Function at 0x140020270
Capabilities:
Enumerate pe sections

Disassembly:
push rsi
push rbx
sub rsp, 0x38
xor eax, eax
mov qword [rsp + 0x28], rax
mov rbx, rdx
mov rsi, qword [rcx]
mov ecx, dword [rcx + 8]
cmp ecx, 0x24
jne 0x1400202bd
cmp word [rsi + 0x10], 0x2d
jne 0x1400202a7
cmp word [rsi + 0x1a], 0x2d
jne 0x1400202a7
cmp word [rsi + 0x24], 0x2d
jne 0x1400202a7
cmp word [rsi + 0x2e], 0x2d
je 0x1400202c4
mov edx, 4
mov rcx, rbx
call fcn.140065068
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
ret
mov edx, 8
jmp 0x1400202ac
movzx eax, word [rsi + 0xc]
movzx ecx, word [rsi + 0xe]
movzx edx, al
movzx r8d, cl
lea r9, [0x14017d690]
add rdx, r9
movzx edx, byte [rdx]
movsx rdx, dl
shl edx, 4
add r8, r9
movzx r8d, byte [r8]
movsx r8, r8b
or edx, r8d
or eax, ecx
sar eax, 8
mov ecx, 0xffffffff
test eax, eax
cmovne edx, ecx
mov byte [rbx], dl
lea rax, [rbx + 1]
movzx ecx, word [rsi + 8]
movzx r8d, word [rsi + 0xa]
movzx r9d, cl
movzx r10d, r8b
lea r11, [0x14017d690]
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 2]
movzx ecx, word [rsi + 4]
movzx r8d, word [rsi + 6]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 3]
movzx ecx, word [rsi]
movzx r8d, word [rsi + 2]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 4]
movzx ecx, word [rsi + 0x16]
movzx r8d, word [rsi + 0x18]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 5]
movzx ecx, word [rsi + 0x12]
movzx r8d, word [rsi + 0x14]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 6]
movzx ecx, word [rsi + 0x20]
movzx r8d, word [rsi + 0x22]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 7]
movzx ecx, word [rsi + 0x1c]
movzx r8d, word [rsi + 0x1e]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 8]
movzx ecx, word [rsi + 0x26]
movzx r8d, word [rsi + 0x28]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 9]
movzx ecx, word [rsi + 0x2a]
movzx r8d, word [rsi + 0x2c]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 0xa]
movzx ecx, word [rsi + 0x30]
movzx r8d, word [rsi + 0x32]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 0xb]
movzx ecx, word [rsi + 0x34]
movzx r8d, word [rsi + 0x36]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 0xc]
movzx ecx, word [rsi + 0x38]
movzx r8d, word [rsi + 0x3a]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 0xd]
movzx ecx, word [rsi + 0x3c]
movzx r8d, word [rsi + 0x3e]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 0xe]
movzx ecx, word [rsi + 0x40]
movzx r8d, word [rsi + 0x42]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
lea rax, [rbx + 0xf]
movzx ecx, word [rsi + 0x44]
movzx r8d, word [rsi + 0x46]
movzx r9d, cl
movzx r10d, r8b
add r9, r11
movzx r9d, byte [r9]
movsx r9, r9b
shl r9d, 4
add r10, r11
movzx r10d, byte [r10]
movsx r10, r10b
or r9d, r10d
or ecx, r8d
sar ecx, 8
mov r8d, 0xffffffff
test ecx, ecx
cmovne r9d, r8d
or edx, r9d
mov byte [rax], r9b
test edx, edx
jl 0x140020772
mov eax, 1
add rsp, 0x38
pop rbx
pop rsi
ret
mov dword [rsp + 0x20], 0x24
mov rcx, rsi
mov edx, 0x58
mov r8d, 0x78
mov r9d, 0x2b
call fcn.1400ca340
test eax, eax
jl 0x1400207b5
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x30], 0x24
lea rcx, [rsp + 0x28]
mov rdx, rbx
call fcn.140021408
test eax, eax
jne 0x140020766
mov rcx, rbx
mov edx, 7
call fcn.140065068
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
ret