Function at 0x14016dd74
Capabilities:
Enumerate pe sections

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4f]
sub rsp, 0xb0
mov r10d, r9d
mov ebx, r8d
mov r14, rdx
mov eax, dword [rdx]
mov dword [rcx], eax
cmp eax, 0x454c4946
je 0x14016ddc6
cmp eax, 2
jbe 0x14016ddbb
cmp eax, 0x44414142
je 0x14016ddbb
xor edi, edi
jmp 0x14016ddbe
mov dil, 1
mov al, dil
jmp 0x14016e0cb
movzx r9d, word [rdx + 4]
movzx r8d, word [rdx + 6]
test r9b, 1
jne 0x14016e0c9
lea edx, [r9 + r8*2]
mov ecx, ebx
mov eax, 1
shl eax, cl
sub eax, 2
cmp edx, eax
ja 0x14016e0c9
xor edi, edi
test r8d, r8d
je 0x14016e0c9
lea eax, [r8 - 1]
cmp eax, r10d
jne 0x14016e0c9
cmp r9d, 0x30
jb 0x14016de21
mov eax, dword [r14 + 0x2c]
cmp eax, dword [rbp + 0x77]
je 0x14016de21
test eax, eax
jne 0x14016e0c9
mov r11, r9
movzx r15d, word [r9 + r14]
mov edx, 1
cmp r8d, edx
jbe 0x14016de60
mov ecx, ebx
mov eax, edx
shl eax, cl
mov r9d, eax
cmp word [rax + r14 - 2], r15w
jne 0x14016e0c9
lea ecx, [rdx + rdx]
add rcx, r11
movzx eax, word [rcx + r14]
mov word [r9 + r14 - 2], ax
inc edx
cmp edx, r8d
jb 0x14016de33
movzx eax, word [r14 + 0x10]
mov r15, qword [rbp + 0x57]
mov word [r15 + 4], ax
movzx r12d, word [r14 + 0x14]
movzx eax, word [r14 + 0x16]
mov word [r15 + 6], ax
mov r13d, dword [r14 + 0x18]
mov edx, dword [r14 + 0x1c]
mov rax, qword [r14 + 0x20]
mov qword [r15 + 8], rax
mov ecx, ebx
shl r10d, cl
cmp r12d, r10d
jae 0x14016e0c9
mov eax, r13d
or eax, r12d
test al, 7
jne 0x14016e0c9
cmp r13d, r10d
ja 0x14016e0c9
cmp edx, r10d
jne 0x14016e0c9
cmp r12d, r13d
jae 0x14016e0c9
mov qword [rbp - 0x61], rdi
mov dword [rbp - 0x59], edi
mov qword [rbp - 0x51], rdi
mov qword [rbp - 0x49], rdi
mov ebx, r13d
sub ebx, r12d
mov edx, r12d
add rdx, r14
mov r8d, ebx
lea rcx, [rbp - 0x69]
call fcn.14016ca6c
test eax, eax
je 0x14016e0b2
cmp ebx, eax
jb 0x14016e0b2
add r12d, eax
mov eax, dword [rbp - 0x69]
cmp eax, 0xffffffff
je 0x14016e0e8
sub eax, 0x10
je 0x14016e069
sub eax, 0x20
je 0x14016e02f
sub eax, 0x50
je 0x14016dfeb
cmp eax, 0x40
je 0x14016df7a
mov r15, qword [rbp + 0x7f]
test r15, r15
je 0x14016e07e
mov ecx, 0x58
call fcn.140202bf8
mov qword [rbp + 0x17], rax
test rax, rax
je 0x14016df5b
lea rdx, [rbp - 0x69]
mov rcx, rax
call fcn.14016cd78
mov rbx, rax
jmp 0x14016df5e
mov rbx, rdi
mov rcx, r15
call fcn.1400f6ac0
mov ecx, dword [r15 + 8]
mov rax, qword [r15]
mov qword [rax + rcx*8], rbx
inc dword [r15 + 8]
jmp 0x14016e07e
lea rbx, [r15 + 0x68]
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x14016e07e
mov r15, qword [rbp - 0x49]
mov rax, qword [rbp - 0x51]
mov qword [rbp + 0x5f], rax
cmp r15, qword [rbx + 8]
je 0x14016dfcf
cmp qword [rbx], rdi
je 0x14016dfad
mov rcx, qword [rbx]
call fcn.140202c34
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
test r15, r15
je 0x14016e07e
mov rcx, r15
call fcn.140202da8
mov qword [rbx], rax
mov qword [rbx + 8], r15
mov rax, qword [rbp + 0x5f]
jmp 0x14016dfd8
test r15, r15
je 0x14016e07e
mov r8, r15
mov rdx, rax
mov rcx, qword [rbx]
call fcn.140201ae0
jmp 0x14016e07e
mov ecx, 0x58
call fcn.140202bf8
mov qword [rbp + 0x1f], rax
test rax, rax
je 0x14016e00f
lea rdx, [rbp - 0x69]
mov rcx, rax
call fcn.14016cd78
mov r15, rax
jmp 0x14016e012
mov r15, rdi
mov rbx, qword [rbp + 0x57]
lea rcx, [rbx + 0x18]
call fcn.1400f6ac0
mov ecx, dword [rbx + 0x20]
mov rax, qword [rbx + 0x18]
mov qword [rax + rcx*8], r15
inc dword [rbx + 0x20]
jmp 0x14016e07e
mov qword [rbp - 1], rdi
mov dword [rbp + 7], edi
mov r8d, dword [rbp - 0x49]
mov rdx, qword [rbp - 0x51]
lea rcx, [rbp - 9]
call fcn.14016c94c
test al, al
je 0x14016e0a3
lea rcx, [r15 + 0x28]
lea rdx, [rbp - 9]
call fcn.14016db9c
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x14016e07e
call fcn.140202c34
jmp 0x14016e07e
lea rcx, [r15 + 0x48]
mov r8d, dword [rbp - 0x49]
mov rdx, qword [rbp - 0x51]
call fcn.14016ca34
test al, al
je 0x14016e0b2
mov rcx, qword [rbp - 0x51]
call fcn.140202c34
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x14016e095
call fcn.140202c34
cmp r12d, r13d
jae 0x14016e0c9
mov r15, qword [rbp + 0x57]
jmp 0x14016dec4
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x14016e0b2
call fcn.140202c34
nop
mov rcx, qword [rbp - 0x51]
call fcn.140202c34
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x14016e0c9
call fcn.140202c34
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp r12d, r13d
jne 0x14016e0b2
mov rcx, qword [rbp - 0x51]
call fcn.140202c34
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x14016e104
call fcn.140202c34
mov al, 1
jmp 0x14016e0cb