Function at 0x5ef720
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
add rsp, 0xffffffffffffff80
mov r8d, 0x38
mov r11, rdx
nop
add r11, 1
movzx eax, byte [r11 - 1]
or ah, 1
shl eax, 2
nop
sub r8d, 1
mov r10d, eax
shr eax, 1
and r10d, 8
mov r9d, r8d
mov byte [rsp + r9 + 0x40], r10b
mov r10d, eax
and r10d, 4
cmp eax, 0xf
mov byte [rsp + r9], r10b
ja 0x5ef740
test r8d, r8d
jne 0x5ef730
lea r11, [rcx + 0x80]
lea rax, [0x007b6500]
nop dword [rax + rax]
movzx r8d, byte [rax + 1]
movzx r9d, byte [rax]
movzx r10d, byte [rax + 2]
movzx ebx, byte [rax + 8]
movzx r8d, byte [rsp + r8]
or r8b, byte [rsp + r9 + 0x40]
movzx r9d, byte [rax + 3]
movzx r9d, byte [rsp + r9]
movsx r8d, r8b
or r9b, byte [rsp + r10 + 0x40]
shl r8d, 4
movzx r10d, byte [rax + 4]
movsx r9d, r9b
shl r9d, 2
or r8d, r9d
movzx r9d, byte [rax + 5]
movzx r9d, byte [rsp + r9]
or r9b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 6]
movsx r9d, r9b
or r8d, r9d
movzx r9d, byte [rax + 7]
shl r8d, 8
movzx r9d, byte [rsp + r9]
or r9b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 9]
movzx r10d, byte [rsp + r10]
movsx r9d, r9b
or r10b, byte [rsp + rbx + 0x40]
shl r9d, 4
movzx ebx, byte [rax + 0xa]
movsx r10d, r10b
shl r10d, 2
or r9d, r10d
movzx r10d, byte [rax + 0xb]
movzx r10d, byte [rsp + r10]
or r10b, byte [rsp + rbx + 0x40]
movzx ebx, byte [rax + 0xe]
movsx r10d, r10b
or r9d, r10d
movzx r10d, byte [rax + 0xc]
or r9d, r8d
movzx r8d, byte [rax + 0xd]
shl r9d, 8
movzx r8d, byte [rsp + r8]
or r8b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 0xf]
movzx r10d, byte [rsp + r10]
movsx r8d, r8b
or r10b, byte [rsp + rbx + 0x40]
shl r8d, 4
movzx ebx, byte [rax + 0x10]
movsx r10d, r10b
shl r10d, 2
or r8d, r10d
movzx r10d, byte [rax + 0x11]
movzx r10d, byte [rsp + r10]
or r10b, byte [rsp + rbx + 0x40]
movzx ebx, byte [rax + 0x14]
movsx r10d, r10b
or r8d, r10d
movzx r10d, byte [rax + 0x12]
or r8d, r9d
movzx r9d, byte [rax + 0x13]
shl r8d, 8
movzx r9d, byte [rsp + r9]
or r9b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 0x15]
movzx r10d, byte [rsp + r10]
movsx r9d, r9b
or r10b, byte [rsp + rbx + 0x40]
shl r9d, 4
movzx ebx, byte [rax + 0x16]
movsx r10d, r10b
shl r10d, 2
or r9d, r10d
movzx r10d, byte [rax + 0x17]
movzx r10d, byte [rsp + r10]
or r10b, byte [rsp + rbx + 0x40]
movsx r10d, r10b
or r9d, r10d
or r9d, r8d
mov dword [rcx], r9d
movzx r9d, byte [rax + 0x19]
movzx r8d, byte [rax + 0x18]
movzx r10d, byte [rax + 0x1a]
movzx ebx, byte [rax + 0x20]
movzx r9d, byte [rsp + r9]
or r9b, byte [rsp + r8 + 0x40]
movzx r8d, byte [rax + 0x1b]
movzx r8d, byte [rsp + r8]
movsx r9d, r9b
or r8b, byte [rsp + r10 + 0x40]
shl r9d, 4
movzx r10d, byte [rax + 0x1c]
movsx r8d, r8b
shl r8d, 2
or r9d, r8d
movzx r8d, byte [rax + 0x1d]
movzx r8d, byte [rsp + r8]
or r8b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 0x1e]
movsx r8d, r8b
or r9d, r8d
movzx r8d, byte [rax + 0x1f]
shl r9d, 8
movzx r8d, byte [rsp + r8]
or r8b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 0x21]
movzx r10d, byte [rsp + r10]
movsx r8d, r8b
or r10b, byte [rsp + rbx + 0x40]
shl r8d, 4
movzx ebx, byte [rax + 0x22]
movsx r10d, r10b
shl r10d, 2
or r8d, r10d
movzx r10d, byte [rax + 0x23]
movzx r10d, byte [rsp + r10]
or r10b, byte [rsp + rbx + 0x40]
movzx ebx, byte [rax + 0x26]
movsx r10d, r10b
or r8d, r10d
movzx r10d, byte [rax + 0x24]
or r8d, r9d
movzx r9d, byte [rax + 0x25]
shl r8d, 8
movzx r9d, byte [rsp + r9]
or r9b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 0x27]
movzx r10d, byte [rsp + r10]
movsx r9d, r9b
or r10b, byte [rsp + rbx + 0x40]
shl r9d, 4
movzx ebx, byte [rax + 0x28]
movsx r10d, r10b
shl r10d, 2
or r9d, r10d
movzx r10d, byte [rax + 0x29]
movzx r10d, byte [rsp + r10]
or r10b, byte [rsp + rbx + 0x40]
movzx ebx, byte [rax + 0x2c]
movsx r10d, r10b
or r9d, r10d
movzx r10d, byte [rax + 0x2a]
or r9d, r8d
movzx r8d, byte [rax + 0x2b]
shl r9d, 8
movzx r8d, byte [rsp + r8]
or r8b, byte [rsp + r10 + 0x40]
movzx r10d, byte [rax + 0x2d]
movzx r10d, byte [rsp + r10]
movsx r8d, r8b
or r10b, byte [rsp + rbx + 0x40]
shl r8d, 4
movzx ebx, byte [rax + 0x2e]
movsx r10d, r10b
shl r10d, 2
or r8d, r10d
movzx r10d, byte [rax + 0x2f]
movzx r10d, byte [rsp + r10]
or r10b, byte [rsp + rbx + 0x40]
movsx r10d, r10b
or r8d, r10d
add rcx, 8
add rax, 0x30
or r8d, r9d
ror r8d, 4
mov dword [rcx - 4], r8d
cmp rcx, r11
jne 0x5ef780
movzx r8d, byte [rdx + 1]
movzx ecx, byte [rdx]
lea rax, [0x007b6420]
shr r8b, 1
shr cl, 1
movsx r10d, r8b
movsx r11d, cl
lea r9d, [r10 + 1]
movsxd rbx, r11d
movsxd r9, r9d
movzx r9d, byte [rax + r9]
movzx eax, byte [rax + rbx]
add r9d, eax
mov eax, 1
cmp r9d, 0x19
ja 0x5efab6
lea rbx, [0x007b63a0]
lea r9, [rbx + r9*4]
cmp cl, byte [r9]
je 0x5efabc
sub rsp, 0xffffffffffffff80
pop rbx
ret
cmp r8b, byte [r9 + 1]
jne 0x5efab6
movzx ecx, byte [rdx + 2]
shr cl, 1
movzx ecx, cl
cmp r11d, ecx
jne 0x5efab6
movzx ecx, byte [rdx + 3]
shr cl, 1
movzx ecx, cl
cmp r10d, ecx
jne 0x5efab6
movzx ecx, byte [rdx + 4]
movzx r10d, byte [rdx + 5]
shr cl, 1
cmp cl, byte [r9 + 2]
jne 0x5efab6
shr r10b, 1
cmp r10b, byte [r9 + 3]
jne 0x5efab6
movzx r8d, byte [rdx + 6]
movsx ecx, cl
shr r8b, 1
movzx r8d, r8b
cmp r8d, ecx
jne 0x5efab6
movzx eax, byte [rdx + 7]
movsx r10d, r10b
shr al, 1
movzx eax, al
cmp eax, r10d
setne al
movzx eax, al
jmp 0x5efab6