Function at 0x40aa70
Capabilities:
Enumerate pe sections

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rsi, rdx
mov edx, dword [rcx + 0x38]
mov byte [rsp + 0x60], r8b
mov r8d, dword [rcx + 0x30]
mov rbx, rcx
mov ecx, dword [rcx + 0x34]
mov byte [rsp + 0x68], r9b
mov eax, edx
add eax, r8d
adc ecx, 0
mov byte [rsp + 0x27], al
mov r9d, ecx
mov byte [rsp + 0x23], cl
shr r9d, 0x18
mov byte [rsp + 0x20], r9b
mov r9d, ecx
shr r9d, 0x10
mov byte [rsp + 0x21], r9b
mov r9d, ecx
mov ecx, eax
shr ecx, 0x18
shr r9d, 8
mov byte [rsp + 0x24], cl
mov ecx, eax
mov byte [rsp + 0x22], r9b
shr ecx, 0x10
mov byte [rsp + 0x25], cl
mov ecx, eax
shr ecx, 8
cmp edx, 0x1b8
mov byte [rsp + 0x26], cl
je 0x40acc0
cmp edx, 0x1b7
jg 0x40ac70
test edx, edx
je 0x40ac60
nop
mov r8d, 0x1b8
sub eax, 0x1b8
mov rcx, rbx
sub r8d, edx
lea rdx, [0x00465480]
mov dword [rbx + 0x30], eax
movsxd r8, r8d
call fcn.0040a860
nop word cs:[rax + rax]
lea rdx, [rsp + 0x68]
mov r8d, 8
mov rcx, rbx
call fcn.0040a860
mov eax, dword [rbx + 0x30]
sub eax, 8
nop dword [rax]
sub eax, 0x40
lea rdx, [rsp + 0x20]
mov r8d, 0x40
mov dword [rbx + 0x30], eax
mov rcx, rbx
call fcn.0040a860
mov eax, dword [rbx]
shr eax, 0x18
mov byte [rsi], al
mov eax, dword [rbx]
shr eax, 0x10
mov byte [rsi + 1], al
mov eax, dword [rbx]
shr eax, 8
mov byte [rsi + 2], al
mov eax, dword [rbx]
mov byte [rsi + 3], al
movzx eax, byte [rbx + 7]
mov byte [rsi + 4], al
movzx eax, word [rbx + 6]
mov byte [rsi + 5], al
mov eax, dword [rbx + 4]
shr eax, 8
mov byte [rsi + 6], al
mov eax, dword [rbx + 4]
mov byte [rsi + 7], al
movzx eax, byte [rbx + 0xb]
mov byte [rsi + 8], al
movzx eax, word [rbx + 0xa]
mov byte [rsi + 9], al
mov eax, dword [rbx + 8]
shr eax, 8
mov byte [rsi + 0xa], al
mov eax, dword [rbx + 8]
mov byte [rsi + 0xb], al
movzx eax, byte [rbx + 0xf]
mov byte [rsi + 0xc], al
movzx eax, word [rbx + 0xe]
mov byte [rsi + 0xd], al
mov eax, dword [rbx + 0xc]
shr eax, 8
mov byte [rsi + 0xe], al
mov eax, dword [rbx + 0xc]
mov byte [rsi + 0xf], al
movzx eax, byte [rbx + 0x13]
mov byte [rsi + 0x10], al
movzx eax, word [rbx + 0x12]
mov byte [rsi + 0x11], al
mov eax, dword [rbx + 0x10]
shr eax, 8
mov byte [rsi + 0x12], al
mov eax, dword [rbx + 0x10]
mov byte [rsi + 0x13], al
movzx eax, byte [rbx + 0x17]
mov byte [rsi + 0x14], al
movzx eax, word [rbx + 0x16]
mov byte [rsi + 0x15], al
mov eax, dword [rbx + 0x14]
shr eax, 8
mov byte [rsi + 0x16], al
mov eax, dword [rbx + 0x14]
mov byte [rsi + 0x17], al
movzx eax, byte [rbx + 0x1b]
mov byte [rsi + 0x18], al
movzx eax, word [rbx + 0x1a]
mov byte [rsi + 0x19], al
mov eax, dword [rbx + 0x18]
shr eax, 8
mov byte [rsi + 0x1a], al
mov eax, dword [rbx + 0x18]
mov byte [rsi + 0x1b], al
movzx eax, byte [rbx + 0x1f]
mov byte [rsi + 0x1c], al
movzx eax, word [rbx + 0x1e]
mov byte [rsi + 0x1d], al
mov eax, dword [rbx + 0x1c]
shr eax, 8
mov byte [rsi + 0x1e], al
mov eax, dword [rbx + 0x1c]
mov byte [rsi + 0x1f], al
add rsp, 0x38
pop rbx
pop rsi
ret
mov dword [rbx + 0x3c], 1
jmp 0x40ab00
mov r8d, 0x200
sub eax, 0x200
mov rcx, rbx
sub r8d, edx
lea rdx, [0x00465480]
mov dword [rbx + 0x30], eax
movsxd r8, r8d
call fcn.0040a860
sub dword [rbx + 0x30], 0x1b8
lea rdx, [0x00465481]
mov r8d, 0x1b8
mov rcx, rbx
call fcn.0040a860
mov dword [rbx + 0x3c], 1
jmp 0x40ab30
sub r8d, 8
lea rdx, [rsp + 0x60]
mov rcx, rbx
mov dword [rbx + 0x30], r8d
mov r8d, 8
call fcn.0040a860
mov eax, dword [rbx + 0x30]
jmp 0x40ab50