Function at 0x14001c710
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
sub rsp, 0x28
lea rax, [rcx + 0x1000]
mov r9, rcx
cmp rax, 0x2000
jb 0x14001cdeb
movabs rcx, 0xffff800000000000
test rcx, r9
jne 0x14001cdeb
lea rax, [rdx + 0x1000]
cmp rax, 0x2000
jb 0x14001cdeb
test rcx, rdx
jne 0x14001cdeb
cmp word [rdx], 0x7b
mov qword [r11 - 0x18], r13
mov qword [r11 - 0x20], r14
sete cl
mov r14d, 0xff00
mov qword [rsp], r15
movzx r10d, cl
lea r8, [rdx + r10*2]
movzx eax, word [r8]
test r14w, ax
jne 0x14001cdd3
lea r15, [0x14004f1a0]
movzx eax, al
movzx r13d, byte [rax + r15]
cmp r13b, 0xff
je 0x14001cdd3
movzx eax, word [r8 + 2]
mov qword [r11 - 0x10], r12
test r14w, ax
jne 0x14001cdcc
movzx eax, al
movzx r12d, byte [rax + r15]
cmp r12b, 0xff
je 0x14001cdcc
movzx eax, word [r8 + 4]
mov qword [r11 + 0x10], rbp
test r14w, ax
jne 0x14001cdc5
movzx eax, al
movzx ebp, byte [rax + r15]
cmp bpl, 0xff
je 0x14001cdc5
movzx eax, word [r8 + 6]
mov qword [r11 + 0x18], rsi
test r14w, ax
jne 0x14001cdbe
movzx eax, al
movzx esi, byte [rax + r15]
cmp sil, 0xff
je 0x14001cdbe
movzx eax, word [r8 + 8]
mov qword [r11 - 8], rdi
test r14w, ax
jne 0x14001cdb7
movzx eax, al
movzx edi, byte [rax + r15]
cmp dil, 0xff
je 0x14001cdb7
movzx eax, word [r8 + 0xa]
mov qword [r11 + 8], rbx
test r14w, ax
jne 0x14001cdb0
movzx eax, al
movzx ebx, byte [rax + r15]
cmp bl, 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0xc]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
movzx r11d, byte [rax + r15]
cmp r11b, 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0xe]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
movzx edx, byte [rax + r15]
cmp dl, 0xff
je 0x14001cdb0
cmp word [r8 + 0x10], 0x2d
jne 0x14001cdb0
movzx eax, word [r8 + 0x12]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x14]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x16]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x18]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
cmp word [r8 + 0x1a], 0x2d
jne 0x14001cdb0
movzx eax, word [r8 + 0x1c]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x1e]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x20]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x22]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
cmp word [r8 + 0x24], 0x2d
jne 0x14001cdb0
movzx eax, word [r8 + 0x26]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x28]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x2a]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x2c]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
cmp word [r8 + 0x2e], 0x2d
jne 0x14001cdb0
movzx eax, word [r8 + 0x30]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x32]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x34]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x36]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x38]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x3a]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x3c]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x3e]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x40]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x42]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x44]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
movzx eax, word [r8 + 0x46]
test r14w, ax
jne 0x14001cdb0
movzx eax, al
cmp byte [rax + r15], 0xff
je 0x14001cdb0
test cl, cl
je 0x14001cb95
cmp word [r8 + 0x48], 0x7d
jne 0x14001cdb0
cmp word [r8 + r10*2 + 0x48], 0
jne 0x14001cdb0
movzx eax, r12b
movzx ecx, r13b
shl ecx, 4
or ecx, eax
movzx eax, bpl
shl ecx, 4
or ecx, eax
movzx eax, sil
shl ecx, 4
or ecx, eax
movzx eax, dil
shl ecx, 4
or ecx, eax
movzx eax, bl
shl ecx, 4
or ecx, eax
movzx eax, r11b
shl ecx, 4
or ecx, eax
movzx eax, dl
shl ecx, 4
or ecx, eax
mov dword [r9], ecx
movzx eax, word [r8 + 0x12]
movzx ecx, al
movzx eax, word [r8 + 0x14]
movzx edx, byte [rcx + r15]
movzx ecx, al
movzx eax, byte [rcx + r15]
shl dx, 4
or dx, ax
movzx eax, word [r8 + 0x16]
shl dx, 4
movzx ecx, al
movzx eax, byte [rcx + r15]
or dx, ax
movzx eax, word [r8 + 0x18]
shl dx, 4
movzx ecx, al
movzx eax, byte [rcx + r15]
or dx, ax
mov word [r9 + 4], dx
movzx eax, word [r8 + 0x1c]
movzx ecx, al
movzx eax, word [r8 + 0x1e]
movzx edx, byte [rcx + r15]
movzx ecx, al
movzx eax, byte [rcx + r15]
shl dx, 4
or dx, ax
movzx eax, word [r8 + 0x20]
shl dx, 4
movzx ecx, al
movzx eax, byte [rcx + r15]
or dx, ax
movzx eax, word [r8 + 0x22]
shl dx, 4
movzx ecx, al
movzx eax, byte [rcx + r15]
or dx, ax
mov word [r9 + 6], dx
movzx eax, word [r8 + 0x26]
movzx ecx, al
movzx eax, word [r8 + 0x28]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
mov byte [r9 + 8], dl
movzx eax, word [r8 + 0x2a]
movzx ecx, al
movzx eax, word [r8 + 0x2c]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
mov byte [r9 + 9], dl
movzx eax, word [r8 + 0x30]
movzx ecx, al
movzx edx, byte [rcx + r15]
shl dl, 4
movzx eax, word [r8 + 0x32]
movzx ecx, al
or dl, byte [rcx + r15]
mov byte [r9 + 0xa], dl
movzx eax, word [r8 + 0x34]
movzx ecx, al
movzx eax, word [r8 + 0x36]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
mov byte [r9 + 0xb], dl
movzx eax, word [r8 + 0x38]
movzx ecx, al
movzx eax, word [r8 + 0x3a]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
mov byte [r9 + 0xc], dl
movzx eax, word [r8 + 0x3c]
movzx ecx, al
movzx eax, word [r8 + 0x3e]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
mov byte [r9 + 0xd], dl
movzx eax, word [r8 + 0x40]
movzx ecx, al
movzx eax, word [r8 + 0x42]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
mov byte [r9 + 0xe], dl
movzx eax, word [r8 + 0x44]
movzx ecx, al
movzx eax, word [r8 + 0x46]
movzx edx, byte [rcx + r15]
movzx ecx, al
shl dl, 4
or dl, byte [rcx + r15]
xor eax, eax
mov byte [r9 + 0xf], dl
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x38]
mov r12, qword [rsp + 0x18]
mov r13, qword [rsp + 0x10]
mov r14, qword [rsp + 8]
mov r15, qword [rsp]
add rsp, 0x28
ret
mov eax, 0xffffffcf
jmp 0x14001cd84
mov eax, 0xffffffcf
jmp 0x14001cd89
mov eax, 0xffffffcf
jmp 0x14001cd8e
mov eax, 0xffffffcf
jmp 0x14001cd93
mov eax, 0xffffffcf
jmp 0x14001cd98
mov r13, qword [rsp + 0x10]
mov r14, qword [rsp + 8]
mov r15, qword [rsp]
mov eax, 0xffffffcf
add rsp, 0x28
ret
mov eax, 0xfffffffe
add rsp, 0x28
ret