Function at 0x14002e030
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x148
lea rbp, [rsp + 0x20]
lea rcx, [0x140077070]
call fcn.14001e13a
mov rax, qword [rbp + 0x150]
cmp dword [rax + 0x38], 1
je 0x14002e072
xor eax, eax
jmp 0x14002e2b5
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0x10]
call qword [sym.imp.WS2_32.dll_ntohl]
mov eax, eax
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 1
jb 0x14002e10c
cmp qword [rbp + 0x48], 0xff
ja 0x14002e10c
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov rcx, qword [rbp + 0x150]
cmp eax, dword [rcx + 0xa4]
jne 0x14002e10c
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov rcx, qword [rbp + 0x150]
cmp eax, dword [rcx + 0x9c]
jne 0x14002e10c
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov rcx, qword [rbp + 0x150]
cmp eax, dword [rcx + 0xa0]
jne 0x14002e10c
mov rax, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x150]
mov ecx, dword [rcx + 0x1c]
cmp dword [rax + 0x28], ecx
je 0x14002e140
mov rax, qword [rbp + 0x150]
mov dword [rax + 0x1c8], 0
mov r8d, 9
mov rdx, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x140]
call fcn.14002a830
mov eax, 0xffffffff
jmp 0x14002e2b5
mov r8b, 0xff
mov dx, 1
mov rcx, qword [rbp + 0x150]
call fcn.14002e860
mov rax, qword [rbp + 0x150]
mov rax, qword [rax + 0x48]
cmp qword [rbp + 0x48], rax
jae 0x14002e173
mov rax, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x48]
mov qword [rax + 0x48], rcx
mov rax, qword [rbp + 0x158]
movzx ecx, word [rax + 4]
call qword [sym.imp.WS2_32.dll_ntohs]
mov rcx, qword [rbp + 0x150]
mov word [rcx + 0x18], ax
mov rax, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x158]
movzx ecx, byte [rcx + 6]
mov byte [rax + 0x21], cl
mov rax, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x158]
movzx ecx, byte [rcx + 7]
mov byte [rax + 0x20], cl
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0x240
jae 0x14002e1de
mov dword [rbp + 4], 0x240
jmp 0x14002e1ee
cmp dword [rbp + 4], 0x1000
jbe 0x14002e1ee
mov dword [rbp + 4], 0x1000
mov rax, qword [rbp + 0x150]
mov eax, dword [rax + 0xd0]
cmp dword [rbp + 4], eax
jae 0x14002e210
mov rax, qword [rbp + 0x150]
mov ecx, dword [rbp + 4]
mov dword [rax + 0xd0], ecx
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0x1000
jae 0x14002e233
mov dword [rbp + 0x24], 0x1000
cmp dword [rbp + 0x24], 0x10000
jbe 0x14002e243
mov dword [rbp + 0x24], 0x10000
mov rax, qword [rbp + 0x150]
mov eax, dword [rax + 0xd4]
cmp dword [rbp + 0x24], eax
jae 0x14002e265
mov rax, qword [rbp + 0x150]
mov ecx, dword [rbp + 0x24]
mov dword [rax + 0xd4], ecx
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov rcx, qword [rbp + 0x150]
mov dword [rcx + 0x50], eax
mov rax, qword [rbp + 0x158]
mov ecx, dword [rax + 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov rcx, qword [rbp + 0x150]
mov dword [rcx + 0x54], eax
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x140]
call fcn.14002e370
xor eax, eax
lea rsp, [rbp + 0x128]
pop rdi
pop rbp
ret