Function at 0x1400d45c0
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov rbx, qword [rcx + 0x10]
mov rax, qword [rdx]
movzx r12d, byte [rdx + 0x24]
mov eax, dword [rax]
mov r15, rcx
xor edi, edi
mov dword [rsp + 0x90], eax
not r12d
mov rsi, rdx
and r12d, 1
mov dword [rsp + 0x30], edi
lea ecx, [rax + r12]
mov eax, dword [rdx + 8]
add ecx, dword [rsp + 0xb8]
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x38], ecx
test eax, eax
je 0x1400d462d
mov ebp, r9d
sub ebp, eax
jmp 0x1400d463a
mov eax, dword [r15 + 0x38]
lea ebp, [rax + 1]
add eax, ecx
mov dword [r15 + 0x38], eax
mov eax, dword [r8 + 0x14]
test eax, eax
je 0x1400d4646
inc eax
jmp 0x1400d464a
mov eax, dword [r8 + 0x10]
mov r13, qword [rbx + 0x18]
mov dword [rsp + 0x34], eax
movsxd r14, dword [r13 + 0x48]
lea eax, [r14 + 1]
mov dword [r13 + 0x48], eax
lea eax, [r14 - 1]
test r14d, eax
jne 0x1400d4684
mov rdx, qword [r13 + 0x50]
mov rcx, qword [r13]
lea eax, [r14 + r14 + 1]
movsxd r8, eax
shl r8, 2
call fcn.1400635f0
mov qword [r13 + 0x50], rax
mov rdx, qword [r13 + 0x50]
or ecx, 0xffffffff
test rdx, rdx
je 0x1400d4694
mov dword [rdx + r14*4], ecx
mov r9d, dword [rsp + 0xb0]
mov rdx, qword [rsi]
sub ecx, r14d
mov dword [rsi + 0x1c], ecx
mov eax, r9d
mov r8d, ebp
neg eax
sbb cl, cl
and cl, 4
or cl, 1
mov byte [rsp + 0x20], cl
mov rcx, r15
call fcn.1400a93b0
mov r14d, dword [rsp + 0x90]
test r12d, r12d
je 0x1400d472e
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
mov r8d, dword [rsi + 0xc]
cmp dword [rax + 0x3c], ecx
lea edx, [rbp + r14]
jg 0x1400d46fd
mov r9d, edx
mov rcx, rbx
mov edx, 0x78
mov dword [rsp + 0x20], edi
call fcn.140087c10
jmp 0x1400d472e
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], 0x78
mov word [rax + rcx*8 + 2], di
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
cmp dword [rsp + 0xc0], edi
jne 0x1400d4764
mov eax, dword [rsp + 0xb8]
test eax, eax
jle 0x1400d4764
mov r8d, dword [rsp + 0xa8]
mov rcx, qword [r15 + 0x10]
lea r9d, [rbp + r14]
add r9d, r12d
mov edx, 0x4d
mov dword [rsp + 0x20], eax
call fcn.140087c80
cmp dword [rsp + 0x98], edi
mov r13d, dword [rsp + 0x38]
jle 0x1400d4a88
mov r8, qword [rsp + 0xa0]
mov r9d, ebp
mov rdx, rsi
mov rcx, r15
mov dword [rsp + 0x20], r13d
call fcn.1400d4540
mov edx, dword [r15 + 0x38]
mov rcx, rbx
mov dword [rsp + 0x30], eax
lea eax, [rdx + 1]
add edx, dword [rsi + 8]
mov dword [r15 + 0x38], edx
sub r14d, dword [rsi + 8]
mov dword [rsp + 0xb0], eax
add r14d, r12d
test r12d, r12d
je 0x1400d47cc
mov eax, dword [rsp + 0x90]
mov edx, socket
lea r8d, [rbp + rax]
jmp 0x1400d47d5
mov r8d, dword [rsi + 0xc]
mov edx, reloc.WS2_32.dll_WSAStartup
call fcn.140087d80
mov r8d, dword [rsp + 0xb0]
mov r9d, ebp
mov dword [rsp + 0xc0], eax
mov eax, dword [rsi + 8]
mov edx, 0x57
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.140087c80
mov r11d, dword [rsi + 0x18]
test r11d, r11d
jns 0x1400d4813
mov r11d, dword [rbx + 0xb8]
dec r11d
mov rax, qword [rbx]
cmp byte [rax + 0x61], dil
je 0x1400d4825
lea rcx, [0x14018a908]
jmp 0x1400d4834
movsxd rax, r11d
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rcx, [rax + rcx*8]
mov rax, qword [r15]
mov qword [rsp + 0x38], rcx
cmp byte [rax + 0x61], dil
jne 0x1400d4caf
mov r12, qword [rcx + 0x10]
mov eax, dword [rsp + 0xb8]
xor edx, edx
add eax, r14d
mov dword [rcx + 8], eax
movzx r8d, word [r12 + 6]
mov rcx, qword [r12 + 0x18]
call sub.MSVCR90.dll_memset
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], dil
je 0x1400d4881
mov r8, r12
mov edx, 0xfffffff7
call fcn.1400889a0
jmp 0x1400d48b9
mov eax, dword [rbx + 0xb8]
dec eax
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
cmp byte [rax + rcx*8 + 1], dil
lea rdx, [rax + rcx*8]
je 0x1400d48b1
mov r9d, 0xfffffff7
mov r8, r12
mov rcx, rbx
call fcn.140088ba0
jmp 0x1400d48b9
mov qword [rdx + 0x10], r12
mov byte [rdx + 1], 0xf7
movzx r9d, word [r12 + 8]
movzx eax, word [r12 + 6]
mov r8d, dword [rsp + 0x98]
mov rdx, qword [rsi]
sub r9d, eax
mov rcx, r15
dec r9d
call fcn.1400d5f00
mov rcx, qword [rsp + 0x38]
xor r9d, r9d
mov qword [rcx + 0x10], rax
mov r12d, dword [rbx + 0xb8]
lea edx, [r9 + 0x10]
lea r8d, [r12 + 1]
mov rcx, rbx
mov dword [rsp + 0x20], r8d
call fcn.140087c80
mov rcx, rbx
call fcn.140088490
mov dword [rsi + 0x14], eax
inc dword [r15 + 0x38]
mov edx, dword [r15 + 0x38]
mov r8d, dword [rsi + 0x14]
mov dword [rsi + 0x10], edx
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], ecx
jg 0x1400d494a
mov r9d, r8d
mov r8d, edx
mov rcx, rbx
mov edx, reloc.WS2_32.dll_inet_ntoa
mov dword [rsp + 0x20], edi
call fcn.140087c10
jmp 0x1400d497b
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], reloc.WS2_32.dll_inet_ntoa
mov word [rax + rcx*8 + 2], di
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
mov r8d, dword [rsi + 0xc]
mov edx, 0x8b
mov rcx, rbx
call fcn.140087d80
mov r14d, dword [rsp + 0x34]
test r14d, r14d
je 0x1400d49f5
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
mov r8d, dword [rsi + 0x1c]
cmp dword [rax + 0x3c], ecx
jg 0x1400d49c3
mov r9d, r8d
mov edx, socket
mov rcx, rbx
mov r8d, r14d
mov dword [rsp + 0x20], edi
call fcn.140087c10
jmp 0x1400d49f5
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], socket
mov word [rax + rcx*8 + 2], di
mov dword [rax + rcx*8 + 4], r14d
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
mov ecx, dword [rsp + 0xc0]
mov edx, dword [rbx + 0xb8]
test ecx, ecx
jns 0x1400d4a09
lea ecx, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x61], dil
je 0x1400d4a1b
lea rax, [0x14018a908]
jmp 0x1400d4a2a
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov r9d, dword [rsp + 0xb0]
mov dword [rax + 8], edx
mov eax, dword [rsi + 8]
mov rcx, qword [r15 + 0x10]
mov r8d, ebp
mov edx, 0x4d
mov dword [rsp + 0x20], eax
call fcn.140087c80
mov r11d, dword [rbx + 0xb8]
test r12d, r12d
jns 0x1400d4a5d
lea r12d, [r11 - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x61], dil
je 0x1400d4a73
lea rax, [0x14018a908]
mov dword [rax + 8], r11d
jmp 0x1400d4a8d
movsxd rax, r12d
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov dword [rax + 8], r11d
jmp 0x1400d4a8d
mov r14d, dword [rsp + 0x34]
test r14d, r14d
je 0x1400d4bf7
movsxd rcx, dword [rbx + 0xb8]
mov rax, qword [rbx + 0x18]
mov r12d, dword [rsi + 0xc]
cmp dword [rax + 0x3c], ecx
lea edx, [rcx + 4]
jg 0x1400d4ac6
mov r9d, edx
mov r8d, r14d
mov rcx, rbx
mov edx, 0x30
mov dword [rsp + 0x20], edi
call fcn.140087c10
jmp 0x1400d4af7
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], 0x30
mov word [rax + rcx*8 + 2], di
mov dword [rax + rcx*8 + 4], r14d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], ecx
jg 0x1400d4b1f
xor r9d, r9d
mov r8d, r12d
mov rcx, rbx
lea edx, [r9 + 0x20]
mov dword [rsp + 0x20], edi
call fcn.140087c10
jmp 0x1400d4b50
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], 0x20
mov word [rax + rcx*8 + 2], di
mov dword [rax + rcx*8 + 4], r12d
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
mov rax, qword [rbx + 0x18]
mov r14d, dword [rsp + 0x98]
movsxd rdx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], edx
lea r8d, [rbp + r14]
jg 0x1400d4b88
xor r9d, r9d
mov dword [rsp + 0x20], r8d
mov rcx, rbx
lea edx, [r9 + 0x25]
mov r8d, r12d
call fcn.140087c10
mov edx, eax
jmp 0x1400d4bba
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], 0x25
mov word [rax + rcx*8 + 2], di
mov dword [rax + rcx*8 + 4], r12d
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], r8d
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
mov rax, qword [rbx]
cmp byte [rax + 0x61], dil
jne 0x1400d4be3
mov r8d, dword [rsp + 0x90]
movsxd rax, edx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
sub r8d, r14d
mov byte [rax + rcx*8 + 1], 0xfd
mov dword [rax + rcx*8 + 0x10], r8d
mov edi, edx
mov r8d, r12d
mov rcx, rbx
mov edx, 0x7c
call fcn.140087d80
jmp 0x1400d4bff
mov r14d, dword [rsp + 0x98]
mov r9d, dword [rsp + 0x30]
test r9d, r9d
jne 0x1400d4c27
mov r8, qword [rsp + 0xa0]
mov r9d, ebp
mov rdx, rsi
mov rcx, r15
mov dword [rsp + 0x20], r13d
call fcn.1400d4540
mov r9d, eax
movzx eax, byte [rsi + 0x24]
mov r8d, dword [rsi + 0xc]
mov rcx, rbx
not al
movzx edx, al
lea eax, [rbp + r14]
and edx, 1
mov dword [rsp + 0x20], eax
or edx, 0x84
call fcn.140087c80
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], 0
jne 0x1400d4c6e
cdqe
sub r13d, r14d
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8 + 1], 0xfd
mov dword [rax + rcx*8 + 0x10], r13d
test edi, edi
je 0x1400d4caf
mov edx, dword [rsi + 0x20]
test edx, edx
jne 0x1400d4c7f
mov edx, dword [rbx + 0xb8]
test edi, edi
jns 0x1400d4c8b
mov edi, dword [rbx + 0xb8]
dec edi
mov rax, qword [rbx]
cmp byte [rax + 0x61], 0
je 0x1400d4c9d
lea rax, [0x14018a908]
jmp 0x1400d4cac
movsxd rax, edi
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov dword [rax + 8], edx
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret