Function at 0x140185f80
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x1402aea28]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r14, rcx
add rcx, 4
xor edx, edx
mov r8d, 0x100
call fcn.1401c4950
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov r8b, 1
lea rdx, [0x1402be0d4]
lea rcx, [rbp - 0x80]
call fcn.140185d80
nop
mov ecx, dword [0x1402befc0]
mov rax, qword gs:[0x58]
mov r8d, shutdown
mov rdx, qword [rax + rcx*8]
xor r12d, r12d
mov eax, dword [r8 + rdx]
cmp dword [0x1402be0d0], eax
jg 0x140186740
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
mov rdi, qword [0x1402be0c0]
lea rsi, [0x1402be0b0]
cmp qword [0x1402be0c8], 0x10
cmovae rsi, qword [0x1402be0b0]
movabs rax, 0x7fffffffffffffff
cmp rdi, 0x10
jae 0x14018605c
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x18], shutdown
jmp 0x1401860cc
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401860a6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14018678f
mov rcx, rax
call fcn.1401c1e9c
mov rcx, rax
test rax, rax
je 0x140186795
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401860b5
test rcx, rcx
je 0x1401860b2
call fcn.1401c1e9c
jmp 0x1401860b5
mov rax, r12
mov qword [rbp - 0x30], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.1401c42a0
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x80]
call fcn.140185dd0
nop
mov rdi, 0xffffffffffffffff
cmp qword [rbp - 0x20], 0
je 0x140186322
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
mov qword [rsp + 0x70], rax
lea r8, [0x140185f10]
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140185df0
mov r8, rbx
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1401832a0
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm0
movq rbx, xmm0
mov qword [rsp + 0x50], rbx
test rbx, rbx
jne 0x1401863a2
lea ecx, [rdi + 0x31]
call fcn.1401c1e9c
mov rsi, rax
mov qword [rbp], 0x20
mov qword [rbp + 8], 0x2f
movups xmm0, xmmword [str.Unable_to_open_message_catalog:]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1402552e8]
movups xmmword [rax + 0x10], xmm1
mov byte [rax + 0x20], bl
mov qword [rbp - 0x10], rax
mov r13, qword [rbp - 0x20]
movabs rax, 0x7fffffffffffffdf
cmp r13, rax
ja 0x14018679b
lea r12, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae r12, qword [rbp - 0x30]
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
lea r15, [r13 + 0x20]
mov ebx, 0xf
lea rdi, [rbp - 0x70]
cmp r15, rbx
jbe 0x14018623f
mov rbx, r15
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140186202
mov rbx, rax
movabs rax, 0x8000000000000027
mov rcx, rax
call fcn.1401c1e9c
test rax, rax
je 0x1401867a1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14018623b
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14018622a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14018673a
jmp 0x1401861e3
test rcx, rcx
je 0x140186239
call fcn.1401c1e9c
mov rdi, rax
jmp 0x14018623b
xor edi, edi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
lea rcx, [rdi + 0x20]
mov r8, r13
mov rdx, r12
call fcn.1401c42a0
mov byte [rdi + r15], 0
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rax, qword [rbp - 0x70]
lea rbx, vtable.std::exception.0
mov qword [rbp - 0x50], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x58], 1
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x50]
call fcn.1401c32ec
nop
lea rax, vtable.std::runtime_error.0
mov qword [rbp - 0x50], rax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1401862e9
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401862e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401867a7
call fcn.1401c1ed8
nop
xor r12d, r12d
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], shutdown
mov byte [rbp - 0x70], r12b
lea rcx, [rbp - 0x50]
call fcn.1401858b0
nop
mov qword [rbp - 0x50], rbx
lea rcx, [rbp - 0x48]
call fcn.1401c337c
nop
lea edx, [r12 + 0x30]
mov rcx, rsi
call fcn.1401c1ed8
nop
mov bl, 1
movzx ecx, bl
call fcn.140185950
test rax, rax
je 0x140186343
movzx ecx, byte [rax]
test cl, cl
je 0x140186343
mov byte [rcx + r14 + 4], bl
add rax, 1
jne 0x140186331
inc bl
cmp bl, 0x3c
jb 0x140186324
mov bl, 0x41
nop dword [rax]
movzx edi, bl
cmp byte [rdi + r14 + 4], 0
jne 0x1401865d9
mov byte [rsp + 0x30], bl
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rsp + 0x30]
mov edx, r9d
mov ecx, dword [r14]
call qword [sym.imp.KERNEL32.dll_GetStringTypeExA]
test eax, eax
je 0x1401865a3
test byte [rsp + 0x40], 2
je 0x1401865a3
mov byte [rdi + r14 + 4], reloc.WS2_32.dll_shutdown
jmp 0x1401865d9
mov r15b, 1
movzx ecx, r15b
call fcn.140185950
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], shutdown
mov byte [rbp - 0x70], 0
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1401863c1
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14001bb80
nop
movzx edx, r15b
mov r9d, 0x100
lea r8, [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_LoadStringA]
mov r13, qword [rbp - 0x70]
test eax, eax
jne 0x1401864ac
lea r12, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae r12, r13
mov rsi, qword [rbp - 0x60]
cmp rsi, 0x10
jae 0x14018642d
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov edi, 0xf
mov qword [rbp - 0x38], rdi
jmp 0x1401864e2
mov rdi, rsi
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14018647e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401867b3
mov rcx, rax
call fcn.1401c1e9c
test rax, rax
je 0x1401867ad
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14018648f
test rcx, rcx
je 0x14018648d
call fcn.1401c1e9c
mov rbx, rax
jmp 0x14018648f
xor ebx, ebx
mov qword [rbp - 0x50], rbx
lea r8, [rsi + 1]
mov rdx, r12
mov rcx, rbx
call fcn.1401c42a0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rdi
jmp 0x1401864e6
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], shutdown
mov byte [rbp - 0x50], 0
lea rax, [rbp + 0x10]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1401864c3
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x50]
call fcn.14001bb80
mov rdi, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x50]
mov r12, qword [rbp - 0x58]
cmp r12, 0x10
jb 0x140186523
lea rdx, [r12 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14018651a
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401867b9
mov rcx, r13
call fcn.1401c1ed8
nop
xor r12d, r12d
mov ecx, r12d
test rsi, rsi
je 0x14018654d
nop
lea rax, [rbp - 0x50]
cmp rdi, 0x10
cmovae rax, rbx
movzx eax, byte [rax + rcx]
mov byte [rax + r14 + 4], r15b
inc rcx
cmp rcx, rsi
jb 0x140186530
cmp rdi, 0x10
jb 0x140186585
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14018657c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401867bf
mov rcx, rbx
call fcn.1401c1ed8
nop
inc r15b
cmp r15b, 0x3c
jae 0x14018634a
mov rdi, 0xffffffffffffffff
mov rbx, qword [rsp + 0x50]
jmp 0x1401863a5
mov byte [rsp + 0x38], bl
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rsp + 0x38]
mov edx, r9d
mov ecx, dword [r14]
call qword [sym.imp.KERNEL32.dll_GetStringTypeExA]
test eax, eax
je 0x1401865d9
test byte [rsp + 0x44], 1
je 0x1401865d9
mov byte [rdi + r14 + 4], reloc.WS2_32.dll_socket
movzx eax, bl
inc bl
cmp al, 0xff
jne 0x140186350
mov eax, r12d
lea rcx, [rbp + 0x110]
mov byte [rcx], al
inc eax
lea rcx, [rcx + 1]
cmp eax, 0x100
jl 0x1401865f0
lea rax, [r14 + 0x104]
mov dword [rsp + 0x28], 0x100
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [rbp + 0x110]
mov edx, r9d
mov ecx, dword [r14]
call qword [sym.imp.KERNEL32.dll_LCMapStringA]
cmp eax, 0x100
jge 0x140186650
movsxd rcx, eax
lea r8, [r14 + 0x104]
add r8, rcx
mov byte [r8], al
inc eax
lea r8, [r8 + 1]
cmp eax, 0x100
jl 0x140186640
lea rax, [r14 + 0x204]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [rbp + 0x110]
mov edx, 1
mov ecx, dword [r14]
call qword [sym.imp.KERNEL32.dll_GetStringTypeExA]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1401866b4
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401866ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140186734
call fcn.1401c1ed8
nop
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], shutdown
mov byte [rbp - 0x30], 0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140186704
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140186704
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x140186704
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1401c28c0
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401c85ec
nop
call fcn.14001aed0
nop
lea rcx, [0x1402be0d0]
call fcn.1401c22b8
cmp dword [0x1402be0d0], 0xffffffff
jne 0x140186015
mov qword [0x1402be0c0], r12
mov qword [0x1402be0c8], 0xf
mov byte [0x1402be0b0], r12b
lea rcx, [0x1402085a0]
call fcn.1401c2118
lea rcx, [0x1402be0d0]
call fcn.1401c2258
jmp 0x140186015
call fcn.14001aed0
int3
call fcn.1401c85ec
nop
call fcn.14001b380
int3
call fcn.1401c85ec
nop
call fcn.1401c85ec
nop
call fcn.1401c85ec
int3
call fcn.14001aed0
nop
call fcn.1401c85ec
nop
call fcn.1401c85ec
int3