Function at 0x49f250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x10], edx
mov rax, rsp
sub rsp, 0x98
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov rbp, qword [rcx]
mov qword [rax - 8], rsi
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], r12
mov qword [rax - 0x20], r13
mov qword [rax - 0x30], r15
xor r15d, r15d
mov rbx, rcx
mov rcx, qword [rcx + 0x50]
mov dword [rax - 0x54], 1
mov dword [rax - 0x58], r15d
mov rax, qword [rcx]
mov r13d, edx
lea rdx, [rsp + 0x50]
mov r12d, r15d
mov dword [rsp + 0xa0], r15d
call qword [rax + Ordinal_50]
test eax, eax
mov esi, eax
jne 0x49f70e
mov rax, qword [rbx]
mov rdi, qword [rbx + 0x108]
mov rcx, qword [rbx + 0x50]
mov r8d, dword [rax + 8]
mov rdx, rdi
inc r8d
call fcn.0042acb0
test eax, eax
mov esi, eax
jne 0x49f70e
cmp byte [rdi], r12b
je 0x49f2fc
lea r9, [rsp + 0x44]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbp
call qword [rbp + reloc.WS2_32.dll_getservbyport]
test eax, eax
mov esi, eax
jne 0x49f70e
cmp dword [rsp + 0x44], r12d
je 0x49f70e
mov r8, qword [rsp + 0x50]
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x34]
mov edx, r13d
mov rcx, rbx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x70], r14
mov qword [rbx + 0x60], r15
mov edi, r13d
mov dword [rsp + 0x3c], r13d
call fcn.0044e950
test eax, eax
mov esi, eax
jne 0x49f6db
mov r14d, dword [rsp + 0xa8]
nop
nop
mov ebp, dword [rsp + 0x34]
mov r10, qword [rsp + 0x50]
cmp ebp, 0xffffffff
mov qword [rsp + 0x58], rbp
jne 0x49f38c
mov eax, dword [rbx + 0xbc]
mov ecx, dword [rbx + 0xb8]
add eax, 8
movsxd r8, eax
mov rax, r10
sub rax, rcx
cqo
idiv r8
mov rbp, rax
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x34], eax
test ebp, ebp
jne 0x49f3ca
test r13d, r13d
jne 0x49f3ca
mov ecx, dword [rbx + 0xb8]
mov rdx, qword [rbx + 0x60]
add rcx, qword [rbx + 0x68]
cmp rcx, rdx
jne 0x49f3ca
mov eax, dword [rbx + 0xbc]
add eax, 8
movsxd rcx, eax
mov rax, r10
sub rax, rdx
cqo
idiv rcx
mov ebp, eax
mov dword [rsp + 0x34], eax
mov qword [rsp + 0x58], rbp
mov eax, dword [rbx + 0xb8]
cmp qword [rbx + 0x60], rax
jne 0x49f3fa
mov edi, dword [rsp + 0x40]
mov rcx, rbx
mov edx, edi
call fcn.0042b220
test eax, eax
mov esi, eax
jne 0x49f701
mov r10, qword [rsp + 0x50]
mov dword [rbx + 0x1c], edi
mov edi, dword [rsp + 0x3c]
test ebp, ebp
mov r12d, r15d
mov dword [rsp + 0x48], r15d
je 0x49f6a8
nop
nop
test edi, edi
je 0x49f443
mov rax, qword [rbx + 0x70]
test rax, rax
je 0x49f430
nop
mov dword [rax + 0x18], 1
mov rax, qword [rax + 0x40]
test rax, rax
jne 0x49f420
mov rcx, qword [rbx + 0x110]
xor edx, edx
call fcn.00429470
mov dword [rsp + 0x3c], r15d
mov rbp, qword [rbx + 0x50]
mov r9, qword [rbx + 0x60]
mov r13, qword [rbx + 0x108]
mov rax, qword [rbp]
lea rdx, [rsp + 0x38]
mov r8d, 4
mov rcx, rbp
call qword [rax + reloc.WS2_32.dll_recv]
test eax, eax
mov esi, eax
jne 0x49f660
movzx eax, byte [rsp + 0x3a]
mov r9, qword [rbx + 0x60]
movzx edi, byte [rsp + 0x39]
mov r8d, dword [rbx + 0xbc]
shl edi, 8
add r9, 4
or edi, eax
movzx eax, byte [rsp + 0x38]
mov rdx, r13
shl eax, 0x18
shl edi, 8
mov rcx, rbp
or edi, eax
movzx eax, byte [rsp + 0x3b]
or edi, eax
mov rax, qword [rbp]
call qword [rax + reloc.WS2_32.dll_recv]
test eax, eax
mov esi, eax
jne 0x49f660
mov eax, dword [rbx + 0xbc]
add eax, 8
cdqe
add qword [rbx + 0x60], rax
test edi, edi
mov rsi, qword [rbx + 0x60]
je 0x49f688
mov eax, dword [0x0072d218]
cdq
idiv dword [rbx + 0xbc]
inc eax
cmp edi, eax
je 0x49f688
cmp edi, dword [rbx + 0x1c]
ja 0x49f664
mov edx, edi
xor ecx, ecx
call fcn.00428880
test eax, eax
jne 0x49f664
mov rax, qword [rbp]
lea r9, [rsi - 4]
lea rdx, [rsp + 0x30]
mov r8d, 4
mov rcx, rbp
call qword [rax + reloc.WS2_32.dll_recv]
test eax, eax
mov esi, eax
jne 0x49f54e
movzx eax, byte [rsp + 0x32]
movzx r14d, byte [rsp + 0x31]
shl r14d, 8
or r14d, eax
movzx eax, byte [rsp + 0x30]
shl eax, 0x18
shl r14d, 8
or r14d, eax
movzx eax, byte [rsp + 0x33]
or r14d, eax
test esi, esi
jne 0x49f660
mov rdx, r13
mov rcx, rbx
call fcn.0042b190
cmp eax, r14d
jne 0x49f688
cmp edi, 1
jne 0x49f584
movzx eax, byte [r13 + 0x14]
cmp word [rbx + 0xb2], ax
je 0x49f584
mov word [rbx + 0xb2], ax
cmp qword [rbx + 0x118], r15
je 0x49f592
mov rbp, r15
jmp 0x49f59f
mov edx, edi
mov rcx, rbx
call fcn.0042b9a0
mov rbp, rax
cmp byte [rbx + 0xb], r15b
jne 0x49f5b4
mov rcx, qword [rbx + 0x68]
cmp qword [rbx + 0x60], rcx
jle 0x49f5b4
mov ecx, r15d
jmp 0x49f5b9
mov ecx, 1
mov r10, qword [rbx + 0x48]
cmp qword [r10], r15
je 0x49f60a
movzx eax, byte [rbx + 0x14]
cmp al, 4
jae 0x49f5ce
test al, al
jne 0x49f60a
test ecx, ecx
je 0x49f60a
movsxd r8, dword [rbx + 0xbc]
mov rax, qword [r10]
lea r9d, [rdi - 1]
imul r9, r8
mov rdx, r13
mov rcx, r10
call qword [rax + Ordinal_26]
cmp edi, dword [rbx + 0x24]
mov esi, eax
jbe 0x49f5f7
mov dword [rbx + 0x24], edi
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x49f60a
mov r8, r13
mov edx, edi
call fcn.0049dc70
test rbp, rbp
je 0x49f660
mov r12, qword [rbp + 8]
movsxd r8, dword [rbx + 0xbc]
mov rdx, r13
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov rcx, rbp
call qword [rbx + 0x100]
mov rcx, rbp
call fcn.00429190
cmp edi, 1
jne 0x49f653
mov rax, qword [r12 + 0x18]
mov qword [rbx + 0x84], rax
mov rax, qword [r12 + 0x20]
mov qword [rbx + 0x8c], rax
mov rcx, rbp
call fcn.00428f80
mov r12d, dword [rsp + 0x48]
test esi, esi
jne 0x49f683
inc dword [rsp + 0xa0]
inc r12d
cmp r12d, dword [rsp + 0x58]
mov dword [rsp + 0x48], r12d
jae 0x49f69b
mov edi, dword [rsp + 0x3c]
jmp 0x49f410
cmp esi, 0x65
jne 0x49f6e5
mov r10, qword [rsp + 0x50]
mov r13d, dword [rsp + 0xa8]
mov qword [rbx + 0x60], r10
jmp 0x49f6a8
mov r10, qword [rsp + 0x50]
mov r13d, dword [rsp + 0xa8]
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x34]
mov r8, r10
mov edx, r13d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0044e950
mov edi, dword [rsp + 0x3c]
test eax, eax
mov esi, eax
je 0x49f350
mov r12d, dword [rsp + 0xa0]
cmp esi, 0x65
jne 0x49f709
mov esi, r15d
jmp 0x49f709
mov r12d, dword [rsp + 0xa0]
mov r13d, dword [rsp + 0xa8]
cmp esi, 0x20a
cmove esi, r15d
jmp 0x49f709
mov r12d, dword [rsp + 0xa0]
mov r14, qword [rsp + 0x70]
test esi, esi
movzx eax, byte [rbx + 0x10]
mov rbp, qword [rsp + 0xb8]
mov byte [rbx + 0x16], al
jne 0x49f7cd
mov rax, qword [rbx]
mov rdi, qword [rbx + 0x108]
mov rcx, qword [rbx + 0x50]
mov r8d, dword [rax + 8]
mov rdx, rdi
inc r8d
call fcn.0042acb0
test eax, eax
mov esi, eax
jne 0x49f7cd
movzx eax, byte [rbx + 0x14]
cmp al, 4
jae 0x49f758
test al, al
jne 0x49f797
mov rcx, qword [rbx + 0x48]
mov esi, r15d
cmp qword [rcx], rsi
je 0x49f781
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x15]
call qword [rax + 0x50]
cmp eax, 0xc
mov esi, eax
jne 0x49f77d
mov esi, r15d
jmp 0x49f781
test eax, eax
jne 0x49f797
cmp byte [rbx + 0xb], r15b
jne 0x49f797
mov rcx, qword [rbx + 0x48]
movzx edx, byte [rbx + 0xf]
mov rax, qword [rcx]
call qword [rax + Ordinal_41]
mov esi, eax
test esi, esi
jne 0x49f7cd
cmp byte [rdi], r15b
mov rcx, rbx
setne r15b
xor r8d, r8d
mov edx, r15d
call fcn.0043e5f0
test eax, eax
mov esi, eax
jne 0x49f7cd
cmp byte [rdi], al
je 0x49f7cd
cmp dword [rsp + 0x44], eax
je 0x49f7cd
mov rdx, rdi
mov rcx, rbx
call fcn.0043e840
mov esi, eax
mov r15, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x88]
test r13d, r13d
mov r13, qword [rsp + 0x78]
je 0x49f804
test r12d, r12d
je 0x49f804
mov r9, qword [rbx + 0xd8]
lea rdx, str.recovered__d_pages_from__s
mov r8d, r12d
mov ecx, 0x21b
call fcn.00461f70
cmp byte [rbx + 0x10], 0
mov r12, qword [rsp + 0x80]
jne 0x49f84c
mov rcx, qword [rbx + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x60]
bt eax, 0xc
jb 0x49f84c
mov rcx, qword [rbx + 0x48]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x49f845
call rdx
cmp eax, 0x20
jl 0x49f84c
mov ecx, 0x10000
cmp eax, ecx
cmovg eax, ecx
jmp 0x49f851
mov eax, 0x1000
jmp 0x49f851
mov eax, 0x200
mov dword [rbx + 0xb8], eax
mov rbx, qword [rsp + 0xb0]
mov eax, esi
mov rsi, qword [rsp + 0x90]
add rsp, 0x98
ret