Function at 0x140093f90
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
mov rax, rcx
mov rcx, qword [r9]
cmp r8, rcx
jae 0x140093fb3
mov qword [rax + 8], 1
mov qword [rax + 0x10], rcx
jmp 0x140094445
sub r8, rcx
je 0x140094420
cmp r8, 1
je 0x140094420
cmp r8, 2
je 0x140094420
cmp r8, 3
je 0x140094420
cmp r8, 4
je 0x140094420
cmp r8, 5
je 0x140094420
cmp r8, 6
je 0x140094420
cmp r8, 7
je 0x140094420
cmp r8, 8
je 0x140094420
cmp r8, 9
je 0x140094420
cmp r8, 0xa
je 0x140094420
cmp r8, 0xb
je 0x140094420
cmp r8, 0xc
je 0x140094420
cmp r8, 0xd
je 0x140094420
cmp r8, 0xe
je 0x140094420
cmp r8, 0xf
je 0x140094420
cmp r8, 0x10
je 0x140094420
cmp r8, 0x11
je 0x140094420
cmp r8, 0x12
je 0x140094420
cmp r8, 0x13
je 0x140094420
cmp r8, 0x14
je 0x140094420
cmp r8, 0x15
je 0x140094420
cmp r8, 0x16
je 0x140094420
cmp r8, 0x17
je 0x140094420
cmp r8, 0x18
je 0x140094420
cmp r8, 0x19
je 0x140094420
cmp r8, 0x1a
je 0x140094420
cmp r8, 0x1b
je 0x140094420
cmp r8, 0x1c
je 0x140094420
cmp r8, 0x1d
je 0x140094420
cmp r8, 0x1e
je 0x140094420
cmp r8, 0x1f
je 0x140094420
cmp r8, 0x20
je 0x140094420
cmp r8, 0x21
je 0x140094420
cmp r8, 0x22
je 0x140094420
cmp r8, 0x23
je 0x140094420
cmp r8, 0x24
je 0x140094420
cmp r8, 0x25
je 0x140094420
cmp r8, 0x26
je 0x140094420
cmp r8, 0x27
je 0x140094420
cmp r8, 0x28
je 0x140094420
cmp r8, 0x29
je 0x140094420
cmp r8, 0x2a
je 0x140094420
cmp r8, 0x2b
je 0x140094420
mov r10, r8
and r10, 0xfffffffffffffffc
cmp r10, 0x2c
je 0x140094420
cmp r8, 0x30
je 0x140094420
cmp r8, 0x31
je 0x140094420
cmp r8, 0x32
je 0x140094420
cmp r8, 0x33
je 0x140094420
cmp r8, 0x34
je 0x140094420
cmp r8, 0x35
je 0x140094420
cmp r8, 0x36
je 0x140094420
cmp r8, 0x37
je 0x140094420
cmp r10, 0x38
je 0x140094420
add rdx, rcx
movzx r11d, byte [rdx]
movzx r8d, byte [rdx + 1]
movzx edi, byte [rdx + 2]
movzx esi, byte [rdx + 3]
movzx ebx, byte [rdx + 6]
movzx r14d, byte [rdx + 0x28]
movzx r10d, byte [rdx + 0x29]
shl r10, 8
or r10, r14
movzx r14d, byte [rdx + 0x2a]
shl r14, 0x10
or r10, r14
movzx r14d, byte [rdx + 0x2b]
shl r14, 0x18
or r10, r14
movzx r14d, byte [rdx + 0x2c]
shl r14, 0x20
or r10, r14
movzx r14d, byte [rdx + 0x2d]
shl r14, 0x28
or r10, r14
movzx r14d, word [rdx + 0x2e]
shl r14, 0x30
or r10, r14
movzx r14d, byte [rdx + 7]
shl r14, 0x38
shl rbx, 0x30
or rbx, r14
movzx r14d, byte [rdx + 4]
shl r8, 8
or r8, r11
movzx r15d, byte [rdx + 5]
shl rdi, 0x10
or r8, rdi
movzx edi, byte [rdx + 0x10]
shl rsi, 0x18
or r8, rsi
movzx r11d, byte [rdx + 0x16]
shl r15, 0x28
shl r14, 0x20
or r8, r14
or r8, r15
or r8, rbx
movzx r14d, byte [rdx + 0xe]
shl r14, 0x28
movzx esi, byte [rdx + 0xa]
shl rsi, 8
movzx ebx, byte [rdx + 9]
or rbx, rsi
movzx esi, byte [rdx + 0xb]
shl rsi, 0x10
or rbx, rsi
movzx esi, byte [rdx + 0xc]
shl rsi, 0x18
or rbx, rsi
movzx esi, byte [rdx + 0xd]
shl rsi, 0x20
or rsi, rbx
or rsi, r14
movzx r14d, byte [rdx + 0xf]
shl r14, 0x30
or rsi, r14
movzx r14d, byte [rdx + 0x17]
shl r14, 0x38
shl r11, 0x30
or r11, r14
movzx r14d, byte [rdx + 0x11]
shl r14, 8
or r14, rdi
movzx edi, byte [rdx + 0x12]
shl rdi, 0x10
or r14, rdi
movzx edi, byte [rdx + 0x13]
shl rdi, 0x18
or r14, rdi
movzx edi, byte [rdx + 0x14]
shl rdi, 0x20
or r14, rdi
movzx edi, byte [rdx + 0x15]
shl rdi, 0x28
or r14, rdi
or r14, r11
mov qword [rax + 1], r8
movzx r8d, byte [rdx + 8]
mov byte [rax + 9], r8b
mov dword [rax + 0xa], ebx
mov r8, rsi
shr r8, 0x30
mov byte [rax + 0x10], r8b
shr rsi, 0x20
mov word [rax + 0xe], si
mov qword [rax + 0x11], r14
movzx r8d, byte [rdx + 0x18]
mov byte [rax + 0x19], r8b
movzx r8d, byte [rdx + 0x19]
mov byte [rax + 0x1a], r8b
movzx r8d, byte [rdx + 0x1a]
mov byte [rax + 0x1b], r8b
movzx r8d, byte [rdx + 0x1b]
mov byte [rax + 0x1c], r8b
movzx r8d, byte [rdx + 0x1c]
mov byte [rax + 0x1d], r8b
movzx r8d, byte [rdx + 0x1d]
mov byte [rax + 0x1e], r8b
movzx r8d, byte [rdx + 0x1e]
mov byte [rax + 0x1f], r8b
movzx r8d, byte [rdx + 0x1f]
mov byte [rax + 0x20], r8b
movzx r8d, byte [rdx + 0x20]
mov byte [rax + 0x21], r8b
movzx r8d, byte [rdx + 0x21]
mov byte [rax + 0x22], r8b
movzx r8d, byte [rdx + 0x22]
mov byte [rax + 0x23], r8b
movzx r8d, byte [rdx + 0x23]
mov byte [rax + 0x24], r8b
movzx r8d, byte [rdx + 0x24]
mov byte [rax + 0x25], r8b
movzx r8d, byte [rdx + 0x25]
mov byte [rax + 0x26], r8b
movzx r8d, byte [rdx + 0x26]
mov byte [rax + 0x27], r8b
movzx r8d, byte [rdx + 0x27]
mov byte [rax + 0x28], r8b
mov qword [rax + 0x29], r10
movzx r8d, byte [rdx + 0x30]
mov byte [rax + 0x31], r8b
movzx r8d, byte [rdx + 0x31]
mov byte [rax + 0x32], r8b
movzx r8d, byte [rdx + 0x32]
mov byte [rax + 0x33], r8b
movzx r8d, byte [rdx + 0x33]
mov byte [rax + 0x34], r8b
movzx r8d, byte [rdx + 0x34]
mov byte [rax + 0x35], r8b
movzx r8d, byte [rdx + 0x35]
mov byte [rax + 0x36], r8b
add rcx, 0x3c
mov qword [r9], rcx
mov ecx, dword [rdx + 0x36]
mov dword [rax + 0x37], ecx
movzx ecx, word [rdx + 0x3a]
mov word [rax + 0x3b], cx
xor ecx, ecx
jmp 0x140094447
mov qword [rax + 8], 0
mov byte [rax + 0x10], 1
mov byte [rax + 0x17], 0
mov word [rax + 0x15], 0
mov dword [rax + 0x11], 0
mov qword [rax + 0x18], 0
mov cl, 1
mov byte [rax], cl
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret