Function at 0x140131fa0
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
mov qword [rsp + 0x48], rcx
movzx eax, byte [rdx]
mov dword [rsp + 0x28], eax
movzx eax, byte [rdx + 1]
mov dword [rsp + 0x30], eax
movzx eax, byte [rdx + 2]
mov dword [rsp + 0x38], eax
movzx eax, byte [rdx + 3]
mov dword [rsp + 0x40], eax
movzx r10d, byte [rdx + 4]
movzx r11d, byte [rdx + 5]
movzx esi, byte [rdx + 6]
movzx edi, byte [rdx + 7]
movzx ebx, byte [rdx + 8]
movzx ebp, byte [rdx + 9]
movzx r14d, byte [rdx + 0xa]
movzx r15d, byte [rdx + 0xb]
movzx r12d, byte [rdx + 0xc]
movzx r13d, byte [rdx + 0xd]
movzx r9d, byte [rdx + 0xe]
movzx r8d, byte [rdx + 0xf]
movzx ecx, byte [rdx + 0x10]
movzx eax, byte [rdx + 0x11]
movzx edx, byte [rdx + 0x12]
movzx edx, dx
mov qword [rsp + 0xc0], rdx
movzx eax, ax
mov qword [rsp + 0xb8], rax
movzx eax, cx
mov qword [rsp + 0xb0], rax
movzx eax, r8w
mov qword [rsp + 0xa8], rax
movzx eax, r9w
mov qword [rsp + 0xa0], rax
movzx eax, r13w
mov qword [rsp + 0x98], rax
movzx eax, r12w
mov qword [rsp + 0x90], rax
movzx eax, r15w
mov qword [rsp + 0x88], rax
movzx eax, r14w
mov qword [rsp + 0x80], rax
movzx eax, bp
mov qword [rsp + 0x78], rax
movzx eax, bx
mov qword [rsp + 0x70], rax
movzx eax, di
mov qword [rsp + 0x68], rax
movzx eax, si
mov qword [rsp + 0x60], rax
movzx eax, r11w
mov qword [rsp + 0x58], rax
movzx eax, r10w
mov qword [rsp + 0x50], rax
movzx eax, word [rsp + 0x40]
mov qword [rsp + 0x40], rax
movzx eax, word [rsp + 0x38]
mov qword [rsp + 0x38], rax
movzx eax, word [rsp + 0x30]
mov qword [rsp + 0x30], rax
movzx eax, word [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x24], 0
mov si, reloc.WS2_32.dll_recv
mov r14d, 0
mov r15d, 0
mov r12d, 0
mov r13d, 0
mov ebp, 0
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x1c], 0
mov dword [rsp + 0x18], 0
xor r9d, r9d
xor r10d, r10d
xor r11d, r11d
xor ebx, ebx
mov dword [rsp + 0x14], 0
mov dword [rsp + 0x10], 0
mov dword [rsp + 0xc], 0
mov dword [rsp + 8], 0
mov dword [rsp + 4], 0
mov dword [rsp], 0
xor edi, edi
jmp 0x14013216b
add edi, edi
dec si
je 0x140132a2b
mov rax, qword [rsp + 0x30]
add eax, esi
mov rcx, qword [rsp + 0x28]
lea edx, [rcx + rsi]
lea ecx, [rsi - 1]
cmp dx, 0x11
je 0x1401322e0
mov rdx, qword [rsp + 0x38]
add edx, esi
cmp ax, 0x11
je 0x140132347
mov rax, qword [rsp + 0x40]
add eax, esi
cmp dx, 0x11
je 0x1401323a7
mov rdx, qword [rsp + 0x50]
add edx, esi
cmp ax, 0x11
je 0x14013240a
mov rax, qword [rsp + 0x58]
add eax, esi
cmp dx, 0x11
je 0x14013246a
mov rdx, qword [rsp + 0x60]
add edx, esi
cmp ax, 0x11
je 0x1401324cd
mov rax, qword [rsp + 0x68]
add eax, esi
cmp dx, 0x11
je 0x140132522
mov rdx, qword [rsp + 0x70]
add edx, esi
cmp ax, 0x11
je 0x140132588
mov rax, qword [rsp + 0x78]
add eax, esi
cmp dx, 0x11
je 0x1401325eb
mov rdx, qword [rsp + 0x80]
add edx, esi
cmp ax, 0x11
je 0x140132654
mov rax, qword [rsp + 0x88]
add eax, esi
cmp dx, 0x11
je 0x1401326b7
mov rdx, qword [rsp + 0x90]
add edx, esi
cmp ax, 0x11
je 0x14013271d
mov rax, qword [rsp + 0x98]
add eax, esi
cmp dx, 0x11
je 0x140132780
mov rdx, qword [rsp + 0xa0]
add edx, esi
cmp ax, 0x11
je 0x1401327e5
mov rax, qword [rsp + 0xa8]
add eax, esi
cmp dx, 0x11
je 0x14013284b
mov rdx, qword [rsp + 0xb0]
add edx, esi
cmp ax, 0x11
je 0x1401328b4
mov rax, qword [rsp + 0xb8]
add eax, esi
cmp dx, 0x11
je 0x14013291a
mov rdx, qword [rsp + 0xc0]
add edx, esi
cmp ax, 0x11
je 0x140132983
cmp dx, 0x11
jne 0x140132160
jmp 0x1401329df
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea edx, [rdx + r8*2]
shr edx, cl
mov dword [rsp + 0x24], edx
or edi, 1
mov rdx, qword [rsp + 0x38]
add edx, esi
cmp ax, 0x11
jne 0x140132198
mov eax, edi
rol ax, 8
mov r14d, eax
and r14d, 0xf0f
shl r14d, 4
shr eax, 4
and eax, 0xf0f
or eax, r14d
mov r14d, eax
and r14d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r14*4]
mov r14d, eax
and r14d, 0x5555
shr eax, 1
and eax, 0x5555
lea r14d, [rax + r14*2]
shr r14d, cl
inc edi
mov rax, qword [rsp + 0x40]
add eax, esi
cmp dx, 0x11
jne 0x1401321a9
mov edx, edi
rol dx, 8
mov r15d, edx
and r15d, 0xf0f
shl r15d, 4
shr edx, 4
and edx, 0xf0f
or edx, r15d
mov r15d, edx
and r15d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r15*4]
mov r15d, edx
and r15d, 0x5555
shr edx, 1
and edx, 0x5555
lea r15d, [rdx + r15*2]
shr r15d, cl
inc edi
mov rdx, qword [rsp + 0x50]
add edx, esi
cmp ax, 0x11
jne 0x1401321ba
mov eax, edi
rol ax, 8
mov r12d, eax
and r12d, 0xf0f
shl r12d, 4
shr eax, 4
and eax, 0xf0f
or eax, r12d
mov r12d, eax
and r12d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r12*4]
mov r12d, eax
and r12d, 0x5555
shr eax, 1
and eax, 0x5555
lea r12d, [rax + r12*2]
shr r12d, cl
inc edi
mov rax, qword [rsp + 0x58]
add eax, esi
cmp dx, 0x11
jne 0x1401321cb
mov edx, edi
rol dx, 8
mov r13d, edx
and r13d, 0xf0f
shl r13d, 4
shr edx, 4
and edx, 0xf0f
or edx, r13d
mov r13d, edx
and r13d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r13*4]
mov r13d, edx
and r13d, 0x5555
shr edx, 1
and edx, 0x5555
lea r13d, [rdx + r13*2]
shr r13d, cl
inc edi
mov rdx, qword [rsp + 0x60]
add edx, esi
cmp ax, 0x11
jne 0x1401321dc
mov eax, edi
rol ax, 8
mov ebp, eax
and ebp, 0xf0f
shl ebp, 4
shr eax, 4
and eax, 0xf0f
or eax, ebp
mov ebp, eax
and ebp, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + rbp*4]
mov ebp, eax
and ebp, 0x5555
shr eax, 1
and eax, 0x5555
lea ebp, [rax + rbp*2]
shr ebp, cl
inc edi
mov rax, qword [rsp + 0x68]
add eax, esi
cmp dx, 0x11
jne 0x1401321ed
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea edx, [rdx + r8*2]
shr edx, cl
mov dword [rsp + 0x20], edx
inc edi
mov rdx, qword [rsp + 0x70]
add edx, esi
cmp ax, 0x11
jne 0x1401321fe
mov eax, edi
rol ax, 8
mov r8d, eax
and r8d, 0xf0f
shl r8d, 4
shr eax, 4
and eax, 0xf0f
or eax, r8d
mov r8d, eax
and r8d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r8*4]
mov r8d, eax
and r8d, 0x5555
shr eax, 1
and eax, 0x5555
lea eax, [rax + r8*2]
shr eax, cl
mov dword [rsp + 0x1c], eax
inc edi
mov rax, qword [rsp + 0x78]
add eax, esi
cmp dx, 0x11
jne 0x14013220f
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea edx, [rdx + r8*2]
shr edx, cl
mov dword [rsp + 0x18], edx
inc edi
mov rdx, qword [rsp + 0x80]
add edx, esi
cmp ax, 0x11
jne 0x140132223
mov eax, edi
rol ax, 8
mov r8d, eax
and r8d, 0xf0f
shl r8d, 4
shr eax, 4
and eax, 0xf0f
or eax, r8d
mov r8d, eax
and r8d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r8*4]
mov r8d, eax
and r8d, 0x5555
shr eax, 1
and eax, 0x5555
lea r9d, [rax + r8*2]
shr r9d, cl
inc edi
mov rax, qword [rsp + 0x88]
add eax, esi
cmp dx, 0x11
jne 0x140132237
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea r10d, [rdx + r8*2]
shr r10d, cl
inc edi
mov rdx, qword [rsp + 0x90]
add edx, esi
cmp ax, 0x11
jne 0x14013224b
mov eax, edi
rol ax, 8
mov r8d, eax
and r8d, 0xf0f
shl r8d, 4
shr eax, 4
and eax, 0xf0f
or eax, r8d
mov r8d, eax
and r8d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r8*4]
mov r8d, eax
and r8d, 0x5555
shr eax, 1
and eax, 0x5555
lea r11d, [rax + r8*2]
shr r11d, cl
inc edi
mov rax, qword [rsp + 0x98]
add eax, esi
cmp dx, 0x11
jne 0x14013225f
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea ebx, [rdx + r8*2]
shr ebx, cl
inc edi
mov rdx, qword [rsp + 0xa0]
add edx, esi
cmp ax, 0x11
jne 0x140132273
mov eax, edi
rol ax, 8
mov r8d, eax
and r8d, 0xf0f
shl r8d, 4
shr eax, 4
and eax, 0xf0f
or eax, r8d
mov r8d, eax
and r8d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r8*4]
mov r8d, eax
and r8d, 0x5555
shr eax, 1
and eax, 0x5555
lea eax, [rax + r8*2]
shr eax, cl
mov dword [rsp + 0x14], eax
inc edi
mov rax, qword [rsp + 0xa8]
add eax, esi
cmp dx, 0x11
jne 0x140132287
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea edx, [rdx + r8*2]
shr edx, cl
mov dword [rsp + 0x10], edx
inc edi
mov rdx, qword [rsp + 0xb0]
add edx, esi
cmp ax, 0x11
jne 0x14013229b
mov eax, edi
rol ax, 8
mov r8d, eax
and r8d, 0xf0f
shl r8d, 4
shr eax, 4
and eax, 0xf0f
or eax, r8d
mov r8d, eax
and r8d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r8*4]
mov r8d, eax
and r8d, 0x5555
shr eax, 1
and eax, 0x5555
lea eax, [rax + r8*2]
shr eax, cl
mov dword [rsp + 0xc], eax
inc edi
mov rax, qword [rsp + 0xb8]
add eax, esi
cmp dx, 0x11
jne 0x1401322af
mov edx, edi
rol dx, 8
mov r8d, edx
and r8d, 0xf0f
shl r8d, 4
shr edx, 4
and edx, 0xf0f
or edx, r8d
mov r8d, edx
and r8d, 0x3333
shr edx, 2
and edx, 0x3333
lea edx, [rdx + r8*4]
mov r8d, edx
and r8d, 0x5555
shr edx, 1
and edx, 0x5555
lea edx, [rdx + r8*2]
shr edx, cl
mov dword [rsp + 8], edx
inc edi
mov rdx, qword [rsp + 0xc0]
add edx, esi
cmp ax, 0x11
jne 0x1401322c3
mov eax, edi
rol ax, 8
mov r8d, eax
and r8d, 0xf0f
shl r8d, 4
shr eax, 4
and eax, 0xf0f
or eax, r8d
mov r8d, eax
and r8d, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + r8*4]
mov r8d, eax
and r8d, 0x5555
shr eax, 1
and eax, 0x5555
lea eax, [rax + r8*2]
shr eax, cl
mov dword [rsp + 4], eax
inc edi
cmp dx, 0x11
jne 0x140132160
mov eax, edi
rol ax, 8
mov edx, eax
and edx, 0xf0f
shl edx, 4
shr eax, 4
and eax, 0xf0f
or eax, edx
mov edx, eax
and edx, 0x3333
shr eax, 2
and eax, 0x3333
lea eax, [rax + rdx*4]
mov edx, eax
and edx, 0x5555
shr eax, 1
and eax, 0x5555
lea eax, [rax + rdx*2]
shr eax, cl
mov dword [rsp], eax
inc edi
jmp 0x140132160
cmp edi, 0x20000
jne 0x140132abc
mov rax, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x24]
mov word [rax + 2], cx
mov word [rax + 4], r14w
mov word [rax + 6], r15w
mov word [rax + 8], r12w
mov word [rax + 0xa], r13w
mov word [rax + 0xc], bp
mov ecx, dword [rsp + 0x20]
mov word [rax + 0xe], cx
mov ecx, dword [rsp + 0x1c]
mov word [rax + 0x10], cx
mov ecx, dword [rsp + 0x18]
mov word [rax + 0x12], cx
mov word [rax + 0x14], r9w
mov word [rax + 0x16], r10w
mov word [rax + 0x18], r11w
mov word [rax + 0x1a], bx
mov ecx, dword [rsp + 0x14]
mov word [rax + 0x1c], cx
mov ecx, dword [rsp + 0x10]
mov word [rax + 0x1e], cx
mov ecx, dword [rsp + 0xc]
mov word [rax + 0x20], cx
mov ecx, dword [rsp + 8]
mov word [rax + 0x22], cx
mov ecx, dword [rsp + 4]
mov word [rax + 0x24], cx
mov ecx, dword [rsp]
mov word [rax + 0x26], cx
mov cx, 1
jmp 0x140132ac3
xor ecx, ecx
mov rax, qword [rsp + 0x48]
mov word [rax], cx
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret