Function at 0x140018ba0
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, dword [rcx + 0x3c]
movzx edx, word [rcx + rax + 6]
test rdx, rdx
je 0x140018f13
lea r8, [rcx + rax]
movzx eax, word [rcx + rax + 0x14]
lea r9, [r8 + rax]
add rax, r8
add rax, 0x18
lea rdx, [rdx + rdx*4]
lea rdx, [r9 + rdx*8]
add rdx, 0x18
mov r10d, dword [0x14012fa9c]
xor r8d, r8d
vpbroadcastb ymm0, byte [0x1400f802f]
xor r9d, r9d
jmp 0x140018c0d
add rax, 0x28
cmp rax, rdx
je 0x140018f03
test byte [rax + 0x27], 0x20
je 0x140018c00
mov r14d, dword [rax + 0x10]
cmp r14, 0xb
jb 0x140018c00
mov edi, dword [rax + 0x14]
add rdi, rcx
lea r11, [rdi + r14]
lea rsi, [r11 - 0xa]
cmp rsi, rdi
jbe 0x140018d27
cmp dword [rdi + 7], 0xb77d8944
je 0x140018eb0
lea rbx, [rdi + 0xb]
cmp r14d, 0x35
jb 0x140018cd5
cmp r14d, 0x95
jb 0x140018cac
lea r15, [r14 + rdi]
add r15, 0xffffffffffffff76
nop word cs:[rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [rbx]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140018cf2
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x20]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140018cfb
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x40]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140018d08
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x60]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140018d15
sub rbx, 0xffffffffffffff80
cmp rbx, r15
jbe 0x140018c70
add rdi, r14
add rdi, 0xffffffffffffffd6
cmp rbx, rdi
ja 0x140018cd5
nop dword [rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [rbx]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140018cf2
add rbx, 0x20
cmp rbx, rdi
jbe 0x140018cc0
cmp rbx, rsi
jae 0x140018d20
mov rdi, rsi
sub rdi, rbx
cmp byte [rbx], 0xb7
je 0x140018d20
inc rbx
dec rdi
jne 0x140018ce0
mov rbx, rsi
jmp 0x140018d20
tzcnt edi, ebp
add rbx, rdi
jmp 0x140018d20
tzcnt edi, ebp
add rbx, rdi
add rbx, 0x20
jmp 0x140018d20
tzcnt edi, ebp
add rbx, rdi
add rbx, 0x40
jmp 0x140018d20
tzcnt edi, ebp
add rbx, rdi
add rbx, 0x60
add rbx, 0xfffffffffffffff6
mov rdi, rbx
cmp rdi, rsi
jae 0x140018c00
lea rbx, [r11 - 0x2a]
lea r14, [r11 - 0x8a]
mov ebp, r10d
jmp 0x140018d58
tzcnt r15d, r15d
add rdi, r15
lea r15, [rdi - 0xa]
cmp rdi, r11
mov rdi, r15
jae 0x140018c00
movzx r15d, word [rdi]
cmp r15d, 0x8b44
je 0x140018e49
add rdi, 0xb
cmp rbx, rdi
jb 0x140018e1e
cmp r14, rdi
jb 0x140018dd4
nop dword [rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [rdi]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140018d40
vpcmpeqb ymm1, ymm0, ymmword [rdi + 0x20]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140018deb
vpcmpeqb ymm1, ymm0, ymmword [rdi + 0x40]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140018dfc
vpcmpeqb ymm1, ymm0, ymmword [rdi + 0x60]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140018e0d
sub rdi, 0xffffffffffffff80
cmp rdi, r14
jbe 0x140018d80
jmp 0x140018dd4
add rdi, 0x20
cmp rdi, rbx
ja 0x140018e1e
vpcmpeqb ymm1, ymm0, ymmword [rdi]
vpmovmskb r15d, ymm1
test r15d, r15d
je 0x140018dd0
jmp 0x140018d40
tzcnt r15d, r15d
add rdi, r15
add rdi, 0x20
jmp 0x140018d48
tzcnt r15d, r15d
add rdi, r15
add rdi, 0x40
jmp 0x140018d48
tzcnt r15d, r15d
add rdi, r15
add rdi, 0x60
jmp 0x140018d48
cmp rdi, rsi
jae 0x140018d48
mov r15, rsi
sub r15, rdi
nop dword [rax]
cmp byte [rdi], 0xb7
je 0x140018d48
inc rdi
dec r15
jne 0x140018e30
mov rdi, rsi
jmp 0x140018d48
movzx r15d, word [rdi + 7]
cmp r15d, 0x8944
jne 0x140018d69
cmp byte [rdi + 9], 0x7d
jne 0x140018d69
cmp byte [rdi + 2], 0xb8
jne 0x140018d69
lea r15, [rdi + 3]
mov r12, r11
sub r12, r15
cmp r12, 4
jb 0x140018d69
mov r10d, dword [r15]
cmp ebp, r10d
movzx ebp, r9b
mov r9d, 1
cmove r9d, ebp
test r8, r8
cmove r9d, ebp
mov dword [0x14012fa9c], r10d
inc r8
mov ebp, r10d
jmp 0x140018d69
movzx ebx, word [rdi]
cmp ebx, 0x8b44
jne 0x140018c41
cmp byte [rdi + 2], 0xb8
jne 0x140018c41
lea rbx, [r14 - 7]
cmp rbx, 0xfffffffffffffffb
ja 0x140018c41
mov ebx, dword [rdi + 3]
cmp r10d, ebx
movzx r10d, r9b
mov r9d, 1
cmove r9d, r10d
test r8, r8
cmove r9d, r10d
mov dword [0x14012fa9c], ebx
inc r8
mov r10d, ebx
jmp 0x140018c41
test r8, r8
setne cl
test r9b, r9b
sete al
and al, cl
jmp 0x140018f15
xor eax, eax
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
vzeroupper
ret