Function at 0x1401d5c20
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, rdx
mov r15, rcx
mov r14d, dword [rsp + 0xe0]
mov ebp, dword [rsp + 0xd8]
movzx r12d, byte [rdx + 0x24]
and r12d, 1
mov r13d, r12d
xor r13d, 1
mov rax, qword [rdx]
mov edx, dword [rax]
lea eax, [rbp + r13]
mov qword [rsp + 0x50], rdx
add eax, edx
mov dword [rsp + 0x4c], eax
mov ecx, dword [rsi + 8]
test r14d, r14d
mov dword [rsp + 0x3c], r9d
je 0x1401d5e02
mov ebx, r9d
sub ebx, r14d
mov r9d, dword [rsp + 0xd0]
mov eax, dword [r8 + 0xc]
test eax, eax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x60], r8
jne 0x1401d6161
mov eax, dword [r8 + 8]
mov dword [rsp + 0x38], eax
mov rdi, qword [r15 + 0x10]
mov eax, dword [r15 + 0x44]
dec eax
mov dword [r15 + 0x44], eax
mov dword [rsi + 0x1c], eax
test r9d, r9d
setne al
shl al, 2
inc al
mov rdx, qword [rsi]
mov byte [rsp + 0x20], al
mov rcx, r15
mov r8d, ebx
call fcn.140287c50
test r12b, r12b
je 0x1401d5e45
test r14d, r14d
setne al
test ebp, ebp
setle cl
or cl, al
mov r14d, dword [rsp + 0x4c]
mov r11, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x38]
je 0x1401d5ece
xor r10d, r10d
mov ebp, 0
test r11d, r11d
jg 0x1401d61b2
test r8d, r8d
jne 0x1401d5f4b
test ebp, ebp
jne 0x1401d5d8d
mov r12d, dword [rsi + 8]
mov r13, qword [r15 + 0x10]
mov ebp, dword [r15 + 0x38]
inc ebp
mov dword [r15 + 0x38], ebp
mov rax, qword [rsi + 0x28]
test rax, rax
jne 0x1401d5ea0
mov r9d, r14d
sub r9d, r12d
add r12d, ebx
movsxd rax, dword [r13 + 0x90]
cmp dword [r13 + 0x94], eax
jle 0x1401d5f27
lea ecx, [rax + 1]
mov dword [r13 + 0x90], ecx
mov rcx, qword [r13 + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x6d
mov dword [rcx + rax*8 + 4], r12d
mov dword [rcx + rax*8 + 8], r9d
mov dword [rcx + rax*8 + 0xc], ebp
mov qword [rcx + rax*8 + 0x10], 0
movzx edx, byte [rsi + 0x24]
and edx, 1
or edx, 0x8a
sub r14d, r11d
add ebx, r11d
mov r8d, dword [rsi + 0xc]
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401d6119
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov byte [rcx + rax*8], dl
mov word [rcx + rax*8 + 2], 0
mov dword [rcx + rax*8 + 4], r8d
mov dword [rcx + rax*8 + 8], ebp
mov dword [rcx + rax*8 + 0xc], ebx
mov dword [rcx + rax*8 + 0x10], r14d
mov byte [rcx + rax*8 + 1], 0xfd
test r10d, r10d
jne 0x1401d5e16
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [r15 + 0x38]
lea ebx, [rax + 1]
add eax, dword [rsp + 0x4c]
mov dword [r15 + 0x38], eax
jmp 0x1401d5c81
mov eax, dword [rsi + 0x20]
test eax, eax
je 0x1401d6168
mov rcx, qword [rdi]
cmp byte [rcx + 0x67], 0
jne 0x1401d6173
movsxd rcx, r10d
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rdi + 0x88]
mov dword [rcx + 8], eax
jmp 0x1401d5df1
mov rax, qword [rsp + 0x50]
lea r9d, [rbx + rax]
mov r8d, dword [rsi + 0xc]
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401d60af
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x7e
mov dword [rcx + rax*8 + 4], r8d
mov dword [rcx + rax*8 + 8], r9d
mov dword [rcx + rax*8 + 0xc], 0
mov qword [rcx + rax*8 + 0x10], 0
jmp 0x1401d5cde
mov cl, byte [rax + 4]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x60]
mov rdx, qword [rax + 0x20]
mov byte [rsp + 0x20], cl
mov rcx, r15
xor r9d, r9d
mov r15d, r10d
call fcn.140287c50
mov r10d, r15d
mov r11, qword [rsp + 0x40]
jmp 0x1401d5d3d
add r13d, dword [rsp + 0x50]
add r13d, ebx
mov rcx, qword [r15 + 0x10]
movsxd rax, dword [rcx + 0x90]
cmp dword [rcx + 0x94], eax
jle 0x1401d60f4
lea edx, [rax + 1]
mov dword [rcx + 0x90], edx
mov rcx, qword [rcx + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x4f
mov edx, dword [rsp + 0x3c]
mov dword [rcx + rax*8 + 4], edx
mov dword [rcx + rax*8 + 8], r13d
mov dword [rcx + rax*8 + 0xc], ebp
mov qword [rcx + rax*8 + 0x10], 0
jmp 0x1401d5d00
mov dword [rsp + 0x20], ebp
mov rcx, r13
mov edx, 0x6d
mov r8d, r12d
mov r15d, r10d
call fcn.1401b1310
mov r10d, r15d
mov r11, qword [rsp + 0x40]
jmp 0x1401d5d8d
mov r13d, dword [rsi + 0xc]
movsxd rax, dword [rdi + 0x90]
lea r9d, [rax + 4]
cmp dword [rdi + 0x94], eax
jle 0x1401d606b
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x3c
mov dword [rcx + rax*8 + 4], r8d
mov dword [rcx + rax*8 + 8], r9d
mov dword [rcx + rax*8 + 0xc], 0
mov qword [rcx + rax*8 + 0x10], 0
mov r12, qword [rsp + 0x50]
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401d608a
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x20
mov dword [rcx + rax*8 + 4], r13d
xorps xmm0, xmm0
movups xmmword [rcx + rax*8 + 8], xmm0
sub r12d, r11d
lea eax, [rbx + r11]
mov r10d, dword [rdi + 0x90]
cmp dword [rdi + 0x94], r10d
jle 0x1401d6138
movsxd rcx, r10d
lea edx, [rcx + 1]
mov dword [rdi + 0x90], edx
mov rdx, qword [rdi + 0x88]
lea rcx, [rcx + rcx*2]
mov dword [rdx + rcx*8], 0xfd28
mov dword [rdx + rcx*8 + 4], r13d
mov dword [rdx + rcx*8 + 8], 0
mov dword [rdx + rcx*8 + 0xc], eax
mov dword [rdx + rcx*8 + 0x10], r12d
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401d60c9
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x82
mov dword [rcx + rax*8 + 4], r13d
xorps xmm0, xmm0
movups xmmword [rcx + rax*8 + 8], xmm0
jmp 0x1401d5d1a
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x3c
call fcn.1401b1310
mov r11, qword [rsp + 0x40]
jmp 0x1401d5f9c
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x20
mov r8d, r13d
xor r9d, r9d
call fcn.1401b1310
mov r11, qword [rsp + 0x40]
jmp 0x1401d5fdc
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x7e
call fcn.1401b1310
jmp 0x1401d5cde
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x82
mov r8d, r13d
xor r9d, r9d
mov r12d, r10d
call fcn.1401b1310
mov r10d, r12d
mov r11, qword [rsp + 0x40]
jmp 0x1401d5d1a
mov dword [rsp + 0x20], ebp
mov edx, 0x4f
mov r8d, dword [rsp + 0x3c]
mov r9d, r13d
call fcn.1401b1310
mov r8d, dword [rsp + 0x38]
mov r11, qword [rsp + 0x40]
jmp 0x1401d5d00
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], ebx
mov rcx, rdi
mov r9d, ebp
mov ebx, r10d
call fcn.1401b14c0
mov r10d, ebx
jmp 0x1401d5dec
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
mov rcx, rdi
mov edx, 0x28
mov r8d, r13d
xor r9d, r9d
call fcn.1401b14c0
mov r11, qword [rsp + 0x40]
mov r10d, eax
jmp 0x1401d602b
inc eax
jmp 0x1401d5ca3
mov eax, dword [rdi + 0x90]
jmp 0x1401d5e21
lea rcx, [0x140521a10]
jmp 0x1401d5e40
mov rax, qword [rsp + 0x50]
lea r8d, [rbx + rax]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x12
jmp 0x1401d61fb
movsxd rax, dword [rsi + 0x18]
lea r12, [rax + rax*2]
shl r12, 3
add r12, qword [rdi + 0x88]
jmp 0x1401d6237
mov dword [rsp + 0x20], r14d
mov rcx, r15
mov rdx, rsi
mov r8, qword [rsp + 0x60]
mov r9d, ebx
call fcn.14040fbb0
mov ecx, dword [r15 + 0x38]
lea edx, [rcx + 1]
mov dword [rsp + 0x3c], edx
add ecx, dword [rsi + 8]
mov ebp, eax
mov dword [r15 + 0x38], ecx
mov r14d, dword [rsi + 8]
test r12b, r12b
je 0x1401d617f
mov r8d, dword [rsi + 0xc]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, pe_nt_image_headers64
xor r9d, r9d
call fcn.1404006f0
mov dword [rsp + 0x5c], eax
mov eax, dword [rsi + 8]
mov dword [rsp + 0x20], eax
mov rcx, rdi
mov edx, 0x5a
mov r8d, dword [rsp + 0x3c]
mov r9d, ebx
call fcn.1404006f0
mov rax, qword [rdi]
cmp byte [rax + 0x67], 0
je 0x1401d619a
lea r12, [0x140521a10]
mov rax, qword [r15]
cmp byte [rax + 0x67], 0
jne 0x1401d5df1
mov eax, dword [rsp + 0x4c]
sub eax, r14d
mov dword [r12 + 8], eax
mov r13, qword [r12 + 0x10]
mov rcx, qword [r13 + 0x18]
movzx r8d, word [r13 + 6]
xor edx, edx
call fcn.1402d26c0
mov rcx, rdi
mov edx, 0xffffffff
mov r8, r13
mov r9d, 0xfffffff8
call fcn.1401c3300
movzx eax, word [r13 + 8]
movzx r9d, word [r13 + 6]
not r9d
add r9d, eax
mov rdx, qword [rsi]
mov rcx, r15
mov r8, qword [rsp + 0x40]
call fcn.1401cbe20
mov qword [r12 + 0x10], rax
movsxd r14, dword [rdi + 0x90]
lea r8d, [r14 + 1]
mov dword [rsp + 0x20], r8d
mov rcx, rdi
mov edx, reloc.WS2_32.dll_ntohl
xor r9d, r9d
call fcn.1404006f0
mov eax, dword [r15 + 0x44]
dec eax
mov dword [r15 + 0x44], eax
mov dword [rsi + 0x14], eax
mov r8d, dword [r15 + 0x38]
inc r8d
mov dword [r15 + 0x38], r8d
mov dword [rsi + 0x10], r8d
mov r9d, dword [rsi + 0x14]
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov rcx, rdi
mov edx, 0xa
call fcn.1404006f0
mov r8d, dword [rsi + 0xc]
mov dword [rsp + 0x20], r12d
mov rcx, rdi
mov edx, 0x93
xor r9d, r9d
call fcn.1404006f0
cmp dword [rsp + 0x38], 0
je 0x1401d6333
mov r9d, dword [rsi + 0x1c]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x12
mov r8d, dword [rsp + 0x38]
call fcn.1404006f0
mov eax, dword [rdi + 0x90]
mov rcx, qword [rdi]
lea r12, [0x140521a10]
cmp byte [rcx + 0x67], 0
mov rcx, r12
jne 0x1401d6360
movsxd rcx, dword [rsp + 0x5c]
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rdi + 0x88]
mov dword [rcx + 8], eax
mov eax, dword [rsi + 8]
mov rcx, qword [r15 + 0x10]
mov dword [rsp + 0x20], eax
mov edx, 0x4f
mov r8d, ebx
mov r9d, dword [rsp + 0x3c]
call fcn.1404006f0
mov eax, dword [rdi + 0x90]
mov rcx, qword [rdi]
cmp byte [rcx + 0x67], 0
jne 0x1401d639e
lea r12, [r14 + r14*2]
shl r12, 3
add r12, qword [rdi + 0x88]
mov dword [r12 + 8], eax
mov r14d, dword [rsp + 0x4c]
mov r11, qword [rsp + 0x40]
xor r10d, r10d
mov r8d, dword [rsp + 0x38]
jmp 0x1401d5d11