Function at 0x18000e820
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
mov eax, 0x20
call fcn.180025560
sub rsp, rax
mov rax, qword [rdx + 0x10]
xor ebx, ebx
mov rsi, qword [rdx]
mov r14, rdx
mov edi, 0xffffffff
mov r9d, ebx
movsxd rbp, dword [rax + 0x14]
mov r10, qword [rax]
mov dword [rcx + 0x149c], ebx
mov dword [rcx + 0x14a0], 0x23d
test ebp, ebp
jle 0x18000d500
mov r8d, ebx
cmp word [rsi + r8*4], bx
je 0x18000d4ef
movsxd rdx, dword [rcx + 0x149c]
mov edi, r9d
lea eax, [rdx + 1]
mov dword [rcx + 0x149c], eax
mov dword [rcx + rdx*4 + 0xbac], r9d
mov byte [r8 + rcx + 0x14a4], bl
jmp 0x18000d4f5
mov word [rsi + r8*4 + 2], bx
inc r9d
inc r8
cmp r8, rbp
jl 0x18000d4c3
mov r8d, dword [rcx + 0x149c]
mov r15d, 1
cmp r8d, 2
jge 0x18000d56d
cmp edi, 2
lea eax, [r8 + 1]
mov dword [rcx + 0x149c], eax
lea edx, [rdi + 1]
movsxd rax, r8d
mov r9d, edx
cmovge edx, ebx
cmovge r9d, edi
mov dword [rcx + rax*4 + 0xbac], edx
movsxd rax, edx
mov word [rsi + rax*4], r15w
mov byte [rax + rcx + 0x14a4], bl
dec dword [rcx + 0x1700]
test r10, r10
je 0x18000d55d
movzx eax, word [r10 + rax*4 + 2]
sub dword [rcx + 0x1704], eax
mov r8d, dword [rcx + 0x149c]
mov edi, r9d
cmp r8d, 2
jl 0x18000d513
mov dword [r14 + 8], edi
mov eax, dword [rcx + 0x149c]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cmp eax, r15d
jl 0x18000d595
mov r8d, ebx
mov rdx, rsi
call fcn.18000dcf0
dec ebx
cmp ebx, r15d
jge 0x18000d583
movsxd r8, dword [rcx + 0x149c]
movsxd rbx, dword [rcx + 0xbac]
mov edx, dword [rcx + r8*4 + 0xba8]
lea eax, [r8 - 1]
mov dword [rcx + 0xbac], edx
mov r8d, r15d
mov rdx, rsi
mov dword [rcx + 0x149c], eax
call fcn.18000dcf0
movsxd rdx, dword [rcx + 0x14a0]
movsxd r8, dword [rcx + 0xbac]
mov r9, r8
movsxd r10, ebp
lea eax, [rdx - 1]
mov dword [rcx + 0x14a0], eax
mov dword [rcx + rdx*4 + 0xba4], ebx
movsxd rdx, dword [rcx + 0x14a0]
lea eax, [rdx - 1]
mov dword [rcx + 0x14a0], eax
mov dword [rcx + rdx*4 + 0xba4], r8d
mov rdx, rsi
movzx eax, word [rsi + rbx*4]
add ax, word [rsi + r8*4]
mov word [rsi + r10*4], ax
movzx r8d, byte [rbx + rcx + 0x14a4]
movzx eax, byte [r9 + rcx + 0x14a4]
cmp r8b, al
cmovb r8d, eax
inc r8b
mov byte [r10 + rcx + 0x14a4], r8b
mov r8d, r15d
mov word [rsi + r9*4 + 2], bp
mov word [rsi + rbx*4 + 2], bp
mov dword [rcx + 0xbac], ebp
inc ebp
call fcn.18000dcf0
cmp dword [rcx + 0x149c], 2
jge 0x18000d595
movsxd r8, dword [rcx + 0x14a0]
mov rdx, r14
lea eax, [r8 - 1]
mov dword [rcx + 0x14a0], eax
mov eax, dword [rcx + 0xbac]
mov dword [rcx + r8*4 + 0xba4], eax
call fcn.18000e620
lea r8, [rcx + 0xb88]
mov edx, edi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
jmp 0x18000e820
mov eax, 0x48
call fcn.180025560
sub rsp, rax
movzx eax, word [r8]
mov r10, rcx
movzx r9d, word [r8 + 2]
add eax, eax
movzx ecx, word [r8 + 6]
add r9d, eax
mov word [rsp + 0x22], ax
add r9d, r9d
movzx eax, word [r8 + 4]
add eax, r9d
mov word [rsp + 0x24], r9w
add eax, eax
movsxd r11, edx
add ecx, eax
mov word [rsp + 0x26], ax
movzx eax, word [r8 + 8]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x28], cx
movzx ecx, word [r8 + 0xa]
add eax, eax
add ecx, eax
mov word [rsp + 0x2a], ax
movzx eax, word [r8 + 0xc]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x2c], cx
movzx ecx, word [r8 + 0xe]
add eax, eax
add ecx, eax
mov word [rsp + 0x2e], ax
movzx eax, word [r8 + 0x10]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x30], cx
movzx ecx, word [r8 + 0x12]
add eax, eax
add ecx, eax
mov word [rsp + 0x32], ax
movzx eax, word [r8 + 0x14]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x34], cx
movzx ecx, word [r8 + 0x16]
add eax, eax
add ecx, eax
mov word [rsp + 0x36], ax
movzx eax, word [r8 + 0x18]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x38], cx
movzx ecx, word [r8 + 0x1a]
add eax, eax
add ecx, eax
mov word [rsp + 0x3a], ax
movzx eax, word [r8 + 0x1c]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x3c], cx
add eax, eax
mov word [rsp + 0x3e], ax
test edx, edx
js 0x18000e93b
xor r9d, r9d
movzx edx, word [r10 + r9*4 + 2]
test edx, edx
je 0x18000e933
movzx r8d, word [rsp + rdx*2 + 0x20]
mov ecx, r8d
lea eax, [r8 + 1]
mov word [rsp + rdx*2 + 0x20], ax
call fcn.18000e460
mov word [r10 + r9*4], ax
inc r9
cmp r9, r11
jle 0x18000e90d
add rsp, 0x48
ret