Function at 0x14004c470
Capabilities:
Contain obfuscated stackstrings
Get system information on windows
Make suspicious ntquerysysteminformation call
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14021a800]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov byte [rsp + 0x20], r8b
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x48], rcx
xor r14d, r14d
mov esi, r14d
mov qword [rbp - 0x78], r14
mov dword [rbp - 0x10], r14d
lea r9, [rbp - 0x10]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0xb]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14004c52a
nop word [rax + rax]
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x10]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
lea r9, [rbp - 0x10]
mov r8d, dword [rbp - 0x10]
mov rdx, rax
mov ecx, listen
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14004c4e0
mov qword [rbp - 0x78], rsi
test eax, eax
js 0x14004e77e
mov eax, r14d
mov dword [rsp + 0x30], eax
cmp dword [rsi], r14d
jbe 0x14004e77e
movzx edi, byte [rsp + 0x20]
movzx ebx, byte [rsp + 0x20]
movzx r12d, byte [rsp + 0x20]
movzx r13d, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x20]
mov qword [rsp + 0x28], r8
nop dword [rax]
nop word [rax + rax]
imul rcx, rax, 0x128
lea r15, [rcx + rsi]
mov qword [rbp - 0x38], r15
movzx eax, word [r15 + 0x2e]
add rax, rcx
add rsi, rax
movzx edx, dil
lea rcx, [rbp + 0x18]
call fcn.140002620
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rsi + r8 + 0x30], 0
jne 0x14004c5a0
lea rdx, [rsi + 0x30]
lea rcx, [rbp + 0x18]
call fcn.140004030
nop
lea rcx, [rbp + 0x18]
call fcn.1400018f0
mov rdx, qword [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x14004e75f
lea rdx, [r15 + 0x30]
lea rcx, [rbp - 8]
call fcn.140003ea0
nop
mov dword [rsp + 0x60], 0x67656463
mov dword [rsp + 0x64], 0x54685c55
mov word [rsp + 0x68], 0x6957
mov byte [rsp + 0x6a], 2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x6b], xmm0
mov qword [rsp + 0x7b], rax
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
mov rsi, r14
cmp rsi, 0x23
jae 0x14004d27e
movzx r11d, byte [rsp + rsi + 0x60]
movzx r10d, r11b
cmp r8, rsi
ja 0x14004d275
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14004c66d
movabs r15, 0x9cb2bd6451209b82
lea rcx, [rsi + r15]
mov rax, rcx
and rax, r11
imul r12, rax, 0xfffffffffffffffe
add r12, rcx
add r12, r11
add r12b, 0x72
jmp 0x14004c6a4
je 0x14004d1f3
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004d18d
lea rax, [rcx + 1]
cmp r8, rax
je 0x14004d162
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004d134
movabs r15, 0x9cb2bd6451209b82
movzx r10d, r11b
nop dword [rax + rax]
cmp r9, rsi
ja 0x14004d26c
lea rax, [r9 + 4]
cmp r8, rax
jae 0x14004c6e8
movabs rdx, 0xdaa9893aa7acc1aa
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
jmp 0x14004c730
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004d0e2
inc rax
cmp r8, rax
je 0x14004d0b0
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004d081
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004d01f
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004cff9
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x14004ccb6
nop dword [rax]
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14004cc97
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14004cc74
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14004cc54
lea rcx, [r9 + 0x61]
cmp r8, rcx
je 0x14004cc35
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14004cc1b
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14004cbfc
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14004cbd8
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14004cbb9
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14004cb8c
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004c740
mov r8, rcx
lea r9, [rcx + 2]
lea rax, [r9 + 0x200]
cmp rcx, rax
jb 0x14004d24b
lea rax, [r9 + 0x40]
cmp rcx, rax
jb 0x14004d22a
lea rax, [r9 + 0x3e8]
cmp rcx, rax
jb 0x14004c94c
lea rcx, [r9 + 0x42]
cmp r8, rcx
jb 0x14004c923
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004c8fb
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14004cb40
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14004cafd
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14004cac0
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14004ca99
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14004c740
mov r8, rcx
lea r9, [rcx + 0x1000]
lea rax, [r9 + 0x10]
cmp rcx, rax
ja 0x14004ca71
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x14004ca57
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x14004ca34
lea rcx, [r9 + 8]
cmp r8, rcx
ja 0x14004ca15
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14004c9f6
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14004c9d7
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14004c9b2
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14004c98f
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14004c975
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14004c740
mov r8, rcx
lea r9, [rcx + 0x40]
jmp 0x14004c740
movabs rdx, 0x150cd5780cb46f96
add rdx, rsi
movzx eax, dl
and al, r11b
add al, al
movzx r12d, r11b
sub r12b, al
sub r12b, 0x1a
add r12b, dl
jmp 0x14004c730
movabs rdx, 0xdba75aaf6a733892
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, 1
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
jmp 0x14004c6b0
movabs rdx, 0xa241dfe6c832018e
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
jmp 0x14004c637
lea ecx, [rsi + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x30
jmp 0x14004d106
lea ecx, [rsi + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x14
inc r9
dec rsi
inc rsi
jmp 0x14004c623
lea edx, [rsi + 0x48]
movzx eax, dl
and al, r11b
mov ecx, 4
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
dec rsi
inc rsi
jmp 0x14004c623
lea edx, [rsi + 0x44]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1b4
lea edx, [rsi + 0x40]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1d7
lea edx, [rsi + 0x3c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1da
lea edx, [rsi + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
movzx r10d, sil
jmp 0x14004cfcf
lea ecx, [rsi + 0x34]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x6c
jmp 0x14004d043
lea ecx, [rsi + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x50
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
lea edx, [rsi - 0x5a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
mov byte [rsp + rsi + 0x60], r12b
inc rsi
jmp 0x14004c623
lea ecx, [rsi - 0x5e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x6e
cmp r9, 6
jb 0x14004cab3
movzx r10d, sil
lea ecx, [r10 - 0x34]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea r12d, [rcx*2 - 0x28]
jmp 0x14004d10a
lea ecx, [rsi - 0x62]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x52
cmp r8, 0x40
jae 0x14004cf90
lea rcx, [r9 + 3]
cmp r8, rcx
jbe 0x14004ce97
lea ecx, [rsi - 0x5c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x7c
jmp 0x14004cad5
lea ecx, [rsi - 0x66]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x36
lea rax, [r9 + r8]
cmp rax, 4
je 0x14004cfb3
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x14004cd94
lea edx, [rsi - 6]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004cb12
lea edx, [rsi - 4]
movzx eax, dl
and al, r11b
mov ecx, select
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
lea edx, [rsi - 8]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d043
movzx r10d, sil
lea edx, [r10 - 0xc]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_46
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004cfcf
lea edx, [rsi - 0x10]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1da
lea ecx, [rsi - 0x14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x74
jmp 0x14004d1d7
movzx r10d, sil
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x58
jmp 0x14004d1b8
lea ecx, [rsi - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x3c
dec rsi
inc rsi
jmp 0x14004c623
lea ecx, [rsi - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x20
inc r9
dec rsi
inc rsi
jmp 0x14004c623
movzx r10d, sil
lea ecx, [r10 - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 4
jmp 0x14004d10a
lea rax, [r9 + 8]
cmp r8, rax
jae 0x14004ccdf
lea rdx, [rsi + r15]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
jmp 0x14004cb55
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004cd10
lea ecx, [rsi + 0x54]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x4c
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
inc rax
cmp r8, rax
jne 0x14004cd37
lea edx, [rsi + 0x64]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1d7
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004cd64
movzx r10d, sil
lea edx, [r10 + 0x68]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1b8
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004cb55
lea ecx, [rsi + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x10
inc r9
dec rsi
inc rsi
jmp 0x14004c623
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004cdc1
movzx r10d, sil
lea edx, [r10 - 2]
movzx eax, dl
and al, r11b
mov ecx, 7
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d10a
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004cdea
lea ecx, [rsi + 6]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x2a
dec rsi
inc rsi
jmp 0x14004c623
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004ce12
movzx r10d, sil
lea ecx, [r10 + 0xa]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x46
jmp 0x14004d1b8
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004ce35
lea ecx, [rsi + 0x12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x7e
jmp 0x14004d1da
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004ce5d
lea edx, [rsi + 0x1a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d043
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14004cb12
lea edx, [rsi + 0x1e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004cecd
lea edx, [rsi - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
inc rax
cmp r8, rax
jne 0x14004cef4
lea edx, [rsi - 0x4c]
movzx eax, dl
and al, r11b
mov ecx, 0xa
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r11b
jmp 0x14004d1da
cmp r8, rcx
jne 0x14004cf13
lea ecx, [rsi - 0x48]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 8
jmp 0x14004d1d7
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004cf3b
movzx r10d, sil
lea ecx, [r10 - 0x44]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x24
jmp 0x14004d1b8
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004cf64
lea ecx, [rsi - 0x40]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x40
dec rsi
inc rsi
jmp 0x14004c623
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14004cad5
movzx r10d, sil
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 0x78
jmp 0x14004d10a
movzx r10d, sil
lea edx, [r10 - 0x30]
movzx eax, dl
and al, r11b
movzx ecx, r11b
sub cl, al
add cl, 0x28
lea r12d, [rcx + rcx]
add r12b, dl
jmp 0x14004d1b8
movzx r10d, sil
lea edx, [r10 - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r10b, 0x56
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x5a
add r10b, r11b
movzx eax, r10b
mov byte [rsp + rsi + 0x60], al
inc r9
add rax, r9
sub rsi, rax
jmp 0x14004d043
movabs rdx, 0xdf3ada485bf7b0ce
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
jmp 0x14004d214
movabs rdx, 0xa5d55f7fb9b679ca
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, 0x3d
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
lea edx, [rsi - 0x28]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rsp + rsi + 0x60], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
movabs rdx, 0x86d9f9948e7066b6
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, 3
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
dec rsi
inc rsi
jmp 0x14004c623
movabs rdx, 0x4d747ecbec2f2fb2
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
inc r9
dec rsi
inc rsi
jmp 0x14004c623
movabs rdx, 0x140f040349edf8ae
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, Ordinal_33
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r11b
add r12b, dl
movzx r10d, sil
add r10b, 0x4e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x22
add r10b, r11b
mov byte [rsp + rsi + 0x60], r10b
inc r9
dec rsi
inc rsi
jmp 0x14004c623
movabs rcx, 0x67de93a9632a53a2
add rcx, rsi
movzx eax, cl
and al, r11b
add al, al
sub r10b, al
lea r12d, [rcx + r10]
sub r12b, 0x6e
inc r9
dec rsi
inc rsi
jmp 0x14004c623
movabs rcx, 0x2e7918e0c0e91c9e
add rcx, rsi
movzx eax, cl
and al, r11b
add al, al
sub r10b, al
lea r12d, [rcx + r10]
sub r12b, 0x52
dec rsi
inc rsi
jmp 0x14004c623
movabs rdx, 0xf5139e181ea7e59a
add rdx, rsi
movzx eax, dl
and al, r11b
add al, al
movzx r12d, r10b
sub r12b, al
sub r12b, 0x36
add r12b, dl
movzx r11d, r10b
movzx r10d, sil
add r10b, 0x52
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x3e
add r10b, r11b
add r10b, r12b
mov byte [rsp + rsi + 0x60], r10b
add r8, r9
movzx eax, r12b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x14004c623
movabs rdx, 0xd618382cf361d286
add rdx, rsi
movzx eax, dl
and al, r11b
mov ecx, Ordinal_46
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r10b
add r12b, dl
movzx eax, byte [rsp + rsi + 0x60]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004c623
sub sil, 0x76
movzx eax, sil
and al, r11b
mov ecx, Ordinal_33
sub cl, al
lea r12d, [rcx + rcx]
add r12b, sil
add r12b, r11b
jmp 0x14004c620
sub sil, 0x7a
movzx eax, sil
and al, r11b
mov ecx, Ordinal_46
sub cl, al
lea r12d, [rcx + rcx]
add r12b, sil
add r12b, r11b
jmp 0x14004c610
lea rcx, [rbp + 0x1687ab8]
jmp 0x14004d283
lea rcx, [rbp + 0x89163a]
jmp 0x14004d283
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
movzx edx, bl
lea rcx, [rbp - 0x30]
call fcn.140002620
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x14004d2a0
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.140004030
nop
mov word [rbp - 0x70], 0xcd30
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x6e], xmm0
movups xmmword [rbp - 0x5e], xmm0
mov byte [rbp - 0x4e], al
nop dword [rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
cmp r14, 0x23
jae 0x14004ddea
movzx r11d, byte [rbp + r14 - 0x70]
mov esi, r11d
cmp r8, r14
ja 0x14004dde1
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004d328
movabs rcx, 0x6258fe54a743d69e
add rcx, r14
mov rax, rcx
and rax, rsi
imul r13, rax, 0xfffffffffffffffe
add r13, rcx
add r13, rsi
sub r13b, 0x52
jmp 0x14004d36e
je 0x14004dd5a
inc rax
cmp r8, rax
je 0x14004dccb
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004dc90
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004dc4b
lea rax, [r9 + 7]
cmp r8, rax
je 0x14004dc25
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004dc00
movzx r10d, r14b
cmp r9, r14
ja 0x14004ddd8
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14004d3a1
lea edx, [r10 - 0xa]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004d3e0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004dbb9
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004db92
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004db71
lea rax, [r9 + 7]
cmp r8, rax
je 0x14004db52
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, r14
jbe 0x14004d86a
nop dword [rax]
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14004d84e
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004d824
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14004d7fd
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14004d7e1
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004d7c4
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14004d7a5
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14004d784
lea rax, [r9 + 9]
cmp r8, rax
je 0x14004d758
lea r8, [r9 + 0x200]
lea r9, [r8 + 0x200]
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14004ddb4
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14004dd90
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004d589
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14004d569
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14004d549
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14004d70d
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14004d6c9
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14004d6a4
lea r8, [r9 + 0x42]
lea r9, [r8 + 0x42]
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14004d674
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14004d654
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14004d633
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14004d613
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004d5ec
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14004d5c6
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14004d5a9
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x20]
jmp 0x14004d3f0
lea edx, [r10 - 0x36]
movzx eax, r11b
and al, dl
mov ecx, 0x3d
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004d3e0
lea edx, [r10 - 0x72]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004d372
add r10b, 0x52
movzx eax, r11b
and al, r10b
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x3e
add r13b, r10b
jmp 0x14004d2f3
lea edx, [r10 - 0x50]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
jmp 0x14004dbd0
add r10b, 0x74
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x2c
inc r9
dec r14
inc r14
jmp 0x14004d2e0
add r10b, 0x38
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
dec r14
inc r14
jmp 0x14004d2e0
sub r10b, 0x40
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x40
add r8, r9
jmp 0x14004dcb2
sub r10b, 0x7c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x14004dcb2
lea edx, [r10 + 0x48]
movzx eax, r11b
and al, dl
mov ecx, 4
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004dcf0
sub r10b, 0x30
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
movzx eax, byte [rbp + r14 - 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x14004d2e0
sub r10b, 0x46
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x16
mov byte [rbp + r14 - 0x70], r13b
inc r14
jmp 0x14004d2e0
lea edx, [r10 + 0x7e]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x72
add r13b, dl
cmp r9, 0x3e8
jb 0x14004d6bc
lea edx, [r10 - 0xc]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea r13d, [rcx*2 - 0x58]
jmp 0x14004dbd3
lea edx, [r10 + 0x42]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
cmp r8, 0x61
jae 0x14004db13
lea rax, [r9 + 5]
cmp r8, rax
jbe 0x14004da60
lea edx, [r10 - 0x64]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x44
jmp 0x14004d6e0
sub r10b, 0x3c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x5c
movzx eax, byte [rbp + r14 - 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x14004d2e0
sub r10b, 0x78
movzx eax, r11b
and al, r10b
mov ecx, 0x24
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x14004dd19
lea edx, [r10 + 0x4c]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x14
add r13b, dl
jmp 0x14004dcf0
add r10b, 0x10
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x70
jmp 0x14004dcb2
lea edx, [r10 - 0x68]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x28
jmp 0x14004dc66
add r10b, 0x5c
movzx eax, r11b
and al, r10b
mov ecx, 0x3e
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
dec r14
inc r14
jmp 0x14004d2e0
add r10b, 0x20
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
inc r9
dec r14
inc r14
jmp 0x14004d2e0
lea edx, [r10 - 0x1c]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x3c
jmp 0x14004dbd0
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x14004d8bc
lea edx, [r10 - 0x62]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x52
add r13b, dl
lea rax, [r9 + r8]
cmp rax, 0x5a
je 0x14004db35
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x14004d9be
lea edx, [r10 - 0x5a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_60
jmp 0x14004d71c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004d8f1
sub r10b, 0x14
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x74
movzx eax, byte [rbp + r14 - 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x14004d2e0
inc rax
cmp r8, rax
jne 0x14004d919
lea edx, [r10 + 0x64]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_35
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004dcf0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004d942
sub r10b, 0x24
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 4
add r8, r9
jmp 0x14004dcb2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004d968
lea edx, [r10 + 0x18]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
jmp 0x14004dc66
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004d994
add r10b, 0x54
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x4c
dec r14
inc r14
jmp 0x14004d2e0
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004d88d
lea edx, [r10 - 0x34]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
jmp 0x14004dbd0
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004d9e3
lea edx, [r10 - 0x1e]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x2e
jmp 0x14004dbd0
inc rax
cmp r8, rax
jne 0x14004da0e
add r10b, 0x5a
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x76
dec r14
inc r14
jmp 0x14004d2e0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004da34
add r10b, 0xe
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x62
jmp 0x14004dcb2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004d728
lea edx, [r10 + 0x4a]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 6
add r13b, dl
jmp 0x14004dcf0
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004da99
sub r10b, 0x28
movzx eax, r11b
and al, r10b
mov ecx, listen
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
movzx eax, byte [rbp + r14 - 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x14004d2e0
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004dac1
lea edx, [r10 + 0x50]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x30
add r13b, dl
jmp 0x14004dcf0
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004daea
sub r10b, 0x38
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x78
add r8, r9
jmp 0x14004dcb2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004d6e3
lea edx, [r10 - 0x48]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 8
jmp 0x14004dbd0
lea edx, [r10 + 0x30]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x50
add r13b, dl
add r13b, r11b
jmp 0x14004dc69
lea edx, [r10 + 0x6c]
movzx eax, r11b
and al, dl
mov ecx, 6
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
jmp 0x14004dcf0
lea edx, [r10 - 0x66]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x36
add r13b, dl
jmp 0x14004dcf0
add r10b, 0x5e
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x14004dcb2
sub r10b, 0x56
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
dec r14
inc r14
jmp 0x14004d2e0
lea edx, [r10 + 0x32]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x5e
add r13b, dl
sub r10b, 0x6e
movzx eax, r11b
and al, r10b
mov ecx, 1
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
mov byte [rbp + r14 - 0x70], cl
inc r9
dec r14
inc r14
jmp 0x14004d2e0
lea ecx, [r14 + 0x7e]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea r13d, [rcx + r11]
sub r13b, 0x72
inc r9
dec r14
inc r14
jmp 0x14004d2e0
lea edx, [r14 + 0x42]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
dec r14
inc r14
jmp 0x14004d2e0
movzx r10d, r14b
lea edx, [r10 + 6]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x2a
add r13b, dl
sub r10b, 0x32
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
add cl, r13b
mov byte [rbp + r14 - 0x70], cl
add r8, r9
jmp 0x14004dcb2
movabs rcx, 0x7520f0f9e1628b8e
add rcx, r14
and sil, cl
mov eax, reloc.WS2_32.dll_ntohs
sub al, sil
lea r13d, [rax + rax]
add r13b, r11b
add r13b, cl
movzx eax, r13b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r14, rcx
inc r14
jmp 0x14004d2e0
movabs rcx, 0xb06ef45092dade52
add rcx, r14
and sil, cl
add sil, sil
movzx r13d, r11b
sub r13b, sil
sub r13b, 0x3e
add r13b, cl
movzx r10d, r14b
add r10b, 0xa
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x46
add r10b, r11b
movzx eax, r10b
mov byte [rbp + r14 - 0x70], al
inc r9
add rax, r9
sub r14, rax
lea edx, [r14 - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + r14 - 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add r14, rax
movzx eax, byte [rbp + r14 - 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x14004d2e0
movabs rcx, 0x270afafdf5cb83da
add rcx, r14
and sil, cl
mov eax, 5
sub al, sil
lea r13d, [rax + rax]
add r13b, r11b
add r13b, cl
movzx eax, byte [rbp + r14 - 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x14004d2e0
add r10b, 0x16
movzx eax, r11b
and al, r10b
mov ecx, 0x33
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
xor r14d, r14d
jmp 0x14004d2e0
sub r10b, 0x26
movzx eax, r11b
and al, r10b
mov ecx, 5
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
xor r14d, r14d
jmp 0x14004d2d0
lea rdx, [rbp + 0x15431b8]
jmp 0x14004ddee
lea rdx, [rbp + 0x980856]
jmp 0x14004ddee
lea rdx, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14004ddf5
lea rcx, [rbp - 0x30]
call fcn.140002d30
mov r15, rax
mov dword [rsp + 0x38], 0x203b425c
mov dword [rsp + 0x3c], 0x452b5020
mov dword [rsp + 0x40], 0x473e3637
mov byte [rsp + 0x44], 0xac
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x45], xmm0
mov dword [rsp + 0x55], eax
mov word [rsp + 0x59], ax
nop dword [rax + rax]
mov rax, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor r14d, r14d
cmp r14, 0x23
jae 0x14004e682
movzx esi, byte [rsp + r14 + 0x38]
mov r8d, esi
mov r10, qword [rsp + 0x28]
nop dword [rax + rax]
cmp rax, r14
ja 0x14004e679
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x14004deaa
movabs rdx, 0xa47fb6d5bef14be8
add rdx, r14
mov rcx, rdx
and rcx, r8
imul r10, rcx, 0xfffffffffffffffe
add r10, rdx
add r10, r8
sub r10b, 0x58
mov qword [rsp + 0x28], r10
jmp 0x14004def1
je 0x14004e5ec
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004e55b
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x14004e51f
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004e500
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004e4da
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x14004e48d
cmp r9, r14
ja 0x14004e66b
lea rcx, [r9 + 0x42]
cmp rax, rcx
jae 0x14004df21
lea r10d, [r14 + 8]
movzx ecx, r10b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x38
add r10b, sil
mov qword [rsp + 0x28], r10
jmp 0x14004df55
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004e47e
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004e470
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004e455
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004e43a
nop word [rax + rax]
lea rcx, [rax + r9]
cmp rcx, r14
jbe 0x14004e14b
nop dword [rax]
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004e128
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14004e0fc
lea rdx, [r9 + 0x61]
cmp rax, rdx
je 0x14004e0d5
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x14004e1c1
mov rax, rdx
lea r9, [rdx + 0x64]
lea rcx, [r9 + 0x3e8]
cmp rdx, rcx
jb 0x14004e649
lea rcx, [r9 + 0x64]
cmp rdx, rcx
jb 0x14004e623
lea rcx, [r9 + 0x61]
cmp rdx, rcx
jb 0x14004e01f
lea rcx, [r9 + 0x28]
cmp rdx, rcx
jb 0x14004e0b9
mov rax, rcx
lea r9, [rcx + 0x64]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x14004e09e
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x14004e07a
lea rdx, [r9 + 0x28]
cmp rax, rdx
ja 0x14004e05b
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x14004e03f
mov rax, rdx
lea r9, [rdx + 6]
jmp 0x14004df70
lea edx, [r14 + 0x58]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x68
mov qword [rsp + 0x28], r10
jmp 0x14004de70
lea edx, [r14 + 0x30]
movzx ecx, sil
and cl, dl
add cl, cl
sub sil, cl
lea r8d, [rdx + rsi]
sub r8b, 0x50
jmp 0x14004e53d
lea r8d, [r14 + 0x60]
movzx ecx, sil
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
add dl, dl
add dl, sil
add r8b, dl
jmp 0x14004e579
lea r8d, [r14 - 0x70]
movzx ecx, sil
and cl, r8b
mov edx, 8
sub dl, cl
add dl, dl
add dl, sil
add r8b, dl
mov qword [rsp + 0x28], r8
jmp 0x14004e5ad
lea edx, [r14 - 0x40]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
sub r8b, 0x40
jmp 0x14004e60a
lea r8d, [r14 - 0x38]
movzx ecx, r8b
and cl, sil
add cl, cl
sub r8b, cl
sub r8b, 0x78
add r8b, sil
jmp 0x14004e1e5
lea edx, [r14 + 0x50]
movzx ecx, sil
and cl, dl
add cl, cl
sub sil, cl
lea r8d, [rdx + rsi]
sub r8b, 0x30
mov qword [rsp + 0x28], r8
dec r14
inc r14
jmp 0x14004de53
lea edx, [r14 + 0x80]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
add r8b, 0x80
inc r9
mov qword [rsp + 0x28], r8
dec r14
inc r14
jmp 0x14004de53
lea r8d, [r14 - 0x50]
movzx ecx, sil
and cl, r8b
mov edx, Ordinal_27
sub dl, cl
add dl, dl
add dl, sil
add r8b, dl
movzx r10d, r14b
jmp 0x14004e4ab
lea rcx, [r9 + 0x20]
cmp rax, rcx
jae 0x14004e16d
lea r8d, [r14 - 0x18]
movzx ecx, r8b
and cl, sil
add cl, cl
sub r8b, cl
sub r8b, 0x58
add r8b, sil
jmp 0x14004e1e5
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004e191
lea edx, [r14 + 0x10]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
sub r8b, 0x70
jmp 0x14004e60a
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004e1b8
lea edx, [r14 + 0x80]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
add r8b, 0x80
jmp 0x14004e53d
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004e1e0
lea r8d, [r14 + 0x20]
movzx ecx, r8b
and cl, sil
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
add dl, dl
add r8b, dl
add r8b, sil
jmp 0x14004e3fc
mov r8, qword [rsp + 0x28]
lea rcx, [r9 + rax]
cmp rcx, 5
je 0x14004e423
lea r11, [r9 + 9]
lea r10, [r9 + 1]
cmp rax, r11
jbe 0x14004e27c
lea r8d, [r14 + 0x48]
movzx ecx, sil
and cl, r8b
mov edx, 4
sub dl, cl
add dl, dl
add dl, sil
add r8b, dl
lea rdx, [r9 + 3]
cmp rax, 5
jae 0x14004e3e3
cmp rax, r11
jbe 0x14004e32e
lea r8d, [r14 + 0x50]
movzx ecx, sil
and cl, r8b
add cl, cl
movzx edx, sil
sub dl, cl
sub r8b, 0x30
add r8b, dl
cmp r9, 0x61
jb 0x14004e3d1
lea r8d, [r14 + 0x70]
movzx ecx, sil
and cl, r8b
add cl, cl
movzx edx, sil
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x20]
movzx r10d, r14b
jmp 0x14004e4ab
cmp rax, r10
jne 0x14004e293
lea r8d, [r14 + 0x18]
mov edx, Ordinal_46
movzx r10d, r14b
jmp 0x14004e49a
lea rcx, [r10 + 1]
cmp rax, rcx
jne 0x14004e2bb
lea r8d, [r14 - 0x78]
movzx ecx, r8b
and cl, sil
mov edx, 0x24
sub dl, cl
add dl, dl
add r8b, dl
add r8b, sil
jmp 0x14004e3fc
lea rdx, [r9 + 3]
cmp rax, rdx
jne 0x14004e2e2
lea edx, [r14 + 0x58]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
sub r8b, 0x68
add rax, r9
jmp 0x14004e53d
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004e302
lea edx, [r14 + 0x28]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
jmp 0x14004e539
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004e21e
lea r8d, [r14 - 8]
movzx ecx, r8b
and cl, sil
mov edx, Ordinal_30
sub dl, cl
add dl, dl
add r8b, dl
add r8b, sil
jmp 0x14004e579
cmp rax, r10
jne 0x14004e352
lea r8d, [r14 + 0x20]
movzx ecx, r8b
and cl, sil
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
add dl, dl
add r8b, dl
add r8b, sil
jmp 0x14004e60a
lea rcx, [r10 + 1]
cmp rax, rcx
jne 0x14004e37a
lea r8d, [r14 - 0x70]
movzx ecx, sil
and cl, r8b
mov edx, 8
sub dl, cl
add dl, dl
add dl, sil
add r8b, dl
jmp 0x14004e53d
cmp rax, rdx
jne 0x14004e3a1
lea r8d, [r14 + 0x60]
movzx ecx, sil
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
add dl, dl
add dl, sil
add r8b, dl
add rax, r9
jmp 0x14004e53d
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004e24b
movzx edx, r14b
and dl, sil
add dl, dl
movzx r8d, r14b
sub r8b, dl
add r8b, sil
mov qword [rsp + 0x28], r8
dec r14
inc r14
jmp 0x14004de53
mov byte [rsp + r14 + 0x38], r8b
mov qword [rsp + 0x28], r8
inc r14
jmp 0x14004de53
lea r8d, [r14 + 0x40]
movzx ecx, sil
and cl, r8b
movzx edx, sil
sub dl, cl
add dl, 0x20
add dl, dl
add r8b, dl
movzx edx, r14b
add dl, 0x28
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
sub dl, 0x18
add dl, sil
add dl, r8b
mov byte [rsp + r14 + 0x38], dl
add rax, r9
jmp 0x14004e53d
lea edx, [r14 + 0x10]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rdx - 0x70]
jmp 0x14004e579
lea edx, [r14 + 0x58]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
sub r8b, 0x68
jmp 0x14004e60a
lea edx, [r14 - 0x48]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
sub r8b, 8
jmp 0x14004e579
lea r8d, [r14 + 0x18]
mov edx, Ordinal_46
jmp 0x14004e509
lea r8d, [r14 - 0x28]
mov edx, listen
movzx r10d, r14b
jmp 0x14004e49a
movzx r10d, r14b
lea r8d, [r10 + 0x38]
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, r8b
and cl, sil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, sil
add r10b, 0x58
movzx ecx, r10b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x68
add r10b, sil
mov byte [rsp + r14 + 0x38], r10b
inc r9
mov qword [rsp + 0x28], r8
dec r14
inc r14
jmp 0x14004de53
lea edx, [r14 - 0x68]
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r8d, [rsi + rdx]
sub r8b, 0x28
mov qword [rsp + 0x28], r8
dec r14
inc r14
jmp 0x14004de53
lea r8d, [r14 - 8]
mov edx, Ordinal_30
movzx ecx, r8b
and cl, sil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, sil
add rax, r9
jmp 0x14004e53d
movabs rcx, 0xc87d6d83b67bab28
add rcx, r14
and r8b, cl
add r8b, r8b
sub cl, r8b
lea r8d, [rsi + rcx]
sub r8b, 0x18
mov qword [rsp + 0x28], r8
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r14, rdx
inc r14
jmp 0x14004de53
movabs rcx, 0x7f7dffd838991358
add rcx, r14
and r8b, cl
add r8b, r8b
sub cl, r8b
lea r8d, [rsi + rcx]
sub r8b, 0x68
mov qword [rsp + 0x28], r8
movzx r8d, r14b
sub r8b, 8
movzx ecx, r8b
and cl, sil
mov edx, Ordinal_30
sub dl, cl
add dl, dl
add dl, r8b
add dl, sil
movzx ecx, dl
mov byte [rsp + r14 + 0x38], cl
inc r9
add rcx, r9
sub r14, rcx
lea edx, [r14 - 0x20]
movzx ecx, sil
and cl, dl
add cl, cl
sub sil, cl
sub sil, 0x20
add sil, dl
mov byte [rsp + r14 + 0x38], sil
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r14, rcx
movzx ecx, byte [rsp + r14 + 0x38]
add rcx, r9
add r14, rcx
inc r14
jmp 0x14004de53
movabs rcx, 0xed7f24813cd3e3b8
add rcx, r14
and r8b, cl
add r8b, r8b
sub cl, r8b
lea r8d, [rsi + rcx]
sub r8b, 8
mov qword [rsp + 0x28], r8
movzx ecx, byte [rsp + r14 + 0x38]
add rcx, r9
add r14, rcx
inc r14
jmp 0x14004de53
sub r14b, 0x78
movzx ecx, r14b
and cl, sil
mov edx, 0x24
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r14b
add r8b, sil
mov qword [rsp + 0x28], r8
jmp 0x14004de50
sub r14b, 0x48
movzx eax, r14b
and al, sil
add al, al
sub r14b, al
lea r8d, [rsi + r14]
sub r8b, 8
mov qword [rsp + 0x28], r8
jmp 0x14004de40
lea rdx, [rbp + 0x15eff18]
mov qword [rsp + 0x28], r10
jmp 0x14004e687
lea rdx, [rbp + 0x504b00]
jmp 0x14004e687
lea rdx, [rsp + 0x38]
xor r8d, r8d
lea rcx, [rbp - 8]
call fcn.1400050a0
mov r9, r15
mov r8d, listen
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.140057f00
nop
lea rcx, [rbp - 0x30]
call fcn.140002490
lea rcx, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rcx, qword [rbp - 8]
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r11, rax
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x14004e7ec
movsxd rcx, dword [r11 + 0x3c]
cmp dword [rcx + r11], 0x4550
jne 0x14004e7ec
mov edx, dword [rcx + r11 + 0x88]
test edx, edx
je 0x14004e7ec
mov esi, dword [rdx + r11 + 0x1c]
lea r14, [r11 + rsi]
mov r9d, dword [rdx + r11 + 0x20]
add r9, r11
mov r15d, dword [rdx + r11 + 0x24]
add r15, r11
xor r10d, r10d
test esi, esi
je 0x14004e753
mov r8d, dword [r9]
add r8, r11
mov rax, qword [rbp - 0x40]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14004e743
inc rax
test ecx, ecx
jne 0x14004e730
test edx, edx
je 0x14004e7be
inc r10d
add r9, 4
cmp r10d, esi
jb 0x14004e720
lea rcx, [rbp - 8]
call fcn.140002490
xor r14d, r14d
lea rcx, [rbp + 0x18]
call fcn.140002490
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov rsi, qword [rbp - 0x78]
cmp eax, dword [rsi]
jb 0x14004c570
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1401830b0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov ebx, dword [r14 + rcx*4]
xor edx, edx
mov r8d, 0x8000
mov rcx, qword [rbp - 0x78]
cmp byte [rsp + 0x20], dl
jne 0x14004e7e4
mov rax, qword [rbp - 0x38]
add rbx, qword [rax + 0x18]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x14004e7ee
xor ebx, ebx
lea rcx, [rbp - 8]
call fcn.140002490
nop
lea rcx, [rbp + 0x18]
call fcn.140002490
mov rax, rbx
jmp 0x14004e791