Function at 0x140005d4c
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov ebx, edx
xor ebp, ebp
mov r13, rcx
lea eax, [rbx - 0x201]
cmp eax, 0x6ffffdfe
ja 0x140005ff3
mov eax, 0x5a4d
cmp ax, word [rcx]
jne 0x140005ff3
movsxd r9, dword [rcx + 0x3c]
cmp r9d, ebx
jae 0x140005ff3
mov ecx, r9d
add rcx, 0x18
cmp rcx, rbx
jae 0x140005ff3
lea rdx, [r9 + r13]
movzx r14d, word [rdx + 6]
movzx r8d, word [rdx + 0x14]
lea r11, [rdx + 0x18]
add r11, r8
lea r10, [r14 - 1]
lea eax, [r14 + r14*4]
lea ecx, [r9 + rax*8]
lea r10, [r10 + r10*4]
lea r9d, [r8 + 0x18]
lea r10, [r11 + r10*8]
add r9d, ecx
cmp dword [rdx], 0x4550
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x30], r11
jne 0x140005ff3
lea eax, [r14 - 1]
cmp eax, 0x4e
ja 0x140005ff3
cmp r9d, ebx
jae 0x140005ff3
cmp r8d, ebx
jae 0x140005ff3
mov r15d, dword [rdx + 0x54]
mov ecx, dword [rdx + 0x3c]
mov eax, dword [rdx + 0x38]
mov r8d, dword [rdx + 0x50]
mov dword [rsp + 0x98], r15d
cmp r9d, r15d
ja 0x140005ff3
mov edx, 0x10000
cmp ecx, edx
ja 0x140005ff3
cmp eax, edx
ja 0x140005ff3
mov edx, dword [r10 + 0xc]
lea r12d, [rax - 1]
mov eax, r12d
lea esi, [r12 + r8]
not eax
and esi, eax
cmp edx, esi
ja 0x140005ff3
mov eax, dword [r10 + 8]
cmp eax, esi
jae 0x140005ff3
add eax, edx
cmp eax, esi
ja 0x140005ff3
dec ecx
cmp ecx, r12d
ja 0x140005ff3
mov r10d, ebp
test r14d, r14d
je 0x140005f65
mov r15, qword [rsp + 0x28]
lea rdx, [r11 + 0x14]
mov r13d, ecx
mov r8d, dword [rdx - 8]
cmp r8d, esi
ja 0x140005f4c
test r12d, r8d
jne 0x140005f4c
mov r9d, dword [rdx]
cmp r9d, ebx
ja 0x140005f4c
mov r11d, dword [rdx - 4]
cmp r11d, ebx
ja 0x140005f4c
lea eax, [r11 + r9]
cmp eax, ebx
ja 0x140005f4c
lea rdi, [rdx - 0x14]
cmp rdi, r15
je 0x140005ef1
mov edi, dword [rdx + 0x20]
cmp r8d, edi
ja 0x140005f4c
mov ecx, dword [rdx - 0xc]
add ecx, r8d
cmp ecx, edi
ja 0x140005f4c
lea rdi, [rdx - 0x14]
mov eax, r13d
lea ecx, [r11 + r13]
not eax
and r9d, eax
and ecx, eax
mov dword [rdx], r9d
mov dword [rdx - 4], ecx
cmp r9d, ebx
ja 0x140005f4c
test ecx, ecx
js 0x140005f4c
mov eax, ebx
sub eax, r9d
cmp ecx, eax
cmova ecx, eax
mov dword [rdx - 4], ecx
cmp rdi, r15
je 0x140005f2c
mov eax, dword [rdx + 0x20]
sub eax, r8d
cmp ecx, eax
ja 0x140005f4c
jmp 0x140005f3c
mov eax, dword [rdx - 4]
mov ecx, esi
sub ecx, r8d
cmp eax, ecx
cmova eax, ecx
mov dword [rdx - 4], eax
inc r10d
add rdx, 0x28
cmp r10d, r14d
jb 0x140005e9b
mov r15d, dword [rsp + 0x98]
mov r13, qword [rsp + 0x90]
cmp r10d, r14d
jb 0x140005ff3
lea eax, [rsi + 0x100]
mov ecx, 1
mov edx, eax
mov r12d, eax
call fcn.140077530
mov rdi, rax
test rax, rax
je 0x140005ff3
mov r8d, r12d
xor edx, edx
mov rcx, rax
call fcn.1400013f0
cmp ebx, r15d
mov rdx, r13
cmovb r15d, ebx
mov rcx, rdi
mov r8d, r15d
call fcn.1400010a0
test r14d, r14d
je 0x140005fdb
mov rbx, qword [rsp + 0x30]
add rbx, 0x10
mov eax, dword [rbx - 8]
mov edx, dword [rbx + 4]
mov ecx, dword [rbx]
add rdx, r13
mov r8d, eax
cmp eax, ecx
jb 0x140005fc7
mov r8d, ecx
mov ecx, dword [rbx - 4]
add rcx, rdi
call fcn.1400010a0
add rbx, 0x28
dec r14
jne 0x140005fb2
mov rax, qword [rsp + 0xa0]
mov bpl, 1
mov qword [rax], rdi
mov rax, qword [rsp + 0xa8]
mov dword [rax], esi
mov al, bpl
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret