Function at 0x180010ad0
Capabilities:
Connect socket
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x90
mov rax, qword [rcx]
mov r12d, r9d
movzx ebp, r8w
mov r14, rdx
mov rdi, rcx
call qword [rax + 0x198]
test eax, eax
je 0x180010efe
xor esi, esi
mov r13d, 1
mov ebx, esi
xor eax, eax
lock cmpxchg dword [rdi + 0x1a8], r13d
je 0x180010b45
mov eax, ebx
and eax, 0xfff
cmp eax, 0xfff
jne 0x180010b36
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
inc ebx
jmp 0x180010b11
mov eax, ebx
and eax, 0x3f
cmp al, 0x3f
jne 0x180010b41
pause
inc ebx
jmp 0x180010b11
mov eax, dword [rdi + 0x74]
cmp eax, 3
jne 0x180010ee9
mov dword [rdi + 0x74], esi
mov rcx, rdi
mov dword [rdi + 0x1a8], esi
mov rax, qword [rdi]
call qword [rax + 0x1a0]
lea rax, [rsp + 0x70]
mov dword [rdi + 0x18], r13d
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x30]
mov rax, qword [rsp + 0xe0]
movzx r9d, bp
mov rdx, r14
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov qword [rdi + 0x1c], 5
mov dword [rdi + 0x24], r13d
mov word [rsp + 0x30], si
mov word [rsp + 0x70], si
call fcn.18000f640
test eax, eax
je 0x180010ea8
movzx eax, word [rsp + 0x70]
mov ebx, 0x1c
lea r14d, [rbx - 0xc]
cmp ax, 2
je 0x180010c68
cmp ax, 0x17
je 0x180010c68
movzx ebp, word [rsp + 0xe8]
test bp, bp
je 0x180010cf8
cmp ax, 2
je 0x180010caa
cmp ax, 0x17
je 0x180010caa
mov rax, qword gs:[0x58]
mov ecx, dword [0x180069210]
mov edx, 4
mov qword [rsp + 0xc0], r15
movzx r15d, word [rsp + 0x30]
mov r14, qword [rax + rcx*8]
add r14, rdx
mov eax, dword [r14]
cmp dword [0x180067dd4], eax
jg 0x180010f27
mov eax, dword [r14]
cmp dword [0x180067df4], eax
jg 0x180010f7b
cmp r15w, 2
lea rax, [0x180067db8]
mov r15, qword [rsp + 0xc0]
lea rcx, [0x180067dd8]
cmovne rax, rcx
mov r14d, reloc.WS2_32.dll_recv
jmp 0x180010caf
movzx ebp, word [rsp + 0xe8]
test bp, bp
jne 0x180010be6
mov rcx, qword [rdi + 0x28]
lea rdx, [rsp + 0x70]
cmp ax, 2
mov r8d, ebx
cmove r8d, r14d
call qword [sym.imp.WS2_32.dll_bind]
cmp eax, 0xffffffff
jne 0x180010cf8
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [rdi + 0x6c], 4
jmp 0x180010eb5
lea rax, [rsp + 0x70]
movups xmm0, xmmword [rax]
movzx ecx, bp
movsd xmm1, qword [rax + 0x10]
mov eax, dword [rax + 0x18]
movups xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x68], eax
movsd qword [rsp + 0x60], xmm1
call qword [sym.imp.WS2_32.dll_htons]
cmp word [rsp + 0x50], 2
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + 0x28]
mov r8d, ebx
cmove r8d, r14d
mov word [rsp + 0x52], ax
call qword [sym.imp.WS2_32.dll_bind]
cmp eax, 0xffffffff
je 0x180010c98
call fcn.18000e6d0
xor ecx, ecx
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rdi]
mov rcx, rdi
mov rdx, qword [rdi + 0x28]
call qword [rax + 0x128]
cmp eax, 2
je 0x180010e8f
mov rcx, qword [rdi + 0x28]
test r12d, r12d
je 0x180010dc4
mov rdx, qword [rdi + 0x30]
mov r8d, 0x30
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x180010e80
cmp word [rsp + 0x30], 2
lea rdx, [rsp + 0x30]
mov rcx, qword [rdi + 0x28]
cmove ebx, r14d
mov r8d, ebx
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
je 0x180010d82
cmp eax, 0xffffffff
jne 0x180010e80
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x180010e80
lea rax, [rdi + 0x68]
mov r9, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x180011170]
xor edx, edx
mov dword [rsp + 0x20], esi
xor ecx, ecx
call fcn.180026a60
mov qword [rdi + 0x60], rax
test rax, rax
je 0x180010e6a
mov rcx, qword [rdi + 8]
mov esi, r13d
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, r13d
jmp 0x180010f00
mov edx, r13d
call fcn.18000eeb0
test eax, eax
jne 0x180010f1c
cmp word [rsp + 0x30], 2
lea rdx, [rsp + 0x30]
mov rcx, qword [rdi + 0x28]
cmove ebx, r14d
mov r8d, ebx
call qword [sym.imp.WS2_32.dll_connect]
mov ebx, eax
test eax, eax
je 0x180010e03
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x2733
jne 0x180010e80
cmp ebx, 0xffffffff
jne 0x180010e16
mov edx, dword [rdi + 0x44]
mov rcx, qword [rdi + 0x28]
call fcn.18000f0e0
mov ebx, eax
test ebx, ebx
jne 0x180010e78
mov rdx, qword [rdi + 0x30]
lea r8d, [rbx + 0x23]
mov rcx, qword [rdi + 0x28]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x180010e80
mov dword [rdi + 0x70], r13d
xor ecx, ecx
mov dword [rdi + 0x74], r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x130]
cmp eax, 2
jne 0x180010d82
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x4c7
test eax, eax
cmove eax, ecx
mov ecx, eax
jmp 0x180010e7a
mov dword [rdi + 0x6c], 8
mov ecx, 0x65f
jmp 0x180010eb7
mov ecx, ebx
call qword [sym.imp.WS2_32.dll_WSASetLastError]
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [rdi + 0x6c], ntohs
jmp 0x180010eb5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x4c7
mov dword [rdi + 0x6c], 5
test eax, eax
cmove eax, ecx
jmp 0x180010eb5
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [rdi + 0x6c], 3
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rdi + 0x18], esi
mov qword [rdi + 0x1c], 5
mov dword [rdi + 0x24], r13d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [rdi]
mov rcx, rdi
mov ebx, eax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, esi
jmp 0x180010f00
mov ecx, 0x139f
mov dword [rdi + 0x6c], r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rdi + 0x1a8], esi
xor eax, eax
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret
mov ecx, 0x80004005
call fcn.18000cf70
int3
lea rcx, [0x180067dd4]
call fcn.180044c34
cmp dword [0x180067dd4], 0xffffffff
jne 0x180010c32
mov eax, 2
lea rcx, [0x180067dd4]
mov word [0x180067db8], ax
xor eax, eax
mov qword [0x180067dba], rax
mov qword [0x180067dc2], rax
mov qword [0x180067dca], rax
mov word [0x180067dd2], ax
call fcn.180044bd4
jmp 0x180010c32
lea rcx, [0x180067df4]
call fcn.180044c34
cmp dword [0x180067df4], 0xffffffff
jne 0x180010c41
mov eax, reloc.WS2_32.dll_socket
lea rcx, [0x180067df4]
mov word [0x180067dd8], ax
xor eax, eax
mov qword [0x180067dda], rax
mov qword [0x180067de2], rax
mov qword [0x180067dea], rax
mov word [0x180067df2], ax
call fcn.180044bd4
jmp 0x180010c41