Function at 0x5000b2d0
Capabilities:
Create thread
Initialize winsock library

Disassembly:
sub rsp, 0x1e8
cmp dword [0x50012234], 3
jne 0x5000b2e7
mov byte [reloc.WS2_32.dll_accept], 0
movzx eax, byte [0x50012233]
test eax, eax
je 0x5000b3b3
cmp dword [0x50012234], 2
jne 0x5000b3b3
mov byte [rsp + 0x30], 0x48
mov byte [rsp + 0x31], reloc.WS2_32.dll_gethostbyaddr
mov byte [rsp + 0x32], 0xc0
mov byte [rsp + 0x33], 0x48
mov byte [rsp + 0x34], 0xff
mov byte [rsp + 0x35], 0xc0
mov byte [rsp + 0x36], 0xc3
mov eax, 1
imul rax, rax, 0x26c550
mov rcx, qword [0x50012808]
add rcx, rax
mov rax, rcx
mov r9b, 1
mov r8d, 7
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.50005ca0
mov eax, 1
imul rax, rax, 0x2b4fd0
mov rcx, qword [0x50012808]
add rcx, rax
mov rax, rcx
mov r9b, 1
mov r8d, 7
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.50005ca0
mov eax, 1
imul rax, rax, 0x2b5030
mov rcx, qword [0x50012808]
add rcx, rax
mov rax, rcx
mov r9b, 1
mov r8d, 7
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.50005ca0
movzx eax, byte [0x50012232]
test eax, eax
je 0x5000b3c8
call fcn.5000b880
jmp 0x5000b770
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x5000b464
lea rdx, [rsp + 0x40]
mov cx, 0x202
call sub.WS2_32.dll_WSAStartup
test eax, eax
jne 0x5000b464
lea rax, [0x50012818]
mov byte [rax + 4], 0
lea rax, [0x50012818]
mov dword [rax], 0xffffffff
lea rax, [0x50012818]
mov qword [rax + 8], 0
lea rax, [0x50012818]
xor ecx, ecx
mov word [rax + 0x10], cx
mov byte [0x5001281c], 1
movzx eax, word [0x500170ac]
mov word [0x50012828], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [0x50012818]
lea r8, [0x5000d3f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.license.blueskyplan.com
call fcn.50008ab0
mov qword [0x50012238], rax
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x5000b506
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.LIBEAY32.dll
lea rdx, str.MD5_Update
lea rcx, [0x50012470]
call fcn.5000dca0
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.libcrypto_1_1_x64.dll
lea rdx, str.MD5_Update
lea rcx, [0x500124e0]
call fcn.5000dbc0
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.Qt5Core.dll
lea rdx, str._write_QIODevice__QEAA_JAEBVQByteArray___Z
lea rcx, [0x50012630]
call fcn.5000dd80
jmp 0x5000b770
movzx eax, byte [0x50012231]
test eax, eax
je 0x5000b68b
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.ws2_32.dll
lea rdx, str.WSAConnect
lea rcx, [0x50012240]
call fcn.5000da00
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.ws2_32.dll
lea rdx, str.WSASend
lea rcx, [0x500122b0]
call fcn.5000d920
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.ws2_32.dll
lea rdx, str.WSARecv
lea rcx, [0x50012320]
call fcn.5000d840
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.Qt5Network.dll
lea rdx, str._readData_QSslSocket__MEAA_JPEAD_J_Z
lea rcx, [0x50012550]
call fcn.5000de60
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.Qt5Network.dll
lea rdx, str._writeData_QSslSocket__MEAA_JPEBD_J_Z
lea rcx, [0x500125c0]
call fcn.5000df40
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.Qt5Core.dll
lea rdx, str._readAll_QIODevice__QEAA_AVQByteArray__XZ
lea rcx, [0x50012400]
call fcn.5000dae0
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.Qt5Core.dll
lea rdx, str._write_QIODevice__QEAA_JPEBD_J_Z
lea rcx, [0x50012630]
call fcn.5000dd80
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.libcrypto_1_1_x64.dll
lea rdx, str.RSA_verify
lea rcx, [0x50012710]
call fcn.5000d5a0
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.libcrypto_1_1_x64.dll
lea rdx, str.X509_verify_cert
lea rcx, [0x50012780]
call fcn.5000d680
jmp 0x5000b770
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x5000b73e
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.ws2_32.dll
lea rdx, str.GetAddrInfoW
lea rcx, [0x50012390]
call fcn.5000d760
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.ws2_32.dll
lea rdx, str.WSAConnect
lea rcx, [0x50012240]
call fcn.5000da00
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.libcrypto_1_1_x64.dll
lea rdx, str.RSA_verify
lea rcx, [0x50012710]
call fcn.5000d5a0
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.libcrypto_1_1_x64.dll
lea rdx, str.X509_verify_cert
lea rcx, [0x50012780]
call fcn.5000d680
cmp dword [0x50012234], 3
jne 0x5000b770
mov qword [rsp + 0x20], 0
mov r9d, 3
lea r8, str.Qt5Core.dll
lea rdx, str._readAll_QIODevice__QEAA_AVQByteArray__XZ
lea rcx, [0x50012400]
call fcn.5000dae0
add rsp, 0x1e8
ret