Function at 0x1400098a0
Capabilities:
Enumerate pe sections

Disassembly:
sub rsp, 0x18
lea rax, [rcx + 0x1000]
mov r8, rdx
mov r9, rcx
cmp rax, 0x2000
jb 0x140009d67
mov rax, rcx
movabs rdx, 0x800000000000
movabs rcx, 0xffff800000000000
movabs r10, 0xffff7fffffffffff
and rax, rcx
add rax, rdx
test r10, rax
jne 0x140009d67
lea rax, [r8 + 0x1000]
cmp rax, 0x2000
jb 0x140009d67
mov rax, r8
and rax, rcx
add rax, rdx
test r10, rax
jne 0x140009d67
movzx edx, byte [r8]
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov eax, ecx
mov qword [rsp + 0x28], rbp
cmp dl, 0x7b
mov qword [rsp + 0x30], rsi
sete al
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x10], r12
add r8, rax
mov qword [rsp + 8], r14
lea r12, [0x1400226e0]
mov qword [rsp], r15
movzx eax, byte [r8]
movzx r15d, byte [rax + r12]
cmp r15b, 0xff
je 0x140009d60
movzx eax, byte [r8 + 1]
movzx r10d, byte [rax + r12]
cmp r10b, 0xff
je 0x140009d60
movzx eax, byte [r8 + 2]
movzx r11d, byte [rax + r12]
cmp r11b, 0xff
je 0x140009d60
movzx eax, byte [r8 + 3]
movzx ebx, byte [rax + r12]
cmp bl, 0xff
je 0x140009d60
movzx eax, byte [r8 + 4]
movzx edi, byte [rax + r12]
cmp dil, 0xff
je 0x140009d60
movzx eax, byte [r8 + 5]
movzx esi, byte [rax + r12]
cmp sil, 0xff
je 0x140009d60
movzx eax, byte [r8 + 6]
movzx ebp, byte [rax + r12]
cmp bpl, 0xff
je 0x140009d60
movzx eax, byte [r8 + 7]
movzx r14d, byte [rax + r12]
cmp r14b, 0xff
je 0x140009d60
cmp byte [r8 + 8], 0x2d
jne 0x140009d60
movzx eax, byte [r8 + 9]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0xa]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0xb]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0xc]
cmp byte [rax + r12], 0xff
je 0x140009d60
cmp byte [r8 + 0xd], 0x2d
jne 0x140009d60
movzx eax, byte [r8 + 0xe]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0xf]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x10]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x11]
cmp byte [rax + r12], 0xff
je 0x140009d60
cmp byte [r8 + 0x12], 0x2d
jne 0x140009d60
movzx eax, byte [r8 + 0x13]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x14]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x15]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x16]
cmp byte [rax + r12], 0xff
je 0x140009d60
cmp byte [r8 + 0x17], 0x2d
jne 0x140009d60
movzx eax, byte [r8 + 0x18]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x19]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x1a]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x1b]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x1c]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x1d]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x1e]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x1f]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x20]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x21]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x22]
cmp byte [rax + r12], 0xff
je 0x140009d60
movzx eax, byte [r8 + 0x23]
cmp byte [rax + r12], 0xff
je 0x140009d60
cmp dl, 0x7b
jne 0x140009ba8
cmp byte [r8 + 0x24], 0x7d
jne 0x140009d60
cmp dl, dl
sete cl
cmp byte [rcx + r8 + 0x24], 0
jne 0x140009d60
mov ecx, r15d
shl ecx, 4
or ecx, r10d
shl ecx, 4
or ecx, r11d
shl ecx, 4
or ecx, ebx
shl ecx, 4
or ecx, edi
shl ecx, 4
or ecx, esi
shl ecx, 4
or ecx, ebp
shl ecx, 4
or ecx, r14d
mov dword [r9], ecx
movzx eax, byte [r8 + 9]
movzx edx, byte [rax + r12]
movzx eax, byte [r8 + 0xa]
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0xb]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0xc]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
or dx, cx
mov word [r9 + 4], dx
movzx eax, byte [r8 + 0xe]
movzx edx, byte [rax + r12]
movzx eax, byte [r8 + 0xf]
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x10]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x11]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
or dx, cx
mov word [r9 + 6], dx
movzx eax, byte [r8 + 0x13]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x14]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 8], cl
movzx eax, byte [r8 + 0x15]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x16]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 9], cl
movzx eax, byte [r8 + 0x18]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x19]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xa], cl
movzx eax, byte [r8 + 0x1a]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x1b]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xb], cl
movzx eax, byte [r8 + 0x1c]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x1d]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xc], cl
movzx eax, byte [r8 + 0x1e]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x1f]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xd], cl
movzx eax, byte [r8 + 0x20]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x21]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xe], cl
movzx eax, byte [r8 + 0x22]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x23]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xf], cl
xor eax, eax
mov r14, qword [rsp + 8]
mov r12, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
add rsp, 0x18
ret
mov eax, 0xffffffcf
jmp 0x140009d39
mov eax, 0xfffffffe
add rsp, 0x18
ret