Function at 0x140082cb0
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rsi, qword [0x1401d0d90]
mov r15, r8
mov rbx, rdx
mov rcx, r15
xor edx, edx
mov r8d, 0x200
call fcn.140136960
xor edi, edi
mov dword [r15 + 0x200], edi
mov byte [r15 + 0x204], dil
mov eax, dword [rbx + 4]
test eax, eax
jns 0x140082d6c
mov eax, dword [rbx]
mov dword [rbx + 4], edi
test eax, eax
jne 0x140082d12
mov eax, dword [rsi + 0x20]
test eax, eax
jne 0x140082d12
mov rdx, qword [rsi + 0x30]
jmp 0x140082d2d
cmp eax, 2
jl 0x140082d46
cmp eax, dword [rsi + 0x1c]
jge 0x140082d46
mov ecx, dword [rsi + 0x18]
movsxd rdx, eax
sub rdx, 2
shl rdx, cl
add rdx, qword [rsi + 0x38]
mov qword [rbx + 8], rdx
test rdx, rdx
je 0x140082d4e
cmp rdx, 0xffffffffffffffff
je 0x140082d4e
mov rcx, rsi
call fcn.1400822e0
jmp 0x140082db1
mov qword [rbx + 8], 0xffffffffffffffff
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret
add eax, 0x20
cmp eax, dword [0x140196f78]
mov dword [rbx + 4], eax
jb 0x140082d96
mov dword [rbx + 4], edi
mov rcx, rsi
mov rdx, qword [rbx + 8]
call fcn.140082760
mov qword [rbx + 8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140082d4e
mov rdx, qword [rbx + 8]
mov rcx, rsi
call fcn.1400822e0
mov rcx, rax
test rax, rax
je 0x140082d4e
movsxd rax, dword [rbx + 4]
add rax, rcx
mov r14d, 8
mov rbp, rbx
test rax, rax
je 0x140082d4e
nop
movzx edx, byte [rax + 0xb]
cmp dl, 8
je 0x140082dea
movzx ecx, byte [rax]
cmp cl, 0xe5
je 0x140082dea
cmp cl, 0x2e
jne 0x140082e3f
cmp byte [rax + 2], 0x20
jne 0x140082e4d
movzx ecx, byte [rax + 1]
cmp cl, 0x20
je 0x140082dea
cmp cl, 0x2e
jne 0x140082e4d
add dword [rbx + 4], 0x20
mov eax, dword [rbx + 4]
cmp eax, dword [0x140196f78]
jb 0x140082e19
mov dword [rbx + 4], edi
mov rcx, rsi
mov rdx, qword [r14 + rbp]
call fcn.140082760
mov qword [r14 + rbp], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140082d4e
mov rdx, qword [r14 + rbp]
mov rcx, rsi
call fcn.1400822e0
mov rcx, rax
test rax, rax
je 0x140082d4e
movsxd rax, dword [rbx + 4]
add rax, rcx
jne 0x140082dc0
jmp 0x140082d4e
test cl, cl
jne 0x140082e4d
mov eax, 0xfffffffe
jmp 0x140082d53
mov ebp, 0xffffffff
cmp dl, 0xf
jne 0x140082fe2
nop dword [rax + rax]
movzx edx, byte [rax]
test ebp, ebp
jns 0x140082e75
mov ecx, edx
and cl, 0xf0
cmp cl, 0x40
jne 0x140082fe2
and edx, 0xf
dec edx
test ebp, ebp
js 0x140082e89
lea ecx, [rbp - 1]
cmp edx, ecx
jne 0x1400830b7
imul ecx, edx, 0xd
mov ebp, edx
movsxd rdx, ecx
lea r8, [r15 + rdx*2]
movzx ecx, byte [rax + 1]
movzx edx, byte [rax + 2]
shl dx, 8
or dx, cx
mov word [r8], dx
movzx edx, byte [rax + 4]
movzx ecx, byte [rax + 3]
shl dx, 8
or dx, cx
mov word [r8 + 2], dx
movzx edx, byte [rax + 6]
movzx ecx, byte [rax + 5]
shl dx, 8
or dx, cx
mov word [r8 + 4], dx
movzx edx, byte [rax + 8]
movzx ecx, byte [rax + 7]
shl dx, 8
or dx, cx
mov word [r8 + 6], dx
movzx edx, byte [rax + 0xa]
movzx ecx, byte [rax + 9]
shl dx, 8
or dx, cx
mov word [r8 + 8], dx
movzx edx, byte [rax + 0xf]
movzx ecx, byte [rax + 0xe]
shl dx, 8
or dx, cx
mov word [r8 + 0xa], dx
movzx edx, byte [rax + 0x11]
movzx ecx, byte [rax + 0x10]
shl dx, 8
or dx, cx
mov word [r8 + 0xc], dx
movzx edx, byte [rax + 0x13]
movzx ecx, byte [rax + 0x12]
shl dx, 8
or dx, cx
mov word [r8 + 0xe], dx
movzx edx, byte [rax + 0x15]
movzx ecx, byte [rax + 0x14]
shl dx, 8
or dx, cx
mov word [r8 + 0x10], dx
movzx edx, byte [rax + 0x17]
movzx ecx, byte [rax + 0x16]
shl dx, 8
or dx, cx
mov word [r8 + 0x12], dx
movzx edx, byte [rax + 0x19]
movzx ecx, byte [rax + 0x18]
shl dx, 8
or dx, cx
mov word [r8 + 0x14], dx
movzx edx, byte [rax + 0x1d]
movzx ecx, byte [rax + 0x1c]
shl dx, 8
or dx, cx
mov word [r8 + 0x16], dx
add dword [rbx + 4], 0x20
mov eax, dword [rbx + 4]
cmp eax, dword [0x140196f78]
jb 0x140082fb3
mov dword [rbx + 4], edi
mov rcx, rsi
mov rdx, qword [rbx + 8]
call fcn.140082760
mov qword [rbx + 8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140082d4e
mov rdx, qword [rbx + 8]
mov rcx, rsi
call fcn.1400822e0
mov rcx, rax
test rax, rax
je 0x140082d4e
movsxd rax, dword [rbx + 4]
add rax, rcx
je 0x140082d4e
cmp byte [rax + 0xb], 0xf
je 0x140082e60
cmp word [r15], di
jne 0x14008305a
mov r8, r15
nop dword [rax + rax]
cmp rdi, 8
jl 0x14008300c
cmp byte [rdi + rax], 0x20
je 0x14008305a
cmp rdi, 8
jne 0x14008300c
mov word [r8], 0x2e
add r8, 2
movzx ecx, byte [rdi + rax]
cmp cl, 0x20
je 0x140083051
movzx edx, cx
mov word [r8], cx
lea ecx, [rdx - 0x41]
cmp cx, 0x19
ja 0x14008304d
test byte [rax + 0xc], 2
je 0x140083039
cmp rdi, 8
jge 0x140083039
add dx, 0x20
mov word [r8], dx
test byte [rax + 0xc], 4
je 0x14008304d
cmp rdi, 8
jl 0x14008304d
add dx, 0x20
mov word [r8], dx
add r8, 2
inc rdi
cmp rdi, 0xc
jl 0x140082ff0
movzx ecx, byte [rax + 0xb]
and cl, 0x37
mov byte [r15 + 0x204], cl
movzx ecx, byte [rax + 0x1e]
movzx edx, byte [rax + 0x1f]
shl edx, 8
or edx, ecx
movzx ecx, byte [rax + 0x1d]
shl edx, 8
or edx, ecx
movzx ecx, byte [rax + 0x1c]
shl edx, 8
or edx, ecx
mov dword [r15 + 0x200], edx
movzx r8d, byte [rax + 0x15]
movzx ecx, byte [rax + 0x14]
movzx edx, byte [rax + 0x1b]
movzx eax, byte [rax + 0x1a]
shl r8d, 8
or r8d, ecx
shl edx, 8
shl r8d, 0x10
or eax, edx
add eax, r8d
jmp 0x140082d53
mov eax, 0xfffffffd
jmp 0x140082d53