Function at 0x14010dbd0
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0x37]
mov eax, 0xc0
call fcn.1401127d0
sub rsp, rax
mov rax, qword [0x1401bd830]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor ebx, ebx
mov rdi, rcx
lea rcx, [rbp - 0x49]
mov esi, ebx
mov r12d, ebx
mov r13d, ebx
call fcn.140075c00
mov rax, qword [rdi + 0x130]
cmp qword [rax + 0xb0], rbx
jne 0x14010dc31
lea r12d, [rbx + 1]
jmp 0x14010e34a
mov rax, qword [rdi + 8]
lea rcx, [rbp - 0x59]
mov qword [rsp + 0x28], rcx
mov edx, 0x21a0
mov r9d, reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x20], 0x4000
mov rcx, rdi
lea r8d, [rdx + 1]
call qword [rax + 0x60]
mov r15d, eax
cmp dword [rbp - 0x59], ebx
je 0x14010e38e
mov rax, qword [rdi + 0x130]
mov qword [rsp + 0xf8], r14
mov rbx, qword [rax + 0xb0]
mov rcx, rbx
call fcn.140068db0
mov rdx, rax
mov rcx, rbx
mov rsi, rax
call fcn.14013c090
test al, 0x10
jne 0x14010dcc1
mov edx, 0x88
mov dword [rsp + 0x20], 0xbbb
lea r9, [0x1401bd560]
lea ecx, [rdx - 0x74]
lea r8d, [rdx + 0x54]
call fcn.14006cd10
mov ebx, Ordinal_50
jmp 0x14010e329
mov rbx, qword [rdi + 0x58]
cmp r15d, 0x40
jne 0x14010dd5f
mov eax, dword [rsi]
sub eax, 0x32b
cmp eax, 1
ja 0x14010dd5f
mov r14d, r15d
mov rcx, rsi
call fcn.140066400
cmp r14d, eax
jg 0x14010e302
cmp r15d, eax
jg 0x14010e302
test r15d, r15d
jle 0x14010e302
mov ecx, dword [rdi]
mov eax, ecx
and eax, 0xffffff00
cmp eax, 0x300
mov rax, r12
cmovne ecx, eax
cmp ecx, 0x303
jl 0x14010decb
mov rcx, qword [rdi + 0x80]
lea r9, [rbp - 0x51]
xor r8d, r8d
mov rcx, qword [rcx + 0x1b8]
lea edx, [r8 + 3]
call fcn.14005eab0
movsxd r15, eax
test eax, eax
jg 0x14010de48
mov dword [rsp + 0x20], 0xbfa
lea r9, [0x1401bd5c0]
jmp 0x14010dd9d
mov ecx, dword [rdi]
mov eax, ecx
and eax, 0xffffff00
cmp eax, 0x300
mov rax, r12
cmovne ecx, eax
cmp ecx, 0x303
jl 0x14010de0e
mov rcx, rsi
call fcn.1400fdbf0
mov ecx, eax
cmp eax, 0xffffffff
jne 0x14010ddba
mov dword [rsp + 0x20], 0xbcf
lea r9, [0x1401bd570]
mov r8d, 0x44
mov ecx, reloc.WS2_32.dll_sendto
lea edx, [rcx + 0x74]
call fcn.14006cd10
mov ebx, 0x50
jmp 0x14010e329
movzx eax, byte [rbx + 1]
cmp ecx, eax
je 0x14010dddc
mov dword [rsp + 0x20], 0xbd6
lea r9, [0x1401bd580]
mov r8d, 0x172
jmp 0x14010e317
movzx ecx, byte [rbx]
call fcn.1400fdaa0
mov r13, rax
test rax, rax
jne 0x14010de06
mov dword [rsp + 0x20], 0xbdc
lea r9, [0x1401bd590]
mov r8d, 0x170
jmp 0x14010e317
add rbx, 2
sub r15d, 2
movzx r14d, byte [rbx]
sub r15d, 2
movzx eax, byte [rbx + 1]
add rbx, 2
shl r14d, 8
or r14d, eax
cmp r14d, r15d
jle 0x14010dce2
mov dword [rsp + 0x20], 0xbe9
lea r9, [0x1401bd5a0]
mov r8d, 0x9f
jmp 0x14010e317
xor r8d, r8d
lea rcx, [rbp - 0x49]
mov rdx, r13
call fcn.1400754d0
test eax, eax
je 0x14010deb1
mov rdx, qword [rbp - 0x51]
lea rcx, [rbp - 0x49]
mov r8, r15
call fcn.140075710
test eax, eax
je 0x14010deb1
mov r9, rsi
lea rcx, [rbp - 0x49]
mov r8d, r14d
mov rdx, rbx
call fcn.1400b1d90
test eax, eax
jg 0x14010e2fa
mov ebx, 0x33
mov dword [rsp + 0x20], 0xc0b
lea r9, [0x1401bd5e0]
lea edx, [rbx + 0x55]
lea ecx, [rbx - 0x1f]
lea r8d, [rbx + 0x48]
call fcn.14006cd10
jmp 0x14010e329
mov dword [rsp + 0x20], 0xc04
lea r9, [0x1401bd5d0]
mov r8d, 6
jmp 0x14010dda3
mov eax, dword [rsi]
cmp eax, 6
jne 0x14010df5d
mov rdx, qword [rdi + 0x80]
mov ecx, WSACleanup
mov rax, qword [rsi + 0x20]
add rdx, 0x210
mov qword [rsp + 0x28], rax
mov r9, rbx
mov dword [rsp + 0x20], r14d
lea r8d, [rcx - 0x4e]
call fcn.140091250
test eax, eax
jns 0x14010df2f
mov ebx, 0x33
mov dword [rsp + 0x20], 0xc16
lea r9, [0x1401bd5f0]
lea edx, [rbx + 0x55]
lea ecx, [rbx - 0x1f]
lea r8d, [rbx + 0x43]
call fcn.14006cd10
jmp 0x14010e329
jne 0x14010e2fa
mov ebx, 0x33
mov dword [rsp + 0x20], 0xc1b
lea r9, [0x1401bd600]
lea edx, [rbx + 0x55]
lea ecx, [rbx - 0x1f]
lea r8d, [rbx + 0x47]
call fcn.14006cd10
jmp 0x14010e329
cmp eax, 0x74
jne 0x14010dfbf
mov rdx, qword [rdi + 0x80]
mov r9, rbx
mov rax, qword [rsi + 0x20]
add rdx, 0x220
mov ecx, dword [rsi + 4]
mov r8d, reloc.WS2_32.dll_sendto
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
call fcn.1400a5480
test eax, eax
jg 0x14010e2fa
mov ebx, 0x33
mov dword [rsp + 0x20], 0xc28
lea r9, [0x1401bd610]
lea edx, [rbx + 0x55]
lea ecx, [rbx - 0x1f]
lea r8d, [rbx + 0x3d]
call fcn.14006cd10
jmp 0x14010e329
cmp eax, 0x198
jne 0x14010e025
mov rdx, qword [rdi + 0x80]
mov r9, rbx
mov rax, qword [rsi + 0x20]
add rdx, 0x220
mov ecx, dword [rsi + 4]
mov r8d, reloc.WS2_32.dll_sendto
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
call fcn.1400c8380
test eax, eax
jg 0x14010e2fa
mov dword [rsp + 0x20], 0xc35
lea r9, [0x1401bd620]
mov ebx, 0x33
mov r8d, 0x131
lea edx, [rbx + 0x55]
lea ecx, [rbx - 0x1f]
call fcn.14006cd10
jmp 0x14010e329
add eax, 0xfffffcd5
cmp eax, 1
jbe 0x14010e059
mov edx, 0x88
mov dword [rsp + 0x20], 0xc59
lea r9, [0x1401bd680]
lea ecx, [rdx - 0x74]
lea r8d, [rdx - 0x44]
call fcn.14006cd10
mov ebx, Ordinal_46
jmp 0x14010e329
xor edx, edx
mov rcx, rsi
call fcn.140090c30
mov r15, rax
test rax, rax
jne 0x14010e091
lea ebx, [rax + 0x50]
mov dword [rsp + 0x20], 0xc41
lea edx, [rbx + 0x38]
lea r9, [0x1401bd630]
lea ecx, [rax + 0x14]
lea r8d, [rax + 0x41]
call fcn.14006cd10
jmp 0x14010e329
mov rcx, r15
call fcn.1400d6ae0
test eax, eax
jg 0x14010e0cd
mov rcx, r15
call fcn.140090bc0
mov ebx, 0x50
mov dword [rsp + 0x20], 0xc47
lea r9, [0x1401bd640]
lea edx, [rbx + 0x38]
lea ecx, [rbx - 0x3c]
lea r8d, [rbx - 0xc]
call fcn.14006cd10
jmp 0x14010e329
cmp r14d, 0x40
je 0x14010e0f0
mov ecx, 2
call fcn.140118758
mov rcx, rax
lea rdx, str.GOST_signature_length_is__d
mov r8d, r14d
call fcn.14001d50c
nop
movzx eax, byte [rbx]
mov byte [rbp + 0x26], al
movzx eax, byte [rbx + 1]
mov byte [rbp + 0x25], al
movzx eax, byte [rbx + 2]
mov byte [rbp + 0x24], al
movzx eax, byte [rbx + 3]
mov byte [rbp + 0x23], al
movzx eax, byte [rbx + 4]
mov byte [rbp + 0x22], al
movzx eax, byte [rbx + 5]
mov byte [rbp + 0x21], al
movzx eax, byte [rbx + 6]
mov byte [rbp + 0x20], al
movzx eax, byte [rbx + 7]
mov byte [rbp + 0x1f], al
movzx eax, byte [rbx + 8]
mov byte [rbp + 0x1e], al
movzx eax, byte [rbx + 9]
mov byte [rbp + 0x1d], al
movzx eax, byte [rbx + 0xa]
mov byte [rbp + 0x1c], al
movzx eax, byte [rbx + 0xb]
mov byte [rbp + 0x1b], al
movzx eax, byte [rbx + 0xc]
mov byte [rbp + 0x1a], al
movzx eax, byte [rbx + 0xd]
mov byte [rbp + 0x19], al
movzx eax, byte [rbx + 0xe]
mov byte [rbp + 0x18], al
movzx eax, byte [rbx + 0xf]
mov byte [rbp + 0x17], al
movzx eax, byte [rbx + 0x10]
mov byte [rbp + 0x16], al
movzx eax, byte [rbx + 0x11]
mov byte [rbp + 0x15], al
movzx eax, byte [rbx + 0x12]
mov byte [rbp + 0x14], al
movzx eax, byte [rbx + 0x13]
mov byte [rbp + 0x13], al
movzx eax, byte [rbx + 0x14]
mov byte [rbp + 0x12], al
movzx eax, byte [rbx + 0x15]
mov byte [rbp + 0x11], al
movzx eax, byte [rbx + 0x16]
mov byte [rbp + 0x10], al
movzx eax, byte [rbx + 0x17]
mov byte [rbp + 0xf], al
movzx eax, byte [rbx + 0x18]
mov byte [rbp + 0xe], al
movzx eax, byte [rbx + 0x19]
mov byte [rbp + 0xd], al
movzx eax, byte [rbx + 0x1a]
mov byte [rbp + 0xc], al
movzx eax, byte [rbx + 0x1b]
mov byte [rbp + 0xb], al
movzx eax, byte [rbx + 0x1c]
mov byte [rbp + 0xa], al
movzx eax, byte [rbx + 0x1d]
mov byte [rbp + 9], al
movzx eax, byte [rbx + 0x1e]
mov byte [rbp + 8], al
movzx eax, byte [rbx + 0x1f]
mov byte [rbp + 7], al
movzx eax, byte [rbx + 0x20]
mov byte [rbp + 6], al
movzx eax, byte [rbx + 0x21]
mov byte [rbp + 5], al
movzx eax, byte [rbx + 0x22]
mov byte [rbp + 4], al
movzx eax, byte [rbx + 0x23]
mov byte [rbp + 3], al
movzx eax, byte [rbx + 0x24]
mov byte [rbp + 2], al
movzx eax, byte [rbx + 0x25]
mov byte [rbp + 1], al
movzx eax, byte [rbx + 0x26]
mov byte [rbp], al
movzx eax, byte [rbx + 0x27]
mov byte [rbp - 1], al
movzx eax, byte [rbx + 0x28]
mov r9, qword [rdi + 0x80]
lea rdx, [rbp - 0x19]
mov byte [rbp - 2], al
add r9, 0x210
movzx eax, byte [rbx + 0x29]
mov r8d, 0x40
mov byte [rbp - 3], al
mov rcx, r15
movzx eax, byte [rbx + 0x2a]
mov byte [rbp - 4], al
movzx eax, byte [rbx + 0x2b]
mov byte [rbp - 5], al
movzx eax, byte [rbx + 0x2c]
mov byte [rbp - 6], al
movzx eax, byte [rbx + 0x2d]
mov byte [rbp - 7], al
movzx eax, byte [rbx + 0x2e]
mov byte [rbp - 8], al
movzx eax, byte [rbx + 0x2f]
mov byte [rbp - 9], al
movzx eax, byte [rbx + 0x30]
mov byte [rbp - 0xa], al
movzx eax, byte [rbx + 0x31]
mov byte [rbp - 0xb], al
movzx eax, byte [rbx + 0x32]
mov byte [rbp - 0xc], al
movzx eax, byte [rbx + 0x33]
mov byte [rbp - 0xd], al
movzx eax, byte [rbx + 0x34]
mov byte [rbp - 0xe], al
movzx eax, byte [rbx + 0x35]
mov byte [rbp - 0xf], al
movzx eax, byte [rbx + 0x36]
mov byte [rbp - 0x10], al
movzx eax, byte [rbx + 0x37]
mov byte [rbp - 0x11], al
movzx eax, byte [rbx + 0x38]
mov byte [rbp - 0x12], al
movzx eax, byte [rbx + 0x39]
mov byte [rbp - 0x13], al
movzx eax, byte [rbx + 0x3a]
mov byte [rbp - 0x14], al
movzx eax, byte [rbx + 0x3b]
mov byte [rbp - 0x15], al
movzx eax, byte [rbx + 0x3c]
mov byte [rbp - 0x16], al
movzx eax, byte [rbx + 0x3d]
mov byte [rbp - 0x17], al
movzx eax, byte [rbx + 0x3e]
mov byte [rbp - 0x18], al
movzx eax, byte [rbx + 0x3f]
mov byte [rbp - 0x19], al
mov qword [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
call fcn.1400d6a50
mov rcx, r15
mov ebx, eax
call fcn.140090bc0
test ebx, ebx
jg 0x14010e2fa
mov dword [rsp + 0x20], 0xc55
lea r9, [0x1401bd670]
jmp 0x14010e00a
mov r12d, 1
jmp 0x14010e340
mov dword [rsp + 0x20], 0xbf0
lea r9, [0x1401bd5b0]
mov r8d, 0x109
mov edx, 0x88
lea ecx, [rdx - 0x74]
call fcn.14006cd10
mov ebx, reloc.WLDAP32.dll_Ordinal_50
mov r8d, ebx
mov edx, 2
mov rcx, rdi
call fcn.1400f8460
mov dword [rdi + 0x48], 5
mov r14, qword [rsp + 0xf8]
xor ebx, ebx
mov rax, qword [rdi + 0x80]
mov rcx, qword [rax + 0x1b8]
test rcx, rcx
je 0x14010e37a
call fcn.14005ebc0
mov rcx, qword [rdi + 0x80]
mov qword [rcx + 0x1b8], rbx
mov rcx, qword [rdi + 0x80]
and dword [rcx], 0xffffffdf
lea rcx, [rbp - 0x49]
call fcn.140075730
mov rcx, rsi
call fcn.140066150
mov eax, r12d
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140111cf0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rbp
ret