Function at 0x18000d0bc
Capabilities:
Initialize winsock library

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x388
xor edx, edx
mov rsi, rcx
mov rcx, r9
mov ebx, edx
mov dword [rsp + 0x40], edx
mov dword [rsp + 0xa0], edx
mov qword [rax - 0x2b0], rdx
mov dword [rax - 0x31c], edx
mov rbp, rdx
mov qword [rsp + 0x108], r8
call fcn.180019c08
xor edx, edx
mov qword [rsp + 0x128], rax
mov edi, dword [rsp + 0x3b0]
mov r8, qword [rsp + 0x108]
mov dword [rsp + 0x44], edx
lea rcx, [r8 + 4]
mov r8d, dword [r8]
mov eax, edx
add edx, 1
mov dword [rsp + rax*4 + 0x70], r8d
add r8, rcx
cmp edx, 6
mov qword [rsp + rax*8 + 0xc0], rcx
mov dword [rsp + 0x44], edx
jb 0x18000d125
xor edx, edx
cmp dword [rsp + 0x70], 1
mov qword [rsp + 0x108], r8
jbe 0x18000dbfa
mov rax, qword [rsp + 0xc0]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
call fcn.18000c088
mov rcx, qword [rsp + 0x50]
lea r8, [rsp + 0xf4]
lea rdx, [rsp + 0xf0]
call fcn.18000c8c0
xor edx, edx
cmp rax, rdx
je 0x18000d1b9
cmp dword [rsp + 0xf4], edx
jne 0x18000d1b9
mov ecx, dword [rsp + 0xf0]
cmp ecx, edx
je 0x18000d1ec
cmp dword [rsp + 0x3d0], edx
je 0x18000d1e7
cmp ecx, 8
je 0x18000d1ec
mov rax, qword [rsp + 0xc0]
cmp qword [rsp + 0x50], rax
je 0x18000d119
mov r8, qword [rsp + 0x50]
xor edx, edx
mov rcx, qword [0x180036838]
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
jmp 0x18000d119
cmp ecx, 7
jne 0x18000d1b9
mov rdx, qword [rsp + 0x128]
mov rcx, rax
call fcn.180018f4c
xor edx, edx
cmp eax, edx
je 0x18000d1b9
mov rax, qword [rsp + 0xc0]
cmp qword [rsp + 0x50], rax
je 0x18000d225
mov r8, qword [rsp + 0x50]
mov rcx, qword [0x180036838]
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
cmp dword [rsp + 0x84], 1
mov eax, dword [rsp + 0x74]
jbe 0x18000d243
cmp dword [rsp + 0x78], 1
ja 0x18000d243
cmp eax, 1
jbe 0x18000db02
cmp eax, 1
jbe 0x18000d119
cmp rbp, rdx
jne 0x18000d2e0
mov rax, qword [rsi]
lea rdx, [rsp + 0x140]
mov r8d, 1
mov rcx, rsi
call qword [rax + 0x60]
mov edi, dword [rsp + 0x150]
xor edx, edx
cmp edi, edx
mov dword [rsp + 0x3b0], edi
je 0x18000d119
mov rcx, qword [0x180036838]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor edx, edx
cmp rax, rdx
mov rbp, rax
je 0x18000d119
mov rax, qword [rsi]
mov dword [rsp + 0x110], edx
mov dword [rsp + 0x114], edx
mov rdx, qword [rsp + 0x110]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x28]
mov r11, qword [rsi]
xor r9d, r9d
mov r8d, edi
mov rdx, rbp
mov rcx, rsi
call qword [r11 + 0x18]
mov eax, dword [rsp + 0x74]
xor edx, edx
cmp edi, edx
je 0x18000d119
mov rcx, qword [rsp + 0xc8]
lea edx, [rax - 1]
call fcn.180028900
mov edi, eax
xor edi, dword [0x180036a50]
cmp edi, 0x7008913
je 0x18000da58
cmp edi, 0x35cb7703
je 0x18000d876
cmp edi, 0x36994a2b
mov edx, 0
je 0x18000d112
cmp edi, 0x65463efb
je 0x18000d9bf
cmp edi, 0x9acc683e
je 0x18000d825
cmp edi, 0xc8260c73
je 0x18000d61a
cmp edi, 0xdf9592f1
je 0x18000d558
cmp edi, 0xf436bfb4
je 0x18000d112
cmp dword [rsp + 0x78], 1
jbe 0x18000d112
mov rax, qword [rsp + 0xd0]
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0xb8], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], rax
call fcn.18000c088
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, qword [rsp + 0xd0]
lea r8, [rsp + 0x50]
lea edx, [rax + 1]
xor r9d, r9d
call fcn.18000ccb0
cmp edi, 0x4bef8de5
jne 0x18000d470
cmp dword [rsp + 0x74], 3
jne 0x18000d470
xor eax, eax
cmp dword [rsp + 0x3d8], eax
je 0x18000d50c
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, dword [rsp + 0x3b0]
mov rcx, qword [0x180036838]
mov dword [rsp + 0x48], eax
add eax, edi
xor edx, edx
mov r8d, eax
mov dword [rsp + 0xb8], eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor ecx, ecx
cmp rax, rcx
mov qword [rsp + 0x68], rax
je 0x18000d50c
mov ebx, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rcx, rax
mov r8, rbx
call sub.ntdll.dll_memcpy
mov r8, rdi
mov rdi, qword [rsp + 0x68]
lea rcx, [rbx + rdi]
mov rdx, rbp
call sub.ntdll.dll_memcpy
mov r11d, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0x40]
mov dword [rsp + 0x90], r11d
xor ecx, ecx
jmp 0x18000d4d0
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, dword [rsp + 0x3b0]
cmp eax, edi
ja 0x18000d4be
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xb8]
mov edx, edi
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.18000c954
mov rdi, qword [rsp + 0xb8]
jmp 0x18000d4c8
mov rdi, qword [rsp + 0x68]
mov eax, 0x57
xor ecx, ecx
cmp eax, ecx
cmovne rdi, rcx
cmp rdi, rcx
je 0x18000d50c
mov rcx, qword [0x180036838]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbp, rdi
mov edi, dword [rsp + 0x90]
or ebx, 8
mov dword [rsp + 0xa0], 1
mov dword [rsp + 0x3b0], edi
mov dword [rsp + 0x40], ebx
jmp 0x18000d513
mov edi, dword [rsp + 0x3b0]
mov rax, qword [rsp + 0xd0]
cmp qword [rsp + 0x50], rax
je 0x18000d536
mov r8, qword [rsp + 0x50]
mov rcx, qword [0x180036838]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0xc8]
mov edx, 0
cmp qword [rsp + 0x60], rax
je 0x18000d119
mov r8, qword [rsp + 0x60]
jmp 0x18000d1d3
cmp dword [rsp + 0x84], 1
mov edi, dword [rsp + 0x3b0]
jbe 0x18000d586
mov r8, qword [rsp + 0xe8]
mov edx, edi
mov rcx, rbp
call fcn.180019184
xor edx, edx
cmp rax, rdx
je 0x18000d119
cmp dword [rsp + 0x78], edx
mov word [rsp + 0x58], 1
mov word [rsp + 0x5a], 0xbb8
je 0x18000d5fc
cmp dword [rsp + 0x7c], edx
je 0x18000d5fc
mov rcx, qword [rsp + 0xd0]
lea r8, [rsp + 0x44]
xor edx, edx
call qword [sym.imp.SHLWAPI.dll_StrToIntExA]
xor edx, edx
cmp eax, edx
je 0x18000d5cf
mov eax, dword [rsp + 0x44]
movzx ecx, word [rsp + 0x58]
cmp eax, edx
cmovne cx, ax
mov word [rsp + 0x58], cx
mov rcx, qword [rsp + 0xd8]
lea r8, [rsp + 0x44]
call qword [sym.imp.SHLWAPI.dll_StrToIntExA]
xor edx, edx
cmp eax, edx
je 0x18000d5fc
mov eax, dword [rsp + 0x44]
movzx ecx, word [rsp + 0x5a]
cmp eax, edx
cmovne cx, ax
mov word [rsp + 0x5a], cx
xor r9d, r9d
lea rdx, [rsp + 0x58]
mov ecx, 0x125
lea r8d, [r9 + 4]
call fcn.18000fa58
or ebx, 4
jmp 0x18000daf9
mov rcx, qword [rsp + 0x3b8]
cmp rcx, rdx
je 0x18000d7c5
mov rax, qword [rcx]
lea rdx, [rsp + 0x190]
mov r8d, 1
call qword [rax + 0x60]
mov eax, dword [rsp + 0x1a0]
mov edi, dword [rsp + 0x3b0]
mov rcx, qword [0x180036838]
lea r8d, [rdi + rax]
xor edx, edx
mov dword [rsp + 0x48], eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor edx, edx
cmp rax, rdx
mov qword [rsp + 0x60], rax
je 0x18000d119
mov r11, qword [rsp + 0x3b8]
mov dword [rsp + 0x120], edx
mov dword [rsp + 0x124], edx
mov rax, qword [r11]
mov rdx, qword [rsp + 0x120]
xor r9d, r9d
xor r8d, r8d
mov rcx, r11
call qword [rax + 0x28]
mov rax, qword [rsp + 0x3b8]
mov r8d, dword [rsp + 0x48]
mov r11, qword [rax]
mov rdx, qword [rsp + 0x60]
xor r9d, r9d
mov rcx, rax
call qword [r11 + 0x18]
mov r11, qword [rsp + 0x3b8]
xor ecx, ecx
xor eax, eax
mov dword [rsp + 0x118], ecx
mov dword [rsp + 0x11c], ecx
mov rdx, qword [rsp + 0x118]
mov dword [rsp + 0x9c], eax
mov rax, qword [r11]
mov dword [rsp + 0x98], ecx
xor r9d, r9d
xor r8d, r8d
mov rcx, r11
call qword [rax + 0x28]
mov rax, qword [rsp + 0x3b8]
mov rdx, qword [rsp + 0x98]
mov r11, qword [rax]
mov rcx, rax
call qword [r11 + 0x30]
mov ecx, dword [rsp + 0x48]
mov r8, rdi
add rcx, qword [rsp + 0x60]
mov rdx, rbp
call sub.ntdll.dll_memcpy
mov r8d, dword [rsp + 0x48]
mov r9, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0x60]
xor eax, eax
cmp dword [rsp + 0x78], 1
cmova rax, qword [rsp + 0xd0]
lea rcx, [rsp + 0x100]
add r8d, edi
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x3c8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x20], rax
call fcn.18000cf34
xor ecx, ecx
cmp eax, ecx
je 0x18000d78b
or ebx, 2
mov dword [rsp + 0x40], ebx
mov r8d, dword [rsp + 0x100]
cmp r8d, ecx
je 0x18000d7bb
mov r11, qword [rsp + 0x3b8]
mov edx, dword [rsp + 0x48]
xor r9d, r9d
mov r10, qword [r11]
add edx, edi
mov rcx, r11
sub rdx, r8
add rdx, qword [rsp + 0x60]
call qword [r10 + 0x20]
mov r8, qword [rsp + 0x60]
jmp 0x18000d1d1
cmp dword [rsp + 0x78], 1
mov edi, dword [rsp + 0x3b0]
mov r9, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x3c8]
mov qword [rsp + 0x30], rdx
mov rax, rdx
cmova rax, qword [rsp + 0xd0]
mov r8d, edi
mov rdx, rbp
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x20], rax
call fcn.18000cf34
xor edx, edx
cmp eax, edx
je 0x18000d119
or ebx, 2
mov dword [rsp + 0x40], ebx
jmp 0x18000d119
cmp dword [rsp + 0x78], 1
jb 0x18000d876
cmp dword [rsp + 0x84], 1
jbe 0x18000d854
mov r8, qword [rsp + 0xe8]
mov edx, dword [rsp + 0x3b0]
mov rcx, rbp
call fcn.180019184
xor ecx, ecx
cmp rax, rcx
je 0x18000d876
mov r8d, dword [rsp + 0x78]
mov rdx, qword [rsp + 0xd0]
xor r9d, r9d
mov ecx, 0x126
call fcn.18000fa58
bts ebx, 7
mov dword [rsp + 0x40], ebx
mov rdi, qword [rsp + 0xe8]
mov rcx, rdi
mov qword [rsp + 0x68], rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea r8, [rsp + 0x68]
xor r9d, r9d
lea edx, [rax + 1]
mov rcx, rdi
call fcn.18000ccb0
mov edi, dword [rsp + 0x3b0]
xor edx, edx
cmp eax, edx
je 0x18000d119
lea r8, [rsp + 0xb0]
mov edx, 1
xor ecx, ecx
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
xor edx, edx
cmp eax, edx
jne 0x18000d119
mov rcx, qword [rsp + 0x68]
lea r8, [rsp + 0x8c]
lea rdx, [rsp + 0xf8]
xor r9d, r9d
call fcn.180004bdc
xor edi, edi
cmp eax, edi
jne 0x18000d9a5
mov rcx, qword [rsp + 0xb0]
mov r8d, dword [rsp + 0x8c]
mov rdx, qword [rsp + 0xf8]
mov rax, qword [rcx]
xor r9d, r9d
call qword [rax + 0x20]
mov rcx, qword [rsp + 0xb0]
mov dword [rsp + 0xa8], edi
mov rax, qword [rcx]
mov dword [rsp + 0xac], edi
mov rdx, qword [rsp + 0xa8]
xor r9d, r9d
xor r8d, r8d
call qword [rax + 0x28]
mov r8, qword [rsp + 0xf8]
mov rcx, qword [0x180036838]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [rsp + 0x3d8]
mov r9, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x3c0]
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
xor edx, edx
mov dword [rsp + 0x20], edi
call fcn.18000d0bc
mov r8, qword [rsp + 0x68]
mov rcx, qword [0x180036838]
or ebx, eax
xor edx, edx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edi, dword [rsp + 0x3b0]
jmp 0x18000d1e0
cmp dword [rsp + 0x78], 1
mov edi, dword [rsp + 0x3b0]
jb 0x18000d119
cmp dword [rsp + 0x84], 1
jbe 0x18000d9f8
mov r8, qword [rsp + 0xe8]
mov edx, edi
mov rcx, rbp
call fcn.180019184
xor edx, edx
cmp rax, rdx
je 0x18000d119
lea rdx, [rsp + 0x1e0]
mov cx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor edx, edx
cmp eax, edx
jne 0x18000da2d
mov rcx, qword [rsp + 0xd0]
lea r8d, [rdx + 1]
lea rdx, [rsp + 0x130]
call fcn.180018350
xor edx, edx
jmp 0x18000da2f
mov eax, edx
cmp eax, edx
je 0x18000d119
xor r9d, r9d
lea rdx, [rsp + 0x130]
mov ecx, 0x127
lea r8d, [r9 + 0x10]
call fcn.18000fa58
or ebx, 0x40
jmp 0x18000daf9
cmp dword [rsp + 0x78], 1
mov edi, dword [rsp + 0x3b0]
mov edx, 0
jb 0x18000d119
cmp dword [rsp + 0x84], 1
jbe 0x18000da96
mov r8, qword [rsp + 0xe8]
mov edx, edi
mov rcx, rbp
call fcn.180019184
xor edx, edx
cmp rax, rdx
je 0x18000d119
mov rcx, qword [rsp + 0xd0]
lea r8, [rsp + 0x44]
xor edx, edx
call qword [sym.imp.SHLWAPI.dll_StrToIntExA]
xor edx, edx
cmp eax, edx
je 0x18000d119
mov ecx, dword [rsp + 0x44]
cmp ecx, edx
je 0x18000d119
movzx eax, cx
lea r8d, [rdx + 4]
lea rdx, [rsp + 0x88]
shl ax, 2
xor r9d, r9d
mov word [rsp + 0x8a], 0xc8
add cx, ax
mov word [rsp + 0x88], cx
mov ecx, 0x125
call fcn.18000fa58
or ebx, 0x20
mov dword [rsp + 0x40], ebx
jmp 0x18000d1e0
mov rdi, qword [rsp + 0x3e0]
cmp rdi, rdx
je 0x18000dbfa
cmp qword [rdi + 0x18], rdx
jne 0x18000db2b
mov rcx, rdi
call fcn.18001b358
xor edx, edx
cmp eax, edx
jne 0x18000dbfa
mov rcx, rdi
call fcn.18001b1dc
xor edx, edx
cmp eax, edx
jne 0x18000dbfa
xor eax, eax
mov dword [rsp + 0x98], edx
mov dword [rsp + 0xa8], edx
mov dword [rsp + 0x9c], eax
mov rax, qword [rsi]
mov dword [rsp + 0xac], edx
mov rdx, qword [rsp + 0xa8]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x28]
mov r11, qword [rsi]
mov rdx, qword [rsp + 0x98]
mov rcx, rsi
call qword [r11 + 0x30]
lea rdx, [rdi + 0x58]
lea rcx, [rdi + 0x10]
call fcn.18000c088
mov r11, qword [rsi]
mov r8d, dword [rdi + 0x58]
mov rdx, qword [rdi + 0x10]
xor r9d, r9d
mov rcx, rsi
call qword [r11 + 0x20]
xor ebx, ebx
cmp rbp, rbx
je 0x18000dbc2
mov rcx, qword [0x180036838]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbp, rbx
mov eax, dword [rsp + 0x3d8]
mov r8, qword [rsp + 0x3c0]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], eax
mov r9, rdi
xor edx, edx
add r9, 0x60
mov rcx, rsi
mov dword [rsp + 0x20], ebx
call fcn.18000d0bc
mov ebx, dword [rsp + 0x40]
or eax, 1
or ebx, eax
xor edx, edx
cmp rbp, rdx
je 0x18000dc7d
mov ecx, dword [rsp + 0xa0]
cmp ecx, edx
je 0x18000dc69
xor eax, eax
mov dword [rsp + 0x3e0], edx
mov dword [rsp + 0x3c0], edx
mov dword [rsp + 0x3e4], eax
mov rax, qword [rsi]
mov dword [rsp + 0x3c4], edx
mov rdx, qword [rsp + 0x3c0]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x28]
mov r11, qword [rsi]
mov rdx, qword [rsp + 0x3e0]
mov rcx, rsi
call qword [r11 + 0x30]
mov r11, qword [rsi]
mov r8d, dword [rsp + 0x3b0]
xor r9d, r9d
mov rdx, rbp
mov rcx, rsi
call qword [r11 + 0x20]
mov rcx, qword [0x180036838]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
mov r10, qword [rsi]
mov dword [rsp + 0x3c0], edx
mov dword [rsp + 0x3c4], edx
mov rdx, qword [rsp + 0x3c0]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [r10 + 0x28]
mov eax, ebx
add rsp, 0x388
pop rdi
pop rsi
pop rbp
pop rbx
ret