Function at 0x180071730
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x40
mov r13, qword [rdx]
mov rbx, rcx
mov r14, qword [rdx + 0x10]
xor ebp, ebp
mov esi, dword [rdx + 0x18]
movzx ecx, byte [r13 + 5]
movzx eax, byte [r13 + 4]
mov r12d, ecx
movzx edi, byte [r13 + 0x11]
and r12d, 2
mov dword [rsp + 0x88], eax
mov eax, ecx
and ecx, 4
shl edi, 8
mov dword [rsp + 0x24], ecx
and eax, 1
movzx ecx, byte [r13 + 0xd]
shl rcx, 8
mov dword [rsp + 0x20], eax
movzx eax, byte [r13 + 0xc]
or rcx, rax
movzx eax, byte [r13 + 0xb]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 0xa]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 9]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 8]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 7]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 6]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 0x10]
or edi, eax
mov qword [rsp + 0x28], rcx
movzx eax, byte [r13 + 0xf]
movzx ecx, byte [r13 + 0x15]
shl ecx, 8
shl edi, 8
or edi, eax
movzx eax, byte [r13 + 0xe]
shl edi, 8
or edi, eax
movzx eax, byte [r13 + 0x14]
or ecx, eax
movzx eax, byte [r13 + 0x13]
shl ecx, 8
or ecx, eax
movzx eax, byte [r13 + 0x12]
shl ecx, 8
or ecx, eax
movzx eax, byte [r13 + 0x1a]
mov dword [rsp + 0x90], eax
mov dword [rsp + 0x98], ecx
test rbx, rbx
je 0x180071a8f
mov rcx, qword [rbx]
test rcx, rcx
je 0x180071a8f
movsxd rax, dword [rbx + 0x10]
mov qword [rsp + 0x38], r15
movsxd r15, dword [rbx + 0x34]
test eax, eax
je 0x180071868
sub dword [rbx + 0xc], eax
je 0x180071865
movsxd r8, dword [rbx + 0xc]
lea rdx, [rcx + rax]
call fcn.18008b7d0
mov dword [rbx + 0x10], ebp
test r15d, r15d
je 0x1800718ae
mov eax, dword [rbx + 0x2c]
sub eax, r15d
je 0x1800718a3
mov rcx, qword [rbx + 0x18]
movsxd r8, eax
shl r8, 2
lea rdx, [rcx + r15*4]
call fcn.18008b7d0
mov eax, dword [rbx + 0x2c]
mov rcx, qword [rbx + 0x20]
sub eax, r15d
movsxd r8, eax
shl r8, 3
lea rdx, [rcx + r15*8]
call fcn.18008b7d0
sub dword [rbx + 0x2c], r15d
sub dword [rbx + 0x30], r15d
mov dword [rbx + 0x34], ebp
cmp edi, dword [rbx + 0x160]
jne 0x1800719a1
cmp dword [rsp + 0x88], ebp
ja 0x1800719a1
mov edi, dword [rsp + 0x90]
mov rcx, rbx
lea edx, [rdi + 1]
call fcn.180071370
test eax, eax
jne 0x1800719a1
mov r11d, dword [rbx + 0x164]
mov r15d, dword [rsp + 0x98]
cmp r15d, r11d
je 0x180071942
movsxd r9, dword [rbx + 0x30]
mov r10d, dword [rbx + 0x2c]
cmp r9d, r10d
jge 0x180071926
mov rcx, qword [rbx + 0x18]
sub r10d, r9d
mov edx, dword [rbx + 0xc]
lea r8, [rcx + r9*4]
mov ecx, r10d
movzx eax, byte [r8]
lea r8, [r8 + 4]
sub edx, eax
mov dword [rbx + 0xc], edx
sub rcx, 1
jne 0x180071913
mov dword [rbx + 0x2c], r9d
cmp r11d, 0xffffffff
je 0x180071942
mov rax, qword [rbx + 0x18]
mov dword [rax + r9*4], 0x400
inc dword [rbx + 0x2c]
inc dword [rbx + 0x30]
cmp dword [rsp + 0x20], ebp
je 0x18007198f
mov eax, dword [rbx + 0x2c]
cmp eax, 1
jl 0x180071969
dec eax
movsxd rcx, eax
mov rax, qword [rbx + 0x18]
mov edx, dword [rax + rcx*4]
cmp dl, 0xff
jb 0x180071969
cmp edx, 0x400
jne 0x18007198f
xor r12d, r12d
xor ecx, ecx
test rdi, rdi
je 0x18007198f
movzx eax, byte [rcx + r13 + 0x1b]
inc ebp
add r14, rax
sub esi, eax
cmp eax, 0xff
jb 0x18007198f
inc rcx
cmp rcx, rdi
jl 0x180071973
test esi, esi
je 0x1800719cd
mov edx, esi
mov rcx, rbx
call fcn.1800712b0
test eax, eax
je 0x1800719b8
or eax, 0xffffffff
mov r15, qword [rsp + 0x38]
add rsp, 0x40
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
movsxd rcx, dword [rbx + 0xc]
mov rdx, r14
add rcx, qword [rbx]
movsxd r8, esi
call fcn.18008b7d0
add dword [rbx + 0xc], esi
or r9d, 0xffffffff
movsxd rdx, ebp
cmp rdx, rdi
jge 0x180071a56
nop dword [rax]
movsxd rcx, dword [rbx + 0x2c]
mov rax, qword [rbx + 0x18]
movzx r8d, byte [rdx + r13 + 0x1b]
mov dword [rax + rcx*4], r8d
movsxd rcx, dword [rbx + 0x2c]
mov rax, qword [rbx + 0x20]
mov qword [rax + rcx*8], 0xffffffffffffffff
test r12d, r12d
je 0x180071a19
movsxd rcx, dword [rbx + 0x2c]
mov rax, qword [rbx + 0x18]
or dword [rax + rcx*4], 0x100
xor r12d, r12d
cmp r8d, 0xff
jae 0x180071a26
mov r9d, dword [rbx + 0x2c]
inc dword [rbx + 0x2c]
inc rdx
mov eax, dword [rbx + 0x2c]
cmp r8d, 0xff
jae 0x180071a3b
mov dword [rbx + 0x30], eax
cmp rdx, rdi
jl 0x1800719e0
cmp r9d, 0xffffffff
je 0x180071a56
mov rax, qword [rbx + 0x20]
mov rdx, qword [rsp + 0x28]
movsxd rcx, r9d
mov qword [rax + rcx*8], rdx
cmp dword [rsp + 0x24], 0
je 0x180071a7e
mov eax, dword [rbx + 0x2c]
mov dword [rbx + 0x158], 1
test eax, eax
jle 0x180071a7e
dec eax
movsxd rcx, eax
mov rax, qword [rbx + 0x18]
or dword [rax + rcx*4], 0x200
lea eax, [r15 + 1]
mov dword [rbx + 0x164], eax
xor eax, eax
jmp 0x1800719a4
or eax, 0xffffffff
add rsp, 0x40
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret