Function at 0x1803b50d0
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0xa8]
sub rsp, 0x1a8
mov rax, qword [0x18056d580]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x100]
mov esi, r9d
mov qword [rsp + 0x68], rax
mov rdi, rcx
xor eax, eax
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x3c], eax
mov r12d, eax
mov dword [rsp + 0x34], eax
mov r14d, eax
mov r13d, r8d
lea rax, [rbp - 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rcx
mov byte [rsp + 0x30], r12b
test rcx, rcx
je 0x1803b575f
cmp dword [rcx], 0xbab1e
jne 0x1803b575f
cmp byte [rcx + 0x1ab], r12b
je 0x1803b5164
mov eax, 8
jmp 0x1803b5224
test esi, esi
jns 0x1803b5172
mov eax, 0xa
jmp 0x1803b5224
xorps xmm0, xmm0
mov qword [rsp + 0x1a0], rbx
mov rbx, qword [rcx + 8]
xor eax, eax
mov qword [rbp - 0x60], rax
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
test rbx, rbx
je 0x1803b51bf
nop dword [rax]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.1803b3be0
add r14d, dword [rbp - 0x68]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1803b51a0
mov dword [rsp + 0x3c], r14d
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1803b4fe0
mov eax, dword [rsp + 0x38]
test eax, eax
js 0x1803b51dd
cmp eax, esi
cmovl esi, eax
mov dword [rsp + 0x48], esi
cmp byte [rbp + 0x110], r12b
lea eax, [r14 + r13]
lea ecx, [rax + 1]
mov qword [rsp + 0x198], r15
cmove ecx, eax
cmp ecx, 0xa
jbe 0x1803b5249
shl rcx, 4
call qword [fcn.180422140]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x1803b5244
mov eax, 3
mov r15, qword [rsp + 0x198]
mov rbx, qword [rsp + 0x1a0]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.18040c600
add rsp, 0x1a8
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x30], 1
xor edx, edx
mov dword [rsp + 0x38], edx
mov esi, edx
test r14d, r14d
je 0x1803b536c
mov r15, qword [rdi + 8]
test r15, r15
je 0x1803b536c
nop word [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.1803b3be0
xor edx, edx
mov edi, edx
cmp dword [rbp - 0x68], edx
jbe 0x1803b535a
mov r14, qword [rsp + 0x40]
nop
mov rax, qword [rsp + rdi*8 + 0x70]
mov ebx, esi
inc esi
shl rbx, 4
add rbx, r14
mov dword [rsp + 0x38], esi
mov esi, edx
mov qword [rbx], rax
mov word [rbx + 8], dx
test byte [rbp + rdi - 0x64], 1
je 0x1803b52c2
mov eax, 0x300
mov esi, reloc.WLDAP32.dll_Ordinal_41
mov word [rbx + 8], ax
test byte [rbp + rdi - 0x64], 2
je 0x1803b5322
mov r14, qword [rsp + rdi*8 + 0x70]
lea rax, [rsp + 0x4c]
mov rcx, r14
mov dword [rsp + 0x4c], 4
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or esi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x1803b5318
cmp dword [rsp + 0x50], 1
jne 0x1803b5318
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.WS2_32.dll_send]
or word [rbx + 8], 0x10
mov r14, qword [rsp + 0x40]
mov rax, qword [rsp + 0x60]
mov r8d, esi
mov rcx, qword [rsp + rdi*8 + 0x70]
mov rdx, qword [rax + 0x198]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1803b5482
mov eax, dword [rbp - 0x68]
inc rdi
mov esi, dword [rsp + 0x38]
mov rdx, r12
cmp rdi, rax
jb 0x1803b5290
mov r15, qword [r15 + 0x10]
test r15, r15
jne 0x1803b5270
mov rdi, qword [rsp + 0x60]
lea r15, [rdi + 0x198]
mov r14, rdx
test r13, r13
je 0x1803b54b8
mov rbx, qword [rsp + 0x58]
add rbx, 8
nop dword [rax + rax]
movzx edx, word [rbx]
movzx eax, dl
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x29
mov edi, ecx
or edi, 4
test dl, 2
cmove edi, ecx
test dl, 4
je 0x1803b53fd
mov rsi, qword [rbx - 8]
lea rax, [rsp + 0x50]
mov rcx, rsi
mov dword [rsp + 0x50], 4
lea r9, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or edi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x1803b53fd
cmp dword [rsp + 0x4c], 1
jne 0x1803b53fd
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_send]
mov rdx, qword [r15]
mov r8d, edi
mov rcx, qword [rbx - 8]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1803b549c
mov rax, qword [rbx - 8]
xor edx, edx
mov esi, dword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
mov ecx, esi
shl rcx, 4
add rcx, r9
mov qword [rcx], rax
movzx eax, dx
mov word [rcx + 8], dx
test byte [rbx], 1
je 0x1803b544a
mov r10d, 0x300
mov word [rcx + 8], r10w
mov eax, r10d
test byte [rbx], 2
je 0x1803b545d
mov r8d, 0x400
or ax, r8w
mov word [rcx + 8], ax
test byte [rbx], 4
je 0x1803b546a
or ax, 0x10
mov word [rcx + 8], ax
inc esi
inc r14
add rbx, 0x10
mov dword [rsp + 0x38], esi
cmp r14, r13
jb 0x1803b5390
jmp 0x1803b54bd
cmp byte [rsp + 0x30], r12b
je 0x1803b54ae
mov rcx, r14
call qword [fcn.18041c048]
mov eax, 4
jmp 0x1803b5214
cmp byte [rsp + 0x30], r12b
je 0x1803b54ae
mov rcx, qword [rsp + 0x40]
call qword [fcn.18041c048]
mov eax, 4
jmp 0x1803b5214
mov r9, qword [rsp + 0x40]
test esi, esi
jne 0x1803b54d4
movzx ebx, byte [rbp + 0x110]
test bl, bl
je 0x1803b56e0
mov edi, edx
jmp 0x1803b54fe
xor r8d, r8d
mov edx, esi
mov rcx, r9
call fcn.1803d7f00
mov edi, eax
test eax, eax
jns 0x1803b54f1
mov eax, reloc.WS2_32.dll_inet_ntoa
jmp 0x1803b5214
jle 0x1803b54fc
mov r12d, eax
mov dword [rsp + 0x34], eax
jmp 0x1803b5517
xor edx, edx
mov r9d, dword [rsp + 0x48]
xor r8d, r8d
mov dword [rsp + 0x20], edx
mov rdx, r15
lea ecx, [r8 + 1]
call qword [sym.imp.WS2_32.dll_WSAWaitForMultipleEvents]
test r13, r13
je 0x1803b5617
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x3c]
shl rax, 4
sub rax, rcx
add rax, qword [rsp + 0x40]
lea rsi, [rcx + 0xa]
mov qword [rsp + 0x58], rax
nop
movsx r12d, word [rax + rsi]
lea r8, [rbp - 0x58]
mov r14, qword [rsi - 0xa]
xor eax, eax
mov rcx, r14
mov dword [rbp - 0x58], eax
xor edx, edx
movzx ebx, ax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1803b55b8
mov r8d, dword [rbp - 0x58]
mov ecx, eax
test r8b, 0x29
setne cl
movzx edx, cx
or dx, 4
test r8b, 0x32
cmove dx, cx
movzx ecx, dx
or cx, 2
test r8b, 4
cmove cx, dx
cmp qword [rsp + 0x68], 0
movzx ebx, cx
je 0x1803b55b8
test edi, edi
jne 0x1803b55b8
test r8d, r8d
je 0x1803b55b8
inc dword [rsp + 0x34]
xor r8d, r8d
mov rdx, qword [r15]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
jmp 0x1803b55fc
mov rdx, qword [r15]
xor r8d, r8d
mov rcx, r14
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test edi, edi
je 0x1803b55fc
movzx ecx, bx
or cx, 1
test r12d, 0x300
cmove cx, bx
movzx edx, cx
or dx, 4
test r12b, 0x10
cmove dx, cx
movzx ebx, dx
or bx, 2
bt r12d, 0xa
cmovae bx, dx
mov rax, qword [rsp + 0x58]
mov word [rsi], bx
add rsi, 0x10
sub r13, 1
jne 0x1803b5540
mov r12d, dword [rsp + 0x34]
cmp dword [rsp + 0x3c], 0
je 0x1803b56cc
mov rax, qword [rsp + 0x60]
mov rsi, qword [rax + 8]
mov qword [rsp + 0x58], rsi
test rsi, rsi
je 0x1803b56cc
nop dword [rax]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1803b3be0
xor eax, eax
mov ebx, eax
cmp dword [rbp - 0x68], eax
jbe 0x1803b56b5
mov esi, dword [rsp + 0x34]
nop word [rax + rax]
mov rcx, qword [rsp + rbx*8 + 0x70]
lea r8, [rbp - 0x58]
xor edx, edx
mov dword [rbp - 0x58], eax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1803b568b
cmp qword [rsp + 0x68], 0
je 0x1803b568b
test edi, edi
jne 0x1803b568b
cmp dword [rbp - 0x58], edi
je 0x1803b568b
inc esi
mov rdx, qword [r15]
xor r8d, r8d
mov rcx, qword [rsp + rbx*8 + 0x70]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
mov eax, dword [rbp - 0x68]
inc rbx
cmp rbx, rax
mov eax, 0
jb 0x1803b5660
mov dword [rsp + 0x34], esi
mov rsi, qword [rsp + 0x58]
mov rsi, qword [rsi + 0x10]
mov qword [rsp + 0x58], rsi
test rsi, rsi
jne 0x1803b5640
mov r12d, dword [rsp + 0x34]
mov rcx, qword [r15]
call qword [sym.imp.WS2_32.dll_WSAResetEvent]
mov esi, dword [rsp + 0x38]
movzx ebx, byte [rbp + 0x110]
cmp byte [rsp + 0x30], 0
je 0x1803b56f2
mov rcx, qword [rsp + 0x40]
call qword [fcn.18041c048]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x1803b56ff
mov dword [rax], r12d
cmp byte [rbp + 0x108], 0
je 0x1803b5758
test esi, esi
jne 0x1803b5758
test bl, bl
jne 0x1803b5758
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x3c], esi
cmp dword [rax], 0xbab1e
jne 0x1803b5758
cmp byte [rax + 0x1ab], bl
jne 0x1803b5758
lea rdx, [rsp + 0x3c]
mov rcx, rax
call fcn.1803b4fe0
test eax, eax
jne 0x1803b5758
mov eax, dword [rsp + 0x3c]
test eax, eax
je 0x1803b5758
mov ecx, dword [rsp + 0x48]
cmp eax, ecx
jg 0x1803b574e
test eax, eax
jns 0x1803b5750
mov eax, ecx
movsxd rcx, eax
call fcn.1803d8460
xor eax, eax
jmp 0x1803b5214
mov eax, 1
jmp 0x1803b5224