Function at 0x140059990
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov rax, qword [0x1401550a0]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rsi, rcx
xor r14d, r14d
lea rcx, str.appdata
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rbp - 0x19], rax
lea rax, str.HavenMist
mov qword [rbp - 0x69], rax
mov qword [rbp - 0x61], recvfrom
lea rax, [rbp - 0x19]
mov qword [rbp - 0x51], rax
lea rax, [0x14006e0a0]
mov qword [rbp - 0x49], rax
movabs rax, 0xd000000000000000
mov qword [rbp - 0x59], rax
mov qword [rbp + 0x17], 1
lea rax, [rbp - 0x59]
mov qword [rbp + 0x1f], rax
movaps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp + 0x17], xmm0
movaps xmm1, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm1
lea r8, [rbp + 0x17]
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x11]
call fcn.140069440
nop
mov rdi, qword [rbp - 1]
lea rbx, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rbx, qword [rbp - 0x11]
call fcn.1400ff618
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rdi
lea r8, [rbp - 0x69]
mov edx, eax
lea rcx, [rbp - 0x39]
call fcn.140051560
nop
lea rcx, [rbp - 0x39]
call fcn.140051e40
movzx ebx, al
lea rcx, [rbp - 0x39]
call fcn.14005e080
nop
lea rcx, [rbp - 0x11]
call fcn.1400372e0
test bl, bl
jne 0x140059ac3
lea rdx, [rbp - 0x39]
call fcn.140059c30
mov rbx, rax
mov qword [rbp + 0x17], r14
lea rax, [0x140199518]
mov qword [rbp + 0x1f], rax
lea rdx, [rbp + 0x17]
mov rcx, rbx
call fcn.140051f90
cmp dword [rbp + 0x17], r14d
jne 0x140059c0d
lea rcx, [rbp - 0x39]
call fcn.14005e080
lea rdx, [rbp - 0x39]
call fcn.140059c30
nop
mov rcx, rax
call fcn.140051e40
movzx ebx, al
lea rcx, [rbp - 0x39]
call fcn.14005e080
test bl, bl
jne 0x140059b18
lea rdx, [rbp - 0x39]
call fcn.140059c30
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 8
jb 0x140059afe
mov rcx, qword [rax]
call fcn.1400ff878
shr rax, 0x20
test eax, eax
jne 0x140059bfb
lea rcx, [rbp - 0x39]
call fcn.14005e080
lea rdx, [rbp + 0x17]
call fcn.140059c30
nop
lea rdx, [rbp - 0x11]
mov rcx, rax
call fcn.1400517a0
nop
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str._sys_config.json
mov rcx, rax
call fcn.14005e1e0
mov qword [rbp - 0x59], r14
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x49], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x49], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdi, qword [rbp - 0x49]
lea rbx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rbx, qword [rbp - 0x59]
call fcn.1400ff618
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rdi
lea r8, [rbp - 0x69]
mov edx, eax
lea rcx, [rbp - 0x39]
call fcn.140051560
lea rdx, [rbp - 0x39]
mov rcx, rsi
call fcn.14005be80
lea rcx, [rbp - 0x39]
call fcn.14005e080
nop
lea rcx, [rbp - 0x59]
call fcn.1400372e0
nop
lea rcx, [rbp - 0x11]
call fcn.1400372e0
nop
lea rcx, [rbp + 0x17]
call fcn.14005e080
mov rcx, rsi
call fcn.140059e40
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400fe240
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov r8, rbx
mov edx, eax
lea rcx, str.create_directory
call fcn.140051d70
nop
mov r8, rbx
lea rdx, [rbp + 0x17]
lea rcx, str.create_directories
call fcn.140051de0
int3