Function at 0x140093e90
Capabilities:
Enumerate pe sections

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 8], rcx
push rsi
push r15
sub rsp, 0x98
lea r15, [rdx - 8]
mov r11, r9
add r15, rcx
mov rsi, rcx
cmp rdx, 8
jbe 0x140094569
mov r10, qword [rsp + 0xf8]
mov r9d, 1
mov qword [rax + 0x18], rbx
mov qword [rax - 0x18], rbp
mov qword [rax - 0x20], rdi
lea rdi, [r8 + 4]
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
movzx eax, word [r8]
mov dword [rsp + 0x10], eax
mov qword [rsp + 0x50], rdi
test eax, eax
je 0x140093f01
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x140093f04
mov eax, r9d
movzx ebx, byte [r11 + r10 - 1]
add r8, 4
mov r12, qword [rsp + 0xd8]
cdqe
lea rax, [r8 + rax*4]
mov r8, qword [rax + rbx*8]
mov qword [rsp + 0x48], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rdi + rdx*2]
mov rdx, qword [rsp + 0xd0]
movzx edi, byte [r12 + r10 - 1]
mov qword [rsp + 0x20], rax
movzx eax, word [rdx]
lea r11, [rdx + 4]
mov dword [rsp + 0x14], eax
mov qword [rsp + 0x40], r11
test eax, eax
je 0x140093f7c
lea ecx, [rax - 1]
mov eax, r9d
shl eax, cl
jmp 0x140093f7f
mov eax, r9d
add rdx, 4
movsxd rcx, eax
lea rcx, [rdx + rcx*4]
mov r8, qword [rcx + rdi*8]
mov qword [rsp + 0x38], rcx
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [r11 + rdx*2]
mov rdx, qword [rsp + 0xe0]
mov r11, qword [rsp + 0xe8]
mov qword [rsp + 0x28], rax
movzx eax, word [rdx]
lea rbp, [rdx + 4]
mov dword [rsp + 0x18], eax
mov qword [rsp + 0x60], rbp
test eax, eax
je 0x140093fe9
lea ecx, [rax - 1]
shl r9d, cl
mov r13, qword [rsp + 0xf0]
add rdx, 4
movsxd rax, r9d
movzx r9d, byte [r11 + r10 - 1]
lea rax, [rdx + rax*4]
mov r8, qword [rax + r9*8]
mov qword [rsp + 0x58], rax
mov rdx, r8
shr rdx, 0x20
lea ecx, [rdx + 0x8000]
shr ecx, 0x10
mov eax, ecx
shl eax, 0x10
sub eax, edx
mov edx, eax
sar rdx, cl
movsxd rax, r8d
add rdx, rax
movzx eax, word [rbp + rdx*2]
mov qword [rsp], rax
lea rax, [0x140000000]
movzx r8d, byte [r9 + rax + 0xf0888]
movzx edx, byte [rbx + rax + 0xf0938]
mov ecx, r8d
movzx eax, word [r13 + r10*8 - 2]
lea rbx, [0x140000000]
mov ebp, dword [rbx + rdx*4 + 0xf08b0]
lea r14d, [r8 + rdx]
and rbp, rax
movzx eax, word [r13 + r10*8 - 4]
shl rbp, cl
mov ecx, dword [rbx + r8*4 + 0xf08b0]
mov r8, rdi
and rcx, rax
mov rax, rsi
or rbp, rcx
cmp dword [rsp + 0x100], 0
je 0x140094120
mov r9d, 0x38
cmp r8d, r9d
cmovb r9d, r8d
sub r8d, r9d
mov ebx, r8d
je 0x1400940ee
mov ecx, r14d
lea rax, [0x140000000]
mov edx, dword [rax + r8*4 + 0xf08b0]
add r14d, r8d
mov eax, dword [r13 + r10*8 - 8]
and rdx, rax
shl rdx, cl
or rbp, rdx
mov ecx, r14d
shr rcx, 3
mov qword [rsi], rbp
lea rax, [rcx + rsi]
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
mov edx, dword [r13 + r10*8 - 8]
lea rcx, [0x140000000]
mov r8d, dword [rcx + r9*4 + 0xf08b0]
mov rcx, rbx
shr rdx, cl
lea rbx, [0x140000000]
and r8, rdx
mov ecx, r14d
shl r8, cl
or rbp, r8
add r14d, r9d
jmp 0x14009413b
mov ecx, dword [r13 + r10*8 - 8]
mov edx, dword [rbx + rdi*4 + 0xf08b0]
and rdx, rcx
mov ecx, r14d
shl rdx, cl
or rbp, rdx
add r14d, r8d
mov qword [rax], rbp
lea r13, [r10 - 2]
mov ecx, r14d
shr rcx, 3
add rax, rcx
cmp rax, r15
cmova rax, r15
shl cl, 3
shr rbp, cl
and r14d, 7
cmp r13, r10
jae 0x140094461
mov r9, qword [rsp + 0xc8]
lea rcx, [r11 + r13]
sub r12, r11
mov qword [rsp + 0x30], rcx
sub r9, r11
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xc8], r9
nop dword [rax]
movzx r9d, byte [rcx + r9]
movzx esi, byte [rcx]
movzx r8d, byte [rcx + r12]
mov r10, qword [rsp + 0x28]
mov r12d, r8d
movzx ecx, byte [r9 + rbx + 0xf0938]
movzx edx, byte [rsi + rbx + 0xf0888]
mov dword [rsp + 8], ecx
mov dword [rsp + 0xc], edx
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x68], r8
mov r8, qword [rdx + r8*8]
mov rcx, r8
shr rcx, 0x20
add rcx, r10
shr rcx, 0x10
mov edx, ecx
mov edi, dword [rbx + rdx*4 + 0xf08b0]
lea ebx, [r14 + rcx]
and rdi, r10
sar r10, cl
movsxd rcx, r8d
add r10, rcx
mov rcx, qword [rsp + 0x40]
movzx r10d, word [rcx + r10*2]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x28], r10
lea r10, [0x140000000]
mov r8, qword [rcx + r9*8]
mov r9, qword [rsp + 0x20]
mov rcx, r8
shr rcx, 0x20
add rcx, r9
shr rcx, 0x10
mov edx, ecx
lea r11d, [rbx + rcx]
mov r10d, dword [r10 + rdx*4 + 0xf08b0]
and r10, r9
sar r9, cl
movsxd rcx, r8d
add r9, rcx
mov rcx, qword [rsp + 0x50]
movzx r9d, word [rcx + r9*2]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x20], r9
mov r9, qword [rcx + rsi*8]
lea rcx, [0x140000000]
mov r8, r9
shr r8, 0x20
add r8, qword [rsp]
shr r8, 0x10
mov edx, r8d
mov esi, dword [rcx + rdx*4 + 0xf08b0]
mov ecx, r11d
mov rdx, qword [rsp]
and rsi, rdx
shl rsi, cl
mov ecx, r14d
shl rdi, cl
mov ecx, ebx
shl r10, cl
or rsi, rdi
mov ecx, r8d
or rsi, r10
sar rdx, cl
lea r10d, [r11 + r8]
mov r11d, dword [rsp + 8]
or rsi, rbp
mov r8d, dword [rsp + 0xc]
movsxd rcx, r9d
add rdx, rcx
mov rcx, qword [rsp + 0x60]
lea ebx, [r11 + r12]
add ebx, r8d
movzx edx, word [rcx + rdx*2]
mov qword [rsp], rdx
cmp ebx, 0x1f
jb 0x1400942ec
mov qword [rax], rsi
mov edx, r10d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
and r10d, 7
shl cl, 3
shr rsi, cl
mov rdi, qword [rsp + 0xf0]
lea r9d, [r10 + r8]
lea r14, [0x140000000]
movzx edx, r11b
mov r8d, dword [r14 + r8*4 + 0xf08b0]
mov ecx, r9d
mov ebp, dword [r14 + rdx*4 + 0xf08b0]
lea r14d, [r9 + r11]
movzx edx, word [rdi + r13*8 + 6]
and rbp, rdx
movzx edx, word [rdi + r13*8 + 4]
shl rbp, cl
and r8, rdx
mov ecx, r10d
shl r8, cl
or rbp, r8
or rbp, rsi
cmp ebx, 0x38
jbe 0x140094361
mov qword [rax], rbp
mov edx, r14d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
cmp dword [rsp + 0x100], 0
lea rbx, [0x140000000]
je 0x1400943eb
mov r9d, 0x38
cmp r12b, r9b
cmovb r9d, r12d
sub r12d, r9d
je 0x1400943c5
mov ecx, dword [rdi + r13*8]
mov edx, dword [rbx + r12*4 + 0xf08b0]
and rdx, rcx
mov r10d, r12d
mov ecx, r14d
add r14d, r12d
shl rdx, cl
or rbp, rdx
mov edx, r14d
shr rdx, 3
mov qword [rax], rbp
movzx ecx, dl
add rax, rdx
cmp rax, r15
cmova rax, r15
and r14d, 7
shl cl, 3
shr rbp, cl
jmp 0x1400943c8
xor r10d, r10d
mov edx, dword [rdi + r13*8]
mov rcx, r10
mov r8d, dword [rbx + r9*4 + 0xf08b0]
shr rdx, cl
mov ecx, r14d
and r8, rdx
shl r8, cl
or rbp, r8
add r14d, r9d
jmp 0x14009440a
mov rcx, qword [rsp + 0x68]
mov edx, dword [rbx + rcx*4 + 0xf08b0]
mov ecx, dword [rdi + r13*8]
and rdx, rcx
mov ecx, r14d
shl rdx, cl
or rbp, rdx
add r14d, r12d
mov r9, qword [rsp + 0xc8]
mov r12, qword [rsp + 0xd8]
mov qword [rax], rbp
mov edx, r14d
shr rdx, 3
add rax, rdx
movzx ecx, dl
cmp rax, r15
cmova rax, r15
shl cl, 3
shr rbp, cl
and r14d, 7
mov rcx, qword [rsp + 0x30]
dec r13
dec rcx
mov qword [rsp + 0x30], rcx
cmp r13, qword [rsp + 0xf8]
jb 0x140094190
mov rsi, qword [rsp + 0xb0]
mov edx, dword [rsp + 0x10]
mov ecx, r14d
mov r9d, dword [rsp + 0x14]
mov r13, qword [rsp + 0x78]
mov r12, qword [rsp + 0x80]
mov r10d, dword [rbx + rdx*4 + 0xf08b0]
lea r8d, [r14 + rdx]
and r10, qword [rsp + 0x20]
mov edx, dword [rbx + r9*4 + 0xf08b0]
mov r14, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x88]
shl r10, cl
or r10, rbp
mov ecx, r8d
mov rbp, qword [rsp + 0x90]
shr rcx, 3
mov qword [rax], r10
add rax, rcx
cmp rax, r15
cmova rax, r15
and rdx, qword [rsp + 0x28]
shl cl, 3
and r8d, 7
shr r10, cl
add r9d, r8d
mov ecx, r8d
mov r8d, dword [rsp + 0x18]
shl rdx, cl
or r10, rdx
mov ecx, r9d
shr rcx, 3
mov edx, dword [rbx + r8*4 + 0xf08b0]
mov rbx, qword [rsp + 0xc0]
mov qword [rax], r10
add rax, rcx
cmp rax, r15
cmova rax, r15
and rdx, qword [rsp]
shl cl, 3
and r9d, 7
shr r10, cl
mov ecx, r9d
shl rdx, cl
or r10, rdx
mov qword [rax], r10
lea edx, [r8 + r9]
mov ecx, edx
shr rcx, 3
add rax, rcx
cmp rax, r15
cmova rax, r15
shl cl, 3
shr r10, cl
and edx, 7
bts r10, rdx
inc edx
mov ecx, edx
shr rcx, 3
mov qword [rax], r10
add rax, rcx
cmp rax, r15
jae 0x140094569
test dl, 7
mov r11d, 0
seta r11b
sub r11, rsi
add rax, r11
jne 0x140094570
mov rax, 0xffffffffffffffba
add rsp, 0x98
pop r15
pop rsi
ret