Function at 0x1800eb780
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
mov rdi, qword [r8 + 0x10]
mov rsi, rcx
mov r11, qword [r8 + 8]
mov r10, qword [r8]
mov rbx, r11
mov rcx, qword [rdx + 0x138]
sub rbx, rdi
mov rax, qword [rdx + 0x100]
add r10, rdi
mov r12, qword [rdx + 0xb68]
sub rax, rcx
mov rbp, qword [rdx + 0xb60]
cmp rbx, rax
cmovae rbx, rax
xor r9d, r9d
mov qword [rsi], rbx
mov dword [rsi + 8], r9d
cmp dword [rdx + 0x84], r9d
je 0x1800ebe86
sub r11, rdi
mov r8d, 0x20000
add r11, rcx
cmp r11, r8
jb 0x1800ebe86
lea rax, [rcx + rbx]
cmp rax, 0x20
jb 0x1800ebe86
cmp rcx, r8
jae 0x1800ebb6d
sub r8, rcx
cmp r8, 0x20
jb 0x1800ebade
movabs rax, 0x5a55d28818fb7e49
lea rdi, [r10 - 0x20]
add rdi, r8
movabs rcx, 0x3947cd243bbd1189
movabs r11, 0xcf1bbcdcb7a56463
movzx edx, byte [rdi + 0x1d]
imul rdx, rax
movzx eax, byte [rdi + 0xd]
imul rax, rcx
movabs rcx, 0x43b79ab519a31d71
add rdx, rax
movzx eax, byte [rdi + 0x13]
imul rax, rcx
movabs rcx, 0x7fcf2185b0f83493
add rdx, rax
movzx eax, byte [rdi + 0xa]
imul rax, rcx
movabs rcx, 0x1e3078e4d1b5e129
add rdx, rax
movzx eax, byte [rdi + 5]
imul rax, rcx
movabs rcx, 0x65fefc5042ef8999
add rdx, rax
movzx eax, byte [rdi + 0x19]
imul rax, rcx
movabs rcx, 0xf292987e7aa35a3b
add rdx, rax
movzx eax, byte [rdi + 0x1c]
imul rax, rcx
movabs rcx, 0x44cb03fb0dcc0339
add rdx, rax
movzx eax, byte [rdi + 0x11]
imul rax, rcx
movabs rcx, 0x5453b56d29ff8043
add rdx, rax
movzx eax, byte [rdi + 0x16]
imul rax, rcx
movabs rcx, 0xc729e331e71c823
add rdx, rax
movzx eax, byte [rdi + 0xe]
imul rax, rcx
movabs rcx, 0xc032d9789348cbe1
add rdx, rax
movzx eax, byte [rdi + 7]
imul rax, rcx
movabs rcx, 0x3b4602aeece262b1
add rdx, rax
movzx eax, byte [rdi + 3]
imul rax, rcx
movabs rcx, 0xc53ed2fdd9a5f941
add rdx, rax
movzx eax, byte [rdi + 0xf]
imul rax, rcx
movabs rcx, 0x8cc0a0645ed6c4d3
add rdx, rax
movzx eax, byte [rdi + 0x1a]
imul rax, rcx
movabs rcx, 0x65e5acc02d2e4e73
add rdx, rax
movzx eax, byte [rdi + 2]
imul rax, rcx
movabs rcx, 0x5950104e9171f0d1
add rdx, rax
movzx eax, byte [rdi + 0x1b]
imul rax, rcx
movabs rcx, 0xc956ebd293b716db
add rdx, rax
movzx eax, byte [rdi + 4]
imul rax, rcx
movabs rcx, 0xb70f741d9e4830b
add rdx, rax
movzx eax, byte [rdi + 0x10]
imul rax, rcx
movabs rcx, 0xb4c8e86b82fefa2b
add rdx, rax
movzx eax, byte [rdi + 0x18]
imul rax, rcx
add rdx, rax
movzx eax, byte [rdi + 0x1e]
imul rax, r11
add rdx, rax
movzx eax, byte [rdi + 0x15]
movabs rcx, 0xb573f1909c17c5e9
imul rax, rcx
movabs rcx, 0x5e2538920de6e11
add rdx, rax
movzx eax, byte [rdi + 0xb]
imul rax, rcx
movabs rcx, 0x6cb24df3d0a8aa1
add rdx, rax
movzx eax, byte [rdi + 0x17]
imul rax, rcx
movabs rcx, 0x4748cfb75c44c0d9
add rdx, rax
movzx eax, byte [rdi + 9]
imul rax, rcx
movabs rcx, 0x6854b1edc4ad8d1b
add rdx, rax
movzx eax, byte [rdi + 0x14]
imul rax, rcx
movabs rcx, 0xeffef7b854ac4279
add rdx, rax
movzx eax, byte [rdi + 1]
imul rax, rcx
movabs rcx, 0x21c3d27a31444bfb
add rdx, rax
movzx eax, byte [rdi + 0xc]
imul rax, rcx
movabs rcx, 0x4a09c2ea3cfbc03
add rdx, rax
movzx eax, byte [rdi + 6]
imul rax, rcx
movabs rcx, 0x8d07a89af4c857eb
add rdx, rax
movzx eax, byte [rdi + 8]
imul rax, rcx
movabs rcx, 0x6033fb56626986b3
add rdx, rax
movzx eax, byte [rdi + 0x12]
imul rax, rcx
movabs rcx, 0xf5507fe35f91f8cb
add rdx, rax
movzx eax, byte [rdi]
imul rax, rcx
movzx ecx, byte [rdi + 0x1f]
add rdx, rax
movabs rax, 0xa307f7f73e7cb480
add rax, rdx
add rax, rcx
cmp r8, rbx
jae 0x1800ebe86
cmp r8, 0x20
jae 0x1800ebe2d
movzx ecx, byte [rdi + r8]
lea rdx, [r10 + r8]
jmp 0x1800ebe37
mov rdi, qword [rdx + 0x128]
mov rax, r9
mov qword [rsp + 0x20], r14
add rdi, 0xffffffffffffffe0
add rdi, rcx
mov qword [rsp + 0x28], r15
mov r14d, 0x20
movabs r11, 0xcf1bbcdcb7a56463
mov rdx, r9
lea r15, [rdi + r8]
sub r14, r8
je 0x1800ebb38
nop word [rax + rax]
movzx ecx, byte [r15 + rdx]
inc rdx
imul rax, r11
add rax, 0xa
add rax, rcx
cmp rdx, r14
jb 0x1800ebb20
mov r15, qword [rsp + 0x28]
mov r14, qword [rsp + 0x20]
test r8, r8
je 0x1800ebabd
nop dword [rax + rax]
movzx ecx, byte [r10 + r9]
inc r9
imul rax, r11
add rax, 0xa
add rax, rcx
cmp r9, r8
jb 0x1800ebb50
jmp 0x1800ebabd
mov rdi, qword [rdx + 0x128]
add rcx, 0xffffffffffffffe0
add rdi, rcx
movabs rax, 0x5a55d28818fb7e49
movabs rcx, 0x3947cd243bbd1189
mov r8, r9
movabs r11, 0xcf1bbcdcb7a56463
movzx edx, byte [rdi + 0x1d]
imul rdx, rax
movzx eax, byte [rdi + 0xd]
imul rax, rcx
movabs rcx, 0x43b79ab519a31d71
add rdx, rax
movzx eax, byte [rdi + 0x13]
imul rax, rcx
movabs rcx, 0x7fcf2185b0f83493
add rdx, rax
movzx eax, byte [rdi + 0xa]
imul rax, rcx
movabs rcx, 0x1e3078e4d1b5e129
add rdx, rax
movzx eax, byte [rdi + 5]
imul rax, rcx
movabs rcx, 0x65fefc5042ef8999
add rdx, rax
movzx eax, byte [rdi + 0x19]
imul rax, rcx
movabs rcx, 0xf292987e7aa35a3b
add rdx, rax
movzx eax, byte [rdi + 0x1c]
imul rax, rcx
movabs rcx, 0x44cb03fb0dcc0339
add rdx, rax
movzx eax, byte [rdi + 0x11]
imul rax, rcx
movabs rcx, 0x5453b56d29ff8043
add rdx, rax
movzx eax, byte [rdi + 0x16]
imul rax, rcx
movabs rcx, 0xc729e331e71c823
add rdx, rax
movzx eax, byte [rdi + 0xe]
imul rax, rcx
movabs rcx, 0xc032d9789348cbe1
add rdx, rax
movzx eax, byte [rdi + 7]
imul rax, rcx
movabs rcx, 0x3b4602aeece262b1
add rdx, rax
movzx eax, byte [rdi + 3]
imul rax, rcx
movabs rcx, 0xc53ed2fdd9a5f941
add rdx, rax
movzx eax, byte [rdi + 0xf]
imul rax, rcx
movabs rcx, 0x8cc0a0645ed6c4d3
add rdx, rax
movzx eax, byte [rdi + 0x1a]
imul rax, rcx
movabs rcx, 0x65e5acc02d2e4e73
add rdx, rax
movzx eax, byte [rdi + 2]
imul rax, rcx
movabs rcx, 0x5950104e9171f0d1
add rdx, rax
movzx eax, byte [rdi + 0x1b]
imul rax, rcx
movabs rcx, 0xc956ebd293b716db
add rdx, rax
movzx eax, byte [rdi + 4]
imul rax, rcx
movabs rcx, 0xb70f741d9e4830b
add rdx, rax
movzx eax, byte [rdi + 0x10]
imul rax, rcx
movabs rcx, 0xb4c8e86b82fefa2b
add rdx, rax
movzx eax, byte [rdi + 0x18]
imul rax, rcx
add rdx, rax
movzx eax, byte [rdi + 0x1e]
imul rax, r11
movabs rcx, 0xb573f1909c17c5e9
add rdx, rax
movzx eax, byte [rdi + 0x15]
imul rax, rcx
movabs rcx, 0x5e2538920de6e11
add rdx, rax
movzx eax, byte [rdi + 0xb]
imul rax, rcx
movabs rcx, 0x6cb24df3d0a8aa1
add rdx, rax
movzx eax, byte [rdi + 0x17]
imul rax, rcx
movabs rcx, 0x4748cfb75c44c0d9
add rdx, rax
movzx eax, byte [rdi + 9]
imul rax, rcx
movabs rcx, 0x6854b1edc4ad8d1b
add rdx, rax
movzx eax, byte [rdi + 0x14]
imul rax, rcx
movabs rcx, 0xeffef7b854ac4279
add rdx, rax
movzx eax, byte [rdi + 1]
imul rax, rcx
movabs rcx, 0x21c3d27a31444bfb
add rdx, rax
movzx eax, byte [rdi + 0xc]
imul rax, rcx
movabs rcx, 0x4a09c2ea3cfbc03
add rdx, rax
movzx eax, byte [rdi + 6]
imul rax, rcx
movabs rcx, 0x8d07a89af4c857eb
add rdx, rax
movzx eax, byte [rdi + 8]
imul rax, rcx
movabs rcx, 0x6033fb56626986b3
add rdx, rax
movzx eax, byte [rdi + 0x12]
imul rax, rcx
movabs rcx, 0xf5507fe35f91f8cb
add rdx, rax
movzx eax, byte [rdi]
imul rax, rcx
movzx ecx, byte [rdi + 0x1f]
add rdx, rax
movabs rax, 0xa307f7f73e7cb480
add rax, rdx
add rax, rcx
mov rcx, rax
and rcx, rbp
cmp rcx, rbp
jne 0x1800ebabd
mov qword [rsi], r9
jmp 0x1800ebe7f
movzx ecx, byte [r8 + r10 - 0x20]
lea rdx, [r8 + r10]
movzx ecx, cl
add rcx, 0xa
imul rcx, r12
sub rax, rcx
movzx ecx, byte [rdx]
add rcx, 0xa
imul rax, r11
add rax, rcx
mov rcx, rax
inc r8
and rcx, rbp
cmp rcx, rbp
je 0x1800ebe7c
cmp r8, rbx
jb 0x1800ebac6
mov rax, rsi
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
pop r12
pop rdi
pop rsi
ret
mov qword [rsi], r8
mov dword [rsi + 8], 1
mov rbx, qword [rsp + 0x30]
mov rax, rsi
mov rbp, qword [rsp + 0x38]
pop r12
pop rdi
pop rsi
ret