Function at 0x1801e2bc0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x38
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x138], 0x15
je 0x1801e2bea
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x138], 0x25
jne 0x1801e2bf1
mov al, 1
jmp 0x1801e3d3e
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x138]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0x10b
ja case.default.0x1801e2c24
movsxd rax, dword [rsp + 0x20]
lea rcx, [0x180000000]
mov eax, dword [rcx + rax*4 + 0x1e3d44]
add rax, rcx
jmp rax
mov al, 1
jmp 0x1801e3d3e
mov al, 1
jmp 0x1801e3d3e
mov edx, 2
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_recv
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 5
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 1
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 9
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 4
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xda
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xdb
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xdc
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xdd
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xde
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xdf
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe0
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe1
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_50
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 7
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_46
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 3
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, listen
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_select
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 8
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_50
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 6
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_45
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_ntohl
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xea
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xeb
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xec
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xed
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xee
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xef
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xf0
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xf1
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_send
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_22
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_27
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_setsockopt
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_30
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_sendto
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_32
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_socket
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe2
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe3
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe4
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe5
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe6
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe7
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe8
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xe9
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_35
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_41
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_41
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_41
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_45
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x24
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_45
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_41
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x6a
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, WSAGetLastError
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, WSAGetLastError
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, WSAGetLastError
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, WSAGetLastError
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_WSAGetLastError
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_WSASetLastError
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, WSAStartup
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x62
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x63
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x64
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x65
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x66
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x67
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x68
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x69
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x7a
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x7b
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x7c
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x7d
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x7e
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x7f
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x80
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x81
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x82
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x83
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x84
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x85
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x86
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x87
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x88
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x89
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x8a
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_143
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_143
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_143
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_143
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_143
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x90
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x91
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x92
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, __WSAFDIsSet
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, __WSAFDIsSet
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, __WSAFDIsSet
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, __WSAFDIsSet
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll___WSAFDIsSet
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x98
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x99
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x9a
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x9b
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x9c
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x9d
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x9e
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x9f
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa0
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa1
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa2
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa3
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa4
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa5
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa6
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa7
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa8
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xa9
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xaa
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xab
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xac
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xad
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xae
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xaf
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb0
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb1
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb2
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb3
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb4
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb5
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb6
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb7
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb8
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xb9
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xba
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xbb
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xbc
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xbd
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xbe
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xbf
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xc0
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xc1
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xc2
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xc3
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_200
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_200
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_200
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_200
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xc9
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xca
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xcb
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xcc
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xcd
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xce
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_211
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_211
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_211
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_211
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_211
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0xd4
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_217
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_217
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_217
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_217
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_217
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x5a
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x5b
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x5c
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x5d
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x5e
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x5f
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x60
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x61
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_32
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, listen
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_50
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_recvfrom
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_33
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x42
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x43
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x44
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x45
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x46
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x47
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x48
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x49
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x4a
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_79
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_79
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_79
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_79
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_79
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x50
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x51
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_50
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x33
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x34
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, gethostname
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, gethostname
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, gethostname
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_60
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WS2_32.dll_gethostname
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_60
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, Ordinal_60
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_60
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x3d
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x3e
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x3f
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x40
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, 0x41
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov edx, reloc.WLDAP32.dll_Ordinal_41
mov rcx, qword [rsp + 0x40]
call fcn.1800c9a30
jmp 0x1801e3d3c
mov al, 1
jmp 0x1801e3d3e
xor al, al
add rsp, 0x38
ret