Function at 0x1400d0d60
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x1401b06f8]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x100]
lea r14, [rbp - 0x20]
mov qword [rsp + 0x70], rax
mov esi, r9d
xor eax, eax
mov dword [rsp + 0x40], r9d
mov r12d, r8d
mov r15, rcx
mov qword [rsp + 0x68], rdx
mov edi, eax
mov qword [rsp + 0x60], rcx
mov r13d, eax
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x30], al
test rcx, rcx
je 0x1400d1464
cmp dword [rcx], 0xbab1e
jne 0x1400d1464
cmp byte [rcx + 0x1ab], al
je 0x1400d0df3
mov eax, 8
jmp 0x1400d0ea4
test esi, esi
jns 0x1400d0e01
mov eax, 0xa
jmp 0x1400d0ea4
xorps xmm0, xmm0
mov qword [rsp + 0x198], rbx
mov rbx, qword [rcx + 8]
mov qword [rbp - 0x58], rax
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rbp - 0x68], xmm0
test rbx, rbx
je 0x1400d0e4d
nop word [rax + rax]
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.1400cf8d0
add edi, dword [rbp - 0x60]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1400d0e30
mov dword [rsp + 0x3c], edi
lea rdx, [rsp + 0x34]
mov rcx, r15
call fcn.1400d0c70
mov eax, dword [rsp + 0x34]
test eax, eax
js 0x1400d0e6b
cmp eax, esi
cmovl esi, eax
mov dword [rsp + 0x40], esi
cmp byte [rbp + 0x110], r13b
lea eax, [r12 + rdi]
lea ecx, [rax + 1]
cmove ecx, eax
cmp ecx, 0xa
jbe 0x1400d0ecb
shl rcx, 4
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x50], rax
mov r14, rax
test rax, rax
jne 0x1400d0ec6
lea eax, [r14 + 3]
mov rbx, qword [rsp + 0x198]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1401292a0
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x30], 1
xor edx, edx
mov dword [rsp + 0x34], edx
mov esi, edx
test edi, edi
je 0x1400d0fe9
mov r15, qword [r15 + 8]
test r15, r15
je 0x1400d0fe4
nop dword [rax + rax]
lea rdx, [rsp + 0x78]
mov rcx, r15
call fcn.1400cf8d0
xor edx, edx
mov edi, edx
cmp dword [rbp - 0x60], edx
jbe 0x1400d0fd7
nop word [rax + rax]
mov rax, qword [rsp + rdi*8 + 0x78]
mov ebx, esi
inc esi
shl rbx, 4
add rbx, r14
mov dword [rsp + 0x34], esi
mov esi, edx
mov qword [rbx], rax
mov word [rbx + 8], dx
test byte [rbp + rdi - 0x5c], 1
je 0x1400d0f3f
mov esi, reloc.WLDAP32.dll_Ordinal_41
mov word [rbx + 8], 0x300
test byte [rbp + rdi - 0x5c], 2
je 0x1400d0f9f
mov r14, qword [rsp + rdi*8 + 0x78]
lea rax, [rsp + 0x44]
mov rcx, r14
mov dword [rsp + 0x44], 4
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or esi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x1400d0f95
cmp dword [rsp + 0x48], 1
jne 0x1400d0f95
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.WS2_32.dll_send]
or word [rbx + 8], 0x10
mov r14, qword [rsp + 0x50]
mov rax, qword [rsp + 0x60]
mov r8d, esi
mov rcx, qword [rsp + rdi*8 + 0x78]
mov rdx, qword [rax + 0x198]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1400d1102
mov eax, dword [rbp - 0x60]
inc rdi
mov esi, dword [rsp + 0x34]
mov rdx, r13
cmp rdi, rax
jb 0x1400d0f10
mov r15, qword [r15 + 0x10]
test r15, r15
jne 0x1400d0ef0
mov r15, qword [rsp + 0x60]
add r15, 0x198
mov r14, rdx
mov qword [rsp + 0x58], r15
test r12, r12
je 0x1400d1138
mov rbx, qword [rsp + 0x68]
add rbx, 8
nop word [rax + rax]
movzx edx, word [rbx]
movzx eax, dl
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x29
mov edi, ecx
or edi, 4
test dl, 2
cmove edi, ecx
test dl, 4
je 0x1400d107d
mov rsi, qword [rbx - 8]
lea rax, [rsp + 0x48]
mov rcx, rsi
mov dword [rsp + 0x48], 4
lea r9, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or edi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x1400d107d
cmp dword [rsp + 0x44], 1
jne 0x1400d107d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_send]
mov rdx, qword [r15]
mov r8d, edi
mov rcx, qword [rbx - 8]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1400d111c
mov rax, qword [rbx - 8]
xor edx, edx
mov esi, dword [rsp + 0x34]
mov r9, qword [rsp + 0x50]
mov ecx, esi
shl rcx, 4
add rcx, r9
mov qword [rcx], rax
movzx eax, dx
mov word [rcx + 8], dx
test byte [rbx], 1
je 0x1400d10ca
mov r8d, 0x300
mov word [rcx + 8], r8w
mov eax, r8d
test byte [rbx], 2
je 0x1400d10dd
mov edx, 0x400
or ax, dx
mov word [rcx + 8], ax
xor edx, edx
test byte [rbx], 4
je 0x1400d10ea
or ax, 0x10
mov word [rcx + 8], ax
inc esi
inc r14
add rbx, 0x10
mov dword [rsp + 0x34], esi
cmp r14, r12
jb 0x1400d1010
jmp 0x1400d113d
cmp byte [rsp + 0x30], r13b
je 0x1400d112e
mov rcx, r14
call qword [fcn.14012a420]
mov eax, 4
jmp 0x1400d0e9c
cmp byte [rsp + 0x30], r13b
je 0x1400d112e
mov rcx, qword [rsp + 0x50]
call qword [fcn.14012a420]
mov eax, 4
jmp 0x1400d0e9c
mov r9, qword [rsp + 0x50]
test esi, esi
jne 0x1400d1155
movzx ebx, byte [rbp + 0x110]
test bl, bl
je 0x1400d13e5
mov r14d, edx
jmp 0x1400d1180
xor r8d, r8d
mov edx, esi
mov rcx, r9
call fcn.1400f42b0
mov r14d, eax
test eax, eax
jns 0x1400d1173
mov eax, ntohs
jmp 0x1400d0e9c
jle 0x1400d117e
mov r13d, eax
mov dword [rsp + 0x38], eax
jmp 0x1400d1199
xor edx, edx
mov r9d, dword [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x20], edx
mov rdx, r15
lea ecx, [r8 + 1]
call qword [sym.imp.WS2_32.dll_WSAWaitForMultipleEvents]
test r12, r12
je 0x1400d12a2
mov rcx, qword [rsp + 0x68]
mov r13d, dword [rsp + 0x3c]
shl r13, 4
sub r13, rcx
add r13, qword [rsp + 0x50]
lea rdi, [rcx + 0xa]
nop dword [rax]
mov rsi, qword [rdi - 0xa]
lea r8, [rbp - 0x50]
movsx r15d, word [rdi + r13]
xor eax, eax
mov rcx, rsi
mov dword [rbp - 0x50], eax
xor edx, edx
movzx ebx, ax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1400d123e
mov r8d, dword [rbp - 0x50]
mov ecx, eax
test r8b, 0x29
setne cl
movzx edx, cx
or dx, 4
test r8b, 0x32
cmove dx, cx
movzx ecx, dx
or cx, 2
test r8b, 4
cmove cx, dx
cmp qword [rsp + 0x70], 0
movzx ebx, cx
je 0x1400d123e
test r14d, r14d
jne 0x1400d123e
test r8d, r8d
je 0x1400d123e
mov rax, qword [rsp + 0x58]
xor r8d, r8d
inc dword [rsp + 0x38]
mov rcx, rsi
mov rdx, qword [rax]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
jmp 0x1400d1288
mov rax, qword [rsp + 0x58]
xor r8d, r8d
mov rcx, rsi
mov rdx, qword [rax]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test r14d, r14d
je 0x1400d1288
movzx ecx, bx
or cx, 1
test r15d, 0x300
cmove cx, bx
movzx edx, cx
or dx, 4
test r15b, 0x10
cmove dx, cx
movzx ebx, dx
or bx, 2
bt r15d, 0xa
cmovae bx, dx
mov word [rdi], bx
add rdi, 0x10
sub r12, 1
jne 0x1400d11c0
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x34]
cmp dword [rsp + 0x3c], 0
je 0x1400d13d0
mov rax, qword [rsp + 0x60]
mov rdi, qword [rax + 8]
mov qword [rsp + 0x68], rdi
test rdi, rdi
je 0x1400d13d0
mov rsi, qword [rsp + 0x70]
lea r15, [0x140000000]
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.1400e1630
cmp qword [rdi + 0x20], 0
je case.0x1400d12fc.13
mov eax, dword [rdi + 0x58]
add eax, 0xfffffffd
cmp eax, 0xa
ja case.0x1400d12fc.4
cdqe
mov ecx, dword [r15 + rax*4 + 0xd1470]
add rcx, r15
jmp rcx
lea r8, [0x1400ebfa0]
mov rcx, rdi
lea rdx, [rsp + 0x78]
call fcn.1400e1500
jmp case.0x1400d12fc.13
lea r8, [0x1400d1530]
jmp 0x1400d1336
lea r8, [0x1400cf580]
jmp 0x1400d1336
lea r8, [0x1400cf5a0]
jmp 0x1400d1336
lea r8, [0x1400e8490]
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.1400e14a0
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.1400e0680
xor ebx, ebx
cmp dword [rbp - 0x60], ebx
jbe 0x1400d13b5
mov rdi, qword [rsp + 0x58]
xor r15d, r15d
nop
mov rcx, qword [rsp + rbx*8 + 0x78]
lea r8, [rbp - 0x50]
xor edx, edx
mov dword [rbp - 0x50], r15d
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1400d138d
test rsi, rsi
je 0x1400d138d
test r14d, r14d
jne 0x1400d138d
cmp dword [rbp - 0x50], r15d
je 0x1400d138d
inc dword [rsp + 0x38]
mov rdx, qword [rdi]
xor r8d, r8d
mov rcx, qword [rsp + rbx*8 + 0x78]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
mov eax, dword [rbp - 0x60]
inc rbx
cmp rbx, rax
jb 0x1400d1360
mov rdi, qword [rsp + 0x68]
lea r15, [0x140000000]
mov rdi, qword [rdi + 0x10]
mov qword [rsp + 0x68], rdi
test rdi, rdi
jne 0x1400d12d0
mov r13d, dword [rsp + 0x38]
mov esi, dword [rsp + 0x34]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
call qword [sym.imp.WS2_32.dll_WSAResetEvent]
movzx ebx, byte [rbp + 0x110]
cmp byte [rsp + 0x30], 0
je 0x1400d13f7
mov rcx, qword [rsp + 0x50]
call qword [fcn.14012a420]
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x1400d1404
mov dword [rax], r13d
cmp byte [rbp + 0x108], 0
je 0x1400d145d
test esi, esi
jne 0x1400d145d
test bl, bl
jne 0x1400d145d
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x3c], esi
cmp dword [rax], 0xbab1e
jne 0x1400d145d
cmp byte [rax + 0x1ab], bl
jne 0x1400d145d
lea rdx, [rsp + 0x3c]
mov rcx, rax
call fcn.1400d0c70
test eax, eax
jne 0x1400d145d
mov eax, dword [rsp + 0x3c]
test eax, eax
je 0x1400d145d
mov ecx, dword [rsp + 0x40]
cmp eax, ecx
jg 0x1400d1453
test eax, eax
jns 0x1400d1455
mov eax, ecx
movsxd rcx, eax
call fcn.1400f4810
xor eax, eax
jmp 0x1400d0e9c
mov eax, 1
jmp 0x1400d0ea4