Function at 0x1400a58a0
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push r12
push r14
mov eax, 0x1090
call fcn.1400952d0
sub rsp, rax
xor ebp, ebp
mov r12, r8
mov r14, rdx
mov rax, rcx
test r8, r8
je 0x1400a5958
mov qword [rsp + 0x38], rbp
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], rcx
mov r9d, Ordinal_41
lea rcx, [rsp + 0x10c0]
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x30], rcx
lea r8, [rsp + 0x40]
mov dword [rsp + 0x28], ebp
mov rcx, rax
mov edx, 0x80862007
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], gethostname
mov qword [rsp + 0x60], 0x1000
mov dword [rsp + 0x10c0], ebp
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a5960
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.____Cant_read_module_headers
call fcn.14001b830
lea rdx, [0x140004e20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rdx, rbp
jmp 0x1400a5a53
mov qword [rsp + 0x1088], rsi
mov qword [rsp + 0x1080], rdi
mov rdi, 0xffffffffffffffff
mov qword [rsp + 0x1078], r13
mov qword [rsp + 0x1070], r15
inc rdi
cmp byte [r14 + rdi], bpl
jne 0x1400a5987
movsxd rax, dword [rsp + 0xac]
lea rcx, [rsp + 0x70]
add rcx, rax
mov qword [rsp + 0x10b8], rbx
mov esi, ebp
movzx eax, word [rcx + 0x14]
lea r13, [rcx + 0x18]
movzx r15d, word [rcx + 6]
add r13, rax
cmp bp, r15w
jae 0x1400a5a05
mov eax, esi
mov r8, rdi
mov rdx, r14
lea rcx, [rax + rax*4]
lea rbx, [rcx*8]
add rbx, r13
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a59fe
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rbx + rax], bpl
jne 0x1400a59f0
cmp rdi, rax
je 0x1400a5a77
inc esi
cmp esi, r15d
jb 0x1400a59c0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.____Cant_find_section
call fcn.14001b830
lea rdx, [0x140004e20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rdx, rbp
mov rbx, qword [rsp + 0x10b8]
mov rdi, qword [rsp + 0x1080]
mov rsi, qword [rsp + 0x1088]
mov r13, qword [rsp + 0x1078]
mov r15, qword [rsp + 0x1070]
mov r9, qword [rsp + 0x10c8]
mov rcx, qword [rsp + 0x10b0]
mov r8d, ebp
add rsp, 0x1090
pop r14
pop r12
pop rbp
jmp fcn.1400a5cb0
mov eax, dword [rbx + 0xc]
test eax, eax
je 0x1400a5a05
mov edx, dword [rbx + 8]
lea rcx, [rsp + 0x70]
add rcx, rax
je 0x1400a5a05
test edx, edx
je 0x1400a5a05
lea rax, [rsp + 0x70]
mov ebp, edx
sub rcx, rax
lea rdx, [rcx + r12]
jmp 0x1400a5a2b