Function at 0x140010f70
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x10
mov eax, dword [rcx + 0x3c]
cmp dword [rcx + rax + 0x8c], 0
je 0x1400111ee
add rax, rcx
movzx r8d, word [rax + 6]
test r8, r8
je 0x1400111ee
mov r9d, dword [rax + 0x88]
movzx r10d, word [rax + 0x14]
add rax, r10
add rax, 0x18
shl r8, 3
lea r11, [r8 + r8*4]
mov r10, rax
jmp 0x140010fde
add r10, 0x28
add r11, 0xffffffffffffffd8
je 0x1400111ee
mov edi, dword [r10 + 0xc]
mov esi, r9d
sub esi, edi
jb 0x140010fd0
add edi, dword [r10 + 8]
cmp edi, r9d
jbe 0x140010fd0
add esi, dword [r10 + 0x14]
mov r9d, dword [rcx + rsi + 0x18]
mov r11d, dword [rcx + rsi + 0x1c]
lea rdi, [r8 + r8*4]
xor r15d, r15d
mov rbx, rax
jmp 0x14001101a
add rbx, 0x28
add rdi, 0xffffffffffffffd8
je 0x140011034
mov ebp, dword [rbx + 0xc]
mov r10d, r11d
sub r10d, ebp
jb 0x140011010
add ebp, dword [rbx + 8]
cmp ebp, r11d
jbe 0x140011010
add r10d, dword [rbx + 0x14]
mov r15, r10
add r15, rcx
mov edi, dword [rcx + rsi + 0x24]
lea rbx, [r8 + r8*4]
xor r12d, r12d
mov r14, rax
jmp 0x14001105a
add r14, 0x28
add rbx, 0xffffffffffffffd8
je 0x140011076
mov r11d, dword [r14 + 0xc]
mov r10d, edi
sub r10d, r11d
jb 0x140011050
add r11d, dword [r14 + 8]
cmp r11d, edi
jbe 0x140011050
add r10d, dword [r14 + 0x14]
mov r12, r10
add r12, rcx
mov edi, dword [rcx + rsi + 0x20]
lea rbx, [r8 + r8*4]
xor esi, esi
mov r14, rax
jmp 0x14001109a
add r14, 0x28
add rbx, 0xffffffffffffffd8
je 0x1400110b6
mov r11d, dword [r14 + 0xc]
mov r10d, edi
sub r10d, r11d
jb 0x140011090
add r11d, dword [r14 + 8]
cmp r11d, edi
jbe 0x140011090
add r10d, dword [r14 + 0x14]
mov rsi, r10
test r9d, r9d
je 0x1400111ee
mov qword [rsp], r12
mov qword [rsp + 8], r15
add rsi, rcx
lea r10, [r8 + r8*4]
xor edi, edi
movabs r14, 0x6f72507465477350
jmp 0x1400110ec
inc rdi
cmp rdi, r9
je 0x1400111ee
mov r11d, dword [rsi + rdi*4]
mov rbx, r10
mov r13, rax
jmp 0x14001110a
add r13, 0x28
add rbx, 0xffffffffffffffd8
je 0x140011126
mov r15d, dword [r13 + 0xc]
mov r12d, r11d
sub r12d, r15d
jb 0x140011100
add r15d, dword [r13 + 8]
cmp r15d, r11d
jbe 0x140011100
add r12d, dword [r13 + 0x14]
mov ebp, r12d
mov r11d, ebp
lea r13, [rcx + r11]
cmp byte [rcx + r11], 0
mov r11, r13
je 0x14001114d
mov rbx, r13
nop word [rax + rax]
lea r11, [rbx + 1]
cmp byte [rbx + 1], 0
mov rbx, r11
jne 0x140011140
sub r11, r13
cmp r11, 0x1e
jne 0x1400110e0
cmp qword [r13], r14
jne 0x1400110e0
movabs r11, 0x336e695773736563
cmp qword [r13 + 8], r11
jne 0x1400110e0
movabs r11, 0x53776f646e695732
cmp qword [r13 + 0x10], r11
jne 0x1400110e0
cmp dword [r13 + 0x18], 0x69746174
jne 0x1400110e0
movzx r11d, word [r13 + 0x1c]
cmp r11d, 0x6e6f
jne 0x1400110e0
mov r9, qword [rsp]
movzx r9d, word [r9 + rdi*2]
mov r10, qword [rsp + 8]
mov r9d, dword [r10 + r9*4]
lea r10, [r8 + r8*4]
jmp 0x1400111c9
add rax, 0x28
xor r8d, r8d
add r10, 0xffffffffffffffd8
je 0x1400111f1
mov r11d, dword [rax + 0xc]
mov r8d, r9d
sub r8d, r11d
jb 0x1400111bc
add r11d, dword [rax + 8]
cmp r11d, r9d
jbe 0x1400111bc
add r8d, dword [rax + 0x14]
movzx eax, word [rcx + r8]
cmp eax, 0x8b48
je 0x140011206
xor r8d, r8d
mov byte [rdx + 4], r8b
add rsp, 0x10
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp byte [rcx + r8 + 7], 0xc3
jne 0x1400111ee
cmp byte [rcx + r8 + 2], 0x81
jne 0x1400111ee
mov eax, dword [r8 + rcx + 3]
mov dword [rdx], eax
mov r8b, 1
jmp 0x1400111f1