Function at 0x14005e940
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x438]
sub rsp, 0x538
mov rax, qword [0x1401d60c0]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov rdi, r9
mov qword [rsp + 0x58], r9
mov r12, r8
mov r14, rdx
mov qword [rsp + 0x38], rdx
mov r13, rcx
mov qword [rsp + 0x60], rdx
mov qword [rbp + 0x150], r9
xor r15d, r15d
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x210], xmm1
xor edx, edx
mov r8d, 0x180
lea rcx, [rbp + 0x220]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x220]
call fcn.140062ae0
nop
mov qword [rbp + 0x1d8], r15
mov r8b, 1
mov rdx, r12
lea rcx, [rbp + 0x220]
call fcn.140062ca0
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x14005e9f2
jle 0x14005e9eb
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rbp + 0x230], r15
mov rcx, qword [rbp + 0x228]
test rcx, rcx
je 0x14005ea0d
jle 0x14005ea06
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x228], r15
mov rcx, qword [rbp + 0x220]
test rcx, rcx
je 0x14005ea28
jle 0x14005ea21
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x220], r15
mov rcx, qword [rbp + 0x268]
test rcx, rcx
je 0x14005ea43
jle 0x14005ea3c
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov qword [rbp + 0x268], r15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x328], r15
lea rax, [rbp + 0x318]
cmp qword [rbp + 0x330], 7
cmova rax, qword [rbp + 0x318]
mov word [rax], r15w
cmp byte [rbp + 0x23c], 0
je 0x14005ea96
lea rcx, [rbp + 0x338]
cmp qword [rbp + 0x350], 7
cmova rcx, qword [rbp + 0x338]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov qword [rbp + 0x348], r15
lea rax, [rbp + 0x338]
cmp qword [rbp + 0x350], 7
cmova rax, qword [rbp + 0x338]
mov word [rax], r15w
mov ebx, r15d
cmp byte [rbp + 0x239], r15b
setne bl
mov rdx, r12
lea rcx, [rbp + 0x1e8]
call fcn.14005cfa0
nop
lea rax, [0x1401ba850]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [rbp + 0x1e8]
lea rdx, [rsp + 0x40]
mov rcx, r13
call fcn.14005d8b0
nop
lea rcx, [rbp + 0x1e8]
call fcn.14005a690
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x210], xmm1
movq rax, xmm1
test rax, rax
je 0x14005ec9e
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rbx, xmm0
test rbx, rbx
je 0x14005eb45
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x48]
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x210], xmm1
mov r8d, 0xc000010e
lea rdx, [rbp + 0x210]
mov rcx, r14
call fcn.14005a1f0
nop
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.140062ee0
lea rcx, [rbp + 0x358]
call fcn.1400846b0
lea rcx, [rbp + 0x338]
call fcn.14005a690
lea rcx, [rbp + 0x318]
call fcn.14005a690
lea rcx, [rbp + 0x2d8]
call fcn.1400568f0
lea rcx, [rbp + 0x298]
call fcn.1400568f0
lea rcx, [rbp + 0x280]
call fcn.140064130
mov rcx, qword [rbp + 0x268]
test rcx, rcx
jle 0x14005ebcb
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov rcx, qword [rbp + 0x230]
test rcx, rcx
jle 0x14005ebdd
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp + 0x228]
test rcx, rcx
jle 0x14005ebef
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x220]
test rcx, rcx
jle 0x14005ec02
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov r14d, 0xffffffff
test rbx, rbx
je 0x14005ec40
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005ec40
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005ec40
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14005ec73
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005ec73
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x14005ec73
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rsi, qword [rsp + 0x38]
mov rax, rsi
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.1400f4b80
add rsp, 0x538
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov byte [rsp + 0x28], 1
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 0x1000
mov rdx, qword [r13 + 8]
lea rcx, [rbp + 0x130]
call fcn.140068270
nop
mov eax, dword [rbp + 0x130]
test eax, eax
jns 0x14005eddc
mov dword [r14], eax
mov byte [r14 + 0x18], 0
mov r14d, 0xffffffff
cmp byte [rbp + 0x148], 0
je 0x14005ed22
mov rbx, qword [rbp + 0x140]
test rbx, rbx
je 0x14005ed22
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005ed22
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005ed22
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.140062ee0
lea rcx, [rbp + 0x358]
call fcn.1400846b0
lea rcx, [rbp + 0x338]
call fcn.14005a690
lea rcx, [rbp + 0x318]
call fcn.14005a690
lea rcx, [rbp + 0x2d8]
call fcn.1400568f0
lea rcx, [rbp + 0x298]
call fcn.1400568f0
lea rcx, [rbp + 0x280]
call fcn.140064130
mov rcx, qword [rbp + 0x268]
test rcx, rcx
jle 0x14005ed8a
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov rcx, qword [rbp + 0x230]
test rcx, rcx
jle 0x14005ed9c
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp + 0x228]
test rcx, rcx
jle 0x14005edae
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x220]
test rcx, rcx
jle 0x14005edc1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14005ec40
mov eax, r14d
lock xadd dword [rcx + 8], eax
jmp 0x14005ec15
mov esi, 8
mov rcx, qword [rbp + 0x148]
cmp byte [rbp + 0x239], 0
jne 0x14005eecb
test cl, cl
je 0x14005fd1f
mov rdx, qword [rbp + 0x138]
test rdx, rdx
je 0x14005ee63
mov eax, dword [rdx]
add eax, esi
mov dword [rbp + 0x1c4], eax
movzx eax, word [r12 + 0x10]
add ax, ax
mov word [rbp + 0x1c0], ax
mov word [rbp + 0x1c2], ax
test rdx, rdx
je 0x14005ee80
mov rax, qword [rdx + 0x18]
mov rax, qword [rax + 0x70]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
mov r9d, esi
lea r8, [rbp + 0x1c0]
mov rdx, qword [rdx]
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x138]
jmp 0x14005ee80
mov dword [rbp + 0x1c4], esi
movzx eax, word [r12 + 0x10]
add ax, ax
mov word [rbp + 0x1c0], ax
mov word [rbp + 0x1c2], ax
test cl, cl
je 0x14005fd1f
mov r8, r12
cmp qword [r12 + 0x18], 7
jbe 0x14005ee97
mov r8, qword [r12]
mov r9, qword [r12 + 0x10]
add r9, r9
test rdx, rdx
je 0x14005eec1
mov rax, qword [rdx + 0x18]
mov rdx, qword [rdx]
add rdx, rsi
mov rax, qword [rax + 0x70]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov qword [rsp + 0x60], rsi
jmp 0x14005efac
mov dword [rbp + 0x1c4], r15d
test cl, cl
je 0x14005fd19
mov ebx, reloc.WS2_32.dll_recv
mov qword [rsp + 0x60], rbx
mov rdx, qword [rbp + 0x138]
test rdx, rdx
je 0x14005ef4d
mov rax, qword [rdx]
add rax, rbx
mov qword [rbp + 0x1c8], rax
movzx eax, word [r12 + 0x10]
add ax, ax
mov word [rbp + 0x1c0], ax
mov word [rbp + 0x1c2], ax
test rdx, rdx
je 0x14005ef6b
mov rax, qword [rdx + 0x18]
mov rax, qword [rax + 0x70]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
mov r9d, ebx
lea r8, [rbp + 0x1c0]
mov rdx, qword [rdx]
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x138]
jmp 0x14005ef6b
mov qword [rbp + 0x1c8], rbx
movzx eax, word [r12 + 0x10]
add ax, ax
mov word [rbp + 0x1c0], ax
mov word [rbp + 0x1c2], ax
test cl, cl
je 0x14005fd19
mov r8, r12
cmp qword [r12 + 0x18], 7
jbe 0x14005ef82
mov r8, qword [r12]
mov r9, qword [r12 + 0x10]
add r9, r9
test rdx, rdx
je 0x14005efac
mov rax, qword [rdx + 0x18]
mov rdx, qword [rdx]
add rdx, rbx
mov rax, qword [rax + 0x70]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov rax, qword [r13 + 0x10]
mov rcx, qword [rax + 0x10]
cmp byte [rbp + 0x239], 0
je 0x14005f0fd
cmp byte [rcx + 0x15], 0
je 0x14005f107
mov byte [rsp + 0x30], 0
mov ebx, r15d
cmp byte [rbp + 0x239], r15b
setne bl
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f8], xmm1
mov r8d, listen
lea rdx, str.kernel32.dll
lea rcx, [rbp + 0x1e8]
call fcn.14005af40
nop
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x3a0]
call fcn.14005cfa0
nop
lea r14, [0x1401ba850]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [rbp + 0x3a0]
lea rdx, [rbp + 0x1c0]
mov rcx, r13
call fcn.14005d8b0
nop
lea rcx, [rbp + 0x3a0]
call fcn.14005a690
nop
mov qword [rsp + 0x20], r14
lea r9, [0x1401baad0]
mov r8, qword [rbp + 0x1c0]
lea rdx, [rbp + 0x3c0]
mov rcx, r13
call fcn.14005ddf0
nop
mov r14d, 0xffffffff
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x14005f0c3
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14005f0c3
mov rbx, qword [rbp + 0x1c8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005f0c3
mov rcx, qword [rbp + 0x1c8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x1e8]
call fcn.14005a690
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
movzx edx, byte [rcx + 0x15]
movzx eax, byte [rbp + 0x239]
test dl, dl
jne 0x14005f111
test al, al
jne 0x14005f111
mov rsi, qword [rsp + 0x38]
mov dword [rsi], 0xc0000359
mov byte [rsi + 0x18], al
jmp 0x14005f189
cmp byte [rcx + 0x15], 1
jne 0x14005efcb
mov byte [rsp + 0x30], 1
jmp 0x14005efd0
mov ebx, r15d
mov dword [rsp + 0x50], ebx
mov ecx, 1
test dl, dl
je 0x14005f12a
test al, al
cmovne ebx, ecx
mov dword [rsp + 0x50], ebx
mov r9d, r15d
test al, al
setne r9b
mov dword [rsp + 0x20], ecx
lea r8, str.LdrLoadDll
lea rdx, [rbp + 0x160]
mov rcx, r13
call fcn.14005e7b0
nop
mov eax, dword [rbp + 0x160]
test eax, eax
jns 0x14005f30c
mov rsi, qword [rsp + 0x38]
mov dword [rsi], eax
mov byte [rsi + 0x18], 0
cmp byte [rbp + 0x1b8], 0
je 0x14005f189
lea rcx, [rbp + 0x190]
call fcn.1400064a0
lea rcx, [rbp + 0x170]
call fcn.14005a690
nop
cmp byte [rbp + 0x418], 0
je 0x14005f1ab
lea rcx, [rbp + 0x3f0]
call fcn.1400064a0
lea rcx, [rbp + 0x3d0]
call fcn.14005a690
nop
cmp byte [rbp + 0x148], 0
je 0x14005f1ec
mov rbx, qword [rbp + 0x140]
test rbx, rbx
je 0x14005f1ec
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005f1ec
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005f1ec
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.140062ee0
lea rcx, [rbp + 0x358]
call fcn.1400846b0
lea rcx, [rbp + 0x338]
call fcn.14005a690
lea rcx, [rbp + 0x318]
call fcn.14005a690
lea rcx, [rbp + 0x2d8]
call fcn.1400568f0
lea rcx, [rbp + 0x298]
call fcn.1400568f0
lea rcx, [rbp + 0x280]
call fcn.140064130
mov rcx, qword [rbp + 0x268]
test rcx, rcx
jle 0x14005f254
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov rcx, qword [rbp + 0x230]
test rcx, rcx
jle 0x14005f266
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp + 0x228]
test rcx, rcx
jle 0x14005f278
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x220]
test rcx, rcx
jle 0x14005f28b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14005f2c8
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14005f2c8
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005f2c8
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14005ec78
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005ec78
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x14005ec78
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x14005ec78
cmp ebx, 1
jne 0x14005f478
cmp byte [r13 + 0x80], 0
jne 0x14005f478
mov eax, dword [0x1401da7fc]
test eax, eax
je 0x14005f478
mov rcx, qword [0x1401da800]
cmp eax, 6
ja 0x14005f357
jb 0x14005f478
cmp ecx, ebx
ja 0x14005f357
jb 0x14005f478
cmp word [0x1401da90c], 0
jbe 0x14005f36b
cmp eax, 6
ja 0x14005f478
jb 0x14005f36b
cmp ecx, 1
ja 0x14005f478
mov dword [rbp + 0x1c0], 0x90909090
mov word [rbp + 0x1c4], 0x9090
mov rbx, qword [0x1401da280]
test rbx, rbx
je 0x14005f470
mov dword [rbp + 0x1e0], r15d
mov rax, qword [r13 + 8]
mov r9d, 0x40
lea rcx, [rax + 0x70]
cmp dword [rax + 0x78], 1
jne 0x14005f3b9
mov rax, qword [rcx]
cmp byte [rax + 0x18], 1
mov eax, 4
cmovne r9d, eax
mov rax, qword [rcx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea rdx, [rbp + 0x1e0]
mov qword [rsp + 0x20], rdx
mov r8d, 6
mov rdx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [r13 + 8]
mov rcx, qword [rax + 0x70]
mov rcx, qword [rcx + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
mov r9d, 6
lea r8, [rbp + 0x1c0]
mov rdx, rbx
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov rax, qword [r13 + 8]
mov dword [rbp + 0x1d0], r15d
mov r9d, dword [rbp + 0x1e0]
mov ecx, r9d
lea rdx, [rax + 0x70]
cmp dword [rax + 0x78], 1
jne 0x14005f44e
mov rax, qword [rdx]
cmp byte [rax + 0x18], 1
je 0x14005f44e
cmp ecx, 0x20
jne 0x14005f437
mov r9d, 2
jmp 0x14005f44e
cmp ecx, 0x40
jne 0x14005f444
mov r9d, 4
jmp 0x14005f44e
cmp ecx, 0x80
cmove r9d, esi
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
lea rdx, [rbp + 0x1d0]
mov qword [rsp + 0x20], rdx
mov r8d, 6
mov rdx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
mov byte [r13 + 0x80], 1
mov qword [rbp + 0x1c0], r15
mov edx, r15d
cmp byte [rbp + 0x239], r15b
setne dl
lea rcx, [rbp + 0x1c0]
call fcn.1400535c0
nop
mov rbx, qword [rbp + 0x1c0]
mov rax, qword [rbx]
mov rsi, qword [rax + 0x18]
mov qword [rbp - 0x20], 0xffffffffffff0001
mov qword [rbp - 0x18], 0xff
movabs rdx, 0xffffffff00000003
mov qword [rbp - 0x10], rdx
mov r8d, 0xffffffff
mov qword [rbp - 8], r8
mov qword [rbp + 8], r15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov dword [rbp - 0x30], 2
mov r10d, 4
mov qword [rbp - 0x28], r10
mov qword [rbp], r15
mov qword [rbp + 0x38], 0xffffffffffff0001
mov qword [rbp + 0x40], 0xff
mov qword [rbp + 0x48], rdx
mov qword [rbp + 0x50], r8
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], r15
movdqa xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x28], 2
mov qword [rbp + 0x30], r10
mov qword [rbp + 0x58], r15
cmp byte [rbp + 0x148], 0
je 0x14005fd25
mov rax, qword [rbp + 0x138]
test rax, rax
je 0x14005f546
mov rcx, qword [rax]
jmp 0x14005f54c
mov rcx, r15
mov rax, r15
mov qword [rbp + 0x90], 0xffffffffffff0001
mov qword [rbp + 0x98], 0xff
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0xa8], r8
mov qword [rbp + 0xb8], r15
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r15
mov dword [rbp + 0x80], 2
mov qword [rbp + 0x88], 8
mov qword [rbp + 0xb0], rcx
test rax, rax
je 0x14005f5ac
mov rax, qword [rax]
jmp 0x14005f5af
mov rax, r15
add rax, 0x800
mov qword [rbp + 0xe8], 0xffffffffffff0001
mov qword [rbp + 0xf0], 0xff
mov qword [rbp + 0xf8], rdx
mov qword [rbp + 0x100], r8
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], r15
movdqa xmmword [rbp + 0x120], xmm0
mov dword [rbp + 0xd8], 2
mov qword [rbp + 0xe0], 8
mov qword [rbp + 0x108], rax
lea rcx, [rbp - 0x30]
lea rax, [rbp + 0x130]
movdqu xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], r15
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1e0], rcx
lea r9, [rbp + 0x1d0]
lea r8, [rbp + 0x1e0]
mov rdx, r10
lea rcx, [rbp + 0x1e8]
call fcn.14005ad50
nop
cmp byte [rbp + 0x1b8], 0
je 0x14005fd2b
mov qword [rbp - 0x78], 0xffffffffffff0001
mov qword [rbp - 0x70], 0xff
movabs rax, 0xffffffff00000003
mov qword [rbp - 0x68], rax
mov eax, 0xffffffff
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov dword [rsp + 0x78], 2
mov qword [rbp - 0x80], 8
mov rax, qword [rbp + 0x168]
mov qword [rbp - 0x58], rax
mov r9d, 1
lea r8, [rbp + 0x1e8]
lea rdx, [rsp + 0x78]
mov rcx, rbx
call rsi
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14005f711
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f700
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f700
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f4de8
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
lea rcx, [rbp + 0x1e8]
call fcn.14005a600
nop
lea r9, [0x140053480]
mov edx, 0x58
mov r8d, 4
lea rcx, [rbp - 0x30]
call fcn.1400f5760
lea rcx, [rbx + 0xa8]
mov rax, qword [rcx]
lea r8, sym.Loader.exe_struct_asmjit::Operand_const_asmjit::noOperand
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
mov r9, r8
mov edx, 0x21c
call qword [rax + Ordinal_50]
mov rcx, qword [r13]
add rcx, 0x240
xor edx, edx
call fcn.140069f60
mov rsi, qword [r13]
cmp qword [rdi], 0
je 0x14005f86d
mov rax, qword [rsi + 0x268]
test rax, rax
je 0x14005f796
lock inc dword [rax + 8]
mov rbx, qword [rbp + 0x1c0]
mov rcx, qword [rsi + 0x260]
mov qword [rsp + 0x50], rcx
mov rdi, qword [rsi + 0x268]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
mov qword [rbp + 0x1d0], rcx
test rdi, rdi
je 0x14005f7ef
mov eax, r14d
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14005f7e8
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, r14d
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14005f7e8
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rbp + 0x1c0]
mov rsi, qword [r13]
mov rax, qword [rbp + 0x1d0]
mov edi, dword [rbx + 0x108]
lea rcx, [rbx + 0xa8]
sub rdi, qword [rbx + 0xf0]
add rdi, qword [rbx + 0x100]
cmp rax, qword [rsp + 0x50]
mov rax, qword [rcx]
jne 0x14005f841
call qword [rax + reloc.WS2_32.dll_htonl]
lea r9, [rbp + 0x1d8]
mov r8, rdi
mov rdx, rax
lea rcx, [rsi + 0x240]
call fcn.140069300
mov edi, eax
test eax, eax
jmp 0x14005f8aa
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x1d8]
mov r8, rdi
mov rdx, rax
lea rcx, [rsi + 0x240]
call fcn.140069470
mov edi, eax
test eax, eax
jmp 0x14005f8aa
lea rcx, [rbx + 0xa8]
mov edi, dword [rcx + 0x60]
sub rdi, qword [rcx + 0x48]
add rdi, qword [rcx + 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov ecx, dword [rsp + 0x50]
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x1d8]
mov r8, rdi
mov rdx, rax
lea rcx, [rsi + 0x240]
call fcn.140068b00
mov edi, eax
test eax, eax
js 0x14005f8bc
mov edi, dword [rbp + 0x1d8]
mov eax, edi
test eax, eax
jns 0x14005faf0
cmp dword [rbp + 0x3c0], 0
jl 0x14005faf0
cmp byte [rsp + 0x30], 0
je 0x14005faf0
mov rcx, qword [r13]
add rcx, 0x240
cmp byte [rbp + 0x148], 0
je 0x14005fd13
mov rax, qword [rbp + 0x138]
test rax, rax
je 0x14005f8fd
mov rdx, qword [rax]
jmp 0x14005f900
mov rdx, r15
mov r8, qword [rsp + 0x60]
add r8, rdx
cmp byte [rbp + 0x418], 0
je 0x14005fd13
mov rdx, qword [rbp + 0x3c8]
call fcn.140069ec0
test eax, eax
jne 0x14005faf0
mov rsi, qword [rsp + 0x38]
mov dword [rsi], edi
mov byte [rsi + 0x18], al
test rbx, rbx
je 0x14005f946
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
cmp byte [rbp + 0x1b8], 0
je 0x14005f968
lea rcx, [rbp + 0x190]
call fcn.1400064a0
lea rcx, [rbp + 0x170]
call fcn.14005a690
nop
cmp byte [rbp + 0x418], 0
je 0x14005f98a
lea rcx, [rbp + 0x3f0]
call fcn.1400064a0
lea rcx, [rbp + 0x3d0]
call fcn.14005a690
nop
cmp byte [rbp + 0x148], 0
je 0x14005f9cb
mov rbx, qword [rbp + 0x140]
test rbx, rbx
je 0x14005f9cb
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005f9cb
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005f9cb
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.140062ee0
lea rcx, [rbp + 0x358]
call fcn.1400846b0
lea rcx, [rbp + 0x338]
call fcn.14005a690
lea rcx, [rbp + 0x318]
call fcn.14005a690
lea rcx, [rbp + 0x2d8]
call fcn.1400568f0
lea rcx, [rbp + 0x298]
call fcn.1400568f0
lea rcx, [rbp + 0x280]
call fcn.140064130
mov rcx, qword [rbp + 0x268]
test rcx, rcx
jle 0x14005fa33
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov rcx, qword [rbp + 0x230]
test rcx, rcx
jle 0x14005fa45
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp + 0x228]
test rcx, rcx
jle 0x14005fa57
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x220]
test rcx, rcx
jle 0x14005fa6a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14005faa7
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14005faa7
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005faa7
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rsp + 0x58]
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x14005ec78
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005ec78
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x14005ec78
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x14005ec78
cmp byte [rbp + 0x239], 0
setne r15b
mov rdx, r12
lea rcx, [rbp + 0x3a0]
call fcn.14005cfa0
nop
lea rax, [0x1401ba850]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [rbp + 0x3a0]
lea rdx, [rsp + 0x60]
mov rcx, r13
call fcn.14005d8b0
nop
lea rcx, [rbp + 0x3a0]
call fcn.14005a690
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rsi, qword [rsp + 0x38]
mov rcx, rsi
call fcn.14005a1f0
nop
test rbx, rbx
je 0x14005fb69
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
cmp byte [rbp + 0x1b8], 0
je 0x14005fb8b
lea rcx, [rbp + 0x190]
call fcn.1400064a0
lea rcx, [rbp + 0x170]
call fcn.14005a690
nop
cmp byte [rbp + 0x418], 0
je 0x14005fbad
lea rcx, [rbp + 0x3f0]
call fcn.1400064a0
lea rcx, [rbp + 0x3d0]
call fcn.14005a690
nop
cmp byte [rbp + 0x148], 0
je 0x14005fbee
mov rbx, qword [rbp + 0x140]
test rbx, rbx
je 0x14005fbee
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005fbee
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005fbee
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.140062ee0
lea rcx, [rbp + 0x358]
call fcn.1400846b0
lea rcx, [rbp + 0x338]
call fcn.14005a690
lea rcx, [rbp + 0x318]
call fcn.14005a690
lea rcx, [rbp + 0x2d8]
call fcn.1400568f0
lea rcx, [rbp + 0x298]
call fcn.1400568f0
lea rcx, [rbp + 0x280]
call fcn.140064130
mov rcx, qword [rbp + 0x268]
test rcx, rcx
jle 0x14005fc56
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov rcx, qword [rbp + 0x230]
test rcx, rcx
jle 0x14005fc68
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp + 0x228]
test rcx, rcx
jle 0x14005fc7a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x220]
test rcx, rcx
jle 0x14005fc8d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14005fcca
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14005fcca
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005fcca
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rsp + 0x58]
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x14005ec78
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005ec78
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x14005ec78
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + reloc.WS2_32.dll_htonl]
jmp 0x14005ec78
call fcn.140053270
nop
call fcn.140053270
int3
call fcn.140053270
nop
call fcn.140053270
nop
call fcn.140053270
int3