Function at 0x140011a50
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov ecx, dword [rax + 0x3c]
movzx r9d, word [rax + rcx + 6]
test r9, r9
je 0x140011e72
mov qword [rsp + 0x10], rdx
lea rdx, [rax + rcx]
movzx ecx, word [rax + rcx + 0x14]
lea r8, [rdx + rcx]
add rcx, rdx
add rcx, 0x18
lea rdx, [r9 + r9*4]
lea r8, [r8 + rdx*8]
add r8, 0x18
xor edx, edx
mov qword [rsp], rdx
movabs r11, 0x8b4d40ec83485340
movabs rsi, 0xc13b0242b70f0189
vpbroadcastb ymm0, byte [0x1400f801f]
xor ebx, ebx
mov r14, rcx
jmp 0x140011add
add r14, 0x28
cmp r14, r8
je 0x140011e49
test byte [r14 + 0x27], 0x20
je 0x140011ad0
mov edi, dword [r14 + 0x10]
cmp rdi, 0x24
jb 0x140011ad0
mov r13d, dword [r14 + 0x14]
add r13, rax
lea r15, [rdi + r13]
lea r12, [r15 - 0x23]
cmp r12, r13
jbe 0x140011c17
cmp qword [r13], r11
je 0x140011dbb
lea rbp, [r13 + 0xf]
cmp edi, 0x52
jb 0x140011ba6
cmp edi, 0xb2
jb 0x140011b7d
lea r10, [rdi + r13]
add r10, 0xffffffffffffff5d
vpcmpeqb ymm1, ymm0, ymmword [rbp]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011bd3
vpcmpeqb ymm1, ymm0, ymmword [rbp + 0x20]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011bdc
vpcmpeqb ymm1, ymm0, ymmword [rbp + 0x40]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011be9
vpcmpeqb ymm1, ymm0, ymmword [rbp + 0x60]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011bf6
sub rbp, 0xffffffffffffff80
cmp rbp, r10
jbe 0x140011b30
lea r10, [rdi + r13]
add r10, 0xffffffffffffffbd
cmp rbp, r10
ja 0x140011ba6
nop word [rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [rbp]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011bd3
add rbp, 0x20
cmp rbp, r10
jbe 0x140011b90
cmp rbp, r12
jae 0x140011c10
mov r10, r12
sub r10, rbp
nop word cs:[rax + rax]
cmp byte [rbp], 0x91
je 0x140011c10
inc rbp
dec r10
jne 0x140011bc0
mov rbp, r12
jmp 0x140011c10
tzcnt edx, edx
add rbp, rdx
jmp 0x140011c10
tzcnt edx, edx
add rbp, rdx
add rbp, 0x20
jmp 0x140011c10
tzcnt edx, edx
add rbp, rdx
add rbp, 0x40
jmp 0x140011c10
tzcnt edx, edx
add rbp, rdx
add rbp, 0x60
nop word cs:[rax + rax]
add rbp, 0xfffffffffffffff2
mov r13, rbp
cmp r13, r12
jae 0x140011ad0
lea rdi, [r15 - 0x43]
lea rbp, [r15 - 0xa3]
jmp 0x140011c44
tzcnt edx, edx
add r13, rdx
add r13, 0xfffffffffffffff2
cmp r13, r12
jae 0x140011ad0
cmp qword [r13], r11
je 0x140011d2b
add r13, 0xf
cmp rdi, r13
jb 0x140011cfc
cmp rbp, r13
jb 0x140011cb4
vpcmpeqb ymm1, ymm0, ymmword [r13]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011c30
vpcmpeqb ymm1, ymm0, ymmword [r13 + 0x20]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011ccc
vpcmpeqb ymm1, ymm0, ymmword [r13 + 0x40]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011cdc
vpcmpeqb ymm1, ymm0, ymmword [r13 + 0x60]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140011cec
sub r13, 0xffffffffffffff80
cmp r13, rbp
jbe 0x140011c60
jmp 0x140011cb4
add r13, 0x20
cmp r13, rdi
ja 0x140011cfc
vpcmpeqb ymm1, ymm0, ymmword [r13]
vpmovmskb edx, ymm1
test edx, edx
je 0x140011cb0
jmp 0x140011c30
tzcnt edx, edx
add r13, rdx
add r13, 0x20
jmp 0x140011c37
tzcnt edx, edx
add r13, rdx
add r13, 0x40
jmp 0x140011c37
tzcnt edx, edx
add r13, rdx
add r13, 0x60
jmp 0x140011c37
cmp r13, r12
jae 0x140011c37
mov r10, r12
sub r10, r13
nop dword [rax + rax]
cmp byte [r13], 0x91
je 0x140011c37
inc r13
dec r10
jne 0x140011d10
mov r13, r12
jmp 0x140011c37
cmp qword [r13 + 0x1b], rsi
jne 0x140011c4e
movabs rdx, 0x410242b70f098b41
cmp qword [r13 + 0x13], rdx
jne 0x140011c4e
cmp dword [r13 + 8], 0xc28b4cd0
jne 0x140011c4e
movzx edx, word [r13 + 0xc]
cmp edx, 0x8b48
jne 0x140011c4e
cmp byte [r13 + 0x23], 0x77
jne 0x140011c4e
lea r10, [r13 + 0xf]
mov rdx, r15
sub rdx, r10
cmp rdx, 4
jb 0x140011c4e
mov edx, dword [r10]
mov dword [rsp + 0x1c], edx
cmp dword [rsp + 0xc], edx
movzx r10d, byte [rsp]
mov edx, 1
cmove edx, r10d
test rbx, rbx
cmove edx, r10d
mov qword [rsp], rdx
inc rbx
mov edx, dword [rsp + 0x1c]
mov dword [rsp + 0xc], edx
jmp 0x140011c4e
cmp qword [r13 + 0x1b], rsi
jne 0x140011b10
movabs rdx, 0x410242b70f098b41
cmp qword [r13 + 0x13], rdx
jne 0x140011b10
cmp dword [r13 + 8], 0xc28b4cd0
jne 0x140011b10
movzx edx, word [r13 + 0xc]
cmp edx, 0x8b48
jne 0x140011b10
cmp byte [r13 + 0x23], 0x77
jne 0x140011b10
cmp byte [r13 + 0xe], 0x91
jne 0x140011b10
lea rdx, [rdi - 0x13]
cmp rdx, 0xfffffffffffffffb
ja 0x140011b10
mov edx, dword [r13 + 0xf]
cmp dword [rsp + 0xc], edx
movzx r10d, byte [rsp]
mov ebp, 1
cmove ebp, r10d
test rbx, rbx
cmove ebp, r10d
mov qword [rsp], rbp
inc rbx
mov dword [rsp + 0xc], edx
jmp 0x140011b10
test rbx, rbx
je 0x140011e79
cmp byte [rsp], 0
jne 0x140011e79
mov eax, dword [rsp + 0xc]
movabs rcx, 0x100000000
or rcx, rax
mov rax, qword [rsp + 0x10]
mov qword [rax], rcx
jmp 0x140012253
xor eax, eax
jmp 0x140012250
test r9w, r9w
je 0x140012249
xor r9d, r9d
movabs r10, 0x5720247489481824
movabs r11, 0x6c894810245c8948
vpbroadcastb ymm0, byte [0x1400f8020]
movabs r14, 0x24848948c43348ff
xor ebp, ebp
jmp 0x140011ecd
add rcx, 0x28
cmp rcx, r8
je 0x14001222f
test byte [rcx + 0x27], 0x20
je 0x140011ec0
mov edi, dword [rcx + 0x10]
cmp rdi, 0x31
jb 0x140011ec0
mov r13d, dword [rcx + 0x14]
add r13, rax
lea r12, [rdi + r13]
lea rsi, [r12 - 0x30]
cmp rsi, r13
jbe 0x140011fe1
cmp qword [r13 + 8], r10
je 0x14001219e
lea rbx, [r13 + 0x1d]
cmp edi, 0x6d
jb 0x140011f85
cmp edi, 0xcd
jb 0x140011f60
lea rdx, [rdi + r13]
add rdx, 0xffffffffffffff50
nop dword [rax + rax]
vpcmpeqb ymm1, ymm0, ymmword [rbx]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140011fa2
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x20]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140011fa9
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x40]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140011fb7
vpcmpeqb ymm1, ymm0, ymmword [rbx + 0x60]
vpmovmskb r15d, ymm1
test r15d, r15d
jne 0x140011fc5
sub rbx, 0xffffffffffffff80
cmp rbx, rdx
jbe 0x140011f20
lea rdx, [rdi + r13]
add rdx, 0xffffffffffffffb0
cmp rbx, rdx
ja 0x140011f85
nop dword [rax]
vpcmpeqb ymm1, ymm0, ymmword [rbx]
vpmovmskb edi, ymm1
test edi, edi
jne 0x140011fd3
add rbx, 0x20
cmp rbx, rdx
jbe 0x140011f70
cmp rbx, rsi
jae 0x140011fda
mov rdx, rsi
sub rdx, rbx
cmp byte [rbx], 0xed
je 0x140011fda
inc rbx
dec rdx
jne 0x140011f90
mov rbx, rsi
jmp 0x140011fda
tzcnt edx, r15d
jmp 0x140011fd7
tzcnt edx, r15d
add rbx, rdx
add rbx, 0x20
jmp 0x140011fda
tzcnt edx, r15d
add rbx, rdx
add rbx, 0x40
jmp 0x140011fda
tzcnt edx, r15d
add rbx, rdx
add rbx, 0x60
jmp 0x140011fda
tzcnt edx, edi
add rbx, rdx
add rbx, 0xffffffffffffffe4
mov r13, rbx
cmp r13, rsi
jae 0x140011ec0
lea rdi, [r12 - 0x50]
lea rbx, [r12 - 0xb0]
jmp 0x140012014
tzcnt edx, edx
add r13, rdx
add r13, 0xffffffffffffffe4
cmp r13, rsi
jae 0x140011ec0
cmp qword [r13 + 0x1d], r14
je 0x1400120fb
add r13, 0x1d
cmp rdi, r13
jb 0x1400120cc
cmp rbx, r13
jb 0x140012084
vpcmpeqb ymm1, ymm0, ymmword [r13]
vpmovmskb edx, ymm1
test edx, edx
jne 0x140012000
vpcmpeqb ymm1, ymm0, ymmword [r13 + 0x20]
vpmovmskb edx, ymm1
test edx, edx
jne 0x14001209c
vpcmpeqb ymm1, ymm0, ymmword [r13 + 0x40]
vpmovmskb edx, ymm1
test edx, edx
jne 0x1400120ac
vpcmpeqb ymm1, ymm0, ymmword [r13 + 0x60]
vpmovmskb edx, ymm1
test edx, edx
jne 0x1400120bc
sub r13, 0xffffffffffffff80
cmp r13, rbx
jbe 0x140012030
jmp 0x140012084
add r13, 0x20
cmp r13, rdi
ja 0x1400120cc
vpcmpeqb ymm1, ymm0, ymmword [r13]
vpmovmskb edx, ymm1
test edx, edx
je 0x140012080
jmp 0x140012000
tzcnt edx, edx
add r13, rdx
add r13, 0x20
jmp 0x140012007
tzcnt edx, edx
add r13, rdx
add r13, 0x40
jmp 0x140012007
tzcnt edx, edx
add r13, rdx
add r13, 0x60
jmp 0x140012007
cmp r13, rsi
jae 0x140012007
mov rdx, rsi
sub rdx, r13
nop dword [rax + rax]
cmp byte [r13], 0xed
je 0x140012007
inc r13
dec rdx
jne 0x1400120e0
mov r13, rsi
jmp 0x140012007
cmp qword [r13], r11
jne 0x14001201e
movabs rdx, 0x4800000160ec8148
cmp qword [r13 + 0x10], rdx
jne 0x14001201e
cmp qword [r13 + 8], r10
jne 0x14001201e
cmp dword [r13 + 0x18], 0xf62058b
jne 0x14001201e
cmp dword [r13 + 0x25], 0x150
jne 0x14001201e
movzx edx, word [r13 + 0x29]
cmp edx, 0x8348
jne 0x14001201e
cmp byte [r13 + 0x30], 0
jne 0x14001201e
cmp byte [r13 + 0x2b], 0xb9
jne 0x14001201e
lea rdx, [r13 + 0x2c]
mov r15, r12
sub r15, rdx
cmp r15, 4
jb 0x14001201e
mov edx, dword [rdx]
cmp dword [rsp], edx
movzx r15d, bpl
mov ebp, 1
cmove ebp, r15d
test r9, r9
cmove ebp, r15d
inc r9
mov dword [rsp], edx
jmp 0x14001201e
cmp qword [r13], r11
jne 0x140011eff
movabs rdx, 0x15024848948c4
cmp qword [r13 + 0x20], rdx
jne 0x140011eff
movabs rdx, 0x3348ffed0f62058b
cmp qword [r13 + 0x18], rdx
jne 0x140011eff
movabs rdx, 0x4800000160ec8148
cmp qword [r13 + 0x10], rdx
jne 0x140011eff
cmp dword [r13 + 0x28], 0xb9834800
jne 0x140011eff
cmp byte [r13 + 0x30], 0
jne 0x140011eff
mov edx, edi
and edx, 0xfffffffc
cmp edx, 0x2c
je 0x140011eff
mov edx, dword [r13 + 0x2c]
cmp dword [rsp], edx
movzx ebx, bpl
mov ebp, 1
cmove ebp, ebx
test r9, r9
cmove ebp, ebx
inc r9
mov dword [rsp], edx
jmp 0x140011eff
xor eax, eax
test r9, r9
je 0x14001224b
test bpl, bpl
mov rdx, qword [rsp + 0x10]
jne 0x140012250
mov eax, dword [rsp]
mov dword [rdx], eax
mov al, 1
jmp 0x140012250
xor eax, eax
mov rdx, qword [rsp + 0x10]
mov byte [rdx + 4], al
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
vzeroupper
ret