Function at 0x18003f040
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov qword [rsp + 0x40], rbx
lea r11, [0x180192600]
mov qword [rsp + 0x30], rsi
lea rbx, [0x180000000]
mov qword [rsp + 0x28], rdi
mov r8, rdx
mov qword [rsp + 0x20], r12
xor dl, dl
xor r12b, r12b
mov qword [rsp + 8], r15
mov r9, rcx
mov byte [rsp + 0x68], dl
xor eax, eax
mov dword [rsp + 0x60], r12d
mov rdi, r8
mov ecx, Ordinal_41
rep stosb byte [rdi], al
mov r10b, reloc.WS2_32.dll_recv
nop dword [rax]
nop word [rax + rax]
movzx edi, byte [r9]
inc r9
lea eax, [rdi - 0x26]
cmp eax, 0xcd
ja case.0x18003f0c5.44
cdqe
movzx eax, byte [rbx + rax + 0x3f718]
mov ecx, dword [rbx + rax*4 + 0x3f6fc]
add rcx, rbx
jmp rcx
mov byte [r8 + 1], dil
mov al, 4
jmp 0x18003f0f5
mov byte [r8 + 1], dil
mov al, 2
jmp 0x18003f0f5
mov byte [r8 + 2], dil
mov al, reloc.WLDAP32.dll_Ordinal_32
jmp 0x18003f0f5
mov byte [r8 + 3], dil
mov al, 0x40
jmp 0x18003f0f5
mov byte [r8 + 4], dil
mov al, 8
jmp 0x18003f0f5
mov byte [r8 + 5], dil
mov al, reloc.WS2_32.dll_recv
or dl, al
add r10b, 0xff
jne 0x18003f0a0
movzx eax, dl
mov ebx, 1
mov qword [rsp + 0x38], rbp
mov ecx, ebx
movzx r10d, dl
shl r10d, 0x17
test dl, dl
mov qword [rsp + 0x18], r13
mov qword [rsp + 0x10], r14
cmovne ecx, eax
mov dword [r8 + 0x21], r10d
movzx eax, dil
and al, 0xf0
cmp al, 0x40
jne 0x18003f198
bts r10d, 0x1e
movzx eax, dil
shr al, 3
and al, bl
mov dword [r8 + 0x21], r10d
mov byte [r8 + 7], al
je 0x18003f15e
movzx eax, byte [r9]
and al, 0xf8
movzx r12d, r12b
cmp al, 0xb8
cmove r12d, ebx
mov dword [rsp + 0x60], r12d
movzx eax, dil
shr al, 2
and al, bl
mov byte [r8 + 8], al
movzx eax, dil
shr al, 1
and dil, bl
and al, bl
mov byte [r8 + 0xa], dil
mov byte [r8 + 9], al
movzx edi, byte [r9]
inc r9
movzx eax, dil
and al, 0xf0
cmp al, 0x40
jne 0x18003f198
movzx r14d, dil
movzx ebx, cl
jmp 0x18003f1fd
mov byte [r8 + 0xb], dil
movzx ebx, cl
cmp dil, 0xf
jne 0x18003f1b9
movzx edi, byte [r9]
lea r11, [0x18019264a]
mov byte [r8 + 0xc], dil
inc r9
jmp 0x18003f1da
cmp dil, 0xa0
jb 0x18003f1da
cmp dil, 0xa3
ja 0x18003f1da
inc r12b
mov dword [rsp + 0x60], r12d
test cl, 0x10
je 0x18003f1d7
or bl, 8
jmp 0x18003f1da
and bl, 0xf7
movzx edx, dil
movzx r14d, dil
mov eax, edx
and edx, 3
shr rax, 2
movzx eax, byte [rax + r11]
add rax, r11
movzx esi, byte [rdx + rax]
cmp sil, 0xff
jne 0x18003f222
or r10d, 0x3000
movzx eax, dil
and eax, 0xfffffffd
mov dword [r8 + 0x21], r10d
xor sil, sil
cmp al, 0x24
jne 0x18003f222
mov sil, 1
movzx r13d, dil
xor bpl, bpl
jmp 0x18003f241
xor bpl, bpl
movzx r13d, dil
test sil, sil
jns 0x18003f241
movzx eax, sil
and eax, 0x7f
movzx esi, word [rax + r11]
movzx ebp, si
shr bp, 8
movzx r15d, byte [r8 + 0xc]
mov r11d, r10d
test r15b, r15b
je 0x18003f28a
movzx edx, dil
lea rcx, [0x180192600]
mov eax, edx
and edx, 3
shr rax, 2
movzx ecx, byte [rax + rcx + 0x13c]
add rcx, rdx
lea rdx, [0x180192600]
test byte [rcx + rdx + 0x13c], bl
je 0x18003f291
or r11d, 0x3000
mov dword [r8 + 0x21], r11d
jmp 0x18003f291
lea rdx, [0x180192600]
test sil, 1
je 0x18003f5dd
or r11d, 1
mov dword [r8 + 0x21], r11d
mov edi, r11d
movzx r10d, byte [r9]
movzx r12d, r10b
mov byte [r8 + 0xd], r10b
movzx ecx, r10b
shr r12b, 6
and cl, 7
shr r10b, 3
and r10b, 7
mov byte [r8 + 0xe], r12b
mov byte [rsp + 0x58], cl
mov byte [r8 + 0x10], cl
mov byte [r8 + 0xf], r10b
test bpl, bpl
je 0x18003f2f7
movzx ecx, r10b
movzx eax, bpl
shl eax, cl
movzx ecx, byte [rsp + 0x58]
test al, al
jns 0x18003f2f7
or edi, 0x3000
mov dword [r8 + 0x21], edi
mov eax, edi
test r15b, r15b
jne 0x18003f352
cmp r14b, 0xd9
jb 0x18003f352
cmp r14b, 0xdf
ja 0x18003f352
lea eax, [r14 + 0x27]
movzx r11d, al
cmp r12b, 3
jne 0x18003f332
movzx eax, r10b
lea rdx, [rax + r11*8]
lea rax, [0x180192600]
movzx r11d, byte [rdx + rax + 0x104]
jmp 0x18003f33f
movzx r11d, byte [r11 + rdx + 0xfd]
movzx ecx, r10b
shl r11b, cl
mov eax, edi
test r11b, r11b
jns 0x18003f352
or eax, 0x3000
mov dword [r8 + 0x21], eax
test bl, 0x20
je 0x18003f3b7
cmp r12b, 3
jne 0x18003f368
or eax, 0x9000
mov dword [r8 + 0x21], eax
jmp 0x18003f3b7
movzx edx, r14b
test r15b, r15b
jne 0x18003f384
and dl, 0xfe
lea rdi, [0x1801927c6]
lea rcx, [0x1801927ae]
jmp 0x18003f392
lea rdi, [0x1801927d8]
lea rcx, [0x1801927c6]
cmp byte [rcx], dl
je 0x18003f3a1
add rcx, 2
cmp rcx, rdi
jne 0x18003f392
jmp 0x18003f3af
movzx eax, byte [rcx + 1]
movzx ecx, r10b
shl eax, cl
test al, al
jns 0x18003f3b7
or dword [r8 + 0x21], 0x9000
movzx ecx, r13b
mov edx, ecx
test r15b, r15b
je 0x18003f406
sub edx, 0x20
je 0x18003f3ea
sub edx, 1
je 0x18003f3d6
sub edx, 1
je 0x18003f3ea
cmp edx, 1
jne 0x18003f417
lea eax, [r10 - 4]
mov r12b, 3
cmp al, 1
ja 0x18003f4a5
jmp 0x18003f49d
mov r12b, 3
cmp r10b, 4
ja 0x18003f49d
cmp r10b, 1
jne 0x18003f4a5
jmp 0x18003f49d
sub edx, 0x8c
je 0x18003f497
cmp edx, 2
je 0x18003f491
cmp r12b, 3
jne 0x18003f465
test r15b, r15b
je 0x18003f432
lea rdx, [0x180192811]
lea rcx, [0x1801927e7]
jmp 0x18003f440
lea rdx, [0x1801927e7]
lea rcx, [0x1801927d8]
cmp byte [rcx], r14b
je 0x18003f450
add rcx, 3
cmp rcx, rdx
jne 0x18003f440
jmp 0x18003f4a5
test byte [rcx + 1], bl
je 0x18003f4a5
movzx eax, byte [rcx + 2]
movzx ecx, r10b
shl eax, cl
test al, al
jns 0x18003f49d
jmp 0x18003f4a5
test r15b, r15b
je 0x18003f4a5
sub ecx, 0x50
je 0x18003f483
sub ecx, 0x75
je 0x18003f49d
sub ecx, 0x11
je 0x18003f48a
sub ecx, 1
je 0x18003f483
cmp ecx, 0x20
jne 0x18003f4a5
test bl, 9
jne 0x18003f49d
jmp 0x18003f4a5
test bl, 6
jne 0x18003f49d
jmp 0x18003f4a5
cmp r10b, 1
je 0x18003f49d
cmp r10b, 5
jbe 0x18003f4a5
or dword [r8 + 0x21], 0x11000
movzx edx, byte [r9 + 1]
add r9, 2
cmp r10b, 1
ja 0x18003f4ca
cmp r14b, 0xf6
jne 0x18003f4c0
or sil, 2
jmp 0x18003f4ca
cmp r14b, 0xf7
jne 0x18003f4ca
or sil, 0x10
movzx ecx, r12b
mov r10d, 4
test r12b, r12b
je 0x18003f500
sub ecx, 1
je 0x18003f4f6
cmp ecx, 1
movzx ecx, byte [rsp + 0x58]
jne 0x18003f527
mov dil, 2
test bl, 0x10
jne 0x18003f52b
movzx edi, r10b
jmp 0x18003f52b
movzx ecx, byte [rsp + 0x58]
mov dil, 1
jmp 0x18003f52b
movzx ecx, byte [rsp + 0x58]
test bl, 0x10
je 0x18003f519
xor eax, eax
mov edi, 2
cmp cl, 6
cmovne edi, eax
jmp 0x18003f52b
movzx edi, byte [rsp + 0x68]
cmp cl, 5
cmove edi, r10d
jmp 0x18003f52b
mov edi, dword [rsp + 0x68]
cmp r12b, 3
je 0x18003f570
cmp cl, r10b
jne 0x18003f570
or dword [r8 + 0x21], 2
movzx eax, dl
shr al, 6
inc r9
mov byte [r8 + 0x12], al
movzx eax, dl
shr al, 3
and al, 7
mov byte [r8 + 0x11], dl
and dl, 7
mov byte [r8 + 0x13], al
mov byte [r8 + 0x14], dl
cmp dl, 5
jne 0x18003f570
test r12b, 1
movzx edi, dil
cmove edi, r10d
dec r9
movzx ecx, dil
sub ecx, 1
je 0x18003f5c2
sub ecx, 1
je 0x18003f5a3
cmp ecx, 2
jne 0x18003f5cf
or dword [r8 + 0x21], 0x100
mov eax, dword [r9]
mov r12d, dword [rsp + 0x60]
mov dword [r8 + 0x1d], eax
movzx eax, dil
add r9, rax
jmp 0x18003f5ed
or dword [r8 + 0x21], 0x80
movzx eax, word [r9]
mov r12d, dword [rsp + 0x60]
mov word [r8 + 0x1d], ax
movzx eax, dil
add r9, rax
jmp 0x18003f5ed
or dword [r8 + 0x21], 0x40
movzx eax, byte [r9]
mov byte [r8 + 0x1d], al
mov r12d, dword [rsp + 0x60]
movzx eax, dil
add r9, rax
jmp 0x18003f5ed
test bl, 0x20
je 0x18003f5ed
or r11d, 0x9000
mov dword [r8 + 0x21], r11d
mov r15, qword [rsp + 8]
mov r14, qword [rsp + 0x10]
mov r13, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x38]
test sil, 0x10
je 0x18003f65d
test sil, 0x40
je 0x18003f631
test bl, 8
je 0x18003f691
or dword [r8 + 0x21], 0x208
movzx eax, word [r9]
add r9, 2
mov word [r8 + 0x15], ax
jmp 0x18003f6bf
test r12b, r12b
je 0x18003f648
or dword [r8 + 0x21], 0x20
mov rax, qword [r9]
add r9, 8
mov qword [r8 + 0x15], rax
jmp 0x18003f65d
test bl, 8
jne 0x18003f663
or dword [r8 + 0x21], 0x10
mov eax, dword [r9]
add r9, 4
mov dword [r8 + 0x15], eax
test sil, 4
je 0x18003f675
or dword [r8 + 0x21], 8
movzx eax, word [r9]
add r9, 2
mov word [r8 + 0x15], ax
test sil, 2
je 0x18003f68b
or dword [r8 + 0x21], 4
movzx eax, byte [r9]
inc r9
mov byte [r8 + 0x15], al
test sil, 0x40
je 0x18003f6a6
or dword [r8 + 0x21], 0x210
mov eax, dword [r9]
add r9, 4
mov dword [r8 + 0x15], eax
jmp 0x18003f6bf
test sil, 0x20
je 0x18003f6bf
or dword [r8 + 0x21], 0x204
movzx eax, byte [r9]
inc r9
mov byte [r8 + 0x15], al
sub r9b, byte [rsp + 0x50]
mov r12, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
mov byte [r8], r9b
cmp r9b, 0xf
jbe 0x18003f6f2
or dword [r8 + 0x21], 0x5000
mov al, reloc.WS2_32.dll_ntohs
movzx eax, al
mov byte [r8], reloc.WS2_32.dll_ntohs
add rsp, 0x48
ret
movzx eax, r9b
add rsp, 0x48
ret