Function at 0x14007fb30
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
movsxd rdi, dword [rdx + 0x3c]
lea rax, [0x140001b90]
add rdi, rdx
mov r13, rcx
lea rcx, [fcn.140001080]
xor ebx, ebx
sub rax, rcx
mov r14, r8
mov qword [rsp + 0x70], rax
mov r12, rdx
mov eax, dword [rdi + 0x50]
mov r15, rdx
mov rsi, qword [rdi + 0x30]
test eax, eax
je 0x14007fbdc
nop dword [rax]
mov rbx, rax
xor edx, edx
mov rax, qword gs:[0x30]
mov r8, rbx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call fcn.140308edc
int3
mov r12d, dword [rdi + 0xb0]
lea r9, [rbp - 0x40]
mov ecx, dword [rdi + 0x90]
lea rdx, [rsp + 0x60]
movzx eax, word [rdi + 0x14]
xor r8d, r8d
add rax, 0x18
mov dword [rbp - 0x78], ecx
add rax, rdi
mov dword [rsp + 0x28], 0x40
mov qword [rbp - 0x30], rax
mov rcx, r13
mov eax, dword [rdi + 0xb4]
mov r14d, r12d
mov qword [rbp - 0x60], rax
add rax, r12
mov qword [rbp - 0x58], rax
mov eax, dword [rdi + 0x98]
mov dword [rbp - 0x80], eax
mov eax, dword [rdi + 0x9c]
mov dword [rbp - 0x7c], eax
mov eax, dword [rdi + 0xd0]
mov dword [rbp - 0x74], eax
mov eax, dword [rdi + 0xa0]
mov dword [rbp - 0x70], eax
mov eax, dword [rdi + 0xa4]
mov dword [rbp - 0x6c], eax
mov qword [rsp + 0x60], 0
mov qword [rbp - 0x40], rbx
mov dword [rsp + 0x7c], r12d
mov dword [rsp + 0x20], 0x3000
push rsi
call fcn.140354a0a
test eax, eax
js 0x14007fdd5
mov eax, dword [rdi + 0x28]
mov r9d, 0x40
mov rdx, qword [rsp + 0x60]
mov r8, r15
add rax, rdx
mov qword [rsp + 0x20], 0
mov rcx, r13
mov qword [rbp - 0x28], rax
push rdi
call fcn.14032eb48
mov r13d, eax
test eax, eax
js 0x14007fd91
movsxd rdx, dword [r15 + 0x3c]
mov r9d, 0x108
add rdx, qword [rsp + 0x60]
mov r8, rdi
mov rcx, qword [rbp + 0x90]
mov qword [rsp + 0x20], 0
push rdx
call fcn.140275c5b
mov dword [rbp + 0xa8], eax
mov r13d, eax
test eax, eax
js 0x14007fd91
mov rcx, qword [rsp + 0x60]
test r12d, r12d
je 0x14007ff84
cmp rcx, rsi
je 0x14007ff84
sub rcx, rsi
mov edx, r12d
mov qword [rbp - 0x68], rcx
mov r13d, r12d
mov rcx, rdi
call fcn.1400804a0
xor r12d, r12d
mov dword [rsp + 0x78], eax
cmp r14, qword [rbp - 0x58]
jae 0x14007ff5e
mov r14, qword [rbp - 0x68]
nop word [rax + rax]
test r12d, r12d
jne 0x14007fd47
mov r12d, eax
jmp 0x14007fdfb
movzx r10d, word [rdi + 0x14]
xor edx, edx
movzx r11d, word [rdi + 6]
add r10, rdi
test r11d, r11d
je 0x14007fd8a
nop dword [rax + rax]
lea rcx, [rdx + rdx*4]
mov r9d, dword [r10 + rcx*8 + 0x24]
lea r8, [rcx*8]
cmp r13d, r9d
jb 0x14007fd83
mov ecx, dword [r8 + r10 + 0x20]
add ecx, r9d
cmp r13d, ecx
jbe 0x14007fdf0
inc edx
cmp edx, r11d
jne 0x14007fd60
mov r13d, dword [rbp + 0xa8]
mov rcx, qword [rbp + 0x90]
lea r8, [rbp - 0x40]
mov r9d, 0x8000
lea rdx, [rsp + 0x60]
push rdx
call fcn.140223104
cmp r15, qword [rbp + 0x98]
je 0x14007fdd2
mov rax, qword gs:[0x30]
mov r8, r15
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call fcn.1402a3f98
int3
mov eax, r13d
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r12d, dword [r10 + r8 + 0x2c]
sub r12d, r9d
add r12d, r13d
test r12d, r12d
je 0x14007fd8a
movzx r11d, word [rdi + 0x14]
xor edx, edx
movzx ebx, word [rdi + 6]
add r11, rdi
mov eax, r12d
add rax, r15
mov qword [rbp - 0x48], rax
mov esi, dword [rax + 4]
mov r10d, dword [rax]
sub rsi, 8
shr rsi, 1
test ebx, ebx
je 0x14007fd8a
nop dword [rax]
lea rcx, [rdx + rdx*4]
mov r9d, dword [r11 + rcx*8 + 0x24]
lea r8, [rcx*8]
cmp r10d, r9d
jb 0x14007fe53
mov ecx, dword [r8 + r11 + 0x20]
add ecx, r9d
cmp r10d, ecx
jbe 0x14007fe5e
inc edx
cmp edx, ebx
jne 0x14007fe30
jmp 0x14007fd8a
mov eax, dword [r11 + r8 + 0x2c]
sub eax, r9d
add eax, r10d
je 0x14007fd8a
movdqa xmm3, xmmword [0x14015ab60]
xor r8d, r8d
movdqa xmm4, xmmword [reloc.WS2_32.dll_ioctlsocket]
mov r9d, esi
movdqa xmm5, xmmword [0x14015ab50]
mov r11, qword [rbp - 0x48]
mov r10d, eax
add rax, r15
mov qword [rbp - 0x38], r10
movq xmm2, rax
punpcklqdq xmm2, xmm2
and r9d, 0xfffffffe
je 0x14007ff0f
mov r10, qword [rbp - 0x68]
nop
movzx ecx, word [r11 + r8*2 + 0xa]
movzx edx, word [r11 + r8*2 + 8]
movq xmm0, rcx
movq xmm1, rdx
punpcklqdq xmm1, xmm0
movdqa xmm0, xmm1
psraw xmm0, xmm5
pcmpeqb xmm0, xmm4
pmovmskb eax, xmm0
cmp eax, 0xfcfc
jne 0x14007ff07
pand xmm1, xmm3
add r8d, 2
paddq xmm1, xmm2
movq rax, xmm1
psrldq xmm1, 8
add qword [rax], r10
movq rax, xmm1
add qword [rax], r10
cmp r8d, r9d
jne 0x14007feb0
mov r10, qword [rbp - 0x38]
mov r14, qword [rbp - 0x68]
cmp r8d, esi
je 0x14007ff49
mov edx, 0xf000
mov r9d, 0xa000
nop
mov eax, r8d
movzx eax, word [r11 + r8*2 + 8]
movzx ecx, ax
and cx, dx
cmp cx, r9w
jne 0x14007ff41
and eax, 0xfff
add rax, r10
add qword [rax + r15], r14
inc r8d
cmp r8d, esi
jne 0x14007ff20
add r13d, dword [r11 + 4]
mov eax, r13d
cmp rax, qword [rbp - 0x58]
mov eax, dword [rsp + 0x78]
jb 0x14007fd30
mov r14, qword [rbp - 0x60]
xor edx, edx
mov ecx, eax
mov r8, r14
add rcx, r15
call fcn.14013d634
mov rcx, qword [rsp + 0x60]
mov r12d, dword [rsp + 0x7c]
mov r13d, dword [rbp + 0xa8]
jmp 0x14007ff88
mov r14, qword [rbp - 0x60]
mov eax, dword [rbp - 0x80]
test eax, eax
je 0x14007ffb8
mov edx, eax
mov rcx, rdi
call fcn.1400804a0
mov eax, eax
test rax, rax
je 0x14007fd91
mov r8d, dword [rbp - 0x7c]
lea rcx, [rax + r15]
xor edx, edx
call fcn.14013d634
mov rcx, qword [rsp + 0x60]
xor esi, esi
cmp word [rdi + 6], si
je 0x1400800b7
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp - 0x30]
lea rcx, [rsi + rsi*4]
lea rbx, [rax + rcx*8]
xor eax, eax
mov qword [rbx], rax
mov ecx, dword [rbx + 0xc]
cmp r12d, ecx
jb 0x140080070
mov edx, dword [rbx + 8]
mov rax, qword [rbp - 0x58]
add edx, ecx
cmp rax, rdx
ja 0x140080070
cmp ecx, r12d
jne 0x140080009
cmp rdx, rax
je 0x1400800a4
movzx r10d, word [rdi + 0x14]
xor edx, edx
movzx r11d, word [rdi + 6]
add r10, rdi
test r11d, r11d
je 0x14007fd91
lea rcx, [rdx + rdx*4]
mov r9d, dword [r10 + rcx*8 + 0x24]
lea r8, [rcx*8]
cmp r12d, r9d
jb 0x140080044
mov ecx, dword [r8 + r10 + 0x20]
add ecx, r9d
cmp r12d, ecx
jbe 0x140080050
inc edx
cmp edx, r11d
jne 0x140080021
jmp 0x14007fd91
mov eax, dword [r10 + r8 + 0x2c]
sub eax, r9d
add eax, r12d
je 0x14007fd91
mov ecx, eax
mov r8, r14
add rcx, r15
xor edx, edx
call fcn.14013d634
mov r8d, dword [rbx + 0x14]
mov edx, dword [rbx + 0xc]
add r8, r15
add rdx, qword [rsp + 0x60]
mov r9d, dword [rbx + 0x10]
mov rcx, qword [rbp + 0x90]
mov qword [rsp + 0x20], 0
call fcn.14035ffd1
int3
movzx eax, word [rdi + 6]
inc esi
cmp esi, eax
jne 0x14007ffd0
mov rcx, qword [rsp + 0x60]
mov eax, dword [rbp - 0x78]
mov qword [rbp - 0x20], rcx
test eax, eax
je 0x1400800d6
add rax, rcx
mov qword [rbp - 0x18], rax
mov rax, qword [0x14014f960]
mov qword [rbp - 0x10], rax
jmp 0x1400800e6
mov qword [rbp - 0x18], 0
mov qword [rbp - 0x10], 0
mov eax, dword [rbp - 0x74]
test eax, eax
je 0x1400800f6
add rax, rcx
mov qword [rbp - 8], rax
jmp 0x1400800fe
mov qword [rbp - 8], 0
mov eax, dword [rbp - 0x70]
test eax, eax
je 0x140080120
add rax, rcx
mov qword [rbp], rax
mov eax, dword [rbp - 0x6c]
mov qword [rbp + 8], rax
mov rax, qword [0x14014f968]
mov qword [rbp + 0x10], rax
jmp 0x140080138
mov qword [rbp], 0
mov qword [rbp + 8], 0
mov qword [rbp + 0x10], 0
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x90]
cmp rax, 0xffffffffffffffff
jne 0x140080169
lea rcx, [rbp - 0x20]
call fcn.140001080
test eax, eax
je 0x14007fd91
xor r12d, r12d
mov r13d, r12d
jmp 0x14007fdad
mov rdi, qword [rsp + 0x70]
lea r9, [rbp - 0x50]
mov dword [rsp + 0x28], 0x40
lea rdx, [rsp + 0x68]
xor r8d, r8d
mov qword [rsp + 0x68], 0
mov rcx, rax
mov dword [rsp + 0x20], 0x3000
lea rsi, [rdi + 0x40]
mov qword [rbp - 0x50], rsi
push rbp
call fcn.1402b637d
mov r13d, eax
test eax, eax
js 0x14007fd91
mov rbx, qword [rsp + 0x68]
lea r8, [fcn.140001080]
mov r14, qword [rbp + 0x90]
xor r12d, r12d
mov rdx, rbx
mov qword [rsp + 0x20], r12
mov rcx, r14
mov r9, rdi
push rax
call fcn.14029fb92
mov r13d, eax
test eax, eax
js 0x14007fd91
add rdi, rbx
mov qword [rsp + 0x20], r12
mov rdx, rdi
lea r9d, [r12 + 0x40]
lea r8, [rbp - 0x20]
mov rcx, r14
call fcn.1402c351e
int3