Function at 0x140001ae0
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rdi
push r12
push r14
sub rsp, 0x38
movzx eax, word [r9 + 0x14]
lea r10, [r9 + 0x18]
mov r11d, dword [r9 + 0x90]
add r10, rax
movzx eax, word [r9 + 6]
mov r14, r9
mov r12, r8
mov ebx, edx
mov rdi, rcx
lea r9, [rax + rax*4]
lea r8, [r10 + r9*8]
cmp r10, r8
jae 0x140001b44
mov ecx, dword [r10 + 0xc]
cmp r11, rcx
jb 0x140001b3b
mov eax, dword [r10 + 8]
add eax, ecx
cmp r11, rax
jb 0x140001bcc
add r10, 0x28
cmp r10, r8
jb 0x140001b23
xor eax, eax
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r15
test r11d, r11d
je 0x140001d39
cmp dword [r14 + 0x94], 0
je 0x140001d39
lea r13, [rax + 0x10]
nop word [rax + rax]
movzx r10d, word [r14 + 0x14]
movzx r8d, word [r14 + 6]
add r10, 0x18
mov r9d, dword [r13 - 4]
add r10, r14
mov rdx, r10
lea rax, [r8 + r8*4]
lea rcx, [r10 + rax*8]
cmp r10, rcx
jae 0x140001d39
mov ecx, dword [rdx + 0xc]
cmp r9, rcx
jb 0x140001bbb
mov eax, dword [rdx + 8]
add eax, ecx
cmp r9, rax
jb 0x140001bde
lea rcx, [r8 + r8*4]
add rdx, 0x28
lea rax, [r10 + rcx*8]
cmp rdx, rax
jmp 0x140001ba3
mov eax, dword [r10 + 0x14]
sub rax, rcx
add rax, r11
add rax, r12
jmp 0x140001b46
mov ebp, dword [rdx + 0x14]
sub rbp, rcx
add rbp, r9
add rbp, r12
je 0x140001d39
mov r8, rbp
mov edx, ebx
mov rcx, rdi
call fcn.140001360
mov r15, rax
test rax, rax
je 0x140001d37
movzx r10d, word [r14 + 0x14]
movzx r8d, word [r14 + 6]
add r10, 0x18
mov r9d, dword [r13]
add r10, r14
mov rdx, r10
lea rax, [r8 + r8*4]
lea rcx, [r10 + rax*8]
cmp r10, rcx
jae 0x140001c5f
mov ecx, dword [rdx + 0xc]
cmp r9, rcx
jb 0x140001c40
mov eax, dword [rdx + 8]
add eax, ecx
cmp r9, rax
jb 0x140001c51
lea rcx, [r8 + r8*4]
add rdx, 0x28
lea rax, [r10 + rcx*8]
cmp rdx, rax
jmp 0x140001c2c
mov esi, dword [rdx + 0x14]
sub rsi, rcx
add rsi, r9
add rsi, r12
jmp 0x140001c61
xor esi, esi
mov rax, qword [rsi]
test rax, rax
je 0x140001d2e
jns 0x140001c87
movzx ebx, word [rsi]
xor edx, edx
mov r8d, 1
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edx, ebx
jmp 0x140001cf3
movzx r10d, word [r14 + 0x14]
movzx r8d, word [r14 + 6]
add r10, 0x18
mov r9, qword [rsi]
add r10, r14
mov rax, r10
lea rcx, [r8 + r8*4]
lea rdx, [r10 + rcx*8]
cmp r10, rdx
jae 0x140001cdc
mov edx, dword [rax + 0xc]
cmp r9, rdx
jb 0x140001cbd
mov ecx, dword [rax + 8]
add ecx, edx
cmp r9, rcx
jb 0x140001cce
lea rdx, [r8 + r8*4]
add rax, 0x28
lea rcx, [r10 + rdx*8]
cmp rax, rcx
jmp 0x140001ca9
mov ebx, dword [rax + 0x14]
sub rbx, rdx
add rbx, r9
add rbx, r12
jmp 0x140001cde
xor ebx, ebx
xor edx, edx
mov r8d, 1
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
lea rdx, [rbx + 2]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov rcx, rdi
sub rbx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rax, [rbx + r15]
mov qword [rsi], rax
add rsi, 8
mov rax, qword [rsi]
test rax, rax
jne 0x140001c6d
mov ebx, dword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
add r13, 0x14
jmp 0x140001b80
jmp 0x140001d3e
mov eax, 1
mov r15, qword [rsp + 0x20]
mov r13, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x70]
add rsp, 0x38
pop r14
pop r12
pop rdi
pop rbx
ret