Function at 0x1400612d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], r8
mov qword [r11 + 0x10], rdx
push rbx
push r13
sub rsp, 0x158
mov qword [r11 - 0x18], rbp
xor eax, eax
xor ebp, ebp
mov qword [r11 - 0x20], rsi
mov qword [r11 - 0x28], rdi
mov ebx, ebp
mov qword [r11 - 0x30], r12
mov rdi, r8
mov qword [r11 - 0x38], r14
mov r14, rcx
mov dword [rsp + 0x70], ebp
mov dword [rsp + 0x94], ebp
mov qword [rsp + 0x78], rax
mov qword [r11 - 0xa8], rax
mov r13, qword [rcx]
mov qword [rsp + 0xd8], r13
mov dword [rsp + 0x84], 0xffffffff
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x60], ebp
mov dword [rsp + 0x88], ebp
mov dword [rsp + 0x90], ebp
mov dword [rsp + 0x98], ebp
mov dword [rsp + 0x8c], ebp
mov dword [rsp + 0xa0], ebp
cmp dword [rcx + 0x30], eax
jne 0x140061992
cmp byte [r13 + 0x55], al
jne 0x140061992
mov qword [r11 - 0x40], r15
call fcn.140060f90
mov r15, rax
test rax, rax
je 0x14006197d
mov rax, qword [r14]
mov edx, ebp
test dword [rax + 0x2c], 0x1000000
je 0x1400613a2
mov rdx, r15
mov rcx, r14
call fcn.140081770
mov rdx, rax
mov rcx, rdx
test rdx, rdx
je 0x1400613c5
nop word [rax + rax]
cmp byte [rcx + 0x10], 0x6d
jne 0x1400613bc
movzx eax, byte [rcx + 0x11]
or ebx, eax
mov rcx, qword [rcx + 0x40]
test rcx, rcx
jne 0x1400613b0
mov rsi, qword [r15 + 0x18]
test ebx, ebx
mov rdi, rbp
mov qword [rsp + 0xb8], rsi
cmovne rdi, rdx
mov ebx, 1
mov qword [rsp + 0xe0], rdi
test rdi, rdi
jne 0x140061423
mov rax, qword [r14]
test dword [rax + 0x2c], 0x80000
je 0x140061421
mov rcx, qword [r15 + 0x70]
lea r8, [rsp + 0x170]
mov rdx, qword [r15]
add rcx, 0x50
call fcn.140016bd0
test rax, rax
je 0x14006141b
cmp qword [rax + 0x10], rbp
jne 0x140061423
cmp qword [r15 + 0x20], rbp
jne 0x140061423
mov ebx, ebp
mov rdx, r15
mov rcx, r14
call fcn.14005b870
test eax, eax
jne 0x140061f00
mov r8d, ebp
test rdi, rdi
mov rdx, r15
mov rcx, r14
setne r8b
call fcn.140061070
test eax, eax
jne 0x140061f00
mov rdx, qword [r15 + 0x70]
mov rcx, r13
call fcn.140074140
mov r8, qword [r15]
xor r9d, r9d
movsxd rdi, eax
mov rax, qword [r13 + 0x20]
mov rcx, rdi
shl rcx, 5
lea edx, [r9 + 9]
mov rcx, qword [rcx + rax]
mov qword [rsp + 0x20], rcx
mov rcx, r14
call fcn.1400576d0
mov ebp, eax
cmp eax, 1
je 0x140061970
mov r12d, dword [r14 + 0x34]
xor edx, edx
mov rax, qword [rsp + 0x178]
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x9c], edx
mov dword [rax + 0x50], r12d
inc dword [r14 + 0x34]
mov rax, qword [r15 + 0x10]
mov ecx, dword [r14 + 0x34]
test rax, rax
je 0x1400614e8
nop word [rax + rax]
inc ecx
inc edx
mov dword [r14 + 0x34], ecx
mov rax, qword [rax + 0x28]
test rax, rax
jne 0x1400614d0
mov dword [rsp + 0x9c], edx
test rsi, rsi
je 0x14006150b
mov rax, qword [r14 + 0x210]
mov qword [rsp + 0x78], rax
mov rax, qword [r15]
mov qword [r14 + 0x210], rax
mov qword [rsp + 0xc0], r14
mov rsi, qword [r14 + 0x10]
test rsi, rsi
jne 0x140061528
mov rcx, r14
call fcn.140078ba0
mov rsi, rax
test rax, rax
je 0x140061970
cmp byte [r14 + 0x1e], 0
jne 0x140061536
or dword [rsi + 0xc0], 0x10
mov r8d, edi
mov edx, 1
mov rcx, r14
call fcn.14005f6d0
cmp qword [rsp + 0xb8], 0
je 0x140061574
mov r8, qword [rsp + 0x180]
mov r9d, r12d
mov rdx, r15
mov rcx, r14
call fcn.140061110
mov dword [rsp + 0x94], r12d
mov dword [rsp + 0x70], r12d
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0xe8]
xor eax, eax
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0xf0], rax
call fcn.140049b10
test eax, eax
jne 0x140061970
test byte [r13 + 0x2c], 0x80
je 0x1400615fb
inc dword [r14 + 0x38]
xor r8d, r8d
mov eax, dword [r14 + 0x38]
mov rcx, rsi
mov r9d, eax
mov dword [rsp + 0x84], eax
lea edx, [r8 + 0x38]
call fcn.140033af0
test ebp, ebp
jne 0x140061742
cmp qword [rsp + 0x180], 0
jne 0x140061742
test ebx, ebx
jne 0x140061742
cmp dword [r15 + 0x54], ebx
jne 0x140061742
mov rax, qword [r15]
mov r9b, 1
mov r8d, dword [r15 + 0x38]
mov edx, edi
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.140057790
test byte [r15 + 0x40], 0x20
jne 0x140061708
mov rax, qword [rsi + 0x18]
movsxd rdx, dword [rsi + 0xb8]
mov rbx, qword [r15]
mov r8d, dword [r15 + 0x38]
mov r10d, dword [rsp + 0x84]
cmp dword [rax + 0x3c], edx
jg 0x140061680
mov r9d, edi
mov dword [rsp + 0x20], r10d
mov edx, 0x86
mov rcx, rsi
call fcn.140033940
mov edx, eax
jmp 0x1400616ae
lea rcx, [rdx + rdx*2]
xor r9d, r9d
lea eax, [rdx + 1]
mov dword [rsi + 0xb8], eax
mov rax, qword [rsi + 0x68]
mov dword [rax + rcx*8], 0x86
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], r10d
mov qword [rax + rcx*8 + 0x10], r9
mov rcx, qword [rsi]
cmp byte [rcx + 0x55], 0
je 0x1400616c6
mov r8, rbx
mov edx, 0xfffffffe
call fcn.1400347a0
jmp 0x140061708
test edx, edx
jns 0x1400616d2
mov edx, dword [rsi + 0xb8]
dec edx
movsxd rax, edx
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x68]
cmp byte [rax + rcx*8 + 1], 0
lea rdx, [rax + rcx*8]
je 0x1400616fb
mov r9d, 0xfffffffe
mov r8, rbx
mov rcx, rsi
call fcn.1400349e0
jmp 0x140061708
test rbx, rbx
je 0x140061708
mov qword [rdx + 0x10], rbx
mov byte [rdx + 1], 0xfe
mov rbx, qword [r15 + 0x10]
test rbx, rbx
je 0x140061e60
nop word [rax + rax]
mov r8d, dword [rbx + 0x58]
mov r9d, edi
mov edx, 0x86
mov rcx, rsi
call fcn.140033af0
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x140061720
jmp 0x140061e60
test byte [rsp + 0x118], 0x40
mov edx, 1
mov eax, edx
mov ecx, 0x414
cmove eax, ebx
mov ebx, 0x41c
test eax, eax
cmovne bx, cx
test byte [r15 + 0x40], 0x20
jne 0x14006179c
inc dword [r14 + 0x38]
xor eax, eax
mov ebp, eax
mov word [rsp + 0x170], dx
mov eax, dword [r14 + 0x38]
movzx edi, dx
mov r9d, eax
mov dword [rsp + 0x90], eax
xor r8d, r8d
mov rcx, rsi
lea edx, [rbp + 0x3b]
call fcn.140033af0
jmp 0x14006180b
mov rbp, qword [r15 + 0x10]
test rbp, rbp
je 0x1400617b7
mov eax, dword [rbp + 0x64]
and al, 3
cmp al, 2
je 0x1400617b7
mov rbp, qword [rbp + 0x28]
test rbp, rbp
jne 0x1400617a5
movsx edi, word [rbp + 0x5e]
mov edx, WSAGetLastError
mov eax, dword [r14 + 0x38]
mov r9d, edi
mov word [rsp + 0x170], di
lea ecx, [rax + 1]
add eax, edi
mov dword [rsp + 0x60], ecx
mov ecx, dword [r14 + 0x34]
mov r8d, ecx
mov dword [r14 + 0x38], eax
mov dword [rsp + 0x88], ecx
lea eax, [rcx + 1]
mov rcx, rsi
mov dword [r14 + 0x34], eax
call fcn.140033af0
mov rdx, rbp
mov dword [rsp + 0xa0], eax
mov rcx, r14
call fcn.140034b90
mov r8, qword [rsp + 0x180]
lea eax, [r12 + 1]
mov rdx, qword [rsp + 0x178]
xor r9d, r9d
mov dword [rsp + 0x30], eax
mov rcx, r14
xor eax, eax
mov word [rsp + 0x28], bx
mov qword [rsp + 0x20], rax
call fcn.140094850
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x140061970
test byte [r13 + 0x2c], 0x80
mov rbx, qword [rax + 0x2c]
movzx eax, byte [rax + 0x45]
mov dword [rsp + 0x188], eax
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xb0], rbx
je 0x14006188c
mov r8d, dword [rsp + 0x84]
mov r9d, 1
mov rcx, rsi
lea edx, [r9 + 0x48]
call fcn.140033af0
test rbp, rbp
je 0x1400618f0
movsx rax, di
xor edx, edx
mov edi, edx
test rax, rax
jle 0x1400618e7
mov r12d, dword [rsp + 0x60]
mov rbx, rax
mov r13d, dword [rsp + 0x80]
nop
mov rax, qword [rbp + 8]
mov r8d, r13d
mov rdx, r15
mov dword [rsp + 0x20], r12d
mov rcx, rsi
movsx r9d, word [rax + rdi*2]
call fcn.14004fd40
inc r12d
inc rdi
cmp rdi, rbx
jl 0x1400618b0
mov rbx, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xd8]
mov edi, dword [rsp + 0x60]
mov r12d, edi
jmp 0x140061922
mov eax, dword [r14 + 0x38]
mov r9d, r12d
inc eax
mov byte [rsp + 0x28], 0
or r8d, 0xffffffff
mov dword [rsp + 0x20], eax
mov rdx, r15
mov rcx, r14
call fcn.14004fef0
mov r12d, eax
mov edi, dword [rsp + 0x60]
cmp eax, dword [r14 + 0x38]
jle 0x140061922
mov dword [r14 + 0x38], eax
cmp dword [rsp + 0x188], 0
je 0x140061a8a
movzx eax, word [rsp + 0x170]
mov rcx, r13
mov edi, dword [rsp + 0x9c]
mov word [rsp + 0x60], ax
lea eax, [rdi + 2]
movsxd rdx, eax
call fcn.140012710
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
jne 0x140061a1c
mov rcx, qword [rsp + 0xa8]
call fcn.140095440
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x180]
mov rdx, qword [rsp + 0x178]
mov rax, qword [rsp + 0x78]
mov r15, qword [rsp + 0x128]
mov r14, qword [rsp + 0xc0]
mov r12, qword [rsp + 0x138]
mov rsi, qword [rsp + 0x148]
mov rbp, qword [rsp + 0x150]
test r14, r14
je 0x1400619be
mov qword [r14 + 0x210], rax
mov rcx, r13
call fcn.14005ebf0
mov r14, qword [rsp + 0x130]
test rdi, rdi
je 0x1400619de
mov rdx, rdi
mov rcx, r13
call fcn.14004b520
mov rdi, qword [rsp + 0x140]
test rbx, rbx
je 0x140061f45
test r13, r13
je 0x140061f3d
cmp qword [r13 + 0x298], 0
je 0x140061f08
mov rdx, rbx
mov rcx, r13
call fcn.140012380
add rsp, 0x158
pop r13
pop rbx
ret
lea eax, [rdi + 1]
mov edx, 1
movsxd rdi, eax
mov r8, rdi
call fcn.1400a3240
mov rdx, qword [rsp + 0x68]
mov ecx, dword [rsp + 0x80]
mov byte [rdi + rdx], 0
test ebx, ebx
js 0x140061a4c
sub ebx, ecx
movsxd rax, ebx
mov byte [rax + rdx], 0
mov edi, dword [rsp + 0xb4]
test edi, edi
js 0x140061a61
mov eax, edi
sub eax, ecx
cdqe
mov byte [rax + rdx], 0
mov eax, dword [rsp + 0xa0]
test eax, eax
je 0x140061a76
mov edx, eax
mov rcx, rsi
call fcn.140034980
mov rcx, rsi
call fcn.140034280
mov dword [rsp + 0x98], eax
jmp 0x140061b29
test rbp, rbp
je 0x140061af3
inc dword [r14 + 0x38]
xor eax, eax
mov rcx, qword [r14]
mov rdx, rbp
mov r12d, dword [r14 + 0x38]
movsx ebx, word [rsp + 0x170]
mov dword [rsp + 0x60], eax
call fcn.1400696e0
mov dword [rsp + 0x30], ebx
mov r9d, ebx
mov qword [rsp + 0x28], rax
mov r8d, edi
mov edx, 0x65
mov dword [rsp + 0x20], r12d
mov rcx, rsi
call fcn.140033e30
mov r8d, dword [rsp + 0x88]
mov r9d, r12d
mov edx, pe_nt_image_headers64
mov dword [rsp + 0x28], ebx
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.140034160
jmp 0x140061b15
mov r8d, dword [rsp + 0x90]
mov eax, 1
mov r9d, r12d
mov word [rsp + 0x60], ax
mov edx, 0x91
mov rcx, rsi
call fcn.140033af0
mov rcx, qword [rsp + 0xa8]
call fcn.140095440
mov edi, dword [rsp + 0xb4]
cmp qword [rsp + 0xb8], 0
jne 0x140061ba9
xor eax, eax
cmp dword [rsp + 0x188], 2
mov ebx, eax
jne 0x140061b4f
lea edx, [rax + 0x14]
mov rcx, rsi
call fcn.140033a10
mov ebx, eax
lea rax, [rsp + 0x94]
mov r9b, 8
mov qword [rsp + 0x38], rax
mov r8d, WSAGetLastError
lea rax, [rsp + 0x70]
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x20], eax
call fcn.14006cfd0
mov r10d, dword [rsp + 0x188]
cmp r10d, 2
jne 0x140061bb1
mov edx, ebx
mov rcx, rsi
call fcn.140034560
jmp 0x140061bb6
mov r10d, dword [rsp + 0x188]
test r10d, r10d
je 0x140061c09
cmp dword [r15 + 0x54], 0
mov edx, dword [rsp + 0x70]
mov ebx, dword [rsp + 0x60]
jne 0x140061c7f
mov rcx, qword [rsp + 0x68]
mov eax, edx
sub eax, dword [rsp + 0x80]
cdqe
cmp byte [rax + rcx], 0
je 0x140061c74
mov r9d, dword [rsp + 0x98]
mov r8d, edx
movsx eax, bx
mov edx, 0x1d
mov dword [rsp + 0x28], eax
mov rcx, rsi
mov dword [rsp + 0x20], r12d
call fcn.140034160
jmp 0x140061c68
mov rcx, rsi
test rbp, rbp
je 0x140061c44
mov r8d, dword [rsp + 0x88]
mov edx, 0x25
call fcn.140033a80
mov r8d, dword [rsp + 0x88]
mov r9d, r12d
mov edx, 0x7c
mov dword [rsp + 0x8c], eax
mov rcx, rsi
call fcn.140033af0
jmp 0x140061c64
mov r8d, dword [rsp + 0x90]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
lea edx, [r9 + 0x2a]
call fcn.1400339a0
mov dword [rsp + 0x8c], eax
mov ebx, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x188]
mov edx, dword [rsp + 0x70]
cmp dword [r15 + 0x54], 0
je 0x140061d9b
mov rbx, qword [r15 + 0x60]
test rbx, rbx
je 0x140061c96
cmp qword [rbx], r13
je 0x140061c96
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x140061c88
mov rdx, r15
mov rcx, r14
call fcn.140087fc0
mov rax, qword [rsi + 0x18]
mov r9d, 1
movsxd rdx, dword [rsi + 0xb8]
cmp dword [rax + 0x3c], edx
jg 0x140061ccf
xor r8d, r8d
mov dword [rsp + 0x20], r12d
lea edx, [r9 + 0xb]
mov rcx, rsi
call fcn.140033940
mov edx, eax
jmp 0x140061cfa
lea rcx, [rdx + rdx*2]
xor r8d, r8d
lea eax, [rdx + 1]
mov dword [rsi + 0xb8], eax
mov rax, qword [rsi + 0x68]
mov qword [rax + rcx*8], reloc.WS2_32.dll_inet_ntoa
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r12d
mov qword [rax + rcx*8 + 0x10], r8
mov rax, qword [rsi]
cmp byte [rax + 0x55], 0
jne 0x140061d48
test edx, edx
jns 0x140061d0f
mov edx, dword [rsi + 0xb8]
dec edx
movsxd rax, edx
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x68]
cmp byte [rax + rcx*8 + 1], 0
lea rdx, [rax + rcx*8]
je 0x140061d38
mov r9d, 0xfffffff8
mov r8, rbx
mov rcx, rsi
call fcn.1400349e0
jmp 0x140061d48
test rbx, rbx
je 0x140061d48
mov qword [rdx + 0x10], rbx
mov byte [rdx + 1], 0xf8
inc dword [rbx + 0x18]
mov eax, dword [rsi + 0xb8]
test eax, eax
jle 0x140061d69
dec eax
movsxd rcx, eax
mov rax, qword [rsi + 0x68]
lea rdx, [rcx + rcx*2]
mov ecx, 2
mov word [rax + rdx*8 + 2], cx
mov rax, qword [r14 + 0xa0]
mov rcx, r14
test rax, rax
cmovne rcx, rax
mov eax, dword [rsp + 0x188]
mov byte [rcx + 0x21], 1
cmp eax, 1
jne 0x140061de7
cmp qword [r14 + 0xa0], 0
jne 0x140061deb
mov byte [r14 + 0x20], 0
jmp 0x140061deb
cmp byte [r14 + 0x1e], 0
mov r9d, edx
mov r8, qword [rsp + 0xe0]
mov rdx, r15
mov dword [rsp + 0x50], edi
sete al
mov byte [rsp + 0x48], r10b
mov rcx, r14
mov byte [rsp + 0x40], 0xa
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x94]
mov word [rsp + 0x30], bx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
call fcn.140061f50
mov eax, dword [rsp + 0x188]
test eax, eax
je 0x140061e1c
mov rax, qword [rsi + 0x18]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x140061e0d
mov eax, dword [rsp + 0x98]
not eax
movsxd rcx, eax
mov eax, dword [rsi + 0xb8]
mov dword [rdx + rcx*4], eax
mov rcx, qword [rsp + 0xa8]
call fcn.140095440
jmp 0x140061e60
mov rcx, rsi
test rbp, rbp
je 0x140061e45
mov ebx, dword [rsp + 0x8c]
mov edx, 7
mov r8d, dword [rsp + 0x88]
lea r9d, [rbx + 1]
call fcn.140033af0
mov edx, ebx
jmp 0x140061e58
mov edx, dword [rsp + 0x8c]
call fcn.140033b60
mov edx, dword [rsp + 0x8c]
mov rcx, rsi
call fcn.140034560
cmp byte [r14 + 0x1e], 0
jne 0x140061e83
cmp qword [r14 + 0xa8], 0
jne 0x140061e83
cmp qword [r14 + 0x98], 0
je 0x140061e83
mov rcx, r14
call fcn.140069d70
test byte [r13 + 0x2c], 0x80
je 0x140061970
cmp byte [r14 + 0x1e], 0
jne 0x140061970
cmp qword [r14 + 0xa8], 0
jne 0x140061970
mov r8d, dword [rsp + 0x84]
mov ebx, 1
mov r9d, ebx
mov rcx, rsi
lea edx, [rbx + 0x42]
call fcn.140033af0
mov edx, ebx
mov rcx, rsi
call fcn.140036060
mov rax, qword [rsi]
cmp byte [rax + 0x55], 0
jne 0x140061970
mov rcx, qword [rsi + 0x80]
lea rdx, str.rows_deleted
xor eax, eax
movzx r9d, bl
or r8d, 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.1400329f0
jmp 0x140061970
mov rbx, rbp
jmp 0x140061975
cmp rbx, qword [r13 + 0x180]
jb 0x140061f3d
cmp rbx, qword [r13 + 0x188]
jae 0x140061f3d
mov rax, qword [r13 + 0x178]
mov qword [rbx], rax
dec dword [r13 + 0x160]
mov qword [r13 + 0x178], rbx
add rsp, 0x158
pop r13
pop rbx
ret
mov rcx, rbx
call fcn.140012310
add rsp, 0x158
pop r13
pop rbx
ret