Function at 0x140004c80
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x10], rdx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rdi, rcx
xor ebp, ebp
mov ecx, dword [r8 + 0x10]
mov esi, ebp
mov ebx, ebp
mov r12, r8
call qword [sym.imp.WS2_32.dll_ntohl]
mov r8d, eax
lea eax, [r8 - 1]
cmp eax, 0xfe
ja 0x140004d6f
imul rdx, qword [rdi + 0x30], 0x1d8
mov rax, qword [rdi + 0x28]
add rdx, rax
cmp rax, rdx
jae 0x140004d6f
nop dword [rax + rax]
mov ecx, dword [rax + 0x38]
test ecx, ecx
jne 0x140004cf6
test rbx, rbx
mov rcx, rax
cmovne rcx, rbx
mov rbx, rcx
jmp 0x140004d20
cmp ecx, 1
je 0x140004d20
mov ecx, dword [rdi + 0x2ab8]
cmp dword [rax + 0x24], ecx
jne 0x140004d20
movzx ecx, word [rdi + 0x2abc]
cmp word [rax + 0x28], cx
jne 0x140004d1d
mov ecx, dword [r12 + 0x28]
cmp dword [rax + 0x1c], ecx
je 0x140004d6f
inc rsi
add rax, 0x1d8
cmp rax, rdx
jb 0x140004ce0
test rbx, rbx
je 0x140004d6f
cmp rsi, qword [rdi + 0x2af8]
jae 0x140004d6f
mov r14, qword [rdi + 0x38]
cmp r8, r14
cmovbe r14, r8
mov qword [rsp + 0x88], r14
lea r15, [r14 + r14*4]
shl r15, 4
mov rcx, r15
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x140004d8a
call qword [0x1400c54c8]
mov qword [rbx + 0x40], rsi
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x48], r14
mov dword [rbx + 0x38], 2
mov eax, dword [r12 + 0x28]
mov dword [rbx + 0x1c], eax
mov rax, qword [rdi + 0x2ab8]
mov qword [rbx + 0x24], rax
movzx ecx, word [r12 + 4]
mov qword [rsp + 0x80], r13
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rbx + 0x18], ax
mov ecx, dword [r12 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x50], eax
mov ecx, dword [r12 + 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x54], eax
mov ecx, dword [r12 + 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa4], eax
mov ecx, dword [r12 + 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x9c], eax
mov ecx, dword [r12 + 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa0], eax
mov ecx, dword [r12 + 0x2c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x1c8], eax
movzx r14d, byte [r12 + 6]
cmp r14b, 0xff
jne 0x140004e35
movzx r14d, byte [rbx + 0x20]
inc r14b
and r14b, 3
cmp r14b, byte [rbx + 0x20]
jne 0x140004e49
inc r14b
and r14b, 3
mov byte [rbx + 0x20], r14b
movzx esi, byte [r12 + 7]
cmp sil, 0xff
jne 0x140004e5d
movzx esi, byte [rbx + 0x21]
inc sil
and sil, 3
cmp sil, byte [rbx + 0x21]
jne 0x140004e71
inc sil
and sil, 3
mov r8, qword [rbx + 0x40]
mov r13, rbx
mov byte [rbx + 0x21], sil
lea rax, [r8 + r15]
cmp r8, rax
jae 0x140004ed4
lea rdx, [r8 + 0x48]
nop dword [rax]
lea rax, [rdx - 0x18]
mov word [r8], bp
mov qword [rdx - 0x10], rax
xorps xmm0, xmm0
mov qword [rax], rax
add r8, 0x50
mov dword [rdx - 0x46], ebp
lea rax, [rdx - 8]
mov qword [rdx], rax
mov dword [rdx - 0x22], ebp
lea rdx, [rdx + 0x50]
mov qword [rax], rax
movups xmmword [rdx - 0x92], xmm0
movups xmmword [rdx - 0x82], xmm0
mov rcx, qword [rbx + 0x40]
add rcx, r15
cmp r8, rcx
jb 0x140004e90
mov ecx, dword [r12 + 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, 0x240
mov r15d, 0x1000
cmp eax, ecx
jb 0x140004ef7
cmp eax, r15d
mov ecx, eax
cmova ecx, r15d
mov eax, dword [rbx + 0x50]
mov r8d, 0x10000
mov dword [r13 + 0xd0], ecx
mov edx, eax
mov ecx, dword [rdi + 0x14]
test ecx, ecx
jne 0x140004f1d
test eax, eax
jne 0x140004f28
mov dword [rbx + 0xd4], r8d
jmp 0x140004f56
test eax, eax
je 0x140004f28
cmp ecx, eax
cmovb eax, ecx
jmp 0x140004f2f
cmp ecx, edx
mov eax, edx
cmova eax, ecx
shr eax, 0x10
shl eax, 0xc
mov dword [r13 + 0xd4], eax
cmp eax, r15d
jae 0x140004f4a
mov dword [r13 + 0xd4], r15d
jmp 0x140004f56
cmp eax, r8d
jbe 0x140004f56
mov dword [r13 + 0xd4], r8d
mov ebp, dword [rdi + 0x10]
test ebp, ebp
jne 0x140004f62
mov ebp, r8d
jmp 0x140004f68
shr ebp, 0x10
shl ebp, 0xc
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
cmp ebp, eax
jbe 0x140004f84
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ebp, eax
cmp ebp, r15d
jb 0x140004f97
mov eax, 0x10000
mov r15d, ebp
cmp ebp, eax
cmova r15d, eax
movzx ecx, word [r13 + 0x1a]
mov word [rsp + 0x20], 0xff83
call qword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [r13 + 0xd0]
mov word [rsp + 0x24], ax
mov byte [rsp + 0x26], r14b
mov byte [rsp + 0x27], sil
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r15d
mov dword [rsp + 0x28], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rsp + 0x88]
mov dword [rsp + 0x2c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x10]
mov dword [rsp + 0x30], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x14]
mov dword [rsp + 0x34], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa4]
mov dword [rsp + 0x38], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0x9c]
mov dword [rsp + 0x3c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa0]
mov dword [rsp + 0x40], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x44], eax
mov ecx, 0x60
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x48], eax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
jne 0x14000505e
call qword [0x1400c54c8]
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x140004d71
movups xmm0, xmmword [rsp + 0x20]
xor ecx, ecx
mov rdx, rax
movups xmm1, xmmword [rsp + 0x30]
mov dword [rax + 0x20], ecx
movups xmmword [rax + 0x28], xmm0
mov word [rax + 0x24], cx
movups xmm0, xmmword [rsp + 0x40]
mov qword [rax + 0x58], rcx
mov rcx, r13
movups xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm0
call fcn.140004120
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x140004d71