Function at 0x1401d6cb0
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov rax, qword [rdx]
xor r13d, r13d
movzx ebx, byte [rdx + 0x24]
mov rdi, rdx
mov rsi, qword [rcx + 0x10]
not ebx
mov r12d, dword [rdx + 8]
and ebx, 1
mov eax, dword [rax]
mov r14, rcx
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x30], r13d
lea ebp, [rax + rbx]
mov eax, dword [rsp + 0xc0]
add ebp, dword [rsp + 0xb8]
test eax, eax
je 0x1401d6d12
mov r15d, r9d
sub r15d, eax
jmp 0x1401d6d1e
mov eax, dword [rcx + 0x38]
lea r15d, [rax + 1]
add eax, ebp
mov dword [rcx + 0x38], eax
mov eax, dword [r8 + 0xc]
test eax, eax
je 0x1401d6d2a
inc eax
jmp 0x1401d6d2e
mov eax, dword [r8 + 8]
mov dword [rsp + 0x90], eax
call fcn.14020ade0
mov r9d, dword [rsp + 0xb0]
mov ecx, 5
mov dword [rdx + 0x1c], eax
test r9d, r9d
mov rdx, qword [rdx]
mov eax, 1
cmovne eax, ecx
mov r8d, r15d
mov rcx, r14
mov byte [rsp + 0x20], al
call fcn.1401e8940
mov eax, dword [rsp + 0x98]
add eax, r15d
mov dword [rsp + 0xb0], eax
test ebx, ebx
je 0x1401d6d97
mov r8d, dword [rdi + 0xc]
mov r9d, eax
mov edx, 0x77
mov rcx, rsi
call fcn.140203470
mov eax, dword [rsp + 0xb0]
cmp dword [rsp + 0xc0], r13d
jne 0x1401d6dc2
mov ecx, dword [rsp + 0xb8]
test ecx, ecx
jle 0x1401d6dc2
mov edx, dword [rsp + 0xa8]
lea r8d, [rax + rbx]
mov r9d, ecx
mov rcx, r14
call fcn.1401e9440
test r12d, r12d
jle 0x1401d6f7b
mov r8, qword [rsp + 0xa0]
mov r9d, r15d
mov rdx, rdi
mov dword [rsp + 0x20], ebp
mov rcx, r14
call fcn.1401d0190
mov edx, dword [r14 + 0x38]
mov r13d, eax
mov r8d, dword [rsp + 0xb0]
lea eax, [rdx + 1]
add edx, dword [rdi + 8]
mov dword [rsp + 0xc0], eax
mov eax, dword [rsp + 0x98]
mov dword [r14 + 0x38], edx
sub eax, dword [rdi + 8]
add eax, ebx
mov dword [rsp + 0x34], eax
test ebx, ebx
jne 0x1401d6e1d
mov r8d, dword [rdi + 0xc]
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
mov eax, WSACleanup
test ebx, ebx
mov rcx, rsi
cmove edx, eax
call fcn.140203450
mov ecx, dword [rdi + 8]
mov r9d, r15d
mov r8d, dword [rsp + 0xc0]
mov edx, 0x56
mov dword [rsp + 0x20], ecx
mov rcx, rsi
mov dword [rsp + 0xb0], eax
call fcn.140203490
mov edx, dword [rdi + 0x18]
mov rcx, rsi
call fcn.14020a500
mov rcx, qword [r14]
mov qword [rsp + 0x38], rax
cmp byte [rcx + 0x61], 0
jne 0x1401d705e
mov rbx, qword [rax + 0x10]
xor edx, edx
mov ecx, dword [rsp + 0x34]
add ecx, dword [rsp + 0xb8]
mov dword [rax + 8], ecx
movzx r8d, word [rbx + 6]
mov rcx, qword [rbx + 0x18]
call sub.VCRUNTIME140.dll_memset
mov r9d, 0xfffffff7
mov r8, rbx
mov rcx, rsi
lea edx, [r9 + 8]
call fcn.1402038d0
movzx r9d, word [rbx + 8]
mov r8d, r12d
movzx eax, word [rbx + 6]
mov rcx, r14
mov rdx, qword [rdi]
sub r9d, eax
dec r9d
call fcn.1401f34b0
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x10], rax
mov rcx, rsi
call fcn.140203bf0
xor r9d, r9d
mov ebx, eax
lea r8d, [rax + 1]
lea edx, [r9 + 0x10]
mov dword [rsp + 0x20], r8d
call fcn.140203490
mov rcx, r14
call fcn.14020ade0
mov dword [rdi + 0x14], eax
mov edx, reloc.WS2_32.dll_inet_ntoa
inc dword [r14 + 0x38]
mov rcx, rsi
mov r8d, dword [r14 + 0x38]
mov r9d, dword [rdi + 0x14]
mov dword [rdi + 0x10], r8d
call fcn.140203470
mov r8d, dword [rdi + 0xc]
mov edx, 0x8a
mov rcx, rsi
call fcn.140203450
mov eax, dword [rsp + 0x90]
test eax, eax
je 0x1401d6f4b
mov r9d, dword [rdi + 0x1c]
mov r8d, eax
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
mov rcx, rsi
call fcn.140203470
mov edx, dword [rsp + 0xb0]
mov rcx, rsi
call fcn.14020aae0
mov r9d, dword [rdi + 8]
mov edx, r15d
mov r8d, dword [rsp + 0xc0]
mov rcx, r14
call fcn.1401e9440
mov edx, ebx
mov rcx, rsi
call fcn.14020aae0
mov r8d, dword [rsp + 0x90]
test r8d, r8d
je 0x1401d6fef
mov ebx, dword [rdi + 0xc]
mov rcx, rsi
call fcn.140203bf0
mov edx, gethostbyname
lea r9d, [rax + 4]
call fcn.140203470
xor r9d, r9d
mov r8d, ebx
mov rcx, rsi
lea edx, [r9 + 0x21]
call fcn.140203470
mov ecx, dword [rsp + 0x98]
lea eax, [r15 + r12]
sub ecx, r12d
xor r9d, r9d
mov dword [rsp + 0x28], ecx
mov r8d, ebx
mov rcx, rsi
mov dword [rsp + 0x20], eax
lea edx, [r9 + 0x26]
call fcn.1402035b0
mov r8d, ebx
mov dword [rsp + 0x30], eax
mov edx, 0x7a
mov rcx, rsi
call fcn.140203450
lea ebx, [r15 + r12]
test r13d, r13d
jne 0x1401d7015
mov r8, qword [rsp + 0xa0]
mov r9d, r15d
mov rdx, rdi
mov dword [rsp + 0x20], ebp
mov rcx, r14
call fcn.1401d0190
mov r13d, eax
movzx edx, byte [rdi + 0x24]
sub ebp, r12d
mov r8d, dword [rdi + 0xc]
and edx, 1
add edx, 0x82
mov dword [rsp + 0x28], ebp
mov r9d, r13d
mov dword [rsp + 0x20], ebx
mov rcx, rsi
call fcn.1402035b0
mov edx, dword [rsp + 0x30]
test edx, edx
je 0x1401d705e
mov eax, dword [rdi + 0x20]
test eax, eax
jne 0x1401d7053
mov rcx, rsi
call fcn.140203bf0
mov r8d, eax
mov rcx, rsi
call fcn.140203890
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret