Function at 0x1400421f0
Capabilities:
Enumerate pe sections

Disassembly:
sub rsp, 0x18
mov r8, rdx
mov r9, rcx
cmp rcx, 0x1000
jb 0x140042684
movabs rax, 0xffff800000000000
test rax, rcx
jne 0x140042684
cmp rdx, 0x1000
jb 0x140042684
test rax, rdx
jne 0x140042684
movzx edx, byte [rdx]
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov eax, ecx
mov qword [rsp + 0x28], rbp
cmp dl, 0x7b
mov qword [rsp + 0x30], rsi
sete al
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x10], r12
add r8, rax
mov qword [rsp + 8], r14
lea r12, [0x1400b4960]
mov qword [rsp], r15
movzx eax, byte [r8]
movzx r15d, byte [rax + r12]
cmp r15b, 0xff
je 0x14004267d
movzx eax, byte [r8 + 1]
movzx r10d, byte [rax + r12]
cmp r10b, 0xff
je 0x14004267d
movzx eax, byte [r8 + 2]
movzx r11d, byte [rax + r12]
cmp r11b, 0xff
je 0x14004267d
movzx eax, byte [r8 + 3]
movzx ebx, byte [rax + r12]
cmp bl, 0xff
je 0x14004267d
movzx eax, byte [r8 + 4]
movzx edi, byte [rax + r12]
cmp dil, 0xff
je 0x14004267d
movzx eax, byte [r8 + 5]
movzx esi, byte [rax + r12]
cmp sil, 0xff
je 0x14004267d
movzx eax, byte [r8 + 6]
movzx ebp, byte [rax + r12]
cmp bpl, 0xff
je 0x14004267d
movzx eax, byte [r8 + 7]
movzx r14d, byte [rax + r12]
cmp r14b, 0xff
je 0x14004267d
cmp byte [r8 + 8], 0x2d
jne 0x14004267d
movzx eax, byte [r8 + 9]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0xa]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0xb]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0xc]
cmp byte [rax + r12], 0xff
je 0x14004267d
cmp byte [r8 + 0xd], 0x2d
jne 0x14004267d
movzx eax, byte [r8 + 0xe]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0xf]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x10]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x11]
cmp byte [rax + r12], 0xff
je 0x14004267d
cmp byte [r8 + 0x12], 0x2d
jne 0x14004267d
movzx eax, byte [r8 + 0x13]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x14]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x15]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x16]
cmp byte [rax + r12], 0xff
je 0x14004267d
cmp byte [r8 + 0x17], 0x2d
jne 0x14004267d
movzx eax, byte [r8 + 0x18]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x19]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x1a]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x1b]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x1c]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x1d]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x1e]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x1f]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x20]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x21]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x22]
cmp byte [rax + r12], 0xff
je 0x14004267d
movzx eax, byte [r8 + 0x23]
cmp byte [rax + r12], 0xff
je 0x14004267d
cmp dl, 0x7b
jne 0x1400424c5
cmp byte [r8 + 0x24], 0x7d
jne 0x14004267d
cmp dl, dl
sete cl
cmp byte [rcx + r8 + 0x24], 0
jne 0x14004267d
mov ecx, r15d
shl ecx, 4
or ecx, r10d
shl ecx, 4
or ecx, r11d
shl ecx, 4
or ecx, ebx
shl ecx, 4
or ecx, edi
shl ecx, 4
or ecx, esi
shl ecx, 4
or ecx, ebp
shl ecx, 4
or ecx, r14d
mov dword [r9], ecx
movzx eax, byte [r8 + 9]
movzx edx, byte [rax + r12]
movzx eax, byte [r8 + 0xa]
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0xb]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0xc]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
or dx, cx
mov word [r9 + 4], dx
movzx eax, byte [r8 + 0xe]
movzx edx, byte [rax + r12]
movzx eax, byte [r8 + 0xf]
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x10]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x11]
or dx, cx
shl dx, 4
movzx ecx, byte [rax + r12]
or dx, cx
mov word [r9 + 6], dx
movzx eax, byte [r8 + 0x13]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x14]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 8], cl
movzx eax, byte [r8 + 0x15]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x16]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 9], cl
movzx eax, byte [r8 + 0x18]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x19]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xa], cl
movzx eax, byte [r8 + 0x1a]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x1b]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xb], cl
movzx eax, byte [r8 + 0x1c]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x1d]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xc], cl
movzx eax, byte [r8 + 0x1e]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x1f]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xd], cl
movzx eax, byte [r8 + 0x20]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x21]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xe], cl
movzx eax, byte [r8 + 0x22]
movzx ecx, byte [rax + r12]
movzx eax, byte [r8 + 0x23]
shl cl, 4
or cl, byte [rax + r12]
mov byte [r9 + 0xf], cl
xor eax, eax
mov r14, qword [rsp + 8]
mov r12, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
add rsp, 0x18
ret
mov eax, 0xffffffcf
jmp 0x140042656
mov eax, 0xfffffffe
add rsp, 0x18
ret