Function at 0x18010d5c0
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
mov r13, qword [rdx]
mov rbx, rcx
mov r14, qword [rdx + 0x10]
xor ebp, ebp
mov esi, dword [rdx + 0x18]
movzx ecx, byte [r13 + 5]
movzx eax, byte [r13 + 4]
mov r12d, ecx
movzx edi, byte [r13 + 0x11]
and r12d, 2
mov byte [rsp + 0x80], al
mov eax, ecx
and ecx, 4
shl edi, 8
mov dword [rsp + 0x24], ecx
and eax, 1
movzx ecx, byte [r13 + 0xd]
shl rcx, 8
mov dword [rsp + 0x20], eax
movzx eax, byte [r13 + 0xc]
or rcx, rax
movzx eax, byte [r13 + 0xb]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 0xa]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 9]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 8]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 7]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 6]
shl rcx, 8
or rcx, rax
movzx eax, byte [r13 + 0x10]
or edi, eax
mov qword [rsp + 0x28], rcx
movzx eax, byte [r13 + 0xf]
movzx ecx, byte [r13 + 0x15]
shl ecx, 8
shl edi, 8
or edi, eax
movzx eax, byte [r13 + 0xe]
shl edi, 8
or edi, eax
movzx eax, byte [r13 + 0x14]
or ecx, eax
movzx eax, byte [r13 + 0x13]
shl ecx, 8
or ecx, eax
movzx eax, byte [r13 + 0x12]
shl ecx, 8
or ecx, eax
movzx eax, byte [r13 + 0x1a]
mov dword [rsp + 0x90], eax
mov dword [rsp + 0x98], ecx
test rbx, rbx
je 0x18010d919
mov rcx, qword [rbx]
test rcx, rcx
je 0x18010d919
movsxd rdx, dword [rbx + 0x10]
movsxd r15, dword [rbx + 0x34]
test edx, edx
je 0x18010d6f8
mov eax, dword [rbx + 0xc]
sub eax, edx
mov dword [rbx + 0xc], eax
je 0x18010d6f5
movsxd r8, eax
add rdx, rcx
call sub.VCRUNTIME140.dll_memmove
mov dword [rbx + 0x10], ebp
test r15d, r15d
je 0x18010d73e
mov eax, dword [rbx + 0x2c]
sub eax, r15d
je 0x18010d733
mov rcx, qword [rbx + 0x18]
movsxd r8, eax
shl r8, 2
lea rdx, [rcx + r15*4]
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [rbx + 0x2c]
mov rcx, qword [rbx + 0x20]
sub eax, r15d
movsxd r8, eax
shl r8, 3
lea rdx, [rcx + r15*8]
call sub.VCRUNTIME140.dll_memmove
sub dword [rbx + 0x2c], r15d
sub dword [rbx + 0x30], r15d
mov dword [rbx + 0x34], ebp
cmp edi, dword [rbx + 0x160]
jne 0x18010d919
cmp byte [rsp + 0x80], bpl
ja 0x18010d919
movsxd rdi, dword [rsp + 0x90]
mov rcx, rbx
lea edx, [rdi + 1]
call fcn.1800d22b0
test eax, eax
jne 0x18010d919
mov r15d, dword [rsp + 0x98]
cmp r15d, dword [rbx + 0x164]
je 0x18010d7d9
movsxd r10, dword [rbx + 0x30]
mov r9d, dword [rbx + 0x2c]
cmp r10d, r9d
jge 0x18010d7b5
mov rax, qword [rbx + 0x18]
sub r9d, r10d
mov edx, dword [rbx + 0xc]
mov ecx, r9d
lea r8, [rax + r10*4]
movzx eax, byte [r8]
lea r8, [r8 + 4]
sub edx, eax
mov dword [rbx + 0xc], edx
sub rcx, 1
jne 0x18010d7a2
cmp dword [rbx + 0x164], 0xffffffff
movsxd rax, dword [rbx + 0x30]
mov dword [rbx + 0x2c], eax
je 0x18010d7d9
mov rcx, rax
mov rax, qword [rbx + 0x18]
mov dword [rax + rcx*4], 0x400
inc dword [rbx + 0x2c]
inc dword [rbx + 0x30]
cmp dword [rsp + 0x20], ebp
je 0x18010d82d
movsxd rax, dword [rbx + 0x2c]
cmp eax, 1
jl 0x18010d800
mov rcx, rax
mov rax, qword [rbx + 0x18]
mov edx, dword [rax + rcx*4 - 4]
cmp dl, 0xff
jb 0x18010d800
cmp edx, 0x400
jne 0x18010d82d
xor r12d, r12d
test rdi, rdi
je 0x18010d82d
xor edx, edx
nop word [rax + rax]
movzx ecx, byte [rdx + r13 + 0x1b]
add r14, rcx
sub esi, ecx
inc ebp
cmp ecx, 0xff
jb 0x18010d82d
inc rdx
cmp rdx, rdi
jl 0x18010d810
test esi, esi
je 0x18010d858
mov edx, esi
mov rcx, rbx
call fcn.1800d2200
test eax, eax
jne 0x18010d919
movsxd rcx, dword [rbx + 0xc]
mov rdx, r14
add rcx, qword [rbx]
movsxd r8, esi
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0xc], esi
movsxd rdx, ebp
mov r9d, 0xffffffff
cmp rdx, rdi
jge 0x18010d8e3
nop word [rax + rax]
movsxd rcx, dword [rbx + 0x2c]
mov rax, qword [rbx + 0x18]
movzx r8d, byte [rdx + r13 + 0x1b]
mov dword [rax + rcx*4], r8d
movsxd rcx, dword [rbx + 0x2c]
mov rax, qword [rbx + 0x20]
mov qword [rax + rcx*8], 0xffffffffffffffff
test r12d, r12d
je 0x18010d8a9
movsxd rcx, dword [rbx + 0x2c]
mov rax, qword [rbx + 0x18]
or dword [rax + rcx*4], 0x100
xor r12d, r12d
cmp r8b, 0xff
jae 0x18010d8c2
mov r9d, dword [rbx + 0x2c]
inc rdx
lea eax, [r9 + 1]
mov dword [rbx + 0x2c], eax
mov dword [rbx + 0x30], eax
jmp 0x18010d8c8
inc dword [rbx + 0x2c]
inc rdx
cmp rdx, rdi
jl 0x18010d870
cmp r9d, 0xffffffff
je 0x18010d8e3
mov rax, qword [rbx + 0x20]
mov rdx, qword [rsp + 0x28]
movsxd rcx, r9d
mov qword [rax + rcx*8], rdx
cmp dword [rsp + 0x24], 0
je 0x18010d90b
movsxd rax, dword [rbx + 0x2c]
mov dword [rbx + 0x158], 1
test eax, eax
jle 0x18010d90b
mov rcx, rax
mov rax, qword [rbx + 0x18]
or dword [rax + rcx*4 - 4], 0x200
lea eax, [r15 + 1]
mov dword [rbx + 0x164], eax
xor eax, eax
jmp 0x18010d91e
mov eax, 0xffffffff
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret