Function at 0x180028e30
Capabilities:
Enumerate pe sections

Disassembly:
test r9, r9
je 0x180029099
mov qword [rsp + 0x10], rdx
push rsi
push r12
push r13
push r15
sub rsp, 0x28
mov rax, rdx
mov qword [rsp + 0x50], rbx
mov rbx, qword [rsp + 0x70]
xor edx, edx
div r9
mov qword [rsp + 0x60], rbp
add rbx, 0x888
mov qword [rsp + 0x68], rdi
mov r13, rax
mov qword [rsp + 0x20], r14
mov r12, r9
mov r15, rcx
mov esi, 7
mov r14, r9
xor ebp, ebp
movabs rdi, 0x7ff0000000000000
nop
lea rcx, [rbx - 0x888]
xor edx, edx
mov r8d, 0x880
call fcn.18004de30
mov qword [rbx - 8], rbp
mov qword [rbx], rdi
lea rbx, [rbx + 0x890]
sub r14, 1
jne 0x180028e90
mov r10, qword [rsp + 0x58]
mov r9, rbp
mov rdi, qword [rsp + 0x70]
mov r14, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x50]
nop
xor edx, edx
mov rax, rbp
div r12
mov r8, rax
test r9, r9
je 0x180028ef0
imul esi, esi, 0x41a7
xor edx, edx
mov eax, esi
div r13
add r8, rdx
lea rcx, [r8 + 0x28]
cmp rcx, r10
lea rdx, [r10 - 0x29]
cmovb rdx, r8
add qword [rdi + 0x880], 0x28
movzx eax, word [r15 + rdx*2]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 2]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 4]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 6]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 8]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0xa]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0xc]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0xe]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x10]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x12]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x14]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x16]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x18]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x1a]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x1c]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x1e]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x20]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x22]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x24]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x26]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x28]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x2a]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x2c]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x2e]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x30]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x32]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x34]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x36]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x38]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x3a]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x3c]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x3e]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x40]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x42]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x44]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x46]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x48]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x4a]
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x4c]
inc r9
add rbp, r10
inc dword [rdi + rax*4]
movzx eax, word [r15 + rdx*2 + 0x4e]
inc dword [rdi + rax*4]
add rdi, 0x890
cmp r9, r12
jb 0x180028ed0
mov rdi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x60]
add rsp, 0x28
pop r15
pop r13
pop r12
pop rsi
ret