Function at 0x140048a80
Capabilities:
Access firewall policy via inetfwpolicy2
Access firewall rule properties via inetfwrule

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov rax, qword [0x1403e9140]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r13, r9
movzx r14d, r8b
mov rsi, rdx
mov rdi, rcx
xor ebx, ebx
lea edx, [rbx + 2]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x140048beb
movdqa xmm0, xmmword [0x1403c82d0]
movdqu xmmword [rbp - 0x51], xmm0
mov dword [rbp - 0x41], 0x8190000
mov qword [rbp - 0x3d], 0x80
mov dword [rbp - 0x34], 0xc7c777
mov word [rbp - 0x30], 0x305
mov byte [rbp - 0x2e], 0xb3
mov byte [rbp - 0x35], bl
lea r8, [rbp - 0x3c]
nop dword [rax]
lea r11d, [rbx + rbx*2]
movzx ecx, byte [rbp + r11 - 0x51]
mov byte [r8], cl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, byte [rbp - 0x32]
add r10b, dil
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [r11 + 1]
movzx r9d, byte [rbp + rax - 0x51]
nop
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048b46
inc dl
cmp dl, 4
jne 0x140048b30
jmp 0x140048b54
movsx ecx, r10b
movzx eax, byte [rbp - 0x2f]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [r11 + 2]
lea r10, [rbp - 0x51]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048b86
inc dl
cmp dl, 8
jne 0x140048b70
jmp 0x140048b94
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x30]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140048bb2
inc cl
cmp cl, 5
jne 0x140048ba0
jmp 0x140048bc0
movsx edx, byte [r8]
movzx eax, byte [rbp - 0x31]
btc edx, eax
mov byte [r8], dl
movzx eax, byte [rbp - 0x33]
add al, dil
xor byte [r8], al
inc ebx
inc r8
cmp ebx, 7
jne 0x140048b00
lea rdx, [rbp - 0x3c]
mov rcx, r13
call fcn.140081d50
xor al, al
jmp 0x140049c12
mov qword [rbp - 0x21], rbx
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
lea r9, [0x1403c43f8]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1403c43e8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140048d4b
call qword [sym.imp.ole32.dll_CoUninitialize]
movdqa xmm0, xmmword [0x1403c82e0]
movdqu xmmword [rbp - 0x51], xmm0
mov dword [rbp - 0x41], 0x11b0000
mov qword [rbp - 0x3d], 0x50
mov dword [rbp - 0x34], 0x7777c7
mov word [rbp - 0x30], 0x305
mov byte [rbp - 0x2e], 0xb8
mov byte [rbp - 0x35], bl
lea r8, [rbp - 0x3c]
nop dword [rax]
nop dword [rax + rax]
lea r11d, [rbx + rbx*2]
movzx ecx, byte [rbp + r11 - 0x51]
mov byte [r8], cl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, byte [rbp - 0x32]
add r10b, dil
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [r11 + 1]
movzx r9d, byte [rbp + rax - 0x51]
nop
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048ca6
inc dl
cmp dl, 4
jne 0x140048c90
jmp 0x140048cb4
movsx ecx, r10b
movzx eax, byte [rbp - 0x2f]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [r11 + 2]
lea r10, [rbp - 0x51]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048ce6
inc dl
cmp dl, 8
jne 0x140048cd0
jmp 0x140048cf4
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x30]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140048d12
inc cl
cmp cl, 5
jne 0x140048d00
jmp 0x140048d20
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x31]
btc ecx, eax
mov byte [r8], cl
movzx eax, byte [rbp - 0x33]
add al, dil
xor byte [r8], al
inc ebx
inc r8
cmp ebx, 7
jne 0x140048c60
lea rdx, [rbp - 0x3c]
mov rcx, r13
call fcn.140081d50
xor al, al
jmp 0x140049c12
mov qword [rbp - 0x29], rbx
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
lea r9, [0x1403c43d8]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1403c43c8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140048eab
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
movdqa xmm0, xmmword [0x1403c82f0]
movdqu xmmword [rbp - 0x51], xmm0
mov dword [rbp - 0x41], 0x130000
mov qword [rbp - 0x3d], 0x40
mov dword [rbp - 0x34], 0xb3b3b8
mov word [rbp - 0x30], 0x305
mov byte [rbp - 0x2e], Ordinal_200
mov byte [rbp - 0x35], bl
lea r8, [rbp - 0x3c]
nop
lea r11d, [rbx + rbx*2]
movzx ecx, byte [rbp + r11 - 0x51]
mov byte [r8], cl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, byte [rbp - 0x32]
add r10b, dil
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [r11 + 1]
movzx r9d, byte [rbp + rax - 0x51]
nop
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048e06
inc dl
cmp dl, 4
jne 0x140048df0
jmp 0x140048e14
movsx ecx, r10b
movzx eax, byte [rbp - 0x2f]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [r11 + 2]
lea r10, [rbp - 0x51]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048e46
inc dl
cmp dl, 8
jne 0x140048e30
jmp 0x140048e54
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x30]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140048e72
inc cl
cmp cl, 5
jne 0x140048e60
jmp 0x140048e80
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x31]
btc ecx, eax
mov byte [r8], cl
movzx eax, byte [rbp - 0x33]
add al, dil
xor byte [r8], al
inc ebx
inc r8
cmp ebx, 7
jne 0x140048dc0
lea rdx, [rbp - 0x3c]
mov rcx, r13
call fcn.140081d50
xor al, al
jmp 0x140049c12
lea r8, [0x1403e9d58]
lea rdx, [0x1403e9d38]
lea rcx, [rbp - 0x51]
call fcn.14006f370
nop
lea rdx, [0x1403e9d78]
cmp qword [reloc.WS2_32.dll_getsockopt], 7
cmova rdx, qword [0x1403e9d78]
mov r8, qword [0x1403e9d88]
mov rcx, rax
call fcn.140091a20
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], rbx
mov qword [rbp + 7], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x11], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 1], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rcx, [rbp - 0x51]
call fcn.140091b10
cmp qword [rbp - 1], 0
jne 0x140049069
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
movdqa xmm0, xmmword [0x1403c82e0]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c7940]
movdqu xmmword [rbp - 0x79], xmm1
mov qword [rbp - 0x69], reloc.WS2_32.dll_recv
mov dword [rbp - 0x61], 0
mov dword [rbp - 0x5c], 0x7777c7
mov word [rbp - 0x58], 0x305
mov byte [rbp - 0x56], 0xb8
mov byte [rbp - 0x5d], 0
lea r8, [rbp - 0x68]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r10d, [rax + rbx]
movzx r11d, r10b
add r11b, byte [rbp - 0x5a]
xor r11b, cl
mov byte [r8], r11b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140048fc6
inc dl
cmp dl, 4
jne 0x140048fb0
jmp 0x140048fd4
movsx ecx, r11b
movzx eax, byte [rbp - 0x57]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r11, [rsp + 0x30]
add r11, rcx
movzx r9d, byte [r11]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049006
inc dl
cmp dl, 8
jne 0x140048ff0
jmp 0x140049014
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x58]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140049032
inc cl
cmp cl, 5
jne 0x140049020
jmp 0x140049040
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x59]
btc ecx, eax
mov byte [r8], cl
add r10b, byte [rbp - 0x5b]
xor byte [r8], r10b
inc ebx
inc r8
cmp ebx, 0xb
jne 0x140048f80
lea rdx, [rbp - 0x68]
mov rcx, r13
call fcn.140081d50
xor sil, sil
jmp 0x140049c05
cmp qword [rdi + 0x18], 7
jbe 0x140049073
mov rdi, qword [rdi]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r12, rax
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova rcx, qword [rbp - 0x11]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r15, rax
cmp qword [rsi + 0x18], 7
jbe 0x1400490a0
mov rsi, qword [rsi]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rsi, rax
mov rcx, qword [rbp - 0x29]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0x40]
mov rdx, r12
call r8
test eax, eax
jns 0x1400491de
movdqa xmm0, xmmword [0x1403c7990]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c71d0]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0x77c777
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], 0xb8
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049146
inc dl
cmp dl, 4
jne 0x140049130
jmp 0x140049154
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049186
inc dl
cmp dl, 8
jne 0x140049170
jmp 0x140049194
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1400491b2
inc cl
cmp cl, 5
jne 0x1400491a0
jmp 0x1400491c0
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x140049100
lea rdx, [rbp - 0x71]
jmp 0x140049a29
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 0x60]
test eax, eax
jns 0x14004930a
movdqa xmm0, xmmword [0x1403c8370]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c71a0]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0xb3b8b3
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], Ordinal_200
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049276
inc dl
cmp dl, 4
jne 0x140049260
jmp 0x140049284
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1400492b6
inc dl
cmp dl, 8
jne 0x1400492a0
jmp 0x1400492c4
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1400492e2
inc cl
cmp cl, 5
jne 0x1400492d0
jmp 0x1400492f0
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x140049230
jmp 0x140049a25
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov edx, 6
call qword [rax + 0x80]
test eax, eax
jns 0x14004943e
movdqa xmm0, xmmword [0x1403c7990]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c7160]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0x77c777
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], 0xb8
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop dword [rax + rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1400493a6
inc dl
cmp dl, 4
jne 0x140049390
jmp 0x1400493b4
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1400493e6
inc dl
cmp dl, 8
jne 0x1400493d0
jmp 0x1400493f4
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140049412
inc cl
cmp cl, 5
jne 0x140049400
jmp 0x140049420
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x140049360
lea rdx, [rbp - 0x71]
jmp 0x140049a29
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 0x90]
test eax, eax
jns 0x14004956e
movdqa xmm0, xmmword [0x1403c8370]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c7180]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0xb3b8b3
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], Ordinal_200
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1400494d6
inc dl
cmp dl, 4
jne 0x1400494c0
jmp 0x1400494e4
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049516
inc dl
cmp dl, 8
jne 0x140049500
jmp 0x140049524
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140049542
inc cl
cmp cl, 5
jne 0x140049530
jmp 0x140049550
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x140049490
lea rdx, [rbp - 0x71]
jmp 0x140049a29
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
lea edx, [r14 + 1]
call qword [rax + 0xe0]
test eax, eax
jns 0x14004969e
movdqa xmm0, xmmword [0x1403c7990]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c7170]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0x77c777
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], 0xb8
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop dword [rax + rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049606
inc dl
cmp dl, 4
jne 0x1400495f0
jmp 0x140049614
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049646
inc dl
cmp dl, 8
jne 0x140049630
jmp 0x140049654
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140049672
inc cl
cmp cl, 5
jne 0x140049660
jmp 0x140049680
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x1400495c0
lea rdx, [rbp - 0x71]
jmp 0x140049a29
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov edx, 0xffffffff
call qword [rax + 0x110]
test eax, eax
jns 0x1400497ce
movdqa xmm0, xmmword [0x1403c8370]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c7190]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0xb3b8b3
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], Ordinal_200
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049736
inc dl
cmp dl, 4
jne 0x140049720
jmp 0x140049744
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049776
inc dl
cmp dl, 8
jne 0x140049760
jmp 0x140049784
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1400497a2
inc cl
cmp cl, 5
jne 0x140049790
jmp 0x1400497b0
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x1400496f0
lea rdx, [rbp - 0x71]
jmp 0x140049a29
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov edx, 0x7fffffff
call qword [rax + pe_nt_image_headers64]
test eax, eax
jns 0x1400498fe
movdqa xmm0, xmmword [0x1403c7990]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c7150]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0x77c777
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], 0xb8
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049866
inc dl
cmp dl, 4
jne 0x140049850
jmp 0x140049874
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1400498a6
inc dl
cmp dl, 8
jne 0x140049890
jmp 0x1400498b4
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1400498d2
inc cl
cmp cl, 5
jne 0x1400498c0
jmp 0x1400498e0
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x140049820
lea rdx, [rbp - 0x71]
jmp 0x140049a29
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x150]
test eax, eax
jns 0x140049a64
movdqa xmm0, xmmword [0x1403c8370]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1403c71c0]
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x68], 0xb3b8b3
mov word [rbp - 0x64], 0x305
mov byte [rbp - 0x62], Ordinal_200
mov byte [rbp - 0x69], 0
lea r8, [rbp - 0x71]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r11d, [rax + rbx]
movzx r10d, r11b
add r10b, byte [rbp - 0x66]
xor r10b, cl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049996
inc dl
cmp dl, 4
jne 0x140049980
jmp 0x1400499a4
movsx ecx, r10b
movzx eax, byte [rbp - 0x63]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r10, [rsp + 0x30]
add r10, rcx
movzx r9d, byte [r10]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1400499d6
inc dl
cmp dl, 8
jne 0x1400499c0
jmp 0x1400499e4
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x64]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140049a02
inc cl
cmp cl, 5
jne 0x1400499f0
jmp 0x140049a10
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x65]
btc ecx, eax
mov byte [r8], cl
add r11b, byte [rbp - 0x67]
xor byte [r8], r11b
inc ebx
inc r8
cmp ebx, 8
jne 0x140049950
lea rdx, [rbp - 0x71]
mov rcx, r13
call fcn.140081d50
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor sil, sil
jmp 0x140049c05
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbp - 0x19], rbx
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
lea rdx, [rbp - 0x19]
call qword [rax + 0x90]
test eax, eax
js 0x140049aae
mov rcx, qword [rbp - 0x19]
mov rax, qword [rcx]
mov rdx, qword [rbp - 0x29]
call qword [rax + 0x40]
mov sil, 1
jmp 0x140049bd1
xor sil, sil
movdqa xmm0, xmmword [0x1403c8300]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x79], 0x81c1000
mov qword [rbp - 0x75], __WSAFDIsSet
mov dword [rbp - 0x6c], 0xb8b8b3
mov word [rbp - 0x68], 0x305
mov byte [rbp - 0x66], 0x77
mov byte [rbp - 0x6d], sil
lea r8, [rbp - 0x74]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx ecx, byte [rsp + rdi + 0x30]
mov byte [r8], cl
movzx eax, bl
add al, al
lea r10d, [rax + rbx]
movzx r11d, r10b
add r11b, byte [rbp - 0x6a]
xor r11b, cl
mov byte [r8], r11b
xor dl, dl
lea eax, [rdi + 1]
movzx r9d, byte [rsp + rax + 0x30]
nop dword [rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049b36
inc dl
cmp dl, 4
jne 0x140049b20
jmp 0x140049b44
movsx ecx, r11b
movzx eax, byte [rbp - 0x67]
btc ecx, eax
mov byte [r8], cl
mov dl, 5
lea ecx, [rdi + 2]
lea r11, [rsp + 0x30]
add r11, rcx
movzx r9d, byte [r11]
nop word [rax + rax]
movzx eax, r9b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140049b76
inc dl
cmp dl, 8
jne 0x140049b60
jmp 0x140049b84
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x68]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140049ba2
inc cl
cmp cl, 5
jne 0x140049b90
jmp 0x140049bb0
movsx ecx, byte [r8]
movzx eax, byte [rbp - 0x69]
btc ecx, eax
mov byte [r8], cl
add r10b, byte [rbp - 0x6b]
xor byte [r8], r10b
inc ebx
inc r8
cmp ebx, 7
jne 0x140049af0
lea rdx, [rbp - 0x74]
mov rcx, r13
call fcn.140081d50
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x140049be0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x140049bef
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x140049bfe
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
lea rcx, [rbp - 0x11]
call fcn.140091b10
movzx eax, sil
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.140362750
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret