Function at 0x14006b0a0
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rbp, qword [0x1401432e8]
mov rsi, r8
mov rbx, rdx
mov rcx, rsi
xor edx, edx
mov r8d, 0x200
call fcn.140093c00
xor edi, edi
lea r15, [rsi + 0x200]
lea r12, [rsi + 0x204]
mov dword [r15], edi
mov byte [r12], dil
mov eax, dword [rbx + 4]
test eax, eax
jns 0x14006b16f
mov eax, dword [rbx]
mov dword [rbx + 4], edi
test eax, eax
jne 0x14006b10f
mov eax, dword [rbp + 0x20]
test eax, eax
jne 0x14006b10f
mov rdx, qword [rbp + 0x30]
jmp 0x14006b12a
cmp eax, 2
jl 0x14006b143
cmp eax, dword [rbp + 0x1c]
jge 0x14006b143
mov ecx, dword [rbp + 0x18]
movsxd rdx, eax
sub rdx, 2
shl rdx, cl
add rdx, qword [rbp + 0x38]
mov qword [rbx + 8], rdx
test rdx, rdx
je 0x14006b14b
cmp rdx, 0xffffffffffffffff
je 0x14006b14b
mov rcx, rbp
call fcn.14006aa00
jmp 0x14006b1b4
mov qword [rbx + 8], 0xffffffffffffffff
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop r12
ret
add eax, 0x20
cmp eax, dword [0x140109f14]
mov dword [rbx + 4], eax
jb 0x14006b199
mov dword [rbx + 4], edi
mov rcx, rbp
mov rdx, qword [rbx + 8]
call fcn.14006ad40
mov qword [rbx + 8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14006b14b
mov rdx, qword [rbx + 8]
mov rcx, rbp
call fcn.14006aa00
mov rcx, rax
test rax, rax
je 0x14006b14b
movsxd rax, dword [rbx + 4]
add rax, rcx
test rax, rax
je 0x14006b14b
nop dword [rax]
movzx r8d, byte [rax + 0xb]
cmp r8b, 8
je 0x14006b1eb
movzx ecx, byte [rax]
cmp cl, 0xe5
je 0x14006b1eb
cmp cl, 0x2e
jne 0x14006b240
cmp byte [rax + 2], 0x20
jne 0x14006b24e
movzx edx, byte [rax + 1]
cmp dl, 0x20
je 0x14006b1eb
cmp dl, cl
jne 0x14006b24e
add dword [rbx + 4], 0x20
mov eax, dword [rbx + 4]
cmp eax, dword [0x140109f14]
jb 0x14006b21a
mov dword [rbx + 4], edi
mov rcx, rbp
mov rdx, qword [rbx + 8]
call fcn.14006ad40
mov qword [rbx + 8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14006b14b
mov rdx, qword [rbx + 8]
mov rcx, rbp
call fcn.14006aa00
mov rcx, rax
test rax, rax
je 0x14006b14b
movsxd rax, dword [rbx + 4]
add rax, rcx
jne 0x14006b1c0
jmp 0x14006b14b
test cl, cl
jne 0x14006b24e
mov eax, 0xfffffffe
jmp 0x14006b150
mov r14d, 0xffffffff
cmp r8b, 0xf
jne 0x14006b3f1
nop
movzx edx, cl
test r14d, r14d
jns 0x14006b276
mov ecx, edx
and cl, 0xf0
cmp cl, 0x40
jne 0x14006b3f1
and edx, 0xf
dec edx
test r14d, r14d
js 0x14006b28c
lea ecx, [r14 - 1]
cmp edx, ecx
jne 0x14006b3e7
imul ecx, edx, 0xd
mov r14d, edx
movsxd rdx, ecx
lea r8, [rsi + rdx*2]
movzx ecx, byte [rax + 1]
movzx edx, byte [rax + 2]
shl dx, 8
or dx, cx
mov word [r8], dx
movzx edx, byte [rax + 4]
movzx ecx, byte [rax + 3]
shl dx, 8
or dx, cx
mov word [r8 + 2], dx
movzx edx, byte [rax + 6]
movzx ecx, byte [rax + 5]
shl dx, 8
or dx, cx
mov word [r8 + 4], dx
movzx edx, byte [rax + 8]
movzx ecx, byte [rax + 7]
shl dx, 8
or dx, cx
mov word [r8 + 6], dx
movzx edx, byte [rax + 0xa]
movzx ecx, byte [rax + 9]
shl dx, 8
or dx, cx
mov word [r8 + 8], dx
movzx edx, byte [rax + 0xf]
movzx ecx, byte [rax + 0xe]
shl dx, 8
or dx, cx
mov word [r8 + 0xa], dx
movzx edx, byte [rax + 0x11]
movzx ecx, byte [rax + 0x10]
shl dx, 8
or dx, cx
mov word [r8 + 0xc], dx
movzx edx, byte [rax + 0x13]
movzx ecx, byte [rax + 0x12]
shl dx, 8
or dx, cx
mov word [r8 + 0xe], dx
movzx edx, byte [rax + 0x15]
movzx ecx, byte [rax + 0x14]
shl dx, 8
or dx, cx
mov word [r8 + 0x10], dx
movzx edx, byte [rax + 0x17]
movzx ecx, byte [rax + 0x16]
shl dx, 8
or dx, cx
mov word [r8 + 0x12], dx
movzx edx, byte [rax + 0x19]
movzx ecx, byte [rax + 0x18]
shl dx, 8
or dx, cx
mov word [r8 + 0x14], dx
movzx edx, byte [rax + 0x1d]
movzx ecx, byte [rax + 0x1c]
shl dx, 8
or dx, cx
mov word [r8 + 0x16], dx
add dword [rbx + 4], 0x20
mov eax, dword [rbx + 4]
cmp eax, dword [0x140109f14]
jb 0x14006b3b7
mov dword [rbx + 4], edi
mov rcx, rbp
mov rdx, qword [rbx + 8]
call fcn.14006ad40
mov qword [rbx + 8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14006b14b
mov rdx, qword [rbx + 8]
mov rcx, rbp
call fcn.14006aa00
test rax, rax
je 0x14006b14b
movsxd rcx, dword [rbx + 4]
add rax, rcx
je 0x14006b14b
cmp byte [rax + 0xb], 0xf
jne 0x14006b3f1
movzx ecx, byte [rax]
jmp 0x14006b260
mov eax, 0xfffffffd
jmp 0x14006b150
cmp word [rsi], di
jne 0x14006b46b
mov r8d, 0x2e
nop dword [rax]
cmp rdi, 8
jl 0x14006b41a
cmp byte [rdi + rax], 0x20
je 0x14006b46b
cmp rdi, 8
jne 0x14006b41a
mov word [rsi], r8w
add rsi, 2
movzx ecx, byte [rdi + rax]
cmp cl, 0x20
je 0x14006b462
movzx edx, cx
mov word [rsi], cx
lea ecx, [rdx - 0x41]
cmp cx, 0x19
ja 0x14006b45e
movzx ecx, byte [rax + 0xc]
test cl, 2
je 0x14006b44c
cmp rdi, 8
jge 0x14006b44c
add dx, 0x20
mov word [rsi], dx
movzx ecx, byte [rax + 0xc]
test cl, 4
je 0x14006b45e
cmp rdi, 8
jl 0x14006b45e
add dx, 0x20
mov word [rsi], dx
add rsi, 2
inc rdi
cmp rdi, 0xc
jl 0x14006b400
movzx ecx, byte [rax + 0xb]
and cl, 0x37
mov byte [r12], cl
movzx ecx, byte [rax + 0x1e]
movzx edx, byte [rax + 0x1f]
shl edx, 8
or edx, ecx
movzx ecx, byte [rax + 0x1d]
shl edx, 8
or edx, ecx
movzx ecx, byte [rax + 0x1c]
shl edx, 8
or edx, ecx
mov dword [r15], edx
movzx r8d, byte [rax + 0x15]
movzx ecx, byte [rax + 0x14]
movzx edx, byte [rax + 0x1b]
movzx eax, byte [rax + 0x1a]
shl r8d, 8
or r8d, ecx
shl edx, 8
shl r8d, 0x10
or eax, edx
add eax, r8d
jmp 0x14006b150