Function at 0x180031190
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x30
mov eax, dword [rsp + 0x70]
mov r14, r9
mov rdi, r8
mov rbp, rdx
mov rsi, rcx
cmp eax, 0x40
jb 0x180031548
mov r11, qword [rsp + 0x68]
mov ebx, eax
movzx eax, byte [r11 + 0xe]
movzx r10d, byte [r11 + 0xf]
shl r10, 8
or r10, rax
movzx eax, byte [r11 + 0xd]
shl r10, 8
or r10, rax
movzx eax, byte [r11 + 0xc]
shl r10, 8
or r10, rax
add r10, 0x10
cmp r10, rbx
jne 0x180031548
movzx eax, byte [r11 + 0x1a]
movzx r8d, byte [r11 + 0x1b]
shl r8d, 8
or r8d, eax
movzx eax, byte [r11 + 0x19]
shl r8d, 8
or r8d, eax
movzx eax, byte [r11 + 0x18]
shl r8d, 8
or r8d, eax
add r8d, 0x1c
mov ecx, r8d
add rcx, r11
movzx eax, byte [rcx + 2]
movzx edx, byte [rcx + 3]
shl edx, 8
or edx, eax
movzx eax, byte [rcx + 1]
shl edx, 8
or edx, eax
movzx eax, byte [rcx]
shl edx, 8
or edx, eax
add edx, 4
add r8d, edx
mov ecx, r8d
add rcx, r11
movzx eax, byte [rcx + 2]
movzx r9d, byte [rcx + 3]
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx + 1]
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx]
shl r9d, 8
or r9d, eax
add r9d, 0xc
add r9d, r8d
mov ecx, r9d
add rcx, r11
movzx eax, byte [rcx + 2]
movzx edx, byte [rcx + 3]
shl edx, 8
or edx, eax
movzx eax, byte [rcx + 1]
shl edx, 8
or edx, eax
movzx eax, byte [rcx]
shl edx, 8
lea ecx, [r9 + 4]
or edx, eax
add ecx, edx
add rcx, 0x10
cmp rcx, rbx
jne 0x180031548
movzx eax, byte [r11 + 0x16]
movzx ecx, byte [r11 + 0x17]
shl rcx, 8
or rcx, rax
movzx eax, byte [r11 + 0x15]
shl rcx, 8
or rcx, rax
movzx eax, byte [r11 + 0x14]
shl rcx, 8
or rcx, rax
movzx eax, byte [r11 + 0x13]
shl rcx, 8
or rcx, rax
movzx eax, byte [r11 + 0x12]
shl rcx, 8
or rcx, rax
movzx eax, byte [r11 + 0x11]
shl rcx, 8
or rcx, rax
movzx eax, byte [r11 + 0x10]
shl rcx, 8
or rcx, rax
lea rax, [r11 + 0x1c]
mov qword [rsi], rcx
movzx r8d, byte [r11 + 0x1b]
mov qword [rsp], rax
movzx eax, byte [r11 + 0x1a]
shl r8d, 8
or r8d, eax
movzx eax, byte [r11 + 0x19]
shl r8d, 8
or r8d, eax
movzx eax, byte [r11 + 0x18]
shl r8d, 8
or r8d, eax
add r8d, 0x1c
mov edx, r8d
add r8d, 4
add rdx, r11
movzx ecx, byte [rdx + 3]
lea rax, [rdx + 4]
mov qword [rsp + 8], rax
movzx eax, byte [rdx + 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 1]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx]
shl ecx, 8
or ecx, eax
add r8d, ecx
mov edx, r8d
add rdx, r11
movzx r9d, byte [rdx + 3]
lea rax, [rdx + 4]
shl r9d, 8
mov qword [rsp + 0x10], rax
movzx eax, byte [rdx + 2]
or r9d, eax
movzx eax, byte [rdx + 1]
shl r9d, 8
or r9d, eax
movzx eax, byte [rdx]
shl r9d, 8
or r9d, eax
add r9d, 4
add r9d, r8d
test rdi, rdi
je 0x18003141e
mov ecx, r9d
add rcx, r11
movzx eax, byte [rcx + 6]
movzx edx, byte [rcx + 7]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 5]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 4]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 3]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 2]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 1]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx]
shl rdx, 8
or rdx, rax
mov qword [rdi], rdx
movups xmm0, xmmword [rsp]
add r9d, 8
mov ecx, r9d
add rcx, r11
movzx edx, byte [rcx + 3]
lea rax, [rcx + 4]
shl rdx, 8
mov qword [rsp + 0x18], rax
movzx eax, byte [rcx + 2]
or rdx, rax
movzx eax, byte [rcx + 1]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx]
shl rdx, 8
or rdx, rax
mov qword [rsp + 0x20], rdx
movups xmm1, xmmword [rsp + 0x10]
lea r8d, [rdx + 4]
add r8d, r9d
mov ecx, r8d
add rcx, r11
movzx eax, byte [rcx + 6]
movzx edx, byte [rcx + 7]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 5]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 4]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 3]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 2]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + 1]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx]
shl rdx, 8
or rdx, rax
lea eax, [r8 + 8]
mov qword [r14], rdx
movzx edx, byte [rax + r11 + 7]
shl rdx, 8
mov ecx, eax
movzx eax, byte [rax + r11 + 6]
or rdx, rax
shl rdx, 8
movzx eax, byte [rcx + r11 + 5]
or rdx, rax
movzx eax, byte [rcx + r11 + 4]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + r11 + 3]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + r11 + 2]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + r11 + 1]
shl rdx, 8
or rdx, rax
movzx eax, byte [rcx + r11]
shl rdx, 8
or rdx, rax
mov rax, qword [rsp + 0x60]
mov qword [rax], rdx
xor eax, eax
movups xmmword [rbp], xmm0
movsd xmm0, qword [rsp + 0x20]
movups xmmword [rbp + 0x10], xmm1
movsd qword [rbp + 0x20], xmm0
jmp 0x18003154d
mov eax, reloc.WS2_32.dll_shutdown
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x30
pop r14
ret