Function at 0x1400dffe0
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0xfa0]
mov eax, 0x10a0
call fcn.1402ff7c0
sub rsp, rax
mov rax, qword [0x1404280e0]
xor rax, rsp
mov qword [rbp + 0xf90], rax
mov r14, rcx
mov rdi, qword [0x14042bce8]
xor r15d, r15d
test rdi, rdi
je 0x1400e0180
mov r9d, 0x1000
mov r8, rdi
lea rdx, [rbp - 0x70]
call fcn.1400df1e0
test al, al
je 0x1400e0180
movsxd rax, dword [rbp - 0x34]
lea rcx, [rbp - 0x70]
add rcx, rax
movzx eax, word [rcx + 0x14]
lea r10, [rcx + 0x18]
add r10, rax
mov r8d, r15d
movzx r9d, word [rcx + 6]
test r9d, r9d
je 0x1400e0180
mov eax, r8d
lea rcx, [rax + rax*4]
lea rdx, [r10 + rcx*8]
cmp dword [rdx], 0x45474150
jne 0x1400e009f
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], r15b
jne 0x1400e0090
cmp rax, 4
je 0x1400e00ad
inc r8d
cmp r8d, r9d
jae 0x1400e0180
jmp 0x1400e0071
mov eax, dword [rdx + 0xc]
test eax, eax
je 0x1400e0180
mov ecx, dword [rdx + 8]
lea rbx, [rbp - 0x70]
add rbx, rax
je 0x1400e0180
test ecx, ecx
je 0x1400e0180
lea rax, [rbp - 0x70]
sub rbx, rax
add rbx, rdi
mov edi, ecx
je 0x1400e0180
cmp rcx, 0x40000000
ja 0x1400e0180
call fcn.1402ff054
mov rsi, rax
mov r9d, edi
mov r8, rbx
mov rdx, rax
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e0180
add rdi, 0xffffffffffffffd4
mov r8, r15
je 0x1400e0178
lea r11, [0x1403d23c0]
mov r10, rsi
sub r10, r11
nop dword [rax]
nop word [rax + rax]
lea rdx, str.xxxxxx____xxxxx____xxx____xxxxx____x____xx_x
mov rcx, r11
mov al, 0x78
lea r9, [r10 + r8]
cmp al, 0x78
jne 0x1400e014d
movzx eax, byte [rcx]
cmp byte [r9 + rcx], al
jne 0x1400e0170
inc rdx
inc rcx
movzx eax, byte [rdx]
test al, al
jne 0x1400e0140
lea rax, [r8 + rsi]
test rax, rax
je 0x1400e0178
add rbx, r8
mov rcx, rsi
call fcn.1402fecf0
jmp 0x1400e0183
inc r8
cmp r8, rdi
jb 0x1400e0130
mov rcx, rsi
call fcn.1402fecf0
mov rbx, r15
mov qword [0x14042bc68], rbx
mov rdi, qword [0x14042bce8]
test rdi, rdi
je 0x1400e02f0
mov r9d, 0x1000
mov r8, rdi
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e02f0
movsxd rax, dword [rbp - 0x34]
lea rcx, [rbp - 0x70]
add rcx, rax
movzx eax, word [rcx + 0x14]
lea r10, [rcx + 0x18]
add r10, rax
mov r8d, r15d
movzx r9d, word [rcx + 6]
test r9d, r9d
je 0x1400e02f0
nop
mov eax, r8d
lea rcx, [rax + rax*4]
lea rdx, [r10 + rcx*8]
cmp dword [rdx], 0x45474150
jne 0x1400e020f
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rdx + rax], r15b
jne 0x1400e0200
cmp rax, 4
je 0x1400e021d
inc r8d
cmp r8d, r9d
jae 0x1400e02f0
jmp 0x1400e01e0
mov eax, dword [rdx + 0xc]
test eax, eax
je 0x1400e02f0
mov ecx, dword [rdx + 8]
lea rbx, [rbp - 0x70]
add rbx, rax
je 0x1400e02f0
test ecx, ecx
je 0x1400e02f0
lea rax, [rbp - 0x70]
sub rbx, rax
add rbx, rdi
mov edi, ecx
je 0x1400e02f0
cmp rcx, 0x40000000
ja 0x1400e02f0
call fcn.1402ff054
mov rsi, rax
mov r9d, edi
mov r8, rbx
mov rdx, rax
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e02f0
add rdi, 0xfffffffffffffffa
mov r8, r15
je 0x1400e02e8
lea r11, [0x1403d2438]
mov r10, rsi
sub r10, r11
nop dword [rax]
nop word [rax + rax]
lea rdx, str.xxxxxx
mov rcx, r11
mov al, 0x78
lea r9, [r10 + r8]
cmp al, 0x78
jne 0x1400e02bd
movzx eax, byte [rcx]
cmp byte [r9 + rcx], al
jne 0x1400e02e0
inc rdx
inc rcx
movzx eax, byte [rdx]
test al, al
jne 0x1400e02b0
lea rax, [r8 + rsi]
test rax, rax
je 0x1400e02e8
add rbx, r8
mov rcx, rsi
call fcn.1402fecf0
jmp 0x1400e02f3
inc r8
cmp r8, rdi
jb 0x1400e02a0
mov rcx, rsi
call fcn.1402fecf0
mov rbx, r15
mov qword [0x14042bc70], rbx
cmp qword [0x14042bc68], r15
jne 0x1400e04bd
mov rdi, qword [0x14042bce8]
test rdi, rdi
je 0x1400e0488
mov r9d, 0x1000
mov r8, rdi
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e0488
movsxd rax, dword [rbp - 0x34]
lea rcx, [rbp - 0x70]
add rcx, rax
movzx eax, word [rcx + 0x14]
lea r10, [rcx + 0x18]
add r10, rax
mov r8d, r15d
movzx r9d, word [rcx + 6]
test r9d, r9d
je 0x1400e0488
nop dword [rax + rax]
mov eax, r8d
lea rcx, [rax + rax*4]
lea rdx, [r10 + rcx*8]
cmp dword [rdx], 0x45474150
jne 0x1400e038f
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rdx + rax], r15b
jne 0x1400e0380
cmp rax, 4
je 0x1400e039d
inc r8d
cmp r8d, r9d
jae 0x1400e0488
jmp 0x1400e0360
mov eax, dword [rdx + 0xc]
test eax, eax
je 0x1400e0488
mov ecx, dword [rdx + 8]
lea rbx, [rbp - 0x70]
add rbx, rax
je 0x1400e0488
test ecx, ecx
je 0x1400e0488
lea rax, [rbp - 0x70]
sub rbx, rax
add rbx, rdi
mov edi, ecx
je 0x1400e0488
cmp rcx, 0x40000000
ja 0x1400e0488
call fcn.1402ff054
mov rsi, rax
mov r9d, edi
mov r8, rbx
mov rdx, rax
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e0488
add rdi, 0xffffffffffffffe3
mov r8, r15
je 0x1400e0480
lea r11, [0x1403d2440]
mov r10, rsi
sub r10, r11
nop word [rax + rax]
lea rdx, str.xxx____xxxxx____xxx____x____x
mov rcx, r11
mov al, 0x78
lea r9, [r10 + r8]
cmp al, 0x78
jne 0x1400e043d
movzx eax, byte [rcx]
cmp byte [r9 + rcx], al
jne 0x1400e0478
inc rdx
inc rcx
movzx eax, byte [rdx]
test al, al
jne 0x1400e0430
lea rax, [r8 + rsi]
test rax, rax
je 0x1400e0480
lea rdi, [r8 + rbx]
mov rcx, rsi
call fcn.1402fecf0
mov qword [0x14042bc68], rdi
test rdi, rdi
je 0x1400e048f
add rdi, 0x10
mov rbx, qword [0x14042bc70]
jmp 0x1400e04c8
inc r8
cmp r8, rdi
jb 0x1400e0420
mov rcx, rsi
call fcn.1402fecf0
mov qword [0x14042bc68], r15
xor al, al
mov rcx, qword [rbp + 0xf90]
xor rcx, rsp
call fcn.1402fecd0
lea r11, [rsp + 0x10a0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov rdi, qword [0x14042bc68]
add rdi, 0x1c
mov qword [0x14042bc68], rdi
test rbx, rbx
je 0x1400e048f
mov dword [rsp + 0x38], r15d
lea r8, [rdi + 3]
mov r9d, 4
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.1400df1e0
test al, al
jne 0x1400e04f9
mov rdi, r15
jmp 0x1400e0505
movsxd rax, dword [rsp + 0x38]
add rax, 7
add rdi, rax
mov rbx, qword [0x14042bc70]
mov dword [rsp + 0x3c], r15d
lea r8, [rbx + 6]
mov r9d, 4
lea rdx, [rsp + 0x3c]
mov rcx, r14
call fcn.1400df1e0
test al, al
jne 0x1400e0531
mov rbx, r15
jmp 0x1400e053d
movsxd rax, dword [rsp + 0x3c]
add rbx, 0xa
add rbx, rax
mov rdx, rdi
mov rcx, r14
call fcn.1400dfb20
test al, al
je 0x1400e048f
lea rcx, [rsp + 0x70]
call fcn.1400de840
nop
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r9, qword [rsp + 0x70]
mov rdx, rbx
mov rcx, r14
call fcn.1400dfe00
mov rsi, rax
test rax, rax
je 0x1400e07ac
lea r8, [rax + 8]
mov r9d, 8
lea rdx, [rsp + 0x48]
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e07ac
mov r9d, 8
mov r8, rsi
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e07ac
mov r9d, 8
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e07ac
mov rdx, qword [rsp + 0x40]
add rdx, 8
mov r9d, 8
lea r8, [rsp + 0x48]
mov rcx, r14
call fcn.1400df1e0
test al, al
je 0x1400e07ac
test rbx, rbx
je 0x1400e07ac
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14043e160], eax
jle 0x1400e0732
lea rcx, [0x14043e160]
call fcn.1402ff130
cmp dword [0x14043e160], 0xffffffff
jne 0x1400e0732
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov ecx, 0x20
call fcn.1402fecf8
mov rdx, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], 0x1f
mov qword [rsp + 0x68], 0x1f
movups xmm0, xmmword [str.RtlDeleteElementGenericTableAvl]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1403d23b0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1403d23b8]
mov dword [rax + 0x18], ecx
movzx eax, word [0x1403d23bc]
mov word [rdx + 0x1c], ax
movzx eax, byte [0x1403d23be]
mov byte [rdx + 0x1e], al
mov byte [rdx + 0x1f], 0
lea r8, [rsp + 0x50]
mov rdx, qword [0x14042bce8]
mov rcx, r14
call fcn.1400df540
mov qword [0x14043e128], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400e0713
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e070e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e070e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1402fecf0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
lea rcx, [0x14043e160]
call fcn.1402ff0c4
cmp qword [0x14043e128], 0
je 0x1400e07ac
mov qword [rsp + 0x20], rsi
mov r9, rbx
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1400e19c0
test al, al
je 0x1400e07ac
cmp byte [rsp + 0x30], 0
je 0x1400e07ac
mov dword [rsp + 0x34], r15d
mov r9d, 4
lea r8, [rbx + 0x40]
lea rdx, [rsp + 0x34]
mov rcx, r14
call fcn.1400df1e0
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x1400e079d
dec eax
mov dword [rsp + 0x34], eax
mov r9d, 4
lea r8, [rsp + 0x34]
lea rdx, [rbx + 0x40]
mov rcx, r14
call fcn.1400df1e0
mov rdx, rdi
mov rcx, r14
call fcn.1400dfca0
mov bl, 1
jmp 0x1400e07b9
mov rdx, rdi
mov rcx, r14
call fcn.1400dfca0
xor bl, bl
lea rcx, [rsp + 0x70]
call fcn.1400a13c0
movzx eax, bl
jmp 0x1400e0491