Function at 0x1800077f0
Capabilities:
Initialize winsock library

Disassembly:
mov dword [rsp + 0x20], r9d
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x230
mov rax, qword [0x18008a480]
xor rax, rsp
mov qword [rsp + 0x220], rax
mov r15d, r9d
mov r14d, r8d
mov word [rsp + 0x40], dx
mov rbx, rcx
mov qword [rsp + 0x68], rcx
xor r13d, r13d
lea edi, [r13 + 0xe]
mov rax, qword [rcx + 0xb0]
mov qword [rsp + 0x50], rax
xor esi, esi
lea r12, [0x18008a130]
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180007861
test dword [rcx + 0x1c], 0x4000
jne 0x1800519d0
lea rcx, [rbx + 0x60]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_EnterCriticalSection]
test r15d, r15d
jne 0x18000c3e9
mov dword [rbx + 0x304], r14d
test byte [rbx + 0x268], 4
jne 0x180007896
mov rcx, rbx
call fcn.1800036f8
mov edi, eax
test eax, eax
jne 0x1800519ee
mov ecx, 0x202
lea rdx, [rsp + 0x80]
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov edi, eax
test eax, eax
jne 0x1800519fc
mov esi, 1
mov dword [rsp + 0x48], esi
mov r14, qword [rbx + 0xb0]
bt r14, 0xd
jae 0x180014baa
bt r14, 0xa
jb 0x180014baa
mov r12d, dword [0x18008a3c8]
test r12d, r12d
je 0x180014ba3
movzx edx, word [rsp + 0x40]
mov rcx, qword [rbx + 0x320]
call sym.DNSAPI.dll_NetInfo_IsAddrConfig
test eax, eax
jne 0x180014b75
mov rcx, qword [0x18008a130]
lea r12, [0x18008a130]
cmp rcx, r12
je 0x180007922
test dword [rcx + 0x1c], 0x4000
jne 0x180051a0a
mov edi, 0x25e5
mov dword [rbx + 0x18c], edi
lea rcx, [rbx + 0x60]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_LeaveCriticalSection]
test r13, r13
jne 0x180051c76
test esi, esi
je 0x18000794a
call qword [sym.imp.WS2_32.dll_WSACleanup]
test r15d, r15d
jne 0x18000795f
mov dword [rbx + 0x18c], edi
mov rcx, rbx
call fcn.1800054d0
mov edi, eax
mov r10, qword [0x18008a130]
cmp r10, r12
je 0x18000797c
test dword [r10 + 0x1c], 0x4000
jne 0x180051c84
jmp 0x18000797c
mov eax, edi
mov rcx, qword [rsp + 0x220]
xor rcx, rsp
call fcn.180001000
add rsp, 0x230
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
cmp dword [rbx + 0x2fc], esi
je 0x18000792d
cmp r14d, dword [rbx + 0x304]
je 0x180007874
jmp 0x18003d6fa
mov qword [rbx + 0x2f0], r14
jmp 0x180014cce
mov dword [rbx + 0x2f8], esi
mov dword [rbx + 0x300], esi
jmp 0x180014dea
test r12b, 0x10
jne 0x180014ba3
movabs rax, 0x1000000000000
test rax, r14
jne 0x180014ba3
movzx edx, word [rsp + 0x40]
mov rcx, qword [rbx + 0x320]
call fcn.1800173dc
test eax, eax
je 0x180007902
lea r12, [0x18008a130]
mov r14, qword [rbx + 0x360]
test r14, r14
je 0x180014c01
test byte [rbx + 0x110], 0x80
jne 0x180014c01
mov rcx, r14
call qword [sym.DNSAPI.dll_DnsNotifyResolverClusterIp]
mov eax, dword [rbx + 0x11c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x188]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbx + 0x16c]
mov r8, qword [rbx + 0xb0]
movzx edx, word [rsp + 0x40]
mov rcx, qword [rbx + 0xa0]
call r14
test eax, eax
jne 0x180030d3d
mov r14, qword [rsp + 0x50]
mov eax, r14d
bts eax, 0x1c
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
movzx r9d, word [rsp + 0x40]
mov r8, qword [rbx + 0xa0]
xor edx, edx
xor ecx, ecx
call sym.DNSAPI.dll_Dns_BuildPacket
mov r13, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x18003d700
mov rax, r14
and eax, 0x400
mov qword [rsp + 0x70], rax
setne al
mov byte [r13 + 0x255], al
bt r14, 0x18
jb 0x18003d70a
xor eax, eax
mov byte [r13 + 0x256], al
mov rcx, r13
call fcn.180014fa0
lock inc dword [0x18008a014]
lea rcx, [r13 + 0x1e0]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_InitializeCriticalSection]
jmp 0x180014c8c
mov dword [r13 + 0x208], esi
movzx edx, word [rsp + 0x40]
mov rcx, r13
call fcn.180014f30
mov ecx, 0x1b0
call fcn.180008d40
mov r14, rax
test rax, rax
je 0x18003d711
mov rcx, rax
call fcn.180012638
test r15d, r15d
jne 0x18000c408
mov qword [rbx + 0x2e8], r14
mov eax, dword [rbx + 0x118]
mov dword [r13 + 0x240], eax
mov rax, qword [rbx + 0x160]
mov qword [r13 + 0xb0], rax
cmp dword [rbx + 0x168], 0
jne 0x18003d71b
xor eax, eax
mov dword [r13 + 0xc0], eax
mov eax, dword [rbx + 0x11c]
mov dword [r13 + 0xac], eax
mov qword [r14 + 0x30], r13
xor r13d, r13d
mov rax, qword [rbx + 0x328]
mov qword [r14 + 0x28], rax
mov rax, qword [rsp + 0x50]
mov qword [r14 + 0x40], rax
and eax, 0x200
mov dword [r14 + 0x48], eax
mov dword [r14 + 0x4c], esi
mov qword [r14 + 0x138], rbx
lea rax, [fcn.180013da0]
mov qword [r14 + 0x140], rax
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount64]
mov qword [r14 + 0x148], rax
mov r8d, esi
lock xadd dword [rbx], r8d
inc r8d
cmp r8d, 1
je 0x180051a40
inc byte [rbx + 8]
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180014d87
test dword [rcx + 0x1c], 0x400
jne 0x180051a50
cmp dword [rbx + 0x16c], r13d
je 0x180034b95
mov dword [r14 + 0x128], esi
prefetchw byte [rbx + 0x268]
mov eax, dword [rbx + 0x268]
mov ecx, eax
bts ecx, 0xf
lock cmpxchg dword [rbx + 0x268], ecx
jne 0x180014da8
bt eax, 0xc
jb 0x180051a89
mov rcx, qword [rbx + 0x320]
call fcn.180011ad0
mov qword [r14 + 0x20], rax
test rax, rax
je 0x180051af6
test r15d, r15d
jne 0x18000c414
mov dword [rbx + 0x2fc], esi
lea rdx, [0x180021ec0]
mov rcx, qword [0x18008abf8]
call qword [sym.imp.ntdll.dll_EtwEventEnabled]
test al, al
jne 0x180051b58
cmp qword [rsp + 0x70], r13
jne 0x180014ea8
mov rax, qword [rsp + 0x50]
test al, 2
jne 0x180014ea8
movabs rcx, 0x2000000000000
test rcx, rax
jne 0x180014ea8
mov rax, qword [rbx + 0x320]
test rax, rax
je 0x180014ea8
cmp dword [rax + 0x44], r13d
je 0x180014ea8
cmp dword [0x18008a3e4], r13d
jne 0x180014ea8
mov qword [rsp + 0x58], r14
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
mov r9d, dword [rbx + 0x11c]
mov r8d, dword [rax + 0x90]
movzx edx, word [rsp + 0x40]
mov rcx, qword [rbx + 0xa0]
call fcn.180016f2c
mov edi, eax
test eax, eax
jne 0x180051b90
lea rax, [fcn.1800171d0]
mov qword [r14 + 0x140], rax
mov r12, qword [rsp + 0x58]
cmp r12, r14
jne 0x18002521f
lea r12, [0x18008a130]
lock xadd dword [rbx], esi
inc esi
cmp esi, 1
je 0x180051bea
inc byte [rbx + 0x17]
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180014ed3
test dword [rcx + 0x1c], 0x400
jne 0x180051bfa
lea rsi, [0x180021ed0]
test r13d, r13d
jne 0x180014f02
mov rcx, r14
call fcn.180015238
mov edi, eax
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180014f02
test dword [rcx + 0x1c], 0x400
jne 0x180051c32
lea rcx, [rbx + 0x60]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_LeaveCriticalSection]
mov r9d, reloc.WS2_32.dll_send
mov r8d, 0xe58
mov rdx, rsi
mov rcx, rbx
call sym.DNSAPI.dll_DeRefQueryBlobEx
nop
jmp 0x18000797c
mov r13d, esi
mov rcx, r12
call fcn.180012638
test r15d, r15d
jne 0x180051b84
mov qword [rbx + 0x2e8], r12
mov rcx, r14
call fcn.1800125e0
xor r14d, r14d
lea r12, [0x18008a130]
jmp 0x180014ea8
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180030d56
test dword [rcx + 0x1c], 0x4000
jne 0x180051a25
mov edi, 0x5b4
mov dword [rbx + 0x18c], edi
jmp 0x18000792d
cmp qword [rbx + 0x350], r13
je 0x180014d94
cmp dword [rbx + 0x11c], r13d
jne 0x180014d94
jmp 0x180034bb2
mov dword [r14 + 0x128], r13d
jmp 0x180014d9b
jmp 0x18000792d
mov edi, reloc.WS2_32.dll_ntohl
jmp 0x18000792d
mov eax, esi
jmp 0x180014c66
mov edi, reloc.WS2_32.dll_ntohl
jmp 0x18000792d
mov eax, esi
jmp 0x180014cf8
mov edx, 0x4b
mov r9, rbx
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.18005b42c
nop
jmp 0x180007861
mov edx, eax
lea rcx, [0x180051cb0]
jmp 0x180051c6b
mov edx, eax
lea rcx, [0x180051cd8]
jmp 0x180051c6b
mov edx, 0x4c
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.180058818
nop
jmp 0x180007922
mov edx, 0x4d
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.180058818
nop
jmp 0x180030d56
lea rax, [rbx + 0x30]
mov qword [rbx + 0x38], rax
mov qword [rax], rax
jmp 0x180014d6b
mov edx, send
mov dword [rsp + 0x38], r8d
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0xdd4
lea rax, [0x180021ed0]
mov qword [rsp + 0x20], rax
lea r9, [0x180082118]
mov rcx, qword [rcx + 0x10]
call fcn.18005e904
nop
jmp 0x180014d87
lock and dword [rbx + 0x268], 0xffff7fff
mov edx, r15d
mov rcx, rbx
call fcn.18005dd54
mov rcx, r14
call fcn.1800125e0
mov r9d, 4
mov r8d, 0xdf4
lea rdx, [0x180021ed0]
mov rcx, rbx
call sym.DNSAPI.dll_DeRefQueryBlobEx
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180051aec
test dword [rcx + 0x1c], 0x400
je 0x180051aec
mov edx, 0x4e
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.180058818
mov edi, 0x4c7
jmp 0x180051c62
mov edx, r15d
mov rcx, rbx
call fcn.18005dd54
mov rcx, r14
call fcn.1800125e0
mov r9d, 4
mov r8d, 0xe00
lea rdx, [0x180021ed0]
mov rcx, rbx
call sym.DNSAPI.dll_DeRefQueryBlobEx
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180051b4e
test dword [rcx + 0x1c], 0x400
je 0x180051b4e
mov edx, 0x4f
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.180058818
mov edi, reloc.WS2_32.dll_ntohl
jmp 0x180051c62
movzx r9d, word [rsp + 0x40]
mov eax, dword [rbx + 0x188]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0x11c]
mov dword [rsp + 0x20], eax
mov r8, qword [rbx + 0xa0]
call fcn.18005e4bc
nop
jmp 0x180014e06
mov qword [rbx + 0x2f0], r12
jmp 0x18002523a
mov rcx, qword [0x18008a130]
cmp rcx, r12
je 0x180051bbd
test dword [rcx + 0x1c], 0x100
je 0x180051bbd
mov edx, 0x50
mov r9d, eax
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.180058fb0
mov rcx, r14
call fcn.1800125e0
mov r9d, 4
mov r8d, 0xe2b
lea rdx, [0x180021ed0]
mov rcx, rbx
call sym.DNSAPI.dll_DeRefQueryBlobEx
mov edi, reloc.WS2_32.dll_ntohl
jmp 0x18000792d
lea rax, [rbx + 0x30]
mov qword [rbx + 0x38], rax
mov qword [rax], rax
jmp 0x180014eb7
mov edx, send
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0xe48
lea rsi, [0x180021ed0]
mov qword [rsp + 0x20], rsi
mov r9, qword [0x1800821d8]
mov rcx, qword [rcx + 0x10]
call fcn.18005e904
nop
jmp 0x180014eda
mov edx, 0x51
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], 0
mov r9, r14
lea r8, [0x18001fc20]
mov rcx, qword [rcx + 0x10]
call fcn.18005c7ec
nop
jmp 0x180014f02
mov edx, edi
lea rcx, [0x180082118]
call fcn.18000f00c
nop
jmp 0x18000792d
mov rcx, r13
call fcn.180013568
nop
jmp 0x180007940
mov ecx, edi
call fcn.18002e808
mov r9, rax
mov edx, 0x52
mov dword [rsp + 0x20], edi
lea r8, [0x18001fc20]
mov rcx, qword [r10 + 0x10]
call fcn.18005bb08
nop
jmp 0x18000797c