Function at 0x1401e2220
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov r15, qword [rsp + 0x80]
mov ebp, r9d
mov esi, r8d
mov r14, rdx
mov rdi, rcx
inc dword [r15]
cmp dword [r15], 0x3e8
jle 0x1401e225d
mov eax, 4
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x60], rbx
mov eax, 0x88
lea rbx, [rdx + 4]
mov qword [rsp + 0x70], r12
mov r12d, 1
mov qword [rsp + 0x78], r13
lea r13, [0x140000000]
mov ecx, 0x8d
mov edx, 0x89
mov r8d, 0x8e
cmp word [r14], ax
je case.0x1401e2649.98
movzx eax, word ds:[r14]
cmp ax, cx
je case.0x1401e2649.98
cmp ax, dx
je case.0x1401e2649.98
cmp ax, r8w
jne 0x1401e22c0
add rbx, 2
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbx]
xor edx, edx
cmp eax, 0xa6
ja case.0x1401e22e4.31
movzx eax, byte [rax + r13 + 0x1e2864]
mov ecx, dword [r13 + rax*4 + 0x1e27dc]
add rcx, r13
jmp rcx
mov r9d, ebp
mov qword [rsp + 0x20], r15
mov r8d, esi
mov rdx, rbx
mov rcx, rdi
call fcn.1401e2220
nop dword [rax]
cmp eax, 1
je case.0x1401e2649.100
cmp eax, 2
jne 0x1401e27be
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je 0x1401e2320
add rbx, 4
jmp 0x1401e22c0
add rbx, 8
jmp 0x1401e22c0
movzx eax, word [rbx + 6]
lea rbx, [rbx + rax*2]
jmp 0x1401e22c0
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je case.0x1401e22e4.28
add rbx, 4
jmp 0x1401e22c0
add rbx, 2
mov qword [rsp + 0x20], r15
mov rdx, rbx
mov r9d, ebp
mov r8d, esi
mov rcx, rdi
call fcn.1401e2220
mov ecx, eax
test eax, eax
je 0x1401e27a5
add eax, 0xfffffffd
cmp eax, 1
jbe 0x1401e27a5
nop dword [rax + rax]
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je 0x1401e23a0
add rbx, 4
jmp 0x1401e22c0
add rbx, 2
nop dword [rax]
movzx eax, word [rbx + 2]
cmp word [rbx + rax*2], 0x78
lea rbx, [rbx + rax*2]
je 0x1401e23c0
add rbx, 4
jmp 0x1401e22c0
movzx r8d, word [rbx + 2]
add rbx, 4
cmp r8d, 0xff
jbe 0x1401e23f0
or byte [rdi + 0x47], 0x80
jmp 0x1401e2409
mov rdx, r8
mov eax, r8d
shr rdx, 3
and eax, 7
movzx ecx, byte [rdx + rdi + 0x28]
bts ecx, eax
mov byte [rdx + rdi + 0x28], cl
test esi, esi
je 0x1401e22c0
and r8d, 0xfc00
cmp r8d, 0xd800
jmp 0x1401e22ae
lea rdx, [rbx + 2]
mov r9d, esi
mov dword [rsp + 0x20], ebp
mov r8d, 1
mov rcx, rdi
call fcn.1401e1cc0
mov rbx, rax
jmp 0x1401e22c0
movzx r8d, word [rbx + 4]
add rbx, 6
jmp 0x1401e23e1
lea rdx, [rbx + 4]
jmp 0x1401e2429
add rbx, 2
movzx eax, word [rbx + 2]
add eax, 0xfffffffa
cmp eax, 0xf
ja case.0x1401e2478.12
cdqe
mov ecx, dword [r13 + rax*4 + 0x1e290c]
add rcx, r13
jmp rcx
or byte [rdi + 0x29], 2
or byte [rdi + 0x2c], 1
or byte [rdi + 0x3c], 1
or byte [rdi + 0x47], 0x80
add rbx, 4
jmp 0x1401e22c0
or byte [rdi + 0x29], 0x3c
or byte [rdi + 0x38], 0x20
or byte [rdi + 0x47], 0x80
add rbx, 4
jmp 0x1401e22c0
mov edx, 0x40
mov rcx, rdi
call fcn.1401e2000
add rbx, 4
jmp 0x1401e22c0
mov edx, 0x40
mov rcx, rdi
call fcn.1401e1e30
add rbx, 4
jmp 0x1401e22c0
mov edx, 0xa0
mov rcx, rdi
call fcn.1401e2000
add rbx, 4
jmp 0x1401e22c0
mov edx, 0xa0
mov rcx, rdi
call fcn.1401e1e30
add rbx, 4
jmp 0x1401e22c0
movzx ecx, word [rbx + 4]
test cl, 4
jne case.0x1401e2478.12
movzx eax, cl
and al, 3
cmp al, 1
je case.0x1401e2478.12
nop
test cl, 2
je case.0x1401e22e4.21
lea rdx, [rbx + 6]
or byte [rdi + 0x47], 0x80
cmp word [rbx], 0x70
jne 0x1401e253d
movzx eax, word [rbx + 2]
lea rbx, [rbx + rax*2]
jmp 0x1401e2545
lea rdx, [rbx + 2]
add rbx, 0x22
test rdx, rdx
je 0x1401e262d
movzx eax, byte [rdx]
or byte [rdi + 0x28], al
movzx eax, byte [rdx + 1]
or byte [rdi + 0x29], al
movzx eax, byte [rdx + 2]
or byte [rdi + 0x2a], al
movzx eax, byte [rdx + 3]
or byte [rdi + 0x2b], al
movzx eax, byte [rdx + 4]
or byte [rdi + 0x2c], al
movzx eax, byte [rdx + 5]
or byte [rdi + 0x2d], al
movzx eax, byte [rdx + 6]
or byte [rdi + 0x2e], al
movzx eax, byte [rdx + 7]
or byte [rdi + 0x2f], al
movzx eax, byte [rdx + 8]
or byte [rdi + 0x30], al
movzx eax, byte [rdx + 9]
or byte [rdi + 0x31], al
movzx eax, byte [rdx + 0xa]
or byte [rdi + 0x32], al
movzx eax, byte [rdx + 0xb]
or byte [rdi + 0x33], al
movzx eax, byte [rdx + 0xc]
or byte [rdi + 0x34], al
movzx eax, byte [rdx + 0xd]
or byte [rdi + 0x35], al
movzx eax, byte [rdx + 0xe]
or byte [rdi + 0x36], al
movzx eax, byte [rdx + 0xf]
or byte [rdi + 0x37], al
movzx eax, byte [rdx + 0x10]
or byte [rdi + 0x38], al
movzx eax, byte [rdx + 0x11]
or byte [rdi + 0x39], al
movzx eax, byte [rdx + 0x12]
or byte [rdi + 0x3a], al
movzx eax, byte [rdx + 0x13]
or byte [rdi + 0x3b], al
movzx eax, byte [rdx + 0x14]
or byte [rdi + 0x3c], al
movzx eax, byte [rdx + 0x15]
or byte [rdi + 0x3d], al
movzx eax, byte [rdx + 0x16]
or byte [rdi + 0x3e], al
movzx eax, byte [rdx + 0x17]
or byte [rdi + 0x3f], al
movzx eax, byte [rdx + 0x18]
or byte [rdi + 0x40], al
movzx eax, byte [rdx + 0x19]
or byte [rdi + 0x41], al
movzx eax, byte [rdx + 0x1a]
or byte [rdi + 0x42], al
movzx eax, byte [rdx + 0x1b]
or byte [rdi + 0x43], al
movzx eax, byte [rdx + 0x1c]
or byte [rdi + 0x44], al
movzx eax, byte [rdx + 0x1d]
or byte [rdi + 0x45], al
movzx eax, byte [rdx + 0x1e]
or byte [rdi + 0x46], al
movzx eax, byte [rdx + 0x1f]
or byte [rdi + 0x47], al
movzx eax, word [rbx]
add eax, 0xffffff9e
cmp eax, 0xb
ja case.0x1401e2649.100
cdqe
mov ecx, dword [r13 + rax*4 + 0x1e294c]
add rcx, r13
jmp rcx
cmp word [rbx + 2], 0
jne case.0x1401e2649.100
add rbx, 6
jmp 0x1401e22c0
cmp word [rbx + 2], 0xa
jne case.0x1401e2478.12
movzx eax, word ds:[rbx + 4]
lea r8, [r13 + 0x248340]
mov edx, dword [r8 + rax*4]
lea r8, [r8 + rax*4]
cmp edx, 0xffffffff
jae case.0x1401e2649.100
nop dword [rax]
lea r8, [r8 + 4]
cmp edx, 0xff
jbe 0x1401e26a2
or byte [rdi + 0x47], 0x80
jmp 0x1401e26b7
mov ecx, edx
and edx, 7
shr rcx, 3
movzx eax, byte [rcx + rdi + 0x28]
bts eax, edx
mov byte [rcx + rdi + 0x28], al
mov edx, dword [r8]
cmp edx, 0xffffffff
jb 0x1401e2690
nop
jmp case.0x1401e2649.100
mov r12d, 2
jmp case.0x1401e2649.100
add rbx, 2
movzx edx, word ds:[rbx + 2]
cmp edx, 0xff
jbe 0x1401e26f1
or byte [rdi + 0x47], 0x80
jmp case.0x1401e2649.100
mov rcx, rdx
and edx, 7
shr rcx, 3
movzx eax, byte [rcx + rdi + 0x28]
bts eax, edx
mov byte [rcx + rdi + 0x28], al
jmp case.0x1401e2649.100
add rbx, 2
lea rdx, [rbx + 2]
mov dword [rsp + 0x20], ebp
mov r9d, esi
mov r8d, 1
mov rcx, rdi
call fcn.1401e1cc0
jmp case.0x1401e2649.100
or byte [rdi + 0x29], 2
or byte [rdi + 0x2c], 1
or byte [rdi + 0x3c], 1
or byte [rdi + 0x47], 0x80
jmp case.0x1401e2649.100
or byte [rdi + 0x29], 0x3c
or byte [rdi + 0x38], 0x20
or byte [rdi + 0x47], 0x80
jmp case.0x1401e2649.100
mov edx, 0x40
mov rcx, rdi
call fcn.1401e2000
jmp case.0x1401e2649.100
mov edx, 0x40
jmp case.0x1401e22e4.3
mov edx, 0xa0
mov rcx, rdi
call fcn.1401e2000
jmp case.0x1401e2649.100
mov edx, 0xa0
mov rcx, rdi
call fcn.1401e1e30
movzx eax, word [r14 + 2]
cmp word [r14 + rax*2], 0x78
lea r14, [r14 + rax*2]
jne 0x1401e27a9
lea rbx, ds:[r14 + 4]
mov ecx, 0x8d
mov edx, 0x89
mov r8d, 0x8e
jmp 0x1401e2298
mov eax, ecx
jmp 0x1401e27be
mov eax, r12d
jmp 0x1401e27be
xor eax, eax
jmp 0x1401e27be
mov eax, 2
jmp 0x1401e27be
mov eax, 3
mov r12, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov r13, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret