Function at 0x18001b020
Capabilities:
Send data
Send data on socket
Send http request

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x9b0]
sub rsp, 0xab0
mov rax, qword [0x1800990e0]
xor rax, rsp
mov qword [rbp + 0x990], rax
mov rax, qword [rbp + 0xa18]
mov r12, qword [rbp + 0xa20]
mov rbx, rcx
mov rsi, r8
mov rdi, rdx
mov qword [rsp + 0x30], rdx
lea rcx, [rbp + 0x191]
xor r15d, r15d
xor edx, edx
mov r8d, 0x7ff
mov qword [rsp + 0x40], rax
mov r14d, r9d
mov dword [rsp + 0x38], r9d
mov byte [rbp + 0x190], r15b
call fcn.1800292e0
cmp dword [0x18009caf4], 5
jl 0x18001b0a7
lea rcx, str.HandleWebPages
call fcn.1800169b0
test rbx, rbx
je 0x18001ba4d
test rsi, rsi
je 0x18001ba4d
test rdi, rdi
je 0x18001ba4d
test r12, r12
je 0x18001ba4d
lea rdx, [0x18007a540]
mov rcx, rbx
mov dword [r12], r15d
call fcn.18002b030
mov rcx, rbx
test eax, eax
jne 0x18001b0fd
mov r8d, r14d
mov rdx, rsi
mov dword [r12], 2
call fcn.18001d930
jmp 0x18001b344
lea rdx, [0x18007a590]
call fcn.18002b030
mov rcx, rbx
test eax, eax
jne 0x18001b128
mov r8d, r14d
mov rdx, rsi
mov dword [r12], 2
call fcn.18001d9d0
jmp 0x18001b344
lea rdx, [0x18007a5f0]
call fcn.18002b030
mov rcx, rbx
test eax, eax
jne 0x18001b153
mov r8d, r14d
mov rdx, rsi
mov dword [r12], 2
call fcn.18001da60
jmp 0x18001b344
lea rdx, [0x18007a650]
call fcn.18002b030
mov rcx, rbx
test eax, eax
jne 0x18001b17e
mov r8d, r14d
mov rdx, rsi
mov dword [r12], 2
call fcn.18001daf0
jmp 0x18001b344
lea rdx, [0x18007a660]
call fcn.18002b030
mov rcx, rbx
test eax, eax
jne 0x18001b1a9
mov r8d, r14d
mov rdx, rsi
mov dword [r12], 2
call fcn.18001db80
jmp 0x18001b344
lea rdx, [0x18007a688]
call fcn.18002b030
test eax, eax
jne 0x18001b1d4
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov dword [r12], 2
call fcn.18001dc10
jmp 0x18001b344
mov rcx, r15
lea rdx, [0x18007a698]
nop
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18001b20e
cmp rcx, 8
jne 0x18001b1e0
mov r8d, r14d
mov rdx, rsi
mov rcx, rbx
mov dword [r12], 3
call fcn.18001dca0
jmp 0x18001b344
cmp dword [0x18009caf4], 5
mov qword [rsp + 0xaa8], r13
jl 0x18001b22b
lea rcx, str.Processing_Request
call fcn.1800169b0
lea rdx, [0x180073e64]
mov rcx, rbx
call fcn.180028678
mov r13, rax
test rax, rax
jne 0x18001b247
mov r13, rbx
jmp 0x18001b24a
inc r13
lea rdx, str._LocalUsers
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b365
xor eax, eax
lea r8, str.text_plain
lea rcx, [rsp + 0x50]
lea edx, [rax + 0x40]
or r9, 0xffffffffffffffff
mov byte [rsp + 0x50], r15b
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov qword [rsp + 0x79], rax
mov qword [rbp - 0x7f], rax
mov dword [rbp - 0x77], eax
mov word [rbp - 0x73], ax
mov byte [rbp - 0x71], al
call fcn.18002a5b4
cmp dword [0x18009caf4], 5
jl 0x18001b2c6
lea rdx, [rsp + 0x50]
lea rcx, str.DisplayHTMLHeader:__s
call fcn.1800169b0
lea rax, [rsp + 0x50]
lea r9, str.HTTP_1.0_200_OK_r_nServer:_SNARE_1.0_r_nMIME_version:_1.0_r_nContent_type:__s_r_n
lea rcx, [rbp - 0x70]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x20], rax
call fcn.180029e64
lea r8, [0x18007038c]
lea rcx, [rbp - 0x70]
or r9, 0xffffffffffffffff
mov edx, 0x200
call fcn.180029f1c
lea rax, [rbp - 0x70]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x18001b310
mov rcx, qword [rbp + 0xa10]
lea rdx, [rbp - 0x70]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
mov rcx, qword [rbp + 0xa10]
call fcn.1800203e0
or eax, 0xffffffff
mov r13, qword [rsp + 0xaa8]
mov rcx, qword [rbp + 0x990]
xor rcx, rsp
call fcn.1800292b0
add rsp, 0xab0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, str._DomainUsers
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b453
xor eax, eax
lea r8, str.text_plain
lea rcx, [rsp + 0x50]
lea edx, [rax + 0x40]
or r9, 0xffffffffffffffff
mov byte [rsp + 0x50], r15b
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov qword [rsp + 0x79], rax
mov qword [rbp - 0x7f], rax
mov dword [rbp - 0x77], eax
mov word [rbp - 0x73], ax
mov byte [rbp - 0x71], al
call fcn.18002a5b4
cmp dword [0x18009caf4], 5
jl 0x18001b3e1
lea rdx, [rsp + 0x50]
lea rcx, str.DisplayHTMLHeader:__s
call fcn.1800169b0
lea rax, [rsp + 0x50]
lea r9, str.HTTP_1.0_200_OK_r_nServer:_SNARE_1.0_r_nMIME_version:_1.0_r_nContent_type:__s_r_n
lea rcx, [rbp - 0x70]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x20], rax
call fcn.180029e64
lea r8, [0x18007038c]
lea rcx, [rbp - 0x70]
or r9, 0xffffffffffffffff
mov edx, 0x200
call fcn.180029f1c
lea rax, [rbp - 0x70]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x18001b425
mov rcx, qword [rbp + 0xa10]
lea rdx, [rbp - 0x70]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
mov rcx, qword [rbp + 0xa10]
call fcn.180020a30
jmp 0x18001b339
lea rdx, str._LocalGroupMembers
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b541
xor eax, eax
lea r8, str.text_plain
lea rcx, [rsp + 0x50]
lea edx, [rax + 0x40]
or r9, 0xffffffffffffffff
mov byte [rsp + 0x50], r15b
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov qword [rsp + 0x79], rax
mov qword [rbp - 0x7f], rax
mov dword [rbp - 0x77], eax
mov word [rbp - 0x73], ax
mov byte [rbp - 0x71], al
call fcn.18002a5b4
cmp dword [0x18009caf4], 5
jl 0x18001b4cf
lea rdx, [rsp + 0x50]
lea rcx, str.DisplayHTMLHeader:__s
call fcn.1800169b0
lea rax, [rsp + 0x50]
lea r9, str.HTTP_1.0_200_OK_r_nServer:_SNARE_1.0_r_nMIME_version:_1.0_r_nContent_type:__s_r_n
lea rcx, [rbp - 0x70]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x20], rax
call fcn.180029e64
lea r8, [0x18007038c]
lea rcx, [rbp - 0x70]
or r9, 0xffffffffffffffff
mov edx, 0x200
call fcn.180029f1c
lea rax, [rbp - 0x70]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x18001b513
mov rcx, qword [rbp + 0xa10]
lea rdx, [rbp - 0x70]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
mov rcx, qword [rbp + 0xa10]
call fcn.1800213c0
jmp 0x18001b339
lea rdx, str._DomainGroupMembers
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b62f
xor eax, eax
lea r8, str.text_plain
lea rcx, [rsp + 0x50]
lea edx, [rax + 0x40]
or r9, 0xffffffffffffffff
mov byte [rsp + 0x50], r15b
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov qword [rsp + 0x79], rax
mov qword [rbp - 0x7f], rax
mov dword [rbp - 0x77], eax
mov word [rbp - 0x73], ax
mov byte [rbp - 0x71], al
call fcn.18002a5b4
cmp dword [0x18009caf4], 5
jl 0x18001b5bd
lea rdx, [rsp + 0x50]
lea rcx, str.DisplayHTMLHeader:__s
call fcn.1800169b0
lea rax, [rsp + 0x50]
lea r9, str.HTTP_1.0_200_OK_r_nServer:_SNARE_1.0_r_nMIME_version:_1.0_r_nContent_type:__s_r_n
lea rcx, [rbp - 0x70]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x20], rax
call fcn.180029e64
lea r8, [0x18007038c]
lea rcx, [rbp - 0x70]
or r9, 0xffffffffffffffff
mov edx, 0x200
call fcn.180029f1c
lea rax, [rbp - 0x70]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x18001b601
mov rcx, qword [rbp + 0xa10]
lea rdx, [rbp - 0x70]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
mov rcx, qword [rbp + 0xa10]
call fcn.180021970
jmp 0x18001b339
lea rdx, str._Challenge
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b71e
xor eax, eax
lea r8, str.text_plain
lea rcx, [rsp + 0x50]
lea edx, [rax + 0x40]
or r9, 0xffffffffffffffff
mov byte [rsp + 0x50], r15b
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov qword [rsp + 0x79], rax
mov qword [rbp - 0x7f], rax
mov dword [rbp - 0x77], eax
mov word [rbp - 0x73], ax
mov byte [rbp - 0x71], al
call fcn.18002a5b4
cmp dword [0x18009caf4], 5
jl 0x18001b6ab
lea rdx, [rsp + 0x50]
lea rcx, str.DisplayHTMLHeader:__s
call fcn.1800169b0
lea rax, [rsp + 0x50]
lea r9, str.HTTP_1.0_200_OK_r_nServer:_SNARE_1.0_r_nMIME_version:_1.0_r_nContent_type:__s_r_n
lea rcx, [rbp - 0x70]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x20], rax
call fcn.180029e64
lea r8, [0x18007038c]
lea rcx, [rbp - 0x70]
or r9, 0xffffffffffffffff
mov edx, 0x200
call fcn.180029f1c
lea rax, [rbp - 0x70]
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], r15b
jne 0x18001b6f0
mov rcx, qword [rbp + 0xa10]
lea rdx, [rbp - 0x70]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
mov rcx, qword [rbp + 0xa10]
call fcn.180023200
jmp 0x18001b339
lea rdx, str._RegDump
mov r8d, 8
mov rcx, rbx
call fcn.18002a3c0
test eax, eax
jne 0x18001b772
mov rcx, qword [rbp + 0xa10]
lea r8, [rbp + 0x190]
mov r9d, 0x800
mov rdx, r13
call fcn.1800236d0
lea rcx, [rbp + 0x190]
or rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], r15b
jne 0x18001b760
test rax, rax
je 0x18001b339
lea rdx, [0x18007a8f0]
mov r8d, 9
mov rcx, rbx
call fcn.18002a3c0
mov r9d, r15d
mov ecx, 1
test eax, eax
mov r8d, r14d
mov rdx, rsi
cmove r9d, ecx
mov rcx, rbx
call fcn.18001c030
mov edi, eax
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rsi + rax], r15b
jne 0x18001b7b0
movsxd r15, eax
lea rdx, str._network
mov rcx, rbx
add r15, rsi
sub r14d, eax
mov eax, 0
cmovs r14d, eax
mov dword [r12], 1
call fcn.18002b030
test eax, eax
jne 0x18001b7fe
mov r8d, r14d
mov rdx, r15
mov rcx, r13
call fcn.18001c0b0
add edi, eax
xor r12d, r12d
jmp 0x18001b9f0
xor r12d, r12d
lea rdx, str._remote
mov ecx, r12d
nop dword [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18001b836
cmp rcx, 8
jne 0x18001b810
mov r8d, r14d
mov rdx, r15
mov rcx, r13
call fcn.18001c660
jmp 0x18001b9ee
lea rdx, str._setremote
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b85e
mov rcx, qword [rsp + 0x30]
mov r8d, r14d
mov rdx, r15
call fcn.18001c8e0
jmp 0x18001b9ee
lea rdx, str._objective
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b884
mov r8d, r14d
mov rdx, r15
mov rcx, r13
call fcn.18001cfc0
jmp 0x18001b9ee
lea rdx, str._setobjective
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b8ac
mov rcx, qword [rsp + 0x30]
mov r8d, r14d
mov rdx, r15
call fcn.18001dcf0
jmp 0x18001b9ee
lea rdx, str._setobjectiveval
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b8d4
mov rcx, qword [rsp + 0x30]
mov r8d, r14d
mov rdx, r15
call fcn.18001f8a0
jmp 0x18001b9ee
lea rdx, str._restart
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b8fa
mov r8d, r14d
mov rdx, r15
mov rcx, r13
call fcn.18001ed30
jmp 0x18001b9ee
lea rdx, str._setrestart
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b927
mov r9, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
mov r8d, r14d
mov rdx, r15
call fcn.18001ee30
jmp 0x18001b9ee
lea rdx, str._setnetwork
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b94f
mov rcx, qword [rsp + 0x30]
mov r8d, r14d
mov rdx, r15
call fcn.18001f000
jmp 0x18001b9ee
mov rcx, r12
lea rdx, str._status
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18001b975
cmp rcx, 8
jne 0x18001b960
jmp 0x18001b9e0
lea rdx, str._eventlog
mov rcx, rbx
call fcn.18002b030
test eax, eax
jne 0x18001b998
mov r8d, r14d
mov rdx, r15
mov rcx, r13
call fcn.18001baf0
jmp 0x18001b9ee
lea rcx, [rbp + 0x190]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r12b
jne 0x18001b9a3
test rax, rax
je 0x18001b9c9
lea r8, [rbp + 0x190]
movsxd rdx, r14d
or r9, 0xffffffffffffffff
mov rcx, r15
call fcn.18002a5b4
jmp 0x18001b9f0
movzx eax, byte [rbx]
cmp al, byte [0x180073f3c]
jne 0x18001ba27
movzx eax, byte [rbx + 1]
cmp al, byte [0x180073f3d]
jne 0x18001ba27
mov r8d, r14d
mov rdx, r15
mov rcx, r13
call fcn.18001ba60
add edi, eax
or rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], 0
jne 0x18001b9f4
mov edx, dword [rsp + 0x38]
movsxd rcx, eax
lea r8, str.__td___tr___tbody___table___body__center__BR__BR__FONT_SIZE_1_facehelvetica__c___A_HREF_http:__www.intersectalliance.com__Intersect_Alliance__A__Pty_Ltd_1999_2013._This_site_is_powered_by__A_HREF_http:__www.intersectalliance.com_projects___SNARE_for_Windows.__A___FONT___td___tr___tbody___table___center___html_
add rcx, rsi
sub edx, eax
cmovs edx, r12d
or r9, 0xffffffffffffffff
movsxd rdx, edx
call fcn.18002a5b4
mov eax, edi
jmp 0x18001b33c
cmp dword [0x18009caf4], 5
jl 0x18001ba3c
lea rcx, str.No_page___sending_a_404
call fcn.1800169b0
mov rcx, qword [rbp + 0xa10]
call fcn.1800244c0
jmp 0x18001b339
xor eax, eax
jmp 0x18001b344