Function at 0x18000ca74
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov ecx, 0x380
call fcn.180015378
mov edx, pe_nt_image_headers64
mov rcx, rax
mov rbx, rax
call fcn.18001546c
mov edx, pe_nt_image_headers64
mov rcx, rbx
mov r13, rax
call fcn.18001546c
mov edx, 0x80
mov rcx, rbx
call fcn.18001546c
mov edx, pe_nt_image_headers64
mov rcx, rbx
mov rdi, rax
call fcn.18001546c
mov ecx, 8
mov rbp, rax
call fcn.180018b50
mov ecx, 1
mov r14, rax
call fcn.180018b84
mov ecx, 2
movzx ebx, ax
and ebx, 0xfffffff7
call fcn.180018b84
mov ecx, 3
movzx r15d, ax
call fcn.180018ad8
mov ecx, reloc.WS2_32.dll_send
mov esi, eax
call fcn.180018ad8
mov ecx, 9
mov dword [rsp + 0x78], eax
call fcn.180018b50
mov ecx, 0xa
mov r12, rax
call fcn.180018b50
mov qword [rsp + 0x80], rax
call fcn.18000f67c
test eax, eax
je 0x18000cb44
call fcn.180019140
mov ecx, 5
mov dword [section..data], esi
call fcn.180018b84
movzx ecx, ax
mov dword [0x18003f468], ecx
mov ecx, 4
call fcn.180018ad8
mov ecx, eax
call fcn.180019c7c
mov ecx, 4
mov rsi, rax
call fcn.180018ad8
mov ecx, eax
call fcn.180019c7c
mov ecx, 4
call fcn.180018ad8
mov r8, rbp
mov rcx, rsi
mov edx, eax
call fcn.180015084
cmp dword [section..data], 0
movsxd rbp, ebx
jbe 0x18000ceb1
cmp rbp, 1
jne 0x18000cbd7
mov rcx, r14
call fcn.18000cfac
mov r9d, dword [0x18004de68]
lea r8, str._d._s
lea edx, [rbp + 0x7f]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.18001a03c
jmp 0x18000cbfc
cmp rbp, 2
je 0x18000cbfc
mov rcx, r14
call fcn.18000cfac
lea r8, [0x18002c768]
mov edx, 0x80
mov r9, rax
mov rcx, rdi
call fcn.18001a03c
mov rcx, r14
call fcn.18000cfac
lea r8, [0x18002c768]
mov edx, 0x80
mov r9, rax
mov rcx, r13
call fcn.18001a03c
cmp rbp, 1
jne 0x18000cc39
mov rcx, rdi
call fcn.18000ded8
mov ecx, eax
call qword [sym.imp.WS2_32.dll_ntohl]
mov ebx, eax
xor ebx, dword [rsp + 0x78]
jmp 0x18000cc3e
mov ebx, 1
test ebx, ebx
je 0x18000ce4a
mov eax, ebx
lea r8, [0x18002c768]
lea rcx, [0x18004de80]
and eax, 0xfffffff0
cmp eax, 0xf0
jne 0x18000cd5a
and dword [reloc.WS2_32.dll_accept], 0
mov r9, rdi
mov edx, 0x400
call fcn.18001a03c
mov ecx, ebx
call fcn.18000f60c
test bl, 1
je 0x18000cca1
mov r9d, dword [0x18004da64]
lea r8, [0x18004da68]
lea rcx, [0x18002c76c]
mov rdx, rdi
call fcn.18000e500
test bl, 2
je 0x18000ccc0
mov ecx, 4
call fcn.180018ad8
mov rdx, rsi
mov rcx, rdi
mov r8d, eax
call fcn.18000e370
jmp 0x18000ccf3
mov eax, 4
mov ecx, eax
test al, bl
je 0x18000cce0
call fcn.180018ad8
mov rdx, rsi
mov rcx, rdi
mov r8d, eax
call fcn.18000e25c
jmp 0x18000ccf3
call fcn.180018ad8
mov rdx, rsi
mov rcx, rdi
mov r8d, eax
call fcn.18000e154
test eax, eax
jle 0x18000cd0f
mov edx, eax
mov rcx, rsi
call fcn.180018644
test eax, eax
jle 0x18000cd0f
mov edx, eax
mov rcx, rsi
call fcn.1800173e4
lea rbx, [fcn.18000cecc]
mov rcx, rbx
call fcn.180015bd8
mov edx, 0x1000
mov rcx, rbx
call fcn.180011c74
mov rcx, rbx
call fcn.180014694
mov edx, 0x80000
mov rcx, rbx
call fcn.180014024
call fcn.18000f67c
test eax, eax
je 0x18000ce4a
mov rcx, rbx
call fcn.18000f754
jmp 0x18000ce4a
mov r9, qword [rsp + 0x80]
mov edx, pe_nt_image_headers64
mov dword [reloc.WS2_32.dll_accept], 1
call fcn.18001a03c
mov r8, r12
mov edx, r15d
mov rcx, rdi
call fcn.18000d9c0
mov ecx, 4
call fcn.180018ad8
lea rdx, [0x18004da60]
mov r8, rsi
mov r9d, eax
mov rcx, r13
call fcn.18000d96c
mov ebx, eax
test eax, eax
jle 0x18000cdc3
mov edx, eax
mov rcx, rsi
call fcn.180018644
mov ebx, eax
test eax, eax
jle 0x18000cdc3
mov edx, eax
mov rcx, rsi
call fcn.1800173e4
cmp ebx, 0xffffffff
je 0x18000ce45
lea rbx, [fcn.18000cecc]
mov rcx, rbx
call fcn.180015bd8
mov ecx, 0x1c
call fcn.180018ad8
mov rcx, rbx
mov edx, 0x80000
test eax, eax
je 0x18000cdf2
mov edx, 0x1000
call fcn.180011c74
mov rcx, rbx
call fcn.180014694
mov edx, 0x80000
mov rcx, rbx
call fcn.180014024
call fcn.18000f67c
test eax, eax
je 0x18000ce1d
mov rcx, rbx
call fcn.18000f754
cmp dword [0x18003f490], 0
jle 0x18000ce45
call fcn.18000d940
mov r8, r12
mov edx, r15d
mov rcx, rdi
call fcn.18000d9c0
lea rcx, [0x18004de80]
call fcn.18000db2c
call fcn.18000d940
call fcn.18000f67c
test eax, eax
je 0x18000ce58
call fcn.180019140
mov ecx, dword [section..data]
test ecx, ecx
je 0x18000ceb1
cmp dword [0x18003f468], 0
je 0x18000ce9e
call fcn.18000f65c
mov edx, dword [0x18003f468]
mov ecx, dword [section..data]
imul edx, ecx
mov r9d, eax
mov eax, 0x51eb851f
mul edx
mov eax, r9d
mov r8d, edx
xor edx, edx
shr r8d, 5
div r8d
cmp edx, ecx
jae 0x18000cea9
sub ecx, edx
call fcn.1800124c0
mov ecx, dword [section..data]
test ecx, ecx
jne 0x18000cba9
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp fcn.180019140