Function at 0x1800780e0
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov rax, qword [rdx]
mov rdi, rdx
movzx ebp, byte [rdx + 0x24]
mov r13, rcx
mov rbx, qword [rcx + 0x10]
xor edx, edx
not ebp
mov dword [rsp + 0x30], edx
mov eax, dword [rax]
and ebp, 1
mov dword [rsp + 0x90], eax
mov r12d, edx
lea ecx, [rax + rbp]
mov eax, dword [rdi + 8]
add ecx, dword [rsp + 0xb8]
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x38], ecx
test eax, eax
je 0x18007814d
mov r14d, r9d
sub r14d, eax
jmp 0x18007815b
mov eax, dword [r13 + 0x38]
lea r14d, [rax + 1]
add eax, ecx
mov dword [r13 + 0x38], eax
mov eax, dword [r8 + 0x14]
test eax, eax
je 0x180078167
inc eax
jmp 0x18007816b
mov eax, dword [r8 + 0x10]
mov r15, qword [rbx + 0x18]
mov dword [rsp + 0x34], eax
movsxd rsi, dword [r15 + 0x48]
lea eax, [rsi + 1]
mov dword [r15 + 0x48], eax
lea eax, [rsi - 1]
test esi, eax
jne 0x1800781a3
mov rdx, qword [r15 + 0x50]
lea eax, [rsi*2 + 1]
mov rcx, qword [r15]
movsxd r8, eax
shl r8, 2
call fcn.1800105d0
mov qword [r15 + 0x50], rax
mov rcx, qword [r15 + 0x50]
test rcx, rcx
je 0x1800781b3
mov dword [rcx + rsi*4], 0xffffffff
mov r9d, dword [rsp + 0xb0]
mov eax, 1
mov rdx, qword [rdi]
test r9d, r9d
mov ecx, 5
not esi
cmovne eax, ecx
mov dword [rdi + 0x1c], esi
mov rcx, r13
mov byte [rsp + 0x20], al
mov r8d, r14d
call fcn.180050fa0
mov esi, dword [rsp + 0x90]
test ebp, ebp
je 0x18007824a
mov rax, qword [rbx + 0x18]
lea edx, [r14 + rsi]
movsxd rcx, dword [rbx + 0xb8]
mov r8d, dword [rdi + 0xc]
cmp dword [rax + 0x3c], ecx
jg 0x18007821c
mov r9d, edx
mov dword [rsp + 0x20], r12d
mov edx, 0x78
mov rcx, rbx
call fcn.180032ba0
jmp 0x18007824a
lea eax, [rcx + 1]
xor r9d, r9d
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], 0x78
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
cmp dword [rsp + 0xc0], r12d
jne 0x180078278
mov eax, dword [rsp + 0xb8]
test eax, eax
jle 0x180078278
mov edx, dword [rsp + 0xa8]
lea r8d, [r14 + rsi]
add r8d, ebp
mov r9d, eax
mov rcx, r13
call fcn.18004f6a0
lea r15, [0x1803e55e8]
cmp dword [rsp + 0x98], r12d
jle 0x180078598
mov eax, dword [rsp + 0x38]
mov r9d, r14d
mov r8, qword [rsp + 0xa0]
mov rdx, rdi
mov rcx, r13
mov dword [rsp + 0x20], eax
call fcn.180078020
mov edx, dword [r13 + 0x38]
mov rcx, rbx
mov dword [rsp + 0x30], eax
lea eax, [rdx + 1]
add edx, dword [rdi + 8]
mov dword [r13 + 0x38], edx
sub esi, dword [rdi + 8]
add esi, ebp
mov dword [rsp + 0xc0], eax
test ebp, ebp
je 0x1800782e2
mov r8d, dword [rsp + 0x90]
mov edx, reloc.WS2_32.dll_sendto
add r8d, r14d
jmp 0x1800782eb
mov r8d, dword [rdi + 0xc]
mov edx, reloc.WS2_32.dll_WSAStartup
call fcn.180032ce0
movsxd rcx, dword [rbx + 0xb8]
mov edx, dword [rdi + 8]
mov r8d, dword [rsp + 0xc0]
mov dword [rsp + 0xb0], eax
mov rax, qword [rbx + 0x18]
cmp dword [rax + 0x3c], ecx
jg 0x180078328
mov dword [rsp + 0x20], edx
mov r9d, r14d
mov edx, 0x57
mov rcx, rbx
call fcn.180032ba0
jmp 0x180078356
lea eax, [rcx + 1]
xor r9d, r9d
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], 0x57
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], r14d
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], r9
mov ecx, dword [rdi + 0x18]
test ecx, ecx
jns 0x180078365
mov ecx, dword [rbx + 0xb8]
dec ecx
mov rax, qword [rbx]
cmp byte [rax + 0x61], r12b
je 0x180078373
mov rbp, r15
jmp 0x180078382
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rbp, [rax + rcx*8]
mov rax, qword [r13]
cmp byte [rax + 0x61], r12b
jne 0x180078772
mov eax, dword [rsp + 0xb8]
xor edx, edx
add eax, esi
mov rsi, qword [rbp + 0x10]
mov dword [rbp + 8], eax
movzx r8d, word [rsi + 6]
mov rcx, qword [rsi + 0x18]
call fcn.18010a4e0
mov rcx, qword [rbx]
cmp byte [rcx + 0x61], r12b
je 0x1800783c8
mov r8, rsi
mov edx, 0xfffffff7
call fcn.180033be0
jmp 0x180078400
mov eax, dword [rbx + 0xb8]
dec eax
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
cmp byte [rax + rcx*8 + 1], r12b
lea rdx, [rax + rcx*8]
je 0x1800783f8
mov r9d, 0xfffffff7
mov r8, rsi
mov rcx, rbx
call fcn.180033df0
jmp 0x180078400
mov qword [rdx + 0x10], rsi
mov byte [rdx + 1], 0xf7
movzx r9d, word [rsi + 8]
mov rcx, r13
movzx eax, word [rsi + 6]
mov r8d, dword [rsp + 0x98]
sub r9d, eax
mov rdx, qword [rdi]
dec r9d
call fcn.1800799c0
mov qword [rbp + 0x10], rax
movsxd rsi, dword [rbx + 0xb8]
mov rax, qword [rbx + 0x18]
lea edx, [rsi + 1]
cmp dword [rax + 0x3c], esi
jg 0x180078453
xor r9d, r9d
mov dword [rsp + 0x20], edx
mov r8d, edx
mov rcx, rbx
lea edx, [r9 + 0x10]
call fcn.180032ba0
xor ebp, ebp
jmp 0x18007847e
lea rcx, [rsi + rsi*2]
xor ebp, ebp
lea eax, [rsi + 1]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], reloc.WS2_32.dll_recv
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rbp
mov rcx, rbx
call fcn.1800336e0
mov dword [rdi + 0x14], eax
mov edx, dword [r13 + 0x38]
inc edx
mov dword [r13 + 0x38], edx
mov r8d, dword [rdi + 0x14]
mov dword [rdi + 0x10], edx
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], ecx
jg 0x1800784c3
mov r9d, r8d
mov dword [rsp + 0x20], ebp
mov r8d, edx
mov rcx, rbx
mov edx, ntohl
call fcn.180032ba0
jmp 0x1800784ed
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], ntohl
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], ebp
mov qword [rax + rcx*8 + 0x10], rbp
mov r8d, dword [rdi + 0xc]
mov edx, Ordinal_143
mov rcx, rbx
call fcn.180032ce0
mov ebp, dword [rsp + 0x34]
test ebp, ebp
je 0x18007851a
mov r9d, dword [rdi + 0x1c]
mov r8d, ebp
mov edx, reloc.WS2_32.dll_sendto
mov rcx, rbx
call fcn.180032d50
mov ecx, dword [rsp + 0xb0]
mov edx, dword [rbx + 0xb8]
test ecx, ecx
jns 0x18007852e
lea ecx, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x61], r12b
je 0x18007853c
mov rax, r15
jmp 0x18007854b
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov r8d, dword [rsp + 0xc0]
mov rcx, r13
mov dword [rax + 8], edx
mov edx, r14d
mov r9d, dword [rdi + 8]
call fcn.18004f6a0
mov edx, dword [rbx + 0xb8]
test esi, esi
jns 0x180078572
lea esi, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x61], r12b
je 0x180078583
mov rax, r15
mov dword [rax + 8], edx
jmp 0x18007859c
movsxd rax, esi
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8 + 8], edx
lea rax, [rax + rcx*8]
jmp 0x18007859c
mov ebp, dword [rsp + 0x34]
test ebp, ebp
je 0x1800786d6
movsxd rcx, dword [rbx + 0xb8]
mov rax, qword [rbx + 0x18]
mov esi, dword [rdi + 0xc]
lea edx, [rcx + 4]
cmp dword [rax + 0x3c], ecx
jg 0x1800785d6
xor eax, eax
mov r9d, edx
mov r8d, ebp
mov dword [rsp + 0x20], eax
mov rcx, rbx
lea edx, [rax + 0x30]
call fcn.180032ba0
xor r8d, r8d
jmp 0x180078603
lea eax, [rcx + 1]
xor r8d, r8d
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], Ordinal_50
mov dword [rax + rcx*8 + 4], ebp
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], r8d
mov qword [rax + rcx*8 + 0x10], r8
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], ecx
jg 0x18007862c
xor r9d, r9d
mov dword [rsp + 0x20], r8d
mov r8d, esi
mov rcx, rbx
lea edx, [r9 + 0x20]
call fcn.180032ba0
jmp 0x180078652
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], reloc.WLDAP32.dll_Ordinal_32
mov dword [rax + rcx*8 + 4], esi
mov qword [rax + rcx*8 + 8], r12
mov qword [rax + rcx*8 + 0x10], r8
mov ebp, dword [rsp + 0x98]
xor r9d, r9d
mov ecx, dword [rsp + 0x90]
mov r8d, esi
sub ecx, ebp
mov dword [rsp + 0x28], ecx
mov rcx, rbx
lea eax, [r14 + rbp]
lea edx, [r9 + 0x25]
mov dword [rsp + 0x20], eax
call fcn.1800335c0
mov rcx, qword [rbx + 0x18]
mov r12d, eax
movsxd rdx, dword [rbx + 0xb8]
cmp dword [rcx + 0x3c], edx
jg 0x1800786ac
xor eax, eax
xor r9d, r9d
mov r8d, esi
mov dword [rsp + 0x20], eax
mov rcx, rbx
lea edx, [rax + 0x7c]
call fcn.180032ba0
jmp 0x1800786dd
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
xor edx, edx
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], 0x7c
mov dword [rax + rcx*8 + 4], esi
mov qword [rax + rcx*8 + 8], rdx
mov qword [rax + rcx*8 + 0x10], rdx
jmp 0x1800786dd
mov ebp, dword [rsp + 0x98]
mov r9d, dword [rsp + 0x30]
test r9d, r9d
jne 0x180078708
mov eax, dword [rsp + 0x38]
mov r9d, r14d
mov r8, qword [rsp + 0xa0]
mov rdx, rdi
mov rcx, r13
mov dword [rsp + 0x20], eax
call fcn.180078020
mov r9d, eax
movzx edx, byte [rdi + 0x24]
lea eax, [r14 + rbp]
mov ecx, dword [rsp + 0x38]
not dl
mov r8d, dword [rdi + 0xc]
sub ecx, ebp
mov dword [rsp + 0x28], ecx
and edx, 1
or edx, 0x84
mov dword [rsp + 0x20], eax
mov rcx, rbx
call fcn.1800335c0
test r12d, r12d
je 0x180078772
mov edx, dword [rdi + 0x20]
test edx, edx
jne 0x180078747
mov edx, dword [rbx + 0xb8]
test r12d, r12d
jns 0x180078756
mov r12d, dword [rbx + 0xb8]
dec r12d
mov rax, qword [rbx]
cmp byte [rax + 0x61], 0
jne 0x18007876e
movsxd rax, r12d
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea r15, [rax + rcx*8]
mov dword [r15 + 8], edx
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret