Function at 0x549e00
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 8
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rbx
mov byte [rsp + 7], 0
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x18]
movzx edx, byte [rdx + 5]
movzx ebx, byte [rbx + 2]
shl rdx, 0x28
shl rbx, 0x10
mov rsi, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x20]
movzx esi, byte [rsi + 3]
movzx edi, byte [rdi + 7]
shl rsi, 0x18
shl rdi, 0x38
mov r8, qword [rsp + 0x20]
mov r9, qword [rsp + 0x20]
movzx r8d, byte [r8 + 6]
movzx r9d, byte [r9 + 2]
shl r8, 0x30
shl r9, 0x10
mov r10, qword [rsp + 0x20]
mov r11, qword [rsp + 0x18]
movzx r10d, byte [r10 + 5]
movzx r11d, byte [r11 + 7]
shl r10, 0x28
shl r11, 0x38
mov r12, qword [rsp + 0x20]
mov r13, qword [rsp + 0x20]
movzx r12d, byte [r12 + 4]
movzx ecx, byte [rcx]
shl r12, 0x20
mov r15, qword [rsp + 0x18]
mov rax, qword [rsp + 0x20]
movzx r15d, byte [r15 + 1]
movzx eax, byte [rax + 1]
shl r15, 8
or rcx, r15
or rcx, rbx
shl rax, 8
mov rbx, qword [rsp + 0x18]
mov r15, qword [rsp + 0x18]
movzx ebx, byte [rbx + 6]
movzx r15d, byte [r15 + 4]
shl rbx, 0x30
shl r15, 0x20
movzx r13d, byte [r13]
or r13, rax
or r13, r9
or r13, rsi
or r13, r12
or r13, r10
or r13, r8
or r13, rdi
mov rsi, qword [rsp + 0x18]
movzx esi, byte [rsi + 3]
shl rsi, 0x18
or rcx, rsi
or rcx, r15
or rcx, rdx
or rcx, rbx
or rcx, r11
cmp r13, rcx
je 0x549f1b
jmp 0x54a0b9
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
movzx ecx, word [rcx + 8]
cmp word [rdx + 8], cx
je 0x549f34
jmp 0x54a0b7
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
movzx ebx, byte [rbx + 0xa]
movzx ecx, byte [rcx + 0xa]
movzx esi, byte [rsi + 0xb]
movzx edx, byte [rdx + 0xb]
shl esi, 8
or ebx, esi
shl edx, 8
or ecx, edx
cmp bx, cx
je 0x549f6c
jmp 0x54a0b5
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov r8, qword [rsp + 0x20]
mov r9, qword [rsp + 0x20]
mov r10, qword [rsp + 0x20]
movzx edi, byte [rdi + 0x10]
movzx ecx, byte [rcx + 0x10]
movzx r8d, byte [r8 + 0x11]
movzx edx, byte [rdx + 0x11]
movzx r9d, byte [r9 + 0x12]
movzx ebx, byte [rbx + 0x12]
movzx r10d, byte [r10 + 0x13]
movzx esi, byte [rsi + 0x13]
shl r8d, 8
or edi, r8d
shl edx, 8
or ecx, edx
shl r9d, 0x10
or edi, r9d
shl ebx, 0x10
or ecx, ebx
shl esi, 0x18
or ecx, esi
shl r10d, 0x18
or edi, r10d
cmp edi, ecx
je 0x549fe5
nop
jmp 0x54a0b3
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov r8, qword [rsp + 0x20]
mov r9, qword [rsp + 0x20]
mov r10, qword [rsp + 0x20]
movzx edi, byte [rdi + 0x14]
movzx ecx, byte [rcx + 0x14]
movzx r8d, byte [r8 + 0x15]
movzx edx, byte [rdx + 0x15]
movzx r9d, byte [r9 + 0x16]
movzx ebx, byte [rbx + 0x16]
movzx r10d, byte [r10 + 0x17]
movzx esi, byte [rsi + 0x17]
shl edx, 8
or ecx, edx
shl r8d, 8
or edi, r8d
shl ebx, 0x10
or ecx, ebx
shl r9d, 0x10
or edi, r9d
shl r10d, 0x18
or edi, r10d
shl esi, 0x18
or ecx, esi
cmp edi, ecx
je 0x54a05a
jmp 0x54a0b1
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
movzx ebx, byte [rbx + 0x18]
movzx ecx, byte [rcx + 0x18]
movzx esi, byte [rsi + 0x19]
movzx edx, byte [rdx + 0x19]
shl esi, 8
or ebx, esi
shl edx, 8
or ecx, edx
cmp bx, cx
je 0x54a08f
jmp 0x54a0af
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rcx + 0x1a]
cmp byte [rdx + 0x1a], cl
sete al
mov byte [rsp + 7], al
jmp 0x54a0a9
add rsp, 8
pop rbp
ret
jmp 0x54a0bd
jmp 0x54a0bd
jmp 0x54a0bd
jmp 0x54a0bb
jmp 0x54a0bb
jmp 0x54a0bb
jmp 0x54a0bd
mov byte [rsp + 7], 0
xor eax, eax
add rsp, 8
pop rbp
ret