Function at 0x14000b470
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x10], rdx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rdi, rcx
xor ebp, ebp
mov ecx, dword [r8 + 0x10]
mov esi, ebp
mov ebx, ebp
mov r12, r8
call qword [sym.imp.WS2_32.dll_ntohl]
mov r8d, eax
lea rax, [r8 - 1]
cmp rax, 0xfe
ja 0x14000b55f
imul rdx, qword [rdi + 0x30], 0x1d8
mov rax, qword [rdi + 0x28]
add rdx, rax
cmp rax, rdx
jae 0x14000b55f
nop dword [rax]
mov ecx, dword [rax + 0x38]
test ecx, ecx
jne 0x14000b4e6
test rbx, rbx
mov rcx, rax
cmovne rcx, rbx
mov rbx, rcx
jmp 0x14000b510
cmp ecx, 1
je 0x14000b510
mov ecx, dword [rdi + 0x2ab8]
cmp dword [rax + 0x24], ecx
jne 0x14000b510
movzx ecx, word [rdi + 0x2abc]
cmp word [rax + 0x28], cx
jne 0x14000b50d
mov ecx, dword [r12 + 0x28]
cmp dword [rax + 0x1c], ecx
je 0x14000b55f
inc rsi
add rax, 0x1d8
cmp rax, rdx
jb 0x14000b4d0
test rbx, rbx
je 0x14000b55f
cmp rsi, qword [rdi + 0x2af8]
jae 0x14000b55f
mov r14, qword [rdi + 0x38]
cmp r8, r14
cmovbe r14, r8
mov qword [rsp + 0x88], r14
lea r15, [r14 + r14*4]
shl r15, 4
mov rcx, r15
call qword [fcn.1401082d0]
mov rsi, rax
test rax, rax
jne 0x14000b57a
call qword [0x14015d618]
mov qword [rbx + 0x40], rsi
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x48], r14
mov dword [rbx + 0x38], 2
mov eax, dword [r12 + 0x28]
mov dword [rbx + 0x1c], eax
mov rax, qword [rdi + 0x2ab8]
mov qword [rbx + 0x24], rax
movzx ecx, word [r12 + 4]
mov qword [rsp + 0x80], r13
call qword [sym.imp.WS2_32.dll_ntohs]
mov word [rbx + 0x18], ax
mov ecx, dword [r12 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x50], eax
mov ecx, dword [r12 + 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x54], eax
mov ecx, dword [r12 + 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa4], eax
mov ecx, dword [r12 + 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x9c], eax
mov ecx, dword [r12 + 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0xa0], eax
mov ecx, dword [r12 + 0x2c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rbx + 0x1cc], eax
movzx r14d, byte [r12 + 6]
cmp r14b, 0xff
jne 0x14000b625
movzx r14d, byte [rbx + 0x20]
inc r14b
and r14b, 3
cmp r14b, byte [rbx + 0x20]
jne 0x14000b639
inc r14b
and r14b, 3
mov byte [rbx + 0x20], r14b
movzx esi, byte [r12 + 7]
cmp sil, 0xff
jne 0x14000b64d
movzx esi, byte [rbx + 0x21]
inc sil
and sil, 3
cmp sil, byte [rbx + 0x21]
jne 0x14000b661
inc sil
and sil, 3
mov r8, qword [rbx + 0x40]
mov r13, rbx
mov byte [rbx + 0x21], sil
lea rax, [r8 + r15]
cmp r8, rax
jae 0x14000b6c4
lea rdx, [r8 + 0x48]
nop dword [rax]
lea rax, [rdx - 0x18]
mov word [r8], bp
mov qword [rdx - 0x10], rax
xorps xmm0, xmm0
mov qword [rax], rax
add r8, 0x50
mov dword [rdx - 0x46], ebp
lea rax, [rdx - 8]
mov qword [rdx], rax
mov dword [rdx - 0x22], ebp
lea rdx, [rdx + 0x50]
mov qword [rax], rax
movups xmmword [rdx - 0x92], xmm0
movups xmmword [rdx - 0x82], xmm0
mov rcx, qword [rbx + 0x40]
add rcx, r15
cmp r8, rcx
jb 0x14000b680
mov ecx, dword [r12 + 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, 0x240
mov r15d, 0x1000
cmp eax, ecx
jb 0x14000b6e7
cmp eax, r15d
mov ecx, eax
cmova ecx, r15d
mov eax, dword [rbx + 0x50]
mov r8d, 0x10000
mov dword [r13 + 0xd0], ecx
mov edx, eax
mov ecx, dword [rdi + 0x14]
test ecx, ecx
jne 0x14000b70d
test eax, eax
jne 0x14000b718
mov dword [rbx + 0xd4], r8d
jmp 0x14000b746
test eax, eax
je 0x14000b718
cmp ecx, eax
cmovb eax, ecx
jmp 0x14000b71f
cmp ecx, edx
mov eax, edx
cmova eax, ecx
shr eax, 0x10
shl eax, 0xc
mov dword [r13 + 0xd4], eax
cmp eax, r15d
jae 0x14000b73a
mov dword [r13 + 0xd4], r15d
jmp 0x14000b746
cmp eax, r8d
jbe 0x14000b746
mov dword [r13 + 0xd4], r8d
mov ebp, dword [rdi + 0x10]
test ebp, ebp
jne 0x14000b752
mov ebp, r8d
jmp 0x14000b758
shr ebp, 0x10
shl ebp, 0xc
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
cmp ebp, eax
jbe 0x14000b774
mov ecx, dword [r12 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ebp, eax
cmp ebp, r15d
jb 0x14000b787
mov eax, 0x10000
mov r15d, ebp
cmp ebp, eax
cmova r15d, eax
movzx ecx, word [r13 + 0x1a]
mov word [rsp + 0x20], 0xff83
call qword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [r13 + 0xd0]
mov word [rsp + 0x24], ax
mov byte [rsp + 0x26], r14b
mov byte [rsp + 0x27], sil
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r15d
mov dword [rsp + 0x28], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rsp + 0x88]
mov dword [rsp + 0x2c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x10]
mov dword [rsp + 0x30], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rdi + 0x14]
mov dword [rsp + 0x34], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa4]
mov dword [rsp + 0x38], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0x9c]
mov dword [rsp + 0x3c], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, dword [rbx + 0xa0]
mov dword [rsp + 0x40], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rsp + 0x44], eax
mov ecx, 0x60
mov eax, dword [rbx + 0x1c]
mov dword [rsp + 0x48], eax
call qword [fcn.1401082d0]
test rax, rax
jne 0x14000b84e
call qword [0x14015d618]
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x14000b561
movups xmm0, xmmword [rsp + 0x20]
xor ecx, ecx
mov rdx, rax
movups xmm1, xmmword [rsp + 0x30]
mov dword [rax + 0x20], ecx
movups xmmword [rax + 0x28], xmm0
mov word [rax + 0x24], cx
movups xmm0, xmmword [rsp + 0x40]
mov qword [rax + 0x58], rcx
mov rcx, r13
movups xmmword [rax + 0x38], xmm1
movups xmmword [rax + 0x48], xmm0
call fcn.14000a8b0
mov rax, r13
mov r13, qword [rsp + 0x80]
jmp 0x14000b561