Function at 0x18017cf40
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov ebx, dword [rcx + 0x24]
xor eax, eax
cmp byte [rcx + 0x50], al
mov rbp, r8
mov edi, dword [rcx]
mov r12d, 0x1000000
mov r8d, dword [rcx + 8]
cmovne r12d, eax
mov eax, dword [rcx + 4]
mov r15, rdx
mov edx, dword [rcx + 0x1c]
mov r9d, dword [rcx + 0xc]
mov r10d, dword [rcx + 0x10]
mov r13d, dword [rcx + 0x14]
lea esi, [rax + rax*4]
mov r14d, dword [rcx + 0x18]
mov r11d, dword [rcx + 0x20]
mov dword [rsp + 0xa0], edx
mov dword [rsp + 0xa8], ebx
cmp rbp, 0x10
jb 0x18017d274
lea edx, [r10 + r10*4]
mov qword [rsp + 0x38], rdi
lea ecx, [r8 + r8*4]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x18], rcx
lea edx, [r9 + r9*4]
mov ecx, esi
add r15, 8
mov qword [rsp + 0x40], rcx
mov ecx, dword [rsp + 0xa0]
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x10], r8
mov qword [rsp + 8], rax
mov qword [rsp + 0x48], r10
shr rbp, 4
nop word [rax + rax]
movzx r9d, byte [r15 - 2]
movzx esi, byte [r15 - 3]
mov eax, r9d
movzx r10d, byte [r15 - 5]
and eax, 0xf
movzx r8d, byte [r15 + 1]
movzx ebx, byte [r15 + 4]
mov edi, r8d
movzx edx, byte [r15 - 6]
and edi, 0x3f
shl eax, 8
or esi, eax
shl edi, 8
movzx eax, byte [r15 - 4]
shl ebx, 8
shl esi, 8
or esi, eax
shr r8d, 6
mov eax, r10d
shl esi, 6
shr eax, 2
and r10d, 3
or esi, eax
shl r10d, 8
movzx eax, byte [r15]
or edx, r10d
or edi, eax
shl edx, 8
movzx eax, byte [r15 - 1]
add esi, r14d
shl edi, 8
or edi, eax
shr r9d, 4
movzx eax, byte [r15 + 3]
or ebx, eax
shl edi, 4
movzx eax, byte [r15 + 2]
or edi, r9d
shl ebx, 8
add edi, ecx
mov rcx, qword [rsp + 0x28]
or ebx, eax
movzx eax, byte [r15 + 6]
shl ebx, 2
or ebx, r8d
add ebx, r11d
movzx r11d, byte [r15 + 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [r15 + 5]
shl r11d, 8
or r11d, eax
movzx eax, byte [r15 - 7]
or edx, eax
or r11d, r12d
movzx eax, byte [r15 - 8]
add r11d, dword [rsp + 0xa8]
shl edx, 8
or edx, eax
mov eax, r11d
imul rax, qword [rsp + 0x40]
add edx, r13d
mov r13, qword [rsp + 0x38]
mov r10d, edx
imul r10, r13
mov r9d, edx
add r10, rax
mov eax, ebx
imul rax, qword [rsp + 0x18]
add r10, rax
mov eax, edi
imul rax, qword [rsp + 0x20]
add r10, rax
mov eax, esi
imul rax, rcx
add r10, rax
mov eax, esi
mov r14, r10
shr r14, 0x1a
mov r14d, r14d
imul rax, r13
add r14, rax
lea r15, [r15 + 0x10]
mov eax, edx
and r10d, 0x3ffffff
imul rax, qword [rsp + 8]
add r14, rax
mov eax, r11d
imul rax, qword [rsp + 0x18]
add r14, rax
mov eax, ebx
imul rax, qword [rsp + 0x20]
add r14, rax
mov eax, edi
imul rax, rcx
add r14, rax
mov eax, esi
imul rax, qword [rsp + 8]
mov rdx, r14
and r14d, 0x3ffffff
shr rdx, 0x1a
mov edx, edx
add rdx, rax
mov eax, r9d
imul rax, qword [rsp + 0x10]
add rdx, rax
mov rax, r13
imul rax, rdi
add rdx, rax
mov eax, r11d
imul rax, qword [rsp + 0x20]
add rdx, rax
mov eax, ebx
imul rax, rcx
add rdx, rax
mov eax, esi
imul rax, qword [rsp + 0x10]
imul rsi, qword [rsp + 0x30]
mov ecx, edx
shr rdx, 0x1a
mov r8d, edx
and ecx, 0x3ffffff
add r8, rax
mov eax, r9d
imul rax, qword [rsp + 0x30]
imul r9, qword [rsp + 0x48]
add r8, rax
mov eax, ebx
imul rbx, qword [rsp + 8]
imul rax, r13
add r8, rax
mov rax, qword [rsp + 8]
imul rax, rdi
add r8, rax
mov eax, r11d
imul rax, qword [rsp + 0x28]
imul r11, r13
add r8, rax
mov eax, r8d
shr r8, 0x1a
and eax, 0x3ffffff
mov edx, r8d
add rdx, rsi
mov dword [rsp], eax
mov rax, qword [rsp + 0x10]
add rdx, r9
add rdx, r11
mov r11d, dword [rsp]
add rdx, rbx
imul rax, rdi
add rdx, rax
mov ebx, edx
shr rdx, 0x1a
and ebx, 0x3ffffff
mov dword [rsp + 0xa8], ebx
lea r13d, [rdx + rdx*4]
add r13d, r10d
mov eax, r13d
and r13d, 0x3ffffff
shr eax, 0x1a
add r14d, eax
sub rbp, 1
jne 0x18017d000
mov dword [rsp + 0xa0], ecx
mov edx, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x90]
mov dword [rcx + 0x24], ebx
mov rbx, qword [rsp + 0x98]
mov dword [rcx + 0x14], r13d
mov dword [rcx + 0x18], r14d
mov dword [rcx + 0x1c], edx
mov dword [rcx + 0x20], r11d
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret