Function at 0x14014df50
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rax, qword [0x1403bfb80]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov r10, r9
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x50], rdx
mov rbx, r8
mov qword [rsp + 0x60], r9
xor edi, edi
mov r9, rdx
xor r15d, r15d
movzx eax, byte [r10 + 2]
xor r12d, r12d
movzx r11d, byte [r10 + 3]
xor r13d, r13d
movzx edx, byte [r10 + 7]
movzx ecx, byte [r10 + 0xb]
shl ecx, 8
shl edx, 8
shl r11d, 8
or r11d, eax
movzx eax, byte [r10 + 1]
shl r11d, 8
or r11d, eax
movzx eax, byte [r10]
shl r11d, 8
or r11d, eax
movzx eax, byte [r10 + 6]
or edx, eax
movzx eax, byte [r10 + 5]
shl edx, 8
or edx, eax
movzx eax, byte [r10 + 4]
shl edx, 8
or edx, eax
movzx eax, byte [r10 + 0xa]
or ecx, eax
movzx eax, byte [r10 + 9]
shl ecx, 8
or ecx, eax
movzx eax, byte [r10 + 8]
shl ecx, 8
or ecx, eax
mov eax, r11d
mov r8d, ecx
shr r11d, 0x1a
shr ecx, 0xe
and eax, 0x3ffffff
mov dword [rsp + 0x40], eax
mov eax, edx
shr edx, 0x14
shl eax, 6
or r11d, eax
shl r8d, 0xc
movzx eax, byte [r10 + 0xe]
or r8d, edx
movzx edx, byte [r10 + 0xc]
and r8d, 0x3ffc0ff
shl edx, 0x12
and r11d, 0x3ffff03
or edx, ecx
mov dword [rsp + 0x30], r11d
movzx ecx, byte [r10 + 0xf]
and edx, 0x3f03fff
shl ecx, 8
or ecx, eax
mov dword [rsp + 0x44], r8d
movzx eax, byte [r10 + 0xd]
xor r10d, r10d
shl ecx, 8
lea ebp, [rdx + rdx*4]
or ecx, eax
mov dword [rsp + 0x48], edx
and ecx, 0xfffff
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x4c], ecx
lea eax, [r8 + r8*4]
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x20], r10d
lea r14d, [rcx + rcx*4]
mov dword [rsp + 0x38], r14d
cmp rbx, 0x10
jb 0x14014e32c
movzx eax, byte [r9 + 2]
mov rcx, r9
movzx r8d, byte [r9 + 3]
add r9, 0x10
shl r8d, 8
sub rbx, 0x10
or r8d, eax
mov qword [rsp + 0x50], r9
shl r8d, 8
movzx eax, byte [r9 - 0xf]
movzx edx, byte [r9 - 9]
or r8d, eax
movzx eax, byte [rcx]
movzx ecx, byte [r9 - 5]
shl ecx, 8
shl edx, 8
shl r8d, 8
or r8d, eax
mov qword [rsp + 0x58], rbx
movzx eax, byte [r9 - 0xa]
or edx, eax
movzx eax, byte [r9 - 0xb]
shl edx, 8
or edx, eax
movzx eax, byte [r9 - 0xc]
shl edx, 8
or edx, eax
movzx eax, byte [r9 - 6]
or ecx, eax
movzx eax, byte [r9 - 7]
shl ecx, 8
or ecx, eax
movzx eax, byte [r9 - 8]
shl ecx, 8
or ecx, eax
mov eax, r8d
and eax, 0x3ffffff
shr r8d, 0x1a
add edi, eax
mov eax, edx
shl eax, 6
or eax, r8d
shr edx, 0x14
and eax, 0x3ffffff
add r15d, eax
mov eax, ecx
shl eax, 0xc
or eax, edx
shr ecx, 0xe
and eax, 0x3ffffff
add r12d, eax
movzx eax, byte [r9 - 4]
shl eax, 0x12
or eax, ecx
movzx ecx, byte [r9 - 1]
bts ecx, 8
add r13d, eax
movzx eax, byte [r9 - 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [r9 - 3]
shl ecx, 8
or ecx, eax
add r10d, ecx
mov edx, dword [rsp + 0x3c]
mov r9d, dword [rsp + 0x48]
mov ebx, r14d
mov r14d, r12d
mov r12d, dword [rsp + 0x40]
mov esi, r15d
mov eax, r12d
imul rax, rdi
mov r15d, r10d
mov r8d, ebp
mov ebp, r13d
lea r13d, [r11 + r11*4]
imul r13, r15
mov r10d, r11d
add r13, rax
mov r11d, dword [rsp + 0x44]
mov eax, edx
mov ecx, r10d
imul rax, rbp
imul rcx, rdi
add r13, rax
mov eax, r8d
imul rax, r14
add r13, rax
mov eax, ebx
imul rax, rsi
add r13, rax
mov eax, r15d
imul rax, rdx
add rcx, rax
mov eax, r12d
imul rax, rsi
add rcx, rax
mov eax, ebp
imul rax, r8
add rcx, rax
mov eax, r14d
imul rax, rbx
add rcx, rax
mov rax, r13
shr rax, 0x1a
add rcx, rax
mov eax, ecx
shr rcx, 0x1a
and eax, 0x3ffffff
mov ecx, ecx
mov dword [rsp + 0x24], eax
mov eax, r11d
imul rax, rdi
add rcx, rax
mov eax, r10d
imul rax, rsi
add rcx, rax
mov eax, r12d
imul rax, r14
add rcx, rax
mov eax, r15d
imul rax, r8
add rcx, rax
mov eax, ebp
imul rax, rbx
add rcx, rax
mov eax, ecx
shr rcx, 0x1a
and eax, 0x3ffffff
mov edx, ecx
mov dword [rsp + 0x28], eax
mov eax, r9d
imul rax, rdi
add rdx, rax
mov eax, r11d
imul rax, rsi
add rdx, rax
mov eax, r10d
imul rax, r14
add rdx, rax
mov eax, r12d
imul rax, rbp
add rdx, rax
mov eax, r15d
imul rax, rbx
mov ecx, dword [rsp + 0x4c]
add rdx, rax
mov rbx, qword [rsp + 0x58]
mov eax, edx
imul rcx, rdi
imul r10, rbp
imul r12, r15
imul r9, rsi
imul r11, r14
mov ebp, dword [rsp + 0x34]
and eax, 0x3ffffff
mov r15d, dword [rsp + 0x24]
and r13d, 0x3ffffff
mov r14d, dword [rsp + 0x38]
shr rdx, 0x1a
mov dword [rsp + 0x2c], eax
mov eax, edx
add rcx, rax
add rcx, r9
mov r9, qword [rsp + 0x50]
add rcx, r10
add rcx, r11
add rcx, r12
mov r12d, dword [rsp + 0x28]
mov r10d, ecx
shr rcx, 0x1a
and r10d, 0x3ffffff
mov dword [rsp + 0x20], r10d
lea edi, [rcx + rcx*4]
add edi, r13d
mov r13d, dword [rsp + 0x2c]
cmp rbx, 0x10
jae 0x14014e468
test rbx, rbx
je 0x14014e472
xor eax, eax
test rbx, rbx
je 0x14014e34f
mov r8, rbx
lea rcx, [rsp + 0x70]
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov rax, rbx
mov byte [rsp + rax + 0x70], 1
inc rax
cmp rax, 0x10
jae 0x14014e36e
nop dword [rax]
mov byte [rsp + rax + 0x70], 0
inc rax
cmp rax, 0x10
jb 0x14014e360
movzx eax, byte [rsp + 0x72]
movzx r9d, byte [rsp + 0x73]
movzx r8d, byte [rsp + 0x77]
movzx edx, byte [rsp + 0x7b]
movzx ecx, byte [rsp + 0x7f]
mov r10d, dword [rsp + 0x20]
mov r11d, dword [rsp + 0x30]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [rsp + 0x71]
shl edx, 8
shl ecx, 8
shl r9d, 8
or r9d, eax
mov qword [rsp + 0x58], 0
movzx eax, byte [rsp + 0x70]
shl r9d, 8
or r9d, eax
movzx eax, byte [rsp + 0x76]
or r8d, eax
movzx eax, byte [rsp + 0x75]
shl r8d, 8
or r8d, eax
movzx eax, byte [rsp + 0x74]
shl r8d, 8
or r8d, eax
movzx eax, byte [rsp + 0x7a]
or edx, eax
movzx eax, byte [rsp + 0x79]
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x78]
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x7e]
or ecx, eax
movzx eax, byte [rsp + 0x7d]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x7c]
shl ecx, 8
or ecx, eax
mov eax, r9d
and eax, 0x3ffffff
shr r9d, 0x1a
add edi, eax
mov eax, r8d
shl eax, 6
or eax, r9d
shr r8d, 0x14
and eax, 0x3ffffff
add r15d, eax
mov eax, edx
shl eax, 0xc
or eax, r8d
shr edx, 0xe
and eax, 0x3ffffff
add r12d, eax
mov eax, ecx
shl eax, 0x12
or eax, edx
and eax, 0x3ffffff
add r13d, eax
shr ecx, 8
jmp 0x14014e192
mov r11d, dword [rsp + 0x30]
jmp 0x14014e0b3
mov eax, edi
and edi, 0x3ffffff
shr eax, 0x1a
add r15d, eax
mov eax, r15d
and r15d, 0x3ffffff
shr eax, 0x1a
add r12d, eax
mov eax, r12d
and r12d, 0x3ffffff
shr eax, 0x1a
add r13d, eax
mov eax, r13d
and r13d, 0x3ffffff
shr eax, 0x1a
add r10d, eax
mov eax, r10d
and r10d, 0x3ffffff
shr eax, 0x1a
mov dword [rsp + 0x20], r10d
lea eax, [rax + rax*4]
add edi, eax
mov eax, edi
shr edi, 0x1a
and eax, 0x3ffffff
add r15d, edi
mov r8d, eax
lea r9d, [rax + 5]
mov r11d, r9d
shr r11d, 0x1a
add r11d, r15d
mov ecx, r11d
shr ecx, 0x1a
add ecx, r12d
mov edx, ecx
shr edx, 0x1a
add edx, r13d
mov r14d, edx
shr r14d, 0x1a
add r14d, 0xfc000000
add r14d, r10d
mov ebp, r14d
shr ebp, 0x1f
dec ebp
and ecx, ebp
and r9, rbp
and ecx, 0x3ffffff
and r11d, ebp
and r9d, 0x3ffffff
mov eax, ebp
not eax
and r11d, 0x3ffffff
mov esi, eax
and edx, ebp
and eax, r15d
and edx, 0x3ffffff
mov r15, qword [rsp + 0x60]
or r11d, eax
mov r10d, esi
mov ebx, esi
and r10d, r12d
and ebx, r13d
or r10d, ecx
or ebx, edx
movzx eax, byte [r15 + 0x12]
mov ecx, r11d
movzx edi, byte [r15 + 0x13]
shl rdi, 8
or rdi, rax
shl ecx, 0x1a
movzx eax, byte [r15 + 0x11]
shl rdi, 8
or rdi, rax
movzx eax, byte [r15 + 0x10]
shl rdi, 8
or rdi, rax
mov eax, esi
and rax, r8
or r9, rax
or r9, rcx
add rdi, r9
movzx eax, byte [r15 + 0x16]
and r14d, ebp
movzx r9d, byte [r15 + 0x17]
mov ecx, r10d
movzx r8d, byte [r15 + 0x1b]
movzx edx, byte [r15 + 0x1f]
and esi, dword [rsp + 0x20]
shl r9, 8
or r14d, esi
or r9, rax
shl ecx, 0x14
movzx eax, byte [r15 + 0x15]
shl r8, 8
shl r9, 8
or r9, rax
shl rdx, 8
movzx eax, byte [r15 + 0x14]
shl r9, 8
or r9, rax
shl r14d, 8
mov eax, r11d
shr rax, 6
or rcx, rax
movzx eax, byte [r15 + 0x1a]
or r8, rax
add r9, rcx
movzx eax, byte [r15 + 0x19]
mov ecx, ebx
shl r8, 8
or r8, rax
shl ecx, 0xe
movzx eax, byte [r15 + 0x18]
shl r8, 8
or r8, rax
mov eax, r10d
shr rax, 0xc
or rcx, rax
movzx eax, byte [r15 + 0x1e]
or rdx, rax
add r8, rcx
movzx eax, byte [r15 + 0x1d]
shl rdx, 8
or rdx, rax
mov ecx, r14d
movzx eax, byte [r15 + 0x1c]
shl rdx, 8
or rdx, rax
mov eax, ebx
shr rax, 0x12
or rcx, rax
mov rax, rdi
shr rax, 8
add rdx, rcx
mov rcx, qword [rsp + 0x68]
mov byte [rcx + 1], al
mov rax, rdi
shr rax, 0x10
mov byte [rcx + 2], al
mov rax, rdi
shr rax, 0x18
mov byte [rcx + 3], al
mov byte [rcx], dil
shr rdi, 0x20
add r9, rdi
mov rax, r9
mov byte [rcx + 4], r9b
shr rax, 8
mov byte [rcx + 5], al
mov rax, r9
shr rax, 0x10
mov byte [rcx + 6], al
mov rax, r9
shr rax, 0x18
mov byte [rcx + 7], al
shr r9, 0x20
add r8, r9
mov rax, r8
mov byte [rcx + 8], r8b
shr rax, 8
mov byte [rcx + 9], al
mov rax, r8
shr rax, 0x10
mov byte [rcx + 0xa], al
mov rax, r8
shr rax, 0x18
mov byte [rcx + 0xb], al
shr r8, 0x20
add rdx, r8
mov rax, rdx
mov byte [rcx + 0xc], dl
shr rax, 8
mov byte [rcx + 0xd], al
mov rax, rdx
shr rax, 0x10
shr rdx, 0x18
mov byte [rcx + 0xf], dl
mov byte [rcx + 0xe], al
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.1402d88b0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret