Function at 0x180210920
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rbx, r8
mov rdi, rdx
mov r15, rcx
xor r13d, r13d
mov dword [rbp - 0x40], r13d
lea rcx, [rbp - 0x38]
call fcn.180210fb0
nop
mov rax, qword [rbp - 0x30]
cmp qword [rbp - 0x38], rax
jne 0x1802109cc
mov byte [r15 + 0x18], r13b
mov dword [rbp - 0x40], 1
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x1802109b1
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802109a0
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180210bf3
call fcn.180286270
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rax, r15
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, rdi
lea rcx, [rbp + 0x58]
call fcn.18020f9d0
mov rax, qword [rax]
test rax, rax
je 0x180210ba3
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x180210ba3
movsxd rcx, dword [rax + 0x3c]
cmp dword [rcx + rax], 0x4550
jne 0x180210ba3
mov r9, rbx
sub r9, qword [rcx + rax + 0x30]
mov rsi, qword [rbp - 0x38]
movsxd rcx, dword [rsi + 0x3c]
movzx eax, word [rcx + rsi + 0x14]
lea rdx, [rsi + 0x18]
add rdx, rcx
add rdx, rax
movzx r8d, r13w
movzx r10d, word [rcx + rsi + 6]
cmp r13w, r10w
jae 0x180210a5a
mov eax, dword [rdx + 8]
test eax, eax
jne 0x180210a3c
mov eax, dword [rdx + 0x10]
mov ecx, dword [rdx + 0xc]
cmp r9, rcx
jb 0x180210a4c
add rax, rcx
cmp r9, rax
jb 0x180210a64
inc r8w
add rdx, 0x28
cmp r8w, r10w
jb 0x180210a32
mov byte [r15 + 0x18], 0
jmp 0x180210964
sub ecx, dword [rdx + 0x14]
mov eax, ecx
sub rsi, rax
add rsi, r9
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov r8, r13
mov qword [rbp - 0x10], r13
mov rdi, rbx
neg rdi
mov r12, rbx
sub r12, rsi
mov r14, rsi
sub r14, rbx
mov r9, qword [rbp - 0x18]
nop dword [rax]
nop dword [rax + rax]
movzx r10d, byte [rsi]
cmp byte [r12 + rsi], r10b
jne 0x180210b3f
lea rax, [rsi + 1]
add rax, r12
nop word [rax + rax]
mov rdx, rax
movzx ecx, byte [rax + r14]
cmp byte [rax], cl
jne 0x180210b3f
inc rax
lea rcx, [rdx + 1]
add rcx, rdi
cmp rcx, 4
jle 0x180210ac0
mov rcx, qword [rbp - 0x20]
cmp rcx, r9
jne 0x180210b7b
mov byte [r15 + 0x18], 0
mov dword [rbp - 0x40], 1
test rcx, rcx
je 0x18021096b
sub r8, rcx
mov rax, rcx
cmp r8, 0x1000
jb 0x180210b26
add r8, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180210bed
mov rdx, r8
call fcn.180286270
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
jmp 0x18021096b
cmp r9, r8
je 0x180210b59
mov byte [r9], r10b
inc r9
mov qword [rbp - 0x18], r9
dec rdi
inc rsi
jmp 0x180210aa0
mov r8, rsi
mov rdx, r9
lea rcx, [rbp - 0x20]
call fcn.18020f9e0
mov r8, qword [rbp - 0x10]
mov r9, qword [rbp - 0x18]
dec rdi
inc rsi
jmp 0x180210aa0
mov qword [rbp - 0x10], r13
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x20], r13
mov qword [r15], rcx
mov qword [r15 + 8], r9
mov qword [r15 + 0x10], r8
mov byte [r15 + 0x18], 1
mov dword [rbp - 0x40], 1
jmp 0x18021096b
mov byte [r15 + 0x18], 0
mov dword [rbp - 0x40], 1
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x1802109b1
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802109a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180210bf3
jmp 0x1802109a0
call fcn.18028ddc0
nop
call fcn.18028ddc0
int3