Function at 0x1337c0f01820
Capabilities:
Enumerate pe sections

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 8], rcx
push rsi
push r15
sub rsp, 0x88
lea r15, [rdx - 8]
mov r11, r9
add r15, rcx
mov rsi, rcx
cmp rdx, 8
jbe 0x1337c0f01ed7
mov r10, qword [rsp + 0xe8]
mov r9d, 1
mov qword [rax + 0x18], rbx
mov qword [rax - 0x18], rbp
mov qword [rax - 0x20], rdi
lea rdi, [r8 + 4]
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
movzx eax, word [r8]
mov dword [rsp + 0xc], eax
mov qword [rsp + 0x48], rdi
test eax, eax
je 0x1337c0f01891
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x1337c0f01894
mov eax, r9d
movzx ebx, byte [r11 + r10 - 1]
add r8, 4
cdqe
lea rax, [r8 + rax*4]
mov r8, qword [rax + rbx*8]
mov qword [rsp + 0x40], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rdi + rdx*2]
mov rdx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
mov qword [rsp + 0x18], rax
movzx eax, word [rdx]
lea r11, [rdx + 4]
movzx edi, byte [rdi + r10 - 1]
mov dword [rsp + 0x10], eax
mov qword [rsp + 0x38], r11
test eax, eax
je 0x1337c0f0190c
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x1337c0f0190f
mov eax, r9d
add rdx, 4
movsxd rcx, eax
lea rcx, [rdx + rcx*4]
mov r8, qword [rcx + rdi*8]
mov qword [rsp + 0x30], rcx
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [r11 + rdx*2]
mov rdx, qword [rsp + 0xd0]
mov r11, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rax
movzx eax, word [rdx]
lea rbp, [rdx + 4]
mov dword [rsp + 0x14], eax
mov qword [rsp + 0x58], rbp
test eax, eax
je 0x1337c0f01979
lea ecx, [rax - 1]
shl r9d, cl
mov r12, qword [rsp + 0xe0]
lea r14, [0x1337c0de0000]
add rdx, 4
movsxd rax, r9d
movzx r9d, byte [r11 + r10 - 1]
lea rax, [rdx + rax*4]
mov r8, qword [rax + r9*8]
mov qword [rsp + 0x50], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
movzx r8d, byte [r9 + r14 + 0x40bfd0]
add rdx, rax
mov ecx, r8d
movzx eax, word [rbp + rdx*2]
movzx edx, byte [rbx + r14 + 0x40c000]
mov qword [rsp], rax
movzx eax, word [r12 + r10*8 - 2]
mov ebp, dword [r14 + rdx*4 + 0x40b930]
and rbp, rax
movzx eax, word [r12 + r10*8 - 4]
shl rbp, cl
mov ecx, dword [r14 + r8*4 + 0x40b930]
lea r14d, [r8 + rdx]
and rcx, rax
mov r8, rdi
or rbp, rcx
lea rdi, [0x1337c0de0000]
cmp dword [rsp + 0xf0], 0
mov rax, rsi
je 0x1337c0f01a99
mov r9d, 0x38
cmp r8d, r9d
cmovb r9d, r8d
sub r8d, r9d
mov ebx, r8d
je 0x1337c0f01a75
mov eax, dword [r12 + r10*8 - 8]
mov ecx, r14d
mov edx, dword [rdi + r8*4 + 0x40b930]
add r14d, r8d
and rdx, rax
shl rdx, cl
or rbp, rdx
mov ecx, r14d
shr rcx, 3
mov qword [rsi], rbp
lea rax, [rcx + rsi]
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
mov edx, dword [r12 + r10*8 - 8]
mov rcx, rbx
mov r8d, dword [rdi + r9*4 + 0x40b930]
shr rdx, cl
mov ecx, r14d
and r8, rdx
shl r8, cl
or rbp, r8
add r14d, r9d
jmp 0x1337c0f01ab5
mov ecx, dword [r12 + r10*8 - 8]
mov edx, dword [rdi + r8*4 + 0x40b930]
and rdx, rcx
mov ecx, r14d
shl rdx, cl
or rbp, rdx
add r14d, r8d
mov qword [rax], rbp
lea r13, [r10 - 2]
mov ecx, r14d
shr rcx, 3
add rax, rcx
cmp rax, r15
cmova rax, r15
shl cl, 3
shr rbp, cl
and r14d, 7
cmp r13, r10
jae 0x1337c0f01dd5
mov rcx, qword [rsp + 0xc8]
lea rdx, [r11 + r13]
mov r9, qword [rsp + 0xb8]
sub rcx, r11
sub r9, r11
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0xb8], r9
mov qword [rsp + 0xc8], rcx
nop
movzx ecx, byte [rcx + rdx]
movzx r9d, byte [r9 + rdx]
mov r12d, ecx
movzx esi, byte [rdx]
mov r10, qword [rsp + 0x20]
movzx edx, byte [r9 + rdi + 0x40c000]
movzx r8d, byte [rsi + rdi + 0x40bfd0]
mov dword [rsp + 0xa8], edx
mov rdx, qword [rsp + 0x30]
mov dword [rsp + 8], r8d
mov r8, qword [rdx + rcx*8]
mov rcx, r8
shr rcx, 0x20
add rcx, r10
shr rcx, 0x10
mov edx, ecx
lea ebx, [r14 + rcx]
mov edi, dword [rdi + rdx*4 + 0x40b930]
and rdi, r10
sar r10, cl
movsxd rcx, r8d
add r10, rcx
mov rcx, qword [rsp + 0x38]
movzx r10d, word [rcx + r10*2]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], r10
lea r10, [0x1337c0de0000]
mov r8, qword [rcx + r9*8]
mov r9, qword [rsp + 0x18]
mov rcx, r8
shr rcx, 0x20
add rcx, r9
shr rcx, 0x10
mov edx, ecx
lea r11d, [rbx + rcx]
mov r10d, dword [r10 + rdx*4 + 0x40b930]
and r10, r9
sar r9, cl
movsxd rcx, r8d
add r9, rcx
mov rcx, qword [rsp + 0x48]
movzx r9d, word [rcx + r9*2]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x18], r9
mov r9, qword [rcx + rsi*8]
lea rcx, [0x1337c0de0000]
mov r8, r9
shr r8, 0x20
add r8, qword [rsp]
shr r8, 0x10
mov edx, r8d
mov esi, dword [rcx + rdx*4 + 0x40b930]
mov ecx, r11d
mov rdx, qword [rsp]
and rsi, rdx
shl rsi, cl
mov ecx, r14d
shl rdi, cl
mov ecx, ebx
shl r10, cl
or rsi, rdi
mov ecx, r8d
or rsi, r10
sar rdx, cl
lea r10d, [r11 + r8]
mov r8d, dword [rsp + 8]
or rsi, rbp
movsxd rcx, r9d
mov r9d, dword [rsp + 0xa8]
add rdx, rcx
mov rcx, qword [rsp + 0x58]
lea r11d, [r9 + r12]
movzx edx, word [rcx + rdx*2]
add r11d, r8d
mov qword [rsp], rdx
cmp r11d, 0x1f
jb 0x1337c0f01c6f
mov qword [rax], rsi
mov edx, r10d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
and r10d, 7
shl cl, 3
shr rsi, cl
mov rbx, qword [rsp + 0xe0]
lea rdi, [0x1337c0de0000]
mov edx, dword [rdi + r8*4 + 0x40b930]
mov ebp, dword [rdi + r9*4 + 0x40b930]
movzx ecx, word [rbx + r13*8 + 4]
and rdx, rcx
mov ecx, r10d
shl rdx, cl
add r10d, r8d
movzx ecx, word [rbx + r13*8 + 6]
or rsi, rdx
and rbp, rcx
mov ecx, r10d
shl rbp, cl
or rbp, rsi
lea r14d, [r10 + r9]
cmp r11d, 0x38
jbe 0x1337c0f01ce0
mov qword [rax], rbp
mov edx, r14d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
cmp dword [rsp + 0xf0], 0
je 0x1337c0f01d63
mov r9d, 0x38
cmp r12d, r9d
cmovb r9d, r12d
sub r12d, r9d
je 0x1337c0f01d3d
mov ecx, dword [rbx + r13*8]
mov edx, dword [rdi + r12*4 + 0x40b930]
and rdx, rcx
mov r10d, r12d
mov ecx, r14d
add r14d, r12d
shl rdx, cl
or rbp, rdx
mov edx, r14d
shr rdx, 3
mov qword [rax], rbp
movzx ecx, dl
add rax, rdx
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
jmp 0x1337c0f01d40
xor r10d, r10d
mov edx, dword [rbx + r13*8]
mov rcx, r10
mov r8d, dword [rdi + r9*4 + 0x40b930]
shr rdx, cl
mov ecx, r14d
and r8, rdx
shl r8, cl
or rbp, r8
add r14d, r9d
jmp 0x1337c0f01d7e
mov ecx, dword [rbx + r13*8]
mov edx, dword [rdi + r12*4 + 0x40b930]
and rdx, rcx
mov ecx, r14d
shl rdx, cl
or rbp, rdx
add r14d, r12d
mov r9, qword [rsp + 0xb8]
mov qword [rax], rbp
mov edx, r14d
shr rdx, 3
add rax, rdx
movzx ecx, dl
mov rdx, qword [rsp + 0x28]
cmp rax, r15
cmova rax, r15
shl cl, 3
shr rbp, cl
dec rdx
mov rcx, qword [rsp + 0xc8]
and r14d, 7
dec r13
mov qword [rsp + 0x28], rdx
cmp r13, qword [rsp + 0xe8]
jb 0x1337c0f01b10
mov rsi, qword [rsp + 0xa0]
mov edx, dword [rsp + 0xc]
mov ecx, r14d
mov r9d, dword [rsp + 0x10]
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
mov r10d, dword [rdi + rdx*4 + 0x40b930]
lea r8d, [r14 + rdx]
and r10, qword [rsp + 0x18]
mov edx, dword [rdi + r9*4 + 0x40b930]
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0xb0]
shl r10, cl
or r10, rbp
mov ecx, r8d
mov rbp, qword [rsp + 0x80]
shr rcx, 3
mov qword [rax], r10
add rax, rcx
cmp rax, r15
cmova rax, r15
and rdx, qword [rsp + 0x20]
shl cl, 3
and r8d, 7
shr r10, cl
add r9d, r8d
mov ecx, r8d
mov r8d, dword [rsp + 0x14]
shl rdx, cl
or r10, rdx
mov ecx, r9d
shr rcx, 3
mov edx, dword [rdi + r8*4 + 0x40b930]
mov rdi, qword [rsp + 0x78]
mov qword [rax], r10
add rax, rcx
cmp rax, r15
cmova rax, r15
and rdx, qword [rsp]
shl cl, 3
and r9d, 7
shr r10, cl
mov ecx, r9d
shl rdx, cl
or r10, rdx
mov qword [rax], r10
lea edx, [r9 + r8]
mov ecx, edx
shr rcx, 3
add rax, rcx
cmp rax, r15
cmova rax, r15
shl cl, 3
shr r10, cl
and edx, 7
bts r10, rdx
inc edx
mov ecx, edx
shr rcx, 3
mov qword [rax], r10
add rax, rcx
cmp rax, r15
jae 0x1337c0f01ed7
test dl, 7
mov r11d, 0
seta r11b
sub r11, rsi
add rax, r11
jne 0x1337c0f01ede
mov rax, 0xffffffffffffffba
add rsp, 0x88
pop r15
pop rsi
ret