Function at 0x140028df0
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rdi
sub rsp, 0x28
mov r10, qword [rcx]
lea rdx, [rsp + 0x48]
mov r11, qword [rcx + 0xc8]
mov rbx, rcx
lea rcx, [rsp + 0x40]
mov eax, dword [r10 + 0x144]
shr eax, 1
and eax, 1
mov r8d, eax
lea rdi, [r11 + rax*8]
lea r9, [rdi + 4]
call fcn.14002f6e0
mov edx, dword [rsp + 0x40]
cmp edx, 3
jl 0x140028dcb
mov ecx, dword [rsp + 0x48]
cmp ecx, 2
jl 0x140028dcb
movzx eax, byte [r10 + 0x140]
cmp edx, eax
jg 0x140028dcb
movzx eax, byte [r10 + 0x141]
cmp ecx, eax
jg 0x140028dcb
mov rax, qword [rbx + 0xe0]
mov qword [rsp + 0x50], rbp
movzx ebp, byte [rdi + 6]
add rdi, 7
sub rax, rdi
mov qword [rsp + 0x20], rsi
add rax, r11
mov esi, ebp
cmp rax, rbp
jge 0x140028d3d
mov r8b, 0x32
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov rbp, qword [rsp + 0x50]
mov eax, 0xffff8680
mov rsi, qword [rsp + 0x20]
add rsp, 0x28
pop rdi
pop rbx
ret
mov rcx, qword [rbx + 0x60]
mov rcx, qword [rcx + 0x3b0]
call fcn.14003853c
mov rdx, rsi
mov ecx, 1
call fcn.14003854c
mov rcx, qword [rbx + 0x60]
mov qword [rcx + 0x3b0], rax
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax + 0x3b0]
test rcx, rcx
jne 0x140028d8b
mov rbp, qword [rsp + 0x50]
mov eax, 0xffff8100
mov rsi, qword [rsp + 0x20]
add rsp, 0x28
pop rdi
pop rbx
ret
mov r8, rsi
mov rdx, rdi
call fcn.140035790
mov rax, qword [rbx + 0x60]
mov rcx, rbx
mov byte [rax + 0x3b8], bpl
mov dword [rbx + 8], 1
call fcn.14002e060
mov rcx, rbx
call fcn.14002c930
mov rbp, qword [rsp + 0x50]
xor eax, eax
mov rsi, qword [rsp + 0x20]
add rsp, 0x28
pop rdi
pop rbx
ret
mov r8b, 0x46
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff9180
add rsp, 0x28
pop rdi
pop rbx
ret
push rbx
push rdi
push r12
sub rsp, 0x30
mov rdi, qword [rcx + 0xc8]
mov rbx, rcx
xor r12d, r12d
call fcn.14002d550
test eax, eax
jne 0x14002919d
cmp dword [rbx + 0xd8], 0x16
je 0x140028e6e
cmp dword [rbx + 0xc], 1
jne 0x140028e53
mov ecx, dword [rbx + 0x10]
mov rax, qword [rbx]
inc ecx
mov dword [rbx + 0x10], ecx
mov edx, dword [rax + 0x12c]
test edx, edx
js 0x140028e3b
cmp ecx, edx
jg 0x140028e60
mov dword [rbx + 0x11c], 1
mov eax, 0xffff9500
add rsp, 0x30
pop r12
pop rdi
pop rbx
ret
mov r8b, 0xa
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff8900
add rsp, 0x30
pop r12
pop rdi
pop rbx
ret
mov rax, qword [rbx]
test byte [rax + 0x144], 2
je 0x140028eb5
cmp byte [rdi], 3
jne 0x140028e8f
mov rcx, rbx
add rsp, 0x30
pop r12
pop rdi
pop rbx
jmp 0x140028c80
mov rcx, qword [rbx + 0x60]
mov rcx, qword [rcx + 0x3b0]
call fcn.14003853c
mov rax, qword [rbx + 0x60]
mov qword [rax + 0x3b0], r12
mov rax, qword [rbx + 0x60]
mov byte [rax + 0x3b8], r12b
mov rax, qword [rbx]
mov ecx, dword [rax + 0x144]
shr ecx, 1
and ecx, 1
mov edx, ecx
lea rax, [rcx*8 + 0x2a]
cmp qword [rbx + 0x110], rax
jb 0x140029346
cmp byte [rdi], 2
jne 0x140029346
mov r8d, edx
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x28], r14
lea rdx, [rbx + 0x18]
lea r14, [rdi + 4]
lea r14, [r14 + rcx*8]
mov r9, r14
lea rcx, [rbx + 0x14]
call fcn.14002f6e0
mov rdx, qword [rbx]
mov r8d, dword [rbx + 0x14]
movzx eax, byte [rdx + 0x142]
cmp r8d, eax
jl 0x14002932f
movzx eax, byte [rdx + 0x143]
mov ecx, dword [rbx + 0x18]
cmp ecx, eax
jl 0x14002932f
movzx eax, byte [rdx + 0x140]
cmp r8d, eax
jg 0x14002932f
movzx eax, byte [rdx + 0x141]
cmp ecx, eax
jg 0x14002932f
mov rax, qword [rbx + 0x60]
movups xmm0, xmmword [r14 + 2]
movups xmmword [rax + 0x560], xmm0
movups xmm1, xmmword [r14 + 0x12]
movups xmmword [rax + 0x570], xmm1
movzx edi, byte [r14 + 0x22]
cmp rdi, 0x20
jbe 0x140028f8e
mov r8b, 0x32
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff8680
jmp 0x140029193
mov rax, qword [rbx]
mov rcx, qword [rbx + 0x110]
mov qword [rsp + 0x60], rsi
mov r8d, dword [rax + 0x144]
mov eax, r8d
shr rax, 1
and eax, 1
lea rdx, [rdi + rax*8]
lea rax, [rdx + 0x2b]
cmp rcx, rax
jbe 0x140029009
movzx esi, byte [rdi + r14 + 0x26]
movzx eax, byte [rdi + r14 + 0x27]
shl esi, 8
or rsi, rax
lea rax, [rsi - 1]
cmp rax, 2
jbe 0x140028ff2
test r8b, 2
mov eax, 0x34
mov edx, 0x2c
cmove eax, edx
add rax, rsi
add rax, rdi
cmp rcx, rax
je 0x140029015
mov r8b, 0x32
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff8680
jmp 0x14002918e
lea rax, [rdx + 0x2a]
cmp rcx, rax
jne 0x140028ff2
mov rsi, r12
movzx eax, byte [rdi + r14 + 0x24]
mov qword [rsp + 0x58], rbp
movzx ebp, byte [rdi + r14 + 0x23]
shl ebp, 8
mov qword [rsp + 0x20], r15
or ebp, eax
cmp byte [rdi + r14 + 0x25], r12b
lea r15, [rdi + r14]
je 0x140029052
mov r8b, 0x2f
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff8f80
jmp 0x140029184
mov ecx, ebp
call fcn.140027ca0
mov rcx, qword [rbx + 0x80]
mov qword [rcx], rax
mov rcx, rbx
mov rax, qword [rbx + 0x80]
mov rdx, qword [rax]
test rdx, rdx
jne 0x140029089
mov r8b, 0x50
mov dl, 2
call fcn.14002d8b0
mov eax, 0xffff8f00
jmp 0x140029184
call fcn.14002e020
mov rax, qword [rbx + 0x60]
mov qword [rsp + 0x50], rax
cmp dword [rax + 0x9a4], r12d
je 0x140029102
test rdi, rdi
je 0x140029102
cmp dword [rbx + 0xc], r12d
jne 0x140029102
mov rcx, qword [rbx + 0x58]
cmp dword [rcx + 8], ebp
jne 0x140029102
cmp dword [rcx + 0xc], r12d
jne 0x140029102
cmp qword [rcx + 0x10], rdi
jne 0x140029102
lea rdx, [r14 + 0x23]
add rcx, 0x18
mov r8, rdi
call fcn.140046e90
test eax, eax
jne 0x1400290fd
mov rcx, rbx
mov dword [rbx + 8], recv
call fcn.14002aeb0
mov edi, eax
test eax, eax
je 0x140029145
mov r8b, 0x50
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, edi
jmp 0x140029184
mov rax, qword [rsp + 0x50]
inc dword [rbx + 8]
xor ecx, ecx
mov dword [rax + 0x9a4], r12d
call fcn.14003b268
mov rcx, qword [rbx + 0x58]
lea rdx, [r14 + 0x23]
mov r8, rdi
mov qword [rcx], rax
mov rax, qword [rbx + 0x58]
mov dword [rax + 8], ebp
mov rax, qword [rbx + 0x58]
mov dword [rax + 0xc], r12d
mov rax, qword [rbx + 0x58]
mov qword [rax + 0x10], rdi
mov rcx, qword [rbx + 0x58]
add rcx, 0x18
call fcn.140035790
movsxd r9, dword [rbx + 0x18]
mov rax, qword [rbx]
mov rdx, qword [rax + r9*8]
cmp dword [rdx], r12d
je 0x140029172
mov r10, qword [rbx + 0x58]
mov rcx, r12
mov r8d, dword [r10 + 8]
mov eax, dword [rcx + rdx]
lea rcx, [rcx + 4]
cmp eax, r8d
je 0x1400291a6
cmp dword [rcx + rdx], r12d
jne 0x140029160
mov r8b, 0x2f
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff8680
mov rbp, qword [rsp + 0x58]
mov r15, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rsp + 0x68]
mov r14, qword [rsp + 0x28]
add rsp, 0x30
pop r12
pop rdi
pop rbx
ret
mov ecx, r8d
call fcn.140027ca0
mov rdx, rbx
mov rcx, rax
mov r8d, r9d
call fcn.140028480
test eax, eax
jne 0x140029172
mov dword [r10 + 0xc], r12d
lea rdi, [r15 + 0x28]
test rsi, rsi
je 0x1400292d7
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rdi + 2]
movzx eax, byte [rdi + 3]
shl edx, 8
or edx, eax
lea ebp, [rdx + 4]
cmp rbp, rsi
ja 0x140029302
movzx ecx, byte [rdi]
movzx eax, byte [rdi + 1]
shl ecx, 8
or ecx, eax
cmp ecx, 0x16
ja 0x140029271
je 0x140029264
sub ecx, 1
je 0x140029253
sub ecx, 3
je 0x140029246
sub ecx, 7
je 0x140029235
cmp ecx, 5
jne 0x1400292ba
mov r8d, edx
mov rcx, rbx
lea rdx, [rdi + 4]
call fcn.140028b50
jmp 0x1400292b2
mov r8d, edx
mov rcx, rbx
lea rdx, [rdi + 4]
call fcn.140028ae0
jmp 0x1400292b2
mov r8d, edx
mov rcx, rbx
call fcn.1400289a0
jmp 0x1400292b2
mov r8d, edx
mov rcx, rbx
lea rdx, [rdi + 4]
call fcn.140028950
jmp 0x1400292b2
mov r8d, edx
mov rcx, rbx
call fcn.1400289f0
jmp 0x1400292b2
cmp ecx, 0x17
je 0x1400292a7
cmp ecx, 0x23
je 0x14002929a
cmp ecx, 0xff01
jne 0x1400292ba
mov r8d, edx
mov rcx, rbx
lea rdx, [rdi + 4]
mov r12d, 1
call fcn.1400288b0
jmp 0x1400292b2
mov r8d, edx
mov rcx, rbx
call fcn.140028a90
jmp 0x1400292b2
mov r8d, edx
mov rcx, rbx
call fcn.140028a40
test eax, eax
jne 0x140029184
sub rsi, rbp
add rdi, rbp
lea rax, [rsi - 1]
cmp rax, 2
jbe 0x14002917f
test rsi, rsi
jne 0x1400291e0
mov edx, dword [rbx + 0x180]
test edx, edx
jne 0x1400292f2
mov rax, qword [rbx]
mov ecx, dword [rax + 0x144]
and cl, 0x30
cmp cl, 0x20
je 0x140029320
cmp dword [rbx + 0xc], 1
jne 0x140029328
cmp edx, 1
jne 0x14002930a
test r12d, r12d
jmp 0x14002931e
mov r8b, 0x32
jmp 0x140029175
test edx, edx
jne 0x140029328
mov rax, qword [rbx]
test byte [rax + 0x144], 0x30
je 0x140029320
cmp r12d, 1
jne 0x140029328
mov r8b, 0x28
jmp 0x140029175
xor eax, eax
jmp 0x140029184
mov r8b, 0x46
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff9180
jmp 0x140029193
mov r8b, 0x32
mov dl, 2
mov rcx, rbx
call fcn.14002d8b0
mov eax, 0xffff8680
add rsp, 0x30
pop r12
pop rdi
pop rbx
ret