Function at 0x1400b8b60
Capabilities:
Check for time delay via queryperformancecounter
Connect socket
Set socket configuration

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x9a8
movaps xmmword [rsp + 0x990], xmm6
mov rbx, rdx
mov r13, rcx
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xe0], r9
mov r12, qword [rdx + 0x98]
mov edi, dword [r12 + 0x80]
cmp edi, 0x3b9aca00
jne 0x1400b8c1e
mov rax, qword [rbx + 0x88]
mov qword [rsp + 0xb8], rax
mov eax, dword [rbx + 0x90]
mov dword [rsp + 0x48], eax
movabs r14, 0x8000000000000000
cmp qword [r12 + 0x28], r14
mov qword [rsp + 0xb0], r12
je 0x1400b8dee
mov qword [rsp + 0x60], rbx
mov rbx, qword [r12 + 0x30]
mov rsi, qword [r12 + 0x38]
test rsi, rsi
je 0x1400b8cb3
js 0x1400ba716
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, rsi
call fcn.14008b700
mov rdi, rax
test rax, rax
jne 0x1400b8cb8
jmp 0x1400ba716
mov rax, qword [r12 + 0x78]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x170], 0
lea rcx, [rsp + 0x170]
call sub.KERNEL32.dll_QueryPerformanceCounter
test eax, eax
je 0x1400ba76e
mov rsi, qword [rsp + 0x170]
mov rcx, qword [0x140259130]
test rcx, rcx
jne 0x1400b8c99
mov qword [rsp + 0x170], 0
lea rcx, [rsp + 0x170]
call sub.KERNEL32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1400ba76e
mov rcx, qword [rsp + 0x170]
mov qword [0x140259130], rcx
test rcx, rcx
je 0x1400ba716
mov rax, rsi
or rax, rcx
shr rax, 0x20
je 0x1400b8d2a
mov rax, rsi
xor edx, edx
div rcx
jmp 0x1400b8d30
mov edi, 1
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov ebp, dword [r12 + 0x70]
movabs r15, 0x8000000000000000
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax + 0x247c394d], al
jne 0x1400b8cef
mov rbx, r15
cmp qword [r12 + 0x58], r15
jne 0x1400b8ee0
jmp 0x1400b8f35
mov r15, qword [r12 + 0x48]
mov rbx, qword [r12 + 0x50]
test rbx, rbx
je 0x1400b8eb7
add dword [rax], eax
invalid
js 0x1400ba716
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, rbx
call fcn.14008b700
mov r14, rax
test rax, rax
test eax, eax
jne 0x1400b8ebd
jmp 0x1400ba716
mov eax, esi
xor edx, edx
sal bh, cl
int1
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1400b8d54
xor edx, edx
div rcx
mov rcx, rax
jmp 0x1400b8d5a
xor edx, edx
div ecx
mov ecx, eax
add rcx, r8
mov rax, rcx
shr rax, 9
shr eax, 9
movabs rdx, 0x44b82fa09b5a53
mul rdx
shr rdx, 0xb
mov dword [rsp + 0x48], 0x3b9aca00
add qword [rsp + 0xb8], rdx
jae 0x1400b8da5
movabs r14, 0x8000000000000000
cmp qword [r12 + 0x28], r14
mov qword [rsp + 0xb0], r12
je 0x1400b8dee
jmp 0x1400b8bde
imul rax, rdx, 0x3b9aca00
sub rcx, rax
add edi, ecx
cmp edi, 0x3b9aca00
jb 0x1400b8e91
inc qword [rsp + 0xb8]
je 0x1400b8dd1
add edi, 0xc4653600
mov dword [rsp + 0x48], edi
movabs r14, 0x8000000000000000
cmp qword [r12 + 0x28], r14
mov qword [rsp + 0xb0], r12
jne 0x1400b8bde
mov qword [rsp + 0xe8], r14
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x390], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x398], rax
lea rax, [rsp + 0xa10]
mov qword [rsp + 0x3a0], rax
lea rax, [0x140018340]
mov qword [rsp + 0x3a8], rax
lea rax, [0x1402022f8]
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 2
mov qword [rsp + 0x190], 0
lea rax, [rsp + 0x390]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 2
lea rcx, [rsp + 0x138]
lea rdx, [rsp + 0x170]
call fcn.14000ba20
jmp 0x1400b903c
mov dword [rsp + 0x48], edi
movabs r14, 0x8000000000000000
cmp qword [r12 + 0x28], r14
mov qword [rsp + 0xb0], r12
je 0x1400b8dee
jmp 0x1400b8bde
mov r14d, 1
mov rcx, r14
mov rdx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
movabs r15, 0x8000000000000000
cmp qword [r12 + 0x58], r15
je 0x1400b8cea
mov dword [rsp + 0x44], ebp
mov rbp, r13
mov r13, qword [r12 + 0x60]
mov r15, qword [r12 + 0x68]
test r15, r15
je 0x1400b8f1a
js 0x1400ba716
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, r15
call fcn.14008b700
mov r12, rax
test rax, rax
jne 0x1400b8f20
jmp 0x1400ba716
mov r12d, 1
mov rcx, r12
mov rdx, r13
invalid
mov r8, r15
call sub.msvcrt.dll_memcpy
add eax, 0xed894900
mov ebp, dword [rsp + 0x44]
mov rax, qword [rsp + 0xb0]
movzx eax, byte [rax + 0x74]
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xf8], rsi
mov qword [rsp + 0x108], r14
mov ah, 0x24
or byte [rcx], al
add byte [rax], al
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r15
mov dword [rsp + 0x128], edi
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x118], r15
sbb byte [rcx], al
add byte [rax], al
lea rcx, [rsp + 0x130]
mov dword [rsp + 0x130], ebp
mov byte [rsp + 0x134], al
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x390], rax
mov dword [rsp + 0x390], eax
lea rax, [0x140001e40]
mov qword [rsp + 0x398], rax
mov qword [rsp + 0x3a0], rcx
mov dword [rsp + 0x3a0], ecx
lea rax, [0x140018570]
mov qword [rsp + 0x3a8], rax
lea rax, [0x1402022f8]
xchg ebx, eax
adc al, 0
invalid
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 2
mov qword [rsp + 0x190], 0
lea rax, [rsp + 0x390]
mov qword [rsp + 0x180], rax
mov dword [rsp + 0x180], eax
mov qword [rsp + 0x188], 2
lea rcx, [rsp + 0x138]
lea rdx, [rsp + 0x170]
lea edx, [rsp + 0x170]
call fcn.14000ba20
movabs r14, 0x8000000000000000
mov rbx, qword [rsp + 0x60]
invalid
mov rax, qword [rbx + 0xa0]
mov rdi, qword [rax + 0x28]
mov rsi, qword [rax + 0x30]
lock inc qword [rdi]
jle 0x1400ba716
mov es, ecx
invalid
add byte [rax], al
mov rax, qword [rsi + 0x10]
dec rax
and rax, 0xfffffffffffffff0
loopne case.0x1400b6373.767
lea rdx, [rdi + rax]
add rdx, 0x10
add edx, 0x10
mov r8, qword [rsp + 0x140]
mov r9, qword [rsp + 0x148]
and al, 0x48
add dword [rax], eax
add byte [rbp + rcx*4 - 0x44], cl
and al, 0x80
add byte [rax], al
add byte [rcx + rcx*4 - 7], cl
call qword [rsi + 0x18]
mov rax, qword [rsp + 0x80]
cmp rax, r14
jne 0x1400b91b0
mov rbx, qword [rsp + 0x88]
lea rax, [rsp + 0x138]
mov qword [rsp + 0x70], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x78], rax
lea rax, [0x1401ffcc0]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], 2
mov qword [rsp + 0x3b0], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x3a0], rax
mov qword [rsp + 0x3a8], 1
lea rcx, [rsp + 0x178]
lea rdx, [rsp + 0x390]
call fcn.14000ba20
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x1e8], 0
mov byte [rsp + 0x1f8], 2
mov qword [rsp + 0x170], r14
lea rcx, [rsp + 0x390]
lea rdx, [rsp + 0x170]
mov r8, rbx
call fcn.1400ce690
movaps xmm6, xmmword [rsp + 0x3a0]
lea rdx, [rsp + 0x3b0]
lea rbx, [rsp + 0x8a0]
mov r8d, 0xf0
mov rcx, rbx
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x390]
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm6
add r13, 0x20
mov r8d, 0xf0
mov rcx, r13
mov rdx, rbx
call sub.msvcrt.dll_memcpy
lock dec qword [rdi]
jne 0x1400b9dd2
mov rcx, rdi
mov rdx, rsi
call fcn.1400738e0
jmp 0x1400b9dd2
mov qword [rsp + 0xa8], rax
mov r12, qword [rsp + 0x88]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xd0], rax
lock dec qword [rdi]
jne 0x1400b91e1
mov rcx, rdi
mov rdx, rsi
call fcn.1400738e0
cmp qword [rsp + 0xd0], 0
je 0x1400b9c2a
or al, byte [rax]
invalid
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], r13
mov rax, qword [rsp + 0xe8]
mov dword [rsp + 0x6c], 4
mov qword [rsp + 0x388], rax
cmp rax, r14
je 0x1400b9222
mov eax, dword [rsp + 0x134]
mov dword [rsp + 0x6c], eax
and al, 0x6c
mov r15, qword [rsp + 0xd0]
shl r15, 5
add r15, r12
mov qword [rsp + 0xc0], r12
mov r13, r12
xor ebx, ebx
fucomi st(3)
invalid
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
invalid
invalid
invalid
invalid
dec r12
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov bl, 0xbc
add eax, 0x2e666600
nop dword [rax + rax]
add r13, 0x20
cmp r13, r15
je 0x1400b9cf2
mov r12, rbx
movzx ebp, word [r13]
cmp bp, 2
je 0x1400b9cef
mov ebx, dword [r13 + 0x14]
mov esi, dword [r13 + 0x18]
movzx eax, word [r13 + 0x1c]
mov word [rsp + 0x44], ax
movzx eax, word [r13 + 0x1e]
mov word [rsp + 0x42], ax
movzx eax, word [r13 + 0x12]
mov word [rsp + 0x90], ax
movups xmm0, xmmword [r13 + 2]
movaps xmmword [rsp + 0x80], xmm0
mov edi, 0x3b9aca00
cmp dword [rsp + 0x48], 0x3b9aca00
cmp ecx, dword [rdi]
test byte [rdx + 1], dl
add byte [rax], al
mov edi, esi
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x390], rax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x398], eax
mov qword [rsp + 0x170], 0
lea rcx, [rsp + 0x170]
mov word [rax + rsi*2], fs
add dword [rax], eax
add al, ch
mov edx, 0x850005bb
ror byte [rdi], 0x84
pop rax
adc al, 0
invalid
mov rsi, qword [rsp + 0x170]
mov r8, qword [0x140259130]
test r8, r8
jne 0x1400b9363
mov qword [rsp + 0x170], 0
lea rcx, [rsp + 0x170]
call sub.KERNEL32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1400ba76e
mov r8, qword [rsp + 0x170]
mov qword [0x140259130], r8
test r8, r8
je 0x1400ba716
mov rax, rsi
or rax, r8
shr rax, 0x20
je 0x1400b937c
mov rax, rsi
xor edx, edx
div r8
mov rcx, rax
jmp 0x1400b9385
mov eax, esi
xor edx, edx
div r8d
mov ecx, eax
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, r8
shr rdx, 0x20
mov esi, edi
je 0x1400b93a1
xor edx, edx
div r8
jmp 0x1400b93a6
xor edx, edx
div r8d
imul rcx, rcx, 0x3b9aca00
add rcx, rax
mov rax, rcx
shr rax, 9
movabs rdx, 0x44b82fa09b5a53
mul rdx
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov qword [rsp + 0x170], rdx
mov dword [rsp + 0x178], ecx
lea rcx, [rsp + 0x390]
lea rdx, [rsp + 0x170]
call fcn.140093890
cmp edx, 0x3b9aca00
je 0x1400b9e87
mov r14, rax
mov edi, edx
cmp qword [rsp + 0xd0], 1
je 0x1400b942a
mov rax, r14
shr rax, 1
shr edi, 1
lea ecx, [rdi + 0x1dcd6500]
test r14b, 1
cmove ecx, edi
mov edi, ecx
mov r14, rax
test byte [rsp + 0x6c], 0xfb
jne 0x1400b9500
cmp edi, 0x3b9aca00
jne 0x1400b9560
add dword [rax], eax
invalid
mov r14d, ebx
mov rbx, qword [rsp + 0x86]
mov ebx, dword [rsp + 0x86]
cmp bp, 3
je 0x1400b9735
add al, byte [rax]
invalid
mov eax, dword [rsp + 0x8e]
mov word [rsp + 0x170], bp
movzx ecx, word [rsp + 0x84]
lea rdx, [rsp + 0x180]
xchg esp, eax
and al, 0x80
add dword [rax], eax
add byte [rsi - 0x77], ah
mov dword [rdx - 0xa], ecx
mov ecx, dword [rsp + 0x80]
mov dword [rdx - 0xe], ecx
mov qword [rsp + 0x178], rbx
mov dword [rsp + 0x178], ebx
mov dword [rsp + 0x180], eax
mov dword [rsp + 0x184], r14d
mov dword [rsp + 0x188], esi
invalid
movzx eax, word [rsp + 0x44]
mov word [rsp + 0x18c], ax
movzx eax, word [rsp + 0x42]
mov word [rsp + 0x18e], ax
test byte [rsi + rcx*4], ah
add dword [rax], eax
add byte [rax - 0x73], cl
lea ecx, [rsp + 0x390]
xor edx, edx
lea r8, [rsp + 0x170]
add dword [rax], eax
add al, ch
sahf
xchg esp, eax
std
dec dword [rax - 0x7d]
mov esp, 0x39024
add byte [rax], al
invalid
je 0x1400b9f75
mov rbx, qword [rsp + 0x398]
test r12, r12
jne 0x1400b973e
test dword [rdx + rax], ecx
invalid
jmp 0x1400b9270
movabs rbp, 0x8000000000000000
cmp qword [rsp + 0xe8], rbp
add byte [rax], al
je 0x1400ba716
mov rbx, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xf8]
test rsi, rsi
test esi, esi
je 0x1400b9611
js 0x1400ba716
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, rsi
mov edx, esi
call fcn.14008b700
mov rdi, rax
test rax, rax
test eax, eax
jne 0x1400b9616
jmp 0x1400ba716
mov qword [rsp + 0xc8], r12
mov r12, r15
mov rax, qword [0x140259110]
sti
sbb dword [rax], eax
cmp rax, 3
jne 0x1400b98d9
lea r15, [rsp + 0x170]
mov rcx, r15
mov edx, ebp
call fcn.14008ae70
sbb ch, bh
dec dword [rax - 0x7d]
mov esp, 0x17024
jo 0x1400b9595
add byte [rax], al
invalid
je 0x1400b95ba
mov rbx, qword [rsp + 0x178]
mov r15, r12
mov r12, qword [rsp + 0xc8]
and al, 0xc8
add byte [rax], al
invalid
test r12, r12
jne 0x1400b973e
jmp 0x1400b9270
mov dword [rsp + 0x4c], esi
mov rsi, qword [rsp + 0x178]
mov dword [rsp + 0x170], 1
add dword [rax], eax
add byte [rcx], al
add byte [rax], al
invalid
mov rcx, rsi
mov edx, 0x8004667e
mov r8, r15
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x1400b97cb
test bp, bp
je 0x1400b97ea
mov r8d, 0x1c
mov cx, 0x17
movups xmm0, xmmword [rsp + 0x82]
add byte [rax], al
add byte [rdi], cl
mov bh, 0x44
and al, 0x44
invalid
mov edx, ebx
jmp 0x1400b9806
mov edi, 1
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
invalid
call sub.msvcrt.dll_memcpy
mov r14, rbp
mov esi, ebp
cmp qword [rsp + 0x100], rbp
je 0x1400b9682
mov rbx, qword [rsp + 0x108]
mov r14, qword [rsp + 0x110]
test r14, r14
je 0x1400b9667
js 0x1400ba716
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, r14
call fcn.14008b700
test rax, rax
jne 0x1400b966c
jmp 0x1400ba716
mov eax, 1
mov qword [rsp + 0x380], rax
mov rcx, rax
mov rdx, rbx
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rax, rbp
cmp qword [rsp + 0x118], rbp
je 0x1400b96e0
mov rbx, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x128]
test rbp, rbp
je 0x1400b96c5
js 0x1400ba716
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, rbp
call fcn.14008b700
test rax, rax
jne 0x1400b96ca
jmp 0x1400ba716
mov eax, 1
mov qword [rsp + 0x378], rax
mov rcx, rax
mov rdx, rbx
mov r8, rbp
call sub.msvcrt.dll_memcpy
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x388], rax
je 0x1400ba716
mov r8d, 0x17
mov cl, 0x27
lea rdx, str.SOCKS_feature_disabled.unknown_scheme_
call fcn.1400c9690
mov rbx, rax
test rsi, rsi
je 0x1400b9725
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
shl r14, 1
test r14, r14
jne 0x1400b9789
shl rbp, 1
test rbp, rbp
jne 0x1400b97a7
test r12, r12
je 0x1400b9270
mov eax, r12d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400b9270
test rax, rax
je 0x1400b9270
mov rsi, qword [r12 - 1]
mov rdi, qword [r12 + 7]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b9251
cmp qword [rdi + 0x10], 0x11
jb 0x1400b9240
mov rsi, qword [rsi - 8]
jmp 0x1400b9240
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0x380]
call sub.KERNEL32.dll_HeapFree
shl rbp, 1
test rbp, rbp
je 0x1400b9735
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0x378]
call sub.KERNEL32.dll_HeapFree
test r12, r12
jne 0x1400b973e
jmp 0x1400b9270
call sub.ws2_32.dll_WSAGetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
mov r15, r12
mov r12, qword [rsp + 0xc8]
jmp 0x1400b9af5
movzx eax, word [rsp + 0x84]
mov edx, dword [rsp + 0x80]
mov r8d, 0x10
mov cx, 2
xorps xmm0, xmm0
mov r15, r12
mov dword [rsp + 0xa4], ebx
rol ax, 8
mov word [rsp + 0x170], cx
mov word [rsp + 0x172], ax
mov dword [rsp + 0x174], edx
movups xmmword [rsp + 0x178], xmm0
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x188], eax
mov rcx, rsi
lea rdx, [rsp + 0x170]
call sub.ws2_32.dll_connect
cmp eax, 0xffffffff
mov r12, qword [rsp + 0xc8]
je 0x1400b985f
xor ebx, ebx
jmp 0x1400b986e
call sub.ws2_32.dll_WSAGetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
mov dword [rsp + 0x170], 0
mov rcx, rsi
mov edx, 0x8004667e
lea r8, [rsp + 0x170]
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x1400b98b7
test rbx, rbx
je 0x1400b9f83
mov edx, ebx
and edx, 3
lea rcx, [0x1401bb3b4]
movsxd rax, dword [rcx + rdx*4]
add rax, rcx
jmp rax
movzx eax, byte [rbx + 0x10]
jmp 0x1400b9929
call sub.ws2_32.dll_WSAGetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
test rbx, rbx
je 0x1400b9a24
mov edx, ebx
and edx, 3
jmp 0x1400b9a95
call fcn.14008aca0
jmp 0x1400b957c
movzx eax, byte [rbx + 0xf]
cmp al, 0xd
jne 0x1400b9af5
test r14, r14
jne 0x1400b9946
test edi, edi
jne 0x1400b9946
lea rdi, [0x1401dbba0]
jmp 0x1400b9a95
cmp r14, 0x7fffffff
mov eax, 0x7fffffff
cmovae r14, rax
mov eax, edi
imul rax, rax, 0x10624dd3
shr rax, 0x26
mov dword [rsp + 0x70], r14d
test r14, r14
mov ecx, eax
mov r14, rdx
mov edx, 1
cmove ecx, edx
cmp edi, 0x3e8
cmovae ecx, eax
mov dword [rsp + 0x74], ecx
mov r8d, 0x1f8
lea rcx, [rsp + 0x180]
xor edx, edx
call sub.msvcrt.dll_memset
mov qword [rsp + 0x390], 1
mov qword [rsp + 0x398], rsi
mov r8d, 0x1f8
lea rcx, [rsp + 0x3a0]
xor edx, edx
call sub.msvcrt.dll_memset
mov qword [rsp + 0x170], 1
mov qword [rsp + 0x178], rsi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov ecx, 1
xor edx, edx
lea r8, [rsp + 0x390]
lea r9, [rsp + 0x170]
call sub.ws2_32.dll_select
mov rdx, r14
lea rdi, [0x1401db3e0]
test eax, eax
je 0x1400b9a38
cmp eax, 0xffffffff
jne 0x1400b9a2c
call sub.ws2_32.dll_WSAGetLastError
mov rdx, r14
mov edi, eax
shl rdi, 0x20
or rdi, 2
jmp 0x1400b9a95
mov rbx, rdi
jmp 0x1400b9af5
cmp dword [rsp + 0x390], 1
jne 0x1400b9a78
xor edi, edi
lea rax, [rdx - 2]
cmp rax, 2
jb 0x1400b9ae9
test rdx, rdx
je 0x1400b9ae9
mov rcx, qword [rbx - 1]
mov r14, qword [rbx + 7]
mov qword [rsp + 0x50], rcx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x1400b9ad5
cmp qword [r14 + 0x10], 0x11
jb 0x1400b9ac2
mov r8, qword [rsp + 0x50]
mov r8, qword [r8 - 8]
jmp 0x1400b9ac7
mov rcx, rsi
call fcn.14008af60
mov rdi, rdx
test rax, rax
je 0x1400b9a8d
mov rdx, r14
jmp 0x1400b9a95
test rdi, rdi
mov rdx, r14
je 0x1400b9a36
lea rax, [rdx - 2]
cmp rax, 2
jb 0x1400b9ae9
test rdx, rdx
je 0x1400b9ae9
mov rcx, qword [rbx - 1]
mov r14, qword [rbx + 7]
mov qword [rsp + 0x50], rcx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x1400b9ad5
cmp qword [r14 + 0x10], 0x11
jae 0x1400b9a6d
mov r8, qword [rsp + 0x50]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
dec rbx
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rbx, rdi
test rdi, rdi
je 0x1400b9f83
mov rcx, rsi
call sub.ws2_32.dll_closesocket
test r12, r12
jne 0x1400b973e
jmp 0x1400b9270
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x80], rax
lea rax, [0x1400c33a0]
mov qword [rsp + 0x88], rax
lea rax, str.No_ip_address_for
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 1
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], 1
lea rcx, [rsp + 0x390]
lea rdx, [rsp + 0x170]
call fcn.14000ba20
mov qword [r13], r14
movups xmm0, xmmword [rsp + 0x390]
movups xmmword [r13 + 8], xmm0
mov rax, qword [rsp + 0x3a0]
mov qword [r13 + 0x18], rax
mov qword [r13 + 0x20], r14
mov qword [r13 + 0x78], 0
mov byte [r13 + 0x88], 2
cmp qword [rsp + 0xa8], 0
je 0x1400b9dd2
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
jmp 0x1400b9dd2
mov rbx, r12
cmp qword [rsp + 0xa8], 0
je 0x1400b9d13
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0xc0]
call sub.KERNEL32.dll_HeapFree
test rbx, rbx
movabs r14, 0x8000000000000000
mov rdi, qword [rsp + 0x58]
je 0x1400ba716
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400ba716
movabs rcx, 0x726f727265207463
mov qword [rax + 5], rcx
movabs rcx, 0x207463656e6e6f43
mov qword [rax], rcx
mov qword [rsp + 0x178], 0xd
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 0xd
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x1e8], 0
mov byte [rsp + 0x1f8], 4
mov qword [rsp + 0x170], r14
lea rsi, [rsp + 0x390]
lea rdx, [rsp + 0x170]
mov rcx, rsi
mov r8, rbx
call fcn.1400ce690
mov r8d, 0x110
mov rcx, rdi
mov rdx, rsi
call sub.msvcrt.dll_memcpy
cmp qword [rsp + 0x138], 0
je 0x1400b9df3
mov r8, qword [rsp + 0x140]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0xe8]
cmp rax, r14
je 0x1400b9e6b
test rax, rax
je 0x1400b9e1b
mov r8, qword [rsp + 0xf0]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x100]
cmp rax, r14
je 0x1400b9e43
test rax, rax
je 0x1400b9e43
mov r8, qword [rsp + 0x108]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x118]
cmp rax, r14
je 0x1400b9e6b
test rax, rax
je 0x1400b9e6b
mov r8, qword [rsp + 0x120]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movaps xmm6, xmmword [rsp + 0x990]
add rsp, 0x9a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x140259141]
mov edx, 0x1a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400ba716
movups xmm0, xmmword [0x1401ff9d1]
movups xmmword [rax + 0xa], xmm0
movups xmm0, xmmword [0x1401ff9c7]
movups xmmword [rax], xmm0
mov qword [rsp + 0x170], 0x1a
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], 0x1a
lea rdx, [rsp + 0x170]
mov cl, 0x16
call fcn.1400c9620
movabs r14, 0x8000000000000000
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x1e8], 0
mov byte [rsp + 0x1f8], 8
mov qword [rsp + 0x170], r14
lea rsi, [rsp + 0x390]
lea rdx, [rsp + 0x170]
mov rcx, rsi
mov r8, rax
call fcn.1400ce690
mov r8d, 0x110
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
cmp qword [rsp + 0xa8], 0
je 0x1400ba2a0
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0xc0]
call sub.KERNEL32.dll_HeapFree
jmp 0x1400ba2a0
mov dword [rsp + 0x4c], esi
mov rsi, qword [rsp + 0x398]
jmp 0x1400b9f8b
mov r14d, dword [rsp + 0xa4]
movzx eax, word [rsp + 0x90]
mov word [rsp + 0x160], ax
movaps xmm0, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x150], xmm0
cmp qword [rsp + 0xa8], 0
mov r15, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
je 0x1400b9fd6
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0xc0]
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x70], rsi
mov rax, qword [rsp + 0xb0]
movzx eax, byte [rax + 0xcd]
mov dword [rsp + 0x170], eax
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x170]
mov rcx, rsi
mov edx, 6
mov r8d, 1
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x1400ba117
mov esi, dword [rdi + 0x90]
cmp esi, 0x3b9aca00
jne 0x1400ba172
mov rsi, qword [rsp + 0xb0]
mov rdx, qword [rsi + 0x88]
mov r8d, dword [rsi + 0x90]
mov rcx, qword [rsp + 0x70]
call fcn.140088720
test rax, rax
jne 0x1400ba234
mov rdx, qword [rsi + 0x98]
mov r8d, dword [rsi + 0xa0]
mov rcx, qword [rsp + 0x70]
call fcn.1400887d0
test rax, rax
jne 0x1400ba234
cmp byte [rsp + 0x6c], 0
je 0x1400ba364
mov rax, qword [rsp + 0x70]
mov qword [r15 + 8], rax
mov word [r15 + 0x10], bp
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [r15 + 0x12], xmm0
movzx eax, word [rsp + 0x160]
mov word [r15 + 0x22], ax
mov dword [r15 + 0x24], r14d
mov eax, dword [rsp + 0x4c]
mov dword [r15 + 0x28], eax
movzx eax, word [rsp + 0x44]
mov word [r15 + 0x2c], ax
movzx eax, word [rsp + 0x42]
mov word [r15 + 0x2e], ax
movabs rax, 0x8000000000000000
inc rax
mov qword [r15], rax
mov rcx, r12
call fcn.1400baa20
cmp qword [rsp + 0x138], 0
je 0x1400ba105
mov r8, qword [rsp + 0x140]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
lea rcx, [rsp + 0xe8]
call fcn.1400baaa0
jmp 0x1400b9e6b
call sub.ws2_32.dll_WSAGetLastError
shl rax, 0x20
lea r8, [rax + 2]
movabs r14, 0x8000000000000000
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x1e8], 0
mov byte [rsp + 0x1f8], 8
mov qword [rsp + 0x170], r14
lea rsi, [rsp + 0x390]
lea rdx, [rsp + 0x170]
mov rcx, rsi
jmp 0x1400ba280
mov rdi, qword [rdi + 0x88]
mov qword [rsp + 0x390], rdi
mov dword [rsp + 0x398], esi
call fcn.14008ed60
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x178], edx
lea rcx, [rsp + 0x390]
lea rdx, [rsp + 0x170]
call fcn.140093890
cmp edx, 0x3b9aca00
jne 0x1400ba21b
movzx eax, byte [0x140259141]
mov edx, 0x1a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400ba716
movups xmm0, xmmword [0x1401ff9d1]
movups xmmword [rax + 0xa], xmm0
movups xmm0, xmmword [0x1401ff9c7]
movups xmmword [rax], xmm0
mov qword [rsp + 0x170], 0x1a
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], 0x1a
lea rdx, [rsp + 0x170]
mov cl, 0x16
call fcn.1400c9620
jmp 0x1400ba234
mov r8d, edx
mov rcx, qword [rsp + 0x70]
mov rdx, rax
call fcn.140088720
test rax, rax
je 0x1400ba313
movabs r14, 0x8000000000000000
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x1e8], 0
mov byte [rsp + 0x1f8], 8
mov qword [rsp + 0x170], r14
lea rsi, [rsp + 0x390]
lea rdx, [rsp + 0x170]
mov rcx, rsi
mov r8, rax
call fcn.1400ce690
mov r8d, 0x110
mov rcx, r15
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x70]
call sub.ws2_32.dll_closesocket
test r12, r12
je 0x1400b9dd2
mov eax, r12d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400b9dd2
test rax, rax
je 0x1400b9dd2
lea rsi, [r12 - 1]
mov rdi, qword [r12 - 1]
mov rbx, qword [r12 + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400ba2fd
cmp qword [rbx + 0x10], 0x11
jb 0x1400ba2ec
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
jmp 0x1400b9dd2
lea rcx, [rsp + 0x170]
mov rdx, rdi
mov r8d, esi
call fcn.1400ba8b0
mov r8d, dword [rsp + 0x178]
cmp r8d, 0x3b9aca00
jne 0x1400ba344
mov r8, qword [rsp + 0x170]
jmp 0x1400ba124
mov rdx, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x70]
call fcn.1400887d0
test rax, rax
jne 0x1400ba234
jmp 0x1400ba079
mov rax, qword [rsp + 0x60]
mov r8d, dword [rax + 0x44]
test r8, r8
je 0x1400ba084
mov rax, qword [rsp + 0x60]
mov rsi, qword [rax + 0x20]
mov rbx, qword [rax + 0x28]
cmp rbx, r8
jbe 0x1400ba394
cmp byte [rsi + r8], 0xbf
jg 0x1400ba39a
jmp 0x1400ba716
jne 0x1400ba716
cmp r8d, 5
jne 0x1400ba084
lea rdx, [0x1402158b8]
mov rcx, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400ba084
movabs rax, 0x8000000000000000
cmp qword [rsp + 0xe8], rax
je 0x1400ba084
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
movzx eax, word [rsp + 0xa10]
mov rcx, qword [rsp + 0xb0]
movups xmm0, xmmword [rcx + 0x18]
movups xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x20], ax
lea rdx, [rsp + 0xe8]
lea rdi, [rsp + 0x390]
mov rcx, rdi
call fcn.1400d36e0
mov qword [rsp + 0x80], rdi
lea rax, [0x140001e40]
mov qword [rsp + 0x88], rax
lea rax, [0x140215b38]
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 1
mov qword [rsp + 0x190], 0
lea rax, [rsp + 0x80]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 1
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x170]
call fcn.1400bc5e0
test rax, rax
jne 0x1400ba716
cmp qword [rsp + 0x390], 0
je 0x1400ba4af
mov r8, qword [rsp + 0x398]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x170]
call fcn.140088f00
cmp qword [rsp + 0x170], 0
je 0x1400ba532
mov r8, qword [rsp + 0x178]
movabs r14, 0x8000000000000000
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x1e8], 0
mov byte [rsp + 0x1f8], 8
mov qword [rsp + 0x170], r14
lea rsi, [rsp + 0x390]
lea rdx, [rsp + 0x170]
mov rcx, rsi
call fcn.1400ce690
mov r8d, 0x110
mov rcx, qword [rsp + 0x58]
jmp 0x1400ba28e
mov rdi, qword [rsp + 0x178]
cmp rbx, 6
jb 0x1400ba54b
cmp byte [rsi + 5], 0xbf
jg 0x1400ba555
jmp 0x1400ba716
cmp rbx, 5
jne 0x1400ba716
mov r9, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xe0]
movzx ecx, word [rsp + 0xa10]
mov word [rsp + 0x28], cx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x730]
mov r8d, 5
mov rdx, rsi
call fcn.1400d4e80
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0xa0]
jmp 0x1400ba59d
pause
mov rax, qword [rcx + 8]
cmp rax, 0xffffffffffffffff
je 0x1400ba59b
test rax, rax
js 0x1400ba716
lea rdx, [rax + 1]
lock cmpxchg qword [rcx + 8], rdx
jne 0x1400ba5a1
mov qword [rsp + 0x598], rcx
lea rcx, [rsp + 0x5a0]
lea rdx, [rsp + 0x730]
mov r8d, 0x88
call sub.msvcrt.dll_memcpy
mov word [rsp + 0x170], bp
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [rsp + 0x172], xmm0
movzx eax, word [rsp + 0x160]
mov word [rsp + 0x182], ax
mov dword [rsp + 0x184], r14d
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x188], eax
movzx eax, word [rsp + 0x44]
mov word [rsp + 0x18c], ax
movzx eax, word [rsp + 0x42]
mov word [rsp + 0x18e], ax
lea rsi, [rsp + 0x7b8]
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x598]
mov rcx, rsi
mov rdx, rdi
call fcn.1400ba780
lea rdi, [rsp + 0x390]
mov rcx, rdi
mov rdx, qword [rsp + 0x60]
call fcn.1400bab20
lea rcx, [rsp + 0x170]
mov rdx, rsi
mov r8, rdi
call fcn.1400b3940
mov rdi, qword [rsp + 0x170]
movabs rax, 0x8000000000000000
inc rax
lea rdx, [rsp + 0x178]
cmp rdi, rax
jne 0x1400ba718
lea rcx, [rsp + 0x628]
mov r8d, 0x108
call sub.msvcrt.dll_memcpy
movzx ecx, word [rsp + 0x728]
cmp ecx, 0xc8
je 0x1400ba757
cmp ecx, 0x191
je 0x1400ba6da
mov al, 0xa
cmp ecx, 0x197
jne 0x1400ba6dc
mov al, 0xb
movabs r14, 0x8000000000000000
mov rcx, qword [rsp + 0x58]
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x20], r14
mov qword [rcx + 0x78], 0
mov byte [rcx + 0x88], al
lea rcx, [rsp + 0x628]
call fcn.140001bf0
jmp 0x1400ba296
ud2
lea rsi, [rsp + 0x628]
mov r8d, 0x108
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x58]
mov qword [rcx], rdi
add rcx, 8
mov r8d, 0x108
mov rdx, rsi
call sub.msvcrt.dll_memcpy
movabs r14, 0x8000000000000000
jmp 0x1400ba296
lea rcx, [rsp + 0x628]
call fcn.140001bf0
mov r15, qword [rsp + 0x58]
jmp 0x1400ba084
call sub.KERNEL32.dll_GetLastError
ud2