Function at 0x140117c20
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
movzx eax, byte [rdx + 2]
mov r13, rdx
movzx r12d, byte [rdx + 3]
mov r15, rcx
movzx r8d, byte [rdx + 6]
movzx r9d, byte [rdx + 9]
movzx ecx, byte [rdx + 0xc]
movzx r11d, byte [r13 + 0x16]
movzx edi, byte [r13 + 0x19]
movzx r10d, byte [r13 + 0x1c]
shl rcx, 8
shl r12, 8
or r12, rax
shl r8, 8
movzx eax, byte [rdx + 1]
shl r9, 8
shl r12, 8
or r12, rax
shl r11, 8
movzx eax, byte [rdx]
shl rdi, 8
shl r12, 8
or r12, rax
shl r10, 8
movzx eax, byte [rdx + 5]
or r8, rax
movzx eax, byte [rdx + 4]
shl r8, 8
or r8, rax
movzx eax, byte [rdx + 8]
or r9, rax
shl r8, 6
movzx eax, byte [rdx + 7]
shl r9, 8
or r9, rax
mov qword [rbp + 0x7f], r8
movzx eax, byte [rdx + 0xb]
or rcx, rax
shl r9, 5
movzx eax, byte [rdx + 0xa]
shl rcx, 8
or rcx, rax
movzx eax, byte [rdx + 0xe]
lea rbx, [rcx*8]
movzx ecx, byte [rdx + 0xf]
shl rcx, 8
or rcx, rax
mov qword [rbp - 9], rbx
movzx eax, byte [rdx + 0xd]
movzx edx, byte [rdx + 0x13]
shl rdx, 8
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 0x12]
or rdx, rax
movzx eax, byte [r13 + 0x11]
shl rdx, 8
or rdx, rax
movzx eax, byte [r13 + 0x10]
shl rdx, 8
lea rsi, [rcx*4]
or rdx, rax
movzx eax, byte [r13 + 0x15]
or r11, rax
mov qword [rbp - 1], rdx
movzx eax, byte [r13 + 0x14]
shl r11, 8
or r11, rax
movzx eax, byte [r13 + 0x18]
or rdi, rax
shl r11, 7
movzx eax, byte [r13 + 0x17]
shl rdi, 8
or rdi, rax
movzx eax, byte [r13 + 0x1b]
or r10, rax
shl rdi, 5
movzx eax, byte [r13 + 0x1a]
shl r10, 8
or r10, rax
mov qword [rbp + 0xf], rdi
movzx eax, byte [r13 + 0x1d]
movzx ecx, byte [r13 + 0x1f]
shl rcx, 0x10
or rcx, rax
shl r10, 4
movzx eax, byte [r13 + 0x1e]
and ecx, 0x7fffff
shl rax, 8
or rcx, rax
mov qword [rbp + 0x6f], r10
lea r14, [rcx*4]
mov qword [rbp + 0x17], r14
cmp r14, 0x1fffffc
jne 0x140117e13
cmp r10, 0xffffff0
jne 0x140117e13
cmp rdi, 0x1fffffe0
jne 0x140117e13
cmp r11, 0x7fffff80
jne 0x140117e13
mov eax, 0xffffffff
cmp rdx, rax
jne 0x140117e13
cmp rsi, 0x3fffffc
jne 0x140117e13
cmp rbx, 0x7fffff8
jne 0x140117e13
cmp r9, rdi
jne 0x140117e13
cmp r8, 0x3fffffc0
jne 0x140117e13
mov eax, 0xffffffed
cmp r12, rax
jae 0x140118119
lea r10, [rbx + 0x1000000]
add r14, 0x1000000
shr r14, 0x19
lea rbx, [rdx + 0x1000000]
imul rax, r14, 0x13
shr r10, 0x19
add r8, 0x1000000
add r12, rax
shr r8, 0x19
mov rax, qword [rbp + 0x6f]
add r9, r8
add rsi, r10
mov qword [rbp - 0x11], r9
mov qword [rbp + 0x77], rsi
lea rsi, [rdi + 0x1000000]
shr rsi, 0x19
lea rcx, [r12 + 0x2000000]
add rax, rsi
shr rcx, 0x1a
mov qword [rbp + 0x6f], rax
lea rdx, [r9 + 0x2000000]
mov r9, qword [rbp + 0x77]
shr rdx, 0x1a
add r9, 0x2000000
lea rdi, [rax + 0x2000000]
shr r9, 0x1a
mov rax, rcx
shr rbx, 0x19
shl rax, 0x1a
add r11, rbx
sub r12d, eax
mov qword [rbp + 7], r11
mov rax, qword [rbp + 0x7f]
add r11, 0x2000000
shr r11, 0x1a
shl r8, 0x19
sub eax, r8d
shl r10, 0x19
add eax, ecx
shl rbx, 0x19
mov rcx, qword [rbp - 0x11]
mov dword [r15 + 0x2c], eax
mov rax, rdx
shl rax, 0x1a
sub ecx, eax
shl rsi, 0x19
mov rax, qword [rbp - 9]
sub eax, r10d
mov dword [r15 + 0x30], ecx
mov rcx, qword [rbp + 0x77]
add eax, edx
mov dword [r15 + 0x34], eax
mov rax, r9
shl rax, 0x1a
sub ecx, eax
shr rdi, 0x1a
mov rax, qword [rbp - 1]
sub eax, ebx
mov dword [r15 + 0x38], ecx
mov rcx, qword [rbp + 7]
add eax, r9d
mov dword [r15 + 0x3c], eax
mov rax, r11
shl rax, 0x1a
sub ecx, eax
shl r14, 0x19
mov rax, qword [rbp + 0xf]
sub eax, esi
mov dword [r15 + 0x40], ecx
mov rcx, qword [rbp + 0x6f]
add eax, r11d
mov dword [r15 + 0x44], eax
mov rax, rdi
shl rax, 0x1a
sub ecx, eax
mov dword [r15 + 0x28], r12d
mov rax, qword [rbp + 0x17]
sub eax, r14d
mov dword [r15 + 0x48], ecx
add eax, edi
mov dword [r15 + 0x4c], eax
xor eax, eax
mov qword [r15 + 0x50], 1
lea rdx, [r15 + 0x28]
mov qword [r15 + 0x58], rax
lea rcx, [rsp + 0x20]
mov qword [r15 + 0x60], rax
mov qword [r15 + 0x68], rax
mov qword [r15 + 0x70], rax
call fcn.140115fe0
lea r8, [0x1401db808]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x61]
call fcn.1401155e0
mov eax, dword [rbp - 0x79]
lea r8, [rbp - 0x61]
mov edi, dword [rsp + 0x20]
lea rdx, [rsp + 0x20]
mov esi, dword [rsp + 0x24]
dec edi
mov r14d, dword [rsp + 0x28]
mov rcx, r15
mov r12d, dword [rbp - 0x7d]
inc dword [rbp - 0x61]
mov dword [rbp - 0x79], eax
mov eax, dword [rbp - 0x75]
mov dword [rbp - 0x75], eax
mov eax, dword [rbp - 0x71]
mov dword [rbp - 0x71], eax
mov eax, dword [rbp - 0x6d]
mov dword [rbp - 0x6d], eax
mov eax, dword [rbp - 0x69]
mov dword [rbp - 0x69], eax
mov eax, dword [rbp - 0x65]
mov dword [rbp - 0x65], eax
mov eax, dword [r15 + 0x74]
add dword [rbp - 0x3d], eax
mov dword [rsp + 0x20], edi
mov dword [rsp + 0x24], esi
mov dword [rsp + 0x28], r14d
mov dword [rbp - 0x7d], r12d
call fcn.140114fa0
mov rdx, r15
lea rcx, [rbp - 0x39]
call fcn.140115fe0
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x39]
call fcn.1401155e0
mov eax, dword [rbp - 0x39]
lea rcx, [rbp - 0x61]
sub eax, edi
mov dword [rbp - 0x61], eax
mov eax, dword [rbp - 0x35]
sub eax, esi
mov dword [rbp - 0x5d], eax
mov eax, dword [rbp - 0x31]
sub eax, r14d
mov dword [rbp - 0x59], eax
mov eax, dword [rbp - 0x2d]
sub eax, r12d
mov dword [rbp - 0x55], eax
mov eax, dword [rbp - 0x29]
sub eax, dword [rbp - 0x79]
mov dword [rbp - 0x51], eax
mov eax, dword [rbp - 0x25]
sub eax, dword [rbp - 0x75]
mov dword [rbp - 0x4d], eax
mov eax, dword [rbp - 0x21]
sub eax, dword [rbp - 0x71]
mov dword [rbp - 0x49], eax
mov eax, dword [rbp - 0x1d]
sub eax, dword [rbp - 0x6d]
mov dword [rbp - 0x45], eax
mov eax, dword [rbp - 0x19]
sub eax, dword [rbp - 0x69]
mov dword [rbp - 0x41], eax
mov eax, dword [rbp - 0x15]
sub eax, dword [rbp - 0x65]
mov dword [rbp - 0x3d], eax
call fcn.140115500
test eax, eax
je 0x1401180ed
mov eax, dword [rbp - 0x39]
lea rcx, [rbp - 0x61]
add eax, edi
mov dword [rbp - 0x61], eax
mov eax, dword [rbp - 0x35]
add eax, esi
mov dword [rbp - 0x5d], eax
mov eax, dword [rbp - 0x31]
add eax, r14d
mov dword [rbp - 0x59], eax
mov eax, dword [rbp - 0x2d]
add eax, r12d
mov dword [rbp - 0x55], eax
mov eax, dword [rbp - 0x79]
add eax, dword [rbp - 0x29]
mov dword [rbp - 0x51], eax
mov eax, dword [rbp - 0x75]
add eax, dword [rbp - 0x25]
mov dword [rbp - 0x4d], eax
mov eax, dword [rbp - 0x71]
add eax, dword [rbp - 0x21]
mov dword [rbp - 0x49], eax
mov eax, dword [rbp - 0x6d]
add eax, dword [rbp - 0x1d]
mov dword [rbp - 0x45], eax
mov eax, dword [rbp - 0x69]
add eax, dword [rbp - 0x19]
mov dword [rbp - 0x41], eax
mov eax, dword [rbp - 0x65]
add eax, dword [rbp - 0x15]
mov dword [rbp - 0x3d], eax
call fcn.140115500
test eax, eax
jne 0x140118119
lea r8, [0x1401db7e0]
mov rdx, r15
mov rcx, r15
call fcn.1401155e0
mov rdx, r15
lea rcx, [rsp + 0x20]
call fcn.140116aa0
movzx ecx, byte [r13 + 0x1f]
movzx eax, byte [rsp + 0x20]
shr cl, 7
and al, 1
cmp al, cl
je 0x14011812b
mov rcx, r15
call fcn.140115500
test eax, eax
jne 0x140118120
mov eax, 0xffffffff
jmp 0x14011813d
mov rdx, r15
mov rcx, r15
call fcn.140115f50
lea rcx, [r15 + 0x78]
mov rdx, r15
lea r8, [r15 + 0x28]
call fcn.1401155e0
xor eax, eax
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret