Function at 0x180041120
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
sub rsp, 0x18
mov rax, qword [rcx + 0x18]
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x10], r12
mov r12d, 0x10b
mov qword [rsp + 8], r14
mov r14d, dword [rax + 0x3c]
mov qword [rsp], r15
mov r15d, 0x5a4d
test rax, rax
je 0x180041277
cmp word [rax], r15w
jne 0x180041277
mov rax, qword [rcx + 0x30]
test rax, rax
je 0x180041277
cmp dword [rax], 0x4550
jne 0x180041277
cmp word [rax + 0x18], r12w
jne 0x180041277
xor r11d, r11d
mov qword [rsp + 0x28], rbp
mov dword [rax + 0xd0], r11d
mov rax, qword [rcx + 0x30]
mov dword [rax + 0xd4], r11d
mov rax, qword [rcx + 0x30]
mov r8d, dword [rax + 0x74]
cmp r8d, 0x10
jae 0x1800411f0
mov eax, 0x10
lea rdx, [r8*8]
sub eax, r8d
mov r8d, eax
nop word [rax + rax]
mov rax, qword [rcx + 0x30]
lea rdx, [rdx + 8]
mov dword [rax + rdx + 0x74], r11d
mov rax, qword [rcx + 0x30]
mov dword [rax + rdx + 0x70], r11d
sub r8, 1
jne 0x1800411d0
mov rax, qword [rcx + 0x30]
mov dword [rax + 0x74], 0x10
mov edx, 0xe0
mov rax, qword [rcx + 0x30]
mov r10d, r11d
mov ebx, r11d
mov word [rax + 0x14], dx
mov rbp, qword [rcx + 0x30]
movzx edx, word [rbp + 6]
cmp r11w, dx
jae 0x180041249
mov rdi, qword [rcx + 0x40]
mov esi, edx
add rdi, 8
mov r9d, dword [rdi + 4]
lea edx, [rbx + r10]
mov eax, dword [rdi]
lea rdi, [rdi + 0x38]
lea r8d, [r9 + rax]
cmp r8d, edx
cmovbe eax, ebx
cmovbe r9d, r10d
mov ebx, eax
mov r10d, r9d
sub rsi, 1
jne 0x180041222
lea eax, [rbx + r10]
mov dword [rbp + 0x50], eax
mov rdx, qword [rcx + 8]
mov rbp, qword [rsp + 0x28]
test rdx, rdx
je 0x180041265
mov rax, qword [rcx + 0x30]
mov dword [rax + 0x34], edx
mov r10, qword [rcx + 0x30]
movzx eax, word [r10 + 6]
lea r8d, [rax + rax*4]
jmp 0x180041373
mov rax, qword [rcx + 0x38]
xor r11d, r11d
mov dword [rax + 0xe0], r11d
mov rax, qword [rcx + 0x38]
mov dword [rax + 0xe4], r11d
mov rax, qword [rcx + 0x38]
mov r8d, dword [rax + 0x84]
cmp r8d, 0x10
jae 0x1800412e6
mov eax, 0x10
lea rdx, [r8*8]
sub eax, r8d
mov r8d, eax
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rcx + 0x38]
lea rdx, [rdx + 8]
mov dword [rdx + rax + 0x84], r11d
mov rax, qword [rcx + 0x38]
mov dword [rdx + rax + 0x80], r11d
sub r8, 1
jne 0x1800412c0
mov rax, qword [rcx + 0x38]
mov dword [rax + 0x84], 0x10
mov edx, 0xf0
mov rax, qword [rcx + 0x38]
mov r10d, r11d
mov ebx, r11d
mov word [rax + 0x14], dx
mov rax, qword [rcx + 0x30]
movzx edx, word [rax + 6]
cmp r11w, dx
jae 0x180041347
mov rdi, qword [rcx + 0x40]
mov esi, edx
add rdi, 8
nop dword [rax + rax]
mov r9d, dword [rdi + 4]
lea edx, [rbx + r10]
mov eax, dword [rdi]
lea rdi, [rdi + 0x38]
lea r8d, [r9 + rax]
cmp r8d, edx
cmovbe eax, ebx
cmovbe r9d, r10d
mov ebx, eax
mov r10d, r9d
sub rsi, 1
jne 0x180041320
mov rax, qword [rcx + 0x38]
lea edx, [rbx + r10]
mov dword [rax + 0x50], edx
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x180041363
mov rax, qword [rcx + 0x38]
mov qword [rax + 0x30], rdx
mov rax, qword [rcx + 0x30]
mov r10, qword [rcx + 0x38]
movzx edx, word [rax + 6]
lea r8d, [rdx + rdx*4]
movzx edx, word [r10 + 0x14]
add edx, dword [r10 + 0x3c]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x20]
lea eax, [rdx + r8*8]
xor edx, edx
lea r8d, [r14 + 0x17]
mov r14, qword [rsp + 8]
add r8d, eax
mov eax, r8d
div dword [r10 + 0x3c]
sub r8d, edx
mov dword [r10 + 0x54], r8d
mov rax, qword [rcx + 0x18]
test rax, rax
je 0x1800413ed
cmp word [rax], r15w
jne 0x1800413ed
mov rax, qword [rcx + 0x30]
test rax, rax
je 0x1800413ed
cmp dword [rax], 0x4550
jne 0x1800413ed
cmp word [rax + 0x18], r12w
jne 0x1800413ed
mov r9d, dword [rax + 0xd8]
mov dword [rax + 0xd8], r11d
mov rax, qword [rcx + 0x30]
mov dword [rax + 0xdc], r11d
jmp 0x18004140a
mov rax, qword [rcx + 0x38]
mov r9d, dword [rax + 0xe8]
mov dword [rax + 0xe8], r11d
mov rax, qword [rcx + 0x38]
mov dword [rax + 0xec], r11d
mov r15, qword [rsp]
mov r12, qword [rsp + 0x10]
test r9d, r9d
je 0x180041465
mov rax, qword [rcx + 0x30]
cmp r11w, word [rax + 6]
jae 0x180041465
nop dword [rax]
nop word [rax + rax]
movzx eax, r11w
imul r8, rax, 0x38
add r8, qword [rcx + 0x40]
mov edx, dword [r8 + 0xc]
cmp edx, r9d
ja 0x180041456
add edx, dword [r8 + 8]
cmp edx, r9d
jbe 0x180041456
or dword [r8 + 0x24], 0xc0000000
mov rax, qword [rcx + 0x30]
inc r11w
cmp r11w, word [rax + 6]
jb 0x180041430
add rsp, 0x18
ret