Function at 0x1400dea00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x160
mov rax, qword [0x1407ddd00]
xor rax, rsp
mov qword [rsp + 0x158], rax
movzx eax, r8b
mov byte [rsp + 0x38], al
mov rsi, rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rdx
mov byte [rsp + 0x30], al
xor edi, edi
mov dword [rsp + 0x3c], edi
mov r13, qword [rdx + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 0xf
jb 0x1400df2ed
mov r12, rsi
cmp qword [rdx + 0x18], 0x10
jb 0x1400dea6f
mov r12, qword [rdx]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea r15, [r13 + 0xf]
mov ebx, reloc.WS2_32.dll_ntohs
lea r14, [rsp + 0x50]
cmp r15, rbx
jbe 0x1400deaee
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400deab4
mov rbx, rcx
movabs rcx, 0x8000000000000000
call fcn.14004d6e0
mov r14, rax
jmp 0x1400deae9
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400dead7
call fcn.14004d6e0
mov r14, rax
jmp 0x1400deae9
test rcx, rcx
je 0x1400deae6
call fcn.1401dc044
mov r14, rax
jmp 0x1400deae9
mov r14, rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rbx
movsd xmm0, qword [str.authentication_]
movsd qword [r14], xmm0
mov eax, dword [0x1401f6b90]
mov dword [r14 + 8], eax
movzx eax, word [0x1401f6b94]
mov word [r14 + 0xc], ax
movzx eax, byte [0x1401f6b96]
mov byte [r14 + 0xe], al
lea rcx, [r14 + 0xf]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r15], 0
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 7
jb 0x1400deb8b
lea rax, [rcx + 7]
mov qword [rsp + 0x60], rax
lea rbx, [rsp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x50]
add rbx, rcx
mov r8d, 7
lea rdx, str._client
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 7], 0
lea rax, [rsp + 0x50]
jmp 0x1400debac
mov qword [rsp + 0x20], 7
lea r9, str._client
xor r8d, r8d
lea edx, [r8 + 7]
lea rcx, [rsp + 0x50]
call fcn.1400d3e80
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x3c], send
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400dec1a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400dec15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dec15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
mov rbx, qword [rsi + 0x10]
mov rcx, rsi
mov r14, qword [rsi + 0x18]
cmp r14, 0x10
jb 0x1400dec41
mov rcx, qword [rsi]
cmp rbx, 8
jne 0x1400decea
mov r8, rbx
lea rdx, str.webauthn
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400decea
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x90], al
lea ecx, [rbx + 0x28]
call fcn.1401dc044
mov qword [rsp + 0xa0], Ordinal_41
mov qword [rsp + 0xa8], Ordinal_50
movups xmm0, xmmword [str.plugin_authentication_webauthn_client]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1401f6bc0]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1401f6bd0]
mov dword [rax + 0x20], ecx
movzx ecx, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rax + 0x24], cl
mov byte [rax + 0x25], 0
mov qword [rsp + 0x90], rax
lea r14, [rsp + 0x90]
lea r15d, [rbx + 5]
jmp 0x1400ded92
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], rdi
mov r15, rsi
cmp r14, 0x10
jb 0x1400ded0b
mov r15, qword [rsi]
cmp rbx, 0x10
jae 0x1400ded28
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
jmp 0x1400ded7f
mov r14, rbx
or r14, 0xf
movabs rax, 0x7fffffffffffffff
cmp r14, rax
cmova r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x1400ded54
call fcn.14004d6e0
jmp 0x1400ded63
test rcx, rcx
je 0x1400ded60
call fcn.1401dc044
jmp 0x1400ded63
mov rax, rdi
mov qword [rsp + 0x70], rax
lea r8, [rbx + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x80], rbx
lea r14, [rsp + 0x70]
mov r15d, reloc.WS2_32.dll_ntohl
mov dword [rsp + 0x3c], r15d
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x12
jb 0x1400dedde
lea rax, [rcx + 0x12]
mov qword [r14 + 0x10], rax
mov rax, r14
cmp rdx, 0x10
jb 0x1400dedbf
mov rax, qword [r14]
lea rbx, [rax + rcx]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str._messages_callback
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x12], 0
jmp 0x1400dee00
mov qword [rsp + 0x20], reloc.WS2_32.dll_select
lea r9, str._messages_callback
xor r8d, r8d
lea edx, [r8 + 0x12]
mov rcx, r14
call fcn.1400d3e80
mov r14, rax
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [r14 + 0x10], rdi
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
or r15d, 0x10
test r15b, 2
je 0x1400dee8d
and r15d, 0xfffffffd
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x1400dee74
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400dee6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400dee6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
test r15b, 1
je 0x1400deef5
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x1400deed9
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400deed4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400deed4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x90], 0
mov r15, qword [rsp + 0x40]
mov rax, qword [r15]
mov r14, qword [rax + 0xe0]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov qword [rsp + 0xf0], rdi
movdqa xmm0, xmmword [0x1404e8a00]
movdqu xmmword [rsp + 0x100], xmm0
mov byte [rsp + 0xf0], 0
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400def40
lea rcx, [rsp + 0xf0]
call fcn.14005fbd0
nop
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rdx, qword [rsp + 0xb0]
mov qword [rsp + 0xd0], rdi
movdqa xmm0, xmmword [0x1404e8a00]
movdqu xmmword [rsp + 0xe0], xmm0
mov byte [rsp + 0xd0], 0
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400def93
mov r8, rbx
lea rcx, [rsp + 0xd0]
call fcn.14005fbd0
nop
mov rax, rdi
lea rcx, [0x1400da2b0]
cmp byte [rsp + 0x38], dil
cmovne rax, rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0xd0]
mov edx, 2
mov rcx, r15
call r14
nop
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0x10
jb 0x1400df027
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400df022
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400df022
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
movdqa xmm0, xmmword [0x1404e8a00]
movdqu xmmword [rsp + 0xe0], xmm0
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0x10
jb 0x1400df087
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400df081
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400df081
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401dbfcc
nop
jmp 0x1400df188
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.1401db8e0
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400df1c6
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400df1c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400df28c
call fcn.1401dbfcc
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x1400df20a
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400df204
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400df2df
call fcn.1401dbfcc
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1400df244
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x1400df23f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400df2e6
mov rcx, r8
call fcn.1401dbfcc
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
jmp 0x1400df15e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14004d780
int3