Function at 0x140070130
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140070150
mov edi, dword [rcx + 0x10]
mov r12d, dword [rcx + 0x14]
mov r14d, dword [rcx + 0x18]
mov esi, dword [rcx + 0x1c]
mov r15d, dword [rcx + 0x20]
mov r8d, dword [rcx + 0x34]
mov r11d, dword [rdx + 3]
mov r10d, dword [rdx + 6]
mov eax, dword [rdx + 9]
shr eax, 6
add eax, dword [rcx + 0x30]
shr r10d, 4
and r10d, 0x3ffffff
add r10d, dword [rcx + 0x2c]
shr r11d, 2
and r11d, 0x3ffffff
add r11d, dword [rcx + 0x28]
mov r9d, dword [rdx + 0xc]
mov ebp, 0x3ffffff
and ebp, dword [rdx]
add ebp, dword [rcx + 0x24]
mov qword [rsp + 0x48], r15
lea edx, [r15 + r15*4]
mov qword [rsp + 0x50], rsi
lea esi, [rsi + rsi*4]
mov qword [rsp + 0x58], r14
lea r15d, [r14 + r14*4]
mov qword [rsp + 0x20], r12
lea r14d, [r12 + r12*4]
shr r9d, 8
add r8d, r9d
add r8d, 0x1000000
mov r9d, dword [0x141dcaa38]
imul r9d, dword [0x141dcaa3c]
and r9d, 0xb45bd2bc
add r9d, 0x71a9de24
imul r9, r9, 0x1324c223
shr r9, 0x3b
mov r11d, r11d
mov qword [rsp + 0x30], r11
mov edx, edx
mov qword [rsp + 8], rdx
mov edx, r10d
mov qword [rsp + 0x38], rdx
mov edx, esi
mov qword [rsp], rdx
mov eax, eax
mov qword [rsp + 0x40], rax
mov eax, r15d
mov qword [rsp + 0x10], rax
mov eax, r8d
mov qword [rsp + 0x28], rax
mov eax, r14d
cmp r9d, 0x9675b905
mov qword [rsp + 0x18], rdi
jbe 0x14007041d
mov rdx, rbp
imul rdx, rdi
mov r14, rdi
mov rbx, qword [rsp + 0x30]
mov r8, rbx
mov r9, qword [rsp + 8]
imul r8, r9
add r8, rdx
mov r15, qword [rsp + 0x38]
mov rdx, r15
mov rdi, qword [rsp]
imul rdx, rdi
mov r13, qword [rsp + 0x40]
mov r9, r13
mov r11, qword [rsp + 0x10]
imul r9, r11
add r9, rdx
add r9, r8
mov rdx, rax
mov r12, qword [rsp + 0x28]
imul rdx, r12
add rdx, r9
mov qword [rsp + 0x60], rdx
mov rdx, rbp
mov rsi, qword [rsp + 0x20]
imul rdx, rsi
mov r8, rbx
imul r8, r14
add r8, rdx
mov rdx, r15
mov r14, r15
mov r9, qword [rsp + 8]
imul rdx, r9
mov r10, r13
imul r10, rdi
add r10, rdx
add r10, r8
mov r15, r12
imul r12, r11
add r12, r10
mov rdx, rbp
mov r11, qword [rsp + 0x58]
imul rdx, r11
mov r8, rbx
mov rdi, rbx
imul r8, rsi
add r8, rdx
mov rbx, r14
mov rdx, r14
mov r10, qword [rsp + 0x18]
imul rdx, r10
mov rsi, r13
imul rsi, r9
add rsi, rdx
add rsi, r8
mov r14, r15
imul r14, qword [rsp]
add r14, rsi
mov rdx, rbp
mov r15, qword [rsp + 0x50]
imul rdx, r15
mov r8, rdi
imul r8, r11
add r8, rdx
mov rdx, rbx
mov r9, qword [rsp + 0x20]
imul rdx, r9
mov rsi, r13
imul rsi, r10
add rsi, rdx
add rsi, r8
mov r10, qword [rsp + 0x28]
mov rdx, r10
imul rdx, qword [rsp + 8]
add rdx, rsi
mov r8, rbp
imul r8, qword [rsp + 0x48]
mov rsi, rdi
imul rsi, r15
add rsi, r8
mov r8, rbx
imul r8, r11
mov rdi, qword [rsp + 0x18]
imul r13, r9
add r13, r8
add r13, rsi
mov rsi, r10
imul rsi, rdi
add rsi, r13
mov r9, qword [rsp + 0x60]
mov r8, r9
shr r8, 0x1a
and r9d, 0x3ffffff
mov r11, r9
mov r8d, r8d
add r8, r12
mov r9, r8
shr r9, 0x1a
and r8d, 0x3ffffff
mov r9d, r9d
add r9, r14
mov r10, r9
shr r10, 0x1a
mov r10d, r10d
add r10, rdx
mov rdx, r10
shr rdx, 0x1a
mov edx, edx
add rdx, rsi
mov rsi, rdx
shr rsi, 0x1a
lea esi, [rsi + rsi*4]
add esi, r11d
mov r14d, esi
shr r14d, 0x1a
add r14d, r8d
and esi, 0x3ffffff
mov dword [rcx + 0x24], esi
mov dword [rcx + 0x28], r14d
and r9d, 0x3ffffff
mov dword [rcx + 0x2c], r9d
and r10d, 0x3ffffff
mov dword [rcx + 0x30], r10d
and edx, 0x3ffffff
mov dword [rcx + 0x34], edx
mov rdx, rbp
imul rdx, rdi
mov r12, qword [rsp + 0x30]
mov r8, r12
mov r13, qword [rsp + 8]
imul r8, r13
add r8, rdx
mov r10, qword [rsp + 0x38]
mov rdx, r10
mov r14, qword [rsp]
imul rdx, r14
mov r11, qword [rsp + 0x40]
mov r9, r11
mov rbx, qword [rsp + 0x28]
mov r15, qword [rsp + 0x10]
imul r9, r15
add r9, rdx
add r9, r8
imul rax, rbx
add rax, r9
mov rdx, rbp
mov r8, qword [rsp + 0x20]
imul rdx, r8
mov rdi, r8
mov r8, r12
mov rsi, qword [rsp + 0x18]
imul r8, rsi
add r8, rdx
mov rdx, r10
imul rdx, r13
mov r9, r11
imul r9, r14
add r9, rdx
add r9, r8
imul r15, rbx
add r15, r9
mov qword [rsp + 0x10], r15
mov rdx, rbp
mov r15, qword [rsp + 0x58]
imul rdx, r15
mov r8, r12
imul r8, rdi
mov r14, rdi
add r8, rdx
mov rdx, r10
imul rdx, rsi
mov r9, r11
imul r9, r13
add r9, rdx
add r9, r8
mov rdx, qword [rsp]
imul rdx, rbx
add rdx, r9
mov qword [rsp], rdx
mov rdx, rbp
mov rdi, qword [rsp + 0x50]
imul rdx, rdi
mov r8, r12
imul r8, r15
add r8, rdx
mov rdx, r10
imul rdx, r14
mov r9, r11
imul r9, rsi
add r9, rdx
add r9, r8
imul r13, rbx
add r13, r9
mov rdx, qword [rsp + 0x48]
imul rdx, rbp
imul r12, rdi
add r12, rdx
imul r10, r15
imul r11, r14
add r11, r10
add r11, r12
imul rbx, rsi
mov r8d, 0xba857169
add rbx, r11
mov rdx, rax
shr rdx, 0x1a
mov r9d, edx
add r9, qword [rsp + 0x10]
mov rdx, r9
shr rdx, 0x1a
mov r10d, edx
add r10, qword [rsp]
mov rdx, r10
shr rdx, 0x1a
mov r11d, edx
add r11, r13
mov rdx, r11
shr rdx, 0x1a
mov edx, edx
add rdx, rbx
mov rsi, rdx
shr rsi, 0x1a
lea esi, [rsi + rsi*4]
nop word cs:[rax + rax]
mov edi, dword [0x141dcaa40]
sub edi, dword [0x141dcaa44]
imul rdi, r8
shr rdi, 0x3b
mov ebx, eax
and ebx, 0x3ffffff
add ebx, esi
mov ebp, r9d
and ebp, 0x3ffffff
mov r14d, r10d
and r14d, 0x3ffffff
mov r15d, r11d
and r15d, 0x3ffffff
mov r12d, edx
and r12d, 0x3ffffff
mov r13d, ebx
shr r13d, 0x1a
add r13d, ebp
and ebx, 0x3ffffff
mov dword [rcx + 0x24], ebx
mov dword [rcx + 0x28], r13d
mov dword [rcx + 0x2c], r14d
mov dword [rcx + 0x30], r15d
mov dword [rcx + 0x34], r12d
cmp edi, 0x32a74154
je 0x140070590
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret