Function at 0x18001a440
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1800d5100]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov r10d, dword [r8 + 0x90]
mov rdi, r8
mov r15, rdx
mov rbp, rcx
test r10d, r10d
je 0x18001a4b2
movzx eax, word [r8 + 0x14]
lea r9, [r8 + 0x18]
movzx r11d, word [r8 + 6]
xor r12d, r12d
add r9, rax
mov edx, r12d
test r11d, r11d
je 0x18001a4b2
mov r8d, dword [r9 + 0xc]
cmp r10d, r8d
jb 0x18001a4a7
mov ecx, dword [r9 + 8]
add ecx, r8d
cmp r10d, ecx
jb 0x18001a4d3
inc edx
add r9, 0x28
cmp edx, r11d
jl 0x18001a492
mov al, 1
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.180071b80
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, dword [r9 + 0x14]
sub r10d, r8d
mov eax, r10d
add rax, r15
add rcx, rax
je 0x18001a4b2
cmp dword [rcx + 0x10], r12d
lea r14, [rcx + 0x10]
je 0x18001a4b2
nop
movzx eax, word [rdi + 0x14]
lea rdx, [rdi + 0x18]
movzx r11d, word [rdi + 6]
add rdx, rax
mov r10d, dword [r14 - 4]
mov r8d, r12d
test r11d, r11d
je 0x18001a4b2
nop dword [rax]
mov r9d, dword [rdx + 0xc]
cmp r10d, r9d
jb 0x18001a524
mov ecx, dword [rdx + 8]
add ecx, r9d
cmp r10d, ecx
jb 0x18001a532
inc r8d
add rdx, 0x28
cmp r8d, r11d
jl 0x18001a510
jmp 0x18001a4b2
mov ebx, dword [rdx + 0x14]
sub r10d, r9d
mov eax, r10d
add rax, r15
add rbx, rax
je 0x18001a4b2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x18001a6c2
mov ecx, dword [rbp]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x40]
lea rax, [rsp + 0x38]
mov dword [rsp + 0x58], ecx
mov qword [rsp + 0x70], rax
xor r9d, r9d
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], r12
xor ecx, ecx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x5c], r12d
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x48], 0x5accbc4
mov dword [rsp + 0x4c], 0x2102b0e
mov qword [rsp + 0x20], r12
call qword [0x1800d8060]
movzx eax, word [rdi + 0x14]
lea rdx, [rdi + 0x18]
movzx r11d, word [rdi + 6]
add rdx, rax
mov r10d, dword [r14]
mov r9d, r12d
test r11d, r11d
je 0x18001a60b
mov r8d, dword [rdx + 0xc]
cmp r10d, r8d
jb 0x18001a5ff
mov ecx, dword [rdx + 8]
add ecx, r8d
cmp r10d, ecx
jb 0x18001a69f
inc r9d
add rdx, 0x28
cmp r9d, r11d
jl 0x18001a5e7
mov rbx, r12
mov r10, qword [rbx]
test r10, r10
je 0x18001a68d
nop word [rax + rax]
movzx eax, word [rdi + 0x14]
mov r8d, r12d
movzx r11d, word [rdi + 6]
add rax, 0x18
add rax, rdi
test r11d, r11d
je 0x18001a660
nop dword [rax + rax]
mov r9d, dword [rax + 0xc]
cmp r10d, r9d
jb 0x18001a654
mov edx, dword [rax + 8]
add edx, r9d
cmp r10d, edx
jb 0x18001a6b3
inc r8d
add rax, 0x28
cmp r8d, r11d
jl 0x18001a640
mov rdx, r12
add rdx, 2
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
sub rcx, rsi
add rax, rcx
mov qword [rbx], rax
add rbx, 8
mov rax, qword [rbx]
mov r10d, eax
test rax, rax
jne 0x18001a620
add r14, 0x14
cmp dword [r14], r12d
jne 0x18001a4f0
jmp 0x18001a4b2
mov ebx, dword [rdx + 0x14]
sub r10d, r8d
mov eax, r10d
add rax, r15
add rbx, rax
jmp 0x18001a60e
mov edx, dword [rax + 0x14]
sub r10d, r9d
lea rax, [r15 + r10]
add rdx, rax
jmp 0x18001a663
jmp 0x18001a4b4