Function at 0x40ddb0
Capabilities:
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3e4
mov eax, dword [0x4635a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
or esi, 0xffffffff
mov dword [ebp - 0x3cc], ebx
xor eax, eax
mov dword [ebp - 0x3d8], 0
push edi
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3c8], esi
mov dword [ebp - 0x3d0], esi
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x344], 0x45778c
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], 0x34
mov dword [ebp - 0x334], 0x457790
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x328], 0x36
mov dword [ebp - 0x324], str.crlf
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], 0x43
mov dword [ebp - 0x314], 0x45779c
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x308], 0x67
mov dword [ebp - 0x304], 0x4577a0
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], 0x47
mov dword [ebp - 0x2f4], str.exec
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], 0x65
mov dword [ebp - 0x2e4], str.sh_exec
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], 0x63
mov dword [ebp - 0x2d4], str.lua_exec
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], str.lua_exec_internal
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], str.max_conns
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], 0x6d
mov dword [ebp - 0x2a4], str.help
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], 0x68
mov dword [ebp - 0x294], str.delay
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], 0x64
mov dword [ebp - 0x284], str.listen
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], 0x6c
mov dword [ebp - 0x274], str.output
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], 0x6f
mov dword [ebp - 0x264], str.hex_dump
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], 0x78
mov dword [ebp - 0x254], str.append_output
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], str.idle_timeout
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], 0x69
mov dword [ebp - 0x234], str.keep_open
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], 0x6b
mov dword [ebp - 0x224], str.recv_only
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0x463c38
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x214], 0x45784c
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], 0x70
mov dword [ebp - 0x204], str.source
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], 0x73
mov dword [ebp - 0x1f4], str.send_only
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], 0x463c34
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x1e4], str.no_shutdown
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], 0x463c3c
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1d4], str.broker
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], str.chat
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], str.talk
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], str.deny
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], str.denyfile
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], str.allow
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], str.allowfile
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], str.telnet
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], 0x74
mov dword [ebp - 0x154], 0x4569d4
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], 0x75
mov dword [ebp - 0x144], str.sctp
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], str.version
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], str.verbose
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], 0x76
mov dword [ebp - 0x114], str.wait
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], 0x77
mov dword [ebp - 0x104], str.nodns
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], 0x6e
mov dword [ebp - 0xf4], str.proxy
mov dword [ebp - 0xf0], 1
movdqa xmm0, xmmword [0x459550]
push eax
push 0x463cf4
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], str.proxy_type
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], str.proxy_auth
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], str.proxy_dns
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], str.nsock_engine
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], str.test
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], 0x457944
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], 0x463cd0
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x84], str.ssl_cert
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], str.ssl_key
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], str.ssl_verify
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], str.ssl_trustfile
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], str.ssl_ciphers
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], str.ssl_servername
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], str.ssl_alpn
movdqu xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
call fcn.0041feb0
call fcn.00401168
call fcn.004010b4
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x344]
push eax
push str.46UCc:e:g:G:i:km:hp:d:lo:x:ts:uvw:nz
push ebx
push edi
call fcn.004228a0
add esp, 0x1c
cmp eax, esi
je 0x40f057
mov ebx, dword [sym.imp.MSVCR120.dll_strtok]
mov ecx, dword [sym.imp.MSVCR120.dll_atoi]
cmp eax, 0x7a
ja case.0x40e48b.1
movzx eax, byte [eax + 0x40f918]
jmp dword [eax*4 + 0x40f8b0]
mov dword [0x463c20], 2
jmp 0x40efce
mov dword [0x463c20], 0x17
jmp 0x40efce
mov dword [0x463c68], 1
jmp 0x40efce
cmp dword [0x463cb8], 0
jne 0x40f73b
mov eax, dword [0x464ffc]
mov dword [0x463cb8], eax
mov dword [0x463cbc], 1
jmp 0x40efce
cmp dword [0x463cb8], 0
jne 0x40f73b
mov eax, dword [0x464ffc]
mov dword [0x463cb8], eax
mov dword [0x463cbc], 0
jmp 0x40efce
cmp dword [0x463ca8], 8
mov edi, dword [0x464ffc]
jge 0x40e578
lea ebx, [ebx]
push 0x457724
push edi
call ebx
mov esi, eax
add esp, 8
test esi, esi
je 0x40e578
push 2
lea eax, [ebp - 0x3d4]
xor edi, edi
push eax
lea eax, [ebp - 0x3c4]
push eax
push edi
push esi
call fcn.00401299
add esp, 0x14
test eax, eax
jne 0x40f745
mov ecx, dword [0x463ca8]
mov eax, dword [ebp - 0x3c0]
mov dword [ecx*4 + 0x463c88], eax
mov eax, dword [0x463ca8]
inc eax
mov dword [0x463ca8], eax
cmp eax, 8
jl 0x40e520
push 0x457724
push edi
call ebx
add esp, 8
test eax, eax
jne 0x40f774
mov edi, dword [ebp + 8]
jmp 0x40efce
push dword [0x464ffc]
call ecx
mov ecx, eax
add esp, 4
mov dword [0x463cac], ecx
cmp ecx, 4
jl 0x40f724
and eax, reloc.WS2_32.dll_closesocket
jns 0x40e5bb
dec eax
or eax, 0xfffffffc
inc eax
jne 0x40f724
cmp ecx, 0x1c
jle 0x40efce
jmp 0x40f724
mov dword [0x463c30], 1
jmp 0x40efce
push dword [0x464ffc]
call ecx
add esp, 4
mov dword [0x463cb0], eax
jmp 0x40efce
push str._d_delay
push dword [0x464ffc]
call fcn.0040daf0
add esp, 8
mov dword [0x463c44], eax
jmp 0x40efce
mov eax, dword [0x464ffc]
mov dword [0x463c50], eax
jmp 0x40efce
mov eax, dword [0x464ffc]
mov dword [0x463c54], eax
jmp 0x40efce
push str.source_port
push 0
push dword [0x464ffc]
call fcn.0040dba0
mov esi, eax
mov dword [ebp - 0x3d0], 0
add esp, 0xc
mov dword [ebp - 0x3c8], esi
jmp 0x40efd4
push str._i_timeout
push dword [0x464ffc]
call fcn.0040daf0
add esp, 8
mov dword [0x463c64], eax
jmp 0x40efce
mov eax, dword [0x464ffc]
mov dword [ebp - 0x3e0], eax
jmp 0x40efce
mov dword [0x463c24], 0x11
jmp 0x40efce
cmp dword [0x463c14], 0
mov esi, dword [ebp - 0x3c8]
jne 0x40e6b4
mov dword [0x463c14], 1
jmp 0x40efd4
inc dword [0x463c18]
jmp 0x40efd4
mov dword [0x463c4c], 1
jmp 0x40efce
push str._w_timeout
push dword [0x464ffc]
call fcn.0040daf0
add esp, 8
mov dword [0x463cb4], eax
jmp 0x40efce
mov dword [0x463c40], 1
jmp 0x40efce
mov dword [0x463cf0], 1
jmp 0x40efce
mov eax, dword [ebp - 0x3e4]
mov ecx, str.version
add eax, eax
mov esi, dword [ebp + eax*8 - 0x344]
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e740
test dl, dl
je 0x40e73c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e740
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e720
xor eax, eax
jmp 0x40e745
sbb eax, eax
or eax, 1
test eax, eax
je 0x40f01c
mov ecx, str.proxy
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e774
test dl, dl
je 0x40e770
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e774
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e754
xor eax, eax
jmp 0x40e779
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e798
cmp dword [0x463cc8], eax
jne 0x40f77e
mov eax, dword [0x464ffc]
mov dword [0x463cc8], eax
jmp 0x40efce
mov ecx, str.proxy_type
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e7c0
test dl, dl
je 0x40e7bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e7c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e7a0
xor eax, eax
jmp 0x40e7c5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e7e4
cmp dword [0x463cc4], eax
jne 0x40f788
mov eax, dword [0x464ffc]
mov dword [0x463cc4], eax
jmp 0x40efce
mov ecx, str.proxy_auth
mov eax, esi
jmp 0x40e7f0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e810
test dl, dl
je 0x40e80c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e810
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e7f0
xor eax, eax
jmp 0x40e815
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e834
cmp dword [0x463cc0], eax
jne 0x40f792
mov eax, dword [0x464ffc]
mov dword [0x463cc0], eax
jmp 0x40efce
mov ecx, str.proxy_dns
mov eax, esi
jmp 0x40e840
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e860
test dl, dl
je 0x40e85c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e860
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e840
xor eax, eax
jmp 0x40e865
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e97c
mov esi, dword [0x464ffc]
mov ecx, str.none
mov eax, esi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e8a0
test dl, dl
je 0x40e89c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e8a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e880
xor eax, eax
jmp 0x40e8a5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e8b3
mov dword [0x463ccc], eax
jmp 0x40efce
mov ecx, str.local
mov eax, esi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e8e0
test dl, dl
je 0x40e8dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e8e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e8c0
xor eax, eax
jmp 0x40e8e5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e8f8
mov dword [0x463ccc], 1
jmp 0x40efce
mov ecx, str.remote
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e920
test dl, dl
je 0x40e91c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e920
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e900
xor eax, eax
jmp 0x40e925
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e938
mov dword [0x463ccc], 2
jmp 0x40efce
mov eax, str.both
lea ecx, [ecx]
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x40e960
test cl, cl
je 0x40e95c
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x40e960
add esi, 2
add eax, 2
test cl, cl
jne 0x40e940
xor eax, eax
jmp 0x40e965
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40f79c
mov dword [0x463ccc], 3
jmp 0x40efce
mov ecx, str.nsock_engine
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e9a3
test dl, dl
je 0x40e99f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e9a3
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e983
xor eax, eax
jmp 0x40e9a8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e9d1
push dword [0x464ffc]
call fcn.00417c10
add esp, 4
test eax, eax
js 0x40f7a6
mov dword [0x463c80], 1
jmp 0x40efce
mov ecx, str.test
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e9f8
test dl, dl
je 0x40e9f4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e9f8
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e9d8
xor eax, eax
jmp 0x40e9fd
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ea10
mov dword [0x463c84], 1
jmp 0x40efce
mov ecx, str.broker
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ea37
test dl, dl
je 0x40ea33
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ea37
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ea17
xor eax, eax
jmp 0x40ea3c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ea59
mov dword [0x463c28], 1
mov dword [0x463c2c], 1
jmp 0x40efce
mov ecx, str.chat
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ea80
test dl, dl
je 0x40ea7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ea80
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ea60
xor eax, eax
jmp 0x40ea85
sbb eax, eax
or eax, 1
test eax, eax
je 0x40efba
mov ecx, str.talk
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eab4
test dl, dl
je 0x40eab0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eab4
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ea94
xor eax, eax
jmp 0x40eab9
sbb eax, eax
or eax, 1
test eax, eax
je 0x40efba
mov ecx, str.allow
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eae8
test dl, dl
je 0x40eae4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eae8
add eax, 2
add ecx, 2
test dl, dl
jne 0x40eac8
xor eax, eax
jmp 0x40eaed
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40eb15
push dword [0x464ffc]
lea eax, [ebp - 0x3d8]
mov dword [0x463c6c], 1
push eax
call fcn.0040d680
add esp, 8
jmp 0x40efce
mov ecx, str.allowfile
mov eax, esi
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eb40
test dl, dl
je 0x40eb3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eb40
add eax, 2
add ecx, 2
test dl, dl
jne 0x40eb20
xor eax, eax
jmp 0x40eb45
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40eb6d
push dword [0x464ffc]
lea eax, [ebp - 0x3d8]
mov dword [0x463c6c], 1
push eax
call fcn.0040d650
add esp, 8
jmp 0x40efce
mov ecx, str.deny
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eb94
test dl, dl
je 0x40eb90
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eb94
add eax, 2
add ecx, 2
test dl, dl
jne 0x40eb74
xor eax, eax
jmp 0x40eb99
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ebb7
push dword [0x464ffc]
lea eax, [ebp - 0x3dc]
push eax
call fcn.0040d680
add esp, 8
jmp 0x40efce
mov ecx, str.denyfile
mov eax, esi
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ebe0
test dl, dl
je 0x40ebdc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ebe0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ebc0
xor eax, eax
jmp 0x40ebe5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ec03
push dword [0x464ffc]
lea eax, [ebp - 0x3dc]
push eax
call fcn.0040d650
add esp, 8
jmp 0x40efce
mov ecx, str.append_output
mov eax, esi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ec30
test dl, dl
je 0x40ec2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ec30
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ec10
xor eax, eax
jmp 0x40ec35
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ec48
mov dword [0x463c60], 1
jmp 0x40efce
mov ecx, str.sctp
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ec70
test dl, dl
je 0x40ec6c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ec70
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ec50
xor eax, eax
jmp 0x40ec75
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ec88
mov dword [0x463c24], 0x84
jmp 0x40efce
mov ecx, str.ssl_cert
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ecb0
test dl, dl
je 0x40ecac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ecb0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ec90
xor eax, eax
jmp 0x40ecb5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ecdb
push dword [0x464ffc]
mov dword [0x463cd0], 1
call fcn.0040129e
add esp, 4
mov dword [0x463cd4], eax
jmp 0x40efce
mov ecx, str.ssl_key
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ed02
test dl, dl
je 0x40ecfe
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ed02
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ece2
xor eax, eax
jmp 0x40ed07
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ed2d
push dword [0x464ffc]
mov dword [0x463cd0], 1
call fcn.0040129e
add esp, 4
mov dword [0x463cd8], eax
jmp 0x40efce
mov ecx, str.ssl_verify
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ed54
test dl, dl
je 0x40ed50
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ed54
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ed34
xor eax, eax
jmp 0x40ed59
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ed76
mov dword [0x463cdc], 1
mov dword [0x463cd0], 1
jmp 0x40efce
mov ecx, str.ssl_trustfile
mov eax, esi
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eda0
test dl, dl
je 0x40ed9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eda0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ed80
xor eax, eax
jmp 0x40eda5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ede1
mov dword [0x463cd0], 1
cmp dword [0x463ce0], eax
jne 0x40f7b6
push dword [0x464ffc]
call fcn.0040129e
add esp, 4
mov dword [0x463ce0], eax
mov dword [0x463cdc], 1
jmp 0x40efce
mov ecx, str.ssl_ciphers
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ee08
test dl, dl
je 0x40ee04
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ee08
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ede8
xor eax, eax
jmp 0x40ee0d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ee33
push dword [0x464ffc]
mov dword [0x463cd0], 1
call fcn.0040129e
add esp, 4
mov dword [0x463ce4], eax
jmp 0x40efce
mov ecx, str.ssl_servername
mov eax, esi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40ee60
test dl, dl
je 0x40ee5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40ee60
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ee40
xor eax, eax
jmp 0x40ee65
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ee8b
push dword [0x464ffc]
mov dword [0x463cd0], 1
call fcn.0040129e
add esp, 4
mov dword [0x463ce8], eax
jmp 0x40efce
mov ecx, str.ssl_alpn
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eeb2
test dl, dl
je 0x40eeae
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eeb2
add eax, 2
add ecx, 2
test dl, dl
jne 0x40ee92
xor eax, eax
jmp 0x40eeb7
sbb eax, eax
or eax, 1
test eax, eax
je 0x40f7cf
mov ecx, str.lua_exec
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40eee6
test dl, dl
je 0x40eee2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40eee6
add eax, 2
add ecx, 2
test dl, dl
jne 0x40eec6
xor eax, eax
jmp 0x40eeeb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ef14
cmp dword [0x463cb8], eax
jne 0x40f73b
mov eax, dword [0x464ffc]
mov dword [0x463cb8], eax
mov dword [0x463cbc], 2
jmp 0x40efce
mov eax, str.lua_exec_internal
lea esp, [esp]
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x40ef40
test cl, cl
je 0x40ef3c
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x40ef40
add esi, 2
add eax, 2
test cl, cl
jne 0x40ef20
xor eax, eax
jmp 0x40ef45
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40efce
cmp dword [0x463c18], eax
je 0x40ef62
push str.Enabling_binary_stdout_for_the_Lua_output._n
call fcn.004011ea
add esp, 4
push 0x8000
call dword [sym.imp.MSVCR120.dll___iob_func]
add eax, 0x20
push eax
call dword [sym.imp.MSVCR120.dll__fileno]
add esp, 4
push eax
call dword [sym.imp.MSVCR120.dll__setmode]
add esp, 8
cmp eax, 0xffffffff
jne 0x40ef97
push str.Cannot_set_mode
call dword [sym.imp.MSVCR120.dll_perror]
add esp, 4
cmp edi, 3
jne 0x40f7c0
mov esi, dword [ebp - 0x3cc]
mov eax, dword [esi + 8]
mov dword [0x463cb8], eax
call fcn.00401019
call fcn.004010be
jmp 0x40efce
mov dword [0x463c48], 1
mov dword [0x463c28], 1
mov esi, dword [ebp - 0x3c8]
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x344]
push eax
push str.46UCc:e:g:G:i:km:hp:d:lo:x:ts:uvw:nz
push dword [ebp - 0x3cc]
push edi
call fcn.004228a0
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40e475
mov eax, dword [ebp - 0x3d0]
test eax, eax
jl 0x40f057
jg 0x40f72f
cmp esi, 0xffff
jbe 0x40f057
jmp 0x40f72f
call fcn.0040dd50
push 0
call dword [sym.imp.MSVCR120.dll_exit]
mov esi, dword [sym.imp.MSVCR120.dll_printf]
push str.https:__nmap.org_ncat
push str.7.91
push str.Ncat
push str._s__s____s___n
call esi
push str.Usage:_ncat__options___hostname___port__n_nOptions_taking_a_time_assume_seconds._Append_ms_for_milliseconds__ns_for_seconds__m_for_minutes__or_h_for_hours__e.g._500ms_._n___4_________________________Use_IPv4_only_n___6_________________________Use_IPv6_only_n___C____crlf_________________Use_CRLF_for_EOL_sequence_n___c____sh_exec__command_____Executes_the_given_command_via__bin_sh_n___e____exec__command________Executes_the_given_command_n________lua_exec__filename___Executes_the_given_Lua_script_n___g_hop1__hop2_...__________Loose_source_routing_hop_points__8_max__n___G__n______________________Loose_source_routing_hop_pointer__4__8__12__...__n___m____max_conns__n_________Maximum__n__simultaneous_connections_n___h____help_________________Display_this_help_screen_n___d____delay__time__________Wait_between_read_writes_n___o____output__filename_____Dump_session_data_to_a_file_n___x____hex_dump__filename___Dump_session_data_as_hex_to_a_file_n___i____idle_timeout__time___Idle_read_write_timeout_n___p____source_port_port_____Specify_source_port_to_use_n___s____source_addr__________Specify_source_address_to_use__doesnt_affect__l__n___l____listen_______________Bind_and_listen_for_incoming_connections_n___k____keep_open____________Accept_multiple_connections_in_listen_mode_n___n____nodns________________Do_not_resolve_hostnames_via_DNS_n___t____telnet_______________Answer_Telnet_negotiations_n___u____udp__________________Use_UDP_instead_of_default_TCP_n________sctp_________________Use_SCTP_instead_of_default_TCP_n___v____verbose______________Set_verbosity_level__can_be_used_several_times__n___w____wait__time___________Connect_timeout_n___z_________________________Zero_I_O_mode__report_connection_status_only_n________append_output________Append_rather_than_clobber_specified_output_files_n________send_only____________Only_send_data__ignoring_received__quit_on_EOF_n________recv_only____________Only_receive_data__never_send_anything_n________no_shutdown__________Continue_half_duplex_when_receiving_EOF_on_stdin_n________allow________________Allow_only_given_hosts_to_connect_to_Ncat_n________allowfile____________A_file_of_hosts_allowed_to_connect_to_Ncat_n________deny_________________Deny_given_hosts_from_connecting_to_Ncat_n________denyfile_____________A_file_of_hosts_denied_from_connecting_to_Ncat_n________broker_______________Enable_Ncats_connection_brokering_mode_n________chat_________________Start_a_simple_Ncat_chat_server_n________proxy__addr_:port____Specify_address_of_host_to_proxy_through_n________proxy_type__type_____Specify_proxy_type___http____socks4____socks5___n________proxy_auth__auth_____Authenticate_with_HTTP_or_SOCKS_proxy_server_n________proxy_dns__type______Specify_where_to_resolve_proxy_destination_n________ssl__________________Connect_or_listen_with_SSL_n________ssl_cert_____________Specify_SSL_certificate_file__PEM__for_listening_n________ssl_key______________Specify_SSL_private_key__PEM__for_listening_n________ssl_verify___________Verify_trust_and_domain_name_of_certificates_n________ssl_trustfile________PEM_file_containing_trusted_SSL_certificates_n________ssl_ciphers__________Cipherlist_containing_SSL_ciphers_to_use_n________ssl_servername_______Request_distinct_server_name__SNI__n________ssl_alpn_____________ALPN_protocol_list_to_use_n________version______________Display_Ncats_version_information_and_exit_n_nSee_the_ncat_1__manpage_for_full_options__descriptions_and_usage_examples_n
call esi
add esp, 0x14
push 0
call dword [sym.imp.MSVCR120.dll_exit]
mov eax, dword [0x463c50]
test eax, eax
je 0x40f074
push dword [0x463c60]
push eax
call fcn.00401159
add esp, 8
mov dword [0x463c58], eax
mov eax, dword [0x463c54]
test eax, eax
je 0x40f091
push dword [0x463c60]
push eax
call fcn.00401159
add esp, 8
mov dword [0x463c5c], eax
cmp dword [0x463c14], 0
je 0x40f09f
call fcn.0040dd50
cmp dword [0x463c18], 0
je 0x40f0af
push fcn.004011ea
jmp 0x40f0b1
push 0
push fcn.00401186
call fcn.00420ef0
add esp, 8
push 0x88
call fcn.0041e9e0
push 0x80
mov edi, eax
push 0
push 0x463b88
mov dword [0x463c08], edi
call sub.MSVCR120.dll_memset
mov ebx, dword [sym.imp.WS2_32.dll_htons]
xor eax, eax
mov word [0x463b88], ax
mov ecx, 0x20
mov esi, 0x463b88
add esp, 0x10
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x20
mov esi, 0x463b88
mov edi, 0x463a80
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x20
mov esi, 0x463b88
mov edi, 0x463b00
rep movsd dword es:[edi], dword [esi]
mov edi, dword [0x463cc8]
test edi, edi
je 0x40f2f9
mov esi, dword [0x463cc4]
test esi, esi
jne 0x40f153
push str.http
call fcn.0040129e
mov edi, dword [0x463cc8]
mov esi, eax
add esp, 4
mov dword [0x463cc4], esi
mov edx, str.http
mov ecx, esi
lea ebx, [ebx]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40f180
test al, al
je 0x40f17c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40f180
add ecx, 2
add edx, 2
test al, al
jne 0x40f160
xor eax, eax
jmp 0x40f185
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40f198
mov dword [ebp - 0x3d4], 0xc38
jmp 0x40f26b
mov ecx, str.socks4
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f1c0
test dl, dl
je 0x40f1bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f1c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f1a0
xor eax, eax
jmp 0x40f1c5
sbb eax, eax
or eax, 1
test eax, eax
je 0x40f261
mov ecx, 0x45778c
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f1f4
test dl, dl
je 0x40f1f0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f1f4
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f1d4
xor eax, eax
jmp 0x40f1f9
sbb eax, eax
or eax, 1
test eax, eax
je 0x40f261
mov ecx, str.socks5
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f224
test dl, dl
je 0x40f220
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f224
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f204
xor eax, eax
jmp 0x40f229
sbb eax, eax
or eax, 1
test eax, eax
je 0x40f261
mov ecx, 0x458dbc
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f254
test dl, dl
je 0x40f250
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f254
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f234
xor eax, eax
jmp 0x40f259
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40f7ed
mov dword [ebp - 0x3d4], 0x438
mov ecx, dword [0x463c08]
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ecx + 0x80]
push eax
push ecx
push edi
call fcn.0040dc20
mov ecx, dword [0x463c08]
add esp, 0x10
push dword [ebp - 0x3d4]
mov dword [ecx + 0x80], eax
call ebx
mov ecx, dword [0x463c08]
mov word [ecx + 2], ax
mov esi, dword [0x463c2c]
test esi, esi
jne 0x40f7f8
mov edi, dword [0x463cc4]
cmp dword [0x463cc0], 0
jne 0x40f2e3
push str.NCAT_PROXY_AUTH
call dword [sym.imp.MSVCR120.dll_getenv]
mov edi, dword [0x463cc4]
add esp, 4
mov esi, dword [0x463c2c]
mov dword [0x463cc0], eax
cmp dword [0x463cf0], 0
je 0x40f38f
test esi, esi
je 0x40f34a
jmp 0x40f802
mov edi, dword [0x463cc4]
mov esi, dword [0x463c2c]
test edi, edi
je 0x40f2bb
test esi, esi
je 0x40f80c
mov ecx, str.http
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f338
test dl, dl
je 0x40f334
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f338
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f318
xor eax, eax
jmp 0x40f33d
sbb eax, eax
or eax, 1
test eax, eax
je 0x40f2bb
jmp 0x40f816
cmp dword [0x463c40], 0
jne 0x40f821
cmp dword [0x463cbc], 0
jne 0x40f82b
cmp dword [0x463cb8], 0
jne 0x40f82b
cmp dword [0x463c64], 0
jne 0x40f3bb
cmp dword [0x463c24], 0x11
jne 0x40f3bb
mov dword [0x463c64], 0x7d0
jmp 0x40f3bb
test esi, esi
je 0x40f3bb
test edi, edi
je 0x40f3bb
cmp dword [0x463c10], 0
jne 0x40f3bb
mov eax, dword [ebp - 0x3c8]
and eax, dword [ebp - 0x3d0]
mov dword [0x463c10], 0xc38
cmp eax, 0xffffffff
je 0x40f3c5
mov dword [0x463c10], 0x7a69
mov edi, dword [ebp - 0x3e0]
test edi, edi
je 0x40f3f9
test esi, esi
jne 0x40f835
push dword [0x463c20]
push 0x463b84
push 0x463b88
push esi
push edi
call fcn.00401299
add esp, 0x14
test eax, eax
jne 0x40f83f
mov esi, dword [ebp - 0x3d8]
push esi
push dword [0x463c74]
call fcn.0040d6e0
push esi
call fcn.0040d6b0
mov esi, dword [ebp - 0x3dc]
push esi
push dword [0x463c78]
call fcn.0040d6e0
push esi
call fcn.0040d6b0
mov ecx, dword [0x463578]
add esp, 0x18
mov edi, dword [ebp + 8]
cmp ecx, edi
jne 0x40f44c
mov edx, dword [0x463c2c]
test edx, edx
jne 0x40f4f7
jmp 0x40f854
mov eax, dword [ebp - 0x3cc]
mov ecx, dword [eax + ecx*4]
mov esi, ecx
lea edx, [esi + 1]
lea ebx, [ebx]
mov al, byte [esi]
inc esi
test al, al
jne 0x40f460
push str.0123456789
push ecx
sub esi, edx
call dword [sym.imp.MSVCR120.dll_strspn]
add esp, 8
cmp eax, esi
je 0x40f4e3
cmp dword [0x463cc4], 0
mov ecx, dword [0x463578]
mov eax, dword [ebp - 0x3cc]
mov edx, dword [eax + ecx*4]
mov dword [0x463c1c], edx
jne 0x40f4c5
push dword [0x463c20]
push dword [0x463c08]
push 0
push edx
call fcn.0040105f
add esp, 0x10
test eax, eax
jne 0x40f85e
mov edx, dword [0x463c1c]
mov ecx, dword [0x463578]
mov eax, dword [0x463ce8]
test eax, eax
cmove eax, edx
mov edx, dword [0x463c2c]
inc ecx
mov dword [0x463ce8], eax
mov dword [0x463578], ecx
jmp 0x40f4f7
mov edx, dword [0x463c2c]
test edx, edx
je 0x40f878
mov ecx, dword [0x463578]
lea esi, [ecx + 1]
cmp esi, edi
jl 0x40f69b
test edx, edx
je 0x40f51f
mov eax, dword [ebp - 0x3c8]
and eax, dword [ebp - 0x3d0]
cmp eax, 0xffffffff
je 0x40f51f
cmp esi, edi
je 0x40f69b
cmp esi, edi
jne 0x40f549
mov eax, dword [ebp - 0x3cc]
push str.port
push 0xffff
push dword [eax + ecx*4]
call fcn.0040dba0
mov edx, dword [0x463c2c]
add esp, 0xc
mov dword [0x463c10], eax
cmp dword [0x463cc4], 0
je 0x40f556
test edx, edx
je 0x40f5a6
mov esi, dword [0x463c08]
test esi, esi
je 0x40f5a6
movzx eax, word [esi]
cmp eax, 2
jne 0x40f578
movzx eax, word [0x463c10]
push eax
call ebx
mov word [esi + 2], ax
jmp 0x40f596
cmp eax, 0x17
jne 0x40f58d
movzx eax, word [0x463c10]
push eax
call ebx
mov word [esi + 2], ax
jmp 0x40f596
test ax, ax
jne 0x40f882
mov esi, dword [esi + 0x84]
test esi, esi
jne 0x40f560
mov edx, dword [0x463c2c]
mov ecx, dword [ebp - 0x3c8]
mov eax, ecx
and eax, dword [ebp - 0x3d0]
cmp eax, 0xffffffff
je 0x40f61d
test edx, edx
je 0x40f5c5
mov dword [0x463c10], ecx
jmp 0x40f61d
mov ax, word [0x463b88]
test ax, ax
jne 0x40f608
mov eax, dword [0x463c08]
mov ax, word [eax]
mov word [0x463b88], ax
cmp ax, 2
jne 0x40f5f0
mov dword [0x463b8c], 0
jmp 0x40f614
cmp ax, 0x17
jne 0x40f608
movdqu xmm0, xmmword [0x45d890]
movdqu xmmword [0x463b90], xmm0
jmp 0x40f614
cmp ax, 2
je 0x40f614
cmp ax, 0x17
jne 0x40f61d
push ecx
call ebx
mov word [0x463b8a], ax
cmp dword [0x463c24], 0x11
pop edi
pop esi
pop ebx
jne 0x40f659
cmp dword [0x463cd0], 0
jne 0x40f890
cmp dword [0x463c30], 0
je 0x40f64c
cmp dword [0x463cb8], 0
je 0x40f89a
cmp dword [0x463c28], 0
jne 0x40f8a4
call fcn.00401217
cmp dword [0x463cbc], 2
jne 0x40f66c
call fcn.00401019
cmp dword [0x463c2c], 0
je 0x40f688
call fcn.0040d8a0
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044590e
mov esp, ebp
pop ebp
ret
call fcn.0040d820
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044590e
mov esp, ebp
pop ebp
ret
push str.Got_more_than_one_port_specification:
call fcn.00401186
add esp, 4
cmp dword [0x463c2c], 0
je 0x40f6d5
mov ecx, dword [ebp - 0x3c8]
mov eax, ecx
mov edx, dword [ebp - 0x3d0]
and eax, edx
cmp eax, 0xffffffff
je 0x40f6d5
push edx
push ecx
push str.__lld
call fcn.0040108c
add esp, 0xc
mov eax, dword [0x463578]
cmp eax, edi
jge 0x40f70f
mov esi, dword [ebp - 0x3cc]
jmp 0x40f6f0
push dword [esi + eax*4]
push 0x455e7c
call fcn.0040108c
mov eax, dword [0x463578]
add esp, 8
inc eax
mov dword [0x463578], eax
cmp eax, edi
jl 0x40f6f0
push str.._QUITTING._n
call fcn.0040108c
add esp, 4
push 2
call dword [sym.imp.MSVCR120.dll_exit]
push ecx
push str.Invalid_source_route_hop_pointer__d.
call fcn.004010f0
push eax
push esi
push str.Invalid_source_port__lld.
call fcn.004010f0
push str.Only_one_of___exec____sh_exec__and___lua_exec_is_allowed.
call fcn.004010f0
push 0
push 0x400
push 0x464410
push 0x400
push eax
push 0
push 0x12ff
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push 0x464410
push esi
push str.Sorry__could_not_resolve_source_route_hop___s_:__s.
call fcn.004010f0
push str.Sorry__you_gave_too_many_source_route_hops.
call fcn.004010f0
push str.You_cant_specify_more_than_one___proxy.
call fcn.004010f0
push str.You_cant_specify_more_than_one___proxy_type.
call fcn.004010f0
push str.You_cant_specify_more_than_one___proxy_auth.
call fcn.004010f0
push str.Invalid_proxy_DNS_type.
call fcn.004010f0
push dword [0x464ffc]
push str.Unknown_or_non_available_engine:__s.
call fcn.004010f0
push str.The___ssl_trustfile_option_may_be_given_only_once.
call fcn.004010f0
push str.argc__3
push str.assertion_failed:__s
call fcn.004010f0
push str.OpenSSL_does_not_have_ALPN_support_compiled_in._The___ssl_alpn_option_cannot_be_chosen.
call fcn.004010f0
push str.Try____help_or_man_1__ncat_for_more_information__usage_options_and_help.
call fcn.004010f0
push str.Unrecognised_option.
call fcn.004010f0
push esi
push str.Invalid_proxy_type___s_.
call fcn.004010f0
push str.Invalid_option_combination:___proxy_and__l.
call fcn.004010f0
push str.Services_designed_for_LISTENING_cant_be_used_with__z
call fcn.004010f0
push str.Proxy_type____proxy_type__specified_without_proxy_address____proxy_.
call fcn.004010f0
push edi
push str.Invalid_proxy_type___s___Ncat_proxy_server_only_supports__http_.
call fcn.004010f0
push str.Invalid_option_combination:__z_and__t.
call fcn.004010f0
push str.Command_execution_cant_be_done_along_with_option__z.
call fcn.004010f0
push str._l_and__s_are_incompatible.__Specify_the_address_and_port_to_bind_to_like_you_would_a_host_to_connect_to.
call fcn.004010f0
push eax
call fcn.00401249
add esp, 4
push eax
push edi
push str.Could_not_resolve_source_address___s_:__s.
call fcn.004010f0
push str.You_must_specify_a_host_to_connect_to.
call fcn.004010f0
push eax
call fcn.00401249
add esp, 4
push eax
push dword [0x463c1c]
push str.Could_not_resolve_hostname___s_:__s.
call fcn.004010f0
push str.You_must_specify_a_host_to_connect_to.
call fcn.004010f0
movzx eax, word [esi]
push eax
push str.Unknown_address_family__d.
call fcn.004010f0
push str.OpenSSL_does_not_have_DTLS_support_compiled_in.
call fcn.004010f0
push str.UDP_mode_does_not_support_the__k_or___keep_open_options__except_with___exec_or___sh_exec.
call fcn.004010f0
push str.UDP_mode_does_not_support_connection_brokering._nIf_this_feature_is_important_to_you__write_dev_nmap.org_with_a_ndescription_of_how_you_intend_to_use_it__as_an_aid_to_deciding_how_UDP_nconnection_brokering_should_work.
call fcn.004010f0
mov edi, edi
or edi, esp
inc eax
add byte [edx - 0x5effbf1c], dl
in al, 0x40
add cl, bl
test dword [eax], case.0x40e48b.67
xchg ebx, eax
in eax, 64
add byte [edi - 0xcffbf1c], bh
in eax, 0x40
add ch, ah
in al, 0x40
add byte [ebx], cl
in eax, 0x40
add byte [ecx], ch
invalid