Function at 0x14017e5d3
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r15, r8
mov rbx, rdx
mov rdi, rcx
mov al, byte [0x1402c6095]
cmp al, 1
jne 0x14017e652
mov r12, r15
and r15, 0xfffffffffffffffc
mov rsi, r12
shl r12, 4
and r12, 0xffffffffffffffc0
mov r14, rbx
add r12, rbx
cmp r14, r12
je 0x14017e8ba
lea r13, [r14 + 0x40]
cmp qword [rdi + 0x220], 0
je 0x14017e642
xor ebp, ebp
cmp rbp, 0x40
je 0x14017e64d
lea rdx, [r14 + rbp]
add rbp, 0x10
mov rcx, rdi
call fcn.14006444f
jmp 0x14017e62a
mov rcx, rdi
mov rdx, r14
call case.0x140039166.429
mov r14, r13
jmp 0x14017e611
mov eax, dword [rdi + 0x10]
mov qword [rsp + 0x68], rax
mov eax, dword [rdi + 0x14]
mov ecx, dword [rdi + 0x18]
mov edx, dword [rdi + 0x1c]
mov r9d, dword [rdi + 0x20]
mov qword [rsp + 0x60], rax
lea eax, [rax + rax*4]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x30], rcx
lea eax, [rcx + rcx*4]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x58], rdx
lea eax, [rdx + rdx*4]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r9
lea eax, [r9 + r9*4]
mov qword [rsp + 0x28], rax
mov eax, dword [rdi + 0x24]
mov r12d, dword [rdi + 0x28]
mov r11d, dword [rdi + 0x2c]
mov edx, dword [rdi + 0x30]
mov r14d, dword [rdi + 0x34]
shl r15, 4
test r15, r15
je 0x14017e8e9
mov qword [rsp + 0x78], rbx
mov r9d, dword [rbx]
mov ecx, 0x3ffffff
and r9d, ecx
add r9d, eax
mov r10d, dword [rbx + 3]
mov eax, dword [rbx + 6]
shr r10d, 2
and r10d, ecx
add r10d, r12d
shr eax, 4
and eax, ecx
add eax, r11d
mov esi, dword [rbx + 9]
shr esi, 6
add esi, edx
mov ecx, dword [rbx + 0xc]
shr ecx, 8
lea ebx, [r14 + rcx]
add ebx, 0x1000000
mov rcx, r9
mov rbp, qword [rsp + 0x68]
imul rcx, rbp
mov r12, rbp
mov rdx, r10
mov r11, qword [rsp + 0x28]
imul rdx, r11
add rdx, rcx
mov rcx, rax
mov qword [rsp + 0x80], r15
mov r15, qword [rsp + 0x38]
imul rcx, r15
mov r14, rsi
mov r11, qword [rsp + 0x40]
imul r14, r11
add r14, rcx
add r14, rdx
mov rbp, rbx
mov r13, rbx
imul rbp, qword [rsp + 0x48]
add rbp, r14
mov rdx, r9
mov rbx, qword [rsp + 0x60]
imul rdx, rbx
mov r14, r10
mov r8, r12
imul r14, r12
add r14, rdx
mov rdx, rax
mov rcx, qword [rsp + 0x28]
imul rdx, rcx
mov r12, rsi
imul r12, r15
add r12, rdx
add r12, r14
mov rdx, r13
mov qword [rsp + 0x70], r13
imul rdx, r11
add rdx, r12
mov r14, r9
imul r14, qword [rsp + 0x30]
mov r12, r10
imul r12, rbx
add r12, r14
mov r14, rax
imul r14, r8
mov r11, rsi
imul r11, rcx
add r11, r14
add r11, r12
mov r14, r13
imul r14, r15
add r14, r11
mov r11, r9
mov rcx, qword [rsp + 0x58]
imul r11, rcx
mov r12, r10
mov r13, qword [rsp + 0x30]
imul r12, r13
add r12, r11
mov r11, rax
imul r11, rbx
mov r15, rsi
imul r15, r8
add r15, r11
add r15, r12
mov r11, qword [rsp + 0x70]
mov r12, r11
imul r12, qword [rsp + 0x28]
add r12, r15
mov r15, qword [rsp + 0x80]
imul r9, qword [rsp + 0x50]
imul r10, rcx
add r10, r9
imul rax, r13
imul rsi, rbx
add rsi, rax
add rsi, r10
mov rax, r11
imul rax, r8
add rax, rsi
mov r8, rax
mov rax, rbp
shr rax, 0x1a
mov ecx, 0x3ffffff
and ebp, ecx
mov r9d, eax
add r9, rdx
mov rdx, r9
shr rdx, 0x1a
and r9d, ecx
mov r11d, edx
add r11, r14
mov rdx, r11
shr rdx, 0x1a
mov edx, edx
add rdx, r12
mov rax, rdx
shr rax, 0x1a
mov r14d, eax
add r14, r8
mov rax, r14
shr rax, 0x1a
lea eax, [rax + rax*4]
add eax, ebp
mov r12d, eax
shr r12d, 0x1a
add r12d, r9d
mov rcx, qword [rsp + 0x78]
lea rbx, [rcx + 0x10]
mov ecx, 0x3ffffff
and r11d, ecx
and edx, ecx
and r14d, ecx
and eax, ecx
mov dword [rdi + 0x24], eax
mov dword [rdi + 0x28], r12d
mov dword [rdi + 0x2c], r11d
mov dword [rdi + 0x30], edx
mov dword [rdi + 0x34], r14d
add r15, 0xfffffffffffffff0
jmp 0x14017e6b2
shl r15, 4
add rbx, r15
mov r14, rsi
and r14d, 3
shl r14d, 4
test r14, r14
je 0x14017e8e9
lea rsi, [rbx + 0x10]
mov rcx, rdi
mov rdx, rbx
call fcn.14006444f
add r14, 0xfffffffffffffff0
mov rbx, rsi
jmp 0x14017e8cc
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret