Function at 0x18002ed90
Capabilities:
Enumerate pe sections

Disassembly:
sub rsp, 0x28
movzx eax, word [r8]
mov r10, rcx
movzx r9d, word [r8 + 2]
add eax, eax
movzx ecx, word [r8 + 6]
add r9d, eax
mov word [rsp + 2], ax
add r9d, r9d
movzx eax, word [r8 + 4]
add eax, r9d
mov word [rsp + 4], r9w
add eax, eax
movsxd r11, edx
add ecx, eax
mov word [rsp + 6], ax
movzx eax, word [r8 + 8]
add ecx, ecx
add eax, ecx
mov word [rsp + 8], cx
movzx ecx, word [r8 + 0xa]
add eax, eax
add ecx, eax
mov word [rsp + 0xa], ax
movzx eax, word [r8 + 0xc]
add ecx, ecx
add eax, ecx
mov word [rsp + 0xc], cx
movzx ecx, word [r8 + 0xe]
add eax, eax
add ecx, eax
mov word [rsp + 0xe], ax
movzx eax, word [r8 + 0x10]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x10], cx
movzx ecx, word [r8 + 0x12]
add eax, eax
add ecx, eax
mov word [rsp + 0x12], ax
movzx eax, word [r8 + 0x14]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x14], cx
movzx ecx, word [r8 + 0x16]
add eax, eax
add ecx, eax
mov word [rsp + 0x16], ax
movzx eax, word [r8 + 0x18]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x18], cx
movzx ecx, word [r8 + 0x1a]
add eax, eax
add ecx, eax
mov word [rsp + 0x1a], ax
movzx eax, word [r8 + 0x1c]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x1c], cx
add eax, eax
mov word [rsp + 0x1e], ax
test edx, edx
js 0x18002eec2
xor r9d, r9d
movzx edx, word [r10 + r9*4 + 2]
test edx, edx
je 0x18002eeba
lea rcx, [rsp]
movzx r8d, word [rcx + rdx*2]
lea rcx, [rcx + rdx*2]
lea eax, [r8 + 1]
mov word [rcx], ax
xor eax, eax
nop dword [rax]
nop dword [rax + rax]
mov ecx, r8d
dec edx
and ecx, 1
shr r8d, 1
or eax, ecx
add eax, eax
test edx, edx
jg 0x18002eea0
shr eax, 1
mov word [r10 + r9*4], ax
inc r9
cmp r9, r11
jle 0x18002ee74
add rsp, 0x28
ret
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x10]
xor r11d, r11d
mov r14, qword [rdx]
mov esi, 0xffffffff
mov r15, rdx
mov rbx, rcx
mov r8d, r11d
mov edx, r11d
movsxd rbp, dword [rax + 0x14]
mov r10, qword [rax]
lea r12d, [rsi + 2]
mov dword [rcx + 0x149c], r11d
mov dword [rcx + 0x14a0], 0x23d
test ebp, ebp
jle 0x18002ef80
nop dword [rax]
cmp word [r14 + rdx*4], r11w
je 0x18002ef5c
movsxd rcx, dword [rbx + 0x149c]
mov esi, r8d
lea eax, [rcx + 1]
mov dword [rbx + 0x149c], eax
mov dword [rbx + rcx*4 + 0xbac], r8d
mov byte [rdx + rbx + 0x14a4], r11b
jmp 0x18002ef62
mov word [r14 + rdx*4 + 2], r11w
inc r8d
inc rdx
cmp rdx, rbp
jl 0x18002ef30
mov edx, dword [rbx + 0x149c]
cmp edx, 2
jge 0x18002efd7
nop dword [rax + rax]
cmp esi, 2
lea eax, [rsi + 1]
lea ecx, [rsi + 1]
cmovge eax, esi
cmovge ecx, r11d
mov esi, eax
lea eax, [rdx + 1]
mov dword [rbx + 0x149c], eax
movsxd rax, edx
mov dword [rbx + rax*4 + 0xbac], ecx
movsxd rax, ecx
mov word [r14 + rax*4], r12w
mov byte [rax + rbx + 0x14a4], r11b
dec dword [rbx + 0x1700]
test r10, r10
je 0x18002efcc
movzx eax, word [r10 + rax*4 + 2]
sub dword [rbx + 0x1704], eax
mov edx, dword [rbx + 0x149c]
cmp edx, 2
jl 0x18002ef80
mov dword [r15 + 8], esi
mov ecx, dword [rbx + 0x149c]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp eax, r12d
jl 0x18002f010
nop
mov r8d, edi
mov rdx, r14
mov rcx, rbx
call fcn.18002ea90
dec edi
cmp edi, r12d
jge 0x18002eff0
mov ecx, dword [rbx + 0x149c]
nop dword [rax + rax]
movsxd rdi, dword [rbx + 0xbac]
mov r8d, r12d
movsxd rax, ecx
mov rdx, r14
mov ecx, dword [rbx + rax*4 + 0xba8]
mov dword [rbx + 0xbac], ecx
mov rcx, rbx
dec dword [rbx + 0x149c]
call fcn.18002ea90
movsxd rdx, dword [rbx + 0xbac]
movsxd rcx, dword [rbx + 0x14a0]
mov r8, rdx
movsxd r9, ebp
lea eax, [rcx - 1]
mov dword [rbx + 0x14a0], eax
mov dword [rbx + rcx*4 + 0xba4], edi
movsxd rcx, dword [rbx + 0x14a0]
lea eax, [rcx - 1]
mov dword [rbx + 0x14a0], eax
mov dword [rbx + rcx*4 + 0xba4], edx
mov rcx, rbx
movzx eax, word [r14 + rdi*4]
add ax, word [r14 + rdx*4]
mov word [r14 + r9*4], ax
movzx edx, byte [rdi + rbx + 0x14a4]
movzx eax, byte [r8 + rbx + 0x14a4]
cmp dl, al
cmovb edx, eax
inc dl
mov byte [r9 + rbx + 0x14a4], dl
mov rdx, r14
mov word [r14 + r8*4 + 2], bp
mov r8d, r12d
mov word [r14 + rdi*4 + 2], bp
mov dword [rbx + 0xbac], ebp
inc ebp
call fcn.18002ea90
mov ecx, dword [rbx + 0x149c]
cmp ecx, 2
jge 0x18002f010
movsxd r8, dword [rbx + 0x14a0]
mov rdx, r15
mov rcx, rbx
lea eax, [r8 - 1]
mov dword [rbx + 0x14a0], eax
mov eax, dword [rbx + 0xbac]
mov dword [rbx + r8*4 + 0xba4], eax
call fcn.18002eb80
lea r8, [rbx + 0xb88]
mov edx, esi
mov rcx, r14
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop r12
jmp 0x18002ed90