Function at 0x140018f30
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, dword [rcx + 0x3c]
movzx edx, word [rcx + rax + 6]
test rdx, rdx
je 0x14001931b
lea r8, [rcx + rax]
movzx eax, word [rcx + rax + 0x14]
lea r9, [r8 + rax]
add rax, r8
add rax, 0x18
lea rdx, [rdx + rdx*4]
lea rdx, [r9 + rdx*8]
add rdx, 0x18
mov r11d, dword [0x14012faa0]
xor r8d, r8d
movabs r9, 0xc3c1450f48c98548
vpbroadcastb ymm0, byte [0x1400f8030]
xor r10d, r10d
jmp 0x140018f9d
add rax, 0x28
cmp rax, rdx
je 0x14001930b
test byte [rax + 0x27], 0x20
je 0x140018f90
mov r14d, dword [rax + 0x10]
cmp r14, 0x1d
jb 0x140018f90
mov ebx, dword [rax + 0x14]
add rbx, rcx
lea rsi, [rbx + r14]
lea rdi, [rsi - 0x1c]
cmp rdi, rbx
jbe 0x1400190d7
cmp qword [rbx + 0x15], r9
je 0x140019284
lea r15, [rbx + 0xa]
cmp r14d, 0x46
jb 0x140019066
cmp r14d, 0xa6
jb 0x140019040
lea r12, [r14 + rbx]
add r12, 0xffffffffffffff64
vpcmpeqb ymm1, ymm0, ymmword [r15]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140019093
vpcmpeqb ymm1, ymm0, ymmword [r15 + 0x20]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x14001909c
vpcmpeqb ymm1, ymm0, ymmword [r15 + 0x40]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x1400190a9
vpcmpeqb ymm1, ymm0, ymmword [r15 + 0x60]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x1400190b6
sub r15, 0xffffffffffffff80
cmp r15, r12
jbe 0x140018ff0
add rbx, r14
add rbx, 0xffffffffffffffc4
cmp r15, rbx
ja 0x140019066
nop dword [rax]
vpcmpeqb ymm1, ymm0, ymmword [r15]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140019093
add r15, 0x20
cmp r15, rbx
jbe 0x140019050
cmp r15, rdi
jae 0x1400190d0
mov rbx, rdi
sub rbx, r15
nop word cs:[rax + rax]
cmp byte [r15], 0x88
je 0x1400190d0
inc r15
dec rbx
jne 0x140019080
mov r15, rdi
jmp 0x1400190d0
tzcnt ebx, ebp
add r15, rbx
jmp 0x1400190d0
tzcnt ebx, ebp
add r15, rbx
add r15, 0x20
jmp 0x1400190d0
tzcnt ebx, ebp
add r15, rbx
add r15, 0x40
jmp 0x1400190d0
tzcnt ebx, ebp
add r15, rbx
add r15, 0x60
nop word cs:[rax + rax]
add r15, 0xfffffffffffffff7
mov rbx, r15
cmp rbx, rdi
jae 0x140018f90
lea r14, [rsi - 0x3c]
lea r15, [rsi - 0x9c]
mov ebp, r11d
jmp 0x140019105
tzcnt r12d, r12d
add rbx, r12
add rbx, 0xfffffffffffffff7
cmp rbx, rdi
jae 0x140018f90
cmp qword [rbx + 0x15], r9
je 0x1400191f9
add rbx, 0xa
cmp r14, rbx
jb 0x1400191ce
cmp r15, rbx
jb 0x140019184
nop word cs:[rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [rbx]
vpmovmskb r12d, ymm1
test r12d, r12d
jne 0x1400190f0
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x20]
vpmovmskb r12d, ymm1
test r12d, r12d
jne 0x14001919b
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x40]
vpmovmskb r12d, ymm1
test r12d, r12d
jne 0x1400191ac
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x60]
vpmovmskb r12d, ymm1
test r12d, r12d
jne 0x1400191bd
sub rbx, 0xffffffffffffff80
cmp rbx, r15
jbe 0x140019130
jmp 0x140019184
add rbx, 0x20
cmp rbx, r14
ja 0x1400191ce
vpcmpeqb ymm1, ymm0, ymmword [rbx]
vpmovmskb r12d, ymm1
test r12d, r12d
je 0x140019180
jmp 0x1400190f0
tzcnt r12d, r12d
add rbx, r12
add rbx, 0x20
jmp 0x1400190f8
tzcnt r12d, r12d
add rbx, r12
add rbx, 0x40
jmp 0x1400190f8
tzcnt r12d, r12d
add rbx, r12
add rbx, 0x60
jmp 0x1400190f8
cmp rbx, rdi
jae 0x1400190f8
mov r12, rdi
sub r12, rbx
nop dword [rax]
cmp byte [rbx], 0x88
je 0x1400190f8
inc rbx
dec r12
jne 0x1400191e0
mov rbx, rdi
jmp 0x1400190f8
movzx r12d, word [rbx]
cmp r12d, 0x8b48
jne 0x14001910f
movzx r12d, word [rbx + 0xe]
cmp r12d, 0x8d48
jne 0x14001910f
movzx r12d, word [rbx + 7]
cmp r12d, 0x8b48
jne 0x14001910f
cmp byte [rbx + 0x10], 5
jne 0x14001910f
cmp byte [rbx + 2], 0x81
jne 0x14001910f
lea r12, [rbx + 3]
mov r13, rsi
sub r13, r12
cmp r13, 4
jb 0x14001910f
mov r11d, dword [r12]
cmp ebp, r11d
movzx ebp, r10b
mov r10d, 1
cmove r10d, ebp
test r8, r8
cmove r10d, ebp
mov dword [0x14012faa0], r11d
inc r8
mov ebp, r11d
jmp 0x14001910f
movzx ebp, word [rbx + 7]
cmp ebp, 0x8b48
jne 0x140018fce
movzx ebp, word [rbx + 0xe]
cmp ebp, 0x8d48
jne 0x140018fce
movzx ebp, word [rbx]
cmp ebp, 0x8b48
jne 0x140018fce
cmp byte [rbx + 0x10], 5
jne 0x140018fce
cmp byte [rbx + 9], 0x88
jne 0x140018fce
cmp byte [rbx + 2], 0x81
jne 0x140018fce
lea r15, [r14 - 7]
cmp r15, 0xfffffffffffffffb
ja 0x140018fce
mov ebp, dword [rbx + 3]
cmp r11d, ebp
movzx r11d, r10b
mov r10d, 1
cmove r10d, r11d
test r8, r8
cmove r10d, r11d
mov dword [0x14012faa0], ebp
inc r8
mov r11d, ebp
jmp 0x140018fce
test r8, r8
setne cl
test r10b, r10b
sete al
and al, cl
jmp 0x14001931d
xor eax, eax
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
vzeroupper
ret