Function at 0x14011fad0
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov rax, qword [rdx]
xor r12d, r12d
movzx ebx, byte [rdx + 0x24]
mov rdi, rdx
mov rsi, qword [rcx + 0x10]
not ebx
mov r13d, dword [rdx + 8]
and ebx, 1
mov eax, dword [rax]
mov r14, rcx
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x30], r12d
lea ebp, [rax + rbx]
mov eax, dword [rsp + 0xc0]
add ebp, dword [rsp + 0xb8]
test eax, eax
je 0x14011fb32
mov r15d, r9d
sub r15d, eax
jmp 0x14011fb3e
mov eax, dword [rcx + 0x38]
lea r15d, [rax + 1]
add eax, ebp
mov dword [rcx + 0x38], eax
mov eax, dword [r8 + 0xc]
test eax, eax
je 0x14011fb4a
inc eax
jmp 0x14011fb4e
mov eax, dword [r8 + 8]
mov dword [rsp + 0x90], eax
call fcn.14015b680
mov r9d, dword [rsp + 0xb0]
mov ecx, 5
mov dword [rdx + 0x1c], eax
test r9d, r9d
mov rdx, qword [rdx]
mov eax, 1
cmovne eax, ecx
mov r8d, r15d
mov rcx, r14
mov byte [rsp + 0x20], al
call fcn.140140ff0
mov eax, dword [rsp + 0x98]
add eax, r15d
mov dword [rsp + 0xb0], eax
test ebx, ebx
je 0x14011fbb7
mov r8d, dword [rdi + 0xc]
mov r9d, eax
mov edx, 0x7e
mov rcx, rsi
call fcn.14015bc30
mov eax, dword [rsp + 0xb0]
cmp dword [rsp + 0xc0], r12d
jne 0x14011fbe2
mov ecx, dword [rsp + 0xb8]
test ecx, ecx
jle 0x14011fbe2
mov edx, dword [rsp + 0xa8]
lea r8d, [rax + rbx]
mov r9d, ecx
mov rcx, r14
call fcn.140142af0
test r13d, r13d
jle 0x14011fd9b
mov r8, qword [rsp + 0xa0]
mov r9d, r15d
mov rdx, rdi
mov dword [rsp + 0x20], ebp
mov rcx, r14
call fcn.14011fea0
mov edx, dword [r14 + 0x38]
mov r12d, eax
mov r8d, dword [rsp + 0xb0]
lea eax, [rdx + 1]
add edx, dword [rdi + 8]
mov dword [rsp + 0xc0], eax
mov eax, dword [rsp + 0x98]
mov dword [r14 + 0x38], edx
sub eax, dword [rdi + 8]
add eax, ebx
mov dword [rsp + 0x34], eax
test ebx, ebx
jne 0x14011fc3d
mov r8d, dword [rdi + 0xc]
mov edx, reloc.WS2_32.dll_recvfrom
mov eax, 0x78
test ebx, ebx
mov rcx, rsi
cmove edx, eax
call fcn.14015bc50
mov ecx, dword [rdi + 8]
mov r9d, r15d
mov r8d, dword [rsp + 0xc0]
mov edx, 0x5a
mov dword [rsp + 0x20], ecx
mov rcx, rsi
mov dword [rsp + 0xb0], eax
call fcn.14015bbb0
mov edx, dword [rdi + 0x18]
mov rcx, rsi
call fcn.14015acf0
mov rcx, qword [r14]
mov qword [rsp + 0x38], rax
cmp byte [rcx + 0x67], 0
jne 0x14011fe7e
mov rbx, qword [rax + 0x10]
xor edx, edx
mov ecx, dword [rsp + 0x34]
add ecx, dword [rsp + 0xb8]
mov dword [rax + 8], ecx
movzx r8d, word [rbx + 6]
mov rcx, qword [rbx + 0x18]
call fcn.1400b83c0
mov r9d, 0xfffffff8
mov r8, rbx
mov rcx, rsi
lea edx, [r9 + 7]
call fcn.14015ada0
movzx r9d, word [rbx + 8]
mov r8d, r13d
movzx eax, word [rbx + 6]
mov rcx, r14
mov rdx, qword [rdi]
sub r9d, eax
dec r9d
call fcn.14011ee30
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x10], rax
mov rcx, rsi
call fcn.14015b400
xor r9d, r9d
mov ebx, eax
lea r8d, [rax + 1]
lea edx, [r9 + 0xe]
mov dword [rsp + 0x20], r8d
call fcn.14015bbb0
mov rcx, r14
call fcn.14015b680
mov dword [rdi + 0x14], eax
mov edx, 0xa
inc dword [r14 + 0x38]
mov rcx, rsi
mov r8d, dword [r14 + 0x38]
mov r9d, dword [rdi + 0x14]
mov dword [rdi + 0x10], r8d
call fcn.14015bc30
mov r8d, dword [rdi + 0xc]
mov edx, 0x92
mov rcx, rsi
call fcn.14015bc50
mov eax, dword [rsp + 0x90]
test eax, eax
je 0x14011fd6b
mov r9d, dword [rdi + 0x1c]
mov r8d, eax
mov edx, reloc.WS2_32.dll_recvfrom
mov rcx, rsi
call fcn.14015bc30
mov edx, dword [rsp + 0xb0]
mov rcx, rsi
call fcn.14015b1a0
mov r9d, dword [rdi + 8]
mov rcx, r14
mov r8d, dword [rsp + 0xc0]
mov edx, r15d
call fcn.140142af0
mov edx, ebx
mov rcx, rsi
call fcn.14015b1a0
mov r8d, dword [rsp + 0x90]
test r8d, r8d
je 0x14011fe0f
mov ebx, dword [rdi + 0xc]
mov rcx, rsi
call fcn.14015b400
mov edx, 0x3c
lea r9d, [rax + 4]
call fcn.14015bc30
xor r9d, r9d
mov r8d, ebx
mov rcx, rsi
lea edx, [r9 + 0x20]
call fcn.14015bc30
mov ecx, dword [rsp + 0x98]
lea eax, [r15 + r13]
sub ecx, r13d
xor r9d, r9d
mov dword [rsp + 0x28], ecx
mov r8d, ebx
mov rcx, rsi
mov dword [rsp + 0x20], eax
lea edx, [r9 + 0x28]
call fcn.14015bb30
mov r8d, ebx
mov dword [rsp + 0x30], eax
mov edx, 0x82
mov rcx, rsi
call fcn.14015bc50
test r12d, r12d
jne 0x14011fe31
mov r8, qword [rsp + 0xa0]
mov r9d, r15d
mov rdx, rdi
mov dword [rsp + 0x20], ebp
mov rcx, r14
call fcn.14011fea0
mov r12d, eax
movzx edx, byte [rdi + 0x24]
lea eax, [r15 + r13]
mov r8d, dword [rdi + 0xc]
and edx, 1
sub ebp, r13d
add edx, 0x8a
mov dword [rsp + 0x28], ebp
mov r9d, r12d
mov rcx, rsi
mov dword [rsp + 0x20], eax
call fcn.14015bb30
mov edx, dword [rsp + 0x30]
test edx, edx
je 0x14011fe7e
mov eax, dword [rdi + 0x20]
test eax, eax
jne 0x14011fe73
mov rcx, rsi
call fcn.14015b400
mov r8d, eax
mov rcx, rsi
call fcn.14015b240
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret