Function at 0x5018c0
Capabilities:
Enumerate pe sections

Disassembly:
lea r12, [rsp - 0x98]
cmp r12, qword [r14 + 0x10]
jbe 0x501cdd
push rbp
mov rbp, rsp
sub rsp, 0x110
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rbx
movzx ecx, byte [rbx + 0x2e]
shl rcx, 0x30
mov qword [rsp + 0x38], rcx
movzx edx, byte [rbx + 0x2d]
shl rdx, 0x28
mov qword [rsp + 0x30], rdx
movzx esi, byte [rbx + 0x2c]
shl rsi, 0x20
mov qword [rsp + 0x28], rsi
movzx edi, byte [rbx + 0x2b]
shl rdi, 0x18
mov qword [rsp + 0x20], rdi
movzx r8d, byte [rbx + 0x2a]
shl r8, 0x10
mov qword [rsp + 0x18], r8
movzx r9d, byte [rbx + 0x29]
shl r9, 8
mov qword [rsp + 0x10], r9
movzx r10d, byte [rbx + 0x28]
mov qword [rsp + 8], r10
movzx r11d, byte [rbx + 0x27]
shl r11, 0x38
mov qword [rsp], r11
movzx r12d, byte [rbx + 0x26]
shl r12, 0x30
mov qword [rsp + 0x108], r12
movzx r13d, byte [rbx + 0x25]
shl r13, 0x28
mov qword [rsp + 0x100], r13
movzx r15d, byte [rbx + 0x24]
shl r15, 0x20
mov qword [rsp + 0xf8], r15
movzx eax, byte [rbx + 0x23]
shl rax, 0x18
mov qword [rsp + 0xf0], rax
movzx ecx, byte [rbx + 0x22]
shl rcx, 0x10
mov qword [rsp + 0xe8], rcx
movzx edx, byte [rbx + 0x21]
shl rdx, 8
mov qword [rsp + 0xe0], rdx
movzx esi, byte [rbx + 0x20]
mov qword [rsp + 0xd8], rsi
movzx edi, byte [rbx + 0x1f]
shl rdi, 0x38
mov qword [rsp + 0xd0], rdi
movzx r8d, byte [rbx + 0x1e]
shl r8, 0x30
mov qword [rsp + 0xc8], r8
movzx r9d, byte [rbx + 0x1d]
shl r9, 0x28
mov qword [rsp + 0xc0], r9
movzx r10d, byte [rbx + 0x1c]
shl r10, 0x20
mov qword [rsp + 0xb8], r10
movzx r11d, byte [rbx + 0x1b]
shl r11, 0x18
mov qword [rsp + 0xb0], r11
movzx r12d, byte [rbx + 0x1a]
shl r12, 0x10
mov qword [rsp + 0xa8], r12
movzx r13d, byte [rbx + 0x19]
shl r13, 8
mov qword [rsp + 0xa0], r13
movzx r15d, byte [rbx + 0x18]
mov qword [rsp + 0x98], r15
movzx eax, byte [rbx + 0x17]
shl rax, 0x38
mov qword [rsp + 0x90], rax
movzx ecx, byte [rbx + 0x16]
shl rcx, 0x30
mov qword [rsp + 0x88], rcx
movzx edx, byte [rbx + 0x15]
shl rdx, 0x28
mov qword [rsp + 0x80], rdx
movzx esi, byte [rbx + 0x14]
shl rsi, 0x20
mov qword [rsp + 0x78], rsi
movzx edi, byte [rbx + 0x13]
shl rdi, 0x18
mov qword [rsp + 0x70], rdi
movzx r8d, byte [rbx + 0x12]
shl r8, 0x10
mov qword [rsp + 0x68], r8
movzx r9d, byte [rbx + 0x11]
shl r9, 8
mov qword [rsp + 0x60], r9
movzx r10d, byte [rbx + 0x10]
mov qword [rsp + 0x58], r10
movzx r11d, byte [rbx + 0xf]
shl r11, 0x38
mov qword [rsp + 0x50], r11
movzx r12d, byte [rbx + 0xe]
shl r12, 0x30
mov qword [rsp + 0x48], r12
movzx r13d, byte [rbx + 0xd]
shl r13, 0x28
mov qword [rsp + 0x40], r13
movzx r15d, byte [rbx + 0xc]
shl r15, 0x20
movzx eax, byte [rbx + 0xb]
shl rax, 0x18
movzx ecx, byte [rbx + 0xa]
shl rcx, 0x10
movzx edx, byte [rbx + 9]
shl rdx, 8
movzx esi, byte [rbx + 8]
movzx edi, byte [rbx + 7]
shl rdi, 0x38
movzx r8d, byte [rbx + 6]
shl r8, 0x30
movzx r9d, byte [rbx + 5]
shl r9, 0x28
movzx r10d, byte [rbx + 4]
shl r10, 0x20
movzx r11d, byte [rbx + 3]
shl r11, 0x18
movzx r12d, byte [rbx + 2]
shl r12, 0x10
movzx r13d, byte [rbx + 1]
shl r13, 8
movzx ebx, byte [rbx]
add rbx, r13
add rbx, r12
add rbx, r11
add rbx, r10
add rbx, r9
add rbx, r8
add rbx, rdi
add rdx, rsi
add rcx, rdx
add rax, rcx
add rax, r15
mov rcx, qword [rsp + 0x40]
add rax, rcx
mov rcx, qword [rsp + 0x48]
add rax, rcx
mov rcx, qword [rsp + 0x50]
add rax, rcx
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
add rcx, rdx
mov rdx, qword [rsp + 0x68]
add rcx, rdx
mov rdx, qword [rsp + 0x70]
add rcx, rdx
mov rdx, qword [rsp + 0x78]
add rcx, rdx
mov rdx, qword [rsp + 0x80]
add rcx, rdx
mov rdx, qword [rsp + 0x88]
add rcx, rdx
mov rdx, qword [rsp + 0x90]
add rcx, rdx
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
add rdx, rsi
mov rsi, qword [rsp + 0xa8]
add rdx, rsi
mov rsi, qword [rsp + 0xb0]
add rdx, rsi
mov rsi, qword [rsp + 0xb8]
add rdx, rsi
mov rsi, qword [rsp + 0xc0]
add rdx, rsi
mov rsi, qword [rsp + 0xc8]
add rdx, rsi
mov rsi, qword [rsp + 0xd0]
add rdx, rsi
mov rsi, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xd8]
add rsi, rdi
mov rdi, qword [rsp + 0xe8]
add rsi, rdi
mov rdi, qword [rsp + 0xf0]
add rsi, rdi
mov rdi, qword [rsp + 0xf8]
add rsi, rdi
mov rdi, qword [rsp + 0x100]
add rsi, rdi
mov rdi, qword [rsp + 0x108]
add rsi, rdi
mov rdi, qword [rsp]
add rsi, rdi
mov rdi, qword [rsp + 0x10]
mov r8, qword [rsp + 8]
add rdi, r8
mov r8, qword [rsp + 0x18]
add rdi, r8
mov r8, qword [rsp + 0x20]
add rdi, r8
mov r8, qword [rsp + 0x28]
add rdi, r8
mov r8, qword [rsp + 0x30]
add rdi, r8
mov r8, qword [rsp + 0x38]
add rdi, r8
mov r8, qword [rsp + 0x128]
movzx r8d, byte [r8 + 0x2f]
mov r9, qword [rsp + 0x120]
mov qword [r9], rbx
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], rcx
mov qword [r9 + 0x18], rdx
mov qword [r9 + 0x20], rsi
shl r8, 0x38
lea rax, [r8 + rdi]
mov qword [r9 + 0x28], rax
add rsp, 0x110
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004646a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.005018c0