Function at 0x140004780
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x10], rdx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rdi, rcx
xor ebp, ebp
mov ecx, dword [r8 + 0x10]
mov esi, ebp
mov ebx, ebp
mov r12, r8
call qword [sym.imp.WS2_32.dll_ntohl]
mov r8d, eax
lea eax, [r8 - 1]
cmp eax, 0xfe
ja 0x14000486f
imul rdx, qword [rdi + 0x30], 0x1d8
mov rax, qword [rdi + 0x28]
add rdx, rax
cmp rax, rdx
jae 0x14000486f
nop dword [rax + rax]
mov ecx, dword [rax + 0x38]
test ecx, ecx
jne 0x1400047f6
test rbx, rbx
mov rcx, rax
cmovne rcx, rbx
mov rbx, rcx
jmp 0x140004820
cmp ecx, 1
je 0x140004820
mov ecx, dword [rdi + 0x2ab8]
cmp dword [rax + 0x24], ecx
jne 0x140004820
movzx ecx, word [rdi + 0x2abc]
cmp word [rax + 0x28], cx
jne 0x14000481d
mov ecx, dword [r12 + 0x28]
cmp dword [rax + 0x1c], ecx
je 0x14000486f
inc rsi
add rax, 0x1d8
cmp rax, rdx
jb 0x1400047e0
test rbx, rbx
je 0x14000486f
cmp rsi, qword [rdi + 0x2af8]
jae 0x14000486f
mov r14, qword [rdi + 0x38]
cmp r8, r14
cmovbe r14, r8
mov qword [rsp + 0x88], r14
lea r15, [r14 + r14*4]
shl r15, 4
mov rcx, r15
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x14000488a
call qword [0x1400210e0]
mov qword [rbx + 0x40], rsi
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x48], r14
mov dword [rbx + 0x38], 2
mov eax, dword [r12 + 0x28]
mov dword [rbx + 0x1c], eax
mov rax, qword [rdi + 0x2ab8]
mov qword [rbx + 0x24], rax
movzx ecx, word [r12 + 4]
mov qword [rsp + 0x80], r13
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rbx + 0x18], ax
mov ecx, dword [r12 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x50], eax
mov ecx, dword [r12 + 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x54], eax
mov ecx, dword [r12 + 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa4], eax
mov ecx, dword [r12 + 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x9c], eax
mov ecx, dword [r12 + 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa0], eax
mov ecx, dword [r12 + 0x2c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x1c8], eax
movzx r14d, byte [r12 + 6]
cmp r14b, 0xff
jne 0x140004935
movzx r14d, byte [rbx + 0x20]
inc r14b
and r14b, 3
cmp r14b, byte [rbx + 0x20]
jne 0x140004949
inc r14b
and r14b, 3
mov byte [rbx + 0x20], r14b
movzx esi, byte [r12 + 7]
cmp sil, 0xff
jne 0x14000495d
movzx esi, byte [rbx + 0x21]
inc sil
and sil, 3
cmp sil, byte [rbx + 0x21]
jne 0x140004971
inc sil
and sil, 3
mov r8, qword [rbx + 0x40]
mov r13, rbx
mov byte [rbx + 0x21], sil
lea rax, [r8 + r15]
cmp r8, rax
jae 0x1400049d4
lea rdx, [r8 + 0x48]
nop dword [rax]
lea rax, [rdx - 0x18]
mov word [r8], bp
mov qword [rdx - 0x10], rax
xorps xmm0, xmm0
mov qword [rax], rax
add r8, 0x50
mov dword [rdx - 0x46], ebp
lea rax, [rdx - 8]
mov qword [rdx], rax
mov dword [rdx - 0x22], ebp
lea rdx, [rdx + 0x50]
mov qword [rax], rax
movups xmmword [rdx - 0x92], xmm0
movups xmmword [rdx - 0x82], xmm0
mov rcx, qword [rbx + 0x40]
add rcx, r15
cmp r8, rcx
jb 0x140004990
mov ecx, dword [r12 + 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, 0x240
mov r15d, 0x1000
cmp eax, ecx
jb 0x1400049f7
cmp eax, r15d
mov ecx, eax
cmova ecx, r15d
mov eax, dword [rbx + 0x50]
mov r8d, 0x10000
mov dword [r13 + 0xd0], ecx
mov edx, eax
mov ecx, dword [rdi + 0x14]
test ecx, ecx
jne 0x140004a1d
test eax, eax
jne 0x140004a28
mov dword [rbx + 0xd4], r8d
jmp 0x140004a56
test eax, eax
je 0x140004a28
cmp ecx, eax
cmovb eax, ecx
jmp 0x140004a2f
cmp ecx, edx
mov eax, edx
cmova eax, ecx
shr eax, 0x10
shl eax, 0xc
mov dword [r13 + 0xd4], eax
cmp eax, r15d
jae 0x140004a4a
mov dword [r13 + 0xd4], r15d
jmp 0x140004a56
cmp eax, r8d
jbe 0x140004a56
mov dword [r13 + 0xd4], r8d
mov ebp, dword [rdi + 0x10]
test ebp, ebp
jne 0x140004a62
mov ebp, r8d
jmp 0x140004a68
shr ebp, 0x10
shl ebp, 0xc
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
cmp ebp, eax
jbe 0x140004a84
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ebp, eax
cmp ebp, r15d
jb 0x140004a97
mov eax, 0x10000
mov r15d, ebp
cmp ebp, eax
cmova r15d, eax
movzx ecx, word [r13 + 0x1a]
mov word [rsp + 0x20], 0xff83
call qword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [r13 + 0xd0]
mov word [rsp + 0x24], ax
mov byte [rsp + 0x26], r14b
mov byte [rsp + 0x27], sil
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r15d
mov dword [rsp + 0x28], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rsp + 0x88]
mov dword [rsp + 0x2c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x10]
mov dword [rsp + 0x30], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x14]
mov dword [rsp + 0x34], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa4]
mov dword [rsp + 0x38], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0x9c]
mov dword [rsp + 0x3c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa0]
mov dword [rsp + 0x40], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x44], eax
mov ecx, 0x60
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x48], eax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
jne 0x140004b5e
call qword [0x1400210e0]
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x140004871
movups xmm0, xmmword [rsp + 0x20]
xor ecx, ecx
mov rdx, rax
movups xmm1, xmmword [rsp + 0x30]
mov dword [rax + 0x20], ecx
movups xmmword [rax + 0x28], xmm0
mov word [rax + 0x24], cx
movups xmm0, xmmword [rsp + 0x40]
mov qword [rax + 0x58], rcx
mov rcx, r13
movups xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm0
call fcn.140003a20
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x140004871