Function at 0x140044ca0
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rbx
push rdi
push r12
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rdi, qword [rcx + 0x20]
mov r15, rcx
mov rax, qword [rcx + 0x18]
cmp rax, rdi
je 0x140044ccb
mov qword [rcx + 0x20], rax
mov rdi, rax
mov rax, qword [rcx + 0x38]
mov rdx, qword [rcx + 0x18]
mov rcx, rdi
sub rcx, rdx
mov ebx, dword [rax + 0x50]
cmp rbx, rcx
jae 0x140044ce7
lea rax, [rdx + rbx]
jmp 0x140044d17
jbe 0x140044d1b
mov rax, qword [r15 + 0x28]
sub rax, rdx
cmp rbx, rax
jbe 0x140044d03
mov rdx, rbx
lea rcx, [r15 + 0x18]
call fcn.140049e60
jmp 0x140044d1b
sub rbx, rcx
xor edx, edx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
lea rax, [rdi + rbx]
mov qword [r15 + 0x20], rax
mov rax, qword [r15 + 0x38]
mov r8d, dword [rax + 0x54]
test r8d, r8d
je 0x140044d34
mov rdx, qword [r15]
mov rcx, qword [r15 + 0x18]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r15 + 0x38]
xor r8d, r8d
mov edi, r8d
mov qword [rbp + 0x17], r8
cmp r8w, word [rax + 6]
jae 0x14004567a
movzx ebx, byte [rbp - 0x49]
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r14
nop dword [rax]
mov rax, qword [r15 + 0x40]
lea rcx, [rdi + rdi*4]
mov edi, dword [rax + rcx*8 + 0xc]
lea r13, [rax + rcx*8]
add rdi, qword [r15 + 0x18]
mov ecx, dword [r13 + 0x14]
mov rax, qword [r15 + 0x30]
mov rdx, qword [r15]
add rax, rcx
mov qword [rbp + 0x27], rax
mov eax, dword [r13 + 0x10]
mov qword [rbp + 0x1f], rdi
test eax, eax
je 0x140044db3
add rdx, rcx
mov r8d, eax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
xor r8d, r8d
mov rsi, qword [0x14023d100]
xor eax, eax
mov r14, qword [0x14023d108]
xorps xmm0, xmm0
movups xmmword [rbp - 0x15], xmm0
mov qword [rbp - 5], rax
mov dword [rbp + 3], eax
mov word [rbp + 7], ax
mov byte [rbp + 9], al
mov dword [rbp - 0x39], 0xd4d4d483
mov dword [rbp - 0x35], 0xafe1dbe5
mov dword [rbp - 0x31], 0x90d9a6f3
mov dword [rbp - 0x2d], 0xdca8e1d2
mov dword [rbp - 0x29], 0xf9e7d5a6
mov dword [rbp - 0x25], 0xd4a0e9da
mov dword [rbp - 0x21], 0xf381ddae
mov dword [rbp - 0x1d], 0xf3f0caba
mov dword [rbp - 0x19], 0x2b2a869e
nop word [rax + rax]
mov rax, r14
mov r9, rsi
nop word [rax + rax]
mov r11, r8
cmp r11, 0x43
jae 0x140045618
movzx r10d, byte [rbp + r11 - 0x39]
mov r8d, r10d
cmp rax, r11
ja 0x14004560f
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x140044e7a
movabs rdx, 0x13695da77db42635
movzx ecx, r8b
add rdx, r11
movzx ebx, r10b
and cl, dl
add cl, cl
sub bl, cl
sub bl, 0x73
add bl, dl
jmp 0x140044eb3
je 0x140045597
inc rcx
cmp rax, rcx
je 0x140045535
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400454ef
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400454cf
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x14004548d
cmp r9, r11
ja 0x140045606
lea rcx, [r9 + 0x10]
cmp rax, rcx
jae 0x140044ee6
movabs rcx, 0x97a4aebd4fc72259
movzx ebx, r10b
add rcx, r11
and r8b, cl
add r8b, r8b
sub bl, r8b
sub bl, 0x6f
add bl, cl
jmp 0x140044f30
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140045473
inc rcx
cmp rax, rcx
je 0x140045453
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140045423
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140045409
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1400453e0
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x14004504f
nop dword [rax]
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x140045031
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140045011
mov rax, rcx
lea r9, [rcx + 8]
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x1400455e7
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x1400455c8
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x140044fef
mov rax, rcx
lea r9, [rcx + 0x2a]
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x140044fc6
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x140044fa9
mov rax, rcx
lea r9, [rcx + 0xa]
jmp 0x140044f40
lea edx, [r11 + 0x20]
mov ebx, reloc.WS2_32.dll_recv
movzx ecx, dl
and cl, r10b
sub bl, cl
add bl, bl
add bl, dl
add bl, r10b
jmp 0x140045438
lea edx, [r11 + 0x78]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
lea ebx, [r10 + rdx]
sub bl, 0x48
inc r11
jmp 0x140044e33
lea edx, [r11 + 0x6f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 9
mov byte [rbp + r11 - 0x39], bl
inc r11
jmp 0x140044e33
lea r8d, [r11 - 0x28]
mov edx, recv
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14004543b
lea edx, [r11 - 0x3a]
movzx edi, r11b
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x6a
jmp 0x1400454a5
lea rcx, [r9 + 3]
cmp rax, rcx
jae 0x140045105
lea edx, [r11 + 0x35]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x73
lea rcx, [r9 + rax]
cmp rcx, 0x28
je 0x1400453c3
lea rcx, [r9 + 0x28]
cmp rax, rcx
jbe 0x1400451e1
lea edx, [r11 - 0x5f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x67
cmp rax, 5
jae 0x140045384
lea rcx, [r9 + 5]
cmp rax, rcx
jbe 0x1400452ce
lea r8d, [r11 - 6]
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
cmp r9, 0x42
jb 0x140045004
mov r8d, reloc.WS2_32.dll_socket
movzx edi, r11b
lea edx, [rdi + 0x1e]
movzx ecx, dl
and cl, r10b
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r10b
lea ebx, [r8 + r8]
jmp 0x1400454a5
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004513d
lea r8d, [r11 - 0x4e]
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
inc r11
jmp 0x140044e33
inc rcx
cmp rax, rcx
jne 0x140045165
lea r8d, [r11 + 0x1c]
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x140045554
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004518e
lea r8d, [r11 - 0x10]
mov edx, gethostname
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14004543b
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1400451b7
lea edx, [r11 + 0x2e]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x42
inc r11
jmp 0x140044e33
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140045071
movzx edi, r11b
lea edx, [rdi + 2]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0xe
jmp 0x1400454a5
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140045207
movzx edi, r11b
lea edx, [rdi + 0xb]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x4d
jmp 0x1400454a5
inc rcx
cmp rax, rcx
jne 0x14004522f
lea edx, [r11 - 0x21]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x19
inc r11
jmp 0x140044e33
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140045252
lea edx, [r11 - 0x4d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x1b
jmp 0x140045438
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140045275
lea edx, [r11 + 0x1d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x35
jmp 0x14004543b
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x140045298
lea edx, [r11 - 0x79]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x4f
jmp 0x14004550e
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x1400450a1
lea edx, [r11 + 0x5b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
lea ebx, [r10 + rdx]
sub bl, 0x7d
inc r11
jmp 0x140044e33
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140045306
lea r8d, [r11 + 0x64]
mov edx, Ordinal_35
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
inc r11
jmp 0x140044e33
inc rcx
cmp rax, rcx
jne 0x14004532e
lea r8d, [r11 - 0x32]
mov edx, Ordinal_50
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x140045554
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140045357
lea r8d, [r11 + 0x38]
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14004550e
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400450d3
lea edx, [r11 - 0x20]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x20
inc r11
jmp 0x140044e33
movzx r8d, byte [rbp + r11 - 0x39]
lea edx, [r11 - 0x78]
movzx ecx, dl
and cl, r10b
sub r8b, cl
add r8b, 0x24
add r8b, r8b
add r8b, dl
lea edx, [r11 - 0x43]
movzx ebx, r8b
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x2b
add dl, r8b
add dl, r10b
mov byte [rbp + r11 - 0x39], dl
jmp 0x140045438
lea r8d, [r11 - 0xe]
mov edx, Ordinal_50
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
jmp 0x14004550e
lea edx, [r11 + 0x13]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
lea ebx, [r10 + rdx]
add bl, 0x7b
inc r11
jmp 0x140044e33
lea edx, [r11 + 0x3f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x47
jmp 0x14004550e
lea edx, [r11 + 0x6b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x13
add rax, r9
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x140044e33
lea edx, [r11 - 0x69]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x21
inc r11
jmp 0x140044e33
movzx edi, r11b
lea edx, [rdi - 0x3d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x55
jmp 0x1400454a5
movzx edi, r11b
lea edx, [rdi - 0x11]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x77
add dil, 0x53
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
sub dil, 0x45
add dil, r10b
mov byte [rbp + r11 - 0x39], dil
inc r9
dec r11
inc r11
jmp 0x140044e33
lea edx, [r11 + 0x1b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x43
dec r11
inc r11
jmp 0x140044e33
movabs rdx, 0x87e18f946fed0b73
movzx ebx, r10b
add rdx, r11
and r8b, dl
add r8b, r8b
sub bl, r8b
sub bl, 0x25
add bl, dl
lea edx, [r11 + 0x27]
inc r9
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x11
add dl, r10b
movzx ecx, dl
mov byte [rbp + r11 - 0x39], cl
add rcx, r9
sub r11, rcx
jmp 0x140045554
movabs rdx, 0x610ed4457484bf09
movzx ebx, r10b
add rdx, r11
and r8b, dl
add r8b, r8b
sub bl, r8b
sub bl, 0x3f
add bl, dl
lea r8d, [r11 + 0x5c]
inc rax
movzx ecx, r8b
mov edx, 0x3e
and cl, r10b
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, r8b
add dl, r10b
mov byte [rbp + r11 - 0x39], dl
add r11, rcx
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
inc r11
jmp 0x140044e33
movabs rcx, 0x3a3c18f6791c729f
add rcx, r11
and r8b, cl
add r8b, r8b
sub r10b, r8b
lea ebx, [rcx + r10]
sub bl, 0x59
movzx ecx, byte [rbp + r11 - 0x39]
add rcx, r9
add r11, rcx
inc r11
jmp 0x140044e33
sub r11b, 0x77
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea ebx, [r10 + r11]
add bl, 0x41
xor r8d, r8d
jmp 0x140044e30
add r11b, 0x1f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0x27
xor r8d, r8d
jmp 0x140044e20
lea rdx, [rbp + 0x149ab63]
jmp 0x14004561c
lea rdx, [rbp + 0xfdd198]
jmp 0x14004561c
lea rdx, [rbp - 0x39]
mov eax, dword [r13 + 0x10]
mov r8, r13
mov r9, qword [rbp + 0x27]
mov rcx, qword [0x14023cdc8]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x1f]
mov qword [rsp + 0x20], rax
call fcn.1400459e0
mov rdi, qword [rbp + 0x17]
mov r8d, 0
mov rax, qword [r15 + 0x38]
inc rdi
mov qword [rbp + 0x17], rdi
movzx ecx, word [rax + 6]
cmp rdi, rcx
jb 0x140044d70
mov r14, qword [rsp + 0xf8]
mov r13, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xe8]
add rsp, 0xb0
pop r15
pop r12
pop rdi
pop rbx
pop rbp
ret