Function at 0x14013b270
Capabilities:
Convert ip address from string

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x1d0
mov rax, qword [0x1401e7890]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x1e0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x1f0]
mov rax, qword [rax + 0xca8]
mov qword [rsp + 0x38], rax
mov rax, qword [str.unknown]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc8]
mov rdi, rax
xor eax, eax
mov ecx, 0xf8
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xa0]
movzx eax, byte [rax + 0xd4]
cmp eax, 5
jne 0x14013b305
mov dword [rsp + 0x80], 1
jmp 0x14013b310
mov dword [rsp + 0x80], 0
cmp dword [rsp + 0x80], 0
jne 0x14013b327
mov dword [rsp + 0x84], 0
jmp 0x14013b332
mov dword [rsp + 0x84], 1
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x46], al
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rax + 0x18]
call fcn.140158210
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x1f0]
movzx eax, byte [rax + 0x6ab]
mov byte [rsp + 0x44], al
mov byte [rsp + 0x45], 0
mov qword [rsp + 0x50], 0
xor eax, eax
test eax, eax
jne 0x14013b381
mov rax, qword [rsp + 0x1e8]
mov eax, dword [rax]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
dec eax
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0xf
ja case.0x14013b3c0.5
movsxd rax, dword [rsp + 0x58]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0x13c598]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0xa0]
movzx eax, byte [rax + 0x2c8]
test eax, eax
je 0x14013b401
mov rax, qword [rsp + 0x1e8]
mov r9d, dword [rax + 0x20]
mov rax, qword [rsp + 0x1e8]
mov r8, qword [rax + 0x18]
lea rdx, str.SOCKS5:_connecting_to_HTTP_proxy__s_port__d
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
movzx eax, byte [rsp + 0x46]
test eax, eax
jne 0x14013b439
cmp qword [rsp + 0x98], 0xff
jbe 0x14013b439
mov r8, qword [rsp + 0x98]
lea rdx, str.SOCKS5:_server_resolving_disabled_for_hostnames_of_length___255__actual_len_zu_
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
mov byte [rsp + 0x46], 1
movzx eax, byte [rsp + 0x44]
and eax, 0xfffffffa
test eax, eax
je 0x14013b461
movzx eax, byte [rsp + 0x44]
mov r8d, eax
lea rdx, str.warning:_unsupported_value_passed_to_CURLOPT_SOCKS5_AUTH:__u
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
movzx eax, byte [rsp + 0x44]
and eax, 1
test eax, eax
jne 0x14013b47d
mov rax, qword [rsp + 0x1e8]
mov qword [rax + 0x28], 0
movzx eax, byte [rsp + 0x44]
and eax, 4
test eax, eax
je 0x14013b48e
mov byte [rsp + 0x45], 1
mov dword [rsp + 0x48], 0
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
mov byte [rcx + rax], 5
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
mov byte [rcx + rax], 0
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x45]
test eax, eax
je 0x14013b4f1
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
mov byte [rcx + rax], 1
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 0x28], 0
je 0x14013b518
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
mov byte [rcx + rax], 2
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
sub eax, 2
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x38]
mov byte [rdx + rcx], al
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx + 8], rax
lea rax, [0x1401e4748]
mov qword [rsp + 0x20], rax
mov r9d, 0x1d
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a450
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013b597
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013b5ad
xor eax, eax
jmp 0x14013c57c
mov r8d, 4
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
jmp case.0x14013b3c0.3
lea rax, str.initial_SOCKS5_request
mov qword [rsp + 0x20], rax
mov r9d, 0x1d
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a450
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013b60f
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je case.0x14013b3c0.3
xor eax, eax
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
mov qword [rax + 8], 2
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
lea rax, str.initial_SOCKS5_response
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_ntohs
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a540
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013b68e
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013b6a9
xor eax, eax
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 5
je 0x14013b6e3
lea rdx, str.Received_invalid_version_in_initial_SOCKS5_response.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 2
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
test eax, eax
jne 0x14013b71e
mov r8d, 9
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
jmp case.0x14013b3c0.9
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 2
jne 0x14013b75a
mov r8d, 6
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
jmp case.0x14013b3c0.6
movzx eax, byte [rsp + 0x45]
test eax, eax
je 0x14013b7d5
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 1
jne 0x14013b7d5
mov r8d, 5
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e0]
call fcn.1401520c0
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x14013b7d3
lea rdx, str.Unable_to_negotiate_SOCKS5_GSS_API_context.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 4
jmp 0x14013c57c
jmp 0x14013b84c
movzx eax, byte [rsp + 0x45]
test eax, eax
jne 0x14013b815
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 1
jne 0x14013b815
lea rdx, str.SOCKS5_GSSAPI_per_message_authentication_is_not_supported.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 5
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 0xff
jne 0x14013b84c
lea rdx, str.No_authentication_method_was_acceptable.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, ntohs
jmp 0x14013c57c
lea rdx, str.Undocumented_SOCKS5_mode_attempted_to_be_used_by_server.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 0x20
jmp 0x14013c57c
jmp 0x14013c566
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 0x28], 0
je 0x14013b8c0
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 0x30], 0
je 0x14013b8c0
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rax + 0x28]
call fcn.140158210
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rax + 0x30]
call fcn.140158210
mov qword [rsp + 0x70], rax
jmp 0x14013b8d2
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 1
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
movzx ecx, byte [rsp + 0x68]
mov byte [rax], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 0x28], 0
je 0x14013b988
cmp qword [rsp + 0x68], 0
je 0x14013b988
cmp qword [rsp + 0x68], 0xff
jbe 0x14013b95f
lea rdx, str.Excessive_user_name_length_for_proxy_auth
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, ntohs
jmp 0x14013c57c
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov r8, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x1e8]
mov rdx, qword [rcx + 0x28]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
movzx ecx, byte [rsp + 0x70]
mov byte [rax], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 0x30], 0
je 0x14013ba2a
cmp qword [rsp + 0x70], 0
je 0x14013ba2a
cmp qword [rsp + 0x70], 0xff
jbe 0x14013ba01
lea rdx, str.Excessive_password_length_for_proxy_auth
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 0xa
jmp 0x14013c57c
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov r8, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x1e8]
mov rdx, qword [rcx + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x30], rax
mov r8d, 7
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x30]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
lea rax, str.SOCKS5_sub_negotiation_request
mov qword [rsp + 0x20], rax
mov r9d, 0x1c
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a450
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013bac1
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013bad7
xor eax, eax
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
mov rax, qword [rsp + 0x1e8]
mov qword [rax + 8], 2
mov r8d, 8
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
lea rax, str.SOCKS5_sub_negotiation_response
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_14
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a540
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013bb58
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013bb70
xor eax, eax
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x14013bbce
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x38]
movzx ecx, byte [rdx + rcx]
mov r9d, eax
mov r8d, ecx
lea rdx, str.User_was_rejected_by_the_SOCKS5_server___d__d_.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 0x21
jmp 0x14013c57c
mov r8d, 9
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
movzx eax, byte [rsp + 0x46]
test eax, eax
je 0x14013bc8f
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9b, 1
mov rax, qword [rsp + 0x1e8]
mov r8d, dword [rax + 0x20]
mov rax, qword [rsp + 0x1e8]
mov rdx, qword [rax + 0x18]
mov rcx, qword [rsp + 0x1f0]
call fcn.1400f19f0
mov dword [rsp + 0x88], eax
cmp dword [rsp + 0x88], 0xffffffff
jne 0x14013bc43
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14013c57c
cmp dword [rsp + 0x88], 1
jne 0x14013bc6f
mov r8d, 0xa
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
xor eax, eax
jmp 0x14013c57c
mov r8d, ntohs
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
jmp case.0x14013b3c0.11
jmp case.0x14013b3c0.12
mov rax, qword [rsp + 0x1e8]
mov r8d, dword [rax + 0x20]
mov rax, qword [rsp + 0x1e8]
mov rdx, qword [rax + 0x18]
mov rcx, qword [rsp + 0x1f0]
call fcn.1400f21c0
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
je 0x14013bd09
mov rax, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x50]
mov qword [rax + 0xdf8], rcx
mov rax, qword [rsp + 0x1f0]
mov byte [rax + 0xe18], 1
mov rax, qword [rsp + 0x1e8]
mov r8, qword [rax + 0x18]
lea rdx, str.SOCKS5:_hostname__s_found
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
cmp qword [rsp + 0x50], 0
jne case.0x14013b3c0.11
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x1f0]
call fcn.1400f2ca0
mov dword [rsp + 0x60], eax
cmp qword [rsp + 0x50], 0
jne case.0x14013b3c0.11
cmp dword [rsp + 0x60], 0
je 0x14013bd40
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14013c57c
xor eax, eax
jmp 0x14013c57c
mov qword [rsp + 0x78], 0
cmp qword [rsp + 0x50], 0
je 0x14013bd65
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x14013bd97
mov rax, qword [rsp + 0x1e8]
mov r8, qword [rax + 0x18]
lea rdx, str.Failed_to_resolve___s__for_SOCKS5_connect.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14013c57c
mov r8d, 0x100
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x78]
call fcn.1400f2130
lea rcx, [rsp + 0xc0]
call fcn.140158210
mov qword [rsp + 0xb0], rax
mov eax, 0x100
sub rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb0]
lea rcx, [rsp + rcx + 0xc0]
mov rdx, qword [rsp + 0x1e8]
mov r9d, dword [rdx + 0x20]
lea r8, [0x1401e456c]
mov rdx, rax
call fcn.1400ea590
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 5
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 1
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
cmp dword [rax + 4], 2
jne 0x14013bf11
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 1
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x5c], 0
jmp 0x14013beb9
mov eax, dword [rsp + 0x5c]
inc eax
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 4
jge 0x14013bef3
movsxd rax, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0xb8]
movzx eax, byte [rdx + rax + 4]
mov byte [rcx], al
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
jmp 0x14013beaf
lea r8, [rsp + 0xc0]
lea rdx, str.SOCKS5_connect_to_IPv4__s__locally_resolved_
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
jmp 0x14013bf36
mov qword [rsp + 0x78], 0
lea r8, [rsp + 0xc0]
lea rdx, str.SOCKS5_connection_to__s_not_supported
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x1f0]
call fcn.1400f1ee0
jmp case.0x14013b3c0.13
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 5
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 1
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
movzx eax, byte [rsp + 0x46]
test eax, eax
jne case.0x14013b3c0.13
lea r8, [rsp + 0xa8]
mov rax, qword [rsp + 0x1e8]
mov rdx, qword [rax + 0x18]
mov ecx, 2
call qword [sym.imp.WS2_32.dll_inet_pton]
cmp eax, 1
jne 0x14013c040
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 1
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov r8d, 4
lea rdx, [rsp + 0xa8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
add rax, 4
mov qword [rsp + 0x30], rax
jmp 0x14013c0cb
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 3
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
movzx ecx, byte [rsp + 0x98]
mov byte [rax], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov r8, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x1e8]
mov rdx, qword [rcx + 0x18]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x1e8]
mov r9d, dword [rax + 0x20]
mov rax, qword [rsp + 0x1e8]
mov r8, qword [rax + 0x18]
lea rdx, str.SOCKS5_connect_to__s:_d__remotely_resolved_
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
mov rax, qword [rsp + 0x1e8]
mov eax, dword [rax + 0x20]
sar eax, 8
and eax, 0xff
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
add rdx, rcx
mov rcx, rdx
mov byte [rcx], al
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x1e8]
mov eax, dword [rax + 0x20]
and eax, 0xff
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
add rdx, rcx
mov rcx, rdx
mov byte [rcx], al
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xa0]
cmp dword [rax + 0x6f4], 0
je 0x14013c187
lea rdx, [0x1401e4c78]
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 6
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x30]
mov qword [rax + 8], rcx
mov r8d, reloc.WLDAP32.dll_Ordinal_14
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
lea rax, str.SOCKS5_connect_request
mov qword [rsp + 0x20], rax
mov r9d, 0x1e
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a450
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013c209
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013c21f
xor eax, eax
jmp 0x14013c57c
mov rax, qword [rsp + 0xa0]
cmp dword [rax + 0x6f4], 0
je 0x14013c24e
lea rdx, str.SOCKS5_GSS_API_protection_not_yet_implemented.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 6
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
mov qword [rax + 8], 0xa
mov rax, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
mov r8d, reloc.WS2_32.dll_ntohs
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
lea rax, str.SOCKS5_connect_request_ack
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a540
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013c2d2
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013c2ed
xor eax, eax
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 5
je 0x14013c327
lea rdx, str.SOCKS5_reply_has_wrong_version__version_should_be_5.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 2
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x14013c3c9
mov dword [rsp + 0x90], Ordinal_27
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
mov dword [rsp + 0x8c], eax
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
mov r9d, eax
mov rax, qword [rsp + 0x1e8]
mov r8, qword [rax + 0x18]
lea rdx, str.Cant_complete_SOCKS5_connection_to__s.___d_
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
cmp dword [rsp + 0x8c], 9
jge 0x14013c3bd
movsxd rax, dword [rsp + 0x8c]
lea rcx, [0x140166728]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x90]
jmp 0x14013c57c
mov eax, 1
imul rax, rax, 3
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 3
jne 0x14013c40c
mov eax, 1
imul rax, rax, 4
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
mov dword [rsp + 0xac], eax
mov eax, dword [rsp + 0xac]
add eax, 7
cdqe
mov qword [rsp + 0x30], rax
jmp 0x14013c46e
mov eax, 1
imul rax, rax, 3
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 4
jne 0x14013c42e
mov qword [rsp + 0x30], socket
jmp 0x14013c46e
mov eax, 1
imul rax, rax, 3
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rcx + rax]
cmp eax, 1
jne 0x14013c450
mov qword [rsp + 0x30], 0xa
jmp 0x14013c46e
lea rdx, str.SOCKS5_reply_has_wrong_address_type.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e22e0
mov eax, 1
jmp 0x14013c57c
mov rax, qword [rsp + 0xa0]
cmp dword [rax + 0x6f4], 0
jne case.0x14013b3c0.16
cmp qword [rsp + 0x30], 0xa
jle 0x14013c4d9
mov rax, qword [rsp + 0x30]
sub rax, 0xa
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx + 8], rax
mov eax, 1
imul rax, rax, 0xa
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x1e8]
mov qword [rcx + 0x10], rax
mov r8d, reloc.WS2_32.dll_recv
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
jmp case.0x14013b3c0.16
mov r8d, reloc.WS2_32.dll_recvfrom
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
jmp 0x14013c566
lea rax, str.SOCKS5_connect_request_address
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_listen
mov r8, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1e0]
call fcn.14013a540
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14013c538
mov eax, dword [rsp + 0x40]
jmp 0x14013c57c
mov rax, qword [rsp + 0x1e8]
cmp qword [rax + 8], 0
je 0x14013c54b
xor eax, eax
jmp 0x14013c57c
mov r8d, reloc.WS2_32.dll_recvfrom
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14013a410
lea rdx, str.SOCKS5_request_granted.
mov rcx, qword [rsp + 0x1f0]
call fcn.1400e21d0
xor eax, eax
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.140156eb0
add rsp, 0x1d0
pop rdi
ret