Function at 0x140011720
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x10], rdx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rdi, rcx
xor ebp, ebp
mov ecx, dword [r8 + 0x10]
mov esi, ebp
mov ebx, ebp
mov r12, r8
call qword [sym.imp.WS2_32.dll_ntohl]
mov r8d, eax
lea rax, [r8 - 1]
cmp rax, 0xfe
ja 0x14001180f
imul rdx, qword [rdi + 0x30], 0x1c8
mov rax, qword [rdi + 0x28]
add rdx, rax
cmp rax, rdx
jae 0x14001180f
nop dword [rax]
mov ecx, dword [rax + 0x38]
test ecx, ecx
jne 0x140011796
test rbx, rbx
mov rcx, rax
cmovne rcx, rbx
mov rbx, rcx
jmp 0x1400117c0
cmp ecx, 1
je 0x1400117c0
mov ecx, dword [rdi + 0x2ab8]
cmp dword [rax + 0x24], ecx
jne 0x1400117c0
movzx ecx, word [rdi + 0x2abc]
cmp word [rax + 0x28], cx
jne 0x1400117bd
mov ecx, dword [r12 + 0x28]
cmp dword [rax + 0x1c], ecx
je 0x14001180f
inc rsi
add rax, 0x1c8
cmp rax, rdx
jb 0x140011780
test rbx, rbx
je 0x14001180f
cmp rsi, qword [rdi + 0x2af8]
jae 0x14001180f
mov r14, qword [rdi + 0x38]
cmp r8, r14
cmovbe r14, r8
mov qword [rsp + 0x88], r14
lea r15, [r14 + r14*4]
shl r15, 4
mov rcx, r15
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x14001182a
call qword [case.0x140016b54.1]
mov qword [rbx + 0x40], rsi
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x48], r14
mov dword [rbx + 0x38], 2
mov eax, dword [r12 + 0x28]
mov dword [rbx + 0x1c], eax
mov rax, qword [rdi + 0x2ab8]
mov qword [rbx + 0x24], rax
movzx ecx, word [r12 + 4]
mov qword [rsp + 0x80], r13
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rbx + 0x18], ax
mov ecx, dword [r12 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x50], eax
mov ecx, dword [r12 + 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x54], eax
mov ecx, dword [r12 + 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa4], eax
mov ecx, dword [r12 + 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x9c], eax
mov ecx, dword [r12 + 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa0], eax
mov ecx, dword [r12 + 0x2c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x1b8], eax
movzx r14d, byte [r12 + 6]
cmp r14b, 0xff
jne 0x1400118d5
movzx r14d, byte [rbx + 0x20]
inc r14b
and r14b, 3
cmp r14b, byte [rbx + 0x20]
jne 0x1400118e9
inc r14b
and r14b, 3
mov byte [rbx + 0x20], r14b
movzx esi, byte [r12 + 7]
cmp sil, 0xff
jne 0x1400118fd
movzx esi, byte [rbx + 0x21]
inc sil
and sil, 3
cmp sil, byte [rbx + 0x21]
jne 0x140011911
inc sil
and sil, 3
mov r8, qword [rbx + 0x40]
mov r13, rbx
mov byte [rbx + 0x21], sil
lea rax, [r8 + r15]
cmp r8, rax
jae 0x140011974
lea rdx, [r8 + 0x48]
nop dword [rax]
lea rax, [rdx - 0x18]
mov word [r8], bp
mov qword [rdx - 0x10], rax
xorps xmm0, xmm0
mov qword [rax], rax
add r8, 0x50
mov dword [rdx - 0x46], ebp
lea rax, [rdx - 8]
mov qword [rdx], rax
mov dword [rdx - 0x22], ebp
lea rdx, [rdx + 0x50]
mov qword [rax], rax
movups xmmword [rdx - 0x92], xmm0
movups xmmword [rdx - 0x82], xmm0
mov rcx, qword [rbx + 0x40]
add rcx, r15
cmp r8, rcx
jb 0x140011930
mov ecx, dword [r12 + 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, 0x240
mov r15d, 0x1000
cmp eax, ecx
jb 0x140011997
cmp eax, r15d
mov ecx, eax
cmova ecx, r15d
mov eax, dword [rbx + 0x50]
mov r8d, 0x10000
mov dword [r13 + 0xd0], ecx
mov edx, eax
mov ecx, dword [rdi + 0x14]
test ecx, ecx
jne 0x1400119bd
test eax, eax
jne 0x1400119c8
mov dword [rbx + 0xd4], r8d
jmp 0x1400119f6
test eax, eax
je 0x1400119c8
cmp ecx, eax
cmovb eax, ecx
jmp 0x1400119cf
cmp ecx, edx
mov eax, edx
cmova eax, ecx
shr eax, 0x10
shl eax, 0xc
mov dword [r13 + 0xd4], eax
cmp eax, r15d
jae 0x1400119ea
mov dword [r13 + 0xd4], r15d
jmp 0x1400119f6
cmp eax, r8d
jbe 0x1400119f6
mov dword [r13 + 0xd4], r8d
mov ebp, dword [rdi + 0x10]
test ebp, ebp
jne 0x140011a02
mov ebp, r8d
jmp 0x140011a08
shr ebp, 0x10
shl ebp, 0xc
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
cmp ebp, eax
jbe 0x140011a24
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ebp, eax
cmp ebp, r15d
jb 0x140011a37
mov eax, 0x10000
mov r15d, ebp
cmp ebp, eax
cmova r15d, eax
movzx ecx, word [r13 + 0x1a]
mov word [rsp + 0x20], 0xff83
call qword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [r13 + 0xd0]
mov word [rsp + 0x24], ax
mov byte [rsp + 0x26], r14b
mov byte [rsp + 0x27], sil
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r15d
mov dword [rsp + 0x28], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rsp + 0x88]
mov dword [rsp + 0x2c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x10]
mov dword [rsp + 0x30], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x14]
mov dword [rsp + 0x34], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa4]
mov dword [rsp + 0x38], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0x9c]
mov dword [rsp + 0x3c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa0]
mov dword [rsp + 0x40], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x44], eax
mov ecx, 0x60
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x48], eax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
jne 0x140011afe
call qword [case.0x140016b54.1]
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x140011811
movups xmm0, xmmword [rsp + 0x20]
xor ecx, ecx
mov rdx, rax
movups xmm1, xmmword [rsp + 0x30]
mov dword [rax + 0x20], ecx
movups xmmword [rax + 0x28], xmm0
mov word [rax + 0x24], cx
movups xmm0, xmmword [rsp + 0x40]
mov qword [rax + 0x58], rcx
mov rcx, r13
movups xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm0
call fcn.140010b30
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x140011811