Function at 0x10009b80
Capabilities:
Enumerate pe sections
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
movsxd rbx, dword [rcx + 0x3c]
add rbx, rcx
mov rsi, rcx
mov r12, r8
or rcx, 0xffffffffffffffff
mov eax, dword [rbx + 0x50]
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea r9, [rsp + 0x48]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], rax
call fcn.1002c450
mov r8d, eax
xor eax, eax
test r8d, r8d
jne 0x10009e8e
mov rcx, qword [rsp + 0x40]
mov r8d, dword [rbx + 0x54]
mov rdx, rsi
call fcn.1001dfb0
movzx eax, word [rbx + 0x14]
movzx ecx, word [rbx + 6]
lea rax, [rbx + rax + 0x18]
dec ecx
mov rdx, qword [rsp + 0x40]
cmp ecx, 0xffffffff
je 0x10009c35
mov r13d, dword [rax + 0xc]
mov r8d, dword [rax + 0x14]
mov r9d, dword [rax + 0x10]
add r13, rdx
add r8, rsi
xor edx, edx
cmp r9, rdx
je 0x10009c2f
mov r10b, byte [r8 + rdx]
mov byte [r13 + rdx], r10b
inc rdx
jmp 0x10009c1c
add rax, 0x28
jmp 0x10009bfc
mov r13d, dword [rbx + 0x90]
add r13, rdx
mov eax, dword [r13 + 0xc]
mov rcx, qword [rsp + 0x40]
test eax, eax
je 0x10009cdc
add rcx, rax
call fcn.100142a0
mov ebp, dword [r13]
mov edi, dword [r13 + 0x10]
mov rsi, rax
mov rax, qword [rsp + 0x40]
add rbp, rax
add rdi, rax
mov rcx, qword [rdi]
test rcx, rcx
je 0x10009cd3
test rbp, rbp
je 0x10009ca9
mov rax, qword [rbp]
test rax, rax
jns 0x10009ca9
movsxd rdx, dword [rsi + 0x3c]
movzx eax, ax
mov edx, dword [rsi + rdx + 0x88]
add rdx, rsi
mov ecx, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x10]
add rcx, rsi
sub rax, rdx
mov eax, dword [rcx + rax*4]
add rax, rsi
jmp 0x10009cc1
add rcx, qword [rsp + 0x40]
add rcx, 2
call fcn.10014560
mov rdx, rsi
mov ecx, eax
call fcn.1000a020
mov qword [rdi], rax
add rdi, 8
test rbp, rbp
je 0x10009c6e
add rbp, 8
jmp 0x10009c6e
add r13, 0x14
jmp 0x10009c3f
cmp dword [rbx + 0xb4], 0
jne 0x10009d1c
mov rcx, qword [rsp + 0x40]
mov edx, dword [rbx + 0x28]
lea rdi, [rsp + 0x58]
lea rbp, [rsp + 0x3c]
movsxd rax, dword [rcx + 0x3c]
add rdx, rcx
mov qword [r12], rdx
lea r12, [rsp + 0x50]
add rax, rcx
movzx edx, word [rax + 0x14]
movzx esi, word [rax + 6]
lea rbx, [rax + rdx + 0x18]
jmp 0x10009e60
mov r10, rcx
mov eax, dword [rbx + 0xb0]
sub r10, qword [rbx + 0x30]
mov r11, r10
add rcx, rax
shr r11, 0x10
mov edx, dword [rcx + 4]
mov rax, qword [rsp + 0x40]
test edx, edx
je 0x10009ce5
mov r8d, dword [rcx]
sub rdx, 8
lea r9, [rcx + 8]
shr rdx, 1
add rax, r8
dec rdx
cmp rdx, 0xffffffffffffffff
je 0x10009dc3
mov r8b, byte [r9 + 1]
and r8d, 0xfffffff0
cmp r8b, 0xa0
jne 0x10009d78
mov r8w, word [r9]
and r8d, 0xfff
add qword [r8 + rax], r10
jmp 0x10009dbd
cmp r8b, 0x30
jne 0x10009d8f
mov r8w, word [r9]
and r8d, 0xfff
add dword [r8 + rax], r10d
jmp 0x10009dbd
cmp r8b, 0x10
jne 0x10009da7
mov r8w, word [r9]
and r8d, 0xfff
add word [r8 + rax], r11w
jmp 0x10009dbd
cmp r8b, 0x20
jne 0x10009dbd
mov r8w, word [r9]
and r8d, 0xfff
add word [r8 + rax], r10w
add r9, 2
jmp 0x10009d50
mov eax, dword [rcx + 4]
add rcx, rax
jmp 0x10009d33
mov eax, dword [rbx + 0xc]
add rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov eax, dword [rbx + 8]
mov qword [rsp + 0x58], rax
mov eax, dword [rbx + 0x24]
mov edx, eax
mov ecx, eax
shr edx, 0x1f
shl edx, 3
mov dword [rsp + 0x3c], edx
and ecx, 0x40000000
je 0x10009e07
cdq
and edx, 2
add edx, 2
mov dword [rsp + 0x3c], edx
mov r8d, eax
and r8d, 0x20000000
je 0x10009e1e
cdq
and edx, 0x70
add edx, 0x10
mov dword [rsp + 0x3c], edx
mov edx, eax
and edx, 0x60000000
cmp edx, 0x60000000
jne 0x10009e36
mov dword [rsp + 0x3c], 0x20
shr eax, 0x1f
test r8d, r8d
setne dl
test dl, al
jne 0x10009e6d
mov qword [rsp + 0x20], rbp
mov r9d, dword [rsp + 0x3c]
mov r8, rdi
mov rdx, r12
or rcx, 0xffffffffffffffff
add rbx, 0x28
call fcn.1002cf00
dec esi
cmp esi, 0xffffffff
jne 0x10009dce
jmp 0x10009e7b
test ecx, ecx
je 0x10009e43
mov dword [rsp + 0x3c], 0x40
jmp 0x10009e43
xor r8d, r8d
xor edx, edx
or rcx, 0xffffffffffffffff
call fcn.1002cb00
mov rax, qword [rsp + 0x40]
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret