Function at 0x14000de90
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
mov rax, qword [0x140055080]
xor rax, rsp
mov qword [rbp + 7], rax
mov r15, r9
mov rsi, r8
mov qword [rbp - 0x21], r8
mov r13, rdx
mov r12, rcx
xor edi, edi
movzx eax, word [r9 + 0x14]
lea rbx, [r9 + 0x18]
add rbx, rax
mov r14d, edi
cmp di, word [r9 + 6]
jae 0x14000e149
cmp dword [rbx + 0x10], 0
je 0x14000e134
test dword [rbx + 0x24], 0x2000000
jne 0x14000e134
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rdi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x14000df10
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140001c50
nop
mov r8, qword [rbp - 0x39]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
sub rax, r8
cmp rax, 0x11
jb 0x14000dfd3
lea rax, [r8 + 0x11]
mov qword [rbp - 0x39], rax
lea rdi, [rbp - 0x49]
cmp rcx, 0xf
cmova rdi, qword [rbp - 0x49]
lea rax, [0x14004e061]
cmp rax, rdi
jbe 0x14000df81
lea rax, [rdi + r8]
lea rcx, str.Writing_section:
cmp rcx, rax
ja 0x14000df81
cmp rdi, rcx
ja 0x14000df79
xor esi, esi
jmp 0x14000df86
mov rsi, rdi
sub rsi, rcx
jmp 0x14000df86
mov esi, 0x11
inc r8
lea rcx, [rdi + 0x11]
mov rdx, rdi
call fcn.14003f1c0
mov r8, rsi
lea rdx, str.Writing_section:
mov rcx, rdi
call fcn.14003f1c0
mov r8d, 0x11
sub r8, rsi
lea rdx, str.Writing_section:
add rdx, 0x11
add rdx, rsi
lea rcx, [rdi + rsi]
call fcn.14003f1c0
lea rax, [rbp - 0x49]
mov rsi, qword [rbp - 0x21]
xor edi, edi
jmp 0x14000dff6
mov qword [rsp + 0x28], 0x11
lea rax, str.Writing_section:
mov qword [rsp + 0x20], rax
mov edx, 0x11
lea rcx, [rbp - 0x49]
call fcn.140002200
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r8, [rbp - 0x19]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova r8, rcx
xor edx, edx
call fcn.140006060
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14000e073
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e06d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e169
call fcn.140015e38
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x14000e0ae
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e16f
call fcn.140015e38
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], 0xf
mov byte [rbp - 0x49], 0
mov edi, dword [rbx + 0x10]
mov rax, qword [r12]
mov ecx, dword [rax]
mov dword [rbp - 0x19], ecx
mov eax, dword [rbx + 0xc]
add rax, r13
mov qword [rbp - 0x11], rax
mov eax, dword [rbx + 0x14]
add rax, rsi
mov qword [rbp - 9], rax
mov qword [rbp - 1], rdi
mov dword [rsp + 0x28], 0x20
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp - 0x19]
mov edx, 0x222010
mov rcx, qword [0x140057cd0]
call fcn.140002880
test al, al
jne 0x14000e11b
lea r8, str.Failed_to_write_memory___Ioctl_failed_
jmp 0x14000e128
cmp qword [rbp - 1], rdi
je 0x14000e132
lea r8, str.Failed_to_write_memory___Partial_write_
mov edx, 3
call fcn.140006060
xor edi, edi
inc r14d
add rbx, 0x28
movzx eax, word [r15 + 6]
cmp r14d, eax
jl 0x14000dee3
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140015bd0
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14001c8bc
nop
call fcn.14001c8bc
int3