Function at 0x1400594d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov dword [rax + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x278
mov rbx, qword [0x14011c188]
test r9, r9
movaps xmmword [rax - 0x58], xmm6
mov r14, r8
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x58], rbx
cmovne rax, r9
mov r13, rcx
xor r12d, r12d
mov qword [rsp + 0x78], rax
mov qword [rax], r12
test rcx, rcx
je case.0x14005969e.4
mov r15d, dword [rbp + 0x1c0]
xorps xmm6, xmm6
lea rsi, [0x1400f9b70]
nop dword [rax]
lea rdi, [0x140000000]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov rax, qword [0x14011c188]
sub ecx, dword [0x140124d58]
cmp ecx, dword [rax + 0x88]
jbe 0x14005959b
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0x88]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005958f
mov edx, 1
lea ecx, [rdx - 2]
call fcn.140001710
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x140124d58], eax
cmp byte [rbx + 0x7f], 0
jne 0x1400595cb
cmp byte [rbx + 0xc2], 0
jne 0x1400595cb
inc dword [rbx + 0x6c]
mov eax, dword [0x140124d50]
cmp dword [rbx + 0x6c], eax
jle 0x1400595cb
cmp eax, 0xffffffff
jle 0x1400595cb
mov byte [rbx + 0x7f], 1
mov dword [rbx + 0x88], 5
cmp byte [rbx + 0x7c], 0
je 0x1400595e6
mov edx, 1
mov ecx, 0x8000012f
call fcn.140001710
cmp byte [rbx + 0x7c], 0
jne 0x1400595d1
mov qword [0x140124c60], r13
cmp byte [rbx + 0xc6], 0
je 0x14005962b
movsxd rax, dword [0x140122f84]
mov qword [rdi + rax*8 + 0x1235d0], r13
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movsxd rdx, dword [0x140122f84]
mov dword [rdi + rdx*4 + 0x122f90], eax
inc edx
cmp edx, 0x190
cmovge edx, r12d
mov dword [0x140122f84], edx
cmp qword [0x14011ea60], 0xffffffffffffffff
je 0x140059644
cmp byte [r13], 0x10
je 0x140059644
mov rdx, r13
call fcn.140008980
movzx ecx, byte [r13]
cmp cl, 1
je 0x14005967a
lea eax, [rcx - 0xf]
cmp al, 4
jbe 0x14005967a
lea eax, [rcx - 0x16]
cmp al, 5
jbe 0x14005967a
cmp cl, 0x15
mov rdx, r12
mov rcx, r13
cmove rdx, r14
call fcn.1400754b0
mov r15d, eax
cmp eax, 1
jne 0x14005981e
movzx edi, byte [r13]
lea eax, [rdi - 1]
cmp eax, 0x1a
ja case.default.0x14005969e
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x5adb8]
add rcx, rdx
jmp rcx
mov rax, qword [r13 + 8]
cmp byte [rax], 1
jne 0x1400596b9
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x1400596b9
call fcn.140066330
jmp 0x1400596c5
mov rcx, qword [0x140124260]
call fcn.140066290
test eax, eax
je 0x14005976e
mov rax, qword [r13 + 0x20]
cmp byte [rax], 3
jne 0x140059709
nop word [rax + rax]
mov rcx, qword [rax + 0x20]
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 2
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
mov rax, qword [r13 + 0x20]
cmp rcx, rax
je 0x1400596e0
jmp 0x140059726
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 3
mov rcx, rax
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
lea rdi, [0x140000000]
cmp rcx, r13
je 0x140059547
cmp dword [rbp + 0x1c8], 3
je 0x14005a9af
cmp r15d, 1
jne 0x14005a9af
test rcx, rcx
jne 0x1400597f6
mov r13, qword [r13 + 0x28]
cmp byte [r13], 9
jne case.default.0x14005969e
mov r13, qword [r13 + 0x28]
jmp case.default.0x14005969e
mov r13, qword [r13 + 0x28]
cmp byte [r13], 9
jne 0x14005980c
mov rax, qword [r13 + 0x20]
cmp byte [rax], 3
jne 0x1400597b9
nop word [rax + rax]
mov rcx, qword [rax + 0x20]
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 2
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
mov rax, qword [r13 + 0x20]
cmp rcx, rax
je 0x140059790
jmp 0x1400597d6
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 3
mov rcx, rax
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
cmp dword [rbp + 0x1c8], 3
je 0x14005a9af
cmp r15d, 1
jne 0x14005a9af
test rcx, rcx
je 0x14005a835
mov rax, qword [r13 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x14005aba0
mov r13, rcx
jmp case.default.0x14005969e
cmp dword [rbp + 0x1c8], 3
jne case.default.0x14005969e
mov eax, 1
movaps xmm6, xmmword [rsp + 0x260]
add rsp, 0x278
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [r13 + 0x28]
test rax, rax
jne 0x140059856
mov dl, 1
mov rcx, r13
call fcn.140063490
test rax, rax
je 0x140059f62
cmp dword [rbp + 0x1c8], 3
lea rcx, [rax + 8]
je 0x14005a9bf
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x30]
cmp qword [r13 + 0x30], rax
jne 0x14005a9bf
mov r13, rdx
jmp case.default.0x14005969e
cmp dil, 0xb
je 0x1400598ab
cmp dil, 0xc
jne 0x1400598c6
mov rcx, qword [0x140124260]
xor r8d, r8d
xor edx, edx
call fcn.1400446e0
mov qword [rbp - 0x58], rax
cmp rax, 0
je 0x14005a9cf
cmp byte [r13 + 1], 1
mov r11, qword [0x140124268]
ja 0x1400598d5
mov edi, 1
mov dword [rbp + 0x1d8], edi
jmp 0x1400598ed
mov r11, qword [0x140124268]
mov edi, dword [rbp + 0x1d8]
jmp 0x1400598ed
mov rcx, r11
call fcn.140027650
mov dword [rbp + 0x1d8], eax
mov edi, eax
test eax, eax
je 0x14005aa4a
mov qword [rsp + 0x50], r12
xor r14d, r14d
mov r12, qword [r13 + 0x28]
cmp byte [r12], 0x11
jne 0x14005990a
mov rsi, r12
mov r12, qword [r12 + 0x20]
jmp 0x14005990d
mov rsi, r14
cmp byte [r13], 0xf
mov rax, qword [rbx]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx + 8]
mov qword [rbp - 0x70], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x28], rax
mov rax, qword [rbx + 0x18]
mov qword [rbp + 0x30], rax
mov rax, qword [rbx + 0x20]
mov qword [rbp + 0x38], rax
je 0x140059943
mov qword [rbx], 1
movzx eax, byte [r13]
add eax, 0xfffffff6
cmp eax, 6
ja case.default.0x140059967
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x5ae24]
add rcx, rdx
jmp rcx
cmp byte [r13 + 1], 0
jbe 0x1400599e7
mov rdx, qword [r13 + 8]
cmp byte [rdx + 1], 0
jne 0x1400599d3
mov rdx, qword [rdx + 0x18]
test rdx, rdx
je 0x1400599d3
mov ecx, dword [rdx + 0x10]
test ecx, ecx
je 0x1400599c3
sub ecx, 1
je 0x1400599bb
sub ecx, 1
je 0x1400599b1
cmp ecx, 2
je 0x1400599a1
mov rdi, r14
xor r14b, r14b
jmp 0x1400599ed
mov rcx, qword [rdx]
call fcn.14005fce0
mov rdi, rax
xor r14b, r14b
jmp 0x1400599ed
cvttsd2si rdi, qword [rdx]
xor r14b, r14b
jmp 0x1400599ed
mov rdi, qword [rdx]
xor r14b, r14b
jmp 0x1400599ed
mov rcx, qword [rdx]
call fcn.14009b440
mov rdi, rax
xor r14b, r14b
jmp 0x1400599ed
mov rcx, qword [0x140124260]
call fcn.14009b440
mov rdi, rax
xor r14b, r14b
jmp 0x1400599ed
mov rdi, r14
mov r14b, 1
mov rbx, qword [0x14011c188]
mov r15d, 4
mov qword [rbp - 0x78], rbx
mov qword [rsp + 0x60], 0
test r14b, r14b
jne 0x140059a15
cmp qword [rbx], rdi
jg 0x140059e69
mov rcx, qword [r13 + 0x20]
cmp byte [rcx], 3
jne 0x140059a5d
mov rbx, qword [rbp + 0x1d0]
nop word [rax + rax]
mov rcx, qword [rcx + 0x20]
lea r9, [rsp + 0x60]
mov r8, rbx
mov edx, 2
call fcn.1400594d0
mov rcx, qword [r13 + 0x20]
mov r15d, eax
mov rax, qword [rsp + 0x60]
cmp rax, rcx
je 0x140059a30
mov rbx, qword [rbp - 0x78]
jmp 0x140059a7b
mov r8, qword [rbp + 0x1d0]
lea r9, [rsp + 0x60]
mov edx, 3
call fcn.1400594d0
mov r15d, eax
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140059a95
cmp r15d, 6
jne 0x140059a8b
cmp rax, r13
je 0x140059a9b
mov qword [rsp + 0x50], rax
jmp 0x140059e69
cmp r15d, 6
jne 0x140059aa3
mov r15d, 1
jmp 0x140059aad
cmp r15d, 1
jne 0x140059e69
test rsi, rsi
je 0x140059b4e
mov rax, qword [0x14011c188]
mov qword [0x140124c60], rsi
cmp byte [rax + 0xc6], 0
je 0x140059b0e
movsxd rax, dword [0x140122f84]
lea r15, [0x140000000]
mov qword [r15 + rax*8 + 0x1235d0], rsi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movsxd rdx, dword [0x140122f84]
mov dword [r15 + rdx*4 + 0x122f90], eax
inc edx
cmp edx, 0x190
mov eax, 0
cmovge edx, eax
mov dword [0x140122f84], edx
cmp qword [0x14011ea60], 0xffffffffffffffff
je 0x140059b20
mov rdx, rsi
call fcn.140008980
xor edx, edx
mov rcx, rsi
call fcn.1400754b0
mov r15d, eax
cmp eax, 1
jne 0x140059e69
mov rcx, qword [0x140124260]
lea r15d, [rax + 4]
call fcn.140066290
test eax, eax
jne 0x140059e69
inc qword [rbx]
jmp 0x140059a07
mov rbx, qword [0x14011c188]
mov r15d, 4
mov qword [rbp - 0x78], rbx
mov qword [rsp + 0x60], r14
nop dword [rax]
cmp qword [0x14011ea60], 0xffffffffffffffff
mov qword [0x140124c60], r13
je 0x140059b89
mov rdx, r13
call fcn.140008980
xor edx, edx
mov rcx, r13
call fcn.1400754b0
cmp eax, 1
jne 0x140059e66
mov rcx, qword [0x140124260]
call fcn.140066290
test eax, eax
je 0x140059e69
mov rcx, qword [r13 + 0x20]
cmp byte [rcx], 3
jne 0x140059bed
mov rbx, qword [rbp + 0x1d0]
mov rcx, qword [rcx + 0x20]
lea r9, [rsp + 0x60]
mov r8, rbx
mov edx, 2
call fcn.1400594d0
mov rcx, qword [r13 + 0x20]
mov r15d, eax
mov rax, qword [rsp + 0x60]
cmp rax, rcx
je 0x140059bc0
mov rbx, qword [rbp - 0x78]
jmp 0x140059c0b
mov r8, qword [rbp + 0x1d0]
lea r9, [rsp + 0x60]
mov edx, 3
call fcn.1400594d0
mov r15d, eax
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140059c2b
cmp r15d, 6
jne 0x140059a8b
cmp rax, r13
jne 0x140059a8b
mov r15d, 1
jmp 0x140059c43
cmp r15d, 6
jne 0x140059c39
mov r15d, 1
jmp 0x140059c43
cmp r15d, 1
jne 0x140059e69
cmp byte [rbx + 0xc6], 0
je 0x140059c88
movsxd rax, dword [0x140122f84]
lea rdi, [0x140000000]
mov qword [rdi + rax*8 + 0x1235d0], r13
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movsxd rdx, dword [0x140122f84]
mov dword [rdi + rdx*4 + 0x122f90], eax
inc edx
cmp edx, 0x190
cmovge edx, r14d
mov dword [0x140122f84], edx
inc qword [rbx]
jmp 0x140059b70
mov rdx, qword [rbp + 0x1d0]
lea r8, [rsp + 0x50]
mov r9, rsi
mov rcx, r13
call fcn.14005b540
mov r15d, eax
jmp case.default.0x140059967
lea rdx, [0x140104610]
mov rcx, r11
call fcn.1400bea20
mov rdx, qword [rbp + 0x1d0]
mov r9, rsi
lea r8, [rsp + 0x50]
mov rcx, r13
test eax, eax
je 0x140059ce1
call fcn.14005c7a0
mov r15d, eax
jmp case.default.0x140059967
call fcn.14005cc30
mov r15d, eax
jmp case.default.0x140059967
mov rax, qword [0x140124260]
lea r8, [rsp + 0x50]
mov rdx, qword [rbp + 0x1d0]
mov r9, rsi
mov qword [rsp + 0x28], r11
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.14005d090
mov r15d, eax
jmp case.default.0x140059967
mov rbx, qword [0x140124260]
mov ecx, 0x204a0
mov dword [rsp + 0x68], 4
call fcn.1400b8374
lea r9, [rsp + 0x68]
mov qword [rbp - 0x78], rax
mov r8, rax
mov rdx, rbx
mov rdi, rax
mov qword [rax + 0x20468], r14
mov qword [rax + 0x20488], r14
call fcn.14005ba90
test al, al
je 0x140059d9a
mov eax, dword [rbp + 0x1d8]
lea r8, [rsp + 0x50]
mov rdx, qword [rbp + 0x1d0]
mov ecx, eax
shr ecx, 2
and eax, 0xfffffffb
and cl, 1
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x28], cl
mov r9, rsi
mov rcx, r13
mov dword [rsp + 0x20], eax
call fcn.14005bcf0
mov r15d, eax
jmp 0x140059d9f
mov r15d, dword [rsp + 0x68]
cmp qword [rdi + 0x20488], 0
je 0x140059db5
mov rcx, qword [rdi + 0x20460]
call fcn.1400beb90
mov rcx, qword [rdi + 0x20468]
call fcn.1400beb90
mov edx, 0x204a0
mov rcx, rdi
call fcn.1400b836c
jmp 0x140059e69
mov rcx, qword [0x140124260]
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x20]
call fcn.1400446e0
mov rbx, rax
test rax, rax
je 0x140059e4c
mov rax, qword [rbp + 0x20]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov edx, edi
mov rax, qword [rbp - 0x58]
mov ecx, edi
shr edx, 2
and ecx, 0xfffffffb
and dl, 1
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rax
mov r9, rsi
mov byte [rsp + 0x28], dl
mov rdx, qword [rbp + 0x1d0]
mov dword [rsp + 0x20], ecx
mov rcx, r13
call fcn.14005c1d0
cmp byte [rbp + 0x1c0], 0
mov r15d, eax
je 0x140059e69
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140059e69
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 9
lea rcx, [0x1401245b0]
mov edx, eax
call fcn.14000f2a0
mov r15d, eax
mov rbx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x70]
mov qword [rbx], rax
mov rax, qword [rbp - 0x70]
mov qword [rbx + 8], rax
mov rax, qword [rbp + 0x28]
mov qword [rbx + 0x10], rax
mov rax, qword [rbp + 0x30]
mov qword [rbx + 0x18], rax
mov rax, qword [rbp + 0x38]
mov qword [rbx + 0x20], rax
test r15d, r15d
je 0x14005a9b7
lea eax, [r15 - 7]
cmp eax, 1
jbe 0x14005a9b7
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140059ecc
mov rax, qword [r13 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x14005aa35
mov r13, rcx
jmp 0x14005a997
cmp byte [r12], 9
jne 0x140059ee8
cmp r15d, 4
jne 0x140059ee3
mov r13, qword [r12 + 0x20]
jmp 0x14005a997
mov r12, qword [r12 + 0x28]
cmp dword [rbp + 0x1c8], 3
je case.0x14005969e.4
mov r13, r12
jmp 0x14005a997
mov rcx, qword [rsp + 0x58]
mov esi, dword [rbx + 0x60]
mov rbx, qword [rbx + 0x58]
mov qword [rcx + 0x58], r12
cmp dil, 0x17
jne 0x140059f69
mov eax, esi
or eax, 0x10
mov dword [rcx + 0x60], eax
mov rax, qword [r13 + 0x10]
test rax, rax
je 0x140059f7d
mov rcx, qword [rax]
test rcx, rcx
je 0x140059f7d
mov rdx, rbx
call fcn.14009de60
test eax, eax
jne 0x140059f7d
cmp dword [rbx + 0x10], 5
jne 0x140059f47
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140059f55
call fcn.1400beb90
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, rbx
call fcn.1400b836c
xor eax, eax
jmp 0x14005981e
mov rax, qword [r13 + 0x28]
cmp byte [rax], 0x18
je 0x140059f7d
mov eax, esi
and eax, 0xffffffef
or eax, 2
mov dword [rcx + 0x60], eax
mov qword [rsp + 0x50], r12
mov rax, qword [r13 + 0x20]
cmp byte [rax], 3
jne 0x140059fb9
nop dword [rax + rax]
mov rcx, qword [rax + 0x20]
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 2
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
mov rax, qword [r13 + 0x20]
cmp rcx, rax
je 0x140059f90
jmp 0x140059fd6
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 3
mov rcx, rax
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
mov rax, qword [rsp + 0x58]
mov r12d, dword [rax + 0x60]
shr r12d, 1
and r12b, 1
test rbx, rbx
je 0x14005a02f
test r15d, r15d
jne 0x14005a000
cmp qword [rax + 0x58], 0
jne 0x14005a000
mov qword [rax + 0x58], rbx
mov r12b, 1
jmp 0x14005a02f
cmp dword [rbx + 0x10], 5
jne 0x14005a00f
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14005a01d
call fcn.1400beb90
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, rbx
call fcn.1400b836c
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov dword [rbx + 0x60], esi
mov r13, qword [r13 + 0x28]
movzx eax, byte [r13]
cmp dil, 0x16
jne 0x14005a160
cmp al, 0x17
jne 0x14005a0ce
mov r14, qword [rbx + 0x58]
test r14, r14
je 0x14005a0c1
mov rsi, qword [r13 + 0x10]
test rsi, rsi
je 0x14005a0aa
mov eax, dword [rsi + 0x10]
test eax, eax
je 0x14005a0aa
xor ecx, ecx
mov edi, ecx
test eax, eax
jle 0x14005a0c1
mov ebx, ecx
nop word [rax + rax]
mov rdx, qword [rsi + 8]
mov rcx, r14
mov rdx, qword [rdx + rbx]
call fcn.140095a70
test al, al
jne 0x14005a992
inc edi
add rbx, 8
cmp edi, dword [rsi + 0x10]
jl 0x14005a080
mov rbx, qword [rsp + 0x58]
jmp 0x14005a0c1
mov rdx, qword [0x140124450]
mov rcx, r14
call fcn.140095a70
test al, al
jne 0x14005a997
mov r13, qword [r13 + 0x28]
cmp byte [r13], 0x17
je 0x14005a052
jmp 0x14005a130
mov r8, qword [rbx + 0x58]
test r8, r8
je 0x14005a135
cmp al, 0x18
je 0x14005a135
mov rdx, qword [0x140124450]
mov rcx, r8
call fcn.140095a70
test al, al
je 0x14005a130
mov rbx, qword [rbx + 0x58]
cmp dword [rbx + 0x10], 5
jne 0x14005a101
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14005a10f
call fcn.1400beb90
mov rbx, qword [rsp + 0x58]
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, qword [rbx + 0x58]
call fcn.1400b836c
mov qword [rbx + 0x58], 0
mov r15d, 1
mov rcx, qword [rsp + 0x50]
cmp qword [rbx + 0x58], 0
jne 0x14005a159
movzx eax, byte [r13]
cmp al, 9
jne 0x14005a18b
cmp r15d, 1
jne 0x14005a159
test rcx, rcx
jne 0x14005a159
mov r13, qword [r13 + 0x20]
jmp 0x14005a997
movzx eax, byte [r13]
jmp 0x14005a17d
cmp al, 0x17
jne 0x14005a17d
nop dword [rax]
nop dword [rax + rax]
mov r13, qword [r13 + 0x28]
movzx eax, byte [r13]
cmp al, 0x17
je 0x14005a170
cmp al, 9
jne 0x14005a18b
mov rax, qword [r13 + 0x28]
mov r13, rax
movzx eax, byte [rax]
cmp al, 0x18
jne 0x14005a23d
cmp r15d, 1
jne 0x14005a1a2
test rcx, rcx
je 0x14005a997
mov rcx, qword [rsp + 0x58]
lea r9, [rbp + 0x40]
mov rbx, qword [rbx + 0x58]
xor eax, eax
mov rsi, qword [0x140124258]
xor r8d, r8d
mov r14, qword [0x140124250]
mov qword [rcx + 0x58], rax
mov rcx, r13
lea edx, [rax + 3]
mov qword [0x140124258], rax
mov qword [0x140124250], rax
call fcn.1400594d0
mov edi, eax
test rsi, rsi
je 0x14005a218
mov rcx, qword [0x140124258]
test rcx, rcx
je 0x14005a20a
call fcn.1400beb90
cmp qword [0x140124250], 0x400000
jbe 0x14005a20a
dec dword [0x140122f88]
mov qword [0x140124258], rsi
mov qword [0x140124250], r14
cmp edi, 1
jne 0x14005aaab
cmp qword [rbp + 0x40], 0
jne 0x14005aaab
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0x58], rbx
mov rbx, rax
cmp qword [rbx + 0x58], 0
je 0x14005a253
test r12b, r12b
je 0x14005a253
test byte [rbx + 0x60], 2
je 0x14005ab85
cmp dword [rbp + 0x1c8], 3
je 0x14005a9af
cmp r15d, 1
jne 0x14005a9af
test rcx, rcx
je 0x14005a997
mov rax, qword [r13 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x14005aba0
mov r13, rcx
jmp 0x14005a997
mov rax, qword [0x140124258]
mov rbx, r12
mov qword [rbp - 0x80], rax
mov edi, 4
mov rax, qword [0x140124250]
mov qword [rbp - 0x30], r12
cmp byte [r13 + 1], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rbx
mov qword [0x140124258], r12
mov qword [0x140124250], r12
mov qword [rbp - 0x78], r12
mov dword [rsp + 0x68], r12d
mov dword [rbp - 0x70], edi
jne 0x14005a2e2
mov dword [rbp - 0x40], 0x49
lea r15d, [rdi - 3]
jmp 0x14005a5e9
lea rax, [rsp + 0x60]
xor edx, edx
lea r9, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x50]
mov rcx, r13
call fcn.140074120
mov r15d, eax
cmp eax, 1
jne 0x14005a52c
cmp byte [r13 + 1], 2
jne 0x14005a599
mov r9, qword [r13 + 8]
mov rdx, r12
mov qword [rbp + 8], r12
mov r8, r12
mov qword [rbp - 0x60], rdx
mov rax, qword [r9 + 0x40]
mov ecx, dword [rax + 0x10]
cmp ecx, 6
jge 0x14005a366
cmp ecx, edi
je 0x14005a366
cmp dword [rax + 0x28], 0x49
jne 0x14005a366
mov dword [rbp - 8], ecx
mov rdx, qword [rax]
mov qword [rbp - 0x18], rdx
mov rax, qword [rax + 8]
mov qword [rbp - 0x10], rax
cmp ecx, 5
jne 0x14005a44f
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_htonl]
jmp 0x14005a44f
mov eax, dword [r9 + 0x2c]
mov ecx, 0xff
cmp eax, ecx
cmovb eax, ecx
add eax, 1
mov ebx, eax
je 0x14005a3d6
lea rcx, [rax + rax]
call fcn.1400beba4
mov qword [rbp + 8], rax
mov r8, rax
test rax, rax
jne 0x14005a3c0
mov rax, qword [0x140124438]
lea rdx, [0x1400fd9b0]
mov qword [rsp + 0x28], rax
lea rcx, [0x1401245b0]
xor r9d, r9d
mov qword [rsp + 0x20], r12
mov qword [rbp - 0x60], r12
call fcn.14000f6f0
mov r15d, eax
jmp 0x14005a435
mov qword [rbp - 0x60], rbx
mov rdx, rbx
cmp rbx, 0x400000
jbe 0x14005a3d6
inc dword [0x140122f88]
sub rdx, rbx
mov qword [rbp + 0x48], r8
mov qword [rsp + 0x40], rdx
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x38], rax
lea r9, [rbp - 0x18]
lea rax, [rbp - 0x60]
mov qword [rbp + 0xc0], r12
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x68]
lea rax, [rbp + 8]
mov dword [rbp - 8], 0x49
mov qword [rsp + 0x28], rax
mov edx, 1
lea rax, [rbp + 0x48]
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.1400713e0
test rax, rax
jne 0x14005a441
mov r15d, dword [rbp - 0x68]
cmp r15d, 1
jne 0x14005a4d6
jmp 0x14005a44f
cmp dword [rbp - 8], 0x49
jne 0x14005a44f
mov dword [rbp - 8], r12d
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x18]
call fcn.140066b20
mov dword [rbp - 0x70], eax
mov edi, eax
cmp eax, 3
jl 0x14005a4d0
cmp byte [0x140124d3c], 0
lea rdx, [0x140103210]
lea rcx, [0x1401245b0]
je 0x14005a493
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov r8, rsi
mov qword [rsp + 0x20], r13
call fcn.14000f6f0
mov r15d, eax
jmp 0x14005a4d6
cmp byte [0x140124d3f], 0
je 0x14005a4b6
mov eax, dword [r13 + 4]
mov r8, rsi
movzx r9d, word [r13 + 2]
mov dword [rsp + 0x20], eax
call fcn.14000f5a0
mov r15d, r12d
jmp 0x14005a4d6
mov qword [rsp + 0x28], r12
mov r9, rsi
xor r8d, r8d
mov qword [rsp + 0x20], r13
call fcn.1400106f0
mov r15d, eax
jmp 0x14005a4d6
mov r15d, 1
cmp dword [rbp - 8], 5
jne 0x14005a4e6
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14005a4f4
call fcn.1400beb90
cmp r15d, 1
jne 0x14005a529
cmp edi, 4
je 0x14005a599
cmp dword [rbp - 0x40], 5
jne 0x14005a5c0
lea rdx, [rbp - 0x50]
lea rcx, [0x1400fbae8]
call fcn.140011210
mov r15d, eax
cmp eax, 1
je 0x14005a5c0
mov rbx, r12
cmp qword [rbp - 0x80], 0
je 0x14005a56e
mov rcx, qword [0x140124258]
test rcx, rcx
je 0x14005a557
call fcn.1400beb90
cmp qword [0x140124250], 0x400000
jbe 0x14005a557
dec dword [0x140122f88]
mov rax, qword [rbp - 0x80]
mov qword [0x140124258], rax
mov rax, qword [rsp + 0x60]
mov qword [0x140124250], rax
test rbx, rbx
je 0x14005a7e1
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 2
mov rcx, rbx
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
mov r15d, eax
jmp 0x14005a7e9
mov eax, dword [rbp - 0x40]
test eax, eax
je 0x14005a5a7
cmp eax, 5
je 0x14005a5c0
jmp 0x14005a5bc
mov rcx, qword [rbp - 0x50]
mov r9d, 1
mov edx, r9d
xor r8d, r8d
call fcn.14009a980
mov dword [rsp + 0x68], eax
cmp dword [rbp - 0x40], 0
mov rbx, r12
jne 0x14005a5e9
mov rcx, qword [rbp - 0x80]
cmp qword [rbp - 0x50], rcx
jne 0x14005a5e9
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x60], r12
mov rax, qword [r13 + 0x20]
mov rsi, qword [rax + 0x20]
test rsi, rsi
je 0x14005a722
nop word [rax + rax]
cmp byte [rsi], 0x1b
jne 0x14005a71b
movzx r14d, byte [rsi + 1]
test r14d, r14d
jne 0x14005a621
mov rbx, qword [rsi + 0x20]
mov qword [rsp + 0x70], rbx
jmp 0x14005a70e
mov edi, r12d
test r14d, r14d
je 0x14005a70e
nop dword [rax]
lea rax, [rsp + 0x60]
mov edx, edi
lea r9, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x50]
mov rcx, rsi
call fcn.140074120
mov r15d, eax
cmp eax, 1
jne 0x14005a7a4
cmp dword [rbp - 0x40], 0x49
je 0x14005a695
mov eax, dword [rbp - 0x70]
lea r9, [rbp + 0x50]
mov r8d, dword [rsp + 0x68]
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x20], eax
call fcn.14005ae40
mov r15d, eax
add eax, 0xfffffffd
cmp eax, 1
ja 0x14005a7a4
cmp r15d, 3
mov r15d, 1
sete bl
jmp 0x14005a6e6
mov edx, dword [rbp + 0x60]
mov ecx, edx
test edx, edx
je 0x14005a770
sub ecx, 1
je 0x14005a760
sub ecx, 1
je 0x14005a6cb
cmp ecx, 2
je 0x14005a6c0
cmp edx, 5
mov eax, r12d
sete al
jmp 0x14005a6e1
mov rcx, qword [rbp + 0x50]
call fcn.140066330
jmp 0x14005a6e1
movsd xmm0, qword [rbp + 0x50]
ucomisd xmm0, xmm6
jp 0x14005a6dc
je 0x14005a796
mov eax, 1
test eax, eax
setne bl
cmp dword [rbp + 0x60], 5
jne 0x14005a6f6
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
test bl, bl
jne 0x14005a79e
inc edi
cmp edi, r14d
jl 0x14005a630
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsi + 0x28]
test rsi, rsi
jne 0x14005a600
mov r14, qword [rbp + 0x1d0]
mov rdi, qword [rbp - 0x78]
test rdi, rdi
je 0x14005a7ba
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14005a74e
call fcn.1400beb90
cmp qword [rsp + 0x60], 0x400000
jbe 0x14005a74e
dec dword [0x140122f88]
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x60], rdi
jmp 0x14005a52c
cmp qword [rbp + 0x50], 0
mov eax, r12d
setne al
jmp 0x14005a6e1
mov rcx, qword [rbp + 0x50]
call fcn.140066290
test eax, eax
jne 0x14005a6dc
cmp qword [rbp + 0x58], 0
je 0x14005a796
mov rax, qword [rbp + 0x50]
cmp word [rax], 0
je 0x14005a6dc
mov eax, r12d
jmp 0x14005a6e1
mov rbx, qword [rsi + 0x20]
jmp 0x14005a7a7
mov rbx, r12
mov qword [rsp + 0x70], rbx
cmp edi, r14d
jl 0x14005a71b
jmp 0x14005a70e
cmp dword [rbp - 0x40], 5
jne 0x14005a7ca
mov rcx, qword [rbp - 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14005a52c
call fcn.1400beb90
jmp 0x14005a52c
mov rcx, r12
mov qword [rsp + 0x50], rcx
cmp r15d, 1
jne 0x14005a9af
cmp dword [rbp + 0x1c8], 3
je 0x14005a9af
test rcx, rcx
je 0x14005a820
mov rax, qword [r13 + 0x30]
cmp qword [rcx + 0x30], rax
jne 0x14005aba0
mov rbx, qword [rsp + 0x58]
mov r13, rcx
jmp case.default.0x14005969e
mov r13, qword [r13 + 0x28]
mov rbx, qword [rsp + 0x58]
jmp case.default.0x14005969e
cmp qword [r13 + 0x10], 0
je 0x14005a83e
mov r13, qword [r13 + 0x28]
jmp case.default.0x14005969e
mov rcx, qword [r13 + 0x20]
lea r9, [rsp + 0x50]
mov r8, r14
mov edx, 2
call fcn.1400594d0
mov rcx, qword [rsp + 0x50]
lea rdi, [0x140000000]
mov r15d, eax
cmp rcx, r13
je 0x140059547
cmp dword [rbp + 0x1c8], 3
je 0x14005abad
cmp eax, 1
jne 0x14005abad
test rcx, rcx
je 0x14005a835
mov rax, qword [rcx + 0x30]
cmp qword [r13 + 0x30], rax
jmp 0x1400597fe
mov rsi, qword [r13 + 8]
cmp byte [rsi + 0x29], 0
jne 0x14005a8f4
mov rbx, qword [rsi + 0x40]
cmp dword [rbx + 0x10], 4
jne 0x14005a8e1
mov rdi, qword [rbx]
cmp byte [rdi + 0x23], 0
jne 0x14005a8bc
mov rcx, qword [rdi + 0x10]
call fcn.140005760
jmp 0x14005a8bf
mov rax, rdi
test byte [rax + 0x21], 2
je 0x14005a8e1
cmp dword [rbx + 8], 0
jne 0x14005a8e1
mov rdx, rdi
lea rcx, [0x1401245b0]
call fcn.140012210
mov rbx, qword [rsp + 0x58]
jmp 0x14005a8fe
mov rcx, qword [rsi + 0x10]
mov rdx, rbx
call fcn.14009de60
mov rbx, qword [rsp + 0x58]
jmp 0x14005a8fe
xor edx, edx
mov rcx, r13
call fcn.1400754b0
mov r15d, eax
cmp r15d, 1
jne 0x14005a9b7
cmp dword [rbp + 0x1c8], 3
je 0x14005a9b7
mov r13, qword [r13 + 0x20]
jmp case.default.0x14005969e
cmp r15d, 1
jne 0x14005a9b7
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x14005a93f
cmp qword [rcx + 0x40], r13
jne 0x14005a93f
mov rax, qword [r13 + 0x20]
mov qword [rcx + 0x40], rax
mov rax, qword [r13 + 0x18]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x14005a967
nop dword [rax]
cmp qword [rcx + 0x28], r13
jne 0x14005a967
mov rax, qword [r13 + 0x20]
mov qword [rcx + 0x28], rax
mov rcx, qword [rcx + 0x30]
test rcx, rcx
jne 0x14005a950
cmp dword [rbp + 0x1c8], 3
mov rcx, qword [r13 + 0x18]
mov rax, qword [r13 + 0x20]
mov qword [rcx + 0x20], rax
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x18]
mov qword [rcx + 0x18], rax
je case.0x14005969e.4
mov r13, qword [r13 + 0x20]
jmp case.default.0x14005969e
mov rbx, qword [rsp + 0x58]
xor r12d, r12d
test r13, r13
je case.0x14005969e.4
mov r14, qword [rbp + 0x1d0]
jmp 0x140059536
mov rdx, qword [rsp + 0x78]
mov qword [rdx], rcx
mov eax, r15d
jmp 0x14005981e
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x78]
mov qword [rdx], rax
jmp case.0x14005969e.4
mov rax, qword [0x140124260]
lea rdx, [0x1400ffed8]
test rax, rax
lea rcx, [0x1401245b0]
cmovne rsi, rax
cmp byte [0x140124d3c], 0
je 0x14005aa85
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov r8, rsi
mov qword [rsp + 0x20], r13
call fcn.14000f6f0
mov r12d, eax
jmp 0x14005981e
mov qword [rsp + 0x28], r12
mov r9, rsi
xor r8d, r8d
mov qword [rsp + 0x20], r13
call fcn.1400106f0
mov r12d, eax
mov eax, r12d
jmp 0x14005981e
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x78]
mov qword [rdx], rax
mov eax, r15d
jmp 0x14005981e
test r11, r11
lea rdx, [0x140103210]
lea rcx, [0x1401245b0]
cmovne rsi, r11
cmp byte [0x140124d3c], 0
je 0x14005aa85
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov r8, rsi
mov qword [rsp + 0x20], r13
call fcn.14000f6f0
mov r12d, eax
jmp 0x14005981e
cmp byte [0x140124d3f], 0
je 0x14005aa15
mov eax, dword [r13 + 4]
mov r8, rsi
movzx r9d, word [r13 + 2]
mov dword [rsp + 0x20], eax
call fcn.14000f5a0
mov eax, r12d
jmp 0x14005981e
test rbx, rbx
je 0x14005aada
cmp dword [rbx + 0x10], 5
jne 0x14005aabf
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14005aacd
call fcn.1400beb90
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, rbx
call fcn.1400b836c
test edi, 0xfffffff7
je 0x14005ab7e
cmp byte [0x140124d3c], 0
lea rdx, [0x140104120]
mov rcx, qword [0x140124c60]
je 0x14005ab26
mov qword [rsp + 0x28], 0
lea r8, [0x1400f9b70]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea rcx, [0x1401245b0]
call fcn.14000f6f0
jmp 0x14005981e
cmp byte [0x140124d3f], 0
je 0x14005ab55
mov eax, dword [rcx + 4]
lea r8, [0x1400f9b70]
movzx r9d, word [rcx + 2]
lea rcx, [0x1401245b0]
mov dword [rsp + 0x20], eax
call fcn.14000f5a0
xor eax, eax
jmp 0x14005981e
mov qword [rsp + 0x28], 0
lea r9, [0x1400f9b70]
mov qword [rsp + 0x20], rcx
xor r8d, r8d
lea rcx, [0x1401245b0]
call fcn.1400106f0
jmp 0x14005981e
mov eax, edi
jmp 0x14005981e
mov rdx, qword [0x140124c60]
lea rcx, [0x1401245b0]
xor r8d, r8d
call fcn.140011b20
jmp 0x14005981e
mov rdx, qword [rsp + 0x78]
mov qword [rdx], rcx
jmp case.0x14005969e.4
mov rdx, qword [rsp + 0x78]
mov qword [rdx], rcx
jmp 0x14005981e
cmp dword [rbp + 0x1c8], 1
je case.0x14005969e.4
mov eax, 7
jmp 0x14005981e
mov rax, qword [r13 + 0x28]
test rax, rax
jne 0x14005a9c2
mov eax, 5
jmp 0x14005981e
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x14005abf9
mov rdx, qword [rsp + 0x78]
mov qword [rdx], rax
mov eax, 6
jmp 0x14005981e
cmp byte [r13 + 1], 0
jne 0x14005acb4
test byte [rbx + 0x60], 0x10
jne 0x14005aa2d
mov ecx, reloc.WSOCK32.dll_getservbyport
call fcn.1400b8374
xor r9d, r9d
mov qword [rbp + 0x1c0], rax
mov r8, rsi
lea rdx, [0x1400ffd60]
mov rcx, r13
mov rbx, rax
call fcn.14000ecc0
mov qword [rbx], rax
test rax, rax
je 0x14005ac71
mov rdx, qword [0x14011c188]
xor r9d, r9d
mov r8, rbx
mov dword [rbx + 0x10], 5
mov rcx, r13
mov qword [rbx + 0x20], r12
call fcn.14000f1d0
mov r12d, eax
jmp 0x14005981e
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, rbx
call fcn.1400b836c
mov rax, qword [0x14011c188]
cmp qword [rax + 0x58], 0
jne 0x14005aa2d
movaps xmm3, xmm6
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [0x1400fd3d0]
mov edx, 0x10000
call fcn.1400a1a40
mov eax, r12d
jmp 0x14005981e
mov ecx, reloc.WSOCK32.dll_getservbyport
call fcn.1400b8374
mov qword [rbp + 0x1c0], rax
mov rdx, rax
mov rcx, r13
mov rdi, rax
mov dword [rax + 0x10], r12d
mov qword [rax + 0x20], r12
mov qword [rax + 8], 0xffffffffffffffff
call fcn.1400754b0
mov ebx, eax
cmp eax, 1
je 0x14005acfe
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, rdi
call fcn.1400b836c
mov eax, ebx
jmp 0x14005981e
cmp dword [rdi + 0x10], 0
jne 0x14005ad91
cmp qword [rdi + 0x20], 0
jne 0x14005ad91
mov rbx, qword [rdi + 8]
mov rsi, qword [rdi]
cmp rbx, 0xffffffffffffffff
jne 0x14005ad2a
inc rbx
cmp word [rsi + rbx*2], 0
jne 0x14005ad20
lea r14, [rbx*2 + 2]
mov rcx, r14
call fcn.1400beba4
mov qword [rdi + 0x20], rax
test rax, rax
je 0x14005ad61
mov r8, r14
mov dword [rdi + 0x10], r12d
mov rdx, rsi
mov qword [rdi + 8], rbx
mov rcx, rax
mov qword [rdi], rax
call fcn.1400ba140
test rax, rax
jne 0x14005ad91
mov edx, reloc.WSOCK32.dll_getservbyport
mov rcx, rdi
call fcn.1400b836c
movaps xmm3, xmm6
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [0x1400fd3d0]
mov edx, 0x10000
call fcn.1400a1a40
xor eax, eax
jmp 0x14005981e
mov rdx, qword [rsp + 0x58]
xor r9d, r9d
mov r8, rdi
mov rcx, r13
call fcn.14000f1d0
xor eax, eax
jmp 0x14005981e
mov eax, 8
jmp 0x14005981e