Function at 0x18000a2d0
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push r15
sub rsp, 0x38
inc word [0x1806b757c]
xor esi, esi
mov rbp, rdx
mov rbx, rcx
mov r15d, esi
mov dword [rsp + 0x78], esi
cmp byte [rdx + 0x44], sil
jne 0x18000a30e
call fcn.18000efe0
inc word [0x1806b7580]
xor al, al
add rsp, 0x38
pop r15
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0x20], r14
mov r14, qword [rcx + 8]
mov ecx, dword [r14]
call fcn.180007d90
and eax, 0xf0000000
cmp eax, 0x60000000
je 0x18000a33f
mov rcx, rbx
call fcn.18000efe0
inc word [0x1806b758e]
jmp 0x18000a8a5
mov eax, reloc.OLEAUT32.dll_SafeArrayAllocDescriptorEx
cmp ax, word [rbx + 0x12]
ja 0x18000a88c
movzx ecx, word [r14 + 4]
call fcn.180007da0
movzx ecx, ax
movzx eax, word [rbx + 0x10]
add ecx, 0x28
cmp ecx, eax
ja 0x18000a88c
movzx ecx, word [r14 + 4]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
call fcn.180007da0
mov rcx, rbx
lea edx, [rax + 0x28]
call fcn.18000f240
mov r9d, dword [r14 + 0x18]
mov dword [0x1806b7acc], r9d
mov edi, dword [r14 + 0x1c]
mov dword [0x1806b7ad0], edi
mov r11d, dword [r14 + 0x20]
mov dword [0x1806b7ad4], r11d
mov r10d, dword [r14 + 0x24]
mov dword [0x1806b7ad8], r10d
mov r12d, dword [r14 + 8]
mov dword [0x1806b7abc], r12d
mov r13d, dword [r14 + 0xc]
mov dword [0x1806b7ac0], r13d
mov eax, dword [r14 + 0x10]
mov dword [0x1806b7ac4], eax
mov edx, dword [r14 + 0x14]
mov dword [rsp + 0x70], edx
mov dword [0x1806b7ac8], edx
mov qword [0x1806b7ab0], r14
mov qword [0x1806b7aa0], rbp
mov dword [rsp + 0x68], eax
cmp r9b, 0xff
jne 0x18000a49f
cmp r9d, 0x1ff
jne 0x18000a46b
test edi, edi
jne 0x18000a41e
test r11d, r11d
jne 0x18000a41e
cmp r10d, 0x1000000
je 0x18000a486
lea rdx, [0x1806b7acc]
mov rcx, rbp
call fcn.18000bd10
mov r10d, dword [0x1806b7ad8]
test rax, rax
mov r11d, dword [0x1806b7ad4]
mov rcx, rsi
mov r9d, dword [0x1806b7acc]
cmovne rcx, rbp
mov edx, dword [0x1806b7ac8]
mov eax, dword [0x1806b7ac4]
mov r13d, dword [0x1806b7ac0]
mov r12d, dword [0x1806b7abc]
jmp 0x18000a535
cmp r9d, 0x2ff
jne 0x18000a41e
test edi, edi
jne 0x18000a41e
test r11d, r11d
jne 0x18000a41e
cmp r10d, 0x1000000
jne 0x18000a48e
mov rcx, rbp
jmp 0x18000a535
cmp r10d, 0x2000000
jne 0x18000a41e
mov rcx, rbp
jmp 0x18000a535
mov r15, qword [0x1806b7608]
mov esi, 1
mov rcx, rbp
nop
test byte [rcx + 0x7b], 1
je 0x18000a4fa
xor dl, dl
nop dword [rax + rax]
movzx r8d, dl
test byte [r8 + rcx + 0x44], 0x10
je 0x18000a4f3
mov eax, r8d
add rax, rax
cmp r9d, dword [rcx + rax*8 + 0x14]
jne 0x18000a4f3
cmp edi, dword [rcx + rax*8 + 0x18]
jne 0x18000a4f3
cmp r11d, dword [rcx + rax*8 + 0x1c]
jne 0x18000a4f3
lea rax, [r8 + 2]
add rax, rax
cmp r10d, dword [rcx + rax*8]
je 0x18000a528
inc dl
cmp dl, 3
jb 0x18000a4c0
mov eax, r9d
and eax, 0xc0ff
cmp eax, 0x80fe
je 0x18000a526
test esi, esi
je 0x18000a512
mov rcx, r15
jmp 0x18000a515
mov rcx, qword [rcx]
xor esi, esi
cmp rcx, rbp
jne 0x18000a51f
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18000a4b0
jmp 0x18000a528
xor ecx, ecx
mov r15d, dword [rsp + 0x78]
mov edx, dword [rsp + 0x70]
mov eax, dword [rsp + 0x68]
test r12d, r12d
jne 0x18000a573
test r13d, r13d
jne 0x18000a573
test eax, eax
jne 0x18000a573
test edx, edx
jne 0x18000a573
cmp r9d, 0x2ff
jne 0x18000a55f
cmp r11d, 0x1000000
jne 0x18000a55f
cmp r10b, 0xff
je 0x18000a573
mov rcx, rbx
call fcn.18000efe0
inc word [0x1806b7580]
jmp 0x18000a843
test rcx, rcx
jne 0x18000a59f
cmp r9b, 0xff
je 0x18000a692
mov r8, rbp
mov rdx, r14
mov rcx, rbx
call fcn.18000a120
test eax, eax
jne 0x18000a692
lea r15d, [rax + 1]
mov rcx, rbp
mov qword [0x1806b7aa0], rcx
mov eax, reloc.OLEAUT32.dll_SafeArrayAllocDescriptorEx
movzx esi, byte [r14 + 6]
mov r13d, 0xffffffd8
mov edx, r13d
mov word [0x1806b7ab8], ax
mov rcx, rbx
call fcn.18000f110
mov r8d, reloc.OLEAUT32.dll_SafeArrayAllocDescriptorEx
movzx edi, r8w
cmp sil, 0x3b
je 0x18000a63a
mov edi, r8d
lea r12d, [r13 + 0x30]
movzx ecx, sil
mov edx, 0xf9ff
test sil, sil
je 0x18000a600
sub ecx, 0x2b
je 0x18000a600
sub ecx, 1
je 0x18000a69f
cmp ecx, 0x10
jne 0x18000a63a
mov rax, qword [rbx + 8]
movzx ecx, byte [rax + 1]
movzx esi, byte [rax]
inc cx
shl cx, 3
add word [0x1806b7ab8], cx
movzx edi, cx
cmp cx, word [rbx + 0x12]
ja 0x18000a71c
neg cx
movzx edx, cx
mov rcx, rbx
call fcn.18000f110
cmp sil, 0x3b
jne 0x18000a5df
movzx edx, word [0x1806b7ab8]
mov rcx, rbx
call fcn.18000f110
mov rcx, rbx
test r15d, r15d
je 0x18000a775
cmp sil, 6
je 0x18000a756
cmp sil, 0x11
je 0x18000a737
cmp sil, 0x3a
jne 0x18000a562
movzx edx, word [0x1806b7ab8]
neg dx
call fcn.18000f110
mov rdx, rbp
mov rcx, rbx
call fcn.180009e90
jmp 0x18000a843
mov rcx, rbx
call fcn.18000efe0
jmp 0x18000a843
mov rax, qword [rbx + 8]
movzx edi, r12w
movzx esi, byte [rax]
add word [0x1806b7ab8], r12w
cmp r12w, word [rbx + 0x12]
ja 0x18000a701
test word [rax + 2], dx
jne 0x18000a6c9
mov ecx, 0xfffffff8
jmp 0x18000a629
mov rcx, rbx
call fcn.18000b1e0
mov rbx, rax
test rax, rax
je 0x18000a843
mov r14, qword [rax + 8]
mov r8d, reloc.OLEAUT32.dll_SafeArrayAllocDescriptorEx
movzx ecx, r13w
movzx edi, r8w
movzx esi, byte [r14 + 6]
mov word [0x1806b7ab8], r8w
jmp 0x18000a629
mov rcx, rbx
call fcn.18000efe0
inc word [0x1806b75b4]
inc word [0x1806b75b0]
jmp 0x18000a843
mov rcx, rbx
call fcn.18000efe0
inc word [0x1806b7584]
inc word [0x1806b7580]
jmp 0x18000a843
movzx edx, word [0x1806b7ab8]
neg dx
call fcn.18000f110
mov rdx, rbp
mov rcx, rbx
call fcn.180015ac0
jmp 0x18000a843
movzx edx, word [0x1806b7ab8]
neg dx
call fcn.18000f110
mov rdx, rbp
mov rcx, rbx
call fcn.180012910
jmp 0x18000a843
mov rdx, rbp
call fcn.18000f3d0
test al, al
jne 0x18000a843
movzx ecx, sil
sub ecx, 6
je 0x18000a826
sub ecx, 0xb
je 0x18000a807
sub ecx, 0x29
je 0x18000a7e8
cmp ecx, 1
je 0x18000a692
cmp byte [0x1806b7acc], 0xff
je 0x18000a7d0
cmp byte [r14 + 6], 0x3a
je 0x18000a7d0
movzx r8d, word [0x1806b7ab8]
mov edx, 1
movzx eax, di
mov rcx, rbx
sub r8d, eax
call fcn.180009e80
mov rcx, rbx
call fcn.18000efe0
inc word [0x1806b758a]
inc word [0x1806b7580]
jmp 0x18000a843
movzx edx, word [0x1806b7ab8]
mov rcx, rbx
neg dx
call fcn.18000f110
mov rdx, rbp
mov rcx, rbx
call fcn.180009bf0
jmp 0x18000a843
movzx edx, word [0x1806b7ab8]
mov rcx, rbx
neg dx
call fcn.18000f110
mov rdx, rbp
mov rcx, rbx
call fcn.180015660
jmp 0x18000a843
movzx edx, word [0x1806b7ab8]
mov rcx, rbx
neg dx
call fcn.18000f110
mov rdx, rbp
mov rcx, rbx
call fcn.180011670
mov r13, qword [rsp + 0x28]
xor eax, eax
mov r12, qword [rsp + 0x30]
xorps xmm0, xmm0
mov rdi, qword [rsp + 0x60]
xorps xmm1, xmm1
mov r14, qword [rsp + 0x20]
mov qword [0x1806b7aa0], rax
mov qword [0x1806b7ab0], rax
mov word [0x1806b7ab8], ax
movups xmmword [0x1806b7abc], xmm0
movups xmmword [0x1806b7acc], xmm1
add rsp, 0x38
pop r15
pop rsi
pop rbp
pop rbx
ret
movzx ecx, word [r14 + 4]
call fcn.180007da0
mov rcx, rbx
call fcn.18000efe0
inc word [0x1806b7584]
inc word [0x1806b7580]
mov r14, qword [rsp + 0x20]
xor al, al
add rsp, 0x38
pop r15
pop rsi
pop rbp
pop rbx
ret