Function at 0x4ace00
Capabilities:
Receive data
Receive data on socket
Resolve function by parsing pe exports
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x3f0
mov ebx, dword [edx + 0x20]
mov esi, dword [edx + 0x14]
mov edi, ecx
test ebx, ebx
je 0x4ace86
mov eax, dword [edx + 0x18]
cmp ebx, eax
mov dword [esp + 0xc], eax
jae 0x4ace31
cmp byte [esi + ebx], 0xbf
jg 0x4ace37
jmp 0x4ae653
jne 0x4ae653
cmp ebx, 5
je 0x4ace70
cmp ebx, 4
jne 0x4ace86
cmp dword [esi], 0x70747468
mov al, 1
mov dword [esp + 0x40], eax
je 0x4ace57
cmp dword [esi], 0x74736574
jne 0x4ace86
cmp ebx, dword [esp + 0xc]
jae 0x4acf1f
cmp byte [esi + ebx], 0xbf
jg 0x4acf25
jmp 0x4ae653
mov eax, 0x70747468
movzx ecx, byte [esi + 4]
xor eax, dword [esi]
xor ecx, 0x73
or ecx, eax
je 0x4acf0d
lea ecx, [esp + 0xe0]
lea eax, [esp + 0x60]
mov dword [esp + 0x270], 0xfbe12c
mov dword [esp + 0x274], 2
mov dword [esp + 0x280], 0
lea edx, [esp + 0x270]
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], ebx
mov dword [esp + 0x278], ecx
lea ecx, [edi + 0x4c]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], 0x49bdf0
mov dword [esp + 0x27c], 1
call fcn.00415500
mov dword [edi], 2
mov dword [edi + 4], 2
mov dword [edi + 0x58], 0
mov byte [edi + 0x60], 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x40], 0
cmp ebx, dword [esp + 0xc]
jb 0x4ace61
jne 0x4ae653
cmp ebx, 5
jne 0x4acf3c
mov eax, 0x70747468
movzx ecx, byte [esi + 4]
xor eax, dword [esi]
xor ecx, 0x73
or ecx, eax
je 0x4acfa3
mov eax, dword [edx + 0x58]
cmp byte [eax + 0x8c], 1
jne 0x4acfa3
movzx eax, byte [0xfd520d]
xor ecx, ecx
mov edx, 0x33
call fcn.00494530
test eax, eax
je 0x4ae653
mov esi, eax
push 0x33
push 0xfbe1f4
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [edi], 2
mov dword [edi + 4], 2
mov dword [edi + 0x4c], 0x33
mov dword [edi + 0x50], esi
mov dword [edi + 0x54], 0x33
mov dword [edi + 0x58], 0
mov byte [edi + 0x60], 3
jmp 0x4acf05
cmp byte [ebp + 0x10], 0
mov dword [esp + 0x4c], edx
mov dword [esp + 0x10], esi
mov dword [esp + 0x20], edi
je 0x4adce3
movzx eax, byte [edx + 0x1c]
mov ecx, dword [edx + 0x2c]
mov dword [esp + 0x18], ebx
mov byte [esp + 0x1e], al
movzx eax, byte [edx + 0x34]
mov dword [esp + 0x1ec], ecx
mov byte [esp + 0x1d], al
mov eax, dword [edx + 0x28]
sub ecx, eax
mov dword [esp + 0x50], eax
add eax, esi
mov dword [esp + 0x5c], ecx
mov ecx, dword [edx + 0x5c]
mov dword [esp + 0x48], eax
lea edi, [ecx + 0x10]
mov dword [esp + 0x30], ecx
add ecx, 0x28
mov dword [esp + 0x3c], edi
mov edi, dword [edx + 0x58]
movzx edx, word [edx + 0x1e]
mov dword [esp + 0x1f4], ecx
mov word [esp + 0x5a], dx
mov dword [esp + 0x1f0], edi
xor eax, eax
mov dword [esp + 4], 0x80000000
cmp eax, dword [edi + 0x5c]
jo 0x4ad148
mov eax, dword [edi + 0x64]
test eax, eax
mov dword [esp + 4], eax
js 0x4ae653
mov esi, dword [edi + 0x60]
je 0x4ad057
movzx eax, byte [0xfd520d]
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.00494530
test eax, eax
jne 0x4ad05c
jmp 0x4ae653
mov eax, 1
push dword [esp + 4]
push esi
mov dword [esp + 0x218], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 0x80]
mov dword [esp + 0x34], 0x80000000
mov dword [esp + 0x38], 0x80000000
mov dword [esp + 0x20c], eax
xor eax, eax
cmp eax, dword [edi + 0x68]
jo 0x4ad0de
mov eax, dword [edi + 0x70]
test eax, eax
mov dword [esp + 0x38], eax
js 0x4ae653
mov esi, dword [edi + 0x6c]
je 0x4ad0c4
movzx eax, byte [0xfd520d]
mov edx, dword [esp + 0x38]
xor ecx, ecx
call fcn.00494530
test eax, eax
jne 0x4ad0c9
jmp 0x4ae653
mov eax, 1
push dword [esp + 0x38]
push esi
mov dword [esp + 0x208], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
xor eax, eax
cmp eax, dword [edi + 0x74]
jo 0x4ad12e
mov eax, dword [edi + 0x7c]
test eax, eax
mov dword [esp + 0x34], eax
js 0x4ae653
mov esi, dword [edi + 0x78]
je 0x4ad114
movzx eax, byte [0xfd520d]
mov edx, dword [esp + 0x34]
xor ecx, ecx
call fcn.00494530
test eax, eax
jne 0x4ad119
jmp 0x4ae653
mov eax, 1
push dword [esp + 0x34]
push esi
mov dword [esp + 0x204], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movzx eax, byte [edi + 0x84]
mov ecx, dword [esp + 4]
mov esi, dword [esp + 0x10]
mov byte [esp + 0x1f], al
mov dword [esp + 0x208], ecx
test byte [esp + 0x1e], 1
movzx edx, word [esp + 0x5a]
mov ax, 1
jne 0x4ad178
cmp ebx, dword [esp + 0xc]
jae 0x4ad169
cmp byte [esi + ebx], 0xbf
jg 0x4ad16f
jmp 0x4ae653
jne 0x4ae653
mov ecx, esi
mov edx, ebx
call fcn.004c4da0
cmp ebx, dword [esp + 0xc]
mov word [esp + 8], ax
mov word [esp + 0x14], dx
jae 0x4ad193
cmp byte [esi + ebx], 0xbf
jg 0x4ad199
jmp 0x4ae653
jne 0x4ae653
movzx eax, byte [0xfd520d]
xor ecx, ecx
mov edx, ebx
call fcn.00494530
test eax, eax
je 0x4ae653
mov esi, eax
push ebx
push dword [esp + 0x14]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
xor ebx, ebx
cmp byte [esp + 0x1d], 0
mov edi, 1
je 0x4ad1ff
mov ecx, dword [esp + 0x1ec]
cmp ecx, dword [esp + 0x50]
jb 0x4ae653
cmp dword [esp + 0x50], 0
je 0x4ad20c
mov eax, dword [esp + 0x50]
cmp eax, dword [esp + 0xc]
jae 0x4ad206
mov eax, dword [esp + 0x48]
cmp byte [eax], 0xbf
jg 0x4ad20c
jmp 0x4ae653
mov eax, 1
jmp 0x4ad25e
jne 0x4ae653
test ecx, ecx
je 0x4ad22b
cmp ecx, dword [esp + 0xc]
jae 0x4ad225
mov eax, dword [esp + 0x10]
cmp byte [eax + ecx], 0xbf
jg 0x4ad22b
jmp 0x4ae653
jne 0x4ae653
cmp dword [esp + 0x5c], 0
js 0x4ae653
mov eax, dword [esp + 0x48]
je 0x4ad25e
movzx eax, byte [0xfd520d]
mov ebx, dword [esp + 0x5c]
xor ecx, ecx
mov edx, ebx
call fcn.00494530
mov edi, eax
test eax, eax
mov eax, dword [esp + 0x48]
je 0x4ae653
push ebx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x3c]
mov cl, 1
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a8], esi
mov dword [esp + 0x1ac], eax
movzx eax, word [esp + 8]
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x1b4], edi
mov dword [esp + 0x1b8], ebx
mov word [esp + 0x1e8], ax
movzx eax, word [esp + 0x14]
mov word [esp + 0x1ea], ax
mov eax, dword [esp + 4]
mov dword [esp + 0x1bc], eax
mov eax, dword [esp + 0x208]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x210]
mov dword [esp + 0x1c0], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1d0], eax
mov eax, dword [esp + 0x200]
mov dword [esp + 0x1cc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1dc], eax
mov eax, dword [esp + 0x1fc]
mov dword [esp + 0x1d8], eax
mov eax, dword [esp + 0x20c]
mov dword [esp + 0x1e0], eax
movzx eax, byte [esp + 0x1f]
mov byte [esp + 0x1e4], al
xor eax, eax
lock cmpxchg byte [edx], cl
jne 0x4adc06
mov esi, dword [esp + 0x1ac]
test esi, esi
js 0x4ae653
mov edi, dword [esp + 0x1a8]
je 0x4ad375
movzx eax, byte [0xfd520d]
xor ecx, ecx
mov edx, esi
call fcn.00494530
test eax, eax
jne 0x4ad37a
jmp 0x4ae653
mov eax, 1
push esi
push edi
mov dword [esp + 0x1c], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x1b8]
test ebx, ebx
js 0x4ae653
mov edi, dword [esp + 0x1b4]
je 0x4ad3ba
movzx eax, byte [0xfd520d]
xor ecx, ecx
mov edx, ebx
call fcn.00494530
test eax, eax
jne 0x4ad3bf
jmp 0x4ae653
mov eax, 1
push ebx
push edi
mov dword [esp + 0x5c], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movzx eax, word [esp + 0x1ea]
movzx edx, word [esp + 0x1e8]
mov edi, 0x80000000
mov word [esp + 0x2c], ax
xor eax, eax
cmp eax, dword [esp + 0x1bc]
jo 0x4ad53e
mov eax, dword [esp + 0x1c4]
test eax, eax
mov dword [esp + 0x28], eax
js 0x4ae653
mov edi, dword [esp + 0x1c0]
mov word [esp + 0x58], dx
je 0x4ad433
movzx eax, byte [0xfd520d]
mov edx, dword [esp + 0x28]
xor ecx, ecx
call fcn.00494530
test eax, eax
jne 0x4ad438
jmp 0x4ae653
mov eax, 1
push dword [esp + 0x28]
push edi
mov dword [esp + 0x2c], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x1e0]
mov dword [esp + 8], 0x80000000
mov dword [esp + 0x204], eax
xor eax, eax
cmp eax, dword [esp + 0x1c8]
mov eax, 0x80000000
jo 0x4ad4c6
mov ecx, dword [esp + 0x1d0]
test ecx, ecx
js 0x4ae653
mov edi, dword [esp + 0x1cc]
mov dword [esp + 4], ecx
je 0x4ad4ab
movzx eax, byte [0xfd520d]
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.00494530
mov ecx, dword [esp + 4]
test eax, eax
jne 0x4ad4b0
jmp 0x4ae653
mov eax, 1
push ecx
push edi
mov dword [esp + 0x200], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x10]
add esp, 0xc
mov dword [esp + 4], eax
xor eax, eax
mov edi, dword [esp + 0x28]
cmp eax, dword [esp + 0x1d4]
jo 0x4ad531
mov edx, dword [esp + 0x1dc]
test edx, edx
js 0x4ae653
mov ecx, dword [esp + 0x1d8]
mov dword [esp + 8], edx
je 0x4ad51d
mov dword [esp + 0x44], ecx
xor ecx, ecx
movzx eax, byte [0xfd520d]
mov edx, dword [esp + 8]
call fcn.00494530
mov edx, dword [esp + 8]
test eax, eax
je 0x4ae653
mov ecx, dword [esp + 0x44]
jmp 0x4ad522
mov eax, 1
push edx
push ecx
mov dword [esp + 0x4c], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x1e4]
movzx edx, word [esp + 0x58]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe0], esi
mov dword [esp + 0xe4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0xe8], esi
mov dword [esp + 0xec], ebx
lea esi, [esp + 0x270]
mov dword [esp + 0xf0], ecx
movzx ecx, word [esp + 0x2c]
mov dword [esp + 0xf4], ebx
mov word [esp + 0x124], dx
mov edx, dword [esp + 0x1f8]
mov word [esp + 0x126], cx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xf8], edi
mov dword [esp + 0x100], edi
mov dword [esp + 0xfc], ecx
mov ecx, dword [esp + 4]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x108], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x204]
mov dword [esp + 0x114], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x11c], ecx
mov byte [esp + 0x120], al
lea eax, [esp + 0xe0]
mov ecx, esi
push eax
call fcn.004ba300
add esp, 4
xor eax, eax
cmp eax, dword [esp + 0x270]
jno 0x4ad63d
mov ecx, 0x14
lea edi, [esp + 0x21c]
lea esi, [esp + 0x274]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x218], 0x80000000
jmp 0x4ad661
mov ecx, 0x16
lea edi, [esp + 0x218]
rep movsd dword es:[edi], dword [esi]
mov edi, 0x80000001
cmp eax, dword [esp + 0x218]
mov ebx, dword [esp + 0x18]
jno 0x4ada48
mov ecx, 0x14
lea edi, [esp + 0x358]
lea esi, [esp + 0x21c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x3a0]
mov ebx, dword [eax - 4]
test ebx, ebx
je 0x4ae653
dec ebx
mov esi, 0
mov dword [eax - 4], ebx
mov ecx, dword [eax - 8]
mov edx, dword [eax - 0x10]
mov eax, dword [eax - 0xc]
add ecx, ebx
cmp ecx, edx
cmovb edx, esi
sub ecx, edx
mov edx, ecx
shl edx, 7
lea ecx, [edx + ecx*8]
mov edx, dword [eax + ecx + 4]
cmp edx, 0x80000001
mov dword [esp + 0x54], edx
je 0x4ae653
lea esi, [eax + ecx]
mov eax, dword [eax + ecx]
mov ecx, 0x20
lea edi, [esp + 0x270]
add esi, 8
test ebx, ebx
mov dword [esp + 0x214], eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], ebx
jne 0x4ad846
mov eax, dword [esp + 0x268]
mov esi, dword [esp + 0x264]
pcmpeqd xmm1, xmm1
mov ecx, dword [eax]
mov dword [esp + 4], esi
mov edx, ecx
sub edx, esi
sar edx, 3
imul esi, edx, 0xba2e8ba3
lea edi, [esi - 0x10]
and edi, dword [eax + 4]
movdqu xmm0, xmmword [ecx + edi]
pcmpeqb xmm0, xmm1
pmovmskb edx, xmm0
test edx, edx
je 0x4ad72e
bsr bx, dx
xor ebx, 0xf
jmp 0x4ad732
mov bx, 0x10
movdqu xmm0, xmmword [ecx + esi]
pcmpeqb xmm0, xmm1
pmovmskb edx, xmm0
or edx, 0x10000
tzcnt edx, edx
add ebx, edx
mov dl, 0x80
cmp bx, 0xf
ja 0x4ad758
inc dword [eax + 8]
mov dl, 0xff
mov ebx, dword [esp + 0x21c]
mov byte [ecx + esi], dl
mov esi, dword [esp + 4]
mov byte [ecx + edi + 0x10], dl
dec dword [eax + 0xc]
mov ecx, 0x16
lea edi, [esp + 0xe0]
add esi, 0xffffffa8
neg ebx
rep movsd dword es:[edi], dword [esi]
jo 0x4ad78e
lea ecx, [esp + 0x21c]
call fcn.004a68c0
mov eax, dword [esp + 0x128]
mov ebx, dword [esp + 0x12c]
mov esi, dword [esp + 0x130]
mov edi, dword [esp + 0x134]
lea ecx, [esp + 0xe0]
mov dword [esp + 4], eax
call fcn.004a68c0
test edi, edi
je 0x4ad830
mov edx, dword [esp + 4]
mov ecx, 0
mov dword [esp + 8], ebx
mov dword [esp + 0x14], edi
cmp esi, edx
mov eax, edx
cmovb eax, ecx
sub esi, eax
mov eax, edx
sub eax, esi
lea ebx, [esi + edi]
sub edi, eax
mov dword [esp + 0x2c], eax
cmova ebx, edx
cmovb edi, ecx
sub ebx, esi
je 0x4ad810
mov eax, esi
shl eax, 7
lea esi, [eax + esi*8]
add esi, dword [esp + 8]
nop dword [eax + eax]
mov ecx, esi
call fcn.004a6960
add esi, 0x88
dec ebx
jne 0x4ad800
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 8]
cmp eax, dword [esp + 0x14]
jae 0x4ad830
mov esi, ebx
mov ecx, esi
call fcn.004a6960
add esi, 0x88
dec edi
jne 0x4ad820
cmp dword [esp + 4], 0
je 0x4ad846
push ebx
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, dword [esp + 0x30]
xor eax, eax
mov esi, dword [ebx + 0x24]
mov edi, dword [ebx + 0x18]
test esi, esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x2c], edi
je 0x4ad87d
mov eax, dword [ebx + 0x20]
mov ecx, edi
mov edx, 0
cmp eax, edi
cmovb ecx, edx
mov edx, edi
sub eax, ecx
mov ecx, esi
sub edx, eax
sub ecx, edx
jbe 0x4ad881
mov edx, edi
jmp 0x4ad886
xor edx, edx
jmp 0x4ad884
lea edx, [eax + esi]
xor ecx, ecx
shl eax, 3
shl edx, 3
mov esi, dword [ebx + 0x1c]
lea edi, [eax + eax*8]
lea eax, [edx + edx*8]
mov dword [esp + 0x24], eax
sub eax, edi
shr eax, 3
imul edx, eax, 0x38e38e39
lea eax, [ecx + ecx*8]
mov dword [esp + 8], esi
add edx, ecx
shl ecx, 3
lea esi, [esi + eax*8 - 0x48]
lea ebx, [ecx + ecx*8]
neg ebx
nop dword [eax]
test ebx, ebx
mov dword [esp + 4], edx
je 0x4ad8e7
mov ecx, esi
lea edx, [esp + 0x1a4]
call fcn.004ba510
mov edx, dword [esp + 4]
add esi, 0xffffffb8
add ebx, 0x48
dec edx
test al, al
je 0x4ad8c0
jmp 0x4ad927
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 8]
xor ebx, ebx
lea esi, [eax + ecx - 0x48]
sub edi, ecx
nop word [eax + eax]
test edi, edi
je 0x4ae653
mov ecx, esi
lea edx, [esp + 0x1a4]
call fcn.004ba510
add esi, 0xffffffb8
add edi, 0x48
inc ebx
test al, al
je 0x4ad900
mov edx, dword [esp + 4]
sub edx, ebx
cmp dword [esp + 0x14], edx
jbe 0x4ae653
mov ecx, dword [esp + 0x30]
mov eax, edx
mov esi, 0
mov edi, dword [esp + 8]
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edx]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x24], ecx
cmp ebx, edx
mov ecx, edx
cmovb ecx, esi
sub ebx, ecx
lea ecx, [ebx + ebx*8]
mov esi, dword [edi + ecx*8]
mov dword [esp + 4], esi
lea esi, [edi + ecx*8 + 4]
mov ecx, 0x11
lea edi, [esp + 0x3a8]
rep movsd dword es:[edi], dword [esi]
mov esi, eax
mov edi, dword [esp + 0x14]
not esi
add esi, edi
cmp esi, eax
jae 0x4ad9a1
lea eax, [ebx + 1]
mov ecx, 0
cmp eax, edx
mov eax, edx
cmovb eax, ecx
mov ecx, edx
mov edx, dword [esp + 8]
neg eax
lea eax, [ebx + eax + 1]
push esi
push ebx
push eax
jmp 0x4ad9ca
mov ebx, dword [esp + 0x24]
mov esi, 0
lea ecx, [ebx + 1]
cmp ecx, edx
mov ecx, edx
cmovb ecx, esi
neg ecx
lea esi, [ebx + ecx + 1]
mov ecx, dword [esp + 0x30]
mov dword [ecx + 0x20], esi
mov ecx, edx
mov edx, dword [esp + 8]
push eax
push esi
push ebx
call fcn.004ba640
add esp, 0xc
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x30]
dec edi
mov edx, ecx
mov dword [eax + 0x24], edi
neg edx
jo 0x4ae653
mov dword [esp + 0xe0], ecx
mov ecx, 0x11
lea edi, [esp + 0xe4]
lea esi, [esp + 0x3a8]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xe0]
call fcn.004a68c0
cmp dword [esp + 0x28], 0
mov ecx, 0x20
lea edi, [esp + 0x60]
lea esi, [esp + 0x270]
rep movsd dword es:[edi], dword [esi]
je 0x4ada40
mov eax, dword [esp + 0x358]
neg eax
jo 0x4ada40
lea ecx, [esp + 0x358]
call fcn.004a68c0
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x3c]
xor eax, eax
xchg byte [ecx], al
mov esi, dword [esp + 0x4c]
cmp al, 2
jne 0x4adaa0
push dword [esp + 0x3c]
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
xor eax, eax
cmp eax, dword [esp + 0x218]
jo 0x4adaab
lea ecx, [esp + 0x218]
call fcn.004a68c0
lea ecx, [esp + 0x1a4]
call fcn.004a68c0
cmp edi, 0x80000001
jne 0x4adac3
jmp 0x4adcdd
xor eax, eax
cmp eax, dword [esp + 0x218]
jno 0x4ada6d
lea ecx, [esp + 0x1a4]
call fcn.004a68c0
cmp edi, 0x80000001
je 0x4adcdd
mov eax, dword [esp + 0x214]
mov ecx, 0x20
lea esi, [esp + 0x60]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], edi
lea edi, [esp + 0xe8]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x164]
push dword [esp + 0x160]
call dword [eax + 0x5c]
add esp, 4
test eax, eax
je 0x4adcae
mov byte [esp + 0x218], 0
mov edi, eax
lea ecx, [esp + 0x270]
mov eax, dword [eax]
mov dword [esp + 0x270], 1
push ecx
push 0x8004667e
push eax
call dword [sym.imp.ws2_32.dll_ioctlsocket]
cmp eax, 0xffffffff
je 0x4adc23
push 2
push 1
lea eax, [esp + 0x220]
push eax
push dword [edi]
call dword [sym.imp.ws2_32.dll_recv]
mov ebx, 0x104
cmp eax, 0xffffffff
je 0x4adb5a
jmp 0x4adba0
call dword [sym.imp.ws2_32.dll_WSAGetLastError]
mov esi, eax
cmp eax, 0x274a
je 0x4adba0
lea ecx, [esp + 0x270]
mov dword [esp + 0x274], esi
mov dword [esp + 0x270], 0
call fcn.004a1ea0
xor ebx, ebx
cmp al, 0xd
sete bl
shl ebx, 2
nop word cs:[eax + eax]
nop dword [eax + eax]
mov eax, dword [edi]
lea ecx, [esp + 0x270]
mov dword [esp + 0x270], 0
push ecx
push 0x8004667e
push eax
call dword [sym.imp.ws2_32.dll_ioctlsocket]
cmp eax, 0xffffffff
je 0x4adc23
cmp bl, 4
jne 0x4adc2f
test bh, bh
mov ebx, dword [esp + 0x18]
je 0x4adcae
lea ecx, [esp + 0xe0]
call fcn.004a6960
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x1f0]
xor eax, eax
mov dword [esp + 4], 0x80000000
cmp eax, dword [edi + 0x5c]
jno 0x4ad028
jmp 0x4ad148
mov ecx, dword [esp + 0x3c]
call fcn.004e97a0
mov esi, dword [esp + 0x1ac]
test esi, esi
jns 0x4ad353
jmp 0x4ae653
call dword [sym.imp.ws2_32.dll_WSAGetLastError]
xor ebx, ebx
mov esi, eax
mov bh, bl
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x218]
mov byte [esp + 0x218], bl
mov byte [esp + 0x219], bh
mov word [esp + 0x21a], 0
mov dword [esp + 0x274], 2
mov dword [esp + 0x2bc], 0x80000000
mov dword [esp + 0x2c8], 0
mov byte [esp + 0x2d0], 8
mov dword [esp + 0x21c], esi
mov dword [esp + 0x270], 2
lea edx, [esp + 0x270]
push eax
call fcn.0049f730
add esp, 4
lea ecx, [esp + 0xe0]
call fcn.004a6960
jmp 0x4acf05
mov esi, dword [esp + 0x20]
lea eax, [esi + 4]
push 0x88
lea ecx, [esp + 0xe4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esi + 0x8c], 1
mov dword [esi], 3
jmp 0x4acf05
mov edx, esi
mov esi, dword [esp + 0x10]
cmp ebx, dword [esp + 0xc]
jae 0x4adcf4
cmp byte [esi + ebx], 0xbf
jg 0x4adcfa
jmp 0x4ae653
jne 0x4ae653
cmp byte [esp + 0x40], 0
je 0x4add1f
push ebx
push 0xfd0229
push dword [esp + 0x18]
mov esi, edx
call sub.VCRUNTIME140.dll_memcmp
mov edx, esi
add esp, 0xc
test eax, eax
je 0x4adf08
mov esi, dword [esp + 0x10]
cmp ebx, 5
jne 0x4add3e
mov eax, 0x70747468
movzx ecx, byte [esi + 4]
xor eax, dword [esi]
xor ecx, 0x73
or ecx, eax
je 0x4adf6f
cmp byte [esp + 0x40], 0
je 0x4add5c
push ebx
push 0xfbe1d8
push esi
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x4ae103
lea eax, [esp + 0x218]
mov dword [esp + 0x218], esi
mov dword [esp + 0x270], 0xfbe1ec
mov dword [esp + 0x274], 1
mov dword [esp + 0x21c], ebx
mov dword [esp + 0x280], 0
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], 0x49bdf0
lea eax, [esp + 0x60]
lea ecx, [esp + 0x12c]
lea edx, [esp + 0x270]
mov dword [esp + 0x278], eax
mov dword [esp + 0x27c], 1
call fcn.00415500
mov dword [esp + 0xe4], 2
mov dword [esp + 0x138], 0
mov byte [esp + 0x140], 1
lea eax, [esp + 0xe4]
lea ecx, [esp + 0x270]
push 0x88
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x174]
movsd xmm2, qword [esp + 0x184]
movq xmm0, qword [esp + 0x16c]
mov edi, 2
movsd qword [esp + 0x68], xmm1
movsd xmm1, qword [esp + 0x17c]
movsd qword [esp + 0x78], xmm2
movsd xmm2, qword [esp + 0x194]
movq qword [esp + 0x60], xmm0
movsd qword [esp + 0x70], xmm1
movsd xmm1, qword [esp + 0x18c]
movsd qword [esp + 0x88], xmm2
movsd qword [esp + 0x80], xmm1
movq xmm1, qword [esp + 0x19c]
movq qword [esp + 0x90], xmm1
mov esi, dword [esp + 0x20]
lea ecx, [esp + 0x270]
lea eax, [esi + 4]
push 0x88
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x68]
movsd xmm2, qword [esp + 0x78]
movsd xmm0, qword [esp + 0x60]
movsd qword [esi + 0x94], xmm1
movsd xmm1, qword [esp + 0x70]
movsd qword [esi + 0xa4], xmm2
movsd xmm2, qword [esp + 0x88]
movsd qword [esi + 0x8c], xmm0
movsd qword [esi + 0x9c], xmm1
movsd xmm1, qword [esp + 0x80]
movsd qword [esi + 0xb4], xmm2
movsd qword [esi + 0xac], xmm1
movsd xmm1, qword [esp + 0x90]
movsd qword [esi + 0xbc], xmm1
mov dword [esi], edi
jmp 0x4acf05
cmp byte [edx + 0x1c], 0
mov bx, 0x50
je 0x4adf16
movzx ebx, word [edx + 0x1e]
movzx eax, byte [0xfd520d]
xor ecx, ecx
mov edx, 4
call fcn.00494530
test eax, eax
je 0x4ae653
mov ecx, dword [ebp + 0xc]
mov dword [eax], 0x70747468
test ecx, ecx
js 0x4ae653
mov dword [esp + 0xc], eax
je 0x4ae181
mov edx, dword [ebp + 0xc]
movzx eax, byte [0xfd520d]
xor ecx, ecx
call fcn.00494530
mov ecx, dword [ebp + 0xc]
mov edi, eax
test eax, eax
jne 0x4ae186
jmp 0x4ae653
cmp byte [edx + 0x1c], 0
mov ax, 0x1bb
je 0x4adf7d
movzx eax, word [edx + 0x1e]
mov esi, edx
lea ecx, [esp + 0x270]
mov dword [esp + 4], eax
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004bc080
add esp, 0xc
movsd xmm1, qword [esp + 0x280]
mov edi, dword [esp + 0x270]
mov eax, esi
movsd xmm0, qword [esp + 0x278]
movsd xmm2, qword [esp + 0x288]
mov esi, dword [esp + 0x274]
movsd qword [esp + 0x68], xmm1
movsd xmm1, qword [esp + 0x290]
cmp edi, 3
movsd qword [esp + 0x60], xmm0
movsd qword [esp + 0x70], xmm2
movsd qword [esp + 0x78], xmm1
jne 0x4ae11c
movsd xmm1, qword [esp + 0x68]
movq xmm0, qword [esp + 0x60]
movsd xmm2, qword [esp + 0x70]
mov eax, dword [eax + 0x58]
mov edx, 4
movsd qword [esp + 0x340], xmm1
movq xmm1, qword [esp + 0x78]
movq qword [esp + 0x338], xmm0
movsd qword [esp + 0x348], xmm2
movq qword [esp + 0x350], xmm1
mov ecx, dword [eax + 0x48]
mov edi, dword [eax + 0x4c]
mov dword [esp + 0xc], ecx
mov ebx, dword [edi + 8]
xor ecx, ecx
movzx eax, byte [0xfd520d]
call fcn.00494530
test eax, eax
je 0x4ae653
mov ecx, dword [esp + 0xc]
dec ebx
mov dword [eax], esi
and ebx, 0xfffffff8
lea ecx, [ecx + ebx + 8]
push 0xfbe064
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
push ecx
lea ebx, [esp + 0x284]
push ebx
call dword [edi + 0xc]
add esp, 0x18
mov edi, dword [esp + 0x270]
mov esi, dword [esp + 0x274]
mov ebx, dword [esp + 0x278]
cmp edi, 3
jne 0x4ae3e6
mov dword [esp + 0x18], ebx
mov dword [esp + 0xc], esi
xor ecx, ecx
mov edx, 5
movzx eax, byte [0xfd520d]
call fcn.00494530
test eax, eax
je 0x4ae653
mov ecx, dword [ebp + 0xc]
mov esi, dword [esp + 0x4c]
mov ebx, eax
mov byte [eax + 4], 0x73
mov dword [eax], 0x70747468
test ecx, ecx
js 0x4ae653
je 0x4ae44e
mov edx, dword [ebp + 0xc]
movzx eax, byte [0xfd520d]
xor ecx, ecx
call fcn.00494530
mov ecx, dword [ebp + 0xc]
mov edi, eax
test eax, eax
jne 0x4ae453
jmp 0x4ae653
cmp ebx, dword [esp + 0xc]
jae 0x4ae395
cmp byte [esi + ebx], 0xbf
jg 0x4ae39b
jmp 0x4ae653
lea eax, [esp + 0x298]
lea ecx, [esp + 0x108]
push 0x9c
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x68]
movq xmm0, qword [esp + 0x60]
movsd xmm2, qword [esp + 0x70]
movsd qword [esp + 0xf0], xmm1
movq xmm1, qword [esp + 0x78]
movq qword [esp + 0xe8], xmm0
movsd qword [esp + 0xf8], xmm2
movq qword [esp + 0x100], xmm1
mov dword [esp + 0xe4], esi
jmp 0x4ae411
mov edi, 1
push ecx
push dword [ebp + 8]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [esi + 0x5c]
lea esi, [edx + 4]
jmp 0x4ae19d
pause
mov eax, dword [esi]
nop
cmp eax, 0xffffffff
je 0x4ae19b
test eax, eax
js 0x4ae653
lea ecx, [eax + 1]
lock cmpxchg dword [esi], ecx
jne 0x4ae1a0
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x270]
push ebx
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x1c], ebx
mov ebx, eax
push eax
push dword [ebp + 8]
call fcn.004bc080
add esp, 0xc
mov eax, dword [esp + 4]
movsd xmm1, qword [esp + 0x220]
cmp dword [esp + 0x270], 3
movq xmm0, qword [esp + 0x218]
movsd xmm2, qword [esp + 0x230]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x64], 4
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 4
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], 0x80000000
movsd qword [esp + 0x88], xmm1
movsd xmm1, qword [esp + 0x228]
mov eax, dword [esp + 0x18]
movq qword [esp + 0x80], xmm0
movsd qword [esp + 0x98], xmm2
movsd qword [esp + 0x90], xmm1
movq xmm1, qword [esp + 0x238]
movq qword [esp + 0xa0], xmm1
mov word [esp + 0xa8], 1
mov word [esp + 0xaa], ax
jne 0x4ae2b3
mov edx, dword [esp + 0x274]
lea esi, [esp + 0xe4]
lea edi, [esp + 0x60]
lea eax, [esp + 0x278]
mov ecx, esi
push edi
push eax
call fcn.004be100
add esp, 8
jmp 0x4ae5a3
lea edi, [esp + 0x64]
lea eax, [esp + 0xe0]
push 0xc4
lea ebx, [esp + 0x274]
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x10]
add esp, 0xc
cmp eax, 0xffffffff
je 0x4ae2f1
lock dec dword [esi]
jne 0x4ae2f1
push eax
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, edi
call fcn.004a68c0
mov edi, dword [esp + 0xe0]
lea esi, [esp + 0xe4]
push 0x88
push esi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x174]
movsd xmm2, qword [esp + 0x184]
movq xmm0, qword [esp + 0x16c]
cmp edi, 3
movsd qword [esp + 0x68], xmm1
movsd xmm1, qword [esp + 0x17c]
movsd qword [esp + 0x78], xmm2
movsd xmm2, qword [esp + 0x194]
movq qword [esp + 0x60], xmm0
movsd qword [esp + 0x70], xmm1
movsd xmm1, qword [esp + 0x18c]
movsd qword [esp + 0x88], xmm2
movsd qword [esp + 0x80], xmm1
movq xmm1, qword [esp + 0x19c]
movq qword [esp + 0x90], xmm1
jne 0x4ade79
jmp 0x4ae62b
jne 0x4ae653
lea eax, [esp + 0x60]
mov dword [esp + 0x60], esi
mov dword [esp + 0x270], 0xfbe12c
mov dword [esp + 0x274], 2
mov dword [esp + 0x64], ebx
mov dword [esp + 0x280], 0
mov dword [esp + 0x218], eax
lea eax, [esp + 0x218]
mov dword [esp + 0x21c], 0x49bdf0
jmp 0x4adda2
lea eax, [esp + 0x27c]
lea ecx, [esp + 0xec]
push 0xb8
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe8], ebx
lea eax, [esp + 0xe4]
push 0x88
push eax
lea eax, [esp + 0x278]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x174]
movsd xmm2, qword [esp + 0x184]
movq xmm0, qword [esp + 0x16c]
jmp 0x4ade22
mov edi, 1
push ecx
push dword [ebp + 8]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, dword [esi + 0x5c]
jmp 0x4ae467
pause
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
je 0x4ae465
test eax, eax
js 0x4ae653
lea ecx, [eax + 1]
lock cmpxchg dword [esi + 4], ecx
jne 0x4ae46a
mov dword [esp + 0x10], edi
xor ecx, ecx
mov edx, 8
movzx eax, byte [0xfd520d]
call fcn.00494530
test eax, eax
je 0x4ae653
mov edi, eax
mov eax, dword [esp + 0xc]
xor ecx, ecx
mov edx, 0x2000
mov dword [edi], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 4], eax
movzx eax, byte [0xfd520d]
call fcn.00494530
test eax, eax
je 0x4ae653
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe8], 5
mov dword [esp + 0xec], ebx
mov dword [esp + 0xf0], 5
movsd xmm1, qword [esp + 0x340]
movsd xmm0, qword [esp + 0x338]
movsd xmm2, qword [esp + 0x350]
lea esi, [esp + 0xe4]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], edx
mov dword [esp + 0xfc], ecx
mov ecx, dword [esp + 4]
mov dword [esp + 0x100], 0x80000000
mov word [esp + 0x12c], 1
mov word [esp + 0x12e], cx
movsd qword [esp + 0x138], xmm1
movsd xmm1, qword [esp + 0x348]
movsd qword [esp + 0x130], xmm0
movsd qword [esp + 0x148], xmm2
movsd qword [esp + 0x140], xmm1
movss xmm1, dword [0x4eb7b0]
mov dword [esp + 0x150], eax
movups xmmword [esp + 0x154], xmm1
mov dword [esp + 0x164], edi
mov dword [esp + 0x168], 0xfbdfc0
push 0x88
push esi
lea eax, [esp + 0x278]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x174]
movsd xmm2, qword [esp + 0x184]
movq xmm0, qword [esp + 0x16c]
movsd qword [esp + 0x68], xmm1
movsd xmm1, qword [esp + 0x17c]
movsd qword [esp + 0x78], xmm2
movsd xmm2, qword [esp + 0x194]
movq qword [esp + 0x60], xmm0
movsd qword [esp + 0x70], xmm1
movsd xmm1, qword [esp + 0x18c]
movsd qword [esp + 0x88], xmm2
movsd qword [esp + 0x80], xmm1
movq xmm1, qword [esp + 0x19c]
movq qword [esp + 0x90], xmm1
mov edi, dword [esp + 0x20]
lea eax, [edi + 4]
push 0x88
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + 0x8c], 0
mov dword [edi], 3
jmp 0x4acf05
ud2