Function at 0x140008885
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
mov qword [rsp + 0x70], rdx
mov rdi, rcx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov qword [rsp + 0x68], rax
add rcx, 0x348
call qword [rdi + 0x40]
movsxd rdx, dword [rax + 0x3c]
movzx ecx, word [rdx + rax + 0x14]
mov qword [rsp + 0x60], rax
add rdx, rax
mov qword [rsp + 0x58], rdx
lea rax, [rcx + rdx]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rax, [rdi + 0x370]
mov qword [rsp + 0x50], rax
mov eax, 0xeb532fa2
xor ebp, ebp
mov dword [rsp + 0x28], ecx
cmp eax, 0xf70601ab
jg 0x14000894a
cmp eax, 0xc6709fa4
jg 0x140008998
cmp eax, 0xa55b66fd
jle 0x140008a5f
cmp eax, 0xb3957eff
jle 0x140008b67
cmp eax, 0xbc1de07e
jg 0x140008d17
cmp eax, 0xb3957f00
je 0x140008d9b
cmp eax, 0xb3c7b83f
jne 0x1400088f6
mov eax, 0x6a2de4af
mov dword [rsp + 0x2c], 1
jmp 0x1400088f6
cmp eax, 0x4e9c1571
jg 0x140008a11
cmp eax, 0x3fb517f
jle 0x140008aa7
cmp eax, 0x24efcc49
jle 0x140008b99
cmp eax, 0x2cf882ae
jg 0x140008d39
cmp eax, 0x24efcc4a
je 0x140008db4
cmp eax, 0x2c3e35a1
jne 0x1400088f6
inc ebp
mov eax, 0xf4027ce8
jmp 0x1400088f6
cmp eax, 0xdcff913c
jle 0x140008aec
cmp eax, 0xeb532fa1
jle 0x140008bd1
cmp eax, 0xf2da0b44
jg 0x140008d59
cmp eax, 0xeb532fa2
je 0x140008dce
cmp eax, 0xf0afe5d2
jne 0x1400088f6
lea eax, [rbp + 1]
add r14, rax
mov eax, ebp
mov byte [rsp + rax + 0xa0], 0
mov rdx, qword [r12 + 0x30]
mov rcx, rdi
lea r8, [rsp + 0xa0]
xor r9d, r9d
call fcn.1400078fe
mov qword [rsp + 0x30], rax
test rax, rax
mov eax, 0x7fd34a6e
mov ecx, 0x55937206
cmove eax, ecx
jmp 0x1400088f6
cmp eax, 0x71ff7e4f
jg 0x140008b31
cmp eax, 0x5a576ecb
jle 0x140008bfc
cmp eax, 0x68027756
jle 0x140008d84
cmp eax, 0x68027757
je 0x140008deb
cmp eax, 0x6a2de4af
jne 0x1400088f6
mov eax, ebp
mov cl, byte [r14 + rax]
mov byte [rsp + rax + 0xa0], cl
mov eax, 0xff1d58a9
jmp 0x1400088f6
cmp eax, 0x889a5ee6
jg 0x140008c32
cmp eax, 0x81ea9c47
je 0x140008df8
cmp eax, 0x85c7eeab
je 0x140008bf2
cmp eax, 0x88099fc6
jne 0x1400088f6
cmp dword [rsp + 0x2c], 0
mov eax, 0xc6709fa5
mov ecx, 0x2cf882af
cmove eax, ecx
mov rbx, qword [rsp + 0x30]
jmp 0x1400088f6
cmp eax, 0xfe1830c6
jg 0x140008c6a
cmp eax, 0xf70601ac
je 0x140008e06
cmp eax, 0xf76a7766
je 0x140008e1b
cmp eax, 0xf7b7a7a2
jne 0x1400088f6
mov eax, ebp
cmp byte [r14 + rax], 0x77
mov eax, 0xb3957f00
mov ecx, 0x63863c6a
cmove eax, ecx
jmp 0x1400088f6
cmp eax, 0xcfe6cb02
jg 0x140008cb7
cmp eax, 0xc6709fa5
je 0x140008e49
cmp eax, 0xc70449af
je 0x140008e5a
cmp eax, 0xcabad5d3
jne 0x1400088f6
mov eax, 0xc70449af
mov esi, 1
xor ebp, ebp
mov dword [rsp + 0x2c], 0
jmp 0x1400088f6
cmp eax, 0x784abc85
jg 0x140008ce2
cmp eax, 0x71ff7e50
je 0x140008e6b
cmp eax, 0x75cbaec3
je 0x1400090b2
cmp eax, 0x7651a57f
jne 0x1400088f6
mov eax, 0x3fb5180
jmp 0x1400088f6
cmp eax, 0xa55b66fe
je 0x140008e75
cmp eax, 0xa7963fae
je 0x140008e8f
cmp eax, 0xaaf3c372
jne 0x1400088f6
call qword [rsp + 0x30]
mov r13, rax
mov eax, 0x68027757
jmp 0x1400088f6
cmp eax, 0x3fb5180
je 0x140008ea6
cmp eax, 0x1d59d21d
je 0x140008eb0
cmp eax, 0x205c02fb
jne 0x1400088f6
mov rdx, qword [rbx]
mov rcx, rdi
call fcn.1400090e4
test eax, eax
mov eax, 0x574313ca
jmp 0x140009083
cmp eax, 0xdcff913d
je 0x140008eca
cmp eax, 0xdf81683a
je 0x140008eea
cmp eax, 0xe791d940
jne 0x1400088f6
mov eax, 0xdbc48f12
jmp 0x1400088f6
cmp eax, 0x4e9c1572
je 0x140008f10
cmp eax, 0x55937206
je 0x140008cd8
cmp eax, 0x574313ca
jne 0x1400088f6
mov rax, qword [rsp + 0x98]
mov qword [rbx], rax
mov eax, 0xe791d940
jmp 0x1400088f6
cmp eax, 0x889a5ee7
je 0x140008fb0
cmp eax, 0x8d925a4a
je 0x140008fbf
cmp eax, 0x9c8ccaef
jne 0x1400088f6
test byte [rsp + 0x28], 1
mov eax, 0x784abc86
mov ecx, 0xf7b7a7a2
cmovne eax, ecx
jmp 0x1400088f6
cmp eax, 0xfe1830c7
je 0x140008fe5
cmp eax, 0xff1d58a9
je 0x140008ffc
cmp eax, 0x934846
jne 0x1400088f6
mov eax, ebp
lea rax, [rax + rax*4]
mov rcx, qword [rsp + 0x48]
mov r15d, dword [rcx + rax*8 + 8]
mov eax, dword [rcx + rax*8 + 0xc]
add rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
shr r15d, 3
mov eax, 0x24efcc4a
jmp 0x1400088f6
cmp eax, 0xcfe6cb03
je 0x140009008
cmp eax, 0xd30c20b6
je 0x140009024
cmp eax, 0xdbc48f12
jne 0x1400088f6
mov eax, 0xcabad5d3
jmp 0x1400088f6
cmp eax, 0x784abc86
je 0x140009045
cmp eax, 0x78b5d089
je 0x140009059
cmp eax, 0x7fd34a6e
jne 0x1400088f6
test esi, esi
mov eax, 0x88099fc6
mov ecx, 0xcfe6cb03
cmove eax, ecx
jmp 0x1400088f6
cmp eax, 0xbc1de07f
je 0x140009063
cmp eax, 0xc287cb35
jne 0x1400088f6
inc ebp
mov eax, 0xeb532fa2
jmp 0x1400088f6
cmp eax, 0x2cf882af
je 0x14000907b
cmp eax, 0x394ff991
jne 0x1400088f6
mov eax, 0x2c3e35a1
jmp 0x1400088f6
cmp eax, 0xf2da0b45
je 0x140009090
cmp eax, 0xf4027ce8
jne 0x1400088f6
cmp ebp, r15d
mov eax, 0xfe1830c7
mov ecx, 0x8d925a4a
cmovb eax, ecx
jmp 0x1400088f6
cmp eax, 0x63863c6a
jne 0x1400090a6
mov eax, 0xb3957f00
xor esi, esi
jmp 0x1400088f6
mov eax, ebp
cmp byte [r14 + rax], 0x70
mov eax, 0x6a2de4af
mov ecx, 0xb3c7b83f
cmove eax, ecx
jmp 0x1400088f6
call qword [rdi + pe_nt_image_headers64]
mov qword [rsp + 0x88], rax
mov eax, 0xf70601ac
xor ebp, ebp
jmp 0x1400088f6
mov rax, qword [rsp + 0x58]
movzx eax, word [rax + 6]
cmp ebp, eax
mov eax, 0x24efcc4a
mov ecx, 0xdf81683a
cmovb eax, ecx
jmp 0x1400088f6
test r13, r13
mov eax, 0xdcff913d
jmp 0x140008edd
mov r12, qword [r12]
mov eax, 0xbc1de07f
jmp 0x1400088f6
cmp ebp, r15d
mov eax, 0x1d59d21d
mov ecx, 0xf76a7766
cmovb eax, ecx
jmp 0x1400088f6
mov eax, ebp
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax*8]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x88]
cmp qword [rax + 8], rcx
mov eax, 0x78b5d089
mov ecx, 0xa55b66fe
cmove eax, ecx
jmp 0x1400088f6
call qword [rsp + 0x30]
mov rbx, rax
mov eax, 0x2cf882af
jmp 0x1400088f6
mov eax, ebp
cmp byte [r14 + rax], 0
mov eax, 0xd30c20b6
jmp 0x140009030
mov eax, 0xc287cb35
jmp 0x1400088f6
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x70]
call qword [rdi + 0x1f0]
mov eax, 0x1d59d21d
jmp 0x1400088f6
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 8]
mov qword [r13], rax
mov eax, 0x85c7eeab
jmp 0x1400088f6
mov eax, 0x81ea9c47
jmp 0x1400088f6
call qword [rdi + 0xb8]
mov qword [rsp + 0x80], rax
mov eax, 0xf4027ce8
xor ebp, ebp
jmp 0x1400088f6
mov rdx, qword [r13]
mov rcx, rdi
call fcn.1400090e4
test eax, eax
mov eax, 0xa7963fae
mov ecx, 0x85c7eeab
cmove eax, ecx
jmp 0x1400088f6
mov eax, ebp
lea rax, [rax + rax*4]
mov rcx, qword [rsp + 0x48]
mov eax, dword [rcx + rax*8]
cmp eax, dword [rdi + 0x340]
mov eax, 0x71ff7e50
mov ecx, 0x934846
cmove eax, ecx
jmp 0x1400088f6
mov qword [rsp + 0x78], r14
mov r14, r13
mov r13, rbx
mov ebx, esi
mov esi, r15d
mov r15, r12
lea r12, [rsp + 0x90]
mov rcx, r12
mov rdx, qword [rsp + 0x40]
mov r8b, 1
call qword [rdi + 0x1d0]
mov eax, ebp
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax*8]
mov r8d, 0x28546fe5
mov ecx, 0x10
mov rdx, r12
mov r12, r15
mov r15d, esi
mov esi, ebx
mov rbx, r13
mov r13, r14
mov r14, qword [rsp + 0x78]
cmp r8d, 0xc1b73d52
je 0x140008f9c
cmp r8d, 0xc7cac1ff
je 0x14000909c
cmp r8d, 0x28546fe5
jne 0x140008f68
sub ecx, 1
mov r8d, 0xc1b73d52
mov r9d, 0xc7cac1ff
cmovb r8d, r9d
jmp 0x140008f68
mov r8b, byte [rdx]
mov byte [rax], r8b
inc rax
inc rdx
mov r8d, 0x28546fe5
jmp 0x140008f68
mov eax, 0xcabad5d3
mov r14, qword [rsp + 0x50]
jmp 0x1400088f6
mov eax, ebp
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x80]
cmp qword [rcx + rax*8 + 8], rdx
mov eax, 0x394ff991
mov ecx, 0x4e9c1572
cmove eax, ecx
jmp 0x1400088f6
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x18]
mov r12, qword [rax + 0x10]
mov eax, 0xbc1de07f
jmp 0x1400088f6
inc ebp
mov eax, 0xc70449af
jmp 0x1400088f6
cmp dword [rsp + 0x2c], 0
mov eax, 0xaaf3c372
mov ecx, 0x68027757
cmove eax, ecx
mov r13, qword [rsp + 0x30]
jmp 0x1400088f6
mov eax, ebp
cmp byte [r14 + rax], 0x3b
mov eax, 0x75cbaec3
mov ecx, 0x9c8ccaef
cmove eax, ecx
mov dword [rsp + 0x28], 0
jmp 0x1400088f6
test ebp, ebp
mov eax, 0xf0afe5d2
mov ecx, 0x7651a57f
cmove eax, ecx
jmp 0x1400088f6
mov eax, 0xf2da0b45
jmp 0x1400088f6
cmp qword [r12 + 0x30], 0
mov eax, 0x889a5ee7
mov ecx, 0x5a576ecc
cmove eax, ecx
jmp 0x1400088f6
test rbx, rbx
mov eax, 0x205c02fb
mov ecx, 0xe791d940
cmove eax, ecx
jmp 0x1400088f6
inc ebp
mov eax, 0xf70601ac
jmp 0x1400088f6
mov eax, 0xfe1830c7
jmp 0x1400088f6
cmp eax, 0x5a576ecc
je 0x1400090cb
jmp 0x1400088f6
cmp ebp, 0x80
setb byte [rsp + 0x27]
mov eax, 0x9c8ccaef
mov cl, byte [rsp + 0x27]
jmp 0x1400088f2
mov eax, 1
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret