d60
mov rdx, rax
movzx ecx, byte [rax]
mov byte [rsp + 0x30], cl
movzx ecx, byte [rax + 1]
mov byte [rsp + 0x31], cl
movzx ecx, byte [rax + 2]
mov byte [rsp + 0x32], cl
movzx ecx, byte [rax + 3]
mov byte [rsp + 0x33], cl
movzx ecx, byte [rax + 4]
mov byte [rsp + 0x34], cl
movzx ecx, byte [rax + 5]
mov byte [rsp + 0x35], cl
movzx ecx, byte [rax + 6]
mov byte [rsp + 0x36], cl
movzx eax, byte [rax + 7]
mov byte [rsp + 0x37], al
movzx eax, byte [rdx + 8]
mov byte [rsp + 0x38], al
movzx eax, byte [rdx + 9]
mov byte [rsp + 0x39], al
movzx eax, byte [rdx + 0xa]
mov byte [rsp + 0x3a], al
movzx eax, byte [rdx + 0xb]
mov byte [rsp + 0x3b], al
movzx eax, byte [rdx + 0xc]
mov byte [rsp + 0x3c], al
movzx eax, byte [rdx + 0xd]
mov byte [rsp + 0x3d], al
movzx eax, byte [rdx + 0xe]
mov byte [rsp + 0x3e], al
movzx eax, byte [rdx + 0xf]
mov byte [rsp + 0x3f], al
movzx eax, byte [rdx + 0x10]
mov byte [rsp + 0x40], al
movzx eax, byte [rdx + 0x11]
mov byte [rsp + 0x41], al
movzx eax, byte [rdx + 0x12]
mov byte [rsp + 0x42], al
movzx eax, byte [rdx + 0x13]
mov byte [rsp + 0x43], al
movzx eax, byte [rdx + 0x14]
mov byte [rsp + 0x44], al
movzx eax, byte [rdx + 0x15]
mov byte [rsp + 0x45], al
movzx eax, byte [rdx + 0x16]
mov byte [rsp + 0x46], al
movzx eax, byte [rdx + 0x17]
mov byte [rsp + 0x47], al
movzx eax, byte [rdx + 0x18]
mov byte [rsp + 0x48], al
movzx eax, byte [rdx + 0x19]
mov byte [rsp + 0x49], al
movzx eax, byte [rdx + 0x1a]
mov byte [rsp + 0x4a], al
movzx eax, byte [rdx + 0x1b]
mov byte [rsp + 0x4b], al
movzx eax, byte [rdx + 0x1c]
mov byte [rsp + 0x4c], al
movzx eax, byte [rdx + 0x1d]
mov byte [rsp + 0x4d], al
movzx eax, byte [rdx + 0x1e]
mov byte [rsp + 0x4e], al
movzx eax, byte [rdx + 0x1f]
mov byte [rsp + 0x4f], al
movzx eax, byte [rdx + 0x20]
mov byte [rsp + 0x50], al
mov dword [rsp + 0x51], 0x2d202928
mov word [rsp + 0x55], 0x20
mov r9, rbx
xor r8d, r8d
lea rdx, [rsp + 0x30]
xor ecx, ecx
call fcn.14007ca70
nop
test sil, 1
je 0x1400845a1
and esi, 0xfffffffe
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x1400845a1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008459c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400847e0
call fcn.14005c5c0
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400845ae
mov rdx, qword [rdi]
lea rcx, [rsp + 0x70]
call fcn.140087dd0
bts esi, 0xa
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x50]
lea rcx, [0x1400fbc28]
call fcn.140067620
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140084613
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008460e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140084783
call fcn.14005c5c0
add rdi, 0x20
cmp rdi, r14
jne 0x140084360
test r15, r15
je 0x1400846bf
mov rbx, r15
cmp r15, r14
je 0x140084683
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14008466b
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140084666
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400847da
mov rcx, r8
call fcn.14005c5c0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x20
cmp rbx, r14
jne 0x140084631
mov rdx, qword [rbp + 0x138]
sub rdx, r15
and rdx, 0xffffffffffffffe0
mov rax, r15
cmp rdx, 0x1000
jb 0x1400846b6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400847da
mov rcx, r15
call fcn.14005c5c0
nop
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x17c], edx
lea rcx, [rbp + 0x190]
call fcn.140012140
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x17c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x230]
call fcn.140035868
nop
lea rcx, [rbp + 0x148]
call fcn.140003e50
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14005c5a0
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400a87d8
nop
call fcn.140088150
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.1400041f0
nop
mov r8, rax
lea rdx, str.type_must_be_array__but_is
lea rcx, [rbp + 0xb0]
call fcn.140004c20
nop
mov r9, rbx
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x10]
call fcn.140064cb0
lea rdx, [0x1400f53e8]
lea rcx, [rbp + 0x10]
call fcn.14009baa4
nop
call fcn.1400a87d8
nop
call fcn.1400a87d8
int3