Function at 0x140095440
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r13, qword [rcx]
xor ebp, ebp
mov r9, qword [rcx + 8]
mov rsi, rcx
mov qword [rsp + 0x78], r9
mov r8d, ebp
mov r15, qword [r13]
mov rbx, qword [r13 + 0x10]
mov qword [rsp + 0x80], r15
cmp byte [r13 + 0x25], bpl
jbe 0x1400954b6
lea rdx, [r13 + 0xd0]
cmp byte [rdx - 6], bpl
je 0x1400954a5
movzx eax, byte [r13 + 0x1f]
cmp al, 8
jae 0x1400954a5
movzx ecx, al
mov eax, dword [rdx]
mov dword [r13 + rcx*4 + 0x18c], eax
inc byte [r13 + 0x1f]
movzx eax, byte [r13 + 0x25]
inc r8d
add rdx, 0x14
cmp r8d, eax
jl 0x140095485
mov byte [r13 + 0x25], bpl
movzx eax, byte [rsi + 0x42]
sub eax, 1
mov qword [rsp + 0x88], rdi
movsxd r12, eax
js 0x140095bd4
imul rax, r12, 0x58
lea r14, [rsi + 0x398]
add r14, rax
cmp byte [r14 + 0x2d], 0xa4
mov r15, qword [r14 + 0x48]
je 0x140095721
cmp byte [rsi + 0x47], 2
mov edi, ebp
jne 0x140095644
test dword [r15 + 0x28], 0x200
je 0x140095644
mov rax, qword [r15 + 0x20]
test byte [rax + 0x64], 0x80
je 0x140095644
movzx esi, word [r15 + 0x1e]
test esi, esi
je 0x140095644
mov rax, qword [rax + 0x10]
cmp word [rax + rsi*2], 0x24
jl 0x140095644
mov ebp, dword [r13 + 0x38]
xor r9d, r9d
inc ebp
mov edi, r9d
test esi, esi
je 0x1400955b5
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
mov r8d, dword [r14 + 8]
cmp dword [rax + 0x3c], ecx
jg 0x140095580
lea eax, [rdi + rbp]
mov r9d, edi
mov edx, 0x63
mov dword [rsp + 0x20], eax
mov rcx, rbx
call fcn.140033940
xor r9d, r9d
jmp 0x1400955af
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], 0x63
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edi
lea rdx, [rax + rcx*8]
lea eax, [rdi + rbp]
mov qword [rdx + 0x10], r9
mov dword [rdx + 0xc], eax
inc edi
cmp edi, esi
jl 0x140095550
lea eax, [rsi + 1]
mov dword [rsp + 0x28], esi
add dword [r13 + 0x38], eax
mov edx, 0x1b
cmp byte [r14 + 0x2d], 6
mov eax, 0x18
mov r8d, dword [r14 + 8]
mov rcx, rbx
cmove edx, eax
mov dword [rsp + 0x20], ebp
xor r9d, r9d
call fcn.140034160
mov rcx, qword [rbx + 0x18]
xor ebp, ebp
movsxd r8, dword [rbx + 0xb8]
mov edi, eax
mov edx, dword [r14 + 0x34]
cmp dword [rcx + 0x3c], r8d
jg 0x140095616
mov r9d, edx
mov dword [rsp + 0x20], ebp
lea edx, [rbp + 0xd]
mov rcx, rbx
lea r8d, [rbp + 1]
call fcn.140033940
jmp 0x140095644
lea rcx, [r8 + r8*2]
lea eax, [r8 + 1]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], reloc.WS2_32.dll_listen
mov dword [rax + rcx*8 + 4], 1
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], ebp
mov qword [rax + rcx*8 + 0x10], rbp
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x140095663
mov eax, dword [r14 + 0x18]
not eax
movsxd rcx, eax
mov eax, dword [rbx + 0xb8]
mov dword [rdx + rcx*4], eax
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
movzx r10d, byte [r14 + 0x2e]
mov r9d, dword [r14 + 0x34]
mov r8d, dword [r14 + 0x30]
movzx edx, byte [r14 + 0x2d]
cmp dword [rax + 0x3c], ecx
jg 0x140095694
mov rcx, rbx
mov dword [rsp + 0x20], r10d
call fcn.140033940
jmp 0x1400956c6
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], dl
mov word [rax + rcx*8 + 2], bp
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r10d
mov qword [rax + rcx*8 + 0x10], rbp
mov byte [rax + rcx*8 + 1], 0
mov eax, dword [rbx + 0xb8]
test eax, eax
jle 0x1400956e8
movzx r8d, byte [r14 + 0x2f]
dec eax
movsxd rcx, eax
mov rax, qword [rbx + 0x68]
lea rdx, [rcx + rcx*2]
mov word [rax + rdx*8 + 2], r8w
test edi, edi
je 0x140095740
mov edx, dword [rbx + 0xb8]
jns 0x1400956f7
lea edi, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
je 0x14009570c
lea rax, [0x1401763d0]
mov dword [rax + 8], edx
jmp 0x140095740
movsxd rax, edi
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8 + 8], edx
lea rax, [rax + rcx*8]
jmp 0x140095740
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x140095740
mov eax, dword [r14 + 0x18]
not eax
movsxd rcx, eax
mov eax, dword [rbx + 0xb8]
mov dword [rdx + rcx*4], eax
test dword [r15 + 0x28], 0x800
je 0x140095879
cmp dword [r14 + 0x38], 0
jle 0x140095879
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x140095778
mov eax, dword [r14 + 0x10]
not eax
movsxd rcx, eax
mov eax, dword [rbx + 0xb8]
mov dword [rdx + rcx*4], eax
mov esi, dword [r14 + 0x38]
lea eax, [rsi - 1]
movsxd rcx, eax
mov rax, qword [r14 + 0x40]
lea rdx, [rcx + rcx*2]
lea rdi, [rax + rdx*4]
test esi, esi
jle 0x140095879
nop word [rax + rax]
mov ecx, dword [rdi + 4]
add ecx, 1
mov edx, dword [rbx + 0xb8]
jns 0x1400957b1
lea ecx, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
je 0x1400957c3
lea rax, [0x1401763d0]
jmp 0x1400957d2
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov dword [rax + 8], edx
movzx eax, byte [rdi + 8]
cmp al, 0xa4
je 0x140095836
movsxd rcx, dword [rbx + 0xb8]
mov r9d, dword [rdi + 4]
mov r8d, dword [rdi]
movzx edx, al
mov rax, qword [rbx + 0x18]
cmp dword [rax + 0x3c], ecx
jg 0x140095805
mov rcx, rbx
mov dword [rsp + 0x20], ebp
call fcn.140033940
jmp 0x140095836
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov byte [rax + rcx*8], dl
mov word [rax + rcx*8 + 2], bp
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], ebp
mov qword [rax + rcx*8 + 0x10], rbp
mov byte [rax + rcx*8 + 1], 0
mov ecx, dword [rdi + 4]
sub ecx, 1
mov edx, dword [rbx + 0xb8]
jns 0x140095847
lea ecx, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
je 0x140095859
lea rax, [0x1401763d0]
jmp 0x140095868
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
dec esi
mov dword [rax + 8], edx
sub rdi, 0xc
test esi, esi
jg 0x1400957a0
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x140095898
mov eax, dword [r14 + 0xc]
not eax
movsxd rcx, eax
mov eax, dword [rbx + 0xb8]
mov dword [rdx + rcx*4], eax
mov edx, dword [r14 + 0x14]
test edx, edx
je 0x14009595d
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], ecx
jg 0x1400958cc
xor r8d, r8d
mov dword [rsp + 0x20], ebp
mov r9d, edx
mov rcx, rbx
lea edx, [r8 + 0xd]
call fcn.140033940
jmp 0x1400958f2
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov qword [rax + rcx*8], reloc.WS2_32.dll_listen
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], ebp
mov qword [rax + rcx*8 + 0x10], rbp
mov ecx, dword [r14 + 0x14]
mov edx, dword [rbx + 0xb8]
test ecx, ecx
jns 0x140095903
lea ecx, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
je 0x140095915
lea rax, [0x1401763d0]
jmp 0x140095924
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov dword [rax + 8], edx
mov ecx, dword [r14 + 0x14]
sub ecx, 2
mov edx, dword [rbx + 0xb8]
jns 0x140095939
lea ecx, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
je 0x14009594b
lea rax, [0x1401763d0]
jmp 0x14009595a
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov dword [rax + 8], edx
mov r8d, dword [r14 + 0x28]
test r8d, r8d
je 0x1400959bf
mov rax, qword [rbx + 0x18]
mov edx, dword [r14 + 0x24]
movsxd rcx, dword [rbx + 0xb8]
shr edx, 1
cmp dword [rax + 0x3c], ecx
jg 0x140095995
mov r9d, r8d
mov dword [rsp + 0x20], ebp
mov r8d, edx
mov rcx, rbx
mov edx, gethostbyname
call fcn.140033940
jmp 0x1400959bf
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], gethostbyname
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], ebp
mov qword [rax + rcx*8 + 0x10], rbp
mov edx, dword [r14]
test edx, edx
je 0x140095bb8
mov rax, qword [rbx + 0x18]
movsxd rdi, dword [rbx + 0xb8]
mov esi, dword [r15 + 0x28]
cmp dword [rax + 0x3c], edi
jg 0x1400959f8
xor r9d, r9d
mov dword [rsp + 0x20], ebp
mov r8d, edx
mov rcx, rbx
lea edx, [r9 + 0x2e]
call fcn.140033940
mov edi, eax
jmp 0x140095a22
lea rcx, [rdi + rdi*2]
lea eax, [rdi + 1]
mov dword [rbx + 0xb8], eax
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], gethostbyname
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rbp
test sil, 0x40
jne 0x140095a87
mov rcx, qword [rsp + 0x78]
imul rax, r12, 0x78
mov edx, dword [rax + rcx + 0x50]
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
cmp dword [rax + 0x3c], ecx
jg 0x140095a5d
xor r9d, r9d
mov dword [rsp + 0x20], ebp
mov r8d, edx
mov rcx, rbx
lea edx, [r9 + 0x7e]
call fcn.140033940
jmp 0x140095a87
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], 0x7e
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rbp
bt esi, 9
jb 0x140095a9a
bt esi, 0xd
jae 0x140095af0
cmp qword [r14 + 0x38], 0
je 0x140095af0
mov rax, qword [rbx + 0x18]
movsxd rcx, dword [rbx + 0xb8]
mov edx, dword [r14 + 8]
cmp dword [rax + 0x3c], ecx
jg 0x140095ac6
xor r9d, r9d
mov dword [rsp + 0x20], ebp
mov r8d, edx
mov rcx, rbx
lea edx, [r9 + 0x7e]
call fcn.140033940
jmp 0x140095af0
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], 0x7e
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rbp
cmp byte [r14 + 0x2d], 0x34
mov edx, dword [r14 + 0x1c]
movsxd rcx, dword [rbx + 0xb8]
mov rax, qword [rbx + 0x18]
jne 0x140095b44
mov r8d, dword [r14 + 0x30]
cmp dword [rax + 0x3c], ecx
jg 0x140095b25
mov r9d, edx
mov dword [rsp + 0x20], ebp
mov edx, recv
mov rcx, rbx
call fcn.140033940
jmp 0x140095b87
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov dword [rax + rcx*8], recv
mov dword [rax + rcx*8 + 4], r8d
jmp 0x140095b7a
cmp dword [rax + 0x3c], ecx
jg 0x140095b61
xor r8d, r8d
mov dword [rsp + 0x20], ebp
mov r9d, edx
mov rcx, rbx
lea edx, [r8 + 0xd]
call fcn.140033940
jmp 0x140095b87
lea eax, [rcx + 1]
mov dword [rbx + 0xb8], eax
lea rcx, [rcx + rcx*2]
mov rax, qword [rbx + 0x68]
mov qword [rax + rcx*8], reloc.WS2_32.dll_listen
mov qword [rax + rcx*8 + 0x10], rbp
mov dword [rax + rcx*8 + 0xc], ebp
mov dword [rax + rcx*8 + 8], edx
mov edx, dword [rbx + 0xb8]
test edi, edi
jns 0x140095b94
lea edi, [rdx - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
je 0x140095ba6
lea rax, [0x1401763d0]
jmp 0x140095bb5
movsxd rax, edi
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rax, [rax + rcx*8]
mov dword [rax + 8], edx
sub r12, 1
mov rsi, qword [rsp + 0x70]
jns 0x1400954d2
mov r9, qword [rsp + 0x78]
mov r15, qword [rsp + 0x80]
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + 0x58]
test rdx, rdx
je 0x140095bf2
mov eax, dword [rsi + 0x38]
not eax
movsxd rcx, eax
mov eax, dword [rbx + 0xb8]
mov dword [rdx + rcx*4], eax
cmp byte [rsi + 0x42], 0
mov r14d, ebp
jbe 0x140095e0d
lea r11, [rsi + 0x3e0]
xor r12d, r12d
nop dword [rax]
movzx eax, byte [r11 - 0x1c]
mov rdx, qword [r11]
imul rcx, rax, 0x78
test byte [rcx + r9 + 0x48], 0x10
mov rbp, qword [rcx + r9 + 0x28]
je 0x140095cd4
mov r8d, dword [r11 - 0x28]
mov edi, dword [rcx + r9 + 0x40]
mov ecx, r8d
mov r9d, dword [r11 - 0x44]
mov rdx, qword [r13 + 0x10]
test r8d, r8d
jns 0x140095c4e
mov ecx, dword [rdx + 0xb8]
dec ecx
mov rax, qword [rdx]
cmp byte [rax + 0x55], r12b
je 0x140095c60
lea r10, [0x1401763d0]
jmp 0x140095c6f
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rdx + 0x68]
lea r10, [rax + rcx*8]
mov rax, qword [r13]
mov ecx, dword [rdx + 0xb8]
cmp byte [rax + 0x55], r12b
jne 0x140095df4
cmp r8d, ecx
jge 0x140095df4
sub ecx, r8d
lea rdx, [r10 + 4]
mov r8d, ecx
cmp dword [rdx], r9d
jne 0x140095cc5
movzx eax, byte [rdx - 4]
cmp al, 0x63
jne 0x140095cb6
mov ecx, dword [rdx + 4]
mov eax, dword [rdx + 8]
add ecx, edi
mov dword [rdx], ecx
mov byte [rdx - 4], 0x40
mov dword [rdx + 4], eax
jmp 0x140095cc1
cmp al, 0x7d
jne 0x140095cc5
mov byte [rdx - 4], 0x3b
mov dword [rdx], r12d
mov dword [rdx + 8], r12d
add rdx, 0x18
sub r8, 1
jne 0x140095c96
jmp 0x140095df4
mov eax, dword [rdx + 0x28]
test eax, 0x240
je 0x140095ce4
mov rdi, qword [rdx + 0x20]
jmp 0x140095cf2
bt eax, 0xd
jae 0x140095df9
mov rdi, qword [r11 - 0x10]
test rdi, rdi
je 0x140095df9
cmp byte [rsi + 0x45], r12b
je 0x140095d0f
mov rax, qword [rdi + 0x18]
test byte [rax + 0x40], 0x20
je 0x140095df9
cmp byte [r15 + 0x55], r12b
jne 0x140095df9
mov r9d, dword [r11 - 0x28]
mov ecx, r9d
mov r8d, dword [rbx + 0xb8]
test r9d, r9d
jns 0x140095d30
lea ecx, [r8 - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], r12b
je 0x140095d42
lea rdx, [0x1401763d0]
jmp 0x140095d51
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x68]
lea rdx, [rax + rcx*8]
cmp r9d, r8d
jge 0x140095df4
sub r8d, r9d
add rdx, 4
mov esi, r8d
or r15d, 0xffffffff
mov eax, dword [r11 - 0x44]
cmp dword [rdx], eax
jne 0x140095ddd
movzx eax, byte [rdx - 4]
cmp al, 0x63
jne 0x140095dc5
test byte [rbp + 0x40], 0x20
movsxd r8, dword [rdx + 4]
je 0x140095d93
mov rcx, rbp
call fcn.1400592a0
mov rax, qword [rax + 8]
movsx r8d, word [rax + r8*2]
movzx r9d, word [rdi + 0x60]
mov eax, r12d
test r9d, r9d
jle 0x140095db5
mov r10, qword [rdi + 8]
movsxd rcx, eax
cmp r8w, word [r10 + rcx*2]
je 0x140095db9
inc eax
cmp eax, r9d
jl 0x140095da4
movzx eax, r15w
movsx ecx, ax
test ecx, ecx
js 0x140095ddd
mov dword [rdx + 4], ecx
jmp 0x140095dd7
cmp al, 0x7d
jne 0x140095dd3
mov eax, dword [r11 - 0x40]
mov byte [rdx - 4], 0x83
jmp 0x140095ddb
cmp al, 0x17
jne 0x140095ddd
mov eax, dword [r11 - 0x40]
mov dword [rdx], eax
add rdx, 0x18
sub rsi, 1
jne 0x140095d68
mov rsi, qword [rsp + 0x70]
mov r15, qword [rsp + 0x80]
mov r9, qword [rsp + 0x78]
movzx eax, byte [rsi + 0x42]
inc r14d
add r11, 0x58
cmp r14d, eax
jl 0x140095c10
mov eax, dword [rsi + 0x3c]
mov rdx, rsi
mov rcx, r15
mov dword [r13 + 0xb4], eax
mov rdi, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
jmp fcn.140090ad0