Function at 0x180084b30
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0x130]
xor eax, eax
mov qword [rbp - 0xa8], rax
mov rsi, rcx
mov rdi, qword [rsi + 0x10]
mov rbx, rdi
cmp word [rbx], 0x5a4d
jne 0x180084b7a
mov eax, dword [rbx + 0x3c]
cdqe
xor r14d, r14d
cmp word [rdi + rax + 0x18], 0x20b
sete r14b
jmp 0x180084b7d
xor r14d, r14d
call fcn.18000108c
mov r15, rax
mov qword [rbp - 0xb0], r15
mov byte [r15], r14b
xor r14d, r14d
xor r12d, r12d
movzx ecx, byte [r15]
test ecx, ecx
je 0x180084ba8
mov eax, dword [rbx + 0x3c]
movsxd r12, eax
add r12, rdi
jmp 0x180084bb1
mov eax, dword [rbx + 0x3c]
movsxd r14, eax
add r14, rdi
test ecx, ecx
jne 0x180084bba
mov ecx, dword [r14]
jmp 0x180084bbe
mov ecx, dword [r12]
cmp ecx, 0x4550
je 0x180084bda
lea rcx, [0x1803fe240]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
call fcn.1801fea00
cmp eax, 8
je 0x180084beb
mov edi, 0x40
jmp 0x180084bf0
mov edi, 0x60
movsxd rcx, edi
call fcn.18013f5f0
mov rbx, rax
test edi, edi
jl 0x180085094
mov rcx, rbx
mov edx, edi
mov qword [rbp - 0x98], rdx
test rdx, rdx
je 0x180084c39
cmp rdx, 0x300
ja 0x180084c2d
xor edx, edx
mov r8, qword [rbp - 0x98]
call fcn.180065b50
jmp 0x180084c39
mov rdx, qword [rbp - 0x98]
call fcn.1800b0e30
call fcn.1801fea00
cmp eax, 8
je 0x180084c4a
mov ecx, reloc.WS2_32.dll_recv
jmp 0x180084c4f
mov ecx, 0x18
movsxd rcx, ecx
call fcn.18013f5f0
mov qword [rbp - 0x40], rax
xor edi, edi
mov qword [rbp + 0x10], rsi
mov rcx, qword [rsi + 8]
call fcn.18013f1a0
mov r13, rax
lea rcx, [0x1803e3008]
call fcn.18013f1a0
mov qword [rbp - 0xa0], rax
xor ecx, ecx
call fcn.18013f1a0
xor ecx, ecx
mov dword [rsp + 0x20], ecx
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x48], rax
mov rcx, r13
mov rdx, qword [rbp - 0xa0]
xor r8d, r8d
xor r9d, r9d
call fcn.180085130
test eax, eax
jne 0x180084cd9
lea rcx, [0x1803f61b0]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
mov rcx, rbx
test rcx, 0xffffffffffff0000
je 0x180084d13
mov rcx, rbx
mov qword [rbp - 0xb8], rcx
lea rcx, [rbp - 0xe0]
call fcn.180006be0
mov rcx, qword [rbp - 0xb8]
call sub.KERNEL32.dll_LocalFree
lea rcx, [rbp - 0xe0]
call fcn.180006c30
mov r15, qword [rbp - 0xb0]
cmp byte [r15], 0
jne 0x180084d29
mov eax, dword [r14 + 0x34]
mov r13d, eax
jmp 0x180084d2e
mov r13, qword [r12 + 0x30]
mov rax, qword [rbp - 0x40]
mov rdx, qword [rax]
mov qword [rbp - 0x48], rdx
mov qword [rbp - 0x90], rax
call fcn.1801fea00
cmp eax, 8
je 0x180084d58
mov rcx, qword [rbp - 0x90]
mov edx, 4
jmp 0x180084d64
mov rcx, qword [rbp - 0x90]
mov edx, 8
movsxd rdx, edx
mov rax, qword [rcx + rdx]
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp - 0x48]
mov rdx, r13
call fcn.180085210
cmp qword [rbp - 0x48], 0
je 0x180084d89
cmp qword [rbp - 0x50], 0
jne 0x180084d9d
lea rcx, [0x1803f6220]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
movzx edx, byte [r15]
test edx, edx
jne 0x180084dab
mov r8d, dword [r14 + 0x50]
jmp 0x180084db0
mov r8d, dword [r12 + 0x50]
test edx, edx
jne 0x180084dba
mov r10d, dword [r14 + 0x54]
jmp 0x180084dbf
mov r10d, dword [r12 + 0x54]
mov dword [rbp - 0x54], r10d
test edx, edx
jne 0x180084dce
movzx r9d, word [r14 + 6]
jmp 0x180084dd4
movzx r9d, word [r12 + 6]
movzx r11d, r9w
mov dword [rbp - 0x58], r11d
test edx, edx
jne 0x180084de6
mov r9d, dword [r14 + 0x28]
jmp 0x180084deb
mov r9d, dword [r12 + 0x28]
mov dword [rbp - 0x5c], r9d
mov dword [rsp + 0x20], 0x40
mov rcx, qword [rbp - 0x48]
mov rdx, r13
mov r9d, 0x3000
call fcn.180085280
mov r13, rax
xor r8d, r8d
mov dword [rsp + 0x20], r8d
mov rsi, qword [rbp + 0x10]
mov r8, qword [rsi + 0x10]
mov rcx, qword [rbp - 0x48]
mov rdx, r13
mov r9d, dword [rbp - 0x54]
call fcn.180085500
cmp byte [r15], 0
jne 0x180084e3b
lea rax, [r14 + 0xf8]
jmp 0x180084e43
lea rax, [r12 + 0x108]
xor r10d, r10d
mov dword [rbp - 0x84], r10d
cmp dword [rbp - 0x58], 0
jle 0x180084ea0
xor r8d, r8d
mov dword [rsp + 0x20], r8d
mov r8, qword [rsi + 0x10]
mov edx, dword [rax + 0x14]
add r8, rdx
mov edx, dword [rax + 0xc]
add rdx, r13
mov qword [rbp - 0x68], rax
mov r9d, dword [rax + 0x10]
mov rcx, qword [rbp - 0x48]
call fcn.180085500
mov rax, qword [rbp - 0x68]
add rax, 0x28
mov r10d, dword [rbp - 0x84]
inc r10d
mov ecx, dword [rbp - 0x58]
cmp r10d, ecx
mov dword [rbp - 0x84], r10d
mov dword [rbp - 0x58], ecx
jl 0x180084e53
cmp byte [r15], 0
jne 0x180084ead
mov ecx, 0x2cc
jmp 0x180084eb2
mov ecx, 0x4d0
movsxd rcx, ecx
call fcn.18013f5f0
mov qword [rbp - 0x70], rax
cmp byte [r15], 0
je 0x180084ecd
mov dword [rax + 0x30], 0x10001b
jmp 0x180084ed3
mov dword [rax], 0x10002
cmp byte [r15], 0
jne 0x180084eff
mov rcx, qword [rbp - 0x50]
mov rdx, rax
call fcn.180085320
test eax, eax
jne 0x180084f23
lea rcx, [0x1803f6068]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
jmp 0x180084f23
mov rcx, qword [rbp - 0x50]
mov rdx, rax
call fcn.180085480
test eax, eax
jne 0x180084f23
lea rcx, [0x1803f6118]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
mov rax, qword [rbp - 0x70]
mov edx, dword [rax + 0xa4]
mov dword [rbp - 0x74], edx
mov r8, qword [rax + 0x88]
mov qword [rbp - 0x80], r8
mov rcx, r13
call fcn.1800c3240
mov rcx, qword [rbp - 0x48]
cmp byte [r15], 0
jne 0x180084f58
mov edx, dword [rbp - 0x74]
add edx, 8
movsxd rdx, edx
jmp 0x180084f60
mov rdx, qword [rbp - 0x80]
add rdx, 0x10
mov r9d, dword [rax + 8]
xor r8d, r8d
mov qword [rbp - 0xa8], r8
mov qword [rbp - 0xa8], rax
mov r8, qword [rbp - 0xa8]
cmp dword [r8 + 8], 0
jne 0x180084f88
xor r8d, r8d
jmp 0x180084fa1
mov r8, qword [rbp - 0xa8]
cmp dword [r8 + 8], 0
jbe 0x180084fed
mov r8, qword [rbp - 0xa8]
add r8, 0x10
xor eax, eax
mov dword [rsp + 0x20], eax
call fcn.180085500
xor ecx, ecx
test eax, eax
sete cl
xor eax, eax
mov qword [rbp - 0xa8], rax
test ecx, ecx
jne 0x180084fd4
lea rcx, [0x1803f6388]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
cmp byte [r15], 0
je 0x180084ff2
mov ecx, dword [rbp - 0x5c]
add rcx, r13
mov r13, qword [rbp - 0x70]
mov qword [r13 + 0x80], rcx
jmp 0x180085003
call fcn.180162e10
mov ecx, dword [rbp - 0x5c]
add rcx, r13
mov r13, qword [rbp - 0x70]
mov qword [r13 + 0xb0], rcx
cmp byte [r15], 0
jne 0x18008502f
mov rcx, qword [rbp - 0x50]
mov rdx, r13
call fcn.180085320
test eax, eax
jne 0x180085053
lea rcx, [0x1803f6318]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
jmp 0x180085053
mov rcx, qword [rbp - 0x50]
mov rdx, r13
call fcn.1800853a0
test eax, eax
jne 0x180085053
lea rcx, [0x1803f6318]
call fcn.180087e70
mov rcx, rax
call fcn.1800804c0
mov rcx, qword [rbp - 0x50]
call fcn.180085420
inc edi
cmp edi, 5
jl 0x180084c5d
jmp 0x18008506a
mov rax, qword [rbp - 0x40]
test rax, 0xffffffffffff0000
je 0x18008507e
mov rcx, rax
call fcn.180164250
xor eax, eax
add rsp, 0xf8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.1800e9010
int3