Function at 0x14011ea50
Capabilities:
Connect socket

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x2c8
lea rdi, [rsp + 0x20]
mov ecx, 0xaa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x2e0]
mov rax, qword [0x14021ab88]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov dword [rsp + 0xc4], 0xffffffff
mov dword [rsp + 0xc8], 0
mov byte [rsp + 0xcc], 0
movsxd rax, dword [rsp + 0x2f8]
mov rcx, qword [rsp + 0x2e8]
lea rax, [rcx + rax*8 + 0x1e0]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x278]
mov qword [rax], 0xffffffffffffffff
lea r9, [rsp + 0xd8]
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x2e0]
call fcn.140099685
mov dword [rsp + 0xe4], eax
cmp dword [rsp + 0xe4], 0
je 0x14011eb24
mov eax, dword [rsp + 0xe4]
jmp 0x14011eff1
lea r9, [rsp + 0x144]
lea r8, [rsp + 0xf8]
mov edx, dword [rsp + 0x3c]
lea rcx, [rsp + 0x40]
call fcn.14009a9a4
movzx eax, al
test eax, eax
jne 0x14011ebb8
call qword [sym.imp.ucrtbased.dll__errno]
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x170]
mov ecx, dword [rax]
call fcn.14009a2ec
mov qword [rsp + 0x298], rax
call qword [sym.imp.ucrtbased.dll__errno]
mov rcx, qword [rsp + 0x298]
mov r9, rcx
mov r8d, dword [rax]
lea rdx, str.sa_addr_inet_ntop___failed_with_errno__d:__s
mov rcx, qword [rsp + 0x2e0]
call fcn.14009b14c
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a2a1
xor eax, eax
jmp 0x14011eff1
mov r9d, dword [rsp + 0x144]
lea r8, [rsp + 0xf8]
lea rdx, str.__Trying__s:_d...
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a8f0
cmp dword [rsp + 0x30], 2
je 0x14011ebea
cmp dword [rsp + 0x30], 0x17
jne 0x14011ebfe
cmp dword [rsp + 0x34], 1
jne 0x14011ebfe
mov dword [rsp + 0x2a0], 1
jmp 0x14011ec09
mov dword [rsp + 0x2a0], 0
cmp dword [rsp + 0x2a0], 0
jne 0x14011ec20
mov dword [rsp + 0x2a4], 0
jmp 0x14011ec2b
mov dword [rsp + 0x2a4], 1
movzx eax, byte [rsp + 0x2a4]
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x154]
test eax, eax
je 0x14011ec6e
mov rax, qword [rsp + 0x2e0]
movzx eax, byte [rax + 0xaea]
test eax, eax
je 0x14011ec6e
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14011fdd0
xor eax, eax
test eax, eax
jne 0x14011ec6e
mov rcx, qword [rsp + 0xd8]
call fcn.14009a9bd
movzx eax, byte [rsp + 0x154]
test eax, eax
je 0x14011ecb5
mov rax, qword [rsp + 0x2e0]
movzx eax, byte [rax + 0xaf2]
test eax, eax
je 0x14011ecb5
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14011e880
mov rax, qword [rsp + 0x2e0]
cmp qword [rax + 0x280], 0
je 0x14011ed5d
mov dl, 1
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a4b3
xor r8d, r8d
mov rdx, qword [rsp + 0xd8]
mov rax, qword [rsp + 0x2e0]
mov rcx, qword [rax + 0x288]
mov rax, qword [rsp + 0x2e0]
call qword [rax + 0x280]
mov dword [rsp + 0xc8], eax
xor edx, edx
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a4b3
cmp dword [rsp + 0xc8], 2
jne 0x14011ed2c
mov byte [rsp + 0xcc], 1
jmp 0x14011ed5d
cmp dword [rsp + 0xc8], 0
je 0x14011ed5d
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a2a1
mov eax, Ordinal_45
jmp 0x14011eff1
cmp dword [rsp + 0x30], 2
je 0x14011ed6b
cmp dword [rsp + 0x30], 0x17
jne 0x14011ede0
lea rcx, [rsp + 0x40]
call fcn.14009ae86
mov r9d, eax
mov r8d, dword [rsp + 0x30]
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14011f030
mov dword [rsp + 0xe4], eax
cmp dword [rsp + 0xe4], 0
je 0x14011ede0
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a2a1
cmp dword [rsp + 0xe4], 1
jne 0x14011edd4
mov eax, 7
jmp 0x14011eff1
mov eax, dword [rsp + 0xe4]
jmp 0x14011eff1
mov edx, 1
mov rcx, qword [rsp + 0xd8]
call fcn.140098898
lea rcx, [rsp + 0x288]
call fcn.14009a882
mov rcx, qword [rsp + 0x2e8]
lea rdi, [rcx + 0x3c8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x2e8]
cmp dword [rax + 0x7f8], 1
jle 0x14011ee81
mov eax, 8
imul rax, rax, 0
mov r8d, 3
mov rcx, qword [rsp + 0x2e8]
mov rdx, qword [rcx + rax + 0x3d8]
mov rcx, qword [rsp + 0x2e0]
call fcn.1400985eb
mov eax, 8
imul rax, rax, 1
mov r8d, 4
mov rcx, qword [rsp + 0x2e8]
mov rdx, qword [rcx + rax + 0x3d8]
mov rcx, qword [rsp + 0x2e0]
call fcn.1400985eb
movzx eax, byte [rsp + 0xcc]
test eax, eax
jne 0x14011eeee
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax + 0x811]
cmp eax, 4
je 0x14011eeee
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax + 0x3bd]
test eax, eax
je 0x14011eeb6
jmp 0x14011eed5
mov r8d, dword [rsp + 0x3c]
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.WS2_32.dll_connect]
mov dword [rsp + 0xc4], eax
cmp dword [rsp + 0xc4], 0xffffffff
jne 0x14011eeec
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [rsp + 0xc8], eax
jmp 0x14011ef08
mov rax, qword [rsp + 0x278]
mov rcx, qword [rsp + 0xd8]
mov qword [rax], rcx
xor eax, eax
jmp 0x14011eff1
cmp dword [rsp + 0xc4], 0xffffffff
jne 0x14011efcd
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x2a8], eax
cmp dword [rsp + 0x2a8], 0xb
je 0x14011ef4a
cmp dword [rsp + 0x2a8], 0x2733
je 0x14011ef4a
cmp dword [rsp + 0x2a8], 0x2734
je 0x14011ef4a
jmp 0x14011ef57
mov dword [rsp + 0xe4], 0
jmp 0x14011efcd
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x170]
mov ecx, dword [rsp + 0xc8]
call fcn.14009a2ec
mov r9, rax
lea r8, [rsp + 0xf8]
lea rdx, str.Immediate_connect_fail_for__s:__s
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a8f0
mov rax, qword [rsp + 0x2e0]
mov ecx, dword [rsp + 0xc8]
mov dword [rax + 0xda4], ecx
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0x2e8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14009a2a1
mov dword [rsp + 0xe4], 7
cmp dword [rsp + 0xe4], 0
jne 0x14011efea
mov rax, qword [rsp + 0x278]
mov rcx, qword [rsp + 0xd8]
mov qword [rax], rcx
mov eax, dword [rsp + 0xe4]
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_getpeername
call fcn.14009a508
mov rax, rdi
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.1400995fe
add rsp, 0x2c8
pop rdi
pop rsi
ret