Function at 0x140108000
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x1402dc040]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x100]
lea r14, [rbp - 0x20]
mov qword [rsp + 0x58], rax
mov esi, r9d
xor eax, eax
mov dword [rsp + 0x40], r9d
mov r13d, eax
mov edi, r8d
mov dword [rsp + 0x3c], r13d
mov r15, rcx
mov dword [rsp + 0x6c], r8d
mov r12d, eax
mov qword [rsp + 0x50], rdx
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x48], r14
mov byte [rsp + 0x30], al
test rcx, rcx
je 0x1401086af
cmp dword [rcx], 0xbab1e
jne 0x1401086af
cmp byte [rcx + 0x1cb], al
je 0x140108095
mov eax, 8
jmp 0x140108147
test esi, esi
jns 0x1401080a3
mov eax, 0xa
jmp 0x140108147
xorps xmm0, xmm0
mov qword [rsp + 0x198], rbx
mov rbx, qword [rcx + 8]
mov qword [rbp - 0x60], rax
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
test rbx, rbx
je 0x1401080ef
nop dword [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140107d50
add r13d, dword [rbp - 0x68]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1401080d0
mov dword [rsp + 0x3c], r13d
lea rdx, [rsp + 0x34]
mov rcx, r15
call fcn.14010b640
mov eax, dword [rsp + 0x34]
test eax, eax
js 0x14010810d
cmp eax, esi
cmovl esi, eax
mov dword [rsp + 0x40], esi
cmp byte [rbp + 0x110], r12b
lea eax, [rdi + r13]
lea ecx, [rax + 1]
cmove ecx, eax
cmp ecx, 0xa
jbe 0x14010816e
shl rcx, 4
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x48], rax
mov r14, rax
test rax, rax
jne 0x140108169
mov eax, 3
mov rbx, qword [rsp + 0x198]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14016dfe0
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x30], 1
xor edx, edx
mov dword [rsp + 0x34], edx
mov esi, edx
test r13d, r13d
je 0x140108288
mov r13, qword [r15 + 8]
test r13, r13
je 0x140108283
nop dword [rax]
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.140107d50
xor edx, edx
mov edi, edx
cmp dword [rbp - 0x68], edx
jbe 0x140108272
nop word [rax + rax]
mov rax, qword [rsp + rdi*8 + 0x70]
mov ebx, esi
inc esi
shl rbx, 4
add rbx, r14
mov dword [rsp + 0x34], esi
mov esi, edx
mov qword [rbx], rax
mov word [rbx + 8], dx
test byte [rbp + rdi - 0x64], 1
je 0x1401081df
mov esi, reloc.WLDAP32.dll_Ordinal_41
mov word [rbx + 8], 0x300
test byte [rbp + rdi - 0x64], 2
je 0x14010823f
mov r14, qword [rsp + rdi*8 + 0x70]
lea rax, [rsp + 0x60]
mov rcx, r14
mov dword [rsp + 0x60], 4
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or esi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x140108235
cmp dword [rsp + 0x68], 1
jne 0x140108235
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.WS2_32.dll_send]
or word [rbx + 8], 0x10
mov r14, qword [rsp + 0x48]
mov rdx, qword [r15 + 0x1b8]
mov r8d, esi
mov rcx, qword [rsp + rdi*8 + 0x70]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x14010839e
mov eax, dword [rbp - 0x68]
inc rdi
mov esi, dword [rsp + 0x34]
mov rdx, r12
cmp rdi, rax
jb 0x1401081b0
mov r13, qword [r13 + 0x10]
test r13, r13
jne 0x140108190
mov edi, dword [rsp + 0x6c]
mov r13d, dword [rsp + 0x3c]
mov esi, edi
mov r14, rdx
mov qword [rsp + 0x60], rsi
test edi, edi
je 0x1401083d4
mov rbx, qword [rsp + 0x50]
add rbx, 8
movzx edx, word [rbx]
movzx eax, dl
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x29
mov edi, ecx
or edi, 4
test dl, 2
cmove edi, ecx
test dl, 4
je 0x140108315
mov rsi, qword [rbx - 8]
lea rax, [rsp + 0x6c]
mov rcx, rsi
mov dword [rsp + 0x6c], 4
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or edi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x140108310
cmp dword [rsp + 0x68], 1
jne 0x140108310
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_send]
mov rsi, qword [rsp + 0x60]
mov rdx, qword [r15 + 0x1b8]
mov r8d, edi
mov rcx, qword [rbx - 8]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1401083b8
mov rax, qword [rbx - 8]
xor edx, edx
mov edi, dword [rsp + 0x34]
mov r9, qword [rsp + 0x48]
mov ecx, edi
shl rcx, 4
add rcx, r9
mov qword [rcx], rax
movzx eax, dx
mov word [rcx + 8], dx
test byte [rbx], 1
je 0x140108366
mov r10d, 0x300
mov word [rcx + 8], r10w
mov eax, r10d
test byte [rbx], 2
je 0x140108379
mov r8d, 0x400
or ax, r8w
mov word [rcx + 8], ax
test byte [rbx], 4
je 0x140108386
or ax, 0x10
mov word [rcx + 8], ax
inc edi
inc r14
add rbx, 0x10
mov dword [rsp + 0x34], edi
cmp r14, rsi
jb 0x1401082a3
jmp 0x1401083dd
cmp byte [rsp + 0x30], r12b
je 0x1401083ca
mov rcx, r14
call qword [fcn.14016f1de]
mov eax, 4
jmp 0x14010813f
cmp byte [rsp + 0x30], r12b
je 0x1401083ca
mov rcx, qword [rsp + 0x48]
call qword [fcn.14016f1de]
mov eax, 4
jmp 0x14010813f
mov edi, dword [rsp + 0x34]
mov r9, qword [rsp + 0x48]
test edi, edi
jne 0x1401084c3
movzx ebx, byte [rbp + 0x110]
test bl, bl
je 0x140108618
mov edi, edx
mov r9d, dword [rsp + 0x40]
lea rdx, [r15 + 0x1b8]
xor ecx, ecx
xor r8d, r8d
mov dword [rsp + 0x20], ecx
mov ecx, 1
call qword [sym.imp.WS2_32.dll_WSAWaitForMultipleEvents]
test rsi, rsi
je 0x140108552
mov rax, qword [rsp + 0x50]
shl r13, 4
sub r13, rax
add r13, qword [rsp + 0x48]
lea rsi, [rax + 0xa]
nop dword [rax]
nop dword [rax + rax]
mov r14, qword [rsi - 0xa]
lea r8, [rbp - 0x58]
movsx r12d, word [rsi + r13]
xor eax, eax
mov rcx, r14
mov dword [rbp - 0x58], eax
xor edx, edx
movzx ebx, ax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1401084f2
mov r8d, dword [rbp - 0x58]
mov ecx, 0
test r8b, 0x29
setne cl
movzx edx, cx
or dx, 4
test r8b, 0x32
cmove dx, cx
movzx ecx, dx
or cx, 2
test r8b, 4
cmove cx, dx
cmp qword [rsp + 0x58], 0
movzx ebx, cx
je 0x1401084f2
test edi, edi
jne 0x1401084f2
test r8d, r8d
je 0x1401084f2
inc dword [rsp + 0x38]
xor r8d, r8d
mov rdx, qword [r15 + 0x1b8]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
jmp 0x14010853a
xor r8d, r8d
mov edx, edi
mov rcx, r9
call fcn.140132ad0
mov edi, eax
test eax, eax
jns 0x1401084e0
mov eax, ntohs
jmp 0x14010813f
jle 0x1401083f6
mov r12d, eax
mov dword [rsp + 0x38], eax
jmp 0x140108416
mov rdx, qword [r15 + 0x1b8]
xor r8d, r8d
mov rcx, r14
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test edi, edi
je 0x14010853a
movzx ecx, bx
or cx, 1
test r12d, 0x300
cmove cx, bx
movzx edx, cx
or dx, 4
test r12b, 0x10
cmove dx, cx
movzx ebx, dx
or bx, 2
bt r12d, 0xa
cmovae bx, dx
mov word [rsi], bx
add rsi, 0x10
sub qword [rsp + 0x60], 1
jne 0x140108440
mov r12d, dword [rsp + 0x38]
cmp dword [rsp + 0x3c], 0
je 0x140108600
mov rsi, qword [r15 + 8]
mov qword [rsp + 0x50], rsi
test rsi, rsi
je 0x140108600
nop
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140107d50
xor eax, eax
mov ebx, eax
cmp dword [rbp - 0x68], eax
jbe 0x1401085e9
mov esi, dword [rsp + 0x38]
nop word [rax + rax]
mov rcx, qword [rsp + rbx*8 + 0x70]
lea r8, [rbp - 0x58]
xor edx, edx
mov dword [rbp - 0x58], eax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1401085bb
cmp qword [rsp + 0x58], 0
je 0x1401085bb
test edi, edi
jne 0x1401085bb
cmp dword [rbp - 0x58], edi
je 0x1401085bb
inc esi
mov rdx, qword [r15 + 0x1b8]
xor r8d, r8d
mov rcx, qword [rsp + rbx*8 + 0x70]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
mov eax, dword [rbp - 0x68]
inc rbx
cmp rbx, rax
mov eax, 0
jb 0x140108590
mov dword [rsp + 0x38], esi
mov rsi, qword [rsp + 0x50]
mov rsi, qword [rsi + 0x10]
mov qword [rsp + 0x50], rsi
test rsi, rsi
jne 0x140108570
mov r12d, dword [rsp + 0x38]
mov rcx, qword [r15 + 0x1b8]
call qword [sym.imp.WS2_32.dll_WSAResetEvent]
mov edi, dword [rsp + 0x34]
movzx ebx, byte [rbp + 0x110]
cmp byte [rsp + 0x30], 0
je 0x14010862a
mov rcx, qword [rsp + 0x48]
call qword [fcn.14016f1de]
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x140108637
mov dword [rax], r12d
cmp byte [rbp + 0x108], 0
je 0x1401086a8
test edi, edi
jne 0x1401086a8
test bl, bl
jne 0x1401086a8
xor eax, eax
cmp dword [r15], 0xbab1e
mov dword [rsp + 0x3c], eax
jne 0x1401086a8
cmp byte [r15 + 0x1cb], al
jne 0x1401086a8
lea rdx, [rsp + 0x3c]
mov rcx, r15
call fcn.14010b640
test eax, eax
jne 0x1401086a8
mov eax, dword [rsp + 0x3c]
test eax, eax
je 0x1401086a8
mov ecx, dword [rsp + 0x40]
cmp eax, ecx
jg 0x140108685
test eax, eax
jns 0x140108687
mov eax, ecx
movsxd rcx, eax
test eax, eax
je 0x1401086a8
jns 0x1401086a2
mov ecx, 0x2726
call qword [sym.imp.WS2_32.dll_WSASetLastError]
xor eax, eax
jmp 0x14010813f
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x14010813f
mov eax, 1
jmp 0x140108147