Function at 0x140bb2870
Capabilities:
Enumerate pe sections

Disassembly:
mov r8, rcx
lea rax, [rdx + 0xe]
sub r8, rdx
mov r9d, reloc.WS2_32.dll_recv
movzx ecx, byte [rax - 8]
movzx edx, byte [rax - 7]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 9]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0xa]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0xb]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0xc]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0xd]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0xe]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 - 0xe], rdx
movzx ecx, byte [rax]
movzx edx, byte [rax + 1]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 1]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 2]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 3]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 4]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 5]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 6]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 - 6], rdx
movzx ecx, byte [rax + 8]
movzx edx, byte [rax + 9]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 7]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 6]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 5]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 4]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 3]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 2]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 + 2], rdx
movzx ecx, byte [rax + 0x10]
movzx edx, byte [rax + 0x11]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0xf]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0xe]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0xd]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0xc]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0xb]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0xa]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 + 0xa], rdx
movzx ecx, byte [rax + 0x18]
movzx edx, byte [rax + 0x19]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x17]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x16]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x15]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x14]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x13]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x12]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 + 0x12], rdx
movzx ecx, byte [rax + 0x20]
movzx edx, byte [rax + 0x21]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x1f]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x1e]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x1d]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x1c]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x1b]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x1a]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 + 0x1a], rdx
movzx ecx, byte [rax + 0x28]
movzx edx, byte [rax + 0x29]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x27]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x26]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x25]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x24]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x23]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax + 0x22]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 + 0x22], rdx
movzx edx, byte [rax + 0x31]
movzx ecx, byte [rax + 0x30]
lea rax, [rax + 0x40]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0x11]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0x12]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0x13]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0x14]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0x15]
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rax - 0x16]
shl rdx, 8
or rdx, rcx
mov qword [rax + r8 - 0x16], rdx
sub r9, 1
jne 0x140bb2880
ret