Function at 0x1400339d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x1d8
mov rcx, qword [rsp + 0x1f0]
call fcn.140034d10
xor eax, eax
cmp eax, 1
je 0x1400345a4
mov rcx, qword [rsp + 0x1f0]
call fcn.140034c30
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0xf5
ja case.0x140033a35.128
movsxd rax, dword [rsp + 0x28]
lea rcx, sym.MZ_bpLIv__bU_ZaeyJ6QCZl_w_Je_GjS_2V
mov eax, dword [rcx + rax*4 + 0x345b0]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_missing_closing_quote
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov eax, 4
jmp 0x1400345a4
mov rcx, qword [rsp + 0x1f0]
call fcn.140034c30
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x2c]
sub eax, 0x22
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0x53
ja case.0x140033aa3.35
movsxd rax, dword [rsp + 0x2c]
lea rcx, sym.MZ_bpLIv__bU_ZaeyJ6QCZl_w_Je_GjS_2V
movzx eax, byte [rcx + rax + 0x349b0]
mov eax, dword [rcx + rax*4 + 0x34988]
add rax, rcx
jmp rax
mov edx, Ordinal_35
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, 0x5c
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, Ordinal_50
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, 8
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, ntohl
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, 0xa
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov edx, 9
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov rcx, qword [rsp + 0x1f0]
call fcn.140034e80
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x24], 0xffffffff
jne 0x140033b9a
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_u_must_be_followed_by_4_hex_digits
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
cmp dword [rsp + 0x24], 0xd800
jl 0x140033c81
cmp dword [rsp + 0x24], 0xdbff
jg 0x140033c81
mov rcx, qword [rsp + 0x1f0]
call fcn.140034c30
cmp eax, 0x5c
jne 0x140033c62
mov rcx, qword [rsp + 0x1f0]
call fcn.140034c30
cmp eax, 0x75
jne 0x140033c62
mov rcx, qword [rsp + 0x1f0]
call fcn.140034e80
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0xffffffff
jne 0x140033c17
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_u_must_be_followed_by_4_hex_digits
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
cmp dword [rsp + 0x30], 0xdc00
jl 0x140033c43
cmp dword [rsp + 0x30], 0xdfff
jg 0x140033c43
mov eax, dword [rsp + 0x24]
shl eax, 0xa
mov ecx, dword [rsp + 0x30]
lea eax, [rax + rcx - 0x35fdc00]
mov dword [rsp + 0x20], eax
jmp 0x140033c60
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_surrogate_UD800..UDBFF_must_be_followed_by_UDC00..UDFFF
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x140033c7f
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_surrogate_UD800..UDBFF_must_be_followed_by_UDC00..UDFFF
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x140033cb2
cmp dword [rsp + 0x24], 0xdc00
jl 0x140033cb2
cmp dword [rsp + 0x24], 0xdfff
jg 0x140033cb2
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_surrogate_UDC00..UDFFF_must_follow_UD800..UDBFF
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
cmp dword [rsp + 0x20], 0x80
jge 0x140033cd2
mov edx, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033de3
cmp dword [rsp + 0x20], 0x7ff
jg 0x140033d16
mov eax, dword [rsp + 0x20]
shr eax, 6
or eax, 0xc0
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
mov eax, dword [rsp + 0x20]
and eax, 0x3f
bts eax, 7
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033de3
cmp dword [rsp + 0x20], 0xffff
jg 0x140033d74
mov eax, dword [rsp + 0x20]
shr eax, 0xc
or eax, 0xe0
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
mov eax, dword [rsp + 0x20]
shr eax, 6
and eax, 0x3f
bts eax, 7
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
mov eax, dword [rsp + 0x20]
and eax, 0x3f
bts eax, 7
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033de3
mov eax, dword [rsp + 0x20]
shr eax, 0x12
or eax, 0xf0
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
mov eax, dword [rsp + 0x20]
shr eax, 0xc
and eax, 0x3f
bts eax, 7
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
mov eax, dword [rsp + 0x20]
shr eax, 6
and eax, 0x3f
bts eax, 7
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
mov eax, dword [rsp + 0x20]
and eax, 0x3f
bts eax, 7
mov edx, eax
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x140033e02
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_forbidden_character_after_backslash
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0000__NUL__must_be_escaped_to_u0000
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0001__SOH__must_be_escaped_to_u0001
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0002__STX__must_be_escaped_to_u0002
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0003__ETX__must_be_escaped_to_u0003
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0004__EOT__must_be_escaped_to_u0004
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0005__ENQ__must_be_escaped_to_u0005
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0006__ACK__must_be_escaped_to_u0006
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0007__BEL__must_be_escaped_to_u0007
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0008__BS__must_be_escaped_to_u0008_or__b
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0009__HT__must_be_escaped_to_u0009_or__t
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U000A__LF__must_be_escaped_to_u000A_or__n
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U000B__VT__must_be_escaped_to_u000B
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U000C__FF__must_be_escaped_to_u000C_or__f
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U000D__CR__must_be_escaped_to_u000D_or__r
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U000E__SO__must_be_escaped_to_u000E
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U000F__SI__must_be_escaped_to_u000F
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0010__DLE__must_be_escaped_to_u0010
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0011__DC1__must_be_escaped_to_u0011
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0012__DC2__must_be_escaped_to_u0012
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0013__DC3__must_be_escaped_to_u0013
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0014__DC4__must_be_escaped_to_u0014
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0015__NAK__must_be_escaped_to_u0015
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0016__SYN__must_be_escaped_to_u0016
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0017__ETB__must_be_escaped_to_u0017
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0018__CAN__must_be_escaped_to_u0018
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U0019__EM__must_be_escaped_to_u0019
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U001A__SUB__must_be_escaped_to_u001A
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U001B__ESC__must_be_escaped_to_u001B
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U001C__FS__must_be_escaped_to_u001C
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U001D__GS__must_be_escaped_to_u001D
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U001E__RS__must_be_escaped_to_u001E
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_control_character_U001F__US__must_be_escaped_to_u001F
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
mov rax, qword [rsp + 0x1f0]
mov edx, dword [rax + 0x14]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034b70
jmp 0x14003459f
mov dword [rsp + 0x38], pe_nt_image_headers64
mov dword [rsp + 0x3c], 0xbf
lea rax, [rsp + 0x40]
mov r8, rax
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x160]
call fcn.1400039b0
lea rcx, [rsp + 0xf0]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x140034229
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov dword [rsp + 0x48], 0xa0
mov dword [rsp + 0x4c], 0xbf
mov dword [rsp + 0x50], pe_nt_image_headers64
mov dword [rsp + 0x54], 0xbf
lea rax, [rsp + 0x58]
mov r8, rax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x170]
call fcn.1400039b0
lea rcx, [rsp + 0x100]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x100]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x1400342a3
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov dword [rsp + 0x60], pe_nt_image_headers64
mov dword [rsp + 0x64], 0xbf
mov dword [rsp + 0x68], pe_nt_image_headers64
mov dword [rsp + 0x6c], 0xbf
lea rax, [rsp + 0x70]
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x180]
call fcn.1400039b0
lea rcx, [rsp + 0x110]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x110]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x14003431d
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov dword [rsp + 0x78], pe_nt_image_headers64
mov dword [rsp + 0x7c], 0x9f
mov dword [rsp + pe_nt_image_headers64], 0x80
mov dword [rsp + 0x84], Ordinal_200
lea rax, [rsp + 0x88]
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.1400039b0
lea rcx, [rsp + 0x120]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x120]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x1400343a0
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov dword [rsp + __WSAFDIsSet], 0x90
mov dword [rsp + 0x94], Ordinal_200
mov dword [rsp + 0x98], pe_nt_image_headers64
mov dword [rsp + 0x9c], Ordinal_200
mov dword [rsp + 0xa0], pe_nt_image_headers64
mov dword [rsp + 0xa4], Ordinal_200
lea rax, [rsp + 0xa8]
mov r8, rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1400039b0
lea rcx, [rsp + 0x130]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x140034442
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov dword [rsp + 0xb0], pe_nt_image_headers64
mov dword [rsp + 0xb4], Ordinal_200
mov dword [rsp + 0xb8], pe_nt_image_headers64
mov dword [rsp + 0xbc], Ordinal_200
mov dword [rsp + 0xc0], pe_nt_image_headers64
mov dword [rsp + 0xc4], Ordinal_200
lea rax, [rsp + 0xc8]
mov r8, rax
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x1b0]
call fcn.1400039b0
lea rcx, [rsp + 0x140]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x1400344e4
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov dword [rsp + 0xd0], pe_nt_image_headers64
mov dword [rsp + 0xd4], reloc.WLDAP32.dll_Ordinal_143
mov dword [rsp + 0xd8], pe_nt_image_headers64
mov dword [rsp + 0xdc], Ordinal_200
mov dword [rsp + 0xe0], pe_nt_image_headers64
mov dword [rsp + 0xe4], Ordinal_200
lea rax, [rsp + 0xe8]
mov r8, rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x1c0]
call fcn.1400039b0
lea rcx, [rsp + 0x150]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x150]
mov rcx, qword [rsp + 0x1f0]
call fcn.140034dc0
movzx eax, al
test eax, eax
jne 0x140034583
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x14003459f
mov rax, qword [rsp + 0x1f0]
lea rcx, str.invalid_string:_ill_formed_UTF_8_byte
mov qword [rax + 0x70], rcx
mov eax, reloc.WS2_32.dll_ntohl
jmp 0x1400345a4
jmp 0x1400339eb
add rsp, 0x1d8
pop rdi
pop rsi
ret