Function at 0x140039c00
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x20
movzx r8d, word [rcx + 0x12]
mov r15, rcx
imul eax, r8d, 7
cdq
and edx, 3
add eax, edx
mov edx, dword [rcx + 0x20]
sar eax, 2
mov r13d, edx
shr r13d, 1
test edx, edx
mov ebp, eax
mov edx, eax
cmove r13d, r8d
mov dword [rsp + 0x50], ebp
mov ebx, eax
call sym.EURawImg.exe_protected:_void____ptr64___cdecl_LibRaw::malloc_unsigned_long_long_unsigned___int64_____ptr64
xor esi, esi
mov rdi, rax
mov r12d, esi
cmp si, word [r15 + 0x10]
jae 0x14003a0a2
mov qword [rsp + 0x58], r14
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r15 + 0x5d158]
mov r9, rbx
mov r8d, 1
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [r15 + 0x2f3f0]
mov edx, r13d
mov ebx, eax
imul edx, r12d
mov eax, 0x24924925
lea r14, [rcx + rdx*2]
mov ecx, ebx
mul ebx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 4
imul ecx, ecx, 0x1c
cmp ebx, ecx
je 0x140039df3
mov eax, ebx
shr eax, 2
test eax, eax
je 0x140039d05
mov r8, rdi
mov r9d, eax
nop dword [rax]
mov ecx, dword [r8]
lea r8, [r8 + 4]
mov edx, ecx
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
or edx, eax
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [r8 - 4], edx
sub r9, 1
jne 0x140039cd0
mov eax, esi
mov r11d, esi
lea esi, [r13 - 3]
test esi, esi
je 0x14003a085
add ebp, 0xfffffffa
nop dword [rax]
cmp eax, ebp
jae 0x14003a081
lea ecx, [rbx - 6]
cmp eax, ecx
jae 0x14003a081
mov ecx, r11d
add r11d, 4
lea r10, [r14 + rcx*2]
mov r9d, eax
add r9, rdi
add eax, 7
movzx ecx, byte [r9 + 1]
movzx r8d, byte [r9]
shr cl, 2
movzx edx, cl
shl r8w, 6
or r8w, dx
mov word [r10], r8w
movzx ecx, byte [r9 + 1]
and cl, 3
movzx r8d, cl
movzx ecx, byte [r9 + 2]
shl r8w, 8
or r8w, cx
movzx ecx, byte [r9 + 3]
shr cl, 4
movzx edx, cl
shl r8w, 4
or r8w, dx
mov word [r10 + 2], r8w
movzx ecx, byte [r9 + 3]
and cl, 0xf
movzx r8d, cl
movzx ecx, byte [r9 + 4]
shl r8w, 8
or r8w, cx
movzx ecx, byte [r9 + 5]
shr cl, 6
movzx edx, cl
shl r8w, 2
or r8w, dx
mov word [r10 + 4], r8w
movzx ecx, byte [r9 + 5]
and cl, 0x3f
movzx edx, cl
movzx ecx, byte [r9 + 6]
shl dx, 8
or dx, cx
mov word [r10 + 6], dx
cmp r11d, esi
jb 0x140039d20
jmp 0x14003a081
mov r10d, esi
mov ebp, esi
lea esi, [r13 - 0xf]
test esi, esi
je 0x14003a081
mov r11d, dword [rsp + 0x50]
add r11d, 0xffffffe5
nop dword [rax]
cmp r10d, r11d
jae 0x14003a081
lea eax, [rbx - 0x1b]
cmp r10d, eax
jae 0x14003a081
mov eax, ebp
lea r9, [r14 + rax*2]
mov r8d, r10d
add r8, rdi
movzx eax, byte [r8 + 2]
movzx edx, byte [r8 + 3]
shr al, 2
movzx ecx, al
shl dx, 6
or dx, cx
mov word [r9], dx
movzx eax, byte [r8 + 2]
and al, 3
movzx edx, al
movzx eax, byte [r8 + 1]
shl dx, 8
or dx, ax
movzx eax, byte [r8]
shr al, 4
movzx ecx, al
shl dx, 4
or dx, cx
mov word [r9 + 2], dx
movzx eax, byte [r8]
and al, 0xf
movzx edx, al
movzx eax, byte [r8 + 7]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 6]
shr al, 6
movzx ecx, al
shl dx, 2
or dx, cx
mov word [r9 + 4], dx
movzx eax, byte [r8 + 6]
and al, 0x3f
movzx ecx, al
movzx eax, byte [r8 + 5]
shl cx, 8
or cx, ax
mov word [r9 + 6], cx
movzx eax, byte [r8 + 0xb]
movzx edx, byte [r8 + 4]
shr al, 2
movzx ecx, al
shl dx, 6
or dx, cx
mov word [r9 + 8], dx
movzx eax, byte [r8 + 0xb]
and al, 3
movzx edx, al
movzx eax, byte [r8 + 0xa]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 9]
shr al, 4
movzx ecx, al
shl dx, 4
or dx, cx
mov word [r9 + 0xa], dx
movzx eax, byte [r8 + 9]
and al, 0xf
movzx edx, al
movzx eax, byte [r8 + 8]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 0xf]
shr al, 6
movzx ecx, al
shl dx, 2
or dx, cx
mov word [r9 + 0xc], dx
movzx eax, byte [r8 + 0xf]
and al, 0x3f
movzx ecx, al
movzx eax, byte [r8 + 0xe]
shl cx, 8
or cx, ax
mov word [r9 + 0xe], cx
movzx edx, byte [r8 + 0xd]
movzx eax, byte [r8 + 0xc]
add r10d, 0x1c
shr al, 2
add ebp, 0x10
movzx ecx, al
shl dx, 6
or dx, cx
mov word [r9 + 0x10], dx
movzx eax, byte [r8 + 0xc]
and al, 3
movzx edx, al
movzx eax, byte [r8 + 0x13]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 0x12]
shr al, 4
movzx ecx, al
shl dx, 4
or dx, cx
mov word [r9 + 0x12], dx
movzx eax, byte [r8 + 0x12]
and al, 0xf
movzx edx, al
movzx eax, byte [r8 + 0x11]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 0x10]
shr al, 6
movzx ecx, al
shl dx, 2
or dx, cx
mov word [r9 + 0x14], dx
movzx eax, byte [r8 + 0x10]
and al, 0x3f
movzx ecx, al
movzx eax, byte [r8 + 0x17]
shl cx, 8
or cx, ax
mov word [r9 + 0x16], cx
movzx eax, byte [r8 + 0x15]
movzx edx, byte [r8 + 0x16]
shr al, 2
movzx ecx, al
shl dx, 6
or dx, cx
mov word [r9 + 0x18], dx
movzx eax, byte [r8 + 0x15]
and al, 3
movzx edx, al
movzx eax, byte [r8 + 0x14]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 0x1b]
shr al, 4
movzx ecx, al
shl dx, 4
or dx, cx
mov word [r9 + 0x1a], dx
movzx eax, byte [r8 + 0x1b]
and al, 0xf
movzx edx, al
movzx eax, byte [r8 + 0x1a]
shl dx, 8
or dx, ax
movzx eax, byte [r8 + 0x19]
shr al, 6
movzx ecx, al
shl dx, 2
or dx, cx
mov word [r9 + 0x1c], dx
movzx eax, byte [r8 + 0x19]
and al, 0x3f
movzx ecx, al
movzx eax, byte [r8 + 0x18]
shl cx, 8
or cx, ax
mov word [r9 + 0x1e], cx
cmp ebp, esi
jb 0x140039e10
mov ebp, dword [rsp + 0x50]
movzx eax, word [r15 + 0x10]
inc r12d
mov ebx, ebp
mov esi, 0
cmp r12d, eax
jl 0x140039c70
mov r14, qword [rsp + 0x58]
mov rdx, rdi
mov rcx, r15
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r13
pop r12
pop rdi
pop rsi
jmp sym.EURawImg.exe_protected:_void___cdecl_LibRaw::free_void____ptr64____ptr64