Function at 0x1400472d0
Capabilities:
Set socket configuration

Disassembly:
push rsi
sub rsp, 0x50
mov rax, qword [rcx + 0x48]
mov rsi, rcx
test rax, rax
jne 0x1400472e8
add rsp, 0x50
pop rsi
ret
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x48], r12
xor r12d, r12d
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r15
mov r15, qword [rax + 0x68]
mov qword [rcx + 0x48], r12
mov r14, r15
test r15, r15
je 0x1400479a9
lea r13, sym.imp.advapi32.dll_RegEnumKeyW
nop dword [rax]
mov rax, qword [r14 + 0x68]
mov rbx, r14
cmp rax, r15
mov r14, r12
cmovne r14, rax
mov eax, dword [rbx + 8]
add eax, 0xfffffffe
cmp eax, 0xf
ja case.0x14004735d.6
cdqe
mov ecx, dword [r13 + rax*4 + 0x479e4]
add rcx, r13
jmp rcx
mov rdx, qword [rbx]
mov eax, dword [rdx + 0x10]
cmp eax, 7
je 0x1400473ab
cmp eax, 0xc
je 0x14004739b
cmp eax, 0xe
jne case.0x14004735d.6
mov r8, rbx
mov rcx, rsi
cmp dword [rdx + 0x120], r12d
jne 0x140047391
call fcn.1400493a0
jmp case.0x14004735d.6
call fcn.140049960
jmp case.0x14004735d.6
mov r8, rbx
mov rcx, rsi
call fcn.140051770
jmp case.0x14004735d.6
mov r8, rbx
mov rcx, rsi
call fcn.140054bf0
jmp case.0x14004735d.6
mov rdi, qword [rbx + 0x80]
mov eax, dword [rdi + 0x10]
cmp eax, 7
je 0x140047483
cmp eax, 0xc
je 0x140047470
cmp eax, 0xe
jne case.0x14004735d.6
mov rax, qword [rbx + 0x60]
sub qword [rdi + 0x60], rax
sub dword [rdi + 0x7c], 1
jne 0x14004740a
mov eax, dword [rdi + 0x58]
test al, 1
jne 0x14004740a
test al, 4
je 0x14004740a
and eax, 0xfffffffb
mov dword [rdi + 0x58], eax
test al, 8
je 0x14004740a
mov rax, qword [rdi + 8]
dec dword [rax + 8]
dec dword [rsi + 0x20]
cmp qword [rbx + 0x70], r12
je 0x14004742b
mov ecx, dword [rbx + 0x40]
call qword [0x140296d88]
mov ecx, eax
call fcn.140053410
mov edx, eax
mov rcx, rbx
call qword [rbx + reloc.WS2_32.dll_WSASetLastError]
mov eax, dword [rdi + 0x100]
dec eax
mov dword [rdi + 0x100], eax
cmp qword [rdi + 0x108], r12
je 0x14004752e
test eax, eax
jne 0x14004752e
mov eax, dword [rdi + 0x58]
test al, 0x20
jne 0x14004752e
or eax, 0x20
mov dword [rdi + 0x58], eax
mov rax, qword [rsi + 0x50]
mov qword [rdi + 0x50], rax
mov qword [rsi + 0x50], rdi
jmp 0x14004752e
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140051a70
jmp case.0x14004735d.6
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140054d90
jmp case.0x14004735d.6
mov rdi, qword [rbx]
mov eax, dword [rdi + 0x10]
cmp eax, 7
je 0x1400474c7
cmp eax, 0xc
je 0x1400474b4
cmp eax, 0xe
je 0x1400479d7
jmp case.0x14004735d.6
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140051ba0
jmp case.0x14004735d.6
mov eax, dword [rdi + 0x58]
test al, 1
je 0x1400474d4
add dword [rdi + 0x78], 0xffffffff
jmp 0x140047543
cmp dword [rbx + 0x40], r12d
jl 0x140047501
mov rax, qword [rdi + 0x138]
mov qword [rbx + 0x78], rax
mov rax, qword [rdi + 0x100]
mov qword [rdi + 0x138], rbx
test rax, rax
je 0x14004752e
xor edx, edx
mov rcx, rdi
call rax
jmp 0x14004752e
mov rcx, qword [rbx + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x14004751c
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov qword [rbx + 0x70], 0xffffffffffffffff
mov eax, dword [rdi + 0x58]
test al, 1
jne 0x14004752e
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140054130
mov ecx, dword [rdi + 0x78]
dec ecx
mov dword [rdi + 0x78], ecx
mov eax, dword [rdi + 0x58]
test al, 1
je case.0x14004735d.6
test ecx, ecx
jne case.0x14004735d.6
test al, 0x20
jne case.0x14004735d.6
or eax, 0x20
mov dword [rdi + 0x58], eax
mov rax, qword [rsi + 0x50]
mov qword [rdi + 0x50], rax
mov qword [rsi + 0x50], rdi
jmp case.0x14004735d.6
mov rdi, qword [rbx + 0x78]
mov eax, dword [rdi + 0x10]
cmp eax, 7
je 0x140047641
cmp eax, 0xc
je 0x14004758b
cmp eax, 0xe
je 0x1400479dd
jmp case.0x14004735d.6
sub dword [rdi + 0x7c], 1
jne 0x1400475ad
mov eax, dword [rdi + 0x58]
test al, 1
jne 0x1400475ad
test al, 4
je 0x1400475ad
and eax, 0xfffffffb
mov dword [rdi + 0x58], eax
test al, 8
je 0x1400475ad
mov rax, qword [rdi + 8]
dec dword [rax + 8]
dec dword [rsi + 0x20]
mov ebp, r12d
mov ecx, dword [rbx + 0x40]
test ecx, ecx
js 0x140047626
test byte [rdi + 0x58], 1
je 0x1400475d9
mov ebp, 0x3e3
mov ecx, ebp
call fcn.140053410
mov edx, eax
mov rcx, rbx
call qword [rbx + reloc.WS2_32.dll_WSASetLastError]
jmp 0x14004752e
mov rcx, qword [rdi + 0x110]
xor r9d, r9d
mov edx, 0xffff
mov dword [rsp + 0x20], r12d
mov r8d, 0x7010
call qword [sym.imp.WS2_32.dll_setsockopt]
test eax, eax
jne 0x14004761e
or dword [rdi + 0x58], 0xc080
mov ecx, ebp
inc dword [rsi + 0xa8]
call fcn.140053410
mov edx, eax
mov rcx, rbx
call qword [rbx + reloc.WS2_32.dll_WSASetLastError]
jmp 0x14004752e
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
jmp 0x14004762b
call fcn.140056180
mov ecx, eax
mov ebp, eax
call fcn.140053410
mov edx, eax
mov rcx, rbx
call qword [rbx + reloc.WS2_32.dll_WSASetLastError]
jmp 0x14004752e
sub dword [rdi + 0x7c], 1
jne 0x140047663
mov eax, dword [rdi + 0x58]
test al, 1
jne 0x140047663
test al, 4
je 0x140047663
and eax, 0xfffffffb
mov dword [rdi + 0x58], eax
test al, 8
je 0x140047663
mov rax, qword [rdi + 8]
dec dword [rax + 8]
dec dword [rsi + 0x20]
cmp qword [rbx + 0x70], r12
je 0x14004752e
mov ecx, dword [rbx + 0x40]
mov ebp, r12d
test ecx, ecx
js 0x1400476c1
or dword [rdi + 0x58], 0x80
test dword [rdi + 0x58], 0x1000000
mov qword [rdi + 0x80], rdi
mov qword [rdi + 0x128], r12
je 0x1400476c9
lea rcx, [rdi + 0x210]
mov qword [rdi + 0x238], r12
call qword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
mov ecx, r12d
call fcn.140053410
mov edx, eax
mov rcx, rbx
call qword [rbx + reloc.WS2_32.dll_WSASetLastError]
jmp 0x14004752e
call qword [0x140296d88]
mov ebp, eax
mov ecx, ebp
call fcn.140053410
mov edx, eax
mov rcx, rbx
call qword [rbx + reloc.WS2_32.dll_WSASetLastError]
jmp 0x14004752e
mov rdx, qword [rbx + 0x70]
mov r8, rbx
mov rcx, rsi
call fcn.140054f10
jmp case.0x14004735d.6
mov rdx, qword [rbx]
mov r8, rbx
mov rcx, rsi
call fcn.140052900
jmp case.0x14004735d.6
mov rdi, qword [rbx + 0x70]
mov rax, qword [rbx + 0x60]
sub qword [rdi + 0x60], rax
dec qword [rdi + 0x68]
sub dword [rdi + 0x7c], 1
jne 0x140047736
mov eax, dword [rdi + 0x58]
test al, 1
jne 0x140047736
test al, 4
je 0x140047736
and eax, 0xfffffffb
mov dword [rdi + 0x58], eax
test al, 8
je 0x140047736
mov rax, qword [rdi + 8]
dec dword [rax + 8]
dec dword [rsi + 0x20]
mov r9, qword [rbx + 0x78]
test r9, r9
je 0x14004752e
mov ecx, dword [rbx + 0x40]
mov eax, r12d
test ecx, ecx
jns 0x140047755
call fcn.140056180
mov ecx, eax
call fcn.140053410
mov edx, eax
mov rcx, rbx
call r9
jmp 0x14004752e
mov rcx, qword [rbx]
mov eax, dword [rcx + 0x58]
mov byte [rcx + 0xd8], r12b
test al, 1
je 0x140047799
test al, 0x20
jne case.0x14004735d.6
or eax, 0x20
mov dword [rcx + 0x58], eax
mov rax, qword [rsi + 0x50]
mov qword [rcx + 0x50], rax
mov qword [rsi + 0x50], rcx
jmp case.0x14004735d.6
mov rax, qword [rcx + 0xd0]
test rax, rax
je case.0x14004735d.6
call rax
jmp case.0x14004735d.6
mov rbx, qword [rbx]
mov edx, r12d
xchg dword [rbx + 0x100], edx
cmp edx, dword [rbx + 0x68]
jne 0x1400477c7
mov rcx, rbx
call qword [rbx + 0x60]
mov ecx, dword [rbx + 0x58]
bt ecx, 0x19
jae 0x1400477db
mov rcx, rbx
call fcn.140046da0
mov ecx, dword [rbx + 0x58]
mov eax, ecx
and al, 0x21
cmp al, 1
jne case.0x14004735d.6
or ecx, 0x20
mov dword [rbx + 0x58], ecx
mov rax, qword [rsi + 0x50]
mov qword [rbx + 0x50], rax
mov qword [rsi + 0x50], rbx
jmp case.0x14004735d.6
mov rdi, qword [rbx]
test dword [rdi + 0x58], 0x1000000
jne 0x14004781d
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.1400552e0
jmp case.0x14004735d.6
lea rax, [rdi + 0xb8]
cmp rbx, rax
jne 0x140047839
movzx eax, byte [rdi + 0x19a]
mov byte [rdi + 0x198], r12b
jmp 0x140047857
lea rax, [rdi + 0x128]
cmp rbx, rax
jne case.0x14004735d.6
movzx eax, byte [rdi + 0x19b]
mov byte [rdi + 0x199], r12b
mov ecx, dword [rbx + 0x40]
movzx edx, byte [rdi + 0x19c]
test ecx, ecx
jns 0x140047884
test dl, dl
je 0x1400478a0
call qword [0x140296d88]
mov ecx, eax
mov byte [rdi + 0x19c], r12b
call fcn.140053410
mov edx, eax
xor r8d, r8d
jmp 0x14004789a
mov r8d, dword [rbx + 0x48]
movzx eax, al
not eax
and r8d, eax
movzx eax, dl
and r8d, eax
je 0x1400478a0
xor edx, edx
mov rcx, rdi
call qword [rdi + 0x60]
movzx edx, byte [rdi + 0x198]
movzx r8d, byte [rdi + 0x199]
mov ecx, edx
or ecx, r8d
not ecx
test byte [rdi + 0x19c], cl
je 0x1400478ce
mov rdx, rdi
mov rcx, rsi
call fcn.1400557d0
jmp case.0x14004735d.6
mov eax, dword [rdi + 0x58]
test al, 1
je case.0x14004735d.6
test dl, dl
jne case.0x14004735d.6
test r8b, r8b
jmp 0x140047543
mov rbx, qword [rbx]
mov eax, dword [rbx + 0x58]
mov byte [rbx + 0x100], r12b
test al, 1
je 0x140047919
test al, 0x20
jne case.0x14004735d.6
or eax, 0x20
mov dword [rbx + 0x58], eax
mov rax, qword [rsi + 0x50]
mov qword [rbx + 0x50], rax
mov qword [rsi + 0x50], rbx
jmp case.0x14004735d.6
mov rcx, qword [rbx + 0xf0]
cmp rcx, 0xffffffffffffffff
je 0x14004793a
call qword [sym.imp.KERNEL32.DLL_UnregisterWait]
mov eax, dword [rbx + 0x58]
mov qword [rbx + 0xf0], 0xffffffffffffffff
test al, 4
je 0x14004794f
and eax, 0xfffffffb
mov dword [rbx + 0x58], eax
test al, 8
je 0x14004794f
mov rax, qword [rbx + 8]
dec dword [rax + 8]
mov rcx, qword [rbx + 0xf8]
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.DLL_GetExitCodeProcess]
test eax, eax
je 0x14004796b
mov edx, dword [rsp + 0x60]
jmp 0x14004797b
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, eax
call fcn.140053410
movsxd rdx, eax
mov rax, qword [rbx + 0x60]
test rax, rax
je case.0x14004735d.6
mov r8d, dword [rbx + 0xe8]
mov rcx, rbx
call rax
jmp case.0x14004735d.6
mov r8, qword [rbx]
mov rdx, rbx
mov rcx, rsi
call fcn.14004f5d0
test r14, r14
jne 0x140047330
mov r14, qword [rsp + 0x38]
mov eax, 1
mov r13, qword [rsp + 0x40]
mov r12, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
mov r15, qword [rsp + 0x30]
add rsp, 0x50
pop rsi
ret
call fcn.14004bd80
int3
call fcn.14004bd80
int3