Function at 0x180001a60
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
call fcn.18004c790
test al, al
jne 0x180001a84
mov eax, 7
jmp 0x180001aef
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180001aea
movsxd rbx, dword [rax + 0x3c]
add rbx, rax
movzx eax, word [rbx + 0x14]
lea rsi, [rbx + 0x18]
add rsi, rax
mov qword [rsp + 0x58], rsi
xor edi, edi
nop word [rax + rax]
mov rdx, rsi
lea rcx, str..text
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180001b03
lea rsi, [rdi*4 + 3]
movzx ecx, word [rbx + 0x14]
add rcx, rbx
add rsi, rdi
lea rsi, [rcx + rsi*8]
mov qword [rsp + 0x58], rsi
inc edi
movzx eax, word [rbx + 6]
cmp edi, eax
jbe 0x180001ab0
mov eax, 2
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov eax, dword [rsi + 0xc]
add rcx, rax
mov qword [rsp + 0x60], rcx
mov r9d, dword [rsi + 0x10]
mov r8, rcx
mov rdx, rcx
lea rcx, [rsp + 0x80]
call fcn.180009ea0
nop
xor esi, esi
mov ebx, esi
mov r10d, esi
mov r12, qword [rsp + 0x88]
mov r9, qword [rsp + 0x98]
test r9, r9
je 0x180001ba1
lea rdi, [0x1800febd0]
mov r11, r12
sub r11, rdi
nop word [rax + rax]
lea r8, str.____x____xxx____xxxx_xxxxxxxxxxxxx____xxx____xxxx_xxxxxxxx
mov rdx, rdi
mov al, 0x3f
nop dword [rax]
cmp al, 0x78
jne 0x180001b81
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001b99
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001b70
test ebx, ebx
je 0x18000209d
inc ebx
inc r10
cmp r10, r9
jb 0x180001b60
mov qword [rsp + 0x48], rsi
mov rdi, qword [rsp + 0x90]
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001c11
lea rbp, [0x1800fec20]
mov r11, r12
sub r11, rbp
nop word [rax + rax]
lea r8, str.xxxxxxxxx
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001bf1
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001c09
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001be0
test ebx, ebx
je 0x1800020bd
inc ebx
inc r10
cmp r10, r9
jb 0x180001bd0
mov qword [rsp + 0x110], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001c71
lea rbp, [0x1800fec48]
mov r11, r12
sub r11, rbp
lea r8, str.x_xxxx_xxxx_xxx_xx
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001c51
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001c69
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001c40
test ebx, ebx
je 0x1800020ce
inc ebx
inc r10
cmp r10, r9
jb 0x180001c30
mov qword [rsp + 0x120], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001cd1
lea rbp, [0x1800fec80]
mov r11, r12
sub r11, rbp
lea r8, str.xxxxxxxx____xxxxxxxxx____xxx
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001cb1
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001cc9
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001ca0
test ebx, ebx
je 0x1800020df
inc ebx
inc r10
cmp r10, r9
jb 0x180001c90
mov qword [rsp + 0x30], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001d31
lea rbp, [0x1800fecc0]
mov r11, r12
sub r11, rbp
nop dword [rax]
lea r8, str.xxxx_xxxxxxx____x____xxx_xxxxxx
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001d11
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001d29
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001d00
test ebx, ebx
je 0x1800020ed
inc ebx
inc r10
cmp r10, r9
jb 0x180001cf0
mov qword [rsp + 0x128], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001d91
lea rbp, [0x1800fed08]
mov r11, r12
sub r11, rbp
lea r8, str.x____xxx_xxxx_xxx____xxx____xxx_x
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001d71
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001d89
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001d60
test ebx, ebx
je 0x1800020fe
inc ebx
inc r10
cmp r10, r9
jb 0x180001d50
mov qword [rsp + 0x38], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001df1
lea rbp, [0x1800fed50]
mov r11, r12
sub r11, rbp
nop dword [rax]
lea r8, str.xxxxxxx_xxxx____x_xx____xxxx
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001dd1
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001de9
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001dc0
test ebx, ebx
je 0x18000210c
inc ebx
inc r10
cmp r10, r9
jb 0x180001db0
mov qword [rsp + 0x40], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001e51
lea rbp, [0x1800fed88]
mov r11, r12
sub r11, rbp
nop dword [rax]
lea r8, str.____x_xxxx_xx____xxxx
mov rdx, rbp
mov al, 0x3f
nop dword [rax]
cmp al, 0x78
jne 0x180001e31
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001e49
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001e20
test ebx, ebx
je 0x18000211a
inc ebx
inc r10
cmp r10, r9
jb 0x180001e10
mov qword [rsp + 0x118], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001eb1
lea rbp, [0x1800fedc8]
mov r11, r12
sub r11, rbp
lea r8, str.x_xxx_xxxx_xxx____x____xxxxxxxx_xxx_x
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001e91
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001ea9
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001e80
test ebx, ebx
je 0x18000212b
inc ebx
inc r10
cmp r10, r9
jb 0x180001e70
mov qword [rsp + 0x50], rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001f11
lea rbp, [0x1800fee08]
mov r11, r12
sub r11, rbp
nop dword [rax]
lea r8, str.xxxxx____x____xxx_xx_x
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180001ef1
lea rcx, [rdx + r11]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001f09
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001ee0
test ebx, ebx
je 0x180002139
inc ebx
inc r10
cmp r10, r9
jb 0x180001ed0
mov r13, rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001f71
lea rbp, [0x1800fee40]
mov r11, r12
sub r11, rbp
nop dword [rax + rax]
lea r8, str.____xx____xx_xxxxxxx____x
mov rdx, rbp
mov al, 0x3f
nop dword [rax]
cmp al, 0x78
jne 0x180001f51
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001f69
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001f40
test ebx, ebx
je 0x180002142
inc ebx
inc r10
cmp r10, r9
jb 0x180001f30
mov r15, rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180001fd1
lea rbp, [0x1800fee90]
mov r11, r12
sub r11, rbp
nop dword [rax + rax]
lea r8, str.____xx____xxxx____xxx____xxxxxxxxxxxxxxx
mov rdx, rbp
mov al, 0x3f
nop dword [rax]
cmp al, 0x78
jne 0x180001fb1
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180001fc9
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180001fa0
test ebx, ebx
je 0x180002155
inc ebx
inc r10
cmp r10, r9
jb 0x180001f90
mov r14, rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180002031
lea rbp, [0x1800feee0]
mov r11, r12
sub r11, rbp
nop dword [rax + rax]
lea r8, str.xxxx____xxx____xxxxx____x
mov rdx, rbp
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180002011
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180002029
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180002000
test ebx, ebx
je 0x180002168
inc ebx
inc r10
cmp r10, r9
jb 0x180001ff0
mov rbp, rsi
mov ebx, esi
mov r10, rsi
test r9, r9
je 0x180002175
lea rax, [0x1800fef38]
mov r11, r12
sub r11, rax
nop
lea r8, str.xx____xxx____xxxx_xxxxxxxxx____xxxx_xxx____xxxx_x
mov rdx, rax
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x180002071
lea rcx, [rdx + r10]
movzx eax, byte [rdx]
cmp byte [rcx + r11], al
jne 0x180002089
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180002060
test ebx, ebx
je 0x180002171
inc ebx
inc r10
cmp r10, r9
lea rax, [0x1800fef38]
jb 0x180002050
jmp 0x180002175
movsxd rax, dword [r12 + r10]
mov rdi, qword [rsp + 0x90]
add rax, 4
add rax, rdi
add rax, r10
mov qword [rsp + 0x48], rax
jmp 0x180001bae
lea rax, [rdi + r10]
mov qword [rsp + 0x110], rax
jmp 0x180001c19
lea rax, [rdi + r10]
mov qword [rsp + 0x120], rax
jmp 0x180001c79
lea rax, [rdi + r10]
mov qword [rsp + 0x30], rax
jmp 0x180001cd6
lea rax, [rdi + r10]
mov qword [rsp + 0x128], rax
jmp 0x180001d39
lea rax, [rdi + r10]
mov qword [rsp + 0x38], rax
jmp 0x180001d96
lea rax, [rdi + r10]
mov qword [rsp + 0x40], rax
jmp 0x180001df6
lea rax, [rdi + r10]
mov qword [rsp + 0x118], rax
jmp 0x180001e59
lea rax, [rdi + r10]
mov qword [rsp + 0x50], rax
jmp 0x180001eb6
lea r13, [rdi + r10]
jmp 0x180001f14
movsxd r15, dword [r12 + r10]
add r15, 4
add r15, rdi
add r15, r10
jmp 0x180001f74
movsxd r14, dword [r12 + r10]
add r14, 4
add r14, rdi
add r14, r10
jmp 0x180001fd4
lea rbp, [rdi + r10]
jmp 0x180002034
lea rsi, [rdi + r10]
xor ebx, ebx
xor r10d, r10d
test r9, r9
je 0x1800021d8
lea rax, [0x1800fef80]
mov r11, r12
sub r11, rax
nop dword [rax]
lea r8, str.xx____xx
mov rdx, rax
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x1800021b1
lea rcx, [rdx + r10]
movzx eax, byte [rdx]
cmp byte [rcx + r11], al
jne 0x1800021c9
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x1800021a0
test ebx, ebx
je 0x180002258
inc ebx
inc r10
cmp r10, r9
lea rax, [0x1800fef80]
jb 0x180002190
xor edi, edi
xor ebx, ebx
xor r10d, r10d
test r9, r9
je 0x180002244
lea rax, [0x1800fefa8]
mov r11, r12
sub r11, rax
nop dword [rax]
nop word [rax + rax]
lea r8, str.____xxx_xxx____xxxx_xx
mov rdx, rax
mov al, 0x3f
nop dword [rax]
cmp al, 0x78
jne 0x180002221
lea rcx, [r11 + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r10], al
jne 0x180002235
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x180002210
test ebx, ebx
je 0x180002260
inc ebx
inc r10
cmp r10, r9
lea rax, [0x1800fefa8]
jb 0x180002200
xor ecx, ecx
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x180002275
lea ebx, [rax + 0xa]
jmp 0x1800026be
add rdi, r10
jmp 0x1800021da
movsxd rcx, dword [r12 + r10]
add rcx, 4
add rcx, qword [rsp + 0x90]
add rcx, r10
jmp 0x180002246
cmp qword [rsp + 0x110], 0
jne 0x18000228a
mov ebx, ntohs
jmp 0x1800026be
cmp qword [rsp + 0x120], 0
je 0x1800022a0
cmp qword [rsp + 0x128], 0
jne 0x1800022aa
mov ebx, ntohs
jmp 0x1800026be
cmp qword [rsp + 0x30], 0
je 0x1800022ba
cmp qword [rsp + 0x38], 0
jne 0x1800022c4
mov ebx, reloc.WS2_32.dll_listen
jmp 0x1800026be
cmp qword [rsp + 0x40], 0
jne 0x1800022d6
mov ebx, reloc.WS2_32.dll_ntohs
jmp 0x1800026be
cmp qword [rsp + 0x118], 0
jne 0x1800022eb
mov ebx, reloc.WS2_32.dll_recv
jmp 0x1800026be
mov r12, qword [rsp + 0x50]
test r12, r12
jne 0x1800022ff
lea ebx, [r12 + 0x11]
jmp 0x1800026be
test r13, r13
jne 0x18000230d
lea ebx, [r13 + 0x12]
jmp 0x1800026be
test r15, r15
jne 0x18000231b
lea ebx, [r15 + 0x13]
jmp 0x1800026be
test r14, r14
jne 0x180002329
lea ebx, [r14 + 0x14]
jmp 0x1800026be
test rbp, rbp
jne 0x180002336
lea ebx, [rbp + 0x15]
jmp 0x1800026be
test rsi, rsi
je 0x180002345
test rdi, rdi
je 0x180002345
test rcx, rcx
jne 0x18000234f
mov ebx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x1800026be
mov qword [0x18012d7b8], r14
mov qword [0x18012d7d8], rcx
mov qword [0x18012d7b0], rax
movss xmm0, dword [0x180136b20]
movss dword [0x18012c334], xmm0
mov eax, dword [0x180136b1c]
mov dword [0x18012cf8c], eax
mov eax, dword [0x180136ae4]
mov dword [0x18012d7c0], eax
mov eax, dword [0x180136afc]
mov dword [0x18012cf88], eax
movss xmm0, dword [0x180136b14]
movss dword [0x18012d7c4], xmm0
movzx eax, byte [0x18012e7ec]
mov byte [0x18012cf54], al
movzx eax, byte [0x180136a6f]
mov byte [0x18012cf55], al
movss xmm0, dword [0x180136ae0]
movss dword [0x18012d7d0], xmm0
mov ecx, 0x80
call fcn.1800d22a0
mov rbx, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov edx, 0x102
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_init_in_situ]
nop
mov rax, qword [rsp + 0x110]
mov qword [rbx + 0x58], rax
xor r14d, r14d
mov qword [rbx + 0x70], r14
mov qword [rbx + 0x68], r14
mov qword [rbx + 0x60], r14
mov dword [rbx + 0x50], 1
mov dword [rbx + 0x78], 3
mov byte [rbx + 0x7c], r14b
mov qword [0x18012cf90], rbx
mov ecx, 0x80
call fcn.1800d22a0
mov rbx, rax
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x68], rax
mov edx, 0x102
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_init_in_situ]
nop
mov rax, qword [rsp + 0x118]
mov qword [rbx + 0x58], rax
mov qword [rbx + 0x70], r14
mov qword [rbx + 0x68], r14
mov qword [rbx + 0x60], r14
mov dword [rbx + 0x50], 1
mov dword [rbx + 0x78], 3
mov byte [rbx + 0x7c], r14b
mov qword [0x18012cf98], rbx
mov ecx, 0x80
call fcn.1800d22a0
mov qword [rsp + 0x118], rax
lea r9, [0x1800fefc0]
lea r8d, [r14 + 1]
mov rdx, qword [rsp + 0x120]
mov rcx, rax
call fcn.180009ba0
nop
mov qword [0x18012cfa0], rax
mov ecx, 0x80
call fcn.1800d22a0
mov qword [rsp + 0x120], rax
lea r9, [0x1800fefc4]
mov ebx, 5
mov r8d, ebx
mov rdx, qword [rsp + 0x128]
mov rcx, rax
call fcn.180009ba0
nop
mov qword [0x18012cfa8], rax
lea ecx, [rbx + 0x7b]
call fcn.1800d22a0
mov qword [rsp + 0x128], rax
lea r9, [0x1800fefcc]
lea r8d, [r14 + 1]
mov rdx, r15
mov rcx, rax
call fcn.180009ba0
nop
mov qword [0x18012cfb0], rax
lea ecx, [rbx + 0x7b]
call fcn.1800d22a0
mov qword [rsp + 0x70], rax
lea r9, [0x1800fefd0]
lea r8d, [r14 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.180009ba0
nop
mov qword [0x18012cfb8], rax
lea ecx, [rbx + 0x7b]
call fcn.1800d22a0
mov qword [rsp + 0x78], rax
lea r9, [0x1800fefd4]
lea r8d, [r14 + 1]
mov rdx, rdi
mov rcx, rax
call fcn.180009ba0
nop
mov qword [0x18012cfc0], rax
mov rcx, qword [0x18012cfa0]
call fcn.180009c50
mov rcx, qword [0x18012cfa8]
call fcn.180009c50
mov rcx, qword [0x18012cfb8]
call fcn.180009c50
movss xmm1, dword [0x180119210]
mov rcx, qword [0x18012cf98]
call fcn.180003a70
mov rcx, qword [0x18012cfc0]
call fcn.180009c50
mov rax, qword [rsp + 0x30]
mov qword [0x18012d798], rax
mov rax, qword [rsp + 0x38]
mov qword [0x18012d7a0], rax
mov rax, qword [rsp + 0x40]
mov qword [0x18012d7c8], rax
mov qword [0x18012d790], r12
mov qword [0x18012d7a8], r13
mov qword [0x18012d788], rbp
call fcn.18000a820
lea rdx, [0x1800984c0]
lea rcx, [0x18012d798]
call fcn.18000af80
lea rdx, [0x1800984e6]
lea rcx, [0x18012d7a0]
call fcn.18000af80
lea rdx, [0x1800984ff]
lea rcx, [0x18012d7c8]
call fcn.18000af80
lea rdx, [0x180098512]
lea rcx, [0x18012d790]
call fcn.18000af80
lea rdx, [0x180098525]
lea rcx, [0x18012d7a8]
call fcn.18000af80
lea rdx, [0x180098542]
lea rcx, [0x18012d788]
call fcn.18000af80
call fcn.18000aa50
test eax, eax
jne 0x1800026be
mov rax, qword [rsp + 0x58]
mov ebx, dword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r8d, ebx
mov rdx, qword [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
call fcn.180049460
lea r8, [0x1800026f0]
lea rdx, [0x180002870]
lea rcx, [0x1800029b0]
call fcn.180005a10
test al, al
lea ebx, [r14 + 8]
je 0x1800026be
mov ebx, r14d
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x110], rax
lea rcx, [rsp + 0xa8]
call fcn.1800018f0
mov eax, ebx
jmp 0x180001aef