Function at 0x180008c10
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rdi
push r12
sub rsp, 0x80
lea rbp, [rdx - 8]
mov rdi, r9
add rbp, rcx
mov r12, rcx
cmp rdx, 8
ja 0x180008c4b
mov rax, 0xffffffffffffffba
add rsp, 0x80
pop r12
pop rdi
pop rbp
ret
movzx eax, word [r8]
mov r9d, 1
mov r11, qword [rsp + 0xe8]
mov qword [rsp + 0xb0], rbx
lea rbx, [r8 + 4]
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x60], r15
mov dword [rsp + 0xc], eax
mov qword [rsp + 0x48], rbx
test eax, eax
je 0x180008c94
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x180008c97
mov eax, r9d
movzx r10d, byte [rdi + r11 - 1]
add r8, 4
cdqe
lea rax, [r8 + rax*4]
mov r8, qword [rax + r10*8]
mov qword [rsp + 0x40], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rbx + rdx*2]
mov rdx, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xc8]
mov qword [rsp + 0x18], rax
movzx eax, word [rdx]
lea rsi, [rdx + 4]
movzx ebx, byte [rbx + r11 - 1]
mov dword [rsp + 0x10], eax
mov qword [rsp + 0x38], rsi
test eax, eax
je 0x180008d0f
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x180008d12
mov eax, r9d
mov r15, qword [rsp + 0xd8]
add rdx, 4
movsxd rcx, eax
lea rcx, [rdx + rcx*4]
mov r8, qword [rcx + rbx*8]
mov qword [rsp + 0x30], rcx
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rsi + rdx*2]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x20], rax
movzx eax, word [rdx]
lea rsi, [rdx + 4]
mov dword [rsp + 0x14], eax
mov qword [rsp + 0x58], rsi
test eax, eax
je 0x180008d7b
lea ecx, [rax - 1]
shl r9d, cl
mov r14, qword [rsp + 0xe0]
lea r13, [0x180000000]
add rdx, 4
movsxd rax, r9d
movzx r9d, byte [r15 + r11 - 1]
lea rax, [rdx + rax*4]
mov r8, qword [rax + r9*8]
mov qword [rsp + 0x50], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
movzx r8d, byte [r9 + r13 + 0xc9580]
add rdx, rax
mov ecx, r8d
movzx eax, word [rsi + rdx*2]
movzx edx, byte [r10 + r13 + 0xcaac0]
mov qword [rsp], rax
movzx eax, word [r14 + r11*8 - 2]
mov r10d, dword [r13 + rdx*4 + 0xc9630]
lea r9d, [r8 + rdx]
and r10, rax
mov rdx, rbx
movzx eax, word [r14 + r11*8 - 4]
shl r10, cl
mov ecx, dword [r13 + r8*4 + 0xc9630]
and rcx, rax
or r10, rcx
cmp dword [rsp + 0xf0], 0
je 0x180008ea4
mov edi, 0x38
mov rbx, r12
cmp edx, edi
cmovb edi, edx
sub edx, edi
mov esi, edx
je 0x180008e74
mov eax, dword [r14 + r11*8 - 8]
mov ecx, r9d
mov r8d, dword [r13 + rdx*4 + 0xc9630]
add r9d, edx
and r8, rax
mov rbx, rbp
shl r8, cl
or r8, r10
mov ecx, r9d
shr rcx, 3
and r9d, 7
mov qword [r12], r8
lea rax, [rcx + r12]
shl cl, 3
shr r8, cl
cmp rax, rbp
cmovbe rbx, rax
jmp 0x180008e77
mov r8, r10
mov eax, dword [r13 + rdi*4 + 0xc9630]
mov rcx, rsi
mov edx, dword [r14 + r11*8 - 8]
lea esi, [rdi + r9]
mov rdi, qword [rsp + 0xb8]
shr rdx, cl
mov ecx, r9d
and rax, rdx
shl rax, cl
or rax, r8
jmp 0x180008ec4
mov eax, dword [r13 + rbx*4 + 0xc9630]
lea esi, [r9 + rbx]
mov ecx, dword [r14 + r11*8 - 8]
mov rbx, r12
and rax, rcx
mov ecx, r9d
shl rax, cl
or rax, r10
mov edx, esi
lea r13, [r11 - 2]
shr rdx, 3
mov r14, rbp
mov qword [rbx], rax
lea rcx, [rbx + rdx]
cmp rcx, rbp
cmovbe r14, rcx
movzx ecx, dl
shl cl, 3
and esi, 7
shr rax, cl
cmp r13, r11
jae 0x1800091f8
mov rcx, qword [rsp + 0xc8]
lea rdx, [r15 + r13]
sub rcx, r15
mov qword [rsp + 0x28], rdx
sub rdi, r15
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xb8], rdi
lea rbx, [0x180000000]
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdx + rcx]
movzx r9d, byte [rdi + rdx]
mov r15d, ecx
movzx r10d, byte [rdx]
mov r11, qword [rsp + 0x20]
mov r12, qword [rsp + 0x18]
movzx edx, byte [r9 + rbx + 0xcaac0]
movzx r8d, byte [r10 + rbx + 0xc9580]
mov dword [rsp + 0xa8], edx
mov rdx, qword [rsp + 0x30]
mov dword [rsp + 8], r8d
mov r8, qword [rdx + rcx*8]
mov rcx, r8
shr rcx, 0x20
add rcx, r11
shr rcx, 0x10
mov edx, ecx
mov edi, dword [rbx + rdx*4 + 0xc9630]
lea ebx, [rsi + rcx]
and rdi, r11
sar r11, cl
movsxd rcx, r8d
add r11, rcx
mov rcx, qword [rsp + 0x38]
movzx r11d, word [rcx + r11*2]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], r11
mov r8, qword [rcx + r9*8]
lea r9, [0x180000000]
mov rcx, r8
shr rcx, 0x20
add rcx, r12
shr rcx, 0x10
mov edx, ecx
lea r11d, [rbx + rcx]
mov r9d, dword [r9 + rdx*4 + 0xc9630]
and r9, r12
sar r12, cl
movsxd rcx, r8d
add r12, rcx
mov rcx, qword [rsp + 0x48]
movzx r12d, word [rcx + r12*2]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x18], r12
mov r10, qword [rcx + r10*8]
lea rcx, [0x180000000]
mov r8, r10
shr r8, 0x20
add r8, qword [rsp]
shr r8, 0x10
mov edx, r8d
mov r12d, dword [rcx + rdx*4 + 0xc9630]
mov ecx, r11d
mov rdx, qword [rsp]
add r11d, r8d
and r12, rdx
shl r12, cl
mov ecx, ebx
shl r9, cl
mov ecx, esi
shl rdi, cl
or r12, r9
or r12, rdi
mov ecx, r8d
mov r8d, dword [rsp + 8]
or r12, rax
movsxd rax, r10d
mov r10d, dword [rsp + 0xa8]
sar rdx, cl
add rdx, rax
mov rax, qword [rsp + 0x58]
lea ebx, [r10 + r15]
add ebx, r8d
movzx edx, word [rax + rdx*2]
mov qword [rsp], rdx
cmp ebx, 0x1f
jb 0x18000908e
mov qword [r14], r12
mov ecx, r11d
and r11d, 7
shr rcx, 3
lea rax, [r14 + rcx]
shl cl, 3
shr r12, cl
mov r14, rbp
cmp rax, rbp
cmovbe r14, rax
mov rdi, qword [rsp + 0xe0]
lea r9d, [r11 + r8]
lea rsi, [0x180000000]
mov ecx, r9d
mov r8d, dword [rsi + r8*4 + 0xc9630]
mov eax, dword [rsi + r10*4 + 0xc9630]
lea esi, [r9 + r10]
movzx edx, word [rdi + r13*8 + 6]
and rax, rdx
movzx edx, word [rdi + r13*8 + 4]
shl rax, cl
and r8, rdx
mov ecx, r11d
shl r8, cl
or rax, r8
or rax, r12
cmp ebx, 0x38
jbe 0x1800090fe
mov qword [r14], rax
mov ecx, esi
and esi, 7
shr rcx, 3
lea rdx, [r14 + rcx]
shl cl, 3
shr rax, cl
mov r14, rbp
cmp rdx, rbp
cmovbe r14, rdx
cmp dword [rsp + 0xf0], 0
lea rbx, [0x180000000]
je 0x180009185
mov r9d, 0x38
cmp r15d, r9d
cmovb r9d, r15d
sub r15d, r9d
je 0x180009160
mov ecx, dword [rdi + r13*8]
mov edx, dword [rbx + r15*4 + 0xc9630]
and rdx, rcx
mov r10d, r15d
mov ecx, esi
add esi, r15d
shl rdx, cl
or rax, rdx
mov ecx, esi
shr rcx, 3
and esi, 7
mov qword [r14], rax
lea rdx, [r14 + rcx]
shl cl, 3
shr rax, cl
mov r14, rbp
cmp rdx, rbp
cmovbe r14, rdx
jmp 0x180009163
xor r10d, r10d
mov edx, dword [rdi + r13*8]
mov rcx, r10
mov r8d, dword [rbx + r9*4 + 0xc9630]
shr rdx, cl
mov ecx, esi
and r8, rdx
shl r8, cl
or rax, r8
add esi, r9d
jmp 0x18000919f
mov ecx, dword [rdi + r13*8]
mov edx, dword [rbx + r15*4 + 0xc9630]
and rdx, rcx
mov ecx, esi
shl rdx, cl
or rax, rdx
add esi, r15d
mov rdi, qword [rsp + 0xb8]
mov qword [r14], rax
mov edx, esi
shr rdx, 3
lea rcx, [r14 + rdx]
mov r14, rbp
cmp rcx, rbp
cmovbe r14, rcx
movzx ecx, dl
mov rdx, qword [rsp + 0x28]
and esi, 7
shl cl, 3
dec rdx
shr rax, cl
dec r13
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x28], rdx
cmp r13, qword [rsp + 0xe8]
jb 0x180008f30
mov r12, qword [rsp + 0xa0]
mov edx, dword [rsp + 0xc]
lea rbx, [0x180000000]
mov r10d, dword [rsp + 0x10]
mov ecx, esi
mov r15, qword [rsp + 0x60]
mov r8, rbp
mov r13, qword [rsp + 0x70]
mov r11d, dword [rbx + rdx*4 + 0xc9630]
lea r9d, [rsi + rdx]
and r11, qword [rsp + 0x18]
mov edx, dword [rbx + r10*4 + 0xc9630]
mov rsi, qword [rsp + 0x78]
shl r11, cl
or r11, rax
mov ecx, r9d
shr rcx, 3
mov qword [r14], r11
lea rax, [r14 + rcx]
mov r14, qword [rsp + 0x68]
cmp rax, rbp
cmovbe r8, rax
and rdx, qword [rsp + 0x20]
shl cl, 3
and r9d, 7
shr r11, cl
add r10d, r9d
mov ecx, r9d
mov r9d, dword [rsp + 0x14]
shl rdx, cl
or r11, rdx
mov ecx, r10d
shr rcx, 3
mov edx, dword [rbx + r9*4 + 0xc9630]
mov qword [r8], r11
lea rax, [r8 + rcx]
mov r8, rbp
cmp rax, rbp
cmovbe r8, rax
and rdx, qword [rsp]
shl cl, 3
and r10d, 7
shr r11, cl
mov ecx, r10d
shl rdx, cl
or r11, rdx
mov qword [r8], r11
lea edx, [r9 + r10]
mov ecx, edx
shr rcx, 3
lea rax, [r8 + rcx]
mov r8, rbp
cmp rax, rbp
cmovbe r8, rax
shl cl, 3
shr r11, cl
and edx, 7
mov eax, edx
inc edx
bts r11, rax
mov ecx, edx
shr rcx, 3
add rcx, r8
mov qword [r8], r11
cmp rcx, rbp
jae 0x1800092ff
test dl, 7
mov ebx, 0
seta bl
sub rbx, r12
add rbx, rcx
mov rax, rbx
jne 0x180009306
mov rax, 0xffffffffffffffba
mov rbx, qword [rsp + 0xb0]
add rsp, 0x80
pop r12
pop rdi
pop rbp
ret