Function at 0x1401de1c0
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x30
mov r15, qword [rsp + 0x80]
mov r12d, r9d
mov ebp, r8d
mov rsi, rdx
mov rdi, rcx
inc dword [r15]
cmp dword [r15], 0x3e8
jle 0x1401de1fd
mov eax, 4
add rsp, 0x30
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx eax, word ds:[rdx]
mov ecx, 0x88
mov qword [rsp + 0x60], rbx
lea rbx, [rdx + 4]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r14
mov r14d, 1
cmp ax, cx
je 0x1401de247
mov r8d, 0x8d
cmp ax, r8w
je 0x1401de247
mov r8d, 0x89
cmp ax, r8w
je 0x1401de247
mov ecx, 0x8e
cmp ax, cx
jne 0x1401de24b
add rbx, 2
lea r13, [0x140000000]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx]
xor edx, edx
cmp eax, 0xa6
ja case.0x1401de284.31
movzx eax, byte [rax + r13 + 0x1de80c]
mov ecx, dword [r13 + rax*4 + 0x1de784]
add rcx, r13
jmp rcx
mov r9d, r12d
mov qword [rsp + 0x20], r15
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call fcn.1401de1c0
nop dword [rax]
cmp eax, 1
je case.0x1401de604.100
cmp eax, 2
jne 0x1401de768
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je 0x1401de2c0
add rbx, 4
jmp 0x1401de260
add rbx, 8
jmp 0x1401de260
movzx eax, word [rbx + 6]
lea rbx, [rbx + rax*2]
jmp 0x1401de260
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je case.0x1401de284.28
add rbx, 4
jmp 0x1401de260
add rbx, 2
mov qword [rsp + 0x20], r15
mov rdx, rbx
mov r9d, r12d
mov r8d, ebp
mov rcx, rdi
call fcn.1401de1c0
test eax, eax
je 0x1401de768
lea ecx, [rax - 3]
cmp ecx, 1
jbe 0x1401de768
nop dword [rax]
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je 0x1401de340
add rbx, 4
jmp 0x1401de260
add rbx, 2
nop dword [rax]
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je 0x1401de360
add rbx, 4
jmp 0x1401de260
movzx r8d, word [rbx + 2]
add rbx, 4
cmp r8d, 0xff
jbe 0x1401de390
or byte [rdi + 0x47], 0x80
jmp 0x1401de3a9
mov rdx, r8
mov eax, r8d
shr rdx, 3
and eax, 7
movzx ecx, byte [rdx + rdi + 0x28]
bts ecx, eax
mov byte [rdx + rdi + 0x28], cl
test ebp, ebp
je 0x1401de260
and r8d, 0xfc00
cmp r8d, 0xd800
jne 0x1401de260
add rbx, 2
jmp 0x1401de260
lea rdx, [rbx + 2]
mov r9d, ebp
mov dword [rsp + 0x20], r12d
mov r8d, 1
mov rcx, rdi
call fcn.1401ddb20
mov rbx, rax
jmp 0x1401de260
movzx r8d, word [rbx + 4]
add rbx, 6
jmp 0x1401de381
lea rdx, [rbx + 4]
jmp 0x1401de3da
add rbx, 2
movzx eax, word ds:[rbx + 2]
add eax, 0xfffffffa
cmp eax, 0xf
ja case.0x1401de436.12
cdqe
mov ecx, dword [r13 + rax*4 + 0x1de8b4]
add rcx, r13
jmp rcx
or byte [rdi + 0x29], 2
or byte [rdi + 0x2c], 1
or byte [rdi + 0x3c], 1
or byte [rdi + 0x47], 0x80
add rbx, 4
jmp 0x1401de260
or byte [rdi + 0x29], 0x3c
or byte [rdi + 0x38], 0x20
or byte [rdi + 0x47], 0x80
add rbx, 4
jmp 0x1401de260
mov edx, 0x40
mov rcx, rdi
call fcn.1401ddf00
add rbx, 4
jmp 0x1401de260
mov edx, 0x40
mov rcx, rdi
call fcn.1401ddca0
add rbx, 4
jmp 0x1401de260
mov edx, 0xa0
mov rcx, rdi
call fcn.1401ddf00
add rbx, 4
jmp 0x1401de260
mov edx, 0xa0
mov rcx, rdi
call fcn.1401ddca0
add rbx, 4
jmp 0x1401de260
movzx ecx, word [rbx + 4]
test cl, 4
jne case.0x1401de436.12
movzx eax, cl
and al, 3
cmp al, 1
je case.0x1401de436.12
test cl, 2
je case.0x1401de284.21
lea rdx, [rbx + 6]
or byte [rdi + 0x47], 0x80
cmp word [rbx], 0x70
jne 0x1401de4f5
movzx eax, word [rbx + 2]
lea rbx, [rbx + rax*2]
jmp 0x1401de4fd
lea rdx, [rbx + 2]
add rbx, 0x22
nop dword [rax]
test rdx, rdx
je 0x1401de5e8
movzx eax, byte [rdx]
or byte [rdi + 0x28], al
movzx eax, byte [rdx + 1]
or byte [rdi + 0x29], al
movzx eax, byte [rdx + 2]
or byte [rdi + 0x2a], al
movzx eax, byte [rdx + 3]
or byte [rdi + 0x2b], al
movzx eax, byte [rdx + 4]
or byte [rdi + 0x2c], al
movzx eax, byte [rdx + 5]
or byte [rdi + 0x2d], al
movzx eax, byte [rdx + 6]
or byte [rdi + 0x2e], al
movzx eax, byte [rdx + 7]
or byte [rdi + 0x2f], al
movzx eax, byte [rdx + 8]
or byte [rdi + 0x30], al
movzx eax, byte [rdx + 9]
or byte [rdi + 0x31], al
movzx eax, byte [rdx + 0xa]
or byte [rdi + 0x32], al
movzx eax, byte [rdx + 0xb]
or byte [rdi + 0x33], al
movzx eax, byte [rdx + 0xc]
or byte [rdi + 0x34], al
movzx eax, byte [rdx + 0xd]
or byte [rdi + 0x35], al
movzx eax, byte [rdx + 0xe]
or byte [rdi + 0x36], al
movzx eax, byte [rdx + 0xf]
or byte [rdi + 0x37], al
movzx eax, byte [rdx + 0x10]
or byte [rdi + 0x38], al
movzx eax, byte [rdx + 0x11]
or byte [rdi + 0x39], al
movzx eax, byte [rdx + 0x12]
or byte [rdi + 0x3a], al
movzx eax, byte [rdx + 0x13]
or byte [rdi + 0x3b], al
movzx eax, byte [rdx + 0x14]
or byte [rdi + 0x3c], al
movzx eax, byte [rdx + 0x15]
or byte [rdi + 0x3d], al
movzx eax, byte [rdx + 0x16]
or byte [rdi + 0x3e], al
movzx eax, byte [rdx + 0x17]
or byte [rdi + 0x3f], al
movzx eax, byte [rdx + 0x18]
or byte [rdi + 0x40], al
movzx eax, byte [rdx + 0x19]
or byte [rdi + 0x41], al
movzx eax, byte [rdx + 0x1a]
or byte [rdi + 0x42], al
movzx eax, byte [rdx + 0x1b]
or byte [rdi + 0x43], al
movzx eax, byte [rdx + 0x1c]
or byte [rdi + 0x44], al
movzx eax, byte [rdx + 0x1d]
or byte [rdi + 0x45], al
movzx eax, byte [rdx + 0x1e]
or byte [rdi + 0x46], al
movzx eax, byte [rdx + 0x1f]
or byte [rdi + 0x47], al
movzx eax, word [rbx]
add eax, 0xffffff9e
cmp eax, 0xb
ja case.0x1401de604.100
cdqe
mov ecx, dword [r13 + rax*4 + 0x1de8f4]
add rcx, r13
jmp rcx
cmp word [rbx + 2], 0
jne case.0x1401de604.100
add rbx, 6
jmp 0x1401de260
cmp word ds:[rbx + 2], 0xa
jne case.0x1401de436.12
movzx eax, word ds:[rbx + 4]
lea r8, [r13 + 0x2450e0]
mov edx, dword [r8 + rax*4]
lea r8, [r8 + rax*4]
cmp edx, 0xffffffff
jae case.0x1401de604.100
nop dword [rax]
lea r8, [r8 + 4]
cmp edx, 0xff
jbe 0x1401de662
or byte [rdi + 0x47], 0x80
jmp 0x1401de677
mov ecx, edx
and edx, 7
shr rcx, 3
movzx eax, byte [rcx + rdi + 0x28]
bts eax, edx
mov byte [rcx + rdi + 0x28], al
mov edx, dword [r8]
cmp edx, 0xffffffff
jb 0x1401de650
nop
jmp case.0x1401de604.100
mov r14d, 2
jmp case.0x1401de604.100
add rbx, 2
movzx edx, word ds:[rbx + 2]
cmp edx, 0xff
jbe 0x1401de6b1
or byte [rdi + 0x47], 0x80
jmp case.0x1401de604.100
mov rcx, rdx
and edx, 7
shr rcx, 3
movzx eax, byte [rcx + rdi + 0x28]
bts eax, edx
mov byte [rcx + rdi + 0x28], al
jmp case.0x1401de604.100
add rbx, 2
lea rdx, [rbx + 2]
mov dword [rsp + 0x20], r12d
mov r9d, ebp
mov r8d, 1
mov rcx, rdi
call fcn.1401ddb20
jmp case.0x1401de604.100
or byte [rdi + 0x29], 2
or byte [rdi + 0x2c], 1
or byte [rdi + 0x3c], 1
or byte [rdi + 0x47], 0x80
jmp case.0x1401de604.100
or byte [rdi + 0x29], 0x3c
or byte [rdi + 0x38], 0x20
or byte [rdi + 0x47], 0x80
jmp case.0x1401de604.100
mov edx, 0x40
mov rcx, rdi
call fcn.1401ddf00
jmp case.0x1401de604.100
mov edx, 0x40
jmp case.0x1401de284.3
mov edx, 0xa0
mov rcx, rdi
call fcn.1401ddf00
jmp case.0x1401de604.100
mov edx, 0xa0
mov rcx, rdi
call fcn.1401ddca0
movzx eax, word [rsi + 2]
cmp word [rsi + rax*2], 0x78
lea rsi, [rsi + rax*2]
jne 0x1401de753
lea rbx, [rsi + 4]
jmp 0x1401de260
mov eax, r14d
jmp 0x1401de768
mov eax, 2
jmp 0x1401de768
xor eax, eax
jmp 0x1401de768
mov eax, 3
mov r13, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret