Function at 0x1400a9bd0
Capabilities:
Set socket configuration

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3a8
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
movzx eax, byte [rdx + 0x251]
test eax, eax
je 0x1400a9c13
cmp eax, 3
jne 0x1400aa5aa
mov r8, qword [rsi + 0x240]
mov rax, qword [rsi + 0x248]
jmp 0x1400a9e87
movups xmm0, xmmword [rsi + 0x70]
movups xmmword [rsi + 0x148], xmm0
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rsi + 0x138], xmm0
movups xmm0, xmmword [rsi + 0x50]
movups xmmword [rsi + 0x128], xmm0
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rsi + 0x118], xmm0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0x20]
movups xmm3, xmmword [rsi + 0x30]
movups xmmword [rsi + 0x108], xmm3
movups xmmword [rsi + 0xf8], xmm2
movups xmmword [rsi + 0xe8], xmm1
movups xmmword [rsi + 0xd8], xmm0
movups xmm0, xmmword [rsi + 0x80]
movups xmmword [rsi + 0x158], xmm0
movups xmm0, xmmword [rsi + 0x90]
movups xmmword [rsi + 0x168], xmm0
movups xmm0, xmmword [rsi + 0xa0]
movups xmmword [rsi + 0x178], xmm0
movups xmm0, xmmword [rsi + 0xb0]
movups xmmword [rsi + 0x188], xmm0
movups xmm0, xmmword [rsi + 0xc0]
movups xmmword [rsi + 0x198], xmm0
mov rax, qword [rsi + 0xd0]
mov qword [rsi + 0x1a8], rax
movzx eax, byte [rsi + 0x250]
mov byte [rsi + 0x252], al
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0xf8]
movups xmmword [rsi + 0x1b0], xmm2
mov rax, qword [rsi + 0x108]
mov qword [rsi + 0x1c0], rax
movups xmmword [rsi + 0x1c8], xmm0
movups xmmword [rsi + 0x1d8], xmm1
mov rax, qword [rsi + 0x1b0]
lock inc qword [rax]
jle 0x1400aa5aa
mov rcx, qword [rsi + 0x1b8]
mov rdx, qword [rsi + 0x1c0]
lock inc qword [rcx]
jle 0x1400aa5aa
lea r14, [rsi + 0x158]
lea r12, [rsi + 0x1e8]
mov qword [rsi + 0x1e8], rax
mov qword [rsi + 0x1f0], rcx
mov qword [rsi + 0x1f8], rdx
cmp byte [rsi + 0x151], 0
je 0x1400a9d75
lea rax, [rsi + 0x1c8]
cmp qword [rax], 0
je 0x1400a9dc5
mov rcx, qword [rsi + 0x1d0]
call sub.crypt32.dll_CertDuplicateCertificateContext
mov r15, rax
mov r13d, 1
jmp 0x1400a9dc8
cmp byte [r14], 0
je 0x1400a9d51
lea rdx, [0x1401b5168]
mov rcx, r14
call fcn.14001ec90
test al, al
je 0x1400a9d51
mov rcx, qword [r12]
xor edx, edx
mov eax, 1
lock cmpxchg qword [rcx], rdx
jne 0x1400aa357
mov r13, qword [r12]
mov rax, qword [r13 + 8]
cmp rax, 1
jne 0x1400aa4bb
mov qword [r13], 1
mov byte [r13 + 0x77], 1
jmp 0x1400a9d51
xor r13d, r13d
mov rcx, qword [rsi + 0x1d8]
call sub.crypt32.dll_CertDuplicateStore
movzx edx, word [rsi + 0x1e4]
lea rcx, [rsi + 0x200]
movups xmm0, xmmword [r12]
movups xmmword [rsi + 0x220], xmm0
mov r8, qword [r12 + 0x10]
mov qword [rsi + 0x230], r8
mov qword [rsi + 0x200], r13
mov qword [rsi + 0x208], r15
mov qword [rsi + 0x210], rax
mov eax, dword [rsi + 0x1e0]
mov dword [rsi + 0x218], eax
mov word [rsi + 0x21c], dx
mov byte [rsi + 0x238], 0
mov rax, qword [r14 + 0x50]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [r14 + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmm2, xmmword [r14 + 0x20]
movups xmm3, xmmword [r14 + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmmword [rsp + 0x60], xmm2
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
call fcn.1400b4360
mov r8, rax
mov rax, rdx
mov qword [rsi + 0x240], r8
mov qword [rsi + 0x248], rdx
lea rcx, [rsp + 0x40]
mov rdx, r8
mov r8, rbx
call qword [rax + 0x18]
mov r12, qword [rsp + 0x40]
cmp r12, 4
jne 0x1400a9eab
mov byte [rdi + 0x11], 3
mov al, 3
jmp 0x1400aa13f
mov rbx, qword [rsp + 0x48]
mov r15, qword [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x298]
mov r8d, 0x110
call sub.msvcrt.dll_memcpy
mov r14, qword [rsi + 0x240]
mov r13, qword [rsi + 0x248]
mov rcx, r14
call qword [r13]
cmp qword [r13 + 8], 0
je 0x1400a9f05
cmp qword [r13 + 0x10], 0x11
jb 0x1400a9ef4
mov r14, qword [r14 - 8]
mov rcx, qword [0x1401ee100]
xor edx, edx
mov r8, r14
call fcn.140104a84
cmp r12d, 2
je 0x1400a9fcb
cmp r12d, 3
jne 0x1400aa159
mov rax, qword [rsi + 0x220]
lock dec qword [rax]
je 0x1400aa478
mov rax, qword [rsi + 0x228]
lock dec qword [rax]
je 0x1400aa495
cmp qword [rsi + 0x200], 0
je 0x1400a9f51
mov rcx, qword [rsi + 0x208]
call sub.crypt32.dll_CertFreeCertificateContext
mov rcx, qword [rsi + 0x210]
xor edx, edx
call sub.crypt32.dll_CertCloseStore
cmp qword [rsi + 0x1c8], 0
je 0x1400a9f75
mov rcx, qword [rsi + 0x1d0]
call sub.crypt32.dll_CertFreeCertificateContext
mov rcx, qword [rsi + 0x1d8]
xor edx, edx
call sub.crypt32.dll_CertCloseStore
mov rax, qword [rsi + 0x1b0]
lock dec qword [rax]
je 0x1400aa2f5
mov rax, qword [rsi + 0x1b8]
lock dec qword [rax]
je 0x1400aa312
mov rax, qword [rsi + 0x148]
lock dec qword [rax]
je 0x1400aa336
mov bpl, 2
cmp byte [rsi + 0x140], 2
jne 0x1400aa10f
jmp 0x1400aa12e
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x298]
mov r8d, 0x110
call sub.msvcrt.dll_memcpy
movzx eax, byte [0x1401ee110]
mov rcx, qword [0x1401ee100]
test rcx, rcx
jne 0x1400aa00e
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400aa5aa
mov rcx, rax
mov qword [0x1401ee100], rax
mov r8d, 0x128
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400aa5aa
mov r14, rax
mov qword [rax], 2
mov qword [rax + 8], rbx
mov qword [rax + 0x10], r15
mov rcx, rax
add rcx, 0x18
lea rdx, [rsp + 0x40]
mov r8d, 0x110
call sub.msvcrt.dll_memcpy
movzx r12d, byte [rsi + 0x252]
lea r15, [0x1401b30c0]
xor ebp, ebp
mov rbx, r14
mov rax, qword [rsi + 0x220]
lock dec qword [rax]
jne 0x1400aa07a
mov rcx, qword [rsi + 0x220]
call fcn.1400264b0
mov rax, qword [rsi + 0x228]
lock dec qword [rax]
je 0x1400aa270
cmp qword [rsi + 0x200], 0
je 0x1400aa0a1
mov rcx, qword [rsi + 0x208]
call sub.crypt32.dll_CertFreeCertificateContext
mov rcx, qword [rsi + 0x210]
xor edx, edx
call sub.crypt32.dll_CertCloseStore
cmp qword [rsi + 0x1c8], 0
je 0x1400aa0c5
mov rcx, qword [rsi + 0x1d0]
call sub.crypt32.dll_CertFreeCertificateContext
mov rcx, qword [rsi + 0x1d8]
xor edx, edx
call sub.crypt32.dll_CertCloseStore
mov rax, qword [rsi + 0x1b0]
lock dec qword [rax]
je 0x1400aa296
mov rax, qword [rsi + 0x1b8]
lock dec qword [rax]
je 0x1400aa2b3
mov rax, qword [rsi + 0x148]
lock dec qword [rax]
je 0x1400aa2d7
cmp byte [rsi + 0x140], 2
je 0x1400aa12e
lea rcx, [rsi + 0x138]
mov rax, qword [rsi + 0x120]
mov rdx, qword [rsi + 0x128]
mov r8, qword [rsi + 0x130]
call qword [rax + 0x10]
mov qword [rdi], rbx
mov qword [rdi + 8], r15
mov byte [rdi + 0x10], r12b
mov byte [rdi + 0x11], bpl
mov al, 1
mov byte [rsi + 0x251], al
add rsp, 0x3a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], rbx
mov qword [rsp + 0x180], r15
lea rcx, [rsp + 0x188]
lea rdx, [rsp + 0x298]
mov r8d, 0x110
call sub.msvcrt.dll_memcpy
cmp byte [rsi + 0x151], 0
jne 0x1400aa1d5
mov rcx, qword [rsp + 0x198]
cmp rcx, 0xffffffffffffffff
je 0x1400aa5aa
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x40]
mov edx, 6
mov r8d, 1
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x1400aa3fc
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x170]
mov r8d, 0x128
call sub.msvcrt.dll_memcpy
movzx eax, byte [0x1401ee110]
mov rcx, qword [0x1401ee100]
test rcx, rcx
jne 0x1400aa218
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400aa5aa
mov rcx, rax
mov qword [0x1401ee100], rax
mov r8d, 0x128
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400aa5aa
mov rbx, rax
lea rdx, [rsp + 0x40]
mov r8d, 0x128
mov rcx, rax
call sub.msvcrt.dll_memcpy
movzx ebp, byte [rsi + 0x152]
movzx r12d, byte [rsi + 0x252]
lea r15, [0x1401b2fa0]
mov rax, qword [rsi + 0x220]
lock dec qword [rax]
je 0x1400aa06e
jmp 0x1400aa07a
mov rcx, qword [rsi + 0x228]
mov rdx, qword [rsi + 0x230]
call fcn.1400171b0
cmp qword [rsi + 0x200], 0
jne 0x1400aa095
jmp 0x1400aa0a1
mov rcx, qword [rsi + 0x1b0]
call fcn.1400264b0
mov rax, qword [rsi + 0x1b8]
lock dec qword [rax]
jne 0x1400aa0f5
mov rcx, qword [rsi + 0x1b8]
mov rdx, qword [rsi + 0x1c0]
call fcn.1400171b0
mov rax, qword [rsi + 0x148]
lock dec qword [rax]
jne 0x1400aa106
mov rcx, qword [rsi + 0x148]
call fcn.1400bbc90
cmp byte [rsi + 0x140], 2
jne 0x1400aa10f
jmp 0x1400aa12e
mov rcx, qword [rsi + 0x1b0]
call fcn.1400264b0
mov rax, qword [rsi + 0x1b8]
lock dec qword [rax]
jne 0x1400a9fa5
mov rcx, qword [rsi + 0x1b8]
mov rdx, qword [rsi + 0x1c0]
call fcn.1400171b0
mov rax, qword [rsi + 0x148]
lock dec qword [rax]
jne 0x1400a9fb6
mov rcx, qword [rsi + 0x148]
call fcn.1400bbc90
mov bpl, 2
cmp byte [rsi + 0x140], 2
jne 0x1400aa10f
jmp 0x1400aa12e
movzx eax, byte [0x1401ee110]
mov rcx, qword [0x1401ee100]
test rcx, rcx
jne 0x1400aa382
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400aa5aa
mov rcx, rax
mov qword [0x1401ee100], rax
mov r8d, pe_nt_image_headers64
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400aa5aa
mov r15, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov rax, qword [r12]
mov r10d, dword [rax + 0x38]
mov rdx, qword [rax + 0x30]
movzx r9d, byte [rax + 0x60]
mov r11d, dword [rax + 0x48]
mov r8, qword [rax + 0x40]
mov r13d, dword [rax + 0x58]
mov rcx, qword [rax + 0x50]
mov qword [rsp + 0x30], rcx
movzx ecx, byte [rax + 0x61]
mov ebp, dword [rax + 0x62]
cmp byte [rax + 0x66], 0
mov dword [rsp + 0x2c], ebp
mov qword [rsp + 0x38], r8
mov ebp, ecx
je 0x1400aa51f
movups xmm0, xmmword [rax + 0x67]
movaps xmmword [rsp + 0x40], xmm0
mov cl, 1
jmp 0x1400aa521
call sub.ws2_32.dll_WSAGetLastError
mov r14d, eax
movzx eax, byte [0x1401ee110]
mov rcx, qword [0x1401ee100]
test rcx, rcx
jne 0x1400aa42f
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400aa5aa
mov rcx, rax
mov qword [0x1401ee100], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400aa5aa
mov rbx, rax
shl r14, 0x20
or r14, 2
mov qword [rax], r14
lea rcx, [rsp + 0x170]
call fcn.1400aa5b0
lea r15, [0x1401b3b00]
mov rax, qword [rsi + 0x220]
lock dec qword [rax]
jne 0x1400a9f2a
mov rcx, qword [rsi + 0x220]
call fcn.1400264b0
mov rax, qword [rsi + 0x228]
lock dec qword [rax]
jne 0x1400a9f3b
mov rcx, qword [rsi + 0x228]
mov rdx, qword [rsi + 0x230]
call fcn.1400171b0
cmp qword [rsi + 0x200], 0
jne 0x1400a9f45
jmp 0x1400a9f51
mov qword [rsp + 0x40], r13
call fcn.1400ba150
mov r15, rax
movups xmm0, xmmword [r13 + 0x10]
movups xmm1, xmmword [r13 + 0x20]
movups xmm2, xmmword [r13 + 0x30]
movups xmm3, xmmword [r13 + 0x40]
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x40], xmm3
movups xmm0, xmmword [r13 + 0x50]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [r13 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm0, xmmword [r13 + 0x70]
movups xmmword [rax + 0x70], xmm0
mov qword [r12], rax
lea rcx, [rsp + 0x40]
call fcn.1400bc630
mov byte [r15 + 0x77], 1
jmp 0x1400a9d51
xor ecx, ecx
movzx r8d, word [rax + 0x77]
movups xmm0, xmmword [rax + 0x10]
movups xmm1, xmmword [rax + 0x20]
movaps xmm2, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x170], xmm2
movups xmmword [r15 + 0x10], xmm0
movups xmmword [r15 + 0x20], xmm1
mov qword [r15 + 0x30], rdx
mov dword [r15 + 0x38], r10d
mov rdx, qword [rsp + 0x38]
mov qword [r15 + 0x40], rdx
mov dword [r15 + 0x48], r11d
mov rdx, qword [rsp + 0x30]
mov qword [r15 + 0x50], rdx
mov dword [r15 + 0x58], r13d
mov byte [r15 + 0x60], r9b
mov byte [r15 + 0x61], bpl
mov edx, dword [rsp + 0x2c]
mov dword [r15 + 0x62], edx
mov byte [r15 + 0x66], cl
movaps xmm0, xmmword [rsp + 0x170]
movups xmmword [r15 + 0x67], xmm0
mov word [r15 + 0x77], r8w
lock dec qword [rax]
jne 0x1400aa59c
mov rcx, qword [r12]
call fcn.1400264b0
mov qword [r12], r15
mov byte [r15 + 0x77], 1
jmp 0x1400a9d51
ud2