Function at 0x1400ed070
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x14014a1f8]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r8d, dword [rcx + 0x38]
mov rbx, rcx
mov eax, dword [rcx + 0x34]
mov rsi, rdx
mov edx, dword [rcx + 0x30]
mov edi, 0x1b8
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 0x81
lea ecx, [rax + 1]
lea r9d, [rdx + r8]
cmp r9d, r8d
mov byte [rsp + 0x37], r9b
cmovae ecx, eax
mov eax, ecx
mov byte [rsp + 0x33], cl
shr eax, 0x18
mov byte [rsp + 0x30], al
mov eax, ecx
shr eax, 0x10
mov byte [rsp + 0x31], al
mov eax, ecx
shr eax, 8
mov byte [rsp + 0x32], al
mov eax, r9d
shr eax, 0x18
mov byte [rsp + 0x34], al
mov eax, r9d
shr eax, 0x10
mov byte [rsp + 0x35], al
mov eax, r9d
shr eax, 8
mov byte [rsp + 0x36], al
cmp r8d, edi
jne 0x1400ed122
lea eax, [rdx - 8]
mov r8d, 8
lea rdx, [rsp + 0x20]
mov dword [rbx + 0x30], eax
mov rcx, rbx
call fcn.1400ed2e0
mov eax, dword [rbx + 0x30]
jmp 0x1400ed1ae
jge 0x1400ed151
test r8d, r8d
jne 0x1400ed130
mov dword [rbx + 0x3c], 1
sub edi, r8d
lea eax, [r9 - 0x1b8]
movsxd r8, edi
lea rdx, [0x14012d880]
mov rcx, rbx
mov dword [rbx + 0x30], eax
call fcn.1400ed2e0
jmp 0x1400ed195
lea eax, [r9 - 0x200]
mov rcx, rbx
mov dword [rbx + 0x30], eax
lea rdx, [0x14012d880]
mov eax, 0x200
sub eax, r8d
movsxd r8, eax
call fcn.1400ed2e0
add dword [rbx + 0x30], 0xfffffe48
lea rdx, [0x14012d881]
mov r8, rdi
mov rcx, rbx
call fcn.1400ed2e0
mov dword [rbx + 0x3c], 1
mov r8d, 8
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.1400ed2e0
mov eax, dword [rbx + 0x30]
sub eax, 8
add eax, 0xffffffc0
lea rdx, [rsp + 0x30]
mov r8d, pe_nt_image_headers64
mov dword [rbx + 0x30], eax
mov rcx, rbx
call fcn.1400ed2e0
movzx eax, byte [rbx + 3]
mov byte [rsi], al
movzx eax, byte [rbx + 2]
mov byte [rsi + 1], al
mov eax, dword [rbx]
shr eax, 8
mov byte [rsi + 2], al
movzx eax, byte [rbx]
mov byte [rsi + 3], al
movzx eax, byte [rbx + 7]
mov byte [rsi + 4], al
movzx eax, byte [rbx + 6]
mov byte [rsi + 5], al
mov eax, dword [rbx + 4]
shr eax, 8
mov byte [rsi + 6], al
movzx eax, byte [rbx + 4]
mov byte [rsi + 7], al
movzx eax, byte [rbx + 0xb]
mov byte [rsi + 8], al
movzx eax, byte [rbx + 0xa]
mov byte [rsi + 9], al
mov eax, dword [rbx + 8]
shr eax, 8
mov byte [rsi + 0xa], al
movzx eax, byte [rbx + 8]
mov byte [rsi + 0xb], al
movzx eax, byte [rbx + 0xf]
mov byte [rsi + 0xc], al
movzx eax, byte [rbx + 0xe]
mov byte [rsi + 0xd], al
mov eax, dword [rbx + 0xc]
shr eax, 8
mov byte [rsi + 0xe], al
movzx eax, byte [rbx + 0xc]
mov byte [rsi + 0xf], al
movzx eax, byte [rbx + 0x13]
mov byte [rsi + 0x10], al
movzx eax, byte [rbx + 0x12]
mov byte [rsi + 0x11], al
mov eax, dword [rbx + 0x10]
shr eax, 8
mov byte [rsi + 0x12], al
movzx eax, byte [rbx + 0x10]
mov byte [rsi + 0x13], al
movzx eax, byte [rbx + 0x17]
mov byte [rsi + 0x14], al
movzx eax, byte [rbx + 0x16]
mov byte [rsi + 0x15], al
mov eax, dword [rbx + 0x14]
shr eax, 8
mov byte [rsi + 0x16], al
movzx eax, byte [rbx + 0x14]
mov byte [rsi + 0x17], al
movzx eax, byte [rbx + 0x1b]
mov byte [rsi + 0x18], al
movzx eax, byte [rbx + 0x1a]
mov byte [rsi + 0x19], al
mov eax, dword [rbx + 0x18]
shr eax, 8
mov byte [rsi + 0x1a], al
movzx eax, byte [rbx + 0x18]
mov byte [rsi + 0x1b], al
movzx eax, byte [rbx + 0x1f]
mov byte [rsi + 0x1c], al
movzx eax, byte [rbx + 0x1e]
mov byte [rsi + 0x1d], al
mov eax, dword [rbx + 0x1c]
shr eax, 8
mov byte [rsi + 0x1e], al
movzx eax, byte [rbx + 0x1c]
mov byte [rsi + 0x1f], al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14008c170
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret