Function at 0x14004ced0
Capabilities:
Get system information on windows
Make suspicious ntquerysysteminformation call
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1401dc800]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov byte [rsp + 0x28], r8b
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x48], rcx
xor r15d, r15d
mov esi, r15d
mov qword [rbp - 0x80], r15
mov dword [rbp - 0x18], r15d
lea r9, [rbp - 0x18]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0xb]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14004cf8a
nop word [rax + rax]
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x18]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
lea r9, [rbp - 0x18]
mov r8d, dword [rbp - 0x18]
mov rdx, rax
mov ecx, listen
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14004cf40
mov qword [rbp - 0x80], rsi
test eax, eax
js 0x14004f5f3
mov eax, r15d
mov dword [rsp + 0x2c], eax
cmp dword [rsi], r15d
jbe 0x14004f5f3
movzx edi, byte [rsp + 0x28]
movzx ebx, byte [rsp + 0x28]
movzx r12d, byte [rsp + 0x28]
movzx r14d, byte [rsp + 0x28]
mov qword [rsp + 0x20], r14
movzx r13d, byte [rsp + 0x28]
nop dword [rax]
nop word [rax + rax]
imul rcx, rax, 0x128
lea rax, [rcx + rsi]
mov qword [rbp - 0x50], rax
movzx eax, word [rax + 0x2e]
add rax, rcx
add rsi, rax
movzx edx, dil
lea rcx, [rbp + 0x10]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rsi + r8 + 0x30], 0
jne 0x14004d000
lea rdx, [rsi + 0x30]
lea rcx, [rbp + 0x10]
call fcn.140004460
nop
lea rcx, [rbp + 0x10]
call fcn.140001bc0
mov rdx, qword [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x14004f5d4
mov rdx, qword [rbp - 0x50]
add rdx, 0x30
lea rcx, [rbp - 0x10]
call fcn.1400042d0
nop
mov dword [rsp + 0x58], 0x1f19121b
mov dword [rsp + 0x5c], 0x1e1e0209
mov word [rsp + 0x60], 0x11f
mov byte [rsp + 0x62], 0xac
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x63], xmm0
mov qword [rsp + 0x73], rax
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
mov rsi, r15
cmp rsi, 0x23
jae 0x14004dc7f
movzx r10d, byte [rsp + rsi + 0x58]
movzx r11d, r10b
cmp rax, rsi
ja 0x14004dc76
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14004d0db
movabs rdx, 0xdfb0e4e042f3849
add rdx, rsi
mov rcx, rdx
and rcx, r10
imul r12, rcx, 0xfffffffffffffffe
add r12, rdx
add r12, r10
inc r12b
jmp 0x14004d108
je 0x14004dc00
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004db74
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004db0d
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004dac0
movzx r11d, r10b
nop dword [rax]
cmp r9, rsi
ja 0x14004dc6d
lea rdx, [r9 + 5]
cmp rax, rdx
jae 0x14004d148
movabs r8, 0x25982c6657df9dfd
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
add r12b, 0x15
add r12b, r8b
jmp 0x14004d180
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004da9d
inc rcx
cmp rax, rcx
je 0x14004da72
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004da4d
cmp rax, rdx
je 0x14004da27
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rsi
jbe 0x14004d728
nop dword [rax]
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x14004d70a
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14004d6e0
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x14004d6b9
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x14004d697
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004d676
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x14004d655
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x14004d637
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14004d616
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004d5e7
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x14004d190
lea rax, [r9 + 3]
lea r9, [rax + 3]
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x14004dc50
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x14004dc33
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x14004d39a
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x14004d371
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14004d348
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14004d594
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x14004d545
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x14004d501
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x14004d4de
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14004d190
lea rax, [r9 + 8]
lea r9, [rax + 0x41]
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x14004d4b5
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x14004d495
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x14004d478
lea rcx, [r9 + 0x10]
cmp rax, rcx
ja 0x14004d45d
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x14004d442
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x14004d425
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14004d404
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x14004d3e0
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x14004d3c3
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x14004d190
lea rax, [r9 + 2]
lea r9, [rax + 0x3e8]
jmp 0x14004d190
movabs r8, 0x9750c45c45a38fa3
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
sub r12b, 0x75
add r12b, r8b
jmp 0x14004d180
movabs r8, 0x7b5aa7c03d451f11
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
sub r12b, 0x77
add r12b, r8b
jmp 0x14004d110
movabs r8, 0x5f648b2434e6ae7f
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
sub r12b, 0x79
add r12b, r8b
jmp 0x14004d0a7
lea r8d, [rsi - 0x18]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x58
jmp 0x14004dae5
lea edx, [rsi + 0x56]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
sub r12b, 0x5a
inc r9
dec rsi
inc rsi
jmp 0x14004d093
lea edx, [rsi - 0x3c]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
sub r12b, 0x5c
dec rsi
inc rsi
jmp 0x14004d093
lea r8d, [rsi + 0x32]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x5e
jmp 0x14004db32
lea edx, [rsi - 0x60]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
sub r12b, 0x60
jmp 0x14004db58
lea edx, [rsi + 0xe]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
sub r12b, 0x62
jmp 0x14004db5b
lea r8d, [rsi + 0x7c]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x64
jmp 0x14004db99
lea r8d, [rsi - 0x16]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x66
add r12b, r8b
jmp 0x14004dbbf
lea edx, [rsi + 0x58]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
sub r12b, 0x68
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
lea edx, [rsi - 0x15]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
sub r12b, 0x6d
mov byte [rsp + rsi + 0x58], r12b
inc rsi
jmp 0x14004d093
lea r8d, [rsi + 0x59]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x6f
add r12b, r8b
cmp r9, 0x28
jb 0x14004d4f4
lea r8d, [rsi + 0x16]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
add dl, r8b
lea r12d, [rdx*2 - 0x34]
jmp 0x14004dae8
lea r8d, [rsi - 0x39]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x71
add r12b, r8b
cmp rax, 0x200
jae 0x14004d9eb
lea rcx, [r9 + 9]
cmp rax, rcx
jbe 0x14004d907
lea r8d, [rsi + 0x62]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_41
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004d519
lea r8d, [rsi + 0x35]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
sub r12b, 0x73
add r12b, r8b
lea rcx, [r9 + rax]
cmp rcx, 0x7a
je 0x14004da0c
lea rcx, [r9 + 0x40]
cmp rax, rcx
jbe 0x14004d80f
lea r8d, [rsi + 0x65]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
add r12b, 0x3d
jmp 0x14004d55d
lea r8d, [rsi - 0x12]
movzx ecx, r10b
and cl, r8b
mov edx, 0x3f
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
lea r8d, [rsi + 0x5c]
movzx ecx, r10b
and cl, r8b
mov edx, 0x3e
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
jmp 0x14004dbbf
lea r8d, [rsi - 0x36]
movzx ecx, r10b
and cl, r8b
mov edx, 0x3d
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004db99
lea r8d, [rsi + 0x38]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
jmp 0x14004db5b
lea r8d, [rsi - 0x5a]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_60
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
jmp 0x14004db58
movzx r11d, sil
lea r8d, [r11 + 0x14]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_60
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004db36
lea r8d, [rsi - 0x7e]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_gethostname
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
dec rsi
inc rsi
jmp 0x14004d093
lea r8d, [rsi - 0x10]
movzx ecx, r10b
and cl, r8b
mov edx, gethostname
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
inc r9
dec rsi
inc rsi
jmp 0x14004d093
lea r8d, [rsi + 0x5e]
movzx ecx, r10b
and cl, r8b
mov edx, gethostname
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004dae5
lea rcx, [r9 + 0xa]
cmp rax, rcx
jae 0x14004d755
movabs rdx, 0xdfb0e4e042f3849
add rdx, rsi
movzx ecx, dl
and cl, r10b
add cl, cl
sub r11b, cl
lea r12d, [rdx + r11]
inc r12b
jmp 0x14004d5af
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004d78d
lea r8d, [rsi - 6]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
inc rcx
cmp rax, rcx
jne 0x14004d7b6
lea r8d, [rsi - 0x50]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_26
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
jmp 0x14004db5b
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004d7e0
lea r8d, [rsi + 0x42]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_26
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
jmp 0x14004db58
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004d5af
movzx r11d, sil
lea r8d, [r11 - 0x2c]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_26
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004db36
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004d835
lea r8d, [rsi - 9]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
add r12b, 0x3f
jmp 0x14004dae5
inc rcx
cmp rax, rcx
jne 0x14004d85e
lea edx, [rsi + 0x1b]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
add r12b, 0x43
dec rsi
inc rsi
jmp 0x14004d093
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004d882
lea edx, [rsi - 0x2f]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
add r12b, 0x49
jmp 0x14004db5b
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004d8a8
lea r8d, [rsi + 0x63]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
add r12b, 0x4b
jmp 0x14004db99
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004d8d1
lea r8d, [rsi - 0xb]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r12d, r10b
sub r12b, cl
add r12b, 0x4d
add r12b, r8b
jmp 0x14004dbbf
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x14004d560
lea edx, [rsi - 0x79]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r12d, [rdx + r10]
add r12b, 0x4f
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004d93f
lea r8d, [rsi - 0xc]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_45
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
inc rcx
cmp rax, rcx
jne 0x14004d965
lea r8d, [rsi + 0x18]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_45
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004db99
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004d990
movzx r11d, sil
lea r8d, [r11 - 0x32]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004db36
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004d9c0
lea r8d, [rsi + 0x60]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
add r12b, r8b
dec rsi
inc rsi
jmp 0x14004d093
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004d51c
lea r8d, [rsi - 0x7c]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r10b
jmp 0x14004dae5
movzx r11d, sil
lea r8d, [r11 - 0x58]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
sub dl, cl
add dl, 0x34
lea r12d, [rdx + rdx]
jmp 0x14004db36
lea r8d, [rsi + 0x3a]
movzx ecx, r10b
and cl, r8b
mov edx, gethostname
sub dl, cl
lea r12d, [rdx + rdx]
jmp 0x14004db99
movabs r8, 0xe952f4aa9274b1fb
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
add r12b, 0x23
jmp 0x14004db99
movabs rdx, 0xcd5cd80e8a164169
add rdx, rsi
movzx ecx, dl
and cl, r10b
add cl, cl
sub r11b, cl
lea r12d, [rdx + r11]
add r12b, 0x21
jmp 0x14004db5b
movabs rdx, 0x797a823a70faefb3
add rdx, rsi
movzx ecx, dl
and cl, r10b
add cl, cl
sub r11b, cl
lea r12d, [rdx + r11]
add r12b, 0x1b
dec rsi
inc rsi
jmp 0x14004d093
movabs r8, 0x418e4902603e0e8f
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
add r12b, 0x17
jmp 0x14004dae5
movabs r8, 0x9a20fca4f812d6b
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
add r12b, 0x13
movzx r10d, r11b
add r12b, r8b
lea edx, [rsi + 0x5f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
add dl, 0x67
add dl, r10b
mov byte [rsp + rsi + 0x58], dl
inc r9
dec rsi
inc rsi
jmp 0x14004d093
movabs r8, 0xb5bfb9f63665dbb5
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
add r12b, 0xd
movzx r10d, r11b
movzx r11d, sil
add r12b, r8b
sub r11b, 0xf
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
add r11b, 0x69
add r11b, r10b
add r11b, r12b
mov byte [rsp + rsi + 0x58], r11b
add rax, r9
movzx ecx, r12b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rsi, rdx
inc rsi
jmp 0x14004d093
movabs r8, 0x61dd64221d4a89ff
add r8, rsi
movzx ecx, r8b
and cl, r10b
add cl, cl
movzx r12d, r11b
sub r12b, cl
add r12b, 7
movzx r10d, r11b
add r12b, r8b
lea edx, [rsi - 0x7d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
add dl, 0x6b
add dl, r10b
movzx ecx, dl
mov byte [rsp + rsi + 0x58], cl
inc r9
add rcx, r9
sub rsi, rcx
lea r8d, [rsi - 0x34]
movzx ecx, r8b
and cl, r10b
mov edx, gethostname
sub dl, cl
add dl, dl
add dl, r8b
add dl, r10b
mov byte [rsp + rsi + 0x58], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
movabs rdx, 0x29f12aea0c8da8db
add rdx, rsi
movzx ecx, dl
and cl, r10b
add cl, cl
sub r11b, cl
lea r12d, [rdx + r11]
add r12b, 3
movzx ecx, byte [rsp + rsi + 0x58]
add rcx, r9
add rsi, rcx
inc rsi
jmp 0x14004d093
sub sil, 0x13
movzx ecx, r10b
and cl, sil
add cl, cl
sub r10b, cl
lea r12d, [rsi + r10]
sub r12b, 0x7b
jmp 0x14004d090
add sil, 0x5b
movzx eax, r10b
and al, sil
add al, al
sub r10b, al
lea r12d, [rsi + r10]
sub r12b, 0x7d
jmp 0x14004d080
lea rcx, [rbp + 0x179d064]
jmp 0x14004dc84
lea rcx, [rbp + 0xa908ad]
jmp 0x14004dc84
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
movzx edx, bl
lea rcx, [rbp - 0x38]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x14004dca1
mov rdx, rsi
lea rcx, [rbp - 0x38]
call fcn.140004460
nop
mov word [rbp - 0x78], 0x79ca
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x76], xmm0
movups xmmword [rbp - 0x66], xmm0
mov byte [rbp - 0x56], al
nop
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
mov rsi, r15
cmp rsi, 0x23
jae 0x14004e86d
movzx r11d, byte [rbp + rsi - 0x78]
mov edx, r11d
cmp r8, rsi
ja 0x14004e864
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004dd30
movabs rcx, 0x309486f7fbdc74cf
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r14, rax, 0xfffffffffffffffe
add r14, rcx
add r14, rdx
add r14b, 0x57
mov qword [rsp + 0x20], r14
jmp 0x14004dd5c
je 0x14004e7e3
inc rax
cmp r8, rax
je 0x14004e783
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004e739
lea rax, [r9 + 8]
cmp r8, rax
je 0x14004e6f0
movzx r10d, sil
cmp r9, rsi
ja 0x14004e85b
lea rax, [r9 + 0x41]
cmp r8, rax
jae 0x14004dd91
lea ecx, [r10 - 5]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x23
add cl, r11b
movzx r14d, cl
mov qword [rsp + 0x20], r14
jmp 0x14004ddd1
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004e6dd
inc rax
cmp r8, rax
je 0x14004e6b3
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004e65c
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004e63d
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004e624
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x14004e36e
nop
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14004e351
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004e321
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004e2f7
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004e2da
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14004e2bb
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14004e299
lea rcx, [r9 + 0x1000]
cmp r8, rcx
je 0x14004e27c
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004e25d
lea rax, [r9 + 9]
cmp r8, rax
je 0x14004e240
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14004dde0
mov r8, rcx
lea r9, [rcx + 0x61]
lea rax, [r9 + 0x7a]
cmp rcx, rax
jb 0x14004e839
lea rax, [r9 + 9]
cmp rcx, rax
jb 0x14004e817
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x14004dfd5
lea rax, [r9 + 0x28]
cmp rcx, rax
jb 0x14004dfb3
lea rax, [r9 + 0x41]
cmp rcx, rax
jb 0x14004df91
lea rax, [r9 + 0x2a]
cmp rcx, rax
jb 0x14004e1eb
lea rcx, [r9 + 2]
cmp r8, rcx
jb 0x14004e194
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14004e14f
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14004e125
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14004dde0
mov r8, rcx
lea r9, [rcx + 3]
lea rax, [r9 + 4]
cmp rcx, rax
ja 0x14004e108
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x14004e0e9
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x14004e0cc
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x14004e0aa
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x14004e08b
lea rax, [r9 + 8]
cmp rcx, rax
ja 0x14004e06e
lea rcx, [r9 + 0xa]
cmp r8, rcx
ja 0x14004e044
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14004e014
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14004dff7
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14004dde0
mov r8, rcx
lea r9, [rcx + 0x10]
jmp 0x14004dde0
lea ecx, [r10 + 0x65]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x3d
add cl, r11b
movzx r14d, cl
mov qword [rsp + 0x20], r14
jmp 0x14004ddd1
lea ecx, [r10 - 0x39]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x71
add cl, r11b
movzx r14d, cl
mov qword [rsp + 0x20], r14
jmp 0x14004dd60
add r10b, 0x29
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r14d, [r11 + r10]
sub r14b, 0x1f
mov qword [rsp + 0x20], r14
jmp 0x14004dcf6
lea edx, [r10 - 0x28]
movzx eax, r11b
and al, dl
mov ecx, recv
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
jmp 0x14004e708
add r10b, 0x3a
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
inc r9
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
sub r10b, 0x64
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ecx, [r10 + r11]
sub cl, 0x44
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
lea edx, [r10 - 2]
movzx eax, r11b
and al, dl
mov ecx, 7
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
jmp 0x14004e670
add r10b, 0x60
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
jmp 0x14004e68f
sub r10b, 0x3e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x4e
mov qword [rsp + 0x20], r14
jmp 0x14004e69a
lea edx, [r10 + 0x24]
movzx eax, r11b
and al, dl
mov ecx, 2
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
jmp 0x14004e759
sub r10b, 0x7a
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_45
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
jmp 0x14004e79f
sub r10b, 0x18
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x58
jmp 0x14004e7ff
sub r10b, 0x23
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0xb
mov qword [rsp + 0x20], r14
mov byte [rbp + rsi - 0x78], r14b
inc rsi
jmp 0x14004dce3
lea edx, [r10 + 0x3f]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x47
add cl, dl
movzx r14d, cl
mov qword [rsp + 0x20], r14
cmp r9, 0x41
jb 0x14004e142
lea edx, [r10 + 0x7a]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
add cl, cl
jmp 0x14004e708
lea edx, [r10 - 0x5f]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x67
add cl, dl
movzx r14d, cl
mov qword [rsp + 0x20], r14
cmp r8, 0x80
jae 0x14004e5f1
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x14004e556
lea edx, [r10 + 0x4e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x22
jmp 0x14004e164
lea edx, [r10 + 3]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x15
add cl, dl
movzx r14d, cl
mov qword [rsp + 0x20], r14
lea rax, [r9 + r8]
cmp rax, 0xa
je 0x14004e60a
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x14004e43c
lea edx, [r10 + 0x53]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x45
jmp 0x14004e1a9
sub r10b, 0x1e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x2e
jmp 0x14004e7ff
add r10b, 0x44
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
jmp 0x14004e79f
lea edx, [r10 - 0x5a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
jmp 0x14004e759
add r10b, 8
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x38
mov qword [rsp + 0x20], r14
jmp 0x14004e69a
add r10b, 0x6a
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
jmp 0x14004e68f
lea edx, [r10 - 0x34]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
jmp 0x14004e670
add r10b, 0x2e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ecx, [r10 + r11]
sub cl, 0x42
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
sub r10b, 0x70
movzx eax, r11b
and al, r10b
mov ecx, 8
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
inc r9
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
lea edx, [r10 - 0xe]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
jmp 0x14004e708
lea rcx, [r9 + 4]
cmp r8, rcx
jae 0x14004e391
lea edx, [r10 - 0x31]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x57
jmp 0x14004e200
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004e3bd
sub r10b, 0xa
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx r14d, cl
jmp 0x14004e7ff
inc rax
cmp r8, rax
jne 0x14004e3e1
lea edx, [r10 + 0x32]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x5e
add cl, dl
jmp 0x14004e759
cmp r8, rcx
jne 0x14004e402
lea edx, [r10 + 0xc]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x54
add cl, dl
jmp 0x14004e670
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004e20b
sub r10b, 0x56
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004e461
lea edx, [r10 - 0xf]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x69
add cl, dl
jmp 0x14004e708
inc rax
cmp r8, rax
jne 0x14004e496
sub r10b, 0x71
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ecx, [r10 + r11]
add cl, 0x17
inc r9
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004e4bb
lea edx, [r10 - 0x35]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x73
add cl, dl
jmp 0x14004e670
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004e4e0
add r10b, 0x69
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ecx, [r10 + r11]
add cl, 0x21
jmp 0x14004e68f
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004e505
lea edx, [r10 - 0x5b]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x7d
add cl, dl
jmp 0x14004e759
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004e52c
add r10b, 0x43
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x2b
add cl, r10b
jmp 0x14004e79f
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004e1b4
sub r10b, 0x1f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x27
jmp 0x14004e7ff
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004e57c
sub r10b, 0x14
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x74
jmp 0x14004e7ff
inc rax
cmp r8, rax
jne 0x14004e5a3
sub r10b, 0x76
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
jmp 0x14004e79f
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004e5c8
lea edx, [r10 + 0x28]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x18
add cl, dl
jmp 0x14004e759
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004e16f
lea edx, [r10 - 0x24]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 4
add cl, dl
jmp 0x14004e708
lea edx, [r10 + 0x18]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 0x2c
add cl, cl
add cl, dl
jmp 0x14004e670
lea edx, [r10 - 0x4a]
movzx eax, r11b
and al, dl
mov ecx, 3
sub cl, al
add cl, cl
add cl, dl
jmp 0x14004e759
lea ecx, [r10 + 0x4d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x1b
add cl, r11b
jmp 0x14004e759
sub r10b, 0x51
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r14d, [r11 + r10]
add r14b, 0x37
mov qword [rsp + 0x20], r14
jmp 0x14004e69a
lea ecx, [r10 + 0x73]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x25
add cl, r11b
sub r10b, 0x19
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x51
add r11b, r10b
add r11b, cl
mov byte [rbp + rsi - 0x78], r11b
mov qword [rsp + 0x20], rcx
add r8, r9
mov r14, rcx
movzx eax, r14b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x14004dce3
sub r10b, 0x2b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ecx, [r11 + r10]
add cl, 0x2d
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
lea ecx, [r10 - 0x67]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x2f
jmp 0x14004e705
movzx r10d, sil
lea ecx, [r10 + 0x5d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x75
add cl, r11b
add r10b, 0x49
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
inc r11b
add r11b, r10b
mov byte [rbp + rsi - 0x78], r11b
inc r9
mov qword [rsp + 0x20], rcx
dec rsi
mov r14, rcx
inc rsi
jmp 0x14004dce3
movabs rcx, 0x540fb0c7e30731a9
add rcx, rsi
and dl, cl
add dl, dl
movzx eax, r11b
sub al, dl
add cl, 0x61
add cl, al
movzx r10d, sil
sub r10b, 0x7b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x5d
add r10b, r11b
movzx eax, r10b
mov byte [rbp + rsi - 0x78], al
inc r9
add rax, r9
sub rsi, rax
jmp 0x14004e79f
movabs rcx, 0xf2e6a2d7eb4e480b
add rcx, rsi
and dl, cl
add dl, dl
movzx eax, r11b
sub al, dl
sub cl, 0x4d
add cl, al
mov qword [rsp + 0x20], rcx
lea ecx, [rsi + 0x54]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x4c
add cl, r11b
mov byte [rbp + rsi - 0x78], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
mov r14, qword [rsp + 0x20]
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004dce3
movabs rax, 0x91bd94e7f3955e6d
add rax, rsi
and dl, al
add dl, dl
sub r11b, dl
lea r14d, [rax + r11]
add r14b, 5
mov qword [rsp + 0x20], r14
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x14004dce3
sub r10b, 0x75
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
add r14b, 0x33
mov qword [rsp + 0x20], r14
jmp 0x14004dce0
sub r10b, 0x13
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r14d, [r10 + r11]
sub r14b, 0x7b
mov qword [rsp + 0x20], r14
jmp 0x14004dcd0
lea rdx, [rbp + 0x15e7a9c]
jmp 0x14004e871
lea rdx, [rbp + 0x13aef6b]
jmp 0x14004e871
lea rdx, [rbp - 0x78]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14004e880
lea rcx, [rbp - 0x38]
call fcn.140003110
mov r14, rax
mov dword [rsp + 0x30], 0x8e8b6c72
mov dword [rsp + 0x34], 0x6d8b728e
mov dword [rsp + 0x38], 0x7f84888f
mov byte [rsp + 0x3c], reloc.WLDAP32.dll_Ordinal_26
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d], xmm0
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
nop word [rax + rax]
mov r8, qword [0x1402304a8]
mov r10, qword [0x1402304a0]
nop
mov rsi, r15
cmp rsi, 0x23
jae 0x14004f4e5
movzx r11d, byte [rsp + rsi + 0x30]
mov edx, r11d
cmp r8, rsi
ja 0x14004f4dc
lea rax, [r10 + 1]
cmp r8, rax
jae 0x14004e92b
movabs rcx, 0x153dca8714cc1103
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r13, rax, 0xfffffffffffffffe
add r13, rcx
add r13, rdx
sub r13b, 0x15
jmp 0x14004e971
je 0x14004f46b
inc rax
cmp r8, rax
je 0x14004f3e5
lea rax, [r10 + 3]
cmp r8, rax
je 0x14004f3b1
lea rax, [r10 + 2]
cmp r8, rax
je 0x14004f397
lea rax, [r10 + 5]
cmp r8, rax
je 0x14004f359
lea rax, [r10 + 4]
cmp r8, rax
je 0x14004f315
movzx r9d, sil
cmp r10, rsi
ja 0x14004f4d3
lea rax, [r10 + 0x1000]
cmp r8, rax
jae 0x14004e9a2
lea ecx, [r9 + 0x3f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x47
jmp 0x14004e9f0
lea rax, [r10 + 1]
cmp r8, rax
je 0x14004f2fd
lea rax, [r10 + 3]
cmp r8, rax
je 0x14004f2da
lea rax, [r10 + 4]
cmp r8, rax
je 0x14004f2bf
lea rax, [r10 + 5]
cmp r8, rax
je 0x14004f2a2
lea rax, [r10 + 7]
cmp r8, rax
je 0x14004f287
lea rax, [r10 + 9]
cmp r8, rax
je 0x14004f25c
lea rax, [r10 + r8]
cmp rax, rsi
jbe 0x14004ef65
nop dword [rax]
lea rax, [r10 + 0xa]
cmp r8, rax
je 0x14004ef4a
lea rax, [r10 + 0x64]
cmp r8, rax
je 0x14004ef24
lea rax, [r10 + 0x61]
cmp r8, rax
je 0x14004ef01
lea rax, [r10 + 2]
cmp r8, rax
je 0x14004eee1
lea rax, [r10 + 9]
cmp r8, rax
je 0x14004eebd
lea rax, [r10 + 0x42]
cmp r8, rax
je 0x14004ee9c
lea rax, [r10 + 4]
cmp r8, rax
je 0x14004ee81
lea rax, [r10 + 0x10]
cmp r8, rax
je 0x14004ee64
lea rax, [r10 + 0x80]
cmp r8, rax
je 0x14004ee39
lea rax, [r10 + 0x7a]
cmp r8, rax
je 0x14004ea00
lea r8, [r10 + 0x2a]
lea r10, [r8 + 3]
lea rcx, [r10 + 6]
cmp r8, rcx
jb 0x14004f4b6
lea rax, [r10 + 0x28]
cmp r8, rax
jb 0x14004f499
lea rax, [r10 + 2]
cmp r8, rax
jb 0x14004ebe2
lea rax, [r10 + 9]
cmp r8, rax
jb 0x14004ebc7
lea rax, [r10 + 0x42]
cmp r8, rax
jb 0x14004ebac
lea rax, [r10 + 0x1000]
cmp r8, rax
jb 0x14004edeb
lea rax, [r10 + 1]
cmp r8, rax
jb 0x14004ed9e
lea rax, [r10 + 8]
cmp r8, rax
jb 0x14004ed5d
lea rax, [r10 + 0x7a]
cmp r8, rax
jb 0x14004ed38
lea rax, [r10 + 3]
cmp r8, rax
jb 0x14004ea00
mov r8, rcx
lea r10, [rcx + 0xa]
lea rcx, [r10 + 0x28]
cmp r8, rcx
ja 0x14004ed0d
lea rax, [r10 + 0x3e8]
cmp r8, rax
ja 0x14004ecec
lea rax, [r10 + 0x5a]
cmp r8, rax
ja 0x14004eccc
lea rax, [r10 + 0x42]
cmp r8, rax
ja 0x14004ecab
lea rax, [r10 + 0x1000]
cmp r8, rax
ja 0x14004ec8b
lea rax, [r10 + 1]
cmp r8, rax
ja 0x14004ec6c
lea rax, [r10 + 8]
cmp r8, rax
ja 0x14004ec49
lea rax, [r10 + 0x40]
cmp r8, rax
ja 0x14004ec1f
lea rax, [r10 + 0x400]
cmp r8, rax
ja 0x14004ebff
lea rax, [r10 + 0xa]
cmp r8, rax
ja 0x14004ea00
mov r8, rcx
lea r10, [rcx + 0x64]
jmp 0x14004ea00
lea ecx, [r9 - 0x5f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x67
jmp 0x14004e9f0
lea ecx, [r9 - 0x65]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x3d
jmp 0x14004e975
sub r9b, 0x6b
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x13
jmp 0x14004e8f6
lea edx, [r9 - 8]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_30
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004f32f
sub r9b, 0xe
movzx eax, r11b
and al, r9b
mov ecx, Ordinal_50
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r9b
inc r10
dec rsi
inc rsi
jmp 0x14004e8e3
sub r9b, 0x14
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea r13d, [r9 + r11]
sub r13b, 0x74
dec rsi
inc rsi
jmp 0x14004e8e3
lea edx, [r9 - 0x1a]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x4a
add r13b, dl
jmp 0x14004f373
sub r9b, 0x20
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea r13d, [r9 + r11]
sub r13b, 0x20
add r8, r10
jmp 0x14004f3cc
sub r9b, 0x26
movzx eax, r11b
and al, r9b
mov ecx, 5
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r9b
jmp 0x14004f3cc
lea edx, [r9 - 0x2c]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004f404
sub r9b, 0x32
movzx eax, r11b
and al, r9b
mov ecx, Ordinal_50
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r9b
jmp 0x14004f42d
sub r9b, 0x38
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea r13d, [r9 + r11]
sub r13b, 0x78
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
sub r9b, 0x47
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea r13d, [r9 + r11]
sub r13b, 0xf
mov byte [rsp + rsi + 0x30], r13b
inc rsi
jmp 0x14004e8e3
lea edx, [r9 - 0x4d]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
add r13b, 0x1b
add r13b, dl
cmp r10, 1
jb 0x14004ed50
lea edx, [r9 + 0x32]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea r13d, [rcx + rcx]
jmp 0x14004f32f
lea ecx, [r9 - 0x53]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x45
cmp r8, 0x1000
jae 0x14004f220
lea rax, [r10 + 0x41]
cmp r8, rax
jbe 0x14004f13d
lea edx, [r9 - 0xa]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
add r13b, r11b
jmp 0x14004ed77
lea ecx, [r9 - 0x59]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x6f
lea rax, [r10 + r8]
cmp rax, 0x42
je 0x14004f23f
lea rax, [r10 + 0x200]
cmp r8, rax
jbe 0x14004f06c
lea ecx, [r9 - 0x49]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
dec r13b
jmp 0x14004edb4
add r9b, 0x7a
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x56
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
add r9b, 0x74
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x2c
jmp 0x14004f42d
lea ecx, [r9 + 0x6e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 2
jmp 0x14004f404
add r9b, 0x68
movzx eax, r9b
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r9b
add r13b, r11b
jmp 0x14004f3cc
add r9b, 0x62
movzx eax, r9b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r9b
add r13b, r11b
add r8, r10
jmp 0x14004f3cc
lea edx, [r9 + 0x5c]
movzx eax, dl
and al, r11b
mov ecx, 0x3e
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
add r13b, r11b
jmp 0x14004f373
add r9b, 0x56
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x5a
dec rsi
inc rsi
jmp 0x14004e8e3
add r9b, 0x50
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x30
inc r10
dec rsi
inc rsi
jmp 0x14004e8e3
lea ecx, [r9 + 0x4a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 6
jmp 0x14004f32f
lea rax, [r10 + 0x41]
cmp r8, rax
jae 0x14004ef89
lea ecx, [r9 + 3]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x15
jmp 0x14004ee01
lea rax, [r10 + 1]
cmp r8, rax
jne 0x14004efbd
add r9b, 0x7e
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x72
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
inc rax
cmp r8, rax
jne 0x14004efe5
lea edx, [r9 - 0x76]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
add r13b, r11b
jmp 0x14004f404
lea rax, [r10 + 5]
cmp r8, rax
jne 0x14004f009
lea ecx, [r9 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x44
jmp 0x14004f373
lea rax, [r10 + 7]
cmp r8, rax
jne 0x14004f035
sub r9b, 0x5e
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x6e
dec rsi
inc rsi
jmp 0x14004e8e3
lea rax, [r10 + 3]
cmp r8, rax
jne 0x14004ee01
sub r9b, 0x58
movzx eax, r9b
and al, r11b
mov ecx, 0x34
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r9b
add r13b, r11b
inc r10
dec rsi
inc rsi
jmp 0x14004e8e3
lea rax, [r10 + 1]
cmp r8, rax
jne 0x14004f090
lea ecx, [r9 - 0x43]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x2b
jmp 0x14004f32f
inc rax
cmp r8, rax
jne 0x14004f0bb
sub r9b, 0x37
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x7f
dec rsi
inc rsi
jmp 0x14004e8e3
lea rax, [r10 + 3]
cmp r8, rax
jne 0x14004f0df
lea ecx, [r9 - 0x31]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x57
jmp 0x14004f373
lea rax, [r10 + 5]
cmp r8, rax
jne 0x14004f105
sub r9b, 0x25
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
add r13b, 3
jmp 0x14004f3cc
lea rax, [r10 + 4]
cmp r8, rax
jne 0x14004edb4
sub r9b, 0x13
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x7b
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
lea rax, [r10 + 1]
cmp r8, rax
jne 0x14004f175
sub r9b, 4
movzx eax, r9b
and al, r11b
mov ecx, recv
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r9b
add r13b, r11b
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
lea rax, [r10 + 3]
cmp r8, rax
jne 0x14004f19b
add r9b, 0xe
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x62
jmp 0x14004f3cc
lea rax, [r10 + 5]
cmp r8, rax
jne 0x14004f1c4
lea edx, [r9 + 0x1a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x14004f373
lea rax, [r10 + 7]
cmp r8, rax
jne 0x14004f1f4
add r9b, 0x20
movzx eax, r11b
and al, r9b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r9b
dec rsi
inc rsi
jmp 0x14004e8e3
lea rax, [r10 + 2]
cmp r8, rax
jne 0x14004ed77
lea edx, [r9 + 0x2c]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x34
add r13b, dl
jmp 0x14004f32f
lea edx, [r9 + 0x38]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 0x3c
lea r13d, [rcx + rcx]
add r13b, dl
jmp 0x14004f373
lea edx, [r9 + 0x3e]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
jmp 0x14004f404
add r9b, 0x75
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x33
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
lea ecx, [r9 + 0x69]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x21
jmp 0x14004f404
add r9b, 0x63
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
add r13b, 0x4b
jmp 0x14004f3cc
lea ecx, [r9 + 0x57]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x61
jmp 0x14004f373
add r9b, 0x51
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea r13d, [r11 + r9]
sub r13b, 0x37
dec rsi
inc rsi
jmp 0x14004e8e3
lea ecx, [r9 + 0x45]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x1d
jmp 0x14004f32f
movzx r9d, sil
lea ecx, [r9 + 0x39]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x71
add r9b, 0x35
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
sub r11b, 0x73
add r11b, r9b
mov byte [rsp + rsi + 0x30], r11b
inc r10
dec rsi
inc rsi
jmp 0x14004e8e3
movzx r9d, sil
lea ecx, [r9 + 0x27]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x11
add r9b, 0x3b
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
add r11b, 0x63
add r11b, r13b
add r11b, r9b
mov byte [rsp + rsi + 0x30], r11b
add r8, r10
jmp 0x14004f3cc
lea ecx, [rsi + 0x21]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x19
add r8, r10
jmp 0x14004f3cc
movabs rax, 0xbf2c1ebfbb2c991b
add rax, rsi
and dl, al
add dl, dl
sub al, dl
lea r13d, [r11 + rax]
add r13b, 0x43
movzx eax, r13b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x14004e8e3
movabs rax, 0x94b089b191947715
add rax, rsi
and dl, al
add dl, dl
sub al, dl
lea r13d, [r11 + rax]
add r13b, 0x6d
movzx r9d, sil
add r9b, 0x41
movzx eax, r11b
and al, r9b
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x39
add cl, r9b
movzx eax, cl
mov byte [rsp + rsi + 0x30], al
inc r10
add rax, r10
sub rsi, rax
lea edx, [rsi + 0x44]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
mov byte [rsp + rsi + 0x30], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
movabs rax, 0x3fb95f953e643309
add rax, rsi
and dl, al
add dl, dl
sub al, dl
lea r13d, [r11 + rax]
sub r13b, 0x3f
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x14004e8e3
sub r9b, 0x71
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea r13d, [r9 + r11]
add r13b, 0x17
jmp 0x14004e8e0
sub r9b, 0x77
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea r13d, [r9 + r11]
add r13b, 0x41
jmp 0x14004e8d0
lea rdx, [rbp + 0x15b6d34]
jmp 0x14004f4ea
lea rdx, [rbp + 0x1277e37]
jmp 0x14004f4ea
lea rdx, [rsp + 0x30]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.1400056b0
mov r9, r14
mov r8d, recv
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140058ee0
nop
lea rcx, [rbp - 0x38]
call fcn.140002820
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rcx, qword [rbp - 0x10]
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r11, rax
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x14004f660
movsxd rcx, dword [r11 + 0x3c]
cmp dword [rcx + r11], 0x4550
jne 0x14004f660
mov edx, dword [rcx + r11 + 0x88]
test edx, edx
je 0x14004f660
mov esi, dword [rdx + r11 + 0x1c]
lea r14, [r11 + rsi]
mov r9d, dword [rdx + r11 + 0x20]
add r9, r11
mov r15d, dword [rdx + r11 + 0x24]
add r15, r11
xor r10d, r10d
test esi, esi
je 0x14004f5c3
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [r9]
add r8, r11
mov rax, qword [rbp - 0x40]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14004f5b3
inc rax
test ecx, ecx
jne 0x14004f5a0
test edx, edx
je 0x14004f633
inc r10d
add r9, 4
cmp r10d, esi
jb 0x14004f590
lea rcx, [rbp - 0x10]
call fcn.140002820
mov r14, qword [rsp + 0x20]
xor r15d, r15d
lea rcx, [rbp + 0x10]
call fcn.140002820
mov eax, dword [rsp + 0x2c]
inc eax
mov dword [rsp + 0x2c], eax
mov rsi, qword [rbp - 0x80]
cmp eax, dword [rsi]
jb 0x14004cfd0
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14019b1d0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov r15d, dword [r14 + rcx*4]
xor edx, edx
mov r8d, 0x8000
mov rcx, qword [rbp - 0x80]
cmp byte [rsp + 0x28], dl
jne 0x14004f659
mov rax, qword [rbp - 0x50]
add r15, qword [rax + 0x18]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
lea rcx, [rbp - 0x10]
call fcn.140002820
nop
lea rcx, [rbp + 0x10]
call fcn.140002820
mov rax, r15
jmp 0x14004f606