Function at 0x7ffe04633b80
Capabilities:
Link many functions at runtime

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov rax, qword [0x7ffe0466e080]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov ebx, 1
lea rcx, [rbp - 0x39]
xor edx, edx
mov dword [rbp - 0x45], ebx
lea r8d, [rbx + 0x7f]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edi, edi
mov dword [rbp - 0x49], 0x80
cmp byte [0x7ffe0466e818], dil
jne 0x7ffe046343d5
lea rcx, [0x7ffe0466ee48]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp byte [0x7ffe0466e818], dil
jne 0x7ffe046343c2
call fcn.7ffe046337b8
lea rcx, str.WS2_32.DLL
call fcn.7ffe0465a658
mov qword [0x7ffe0466e888], rax
test rax, rax
jne 0x7ffe04633c59
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343c0
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343c0
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.LDAP_client_failed_to_load_Winsock__error__0x_x._n
jmp 0x7ffe04634397
lea rdx, str.WSAStartup
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.WSACleanup
mov qword [0x7ffe0466f118], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.WSAGetLastError
mov qword [0x7ffe0466ef20], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.WSASetLastError
mov qword [0x7ffe0466ef40], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.socket
mov qword [0x7ffe0466ef10], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, [0x7ffe04661498]
mov qword [0x7ffe0466eeb8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.htons
mov qword [0x7ffe0466ef18], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.htonl
mov qword [0x7ffe0466ef38], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.ntohl
mov qword [0x7ffe0466eee0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.closesocket
mov qword [0x7ffe0466eed8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.recv
mov qword [0x7ffe0466eeb0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.send
mov qword [0x7ffe0466eee8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.select
mov qword [0x7ffe0466f100], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.__WSAFDIsSet
mov qword [0x7ffe0466eed0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.ioctlsocket
mov qword [0x7ffe0466ef58], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.getsockopt
mov qword [0x7ffe0466ef50], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.setsockopt
mov qword [0x7ffe0466ef08], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, [0x7ffe0466151c]
mov qword [0x7ffe0466eec0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.getsockname
mov qword [0x7ffe0466f110], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.GetAddrInfoW
mov qword [0x7ffe0466f108], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov qword [0x7ffe0466eef8], rax
lea rdx, str.FreeAddrInfoW
mov rcx, qword [0x7ffe0466e888]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x7ffe0466e888]
lea rdx, str.WSAStringToAddressW
mov qword [0x7ffe0466ef00], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
cmp qword [0x7ffe0466f118], rdi
mov qword [0x7ffe0466ef48], rax
je 0x7ffe04634366
cmp qword [0x7ffe0466ef20], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466ef40], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466ef10], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466eef8], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466ef00], rdi
je 0x7ffe04634366
test rax, rax
je 0x7ffe04634366
cmp qword [0x7ffe0466eee8], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466eeb8], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466ef18], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466ef38], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466eee0], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466eed8], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466f100], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466eeb0], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466ef58], rdi
je 0x7ffe04634366
cmp qword [0x7ffe0466eed0], rdi
je 0x7ffe04634366
mov eax, dword [0x7ffe0466eeac]
mov r14d, 0x4000000
test eax, eax
je 0x7ffe0463403a
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0463403a
test qword [0x7ffe0466eea0], r14
je 0x7ffe0463403a
lea rdx, str.Using_Strong_Scrambling_APIs__CryptProtectMemory_CryptUnprotectMemory__n
mov ecx, r14d
call fcn.7ffe04636c10
mov eax, dword [0x7ffe0466eeac]
mov ecx, 0x10
mov word [0x7ffe0466eec8], cx
test eax, eax
je 0x7ffe0463406a
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0463406a
test qword [0x7ffe0466eea0], r14
je 0x7ffe0463406a
lea rdx, str.LDAP_Client_initializing_Winsock._n
mov ecx, r14d
call fcn.7ffe04636c10
mov rax, qword [0x7ffe0466f118]
lea rdx, [0x7ffe0466ef60]
mov esi, 2
mov ecx, esi
call qword [0x7ffe0465c528]
test eax, eax
je 0x7ffe046340cc
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
mov rax, qword [0x7ffe0466ef40]
call qword [0x7ffe0465c528]
lea rdx, str.LDAP_client_failed_to_initialize_Winsock__error__0x_x._n
jmp 0x7ffe04634397
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046340f4
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046340f4
test qword [0x7ffe0466eea0], r14
je 0x7ffe046340f4
lea rdx, str.LDAP_Client_initialized_winsock._n
mov ecx, r14d
call fcn.7ffe04636c10
xor edx, edx
lea rcx, [rbp - 0x37]
lea r8d, [rdx + 0x7e]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x7ffe0466eeb8]
xor r8d, r8d
mov edx, esi
mov word [rbp - 0x39], si
mov ecx, esi
call qword [0x7ffe0465c528]
mov qword [0x7ffe0466e0b0], rax
mov rcx, rax
mov r14d, 0x17
cmp rax, 0xffffffffffffffff
jne 0x7ffe0463419e
mov rax, qword [0x7ffe0466eeb8]
xor r8d, r8d
mov edx, esi
mov word [rbp - 0x39], r14w
mov ecx, r14d
call qword [0x7ffe0465c528]
mov qword [0x7ffe0466e0b0], rax
mov rcx, rax
cmp rax, 0xffffffffffffffff
jne 0x7ffe0463419e
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
mov rax, qword [0x7ffe0466ef40]
call qword [0x7ffe0465c528]
lea rdx, str.Failed_to_create_socket_in_LdapClientInitialize:__d_n
jmp 0x7ffe04634397
cmp word [rbp - 0x39], si
jne 0x7ffe046341af
mov eax, dword [0x7ffe0466921c]
mov dword [rbp - 0x35], eax
jmp 0x7ffe046341c2
cmp word [rbp - 0x39], r14w
jne 0x7ffe046341c2
movups xmm0, xmmword [0x7ffe04669220]
movdqu xmmword [rbp - 0x31], xmm0
mov rax, qword [0x7ffe0466f110]
lea rdx, [rbp - 0x39]
mov r8d, 0x80
mov word [rbp - 0x37], di
call qword [0x7ffe0465c528]
test eax, eax
je 0x7ffe04634224
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
mov rax, qword [0x7ffe0466ef40]
call qword [0x7ffe0465c528]
lea rdx, str.Failed_to_bind_socket_in_LdapClientInitialize:__d_n
jmp 0x7ffe04634397
mov rcx, qword [0x7ffe0466e0b0]
lea r8, [rbp - 0x49]
mov rax, qword [0x7ffe0466f108]
lea rdx, [rbp - 0x39]
call qword [0x7ffe0465c528]
test eax, eax
je 0x7ffe04634287
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
mov rax, qword [0x7ffe0466ef40]
call qword [0x7ffe0465c528]
lea rdx, str.Failed_in_getsockname_in_LdapClientInitialize:__d_n
jmp 0x7ffe04634397
cmp word [rbp - 0x39], si
jne 0x7ffe04634298
mov eax, dword [0x7ffe0466921c]
mov dword [rbp - 0x35], eax
jmp 0x7ffe046342a4
movups xmm0, xmmword [0x7ffe04669220]
movdqu xmmword [rbp - 0x31], xmm0
mov rcx, qword [0x7ffe0466e0b0]
lea rdx, [rbp - 0x39]
mov rax, qword [0x7ffe0466ef18]
mov r8d, 0x80
call qword [0x7ffe0465c528]
test eax, eax
je 0x7ffe04634309
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
mov rax, qword [0x7ffe0466ef40]
call qword [0x7ffe0465c528]
lea rdx, str.Failed_to_connect_socket_to_itself_in_LdapClientInitialize:__d_n
jmp 0x7ffe04634397
mov rcx, qword [0x7ffe0466e0b0]
lea r8, [rbp - 0x45]
mov rax, qword [0x7ffe0466ef50]
mov edx, 0x8004667e
call qword [0x7ffe0465c528]
test eax, eax
je 0x7ffe0463435e
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
mov rax, qword [0x7ffe0466ef40]
call qword [0x7ffe0465c528]
lea rdx, str.Failed_to_set_socket_to_nonblocking_in_LdapClientInitialize:__d_n
jmp 0x7ffe04634397
mov byte [0x7ffe0466e818], bl
jmp 0x7ffe046343c2
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046343a1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046343a1
mov ebx, 0x10000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe046343a1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.LDAP_client_failed_GetProcAddress__error__0x_x._n
mov r8d, eax
mov ecx, ebx
call fcn.7ffe04636b9c
mov rcx, qword [0x7ffe0466e888]
test rcx, rcx
je 0x7ffe046343c0
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov qword [0x7ffe0466e888], rdi
mov ebx, edi
lea rcx, [0x7ffe0466ee48]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov eax, ebx
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.7ffe04622890
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret