Function at 0x1400471d0
Capabilities:
Enumerate pe sections

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 8], rcx
push rsi
push r15
sub rsp, 0x98
lea r15, [rdx - 8]
mov r11, r9
add r15, rcx
mov rsi, rcx
cmp rdx, 8
jbe 0x1400478a9
mov r10, qword [rsp + 0xf8]
mov r9d, 1
mov qword [rax + 0x18], rbx
mov qword [rax - 0x18], rbp
mov qword [rax - 0x20], rdi
lea rdi, [r8 + 4]
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
movzx eax, word [r8]
mov dword [rsp + 0x10], eax
mov qword [rsp + 0x50], rdi
test eax, eax
je 0x140047241
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x140047244
mov eax, r9d
movzx ebx, byte [r11 + r10 - 1]
add r8, 4
mov r12, qword [rsp + 0xd8]
cdqe
lea rax, [r8 + rax*4]
mov r8, qword [rax + rbx*8]
mov qword [rsp + 0x48], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rdi + rdx*2]
mov rdx, qword [rsp + 0xd0]
movzx edi, byte [r12 + r10 - 1]
mov qword [rsp + 0x20], rax
movzx eax, word [rdx]
lea r11, [rdx + 4]
mov dword [rsp + 0x14], eax
mov qword [rsp + 0x40], r11
test eax, eax
je 0x1400472bc
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x1400472bf
mov eax, r9d
add rdx, 4
movsxd rcx, eax
lea rcx, [rdx + rcx*4]
mov r8, qword [rcx + rdi*8]
mov qword [rsp + 0x38], rcx
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [r11 + rdx*2]
mov rdx, qword [rsp + 0xe0]
mov r11, qword [rsp + 0xe8]
mov qword [rsp + 0x28], rax
movzx eax, word [rdx]
lea rbp, [rdx + 4]
mov dword [rsp + 0x18], eax
mov qword [rsp + 0x60], rbp
test eax, eax
je 0x140047329
lea ecx, [rax - 1]
shl r9d, cl
mov r13, qword [rsp + 0xf0]
add rdx, 4
movsxd rax, r9d
movzx r9d, byte [r11 + r10 - 1]
lea rax, [rdx + rax*4]
mov r8, qword [rax + r9*8]
mov qword [rsp + 0x58], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rbp + rdx*2]
mov qword [rsp], rax
lea rax, [0x140000000]
movzx r8d, byte [r9 + rax + 0x169d20]
movzx edx, byte [rbx + rax + 0x169dd0]
mov ecx, r8d
movzx eax, word [r13 + r10*8 - 2]
lea rbx, [0x140000000]
mov ebp, dword [rbx + rdx*4 + 0x169d50]
lea r14d, [r8 + rdx]
and rbp, rax
movzx eax, word [r13 + r10*8 - 4]
shl rbp, cl
mov ecx, dword [rbx + r8*4 + 0x169d50]
mov r8, rdi
and rcx, rax
mov rax, rsi
or rbp, rcx
cmp dword [rsp + 0x100], 0
je 0x140047460
mov r9d, gethostname
cmp r8d, r9d
cmovb r9d, r8d
sub r8d, r9d
mov ebx, r8d
je 0x14004742e
mov ecx, r14d
lea rax, [0x140000000]
mov edx, dword [rax + r8*4 + 0x169d50]
add r14d, r8d
mov eax, dword [r13 + r10*8 - 8]
and rdx, rax
shl rdx, cl
or rbp, rdx
mov ecx, r14d
shr rcx, 3
mov qword [rsi], rbp
lea rax, [rcx + rsi]
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
mov edx, dword [r13 + r10*8 - 8]
lea rcx, [0x140000000]
mov r8d, dword [rcx + r9*4 + 0x169d50]
mov rcx, rbx
shr rdx, cl
lea rbx, [0x140000000]
and r8, rdx
mov ecx, r14d
shl r8, cl
or rbp, r8
add r14d, r9d
jmp 0x14004747b
mov ecx, dword [r13 + r10*8 - 8]
mov edx, dword [rbx + rdi*4 + 0x169d50]
and rdx, rcx
mov ecx, r14d
shl rdx, cl
or rbp, rdx
add r14d, r8d
mov qword [rax], rbp
lea r13, [r10 - 2]
mov ecx, r14d
shr rcx, 3
add rax, rcx
cmp rax, r15
cmova rax, r15
shl cl, 3
shr rbp, cl
and r14d, 7
cmp r13, r10
jae 0x1400477a1
mov r9, qword [rsp + 0xc8]
lea rcx, [r11 + r13]
sub r12, r11
mov qword [rsp + 0x30], rcx
sub r9, r11
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xc8], r9
nop dword [rax]
movzx r9d, byte [rcx + r9]
movzx esi, byte [rcx]
movzx r8d, byte [rcx + r12]
mov r10, qword [rsp + 0x28]
mov r12d, r8d
movzx ecx, byte [r9 + rbx + 0x169dd0]
movzx edx, byte [rsi + rbx + 0x169d20]
mov dword [rsp + 8], ecx
mov dword [rsp + 0xc], edx
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x68], r8
mov r8, qword [rdx + r8*8]
mov rcx, r8
shr rcx, 0x20
add rcx, r10
shr rcx, 0x10
mov edx, ecx
mov edi, dword [rbx + rdx*4 + 0x169d50]
lea ebx, [r14 + rcx]
and rdi, r10
sar r10, cl
movsxd rcx, r8d
add r10, rcx
mov rcx, qword [rsp + 0x40]
movzx r10d, word [rcx + r10*2]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x28], r10
lea r10, [0x140000000]
mov r8, qword [rcx + r9*8]
mov r9, qword [rsp + 0x20]
mov rcx, r8
shr rcx, 0x20
add rcx, r9
shr rcx, 0x10
mov edx, ecx
lea r11d, [rbx + rcx]
mov r10d, dword [r10 + rdx*4 + 0x169d50]
and r10, r9
sar r9, cl
movsxd rcx, r8d
add r9, rcx
mov rcx, qword [rsp + 0x50]
movzx r9d, word [rcx + r9*2]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x20], r9
mov r9, qword [rcx + rsi*8]
lea rcx, [0x140000000]
mov r8, r9
shr r8, 0x20
add r8, qword [rsp]
shr r8, 0x10
mov edx, r8d
mov esi, dword [rcx + rdx*4 + 0x169d50]
mov ecx, r11d
mov rdx, qword [rsp]
and rsi, rdx
shl rsi, cl
mov ecx, r14d
shl rdi, cl
mov ecx, ebx
shl r10, cl
or rsi, rdi
mov ecx, r8d
or rsi, r10
sar rdx, cl
lea r10d, [r11 + r8]
mov r11d, dword [rsp + 8]
or rsi, rbp
mov r8d, dword [rsp + 0xc]
movsxd rcx, r9d
add rdx, rcx
mov rcx, qword [rsp + 0x60]
lea ebx, [r11 + r12]
add ebx, r8d
movzx edx, word [rcx + rdx*2]
mov qword [rsp], rdx
cmp ebx, 0x1f
jb 0x14004762c
mov qword [rax], rsi
mov edx, r10d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
and r10d, 7
shl cl, 3
shr rsi, cl
mov rdi, qword [rsp + 0xf0]
lea r9d, [r10 + r8]
lea r14, [0x140000000]
movzx edx, r11b
mov r8d, dword [r14 + r8*4 + 0x169d50]
mov ecx, r9d
mov ebp, dword [r14 + rdx*4 + 0x169d50]
lea r14d, [r9 + r11]
movzx edx, word [rdi + r13*8 + 6]
and rbp, rdx
movzx edx, word [rdi + r13*8 + 4]
shl rbp, cl
and r8, rdx
mov ecx, r10d
shl r8, cl
or rbp, r8
or rbp, rsi
cmp ebx, 0x38
jbe 0x1400476a1
mov qword [rax], rbp
mov edx, r14d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
cmp dword [rsp + 0x100], 0
lea rbx, [0x140000000]
je 0x14004772b
mov r9d, gethostname
cmp r12b, r9b
cmovb r9d, r12d
sub r12d, r9d
je 0x140047705
mov ecx, dword [rdi + r13*8]
mov edx, dword [rbx + r12*4 + 0x169d50]
and rdx, rcx
mov r10d, r12d
mov ecx, r14d
add r14d, r12d
shl rdx, cl
or rbp, rdx
mov edx, r14d
shr rdx, 3
mov qword [rax], rbp
movzx ecx, dl
add rax, rdx
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
jmp 0x140047708
xor r10d, r10d
mov edx, dword [rdi + r13*8]
mov rcx, r10
mov r8d, dword [rbx + r9*4 + 0x169d50]
shr rdx, cl
mov ecx, r14d
and r8, rdx
shl r8, cl
or rbp, r8
add r14d, r9d
jmp 0x14004774a
mov rcx, qword [rsp + 0x68]
mov edx, dword [rbx + rcx*4 + 0x169d50]
mov ecx, dword [rdi + r13*8]
and rdx, rcx
mov ecx, r14d
shl rdx, cl
or rbp, rdx
add r14d, r12d
mov r9, qword [rsp + 0xc8]
mov r12, qword [rsp + 0xd8]
mov qword [rax], rbp
mov edx, r14d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
shl cl, 3
shr rbp, cl
and r14d, 7
mov rcx, qword [rsp + 0x30]
dec r13
dec rcx
mov qword [rsp + 0x30], rcx
cmp r13, qword [rsp + 0xf8]
jb 0x1400474d0
mov rsi, qword [rsp + 0xb0]
mov edx, dword [rsp + 0x10]
mov ecx, r14d
mov r9d, dword [rsp + 0x14]
mov r13, qword [rsp + 0x78]
mov r12, qword [rsp + 0x80]
mov r10d, dword [rbx + rdx*4 + 0x169d50]
lea r8d, [r14 + rdx]
and r10, qword [rsp + 0x20]
mov edx, dword [rbx + r9*4 + 0x169d50]
mov r14, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x88]
shl r10, cl
or r10, rbp
mov ecx, r8d
mov rbp, qword [rsp + 0x90]
shr rcx, 3
mov qword [rax], r10
add rax, rcx
cmp rax, r15
cmova rax, r15
and rdx, qword [rsp + 0x28]
shl cl, 3
and r8d, 7
shr r10, cl
add r9d, r8d
mov ecx, r8d
mov r8d, dword [rsp + 0x18]
shl rdx, cl
or r10, rdx
mov ecx, r9d
shr rcx, 3
mov edx, dword [rbx + r8*4 + 0x169d50]
mov rbx, qword [rsp + 0xc0]
mov qword [rax], r10
add rax, rcx
cmp rax, r15
cmova rax, r15
and rdx, qword [rsp]
shl cl, 3
and r9d, 7
shr r10, cl
mov ecx, r9d
shl rdx, cl
or r10, rdx
mov qword [rax], r10
lea edx, [r8 + r9]
mov ecx, edx
shr rcx, 3
add rax, rcx
cmp rax, r15
cmova rax, r15
shl cl, 3
shr r10, cl
and edx, 7
bts r10, rdx
inc edx
mov ecx, edx
shr rcx, 3
mov qword [rax], r10
add rax, rcx
cmp rax, r15
jae 0x1400478a9
test dl, 7
mov r11d, 0
seta r11b
sub r11, rsi
add rax, r11
jne 0x1400478b0
mov rax, 0xffffffffffffffba
add rsp, 0x98
pop r15
pop rsi
ret