Function at 0x140014e50
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov rax, qword [rcx]
mov r11d, dword [rax + 0x3c]
movzx r10d, word [rax + r11 + 6]
test r10, r10
je 0x14001533a
lea rcx, [rax + r11]
movzx r8d, word [rax + r11 + 0x14]
lea r9, [rcx + r8]
add r8, rcx
add r8, 0x18
lea rsi, [r10 + r10*4]
lea r9, [r9 + rsi*8]
add r9, 0x18
add r11, rax
add r11, 0x18
mov qword [rsp + 0x30], r11
shl r10, 3
lea r10, [r10 + r10*4]
mov qword [rsp + 0x28], r10
xor r11d, r11d
movabs rdi, 0x248b486500000010
movabs rbx, 0x2524894865f8010f
vpbroadcastb ymm0, byte [0x1400f8027]
mov dword [rsp + 8], 0
mov r12, r8
jmp 0x140014eed
add r12, 0x28
cmp r12, r9
je 0x140015322
test byte [r12 + 0x27], 0x20
je 0x140014ee0
mov r10d, dword [r12 + 0x10]
cmp r10, 0x23
jb 0x140014ee0
mov r14d, dword [r12 + 0x14]
lea r15, [rax + r14]
lea r13, [r15 + r10]
add r13, 0xffffffffffffffde
cmp r13, r15
jbe 0x14001523d
cmp qword [r15 + 8], rdi
je 0x14001524e
lea r14, [r15 + 0x18]
cmp r10d, 0x5a
jb 0x140014fc6
cmp r10d, 0xba
jb 0x140014fa0
lea rsi, [r10 + r15]
add rsi, 0xffffffffffffff5e
nop word cs:[rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [r14]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140014ff3
vpcmpeqb ymm1, ymm0, ymmword [r14 + 0x20]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140014ffc
vpcmpeqb ymm1, ymm0, ymmword [r14 + 0x40]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140015009
vpcmpeqb ymm1, ymm0, ymmword [r14 + 0x60]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140015016
sub r14, 0xffffffffffffff80
cmp r14, rsi
jbe 0x140014f50
lea rsi, [r10 + r15]
add rsi, 0xffffffffffffffbe
cmp r14, rsi
ja 0x140014fc6
nop dword [rax]
vpcmpeqb ymm1, ymm0, ymmword [r14]
vpmovmskb ebp, ymm1
test ebp, ebp
jne 0x140014ff3
add r14, 0x20
cmp r14, rsi
jbe 0x140014fb0
cmp r14, r13
jae 0x140015030
mov rsi, r13
sub rsi, r14
nop word cs:[rax + rax]
cmp byte [r14], 0x65
je 0x140015030
inc r14
dec rsi
jne 0x140014fe0
mov r14, r13
jmp 0x140015030
tzcnt esi, ebp
add r14, rsi
jmp 0x140015030
tzcnt esi, ebp
add r14, rsi
add r14, 0x20
jmp 0x140015030
tzcnt esi, ebp
add r14, rsi
add r14, 0x40
jmp 0x140015030
tzcnt esi, ebp
add r14, rsi
add r14, 0x60
nop word cs:[rax + rax]
add r14, 0xffffffffffffffe9
cmp r14, r13
jae 0x140014ee0
add r15, r10
lea r10, [r15 - 0x42]
add r15, 0xffffffffffffff5e
jmp 0x140015064
tzcnt esi, esi
add r14, rsi
add r14, 0xffffffffffffffe9
cmp r14, r13
jae 0x140014ee0
cmp qword [r14], rbx
je 0x14001514a
add r14, 0x18
cmp r10, r14
jb 0x14001511b
cmp r15, r14
jb 0x1400150d4
nop
vpcmpeqb ymm1, ymm0, ymmword [r14]
vpmovmskb esi, ymm1
test esi, esi
jne 0x140015050
vpcmpeqb ymm1, ymm0, ymmword [r14 + 0x20]
vpmovmskb esi, ymm1
test esi, esi
jne 0x1400150eb
vpcmpeqb ymm1, ymm0, ymmword [r14 + 0x40]
vpmovmskb esi, ymm1
test esi, esi
jne 0x1400150fb
vpcmpeqb ymm1, ymm0, ymmword [r14 + 0x60]
vpmovmskb esi, ymm1
test esi, esi
jne 0x14001510b
sub r14, 0xffffffffffffff80
cmp r14, r15
jbe 0x140015080
jmp 0x1400150d4
add r14, 0x20
cmp r14, r10
ja 0x14001511b
vpcmpeqb ymm1, ymm0, ymmword [r14]
vpmovmskb esi, ymm1
test esi, esi
je 0x1400150d0
jmp 0x140015050
tzcnt esi, esi
add r14, rsi
add r14, 0x20
jmp 0x140015057
tzcnt esi, esi
add r14, rsi
add r14, 0x40
jmp 0x140015057
tzcnt esi, esi
add r14, rsi
add r14, 0x60
jmp 0x140015057
cmp r14, r13
jae 0x140015057
mov rsi, r13
sub rsi, r14
nop word [rax + rax]
cmp byte [r14], 0x65
je 0x140015057
inc r14
dec rsi
jne 0x140015130
mov r14, r13
jmp 0x140015057
cmp qword [r14 + 8], rdi
jne 0x14001506d
movabs rsi, 0x41000000102534ff
cmp qword [r14 + 0x18], rsi
jne 0x14001506d
cmp dword [r14 + 0x10], 0x1a825
jne 0x14001506d
movzx esi, word [r14 + 0x14]
cmp esi, 0x6a00
jne 0x14001506d
movzx esi, word [r14 + 0x20]
cmp esi, 0x6a53
jne 0x14001506d
cmp byte [r14 + 0x22], 0x33
jne 0x14001506d
cmp byte [r14 + 0x16], 0x2b
jne 0x14001506d
mov rsi, r14
sub rsi, rax
mov rbp, rsi
mov qword [rsp + 0x18], rsi
shr rsi, 0x20
jne 0x14001506d
mov rsi, qword [rsp + 0x28]
mov qword [rsp + 0x20], rsi
mov rsi, r8
mov ebp, dword [rsi + 0x14]
mov dword [rsp + 0x10], ebp
mov rbp, qword [rsp + 0x18]
sub ebp, dword [rsp + 0x10]
mov dword [rsp + 4], ebp
jb 0x1400151f6
mov ebp, dword [rsp + 0x10]
add ebp, dword [rsi + 0x10]
cmp ebp, dword [rsp + 0x18]
ja 0x140015207
add rsi, 0x28
add qword [rsp + 0x20], 0xffffffffffffffd8
jne 0x1400151d3
jmp 0x14001506d
mov ebp, dword [rsp + 4]
add ebp, dword [rsi + 0xc]
mov dword [rsp + 4], ebp
cmp dword [rsp + 0xc], ebp
movzx esi, byte [rsp + 8]
mov ebp, 1
cmove ebp, esi
test r11, r11
cmove ebp, esi
mov dword [rsp + 8], ebp
inc r11
mov esi, dword [rsp + 4]
mov dword [rsp + 0xc], esi
jmp 0x14001506d
mov r14, r15
cmp r14, r13
jb 0x14001503d
jmp 0x140014ee0
cmp qword [r15], rbx
jne 0x140014f24
movabs rsi, 0x41000000102534ff
cmp qword [r15 + 0x18], rsi
jne 0x140014f24
movabs rsi, 0x652b6a000001a825
cmp qword [r15 + 0x10], rsi
jne 0x140014f24
movzx esi, word [r15 + 0x20]
cmp esi, 0x6a53
jne 0x140014f24
cmp byte [r15 + 0x22], 0x33
jne 0x140014f24
movzx ebp, word [rcx + 6]
test rbp, rbp
je 0x140014f24
movzx esi, word [rcx + 0x14]
add rsi, qword [rsp + 0x30]
shl rbp, 3
lea rbp, [rbp + rbp*4]
mov qword [rsp + 0x10], rbp
mov ebp, dword [rsi + 0x14]
mov dword [rsp + 4], ebp
mov ebp, r14d
sub ebp, dword [rsp + 4]
mov dword [rsp + 0x18], ebp
jb 0x1400152df
mov ebp, dword [rsp + 4]
add ebp, dword [rsi + 0x10]
cmp ebp, r14d
ja 0x1400152f0
add rsi, 0x28
add qword [rsp + 0x10], 0xffffffffffffffd8
jne 0x1400152bf
jmp 0x140014f24
mov r14d, dword [rsp + 0x18]
add r14d, dword [rsi + 0xc]
cmp dword [rsp + 0xc], r14d
movzx esi, byte [rsp + 8]
mov ebp, 1
cmove ebp, esi
test r11, r11
cmove ebp, esi
mov dword [rsp + 8], ebp
inc r11
mov dword [rsp + 0xc], r14d
jmp 0x140014f24
xor eax, eax
test r11, r11
je 0x14001533c
cmp byte [rsp + 8], 0
jne 0x14001533c
mov eax, dword [rsp + 0xc]
mov dword [rdx], eax
mov al, 1
jmp 0x14001533c
xor eax, eax
mov byte [rdx + 4], al
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
vzeroupper
ret