Function at 0x180006a19
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rdi, rdx
mov r15, rcx
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x40], r8
mov rcx, rdx
call fcn.1800070d8
test rax, rax
je 0x180006abb
mov rsi, rax
movzx eax, word [rax + 0x18]
cmp eax, 0x20b
jne 0x180006abb
mov r12d, dword [rsi + 0x50]
xor ebx, ebx
xor ecx, ecx
mov rdx, r12
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x180006ca3
mov r13, rax
movzx eax, word [rsi + 0x14]
mov ebp, dword [rsi + rax + 0x24]
cmp byte [rsp + 0xf8], 0
cmovne ebx, ebp
sub r12d, ebx
mov qword [rsp + 0x28], 0
cmp byte [rsp + 0x100], 0
je 0x180006ac2
lea r8, [rsp + 0x28]
mov rcx, r15
mov rdx, r12
call fcn.18000691c
jmp 0x180006acf
xor ebx, ebx
jmp 0x180006ca3
mov rcx, r15
xor edx, edx
mov r8, r12
call fcn.180003578
mov r14, rax
test rax, rax
je 0x180006c81
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x50], r14
mov r8d, dword [rsi + 0x54]
mov rcx, r13
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, word [rsi + 6]
test ax, ax
je 0x180006b42
mov rcx, rsi
add rcx, 0x18
movzx r14d, word [rsi + 0x14]
add r14, rcx
add r14, 0xc
xor ebp, ebp
test byte [r14 + 0x18], 0x80
jne 0x180006b33
mov ecx, dword [r14]
mov r8d, dword [r14 + 4]
add rcx, r13
mov edx, dword [r14 + 8]
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, word [rsi + 6]
inc rbp
movzx ecx, ax
add r14, 0x28
cmp rbp, rcx
jb 0x180006b12
xor eax, eax
cmp byte [rsp + 0xf8], 0
cmovne rax, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x50]
mov rbp, rdi
sub rbp, rax
mov qword [rsp + 0x38], rbp
sub rbp, qword [rsi + 0x30]
lea r14, [rsp + 0x70]
mov rcx, r14
mov rdx, r13
call fcn.1800070fb
mov rcx, r14
mov r14, rdi
mov rdx, rbp
call fcn.180006cdc
lea rbp, [rsp + 0x58]
mov rcx, rbp
mov rdx, r13
call fcn.180007214
mov rcx, r15
mov rdx, rbp
call fcn.180006d63
test al, al
je 0x180006c81
mov r8d, ebx
add r8, r13
mov rcx, r15
mov rdx, r14
mov r9, r12
call fcn.18000256d
test al, al
je 0x180006c81
mov rax, qword [rsp + 0x110]
mov esi, dword [rsi + 0x28]
test rax, rax
je 0x180006bf7
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x48]
mov r8, r14
mov r9, r12
call rax
test al, al
je 0x180006c81
mov cl, byte [rsp + 0x108]
mov r8, qword [rsp + 0x38]
add r8, rsi
mov dword [rsp + 0x34], 0
mov rax, qword [rsp + 0x48]
mov r9, r14
test cl, cl
jne 0x180006c1f
mov r9, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x34]
mov rcx, r15
call fcn.180006e14
test al, al
je 0x180006c81
mov rcx, qword [rsp + 0x118]
mov al, byte [rsp + 0xf0]
test rcx, rcx
je 0x180006c4f
mov edx, dword [rsp + 0x34]
mov dword [rcx], edx
test al, al
je 0x180006cba
cmp byte [rsp + 0x100], 0
je 0x180006cba
mov r8, qword [rsp + 0x28]
mov rcx, r15
mov rdx, r14
call fcn.180003094
mov rdx, qword [rsp + 0x28]
mov rcx, r15
call fcn.180003312
mov rdx, qword [rsp + 0x28]
jmp 0x180006cc1
mov rcx, r13
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r15
mov rdx, r14
call fcn.180003816
xor r14d, r14d
mov rbx, r14
mov rax, rbx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, r14
test al, al
je 0x180006cc9
mov rcx, r15
call fcn.180003816
mov rcx, r13
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x180006ca0