Function at 0x7ff698fd5f00
Capabilities:
Send data
Send data on socket

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x140
mov rax, qword [0x7ff69902b080]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rax, qword [rcx + 0x10]
mov rbx, rcx
mov rsi, qword [rax]
sub edx, 3
je 0x7ff698fd610c
sub edx, 2
je 0x7ff698fd609e
sub edx, 1
je 0x7ff698fd6013
cmp edx, 1
je 0x7ff698fd5f6e
lea r8, [0x7ff698ffae48]
mov rcx, rsi
lea rdx, [0x7ff698ffe8a8]
call fcn.7ff698fb05d0
mov eax, 0x47
jmp 0x7ff698fd61ff
movzx eax, word [rcx + 0x48]
lea rdx, [0x7ff698ffae10]
inc dword [rcx + 0x20]
inc eax
mov r9d, dword [rcx + 0x20]
mov rcx, rsi
movzx r8d, ax
call fcn.7ff698fb0750
mov eax, dword [rbx + 0x28]
cmp dword [rbx + 0x20], eax
jle 0x7ff698fd5fa9
mov edx, 3
mov dword [rbx + 8], 0xffffff9d
mov dword [rbx], edx
jmp 0x7ff698fd61fd
mov eax, dword [rbx + 0x150]
lea rdx, [rbx + 0xd0]
mov rcx, qword [rbx + 0x18]
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
mov rdx, qword [rbx + 0x170]
lea r8d, [r9 + 4]
call qword [sym.imp.ws2_32.dll_sendto]
test eax, eax
jns 0x7ff698fd61fd
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
mov r8d, 0x100
lea rdx, [rsp + 0x30]
mov ecx, eax
call fcn.7ff698f9a7f0
mov r8, rax
lea rdx, [0x7ff698ffe8a8]
mov rcx, rsi
call fcn.7ff698fb05d0
mov eax, 0x37
jmp 0x7ff698fd61ff
xor eax, eax
xor r9d, r9d
mov word [rcx + 0x48], ax
mov dword [rcx + 0x20], eax
mov rax, qword [rcx + 0x170]
lea r8d, [r9 + 4]
mov byte [rax], 0
mov rax, qword [rcx + 0x170]
mov byte [rax + 1], 4
movzx edx, word [rcx + 0x48]
mov rax, qword [rbx + 0x170]
movzx ecx, dx
shr cx, 8
mov byte [rax + 2], cl
lea rcx, [rbx + 0xd0]
mov rax, qword [rbx + 0x170]
mov byte [rax + 3], dl
mov eax, dword [rbx + 0x150]
mov rdx, qword [rbx + 0x170]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.ws2_32.dll_sendto]
test eax, eax
js 0x7ff698fd5fdf
mov r8d, 1
lea rcx, [rbx + 0x40]
mov dword [rbx], r8d
call qword [sym.imp.ucrtbase.dll__time64]
jmp 0x7ff698fd61fd
mov rax, qword [rcx + 0x170]
xor r9d, r9d
mov byte [rax], 0
lea r8d, [r9 + 4]
mov rax, qword [rcx + 0x170]
mov byte [rax + 1], 5
movzx edx, word [rcx + 0x48]
mov rax, qword [rbx + 0x170]
movzx ecx, dx
shr cx, 8
mov byte [rax + 2], cl
lea rcx, [rbx + 0xd0]
mov rax, qword [rbx + 0x170]
mov byte [rax + 3], dl
mov eax, dword [rbx + 0x150]
mov rdx, qword [rbx + 0x170]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.ws2_32.dll_sendto]
mov edx, 3
mov dword [rbx], edx
jmp 0x7ff698fd61fd
mov rax, qword [rcx + 0x168]
movzx ecx, word [rcx + 0x48]
movzx edi, byte [rax + 2]
movzx eax, byte [rax + 3]
shl edi, 8
or edi, eax
lea eax, [rcx + 1]
movzx r9d, ax
cmp r9d, edi
jne 0x7ff698fd6137
xor eax, eax
mov dword [rbx + 0x20], eax
jmp 0x7ff698fd6151
cmp ecx, edi
mov r8d, edi
mov rcx, rsi
jne 0x7ff698fd61f1
lea rdx, [0x7ff698ffada0]
call fcn.7ff698fb0750
mov word [rbx + 0x48], di
xor r9d, r9d
mov rax, qword [rbx + 0x170]
lea r8d, [r9 + 4]
mov byte [rax], 0
mov rax, qword [rbx + 0x170]
mov byte [rax + 1], 4
movzx edx, word [rbx + 0x48]
mov rax, qword [rbx + 0x170]
movzx ecx, dx
shr cx, 8
mov byte [rax + 2], cl
lea rcx, [rbx + 0xd0]
mov rax, qword [rbx + 0x170]
mov byte [rax + 3], dl
mov eax, dword [rbx + 0x150]
mov rdx, qword [rbx + 0x170]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbx + 0x18]
call qword [sym.imp.ws2_32.dll_sendto]
test eax, eax
js 0x7ff698fd5fdf
movsxd rcx, dword [rbx + 0x15c]
mov edx, 3
movsxd rax, dword [rbx + 0x154]
add rcx, 4
cmp rax, rcx
mov r8d, 1
lea rcx, [rbx + 0x40]
cmovge edx, r8d
mov dword [rbx], edx
call qword [sym.imp.ucrtbase.dll__time64]
jmp 0x7ff698fd61fd
lea rdx, [0x7ff698ffadd0]
call fcn.7ff698fb0750
xor eax, eax
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.7ff698fe98c0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret