Function at 0x18009c290
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x48
mov qword [rsp + 0x40], rbx
mov r8, rdx
mov qword [rsp + 0x30], rsi
lea rbx, [0x1801712b0]
mov qword [rsp + 0x28], rdi
xor dl, dl
mov qword [rsp + 0x20], r12
lea rdi, [0x180000000]
mov qword [rsp + 8], r15
xor r12b, r12b
xor eax, eax
mov byte [rsp + 0x68], dl
mov qword [r8 + 1], rax
mov r9, rcx
mov qword [r8 + 9], rax
mov r11b, reloc.WS2_32.dll_recv
mov qword [r8 + 0x11], rax
mov qword [r8 + 0x19], rax
mov dword [rsp + 0x60], r12d
nop dword [rax]
movzx r10d, byte [r9]
inc r9
lea eax, [r10 - 0x26]
cmp eax, 0xcd
ja case.0x18009c316.44
cdqe
movzx eax, byte [rdi + rax + 0x9c978]
mov ecx, dword [rdi + rax*4 + 0x9c95c]
add rcx, rdi
jmp rcx
mov byte [r8 + 1], r10b
mov al, 4
jmp 0x18009c346
mov byte [r8 + 1], r10b
mov al, 2
jmp 0x18009c346
mov byte [r8 + 2], r10b
mov al, reloc.WLDAP32.dll_Ordinal_32
jmp 0x18009c346
mov byte [r8 + 3], r10b
mov al, 0x40
jmp 0x18009c346
mov byte [r8 + 4], r10b
mov al, 8
jmp 0x18009c346
mov byte [r8 + 5], r10b
mov al, reloc.WS2_32.dll_recv
or dl, al
add r11b, 0xff
jne 0x18009c2f0
movzx eax, dl
mov edi, 1
mov qword [rsp + 0x38], rbp
mov ecx, edi
movzx r11d, dl
shl r11d, 0x17
test dl, dl
mov qword [rsp + 0x18], r13
mov qword [rsp + 0x10], r14
cmovne ecx, eax
mov dword [r8 + 0x21], r11d
movzx eax, r10b
and al, 0xf0
cmp al, 0x40
jne 0x18009c3ec
bts r11d, 0x1e
movzx eax, r10b
shr al, 3
and al, dil
mov dword [r8 + 0x21], r11d
mov byte [r8 + 7], al
je 0x18009c3b0
movzx eax, byte [r9]
and al, 0xf8
movzx r12d, r12b
cmp al, 0xb8
cmove r12d, edi
mov dword [rsp + 0x60], r12d
movzx eax, r10b
shr al, 2
and al, dil
mov byte [r8 + 8], al
movzx eax, r10b
shr al, 1
and r10b, dil
and al, dil
mov byte [r8 + 0xa], r10b
movzx r10d, byte [r9]
inc r9
mov byte [r8 + 9], al
movzx eax, r10b
and al, 0xf0
cmp al, 0x40
jne 0x18009c3ec
movzx r14d, r10b
movzx edi, cl
jmp 0x18009c452
mov byte [r8 + 0xb], r10b
movzx edi, cl
cmp r10b, 0xf
jne 0x18009c40d
movzx r10d, byte [r9]
lea rbx, [0x1801712fa]
mov byte [r8 + 0xc], r10b
inc r9
jmp 0x18009c430
cmp r10b, 0xa0
jb 0x18009c430
cmp r10b, 0xa3
ja 0x18009c430
inc r12b
mov dword [rsp + 0x60], r12d
test cl, 0x10
je 0x18009c42c
or dil, 8
jmp 0x18009c430
and dil, 0xf7
movzx edx, r10b
movzx r14d, r10b
mov eax, edx
and edx, 3
shr rax, 2
movzx eax, byte [rax + rbx]
add rax, rbx
movzx esi, byte [rdx + rax]
cmp sil, 0xff
jne 0x18009c477
or r11d, 0x3000
movzx eax, r10b
and eax, 0xfffffffd
mov dword [r8 + 0x21], r11d
xor sil, sil
cmp al, 0x24
jne 0x18009c477
mov sil, 1
movzx r13d, r10b
xor bpl, bpl
jmp 0x18009c495
xor bpl, bpl
movzx r13d, r10b
test sil, sil
jns 0x18009c495
movzx eax, sil
and eax, 0x7f
movzx esi, word [rax + rbx]
movzx ebp, si
shr bp, 8
movzx r15d, byte [r8 + 0xc]
mov ebx, r11d
test r15b, r15b
je 0x18009c4d6
movzx edx, r10b
lea r10, [0x1801712b0]
mov eax, edx
and edx, 3
shr rax, 2
movzx ecx, byte [rax + r10 + 0x13c]
add rcx, rdx
test byte [rcx + r10 + 0x13c], dil
je 0x18009c4d6
or ebx, 0x3000
mov dword [r8 + 0x21], ebx
test sil, 1
je 0x18009c839
movzx r11d, byte [r9]
or ebx, 1
movzx r12d, r11b
mov byte [r8 + 0xd], r11b
movzx ecx, r11b
shr r12b, 6
and cl, 7
shr r11b, 3
and r11b, 7
mov dword [r8 + 0x21], ebx
mov byte [r8 + 0xe], r12b
mov r10d, ebx
mov byte [rsp + 0x58], cl
mov byte [r8 + 0x10], cl
mov byte [r8 + 0xf], r11b
test bpl, bpl
je 0x18009c53c
movzx ecx, r11b
movzx eax, bpl
shl eax, cl
movzx ecx, byte [rsp + 0x58]
test al, al
jns 0x18009c53c
or r10d, 0x3000
mov dword [r8 + 0x21], r10d
mov eax, r10d
test r15b, r15b
jne 0x18009c59b
cmp r14b, 0xd9
jb 0x18009c59b
cmp r14b, 0xdf
ja 0x18009c59b
lea eax, [r14 + 0x27]
movzx edx, al
cmp r12b, 3
jne 0x18009c576
movzx eax, r11b
lea rdx, [rax + rdx*8]
lea rax, [0x1801712b0]
movzx edx, byte [rdx + rax + 0x104]
jmp 0x18009c589
lea rax, [0x1801712b0]
movzx ecx, r11b
movzx edx, byte [rdx + rax + 0xfd]
shl dl, cl
mov eax, r10d
test dl, dl
jns 0x18009c59b
or eax, 0x3000
mov dword [r8 + 0x21], eax
test dil, 0x20
je 0x18009c605
cmp r12b, 3
jne 0x18009c5b2
or eax, 0x9000
mov dword [r8 + 0x21], eax
jmp 0x18009c605
movzx edx, r14b
test r15b, r15b
jne 0x18009c5ce
and dl, 0xfe
lea r10, [0x180171476]
lea rcx, [0x18017145e]
jmp 0x18009c5e0
lea r10, [0x180171488]
lea rcx, [0x180171476]
nop dword [rax]
cmp byte [rcx], dl
je 0x18009c5ef
add rcx, 2
cmp rcx, r10
jne 0x18009c5e0
jmp 0x18009c5fd
movzx eax, byte [rcx + 1]
movzx ecx, r11b
shl eax, cl
test al, al
jns 0x18009c605
or dword [r8 + 0x21], 0x9000
movzx ecx, r13b
mov edx, ecx
test r15b, r15b
je 0x18009c654
sub edx, 0x20
je 0x18009c638
sub edx, 1
je 0x18009c624
sub edx, 1
je 0x18009c638
cmp edx, 1
jne 0x18009c665
lea eax, [r11 - 4]
mov r12b, 3
cmp al, 1
ja 0x18009c6f8
jmp 0x18009c6f0
mov r12b, 3
cmp r11b, 4
ja 0x18009c6f0
cmp r11b, 1
jne 0x18009c6f8
jmp 0x18009c6f0
sub edx, 0x8c
je 0x18009c6ea
cmp edx, 2
je 0x18009c6e4
cmp r12b, 3
jne 0x18009c6b6
test r15b, r15b
je 0x18009c680
lea rdx, [0x1801714c1]
lea rcx, [0x180171497]
jmp 0x18009c690
lea rdx, [0x180171497]
lea rcx, [0x180171488]
nop
cmp byte [rcx], r14b
je 0x18009c6a0
add rcx, 3
cmp rcx, rdx
jne 0x18009c690
jmp 0x18009c6f8
test byte [rcx + 1], dil
je 0x18009c6f8
movzx eax, byte [rcx + 2]
movzx ecx, r11b
shl eax, cl
test al, al
jns 0x18009c6f0
jmp 0x18009c6f8
test r15b, r15b
je 0x18009c6f8
sub ecx, 0x50
je 0x18009c6d4
sub ecx, 0x75
je 0x18009c6f0
sub ecx, 0x11
je 0x18009c6dc
sub ecx, 1
je 0x18009c6d4
cmp ecx, 0x20
jne 0x18009c6f8
test dil, 9
jne 0x18009c6f0
jmp 0x18009c6f8
test dil, 6
jne 0x18009c6f0
jmp 0x18009c6f8
cmp r11b, 1
je 0x18009c6f0
cmp r11b, 5
jbe 0x18009c6f8
or dword [r8 + 0x21], 0x11000
movzx edx, byte [r9 + 1]
add r9, 2
cmp r11b, 1
ja 0x18009c71d
cmp r14b, 0xf6
jne 0x18009c713
or sil, 2
jmp 0x18009c71d
cmp r14b, 0xf7
jne 0x18009c71d
or sil, 0x10
movzx ecx, r12b
mov r11d, 4
test r12b, r12b
je 0x18009c754
sub ecx, 1
je 0x18009c74a
cmp ecx, 1
movzx ecx, byte [rsp + 0x58]
jne 0x18009c782
mov r10b, 2
test dil, 0x10
jne 0x18009c787
movzx r10d, r11b
jmp 0x18009c787
movzx ecx, byte [rsp + 0x58]
mov r10b, 1
jmp 0x18009c787
movzx ecx, byte [rsp + 0x58]
test dil, 0x10
je 0x18009c773
cmp cl, 6
mov r10d, 2
mov eax, 0
cmovne r10d, eax
jmp 0x18009c787
movzx r10d, byte [rsp + 0x68]
cmp cl, 5
cmove r10d, r11d
jmp 0x18009c787
mov r10d, dword [rsp + 0x68]
cmp r12b, 3
je 0x18009c7cc
cmp cl, r11b
jne 0x18009c7cc
or dword [r8 + 0x21], 2
movzx eax, dl
shr al, 6
inc r9
mov byte [r8 + 0x12], al
movzx eax, dl
shr al, 3
and al, 7
mov byte [r8 + 0x11], dl
and dl, 7
mov byte [r8 + 0x13], al
mov byte [r8 + 0x14], dl
cmp dl, 5
jne 0x18009c7cc
test r12b, 1
movzx r10d, r10b
cmove r10d, r11d
dec r9
movzx ecx, r10b
sub ecx, 1
je 0x18009c81e
sub ecx, 1
je 0x18009c7ff
cmp ecx, 2
jne 0x18009c82b
mov eax, dword [r9]
or dword [r8 + 0x21], 0x100
mov r12d, dword [rsp + 0x60]
mov dword [r8 + 0x1d], eax
movzx eax, r10b
add r9, rax
jmp 0x18009c849
movzx eax, word [r9]
or dword [r8 + 0x21], 0x80
mov r12d, dword [rsp + 0x60]
mov word [r8 + 0x1d], ax
movzx eax, r10b
add r9, rax
jmp 0x18009c849
movzx eax, byte [r9]
or dword [r8 + 0x21], 0x40
mov byte [r8 + 0x1d], al
mov r12d, dword [rsp + 0x60]
movzx eax, r10b
add r9, rax
jmp 0x18009c849
test dil, 0x20
je 0x18009c849
or ebx, 0x9000
mov dword [r8 + 0x21], ebx
mov r15, qword [rsp + 8]
mov r14, qword [rsp + 0x10]
mov r13, qword [rsp + 0x18]
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
test sil, 0x10
je 0x18009c8bb
test sil, 0x40
je 0x18009c88e
test dil, 8
je 0x18009c8ef
movzx eax, word [r9]
or dword [r8 + 0x21], 0x208
mov word [r8 + 0x15], ax
add r9, 2
jmp 0x18009c91d
test r12b, r12b
je 0x18009c8a5
mov rax, qword [r9]
or dword [r8 + 0x21], 0x20
mov qword [r8 + 0x15], rax
add r9, 8
jmp 0x18009c8bb
test dil, 8
jne 0x18009c8c1
mov eax, dword [r9]
or dword [r8 + 0x21], 0x10
add r9, 4
mov dword [r8 + 0x15], eax
test sil, 4
je 0x18009c8d3
movzx eax, word [r9]
or dword [r8 + 0x21], 8
mov word [r8 + 0x15], ax
add r9, 2
test sil, 2
je 0x18009c8e9
movzx eax, byte [r9]
or dword [r8 + 0x21], 4
mov byte [r8 + 0x15], al
inc r9
test sil, 0x40
je 0x18009c904
mov eax, dword [r9]
or dword [r8 + 0x21], 0x210
add r9, 4
mov dword [r8 + 0x15], eax
jmp 0x18009c91d
test sil, 0x20
je 0x18009c91d
movzx eax, byte [r9]
or dword [r8 + 0x21], 0x204
mov byte [r8 + 0x15], al
inc r9
sub r9b, byte [rsp + 0x50]
mov r12, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov byte [r8], r9b
cmp r9b, 0xf
jbe 0x18009c950
or dword [r8 + 0x21], 0x5000
mov al, reloc.WS2_32.dll_ntohs
movzx eax, al
mov byte [r8], reloc.WS2_32.dll_ntohs
add rsp, 0x48
ret
movzx eax, r9b
add rsp, 0x48
ret