Function at 0x1400022d0
Capabilities:
Check os version

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
sub rsp, 0x900
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x140013240]
xor rax, rsp
mov qword [rsp + 0x8f0], rax
mov rdi, rcx
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002344
mov r9d, 0x400
lea r8, [r11 - 0x428]
mov edx, 0xd7
call fcn.1400033a0
test eax, eax
je 0x140002344
lea r8, [rsp + 0x4f0]
mov edx, reloc.WS2_32.dll_inet_ntoa
mov rcx, qword [0x1400132a0]
call fcn.140003410
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x50], 0x9c
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov r9d, r12d
mov eax, 2
cmp dword [rsp + 0x54], 6
cmovae r9d, eax
lea rbp, [rdi + 0x20]
cmp qword [rbp], r12
jne 0x140002410
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], r12
lea r8, [0x14000f918]
xor edx, edx
lea rcx, [0x14000d779]
call sub.XOLEHLP.dll_DtcGetTransactionManagerExA
mov ebx, eax
test eax, eax
je 0x140002410
mov qword [rbp], r12
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002406
mov r9d, 0x400
lea r8, [rsp + 0x4f0]
mov edx, 0xd9
call fcn.1400033a0
test eax, eax
je 0x140002406
mov r8d, ebx
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rsp + 0xf0]
lea edx, [r12 + 0xa]
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, gethostbyaddr
jmp 0x14000281a
cmp qword [rdi + 0x40], r12
jne 0x14000249c
mov rcx, qword [rbp]
mov rax, qword [rcx]
lea r8, [rdi + 0x40]
lea rdx, [0x14000dd08]
call qword [rax]
mov esi, eax
test eax, eax
je 0x14000249c
mov qword [rdi + 0x40], r12
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002492
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xda
call fcn.1400033a0
test eax, eax
je 0x140002492
mov r8d, esi
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rsp + 0x4f0]
mov edx, 0xa
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, gethostbyaddr
jmp 0x14000281a
cmp qword [rdi + 0x48], r12
jne 0x1400025e6
mov ecx, 0x20
call sub.MSVCR80.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140002513
mov rsi, qword [rdi + 0x58]
lea rax, [0x14000daf0]
mov qword [rbx], rax
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x1400024e8
lea r8, str.CRMSink::CRMSink_____entering.
mov edx, reloc.WS2_32.dll_listen
call fcn.140003410
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov dword [rbx + 8], r12d
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002516
lea r8, str.CRMSink::CRMSink_____exiting.
mov edx, reloc.WS2_32.dll_listen
call fcn.140003410
jmp 0x140002516
mov rbx, r12
mov qword [rdi + 0x48], rbx
test rbx, rbx
jne 0x140002568
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x14000255e
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xdb
call fcn.1400033a0
test eax, eax
je 0x14000255e
lea r8, [rsp + 0xf0]
lea edx, [rbx + 0xa]
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, 5
jmp 0x14000281a
mov rax, qword [rbx]
lea r8, [rsp + 0x38]
lea rdx, [0x14000db50]
mov rcx, rbx
call qword [rax]
mov ebx, eax
test eax, eax
je 0x1400025e6
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x1400025dc
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xdc
call fcn.1400033a0
test eax, eax
je 0x1400025dc
mov r8d, ebx
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rsp + 0x4f0]
mov edx, 0xa
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, gethostbyaddr
jmp 0x14000281a
lea rsi, [rdi + 0x28]
cmp qword [rsi], 0
jne 0x14000278f
mov rcx, qword [rbp]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
lea rdx, [0x14000dcf8]
call qword [rax]
mov ebx, eax
test eax, eax
je 0x140002673
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002669
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xdd
call fcn.1400033a0
test eax, eax
je 0x140002669
mov r8d, ebx
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rsp + 0x4f0]
mov edx, 0xa
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, gethostbyaddr
jmp 0x14000281a
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea rdx, [rdi + 0x10]
mov qword [rsp + 0x28], rsi
lea r8, [0x14000dce8]
mov qword [rsp + 0x20], r8
mov r9, qword [rsp + 0x38]
lea r8, str.Oracle
call qword [rax + 0x20]
mov ebx, eax
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x14000278f
mov qword [rsi], r12
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002711
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xde
call fcn.1400033a0
test eax, eax
je 0x140002711
mov r8d, ebx
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rsp + 0x4f0]
mov edx, 0xa
mov rcx, qword [0x1400132a0]
call fcn.140003410
cmp ebx, 0x8004d102
jg 0x140002761
cmp ebx, 0x8004d102
je 0x140002757
cmp ebx, 0x8004d00e
je 0x14000274d
cmp ebx, 0x8004d019
je 0x140002743
cmp ebx, 0x8004d101
jne 0x140002771
mov ebx, getservbyname
jmp 0x14000281a
mov ebx, reloc.WS2_32.dll_gethostbyname
jmp 0x14000281a
mov ebx, 0x23
jmp 0x14000281a
mov ebx, reloc.WS2_32.dll_gethostbyaddr
jmp 0x14000281a
cmp ebx, 0x8007000e
je 0x140002785
cmp ebx, 0x80070057
je 0x14000277b
mov ebx, gethostbyaddr
jmp 0x14000281a
mov ebx, 0xa
jmp 0x14000281a
mov ebx, 5
jmp 0x14000281a
cmp qword [rdi + 0x30], 0
jne 0x14000285d
mov rcx, qword [rsi]
mov rax, qword [rcx]
lea r8, [rdi + 0x30]
lea rdx, [0x14000dcd8]
call qword [rax]
mov esi, eax
test eax, eax
je 0x14000285d
mov qword [rdi + 0x30], r12
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x140002815
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xdf
call fcn.1400033a0
test eax, eax
je 0x140002815
mov r8d, esi
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rsp + 0x4f0]
mov edx, 0xa
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, gethostbyaddr
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x1400028a1
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xd8
call fcn.1400033a0
test eax, eax
je 0x1400028a1
lea r8, [rsp + 0xf0]
mov edx, 0xa
mov rcx, qword [0x1400132a0]
call fcn.140003410
jmp 0x1400028a1
mov rcx, qword [0x1400132a0]
test rcx, rcx
je 0x14000289e
mov r9d, 0x400
lea r8, [rsp + 0xf0]
mov edx, 0xe0
call fcn.1400033a0
test eax, eax
je 0x14000289e
lea r8, [rsp + 0xf0]
mov edx, reloc.WS2_32.dll_inet_ntoa
mov rcx, qword [0x1400132a0]
call fcn.140003410
mov ebx, r12d
mov rcx, qword [rdi + 0x48]
test rcx, rcx
je 0x1400028b0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x48], r12
mov rcx, qword [rdi + 0x28]
test rcx, rcx
je 0x1400028c3
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [rdi + 0x28], r12
mov rcx, qword [rdi + 0x40]
test rcx, rcx
je 0x1400028de
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [rdi + 0x40], r12
mov eax, ebx
jmp 0x1400028e4
mov qword [rdi + 0x40], r12
mov eax, ebx
mov rcx, qword [rsp + 0x8f0]
xor rcx, rsp
call fcn.14000be00
lea r11, [rsp + 0x900]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret