Function at 0x1400b9470
Capabilities:
Enumerate pe sections

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rax, rdx
mov rbx, qword [rcx]
mov ecx, dword [rcx + 8]
cmp ecx, 0x20
je 0x1400b949a
mov rcx, rax
mov edx, 8
call fcn.1401302e0
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
ret
movzx ecx, word [rbx + 0xc]
movzx edx, word [rbx + 0xe]
movzx r8d, cl
lea r10, [0x1404fc858]
add r8, r10
movzx r8d, byte [r8]
movsx r8, r8b
movzx r10d, dl
shl r8d, 4
lea r9, [0x1404fc858]
add r10, r9
movzx r10d, byte [r10]
movsx r10, r10b
or r8d, r10d
or ecx, edx
sar ecx, 8
mov edx, 0xffffffff
test ecx, ecx
cmovne r8d, edx
mov byte [rax], r8b
lea rcx, [rax + 1]
movzx edx, word [rbx + 8]
movzx r10d, word [rbx + 0xa]
movzx r9d, dl
lea r11, [0x1404fc858]
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
lea rsi, [0x1404fc858]
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 2]
movzx edx, word [rbx + 4]
movzx r10d, word [rbx + 6]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 3]
movzx edx, word [rbx]
movzx r10d, word [rbx + 2]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 4]
movzx edx, word [rbx + 0x14]
movzx r10d, word [rbx + 0x16]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 5]
movzx edx, word [rbx + 0x10]
movzx r10d, word [rbx + 0x12]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 6]
movzx edx, word [rbx + 0x1c]
movzx r10d, word [rbx + 0x1e]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 7]
movzx edx, word [rbx + 0x18]
movzx r10d, word [rbx + 0x1a]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 8]
movzx edx, word [rbx + 0x20]
movzx r10d, word [rbx + 0x22]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 9]
movzx edx, word [rbx + 0x24]
movzx r10d, word [rbx + 0x26]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 0xa]
movzx edx, word [rbx + 0x28]
movzx r10d, word [rbx + 0x2a]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 0xb]
movzx edx, word [rbx + 0x2c]
movzx r10d, word [rbx + 0x2e]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 0xc]
movzx edx, word [rbx + 0x30]
movzx r10d, word [rbx + 0x32]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 0xd]
movzx edx, word [rbx + 0x34]
movzx r10d, word [rbx + 0x36]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 0xe]
movzx edx, word [rbx + 0x38]
movzx r10d, word [rbx + 0x3a]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
lea rcx, [rax + 0xf]
movzx edx, word [rbx + 0x3c]
movzx r10d, word [rbx + 0x3e]
movzx r9d, dl
add r9, rsi
movzx r9d, byte [r9]
movsx r9, r9b
movzx r11d, r10b
shl r9d, 4
add r11, rsi
movzx r11d, byte [r11]
movsx r11, r11b
or r9d, r11d
or edx, r10d
sar edx, 8
mov r10d, 0xffffffff
test edx, edx
cmovne r9d, r10d
or r8d, r9d
mov byte [rcx], r9b
test r8d, r8d
jl 0x1400b995c
mov eax, 1
add rsp, 0x28
pop rbx
pop rsi
ret
mov rcx, rax
mov edx, 7
call fcn.1401302e0
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
ret