Function at 0x1400046d0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x10], rdx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rdi, rcx
xor ebp, ebp
mov ecx, dword [r8 + 0x10]
mov esi, ebp
mov ebx, ebp
mov r12, r8
call qword [sym.imp.WS2_32.dll_ntohl]
mov r8d, eax
lea eax, [r8 - 1]
cmp eax, 0xfe
ja 0x1400047bf
imul rdx, qword [rdi + 0x30], 0x1d8
mov rax, qword [rdi + 0x28]
add rdx, rax
cmp rax, rdx
jae 0x1400047bf
nop dword [rax + rax]
mov ecx, dword [rax + 0x38]
test ecx, ecx
jne 0x140004746
test rbx, rbx
mov rcx, rax
cmovne rcx, rbx
mov rbx, rcx
jmp 0x140004770
cmp ecx, 1
je 0x140004770
mov ecx, dword [rdi + 0x2ab8]
cmp dword [rax + 0x24], ecx
jne 0x140004770
movzx ecx, word [rdi + 0x2abc]
cmp word [rax + 0x28], cx
jne 0x14000476d
mov ecx, dword [r12 + 0x28]
cmp dword [rax + 0x1c], ecx
je 0x1400047bf
inc rsi
add rax, 0x1d8
cmp rax, rdx
jb 0x140004730
test rbx, rbx
je 0x1400047bf
cmp rsi, qword [rdi + 0x2af8]
jae 0x1400047bf
mov r14, qword [rdi + 0x38]
cmp r8, r14
cmovbe r14, r8
mov qword [rsp + 0x88], r14
lea r15, [r14 + r14*4]
shl r15, 4
mov rcx, r15
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x1400047da
call qword [0x14004f080]
mov qword [rbx + 0x40], rsi
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x48], r14
mov dword [rbx + 0x38], 2
mov eax, dword [r12 + 0x28]
mov dword [rbx + 0x1c], eax
mov rax, qword [rdi + 0x2ab8]
mov qword [rbx + 0x24], rax
movzx ecx, word [r12 + 4]
mov qword [rsp + 0x80], r13
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rbx + 0x18], ax
mov ecx, dword [r12 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x50], eax
mov ecx, dword [r12 + 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x54], eax
mov ecx, dword [r12 + 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa4], eax
mov ecx, dword [r12 + 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x9c], eax
mov ecx, dword [r12 + 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa0], eax
mov ecx, dword [r12 + 0x2c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x1c8], eax
movzx r14d, byte [r12 + 6]
cmp r14b, 0xff
jne 0x140004885
movzx r14d, byte [rbx + 0x20]
inc r14b
and r14b, 3
cmp r14b, byte [rbx + 0x20]
jne 0x140004899
inc r14b
and r14b, 3
mov byte [rbx + 0x20], r14b
movzx esi, byte [r12 + 7]
cmp sil, 0xff
jne 0x1400048ad
movzx esi, byte [rbx + 0x21]
inc sil
and sil, 3
cmp sil, byte [rbx + 0x21]
jne 0x1400048c1
inc sil
and sil, 3
mov r8, qword [rbx + 0x40]
mov r13, rbx
mov byte [rbx + 0x21], sil
lea rax, [r8 + r15]
cmp r8, rax
jae 0x140004924
lea rdx, [r8 + 0x48]
nop dword [rax]
lea rax, [rdx - 0x18]
mov word [r8], bp
mov qword [rdx - 0x10], rax
xorps xmm0, xmm0
mov qword [rax], rax
add r8, 0x50
mov dword [rdx - 0x46], ebp
lea rax, [rdx - 8]
mov qword [rdx], rax
mov dword [rdx - 0x22], ebp
lea rdx, [rdx + 0x50]
mov qword [rax], rax
movups xmmword [rdx - 0x92], xmm0
movups xmmword [rdx - 0x82], xmm0
mov rcx, qword [rbx + 0x40]
add rcx, r15
cmp r8, rcx
jb 0x1400048e0
mov ecx, dword [r12 + 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, 0x240
mov r15d, 0x1000
cmp eax, ecx
jb 0x140004947
cmp eax, r15d
mov ecx, eax
cmova ecx, r15d
mov eax, dword [rbx + 0x50]
mov r8d, 0x10000
mov dword [r13 + 0xd0], ecx
mov edx, eax
mov ecx, dword [rdi + 0x14]
test ecx, ecx
jne 0x14000496d
test eax, eax
jne 0x140004978
mov dword [rbx + 0xd4], r8d
jmp 0x1400049a6
test eax, eax
je 0x140004978
cmp ecx, eax
cmovb eax, ecx
jmp 0x14000497f
cmp ecx, edx
mov eax, edx
cmova eax, ecx
shr eax, 0x10
shl eax, 0xc
mov dword [r13 + 0xd4], eax
cmp eax, r15d
jae 0x14000499a
mov dword [r13 + 0xd4], r15d
jmp 0x1400049a6
cmp eax, r8d
jbe 0x1400049a6
mov dword [r13 + 0xd4], r8d
mov ebp, dword [rdi + 0x10]
test ebp, ebp
jne 0x1400049b2
mov ebp, r8d
jmp 0x1400049b8
shr ebp, 0x10
shl ebp, 0xc
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
cmp ebp, eax
jbe 0x1400049d4
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ebp, eax
cmp ebp, r15d
jb 0x1400049e7
mov eax, 0x10000
mov r15d, ebp
cmp ebp, eax
cmova r15d, eax
movzx ecx, word [r13 + 0x1a]
mov word [rsp + 0x20], 0xff83
call qword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [r13 + 0xd0]
mov word [rsp + 0x24], ax
mov byte [rsp + 0x26], r14b
mov byte [rsp + 0x27], sil
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r15d
mov dword [rsp + 0x28], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rsp + 0x88]
mov dword [rsp + 0x2c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x10]
mov dword [rsp + 0x30], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x14]
mov dword [rsp + 0x34], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa4]
mov dword [rsp + 0x38], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0x9c]
mov dword [rsp + 0x3c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa0]
mov dword [rsp + 0x40], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x44], eax
mov ecx, 0x60
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x48], eax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
jne 0x140004aae
call qword [0x14004f080]
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x1400047c1
movups xmm0, xmmword [rsp + 0x20]
xor ecx, ecx
mov rdx, rax
movups xmm1, xmmword [rsp + 0x30]
mov dword [rax + 0x20], ecx
movups xmmword [rax + 0x28], xmm0
mov word [rax + 0x24], cx
movups xmm0, xmmword [rsp + 0x40]
mov qword [rax + 0x58], rcx
mov rcx, r13
movups xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm0
call fcn.140003b70
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x1400047c1