Function at 0x1402bb930
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x1403f2740]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x100]
lea r14, [rbp - 0x20]
mov qword [rsp + 0x68], rax
mov esi, r9d
xor eax, eax
mov dword [rsp + 0x40], r9d
mov r13d, eax
mov edi, r8d
mov dword [rsp + 0x3c], r13d
mov r15, rcx
mov dword [rsp + 0x54], r8d
mov r12d, eax
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x58], r14
mov byte [rsp + 0x30], al
test rcx, rcx
je 0x1402bbfc6
cmp dword [rcx], 0xbab1e
jne 0x1402bbfc6
cmp byte [rcx + 0x1cb], al
je 0x1402bb9c5
mov eax, 8
jmp 0x1402bba76
test esi, esi
jns 0x1402bb9d3
mov eax, 0xa
jmp 0x1402bba76
xorps xmm0, xmm0
mov qword [rsp + 0x198], rbx
mov rbx, qword [rcx + 8]
mov qword [rbp - 0x60], rax
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
test rbx, rbx
je 0x1402bba1f
nop dword [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.1402ba440
add r13d, dword [rbp - 0x68]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1402bba00
mov dword [rsp + 0x3c], r13d
lea rdx, [rsp + 0x34]
mov rcx, r15
call fcn.1402bb840
mov eax, dword [rsp + 0x34]
test eax, eax
js 0x1402bba3d
cmp eax, esi
cmovl esi, eax
mov dword [rsp + 0x40], esi
cmp byte [rbp + 0x110], r12b
lea eax, [rdi + r13]
lea ecx, [rax + 1]
cmove ecx, eax
cmp ecx, 0xa
jbe 0x1402bba9d
shl rcx, 4
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x58], rax
mov r14, rax
test rax, rax
jne 0x1402bba98
lea eax, [r14 + 3]
mov rbx, qword [rsp + 0x198]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1403176a0
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov byte [rsp + 0x30], 1
xor edx, edx
mov dword [rsp + 0x34], edx
mov esi, edx
test r13d, r13d
je 0x1402bbbb8
mov r13, qword [r15 + 8]
test r13, r13
je 0x1402bbbb3
nop dword [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.1402ba440
xor edx, edx
mov edi, edx
cmp dword [rbp - 0x68], edx
jbe 0x1402bbba2
nop word [rax + rax]
mov rax, qword [rsp + rdi*8 + 0x70]
mov ebx, esi
inc esi
shl rbx, 4
add rbx, r14
mov dword [rsp + 0x34], esi
mov esi, edx
mov qword [rbx], rax
mov word [rbx + 8], dx
test byte [rbp + rdi - 0x64], 1
je 0x1402bbb0f
mov esi, 0x29
mov word [rbx + 8], 0x300
test byte [rbp + rdi - 0x64], 2
je 0x1402bbb6f
mov r14, qword [rsp + rdi*8 + 0x70]
lea rax, [rsp + 0x48]
mov rcx, r14
mov dword [rsp + 0x48], 4
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or esi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x1402bbb65
cmp dword [rsp + 0x50], 1
jne 0x1402bbb65
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.WS2_32.dll_send]
or word [rbx + 8], 0x10
mov r14, qword [rsp + 0x58]
mov rdx, qword [r15 + 0x1b8]
mov r8d, esi
mov rcx, qword [rsp + rdi*8 + 0x70]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1402bbcce
mov eax, dword [rbp - 0x68]
inc rdi
mov esi, dword [rsp + 0x34]
mov rdx, r12
cmp rdi, rax
jb 0x1402bbae0
mov r13, qword [r13 + 0x10]
test r13, r13
jne 0x1402bbac0
mov edi, dword [rsp + 0x54]
mov r13d, dword [rsp + 0x3c]
mov esi, edi
mov r14, rdx
mov qword [rsp + 0x48], rsi
test edi, edi
je 0x1402bbd04
mov rbx, qword [rsp + 0x60]
add rbx, 8
movzx edx, word [rbx]
movzx eax, dl
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x29
mov edi, ecx
or edi, 4
test dl, 2
cmove edi, ecx
test dl, 4
je 0x1402bbc45
mov rsi, qword [rbx - 8]
lea rax, [rsp + 0x54]
mov rcx, rsi
mov dword [rsp + 0x54], 4
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov edx, 0xffff
mov r8d, 0x1008
or edi, 0x32
call qword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne 0x1402bbc40
cmp dword [rsp + 0x50], 1
jne 0x1402bbc40
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_send]
mov rsi, qword [rsp + 0x48]
mov rdx, qword [r15 + 0x1b8]
mov r8d, edi
mov rcx, qword [rbx - 8]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
jne 0x1402bbce8
mov rax, qword [rbx - 8]
xor edx, edx
mov edi, dword [rsp + 0x34]
mov r9, qword [rsp + 0x58]
mov ecx, edi
shl rcx, 4
add rcx, r9
mov qword [rcx], rax
movzx eax, dx
mov word [rcx + 8], dx
test byte [rbx], 1
je 0x1402bbc96
mov r10d, 0x300
mov word [rcx + 8], r10w
mov eax, r10d
test byte [rbx], 2
je 0x1402bbca9
mov r8d, 0x400
or ax, r8w
mov word [rcx + 8], ax
test byte [rbx], 4
je 0x1402bbcb6
or ax, 0x10
mov word [rcx + 8], ax
inc edi
inc r14
add rbx, 0x10
mov dword [rsp + 0x34], edi
cmp r14, rsi
jb 0x1402bbbd3
jmp 0x1402bbd0d
cmp byte [rsp + 0x30], r12b
je 0x1402bbcfa
mov rcx, r14
call qword [fcn.14031868a]
mov eax, 4
jmp 0x1402bba6e
cmp byte [rsp + 0x30], r12b
je 0x1402bbcfa
mov rcx, qword [rsp + 0x58]
call qword [fcn.14031868a]
mov eax, 4
jmp 0x1402bba6e
mov edi, dword [rsp + 0x34]
mov r9, qword [rsp + 0x58]
test edi, edi
jne 0x1402bbdf3
movzx ebx, byte [rbp + 0x110]
test bl, bl
je 0x1402bbf48
mov edi, edx
mov r9d, dword [rsp + 0x40]
lea rdx, [r15 + 0x1b8]
xor ecx, ecx
xor r8d, r8d
mov dword [rsp + 0x20], ecx
lea ecx, [r8 + 1]
call qword [sym.imp.WS2_32.dll_WSAWaitForMultipleEvents]
test rsi, rsi
je 0x1402bbe82
mov rax, qword [rsp + 0x60]
shl r13, 4
sub r13, rax
add r13, qword [rsp + 0x58]
lea rsi, [rax + 0xa]
nop dword [rax]
nop word [rax + rax]
mov r14, qword [rsi - 0xa]
lea r8, [rbp - 0x58]
movsx r12d, word [rsi + r13]
xor eax, eax
mov rcx, r14
mov dword [rbp - 0x58], eax
xor edx, edx
movzx ebx, ax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1402bbe22
mov r8d, dword [rbp - 0x58]
mov ecx, 0
test r8b, 0x29
setne cl
movzx edx, cx
or dx, 4
test r8b, 0x32
cmove dx, cx
movzx ecx, dx
or cx, 2
test r8b, 4
cmove cx, dx
cmp qword [rsp + 0x68], 0
movzx ebx, cx
je 0x1402bbe22
test edi, edi
jne 0x1402bbe22
test r8d, r8d
je 0x1402bbe22
inc dword [rsp + 0x38]
xor r8d, r8d
mov rdx, qword [r15 + 0x1b8]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
jmp 0x1402bbe6a
xor r8d, r8d
mov edx, edi
mov rcx, r9
call fcn.1402e0330
mov edi, eax
test eax, eax
jns 0x1402bbe10
mov eax, reloc.WS2_32.dll_inet_ntoa
jmp 0x1402bba6e
jle 0x1402bbd26
mov r12d, eax
mov dword [rsp + 0x38], eax
jmp 0x1402bbd45
mov rdx, qword [r15 + 0x1b8]
xor r8d, r8d
mov rcx, r14
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
test edi, edi
je 0x1402bbe6a
movzx ecx, bx
or cx, 1
test r12d, 0x300
cmove cx, bx
movzx edx, cx
or dx, 4
test r12b, 0x10
cmove dx, cx
movzx ebx, dx
or bx, 2
bt r12d, 0xa
cmovae bx, dx
mov word [rsi], bx
add rsi, 0x10
sub qword [rsp + 0x48], 1
jne 0x1402bbd70
mov r12d, dword [rsp + 0x38]
cmp dword [rsp + 0x3c], 0
je 0x1402bbf30
mov rsi, qword [r15 + 8]
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x1402bbf30
nop
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1402ba440
xor eax, eax
mov ebx, eax
cmp dword [rbp - 0x68], eax
jbe 0x1402bbf19
mov esi, dword [rsp + 0x38]
nop word [rax + rax]
mov rcx, qword [rsp + rbx*8 + 0x70]
lea r8, [rbp - 0x58]
xor edx, edx
mov dword [rbp - 0x58], eax
call qword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
test eax, eax
jne 0x1402bbeeb
cmp qword [rsp + 0x68], 0
je 0x1402bbeeb
test edi, edi
jne 0x1402bbeeb
cmp dword [rbp - 0x58], edi
je 0x1402bbeeb
inc esi
mov rdx, qword [r15 + 0x1b8]
xor r8d, r8d
mov rcx, qword [rsp + rbx*8 + 0x70]
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
mov eax, dword [rbp - 0x68]
inc rbx
cmp rbx, rax
mov eax, 0
jb 0x1402bbec0
mov dword [rsp + 0x38], esi
mov rsi, qword [rsp + 0x60]
mov rsi, qword [rsi + 0x10]
mov qword [rsp + 0x60], rsi
test rsi, rsi
jne 0x1402bbea0
mov r12d, dword [rsp + 0x38]
mov rcx, qword [r15 + 0x1b8]
call qword [sym.imp.WS2_32.dll_WSAResetEvent]
mov edi, dword [rsp + 0x34]
movzx ebx, byte [rbp + 0x110]
cmp byte [rsp + 0x30], 0
je 0x1402bbf5a
mov rcx, qword [rsp + 0x58]
call qword [fcn.14031868a]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x1402bbf67
mov dword [rax], r12d
cmp byte [rbp + 0x108], 0
je 0x1402bbfbf
test edi, edi
jne 0x1402bbfbf
test bl, bl
jne 0x1402bbfbf
xor eax, eax
cmp dword [r15], 0xbab1e
mov dword [rsp + 0x3c], eax
jne 0x1402bbfbf
cmp byte [r15 + 0x1cb], al
jne 0x1402bbfbf
lea rdx, [rsp + 0x3c]
mov rcx, r15
call fcn.1402bb840
test eax, eax
jne 0x1402bbfbf
mov eax, dword [rsp + 0x3c]
test eax, eax
je 0x1402bbfbf
mov ecx, dword [rsp + 0x40]
cmp eax, ecx
jg 0x1402bbfb5
test eax, eax
jns 0x1402bbfb7
mov eax, ecx
movsxd rcx, eax
call fcn.1402e0870
xor eax, eax
jmp 0x1402bba6e
mov eax, 1
jmp 0x1402bba76