Function at 0x1401ea800
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, rdx
mov r15, rcx
mov r14d, dword [rsp + 0xe0]
mov ebp, dword [rsp + 0xd8]
movzx r12d, byte [rdx + 0x24]
and r12d, 1
mov r13d, r12d
xor r13d, 1
mov rax, qword [rdx]
mov edx, dword [rax]
lea eax, [rbp + r13]
mov qword [rsp + 0x50], rdx
add eax, edx
mov dword [rsp + 0x4c], eax
mov ecx, dword [rsi + 8]
test r14d, r14d
mov dword [rsp + 0x3c], r9d
je 0x1401ea9e2
mov ebx, r9d
sub ebx, r14d
mov r9d, dword [rsp + 0xd0]
mov eax, dword [r8 + 0xc]
test eax, eax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x60], r8
jne 0x1401ead41
mov eax, dword [r8 + 8]
mov dword [rsp + 0x38], eax
mov rdi, qword [r15 + 0x10]
mov eax, dword [r15 + 0x44]
dec eax
mov dword [r15 + 0x44], eax
mov dword [rsi + 0x1c], eax
test r9d, r9d
setne al
shl al, 2
inc al
mov rdx, qword [rsi]
mov byte [rsp + 0x20], al
mov rcx, r15
mov r8d, ebx
call fcn.140268c10
test r12b, r12b
je 0x1401eaa25
test r14d, r14d
setne al
test ebp, ebp
setle cl
or cl, al
mov r14d, dword [rsp + 0x4c]
mov r11, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x38]
je 0x1401eaaae
xor r10d, r10d
mov ebp, 0
test r11d, r11d
jg 0x1401ead92
test r8d, r8d
jne 0x1401eab2b
test ebp, ebp
jne 0x1401ea96d
mov r12d, dword [rsi + 8]
mov r13, qword [r15 + 0x10]
mov ebp, dword [r15 + 0x38]
inc ebp
mov dword [r15 + 0x38], ebp
mov rax, qword [rsi + 0x28]
test rax, rax
jne 0x1401eaa80
mov r9d, r14d
sub r9d, r12d
add r12d, ebx
movsxd rax, dword [r13 + 0x90]
cmp dword [r13 + 0x94], eax
jle 0x1401eab07
lea ecx, [rax + 1]
mov dword [r13 + 0x90], ecx
mov rcx, qword [r13 + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], WSASetLastError
mov dword [rcx + rax*8 + 4], r12d
mov dword [rcx + rax*8 + 8], r9d
mov dword [rcx + rax*8 + 0xc], ebp
mov qword [rcx + rax*8 + 0x10], 0
movzx edx, byte [rsi + 0x24]
and edx, 1
or edx, 0x8a
sub r14d, r11d
add ebx, r11d
mov r8d, dword [rsi + 0xc]
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401eacf9
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov byte [rcx + rax*8], dl
mov word [rcx + rax*8 + 2], 0
mov dword [rcx + rax*8 + 4], r8d
mov dword [rcx + rax*8 + 8], ebp
mov dword [rcx + rax*8 + 0xc], ebx
mov dword [rcx + rax*8 + 0x10], r14d
mov byte [rcx + rax*8 + 1], 0xfd
test r10d, r10d
jne 0x1401ea9f6
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [r15 + 0x38]
lea ebx, [rax + 1]
add eax, dword [rsp + 0x4c]
mov dword [r15 + 0x38], eax
jmp 0x1401ea861
mov eax, dword [rsi + 0x20]
test eax, eax
je 0x1401ead48
mov rcx, qword [rdi]
cmp byte [rcx + 0x67], 0
jne 0x1401ead53
movsxd rcx, r10d
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rdi + 0x88]
mov dword [rcx + 8], eax
jmp 0x1401ea9d1
mov rax, qword [rsp + 0x50]
lea r9d, [rbx + rax]
mov r8d, dword [rsi + 0xc]
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401eac8f
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], Ordinal_127
mov dword [rcx + rax*8 + 4], r8d
mov dword [rcx + rax*8 + 8], r9d
mov dword [rcx + rax*8 + 0xc], 0
mov qword [rcx + rax*8 + 0x10], 0
jmp 0x1401ea8be
mov cl, byte [rax + 4]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x60]
mov rdx, qword [rax + 0x20]
mov byte [rsp + 0x20], cl
mov rcx, r15
xor r9d, r9d
mov r15d, r10d
call fcn.140268c10
mov r10d, r15d
mov r11, qword [rsp + 0x40]
jmp 0x1401ea91d
add r13d, dword [rsp + 0x50]
add r13d, ebx
mov rcx, qword [r15 + 0x10]
movsxd rax, dword [rcx + 0x90]
cmp dword [rcx + 0x94], eax
jle 0x1401eacd4
lea edx, [rax + 1]
mov dword [rcx + 0x90], edx
mov rcx, qword [rcx + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], reloc.WLDAP32.dll_Ordinal_79
mov edx, dword [rsp + 0x3c]
mov dword [rcx + rax*8 + 4], edx
mov dword [rcx + rax*8 + 8], r13d
mov dword [rcx + rax*8 + 0xc], ebp
mov qword [rcx + rax*8 + 0x10], 0
jmp 0x1401ea8e0
mov dword [rsp + 0x20], ebp
mov rcx, r13
mov edx, WSASetLastError
mov r8d, r12d
mov r15d, r10d
call fcn.1401cbb10
mov r10d, r15d
mov r11, qword [rsp + 0x40]
jmp 0x1401ea96d
mov r13d, dword [rsi + 0xc]
movsxd rax, dword [rdi + 0x90]
lea r9d, [rax + 4]
cmp dword [rdi + 0x94], eax
jle 0x1401eac4b
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x3c
mov dword [rcx + rax*8 + 4], r8d
mov dword [rcx + rax*8 + 8], r9d
mov dword [rcx + rax*8 + 0xc], 0
mov qword [rcx + rax*8 + 0x10], 0
mov r12, qword [rsp + 0x50]
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401eac6a
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], 0x20
mov dword [rcx + rax*8 + 4], r13d
xorps xmm0, xmm0
movups xmmword [rcx + rax*8 + 8], xmm0
sub r12d, r11d
lea eax, [rbx + r11]
mov r10d, dword [rdi + 0x90]
cmp dword [rdi + 0x94], r10d
jle 0x1401ead18
movsxd rcx, r10d
lea edx, [rcx + 1]
mov dword [rdi + 0x90], edx
mov rdx, qword [rdi + 0x88]
lea rcx, [rcx + rcx*2]
mov dword [rdx + rcx*8], 0xfd28
mov dword [rdx + rcx*8 + 4], r13d
mov dword [rdx + rcx*8 + 8], 0
mov dword [rdx + rcx*8 + 0xc], eax
mov dword [rdx + rcx*8 + 0x10], r12d
movsxd rax, dword [rdi + 0x90]
cmp dword [rdi + 0x94], eax
jle 0x1401eaca9
lea ecx, [rax + 1]
mov dword [rdi + 0x90], ecx
mov rcx, qword [rdi + 0x88]
lea rax, [rax + rax*2]
mov dword [rcx + rax*8], Ordinal_133
mov dword [rcx + rax*8 + 4], r13d
xorps xmm0, xmm0
movups xmmword [rcx + rax*8 + 8], xmm0
jmp 0x1401ea8fa
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x3c
call fcn.1401cbb10
mov r11, qword [rsp + 0x40]
jmp 0x1401eab7c
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x20
mov r8d, r13d
xor r9d, r9d
call fcn.1401cbb10
mov r11, qword [rsp + 0x40]
jmp 0x1401eabbc
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, Ordinal_127
call fcn.1401cbb10
jmp 0x1401ea8be
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, Ordinal_133
mov r8d, r13d
xor r9d, r9d
mov r12d, r10d
call fcn.1401cbb10
mov r10d, r12d
mov r11, qword [rsp + 0x40]
jmp 0x1401ea8fa
mov dword [rsp + 0x20], ebp
mov edx, reloc.WLDAP32.dll_Ordinal_79
mov r8d, dword [rsp + 0x3c]
mov r9d, r13d
call fcn.1401cbb10
mov r8d, dword [rsp + 0x38]
mov r11, qword [rsp + 0x40]
jmp 0x1401ea8e0
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], ebx
mov rcx, rdi
mov r9d, ebp
mov ebx, r10d
call fcn.1401cbcc0
mov r10d, ebx
jmp 0x1401ea9cc
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
mov rcx, rdi
mov edx, Ordinal_41
mov r8d, r13d
xor r9d, r9d
call fcn.1401cbcc0
mov r11, qword [rsp + 0x40]
mov r10d, eax
jmp 0x1401eac0b
inc eax
jmp 0x1401ea883
mov eax, dword [rdi + 0x90]
jmp 0x1401eaa01
lea rcx, [0x14044c9a0]
jmp 0x1401eaa20
mov rax, qword [rsp + 0x50]
lea r8d, [rbx + rax]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, reloc.WS2_32.dll_select
jmp 0x1401eaddb
movsxd rax, dword [rsi + 0x18]
lea r12, [rax + rax*2]
shl r12, 3
add r12, qword [rdi + 0x88]
jmp 0x1401eae17
mov dword [rsp + 0x20], r14d
mov rcx, r15
mov rdx, rsi
mov r8, qword [rsp + 0x60]
mov r9d, ebx
call fcn.140373f00
mov ecx, dword [r15 + 0x38]
lea edx, [rcx + 1]
mov dword [rsp + 0x3c], edx
add ecx, dword [rsi + 8]
mov ebp, eax
mov dword [r15 + 0x38], ecx
mov r14d, dword [rsi + 8]
test r12b, r12b
je 0x1401ead5f
mov r8d, dword [rsi + 0xc]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, pe_nt_image_headers64
xor r9d, r9d
call fcn.140364e30
mov dword [rsp + 0x5c], eax
mov eax, dword [rsi + 8]
mov dword [rsp + 0x20], eax
mov rcx, rdi
mov edx, 0x5a
mov r8d, dword [rsp + 0x3c]
mov r9d, ebx
call fcn.140364e30
mov rax, qword [rdi]
cmp byte [rax + 0x67], 0
je 0x1401ead7a
lea r12, [0x14044c9a0]
mov rax, qword [r15]
cmp byte [rax + 0x67], 0
jne 0x1401ea9d1
mov eax, dword [rsp + 0x4c]
sub eax, r14d
mov dword [r12 + 8], eax
mov r13, qword [r12 + 0x10]
mov rcx, qword [r13 + 0x18]
movzx r8d, word [r13 + 6]
xor edx, edx
call fcn.1402b6a10
mov rcx, rdi
mov edx, 0xffffffff
mov r8, r13
mov r9d, 0xfffffff8
call fcn.1401d79c0
movzx eax, word [r13 + 8]
movzx r9d, word [r13 + 6]
not r9d
add r9d, eax
mov rdx, qword [rsi]
mov rcx, r15
mov r8, qword [rsp + 0x40]
call fcn.1401e08d0
mov qword [r12 + 0x10], rax
movsxd r14, dword [rdi + 0x90]
lea r8d, [r14 + 1]
mov dword [rsp + 0x20], r8d
mov rcx, rdi
mov edx, reloc.WS2_32.dll_ntohl
xor r9d, r9d
call fcn.140364e30
mov eax, dword [r15 + 0x44]
dec eax
mov dword [r15 + 0x44], eax
mov dword [rsi + 0x14], eax
mov r8d, dword [r15 + 0x38]
inc r8d
mov dword [r15 + 0x38], r8d
mov dword [rsi + 0x10], r8d
mov r9d, dword [rsi + 0x14]
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov rcx, rdi
mov edx, 0xa
call fcn.140364e30
mov r8d, dword [rsi + 0xc]
mov dword [rsp + 0x20], r12d
mov rcx, rdi
mov edx, reloc.WLDAP32.dll_Ordinal_147
xor r9d, r9d
call fcn.140364e30
cmp dword [rsp + 0x38], 0
je 0x1401eaf13
mov r9d, dword [rsi + 0x1c]
mov dword [rsp + 0x20], 0
mov rcx, rdi
mov edx, reloc.WS2_32.dll_select
mov r8d, dword [rsp + 0x38]
call fcn.140364e30
mov eax, dword [rdi + 0x90]
mov rcx, qword [rdi]
lea r12, [0x14044c9a0]
cmp byte [rcx + 0x67], 0
mov rcx, r12
jne 0x1401eaf40
movsxd rcx, dword [rsp + 0x5c]
lea rcx, [rcx + rcx*2]
shl rcx, 3
add rcx, qword [rdi + 0x88]
mov dword [rcx + 8], eax
mov eax, dword [rsi + 8]
mov rcx, qword [r15 + 0x10]
mov dword [rsp + 0x20], eax
mov edx, reloc.WLDAP32.dll_Ordinal_79
mov r8d, ebx
mov r9d, dword [rsp + 0x3c]
call fcn.140364e30
mov eax, dword [rdi + 0x90]
mov rcx, qword [rdi]
cmp byte [rcx + 0x67], 0
jne 0x1401eaf7e
lea r12, [r14 + r14*2]
shl r12, 3
add r12, qword [rdi + 0x88]
mov dword [r12 + 8], eax
mov r14d, dword [rsp + 0x4c]
mov r11, qword [rsp + 0x40]
xor r10d, r10d
mov r8d, dword [rsp + 0x38]
jmp 0x1401ea8f1