Function at 0x140011530
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x10
mov eax, dword [rcx + 0x3c]
cmp dword [rcx + rax + 0x8c], 0
je 0x14001178e
add rax, rcx
movzx r8d, word [rax + 6]
test r8, r8
je 0x14001178e
mov r9d, dword [rax + 0x88]
movzx r10d, word [rax + 0x14]
add rax, r10
add rax, 0x18
shl r8, 3
lea r11, [r8 + r8*4]
mov r10, rax
jmp 0x14001159e
add r10, 0x28
add r11, 0xffffffffffffffd8
je 0x14001178e
mov edi, dword [r10 + 0xc]
mov esi, r9d
sub esi, edi
jb 0x140011590
add edi, dword [r10 + 8]
cmp edi, r9d
jbe 0x140011590
add esi, dword [r10 + 0x14]
mov r9d, dword [rcx + rsi + 0x18]
mov r11d, dword [rcx + rsi + 0x1c]
lea rdi, [r8 + r8*4]
xor r15d, r15d
mov rbx, rax
jmp 0x1400115da
add rbx, 0x28
add rdi, 0xffffffffffffffd8
je 0x1400115f4
mov ebp, dword [rbx + 0xc]
mov r10d, r11d
sub r10d, ebp
jb 0x1400115d0
add ebp, dword [rbx + 8]
cmp ebp, r11d
jbe 0x1400115d0
add r10d, dword [rbx + 0x14]
mov r15, r10
add r15, rcx
mov edi, dword [rcx + rsi + 0x24]
lea rbx, [r8 + r8*4]
xor r12d, r12d
mov r14, rax
jmp 0x14001161a
add r14, 0x28
add rbx, 0xffffffffffffffd8
je 0x140011636
mov r11d, dword [r14 + 0xc]
mov r10d, edi
sub r10d, r11d
jb 0x140011610
add r11d, dword [r14 + 8]
cmp r11d, edi
jbe 0x140011610
add r10d, dword [r14 + 0x14]
mov r12, r10
add r12, rcx
mov edi, dword [rcx + rsi + 0x20]
lea rbx, [r8 + r8*4]
xor esi, esi
mov r14, rax
jmp 0x14001165a
add r14, 0x28
add rbx, 0xffffffffffffffd8
je 0x140011676
mov r11d, dword [r14 + 0xc]
mov r10d, edi
sub r10d, r11d
jb 0x140011650
add r11d, dword [r14 + 8]
cmp r11d, edi
jbe 0x140011650
add r10d, dword [r14 + 0x14]
mov rsi, r10
test r9d, r9d
je 0x14001178e
mov qword [rsp], r12
mov qword [rsp + 8], r15
add rsi, rcx
lea r10, [r8 + r8*4]
xor edi, edi
movabs r14, 0x6f72507465477350
jmp 0x1400116ac
inc rdi
cmp rdi, r9
je 0x14001178e
mov r11d, dword [rsi + rdi*4]
mov rbx, r10
mov r12, rax
jmp 0x1400116ca
add r12, 0x28
add rbx, 0xffffffffffffffd8
je 0x1400116e9
mov r15d, dword [r12 + 0xc]
mov r13d, r11d
sub r13d, r15d
jb 0x1400116c0
add r15d, dword [r12 + 8]
cmp r15d, r11d
jbe 0x1400116c0
add r13d, dword [r12 + 0x14]
mov ebp, r13d
mov r11d, ebp
lea r12, [rcx + r11]
cmp byte [rcx + r11], 0
mov r11, r12
je 0x14001170d
mov rbx, r12
nop dword [rax]
lea r11, [rbx + 1]
cmp byte [rbx + 1], 0
mov rbx, r11
jne 0x140011700
sub r11, r12
cmp r11, 0x14
jne 0x1400116a0
cmp qword [r12], r14
jne 0x1400116a0
movabs r11, 0x7469784573736563
cmp qword [r12 + 8], r11
jne 0x1400116a0
cmp dword [r12 + 0x10], 0x656d6954
jne 0x1400116a0
mov r9, qword [rsp]
movzx r9d, word [r9 + rdi*2]
mov r10, qword [rsp + 8]
mov r9d, dword [r10 + r9*4]
lea r10, [r8 + r8*4]
jmp 0x140011765
add rax, 0x28
xor r8d, r8d
add r10, 0xffffffffffffffd8
je 0x140011791
mov r11d, dword [rax + 0xc]
mov r8d, r9d
sub r8d, r11d
jb 0x140011758
add r11d, dword [rax + 8]
cmp r11d, r9d
jbe 0x140011758
add r8d, dword [rax + 0x14]
movabs rax, 0x18825048b4865
cmp qword [rcx + r8], rax
je 0x1400117a6
xor r8d, r8d
mov byte [rdx + 4], r8b
add rsp, 0x10
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [rcx + r8 + 8]
cmp eax, 0x408b4800
je 0x1400117dd
cmp eax, 0x808b4800
jne 0x14001178e
movzx eax, word [rcx + r8 + 0x10]
cmp eax, 0x8b48
jne 0x14001178e
cmp byte [rcx + r8 + 0x17], 0xc3
jne 0x14001178e
cmp byte [rcx + r8 + 0x12], 0x80
jne 0x14001178e
mov eax, 0x13
jmp 0x1400117ff
movzx eax, word [rcx + r8 + 0xd]
cmp eax, 0x8b48
jne 0x14001178e
cmp byte [rcx + r8 + 0x14], 0xc3
jne 0x14001178e
cmp byte [rcx + r8 + 0xf], 0x80
jne 0x14001178e
mov eax, 0x10
add rax, r8
mov eax, dword [rcx + rax]
mov dword [rdx], eax
mov r8b, 1
jmp 0x140011791