Function at 0x14012b2b0
Capabilities:
Send data
Send data on socket
Terminate process

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov qword [rsp + 0x20], r9
push rdi
sub rsp, 0xc0
lea rdi, [rsp + 0x30]
mov ecx, 0x24
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x44], 1
mov eax, dword [rsp + 0xe0]
and eax, 0x40000000
cmp eax, 0x40000000
jne 0x14012b334
mov eax, dword [rsp + 0xe0]
btc eax, 0x1e
mov dword [rsp + 0xe0], eax
mov dword [rsp + 0x84], 1
jmp 0x14012b33f
mov dword [rsp + 0x84], 0
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x64], eax
cmp qword [rsp + 0xd0], 0
jne 0x14012b35f
mov eax, 0xfffffffc
jmp 0x14012bef0
mov dword [rsp + 0x68], 0
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x2a8], 0
je 0x14012b7f4
cmp dword [rsp + 0x64], 0
jne 0x14012b3a2
mov rax, qword [rsp + 0x30]
add rax, 0x288
mov rcx, rax
call fcn.14012a1a0
nop
mov dword [rsp + 0x48], 0
jmp 0x14012b3b6
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0xe0]
cmp dword [rsp + 0x48], eax
jae 0x14012b486
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax - 8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax - 8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov eax, dword [rax - 8]
mov dword [rsp + 0x60], eax
cmp qword [rsp + 0x58], 0x7fffffff
ja 0x14012b42b
cmp dword [rsp + 0x68], 0
je 0x14012b44f
cmp dword [rsp + 0x60], 0
jne 0x14012b442
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
nop
mov dword [rsp + 0x68], 1
jmp 0x14012b3ac
mov r8d, dword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x2a8]
call fcn.14031d200
cmp dword [rsp + 0x60], 0
jne 0x14012b481
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
nop
jmp 0x14012b3ac
mov qword [rsp + 0x78], 0
cmp dword [rsp + 0x68], 0
jne 0x14012b795
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x280], 0
jne 0x14012b775
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
cmp qword [rax], 0
jbe 0x14012b760
mov edx, reloc.WS2_32.dll_ntohs
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x2c0]
call fcn.1401bb2a0
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x2d0]
xor r9d, r9d
mov r8d, dword [rax]
mov rdx, qword [rcx + 8]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x68]
call qword [sym.imp.WS2_32.dll_send]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jle 0x14012b529
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
mov eax, dword [rax]
cmp dword [rsp + 0x40], eax
jl 0x14012b545
cmp dword [rsp + 0x40], 0
jge 0x14012b6db
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x14012b6db
cmp dword [rsp + 0x40], 0
jge 0x14012b559
mov dword [rsp + 0x88], 0
jmp 0x14012b574
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
mov ecx, dword [rsp + 0x40]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x88], eax
movsxd rax, dword [rsp + 0x88]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov ecx, gethostname
call fcn.140138010
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov dword [rax + 0x2c], 3
mov rax, qword [rsp + 0x38]
mov dword [rax + 0xc], 0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x280], rcx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x278], rcx
cmp dword [rsp + 0x40], 0
jle 0x14012b6ce
mov edx, gethostname
mov rcx, qword [rsp + 0x38]
call fcn.140138230
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x278]
mov qword [rcx], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
mov ecx, dword [rsp + 0x40]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x278]
mov dword [rcx + 8], eax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x278]
movsxd rax, dword [rax + 8]
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x2d0]
movsxd rdx, dword [rsp + 0x40]
add rdx, qword [rcx + 8]
mov rcx, rdx
mov rdx, qword [rsp + 0x30]
mov rdx, qword [rdx + 0x278]
movsxd rdx, dword [rdx + 8]
mov r8, qword [rsp + 0x30]
mov r8, qword [r8 + 0x278]
mov qword [rsp + 0x90], r8
mov r9, rax
mov r8, rcx
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax]
call fcn.140129e90
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x74]
add eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
mov dword [rcx + 0x74], eax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x278]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax + 8]
mov dword [rcx + 0x70], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x2c0]
call fcn.1401bb320
cdqe
mov rcx, rax
call fcn.14012a150
nop
mov dword [rsp + 0x44], 0
jmp 0x14012b75e
movsxd rax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x2d0]
cmp rax, qword [rcx]
jne 0x14012b74b
mov dword [rsp + 0x44], 1
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x2c0]
call fcn.1401bb320
cdqe
mov rcx, rax
call fcn.14012a150
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x74]
add eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
mov dword [rcx + 0x74], eax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax]
mov dword [rcx + 0x70], eax
jmp 0x14012b75e
mov dword [rsp + 0x44], 0xfffffffc
mov rcx, qword [rsp + 0x30]
call fcn.14012f400
nop
jmp 0x14012b773
mov dword [rsp + 0x44], 0xfffffffc
mov rcx, qword [rsp + 0x30]
call fcn.14012f400
nop
jmp 0x14012b793
mov dword [rsp + 0x44], 0
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x2d0]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rax]
mov dword [rcx + 0x70], eax
jmp 0x14012b7a8
mov dword [rsp + 0x44], 0xfffffffb
mov rcx, qword [rsp + 0x30]
call fcn.14012f400
nop
cmp dword [rsp + 0x64], 0
jne 0x14012b7c3
mov rax, qword [rsp + 0x30]
add rax, 0x288
mov rcx, rax
call fcn.14012a180
nop
cmp dword [rsp + 0x44], 1
je 0x14012b7eb
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x20]
call fcn.140137430
test eax, eax
jne 0x14012b7eb
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x20]
call fcn.140140d90
nop
mov eax, dword [rsp + 0x44]
jmp 0x14012bef0
cmp dword [rsp + 0x64], 0
jne 0x14012b80f
mov rax, qword [rsp + 0x30]
add rax, 0x288
mov rcx, rax
call fcn.14012a1a0
nop
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x68], 0xffffffffffffffff
jne 0x14012b8dc
mov dword [rsp + 0x48], 0
jmp 0x14012b833
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0xe0]
cmp dword [rsp + 0x48], eax
jae 0x14012b8ae
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax - 8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rax, dword [rax - 8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov eax, dword [rax - 8]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jne 0x14012b8a9
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
nop
jmp 0x14012b829
cmp dword [rsp + 0x64], 0
jne 0x14012b8c9
mov rax, qword [rsp + 0x30]
add rax, 0x288
mov rcx, rax
call fcn.14012a180
nop
mov qword [rsp + 0x78], 0
mov eax, 0xfffffffc
jmp 0x14012bef0
mov dword [rsp + 0x48], 0
jmp 0x14012b8f0
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0xe0]
cmp dword [rsp + 0x48], eax
jae 0x14012be86
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax - 8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax - 8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov eax, dword [rax - 8]
mov dword [rsp + 0x60], eax
cmp qword [rsp + 0x58], 0x7fffffff
ja 0x14012b965
cmp dword [rsp + 0x68], 0
je 0x14012b989
mov dword [rsp + 0x68], 1
cmp dword [rsp + 0x60], 0
jne 0x14012b984
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
nop
jmp 0x14012b8e6
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x280], 0
jne 0x14012b9aa
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x258], 0
jne 0x14012bb97
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, gethostname
call fcn.140138010
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x58]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x70]
add eax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x30]
mov dword [rcx + 0x70], eax
cmp dword [rsp + 0x60], 2
jne 0x14012baab
mov rax, qword [rsp + 0x38]
movsxd rax, dword [rax + 8]
mov r9d, 0x2bc
lea r8, [0x140555f60]
mov edx, 1
mov rcx, rax
call fcn.1403ba980
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x98]
mov qword [rax], rcx
cmp qword [rsp + 0x98], 0
jne 0x14012ba7a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9d, 0xfe
mov r8d, 0x2bc
lea rdx, [0x140555fb0]
xor ecx, ecx
call fcn.14014da80
mov r8d, 0x2bc
lea rdx, [0x140556000]
lea rcx, [0x140556048]
call fcn.140015e70
mov ecx, 0xfe
call fcn.14038e600
nop
mov rax, qword [rsp + 0x38]
movsxd rax, dword [rax + 8]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
mov rdx, rax
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
call fcn.140129e90
mov rax, qword [rsp + 0x38]
mov dword [rax + 0x2c], 0
jmp 0x14012bac4
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x50]
mov qword [rax], rcx
mov rax, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x2c], ecx
mov rax, qword [rsp + 0x38]
mov dword [rax + 0xc], 0
cmp qword [rsp + 0xd8], 0
je 0x14012bb2c
mov rax, qword [rsp + 0xd8]
movzx eax, word [rax]
cmp eax, 0x17
jne 0x14012baf9
mov qword [rsp + 0xa0], 0x1c
jmp 0x14012bb05
mov qword [rsp + 0xa0], reloc.WS2_32.dll_recv
mov rax, qword [rsp + 0x38]
add rax, 0x10
mov r9, qword [rsp + 0xa0]
mov r8, qword [rsp + 0xd8]
mov edx, 0x1c
mov rcx, rax
call fcn.140129e90
nop
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x30], 0
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x280], 0
jne 0x14012bb6c
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x280], rcx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x278], rcx
jmp 0x14012bb92
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x280]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x280], rcx
jmp 0x14012be81
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0x280], 0
jne 0x14012be81
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x258], 0
je 0x14012be81
cmp qword [rsp + 0xd8], 0
je 0x14012bbd7
mov rax, qword [rsp + 0xd8]
movzx eax, word [rax]
cmp eax, 1
jne 0x14012bbf9
xor r9d, r9d
mov r8d, dword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x68]
call qword [sym.imp.WS2_32.dll_send]
mov dword [rsp + 0x40], eax
jmp 0x14012bc5b
mov rax, qword [rsp + 0xd8]
movzx eax, word [rax]
cmp eax, 0x17
jne 0x14012bc17
mov qword [rsp + 0xa8], 0x1c
jmp 0x14012bc23
mov qword [rsp + 0xa8], reloc.WS2_32.dll_recv
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, dword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x68]
call qword [sym.imp.WS2_32.dll_sendto]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jle 0x14012bc6c
mov eax, dword [rsp + 0x58]
cmp dword [rsp + 0x40], eax
jl 0x14012bc88
cmp dword [rsp + 0x40], 0
jge 0x14012bdfb
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x14012bdfb
cmp dword [rsp + 0x40], 0
jge 0x14012bc97
mov dword [rsp + 0x40], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, gethostname
call fcn.140138010
mov qword [rsp + 0x38], rax
cmp dword [rsp + 0x60], 2
jne 0x14012bd9e
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x58]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x38]
mov dword [rcx + 8], eax
mov rax, qword [rsp + 0x38]
movsxd rax, dword [rax + 8]
mov r9d, 0x2eb
lea r8, [0x140556070]
mov edx, 1
mov rcx, rax
call fcn.1403ba980
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0xb0]
mov qword [rax], rcx
cmp qword [rsp + 0xb0], 0
jne 0x14012bd5b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9d, 0xfe
mov r8d, 0x2eb
lea rdx, [0x1405560c0]
xor ecx, ecx
call fcn.14014da80
mov r8d, 0x2eb
lea rdx, [0x140556110]
lea rcx, [0x140556158]
call fcn.140015e70
mov ecx, 0xfe
call fcn.14038e600
nop
mov rax, qword [rsp + 0x38]
movsxd rax, dword [rax + 8]
movsxd rcx, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0x38]
movsxd rdx, dword [rdx + 8]
mov r9, rax
mov r8, rcx
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
call fcn.140129e90
mov rax, qword [rsp + 0x38]
mov dword [rax + 0x2c], 0
jmp 0x14012bdcf
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x50]
mov qword [rax], rcx
mov rax, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x58]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x40]
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x2c], ecx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x280], rcx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x278], rcx
mov dword [rsp + 0x44], 0
jmp 0x14012be39
mov eax, dword [rsp + 0x58]
cmp dword [rsp + 0x40], eax
jne 0x14012be26
mov dword [rsp + 0x44], 1
cmp dword [rsp + 0x60], 0
jne 0x14012be24
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1403ba8b0
nop
jmp 0x14012be39
mov dword [rsp + 0x44], 0xfffffffc
mov rcx, qword [rsp + 0x30]
call fcn.14012f400
nop
cmp dword [rsp + 0x40], 0
jle 0x14012be81
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x74]
add eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
mov dword [rcx + 0x74], eax
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0x40]
mov eax, dword [rax + 0x70]
sub eax, ecx
mov rcx, qword [rsp + 0x30]
mov dword [rcx + 0x70], eax
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x70], 0
jge 0x14012be81
mov rax, qword [rsp + 0x30]
mov dword [rax + 0x70], 0
jmp 0x14012b8e6
mov qword [rsp + 0x78], 0
cmp dword [rsp + 0x64], 0
jne 0x14012beaa
mov rax, qword [rsp + 0x30]
add rax, 0x288
mov rcx, rax
call fcn.14012a180
nop
cmp dword [rsp + 0x68], 0
je 0x14012bec4
mov dword [rsp + 0x44], 0xfffffffb
mov rcx, qword [rsp + 0x30]
call fcn.14012f400
nop
cmp dword [rsp + 0x44], 1
je 0x14012beec
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x20]
call fcn.140137430
test eax, eax
jne 0x14012beec
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x20]
call fcn.140140d90
nop
mov eax, dword [rsp + 0x44]
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_accept
call fcn.14037c300
mov rax, rdi
add rsp, 0xc0
pop rdi
ret