Function at 0x1401624be
Capabilities:
Connect socket
Initialize winsock library

Disassembly:
push rax
pushf
mov eax, 0xca1fead
pushf
not eax
add eax, 0x90be50b1
xor eax, 0xd57b7f45
rol eax, 0xad
popf
pushf
not eax
add eax, 0xa4c1a777
xor eax, 0xdae6c0cf
rol eax, 0xda
popf
pushf
not eax
add eax, 0xa0f53e94
xor eax, 0x8b5d461d
rol eax, 0x2f
popf
cmp eax, 4
jne 0x14016250e
popf
pop rax
jmp 0x140162d26
cmp eax, 0
jne 0x14016251d
popf
pop rax
jmp 0x1401625b3
cmp eax, 3
jne 0x14016252c
popf
pop rax
jmp 0x14016293b
cmp eax, 1
jne 0x14016253b
popf
pop rax
jmp 0x1401626b3
cmp eax, 0xa
jne 0x14016254a
popf
pop rax
jmp 0x14016330f
cmp eax, 7
jne 0x140162559
popf
pop rax
jmp 0x140162f08
cmp eax, 6
jne 0x140162568
popf
pop rax
jmp 0x140162e08
cmp eax, 0xb
jne 0x140162577
popf
pop rax
jmp 0x14016336f
cmp eax, 9
jne 0x140162586
popf
pop rax
jmp 0x1401632c7
cmp eax, 8
jne 0x140162595
popf
pop rax
jmp 0x14016324d
cmp eax, 5
jne 0x1401625a4
popf
pop rax
jmp 0x140162dab
cmp eax, 2
jne 0x1401625b3
popf
pop rax
jmp 0x1401628c6
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x210
mov rax, qword [0x14004b090]
xor rax, rsp
mov qword [rsp + 0x200], rax
mov rbx, rcx
mov ecx, 0x3b38ce80
pushf
not ecx
add ecx, 0xed412a89
xor ecx, 0x9e2fc2a3
rol ecx, 0x8f
popf
pushf
not ecx
add ecx, 0x91d56591
xor ecx, 0xfa6611b2
rol ecx, 0xeb
popf
pushf
not ecx
add ecx, 0x9362341e
xor ecx, 0xc46bfa1d
rol ecx, 0xbb
popf
lea rdx, [rsp + 0x60]
jmp 0x14016262c
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x140162680
push rax
pushf
mov eax, 0xfd6442b5
pushf
not eax
add eax, 0xd344b60d
xor eax, 0xfba3498d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xd6c220c4
xor eax, 0xa25eaa56
rol eax, 0x87
popf
pushf
not eax
add eax, 0xa81631a4
xor eax, 0xf21a03af
rol eax, 0xe7
popf
jmp 0x1401624ff
push rax
pushf
mov eax, 0x8f706ce4
pushf
not eax
add eax, 0x82e1eaf7
xor eax, 0xf2b103e7
rol eax, 0x11
popf
pushf
not eax
add eax, 0xc6d09c6e
xor eax, 0xcae6986d
rol eax, 0x9a
popf
jmp 0x1401624ff
mov ebx, 0x1a2aa234
pushf
not ebx
add ebx, 0xa1244bcb
xor ebx, 0xb9605a2b
rol ebx, 0x7c
popf
pushf
not ebx
add ebx, 0xd2e091ee
xor ebx, 0xf646dcc1
rol ebx, 0x47
popf
pushf
not ebx
add ebx, 0xb971b1a3
xor ebx, 0xc16b9d55
rol ebx, 0xc
popf
pushf
not ebx
add ebx, 0xe1386e8b
xor ebx, 0xc2a4b407
rol ebx, 0x50
popf
mov ecx, 0xf7f23468
pushf
not ecx
add ecx, 0xe0977b53
xor ecx, 0xe7f5edf5
rol ecx, 0xd4
popf
pushf
not ecx
add ecx, 0xfb8c2f4a
xor ecx, 0xb66495c0
rol ecx, 0x55
popf
jmp 0x14016273c
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
jmp 0x140162749
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm1, xmmword [0x140044d70]
movdqu xmmword [rsp + 0x20], xmm1
movdqa xmm2, xmmword [0x140044d20]
movdqu xmmword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140044c50]
movdqu xmmword [rsp + 0x40], xmm3
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], cl
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x40], al
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
mov byte [rsp + 0x4f], 0
lea rdx, [rsp + 0x21]
lea rcx, [0x193780b8a]
pushf
sub rcx, 0x537345aa
popf
call fcn.1400b76ee
mov rcx, rax
call fcn.1400e2b9a
xor al, al
jmp 0x14016330f
xor r8d, r8d
lea edx, [r8 + 1]
mov edi, 0xbfe35c59
pushf
not edi
add edi, 0xe2189c4d
xor edi, 0x9226dd64
rol edi, 0x53
popf
pushf
not edi
add edi, 0xf1e787b2
xor edi, 0xec0aac01
rol edi, 0xb7
popf
pushf
not edi
add edi, 0xdf9591d3
xor edi, 0xdc55ce8d
rol edi, 0xb8
popf
pushf
not edi
add edi, 0xc80ab2ea
xor edi, 0x97810a1a
rol edi, 0xa3
popf
mov ecx, edi
jmp 0x140162929
call qword [sym.imp.WS2_32.dll_socket]
mov dword [rbx + 0x28], eax
cmp eax, 0xffffffff
jne 0x140162d26
lea ebx, [rdi + 0x45]
mov ecx, 0x287a3622
pushf
not ecx
add ecx, 0xa9f719b8
xor ecx, 0x9650b0ae
rol ecx, 0xba
popf
pushf
not ecx
add ecx, 0x8b739be3
xor ecx, 0xfc341fe6
rol ecx, 0xce
popf
pushf
not ecx
add ecx, 0xe24eb701
xor ecx, 0xdb2561c7
rol ecx, 0x2e
popf
jmp 0x140162983
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
jmp 0x140162990
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm1, xmmword [0x140044df0]
movdqu xmmword [rsp + 0x20], xmm1
movdqa xmm2, xmmword [0x140044ce0]
movdqu xmmword [rsp + 0x30], xmm2
mov cl, 0xe1
pushf
not cl
add cl, 0x91
xor cl, 0x6d
rol cl, 0xc8
popf
pushf
not cl
add cl, 0xbc
xor cl, 0x6a
rol cl, 0x82
popf
pushf
not cl
add cl, 0xef
xor cl, 0x79
rol cl, 0x12
popf
mov dl, 0xa6
pushf
not dl
add dl, 0xc5
xor dl, 0xd6
rol dl, 0x10
popf
pushf
not dl
add dl, 0x30
xor dl, 0x4b
rol dl, 0x45
popf
pushf
not dl
add dl, 0x60
xor dl, 0xb6
rol dl, 0xde
popf
pushf
not dl
add dl, 0x79
xor dl, 0x9d
rol dl, 0x6f
popf
movzx r9d, cl
mov r10b, 0x25
pushf
not r10b
add r10b, 0x37
xor r10b, 0x43
rol r10b, 0xc7
popf
pushf
not r10b
add r10b, 0x24
xor r10b, 0x80
rol r10b, 0xb8
popf
mov r11b, 0xb2
pushf
not r11b
add r11b, 0x6b
xor r11b, 6
rol r11b, 0x1c
popf
pushf
not r11b
add r11b, 0x28
xor r11b, 0xd1
rol r11b, 0xeb
popf
mov bl, 0xbf
pushf
not bl
add bl, 0xa5
xor bl, 0xa4
rol bl, 0xa5
popf
pushf
not bl
add bl, 0xc0
xor bl, 0x94
rol bl, 0xd1
popf
pushf
not bl
add bl, 0x85
xor bl, 0x28
rol bl, 0xf4
popf
pushf
not bl
add bl, 0x35
xor bl, 0xfe
rol bl, 0xf1
popf
movzx edi, cl
mov sil, 0xff
pushf
not sil
add sil, 0x7c
xor sil, 0x1a
rol sil, 0x70
popf
pushf
not sil
add sil, 0x41
xor sil, 0x4e
rol sil, 0x9e
popf
pushf
not sil
add sil, 0x1d
xor sil, 0x1c
rol sil, 0x31
popf
pushf
not sil
add sil, 0xa
xor sil, 8
rol sil, 0x21
popf
mov r14b, 0x90
pushf
not r14b
add r14b, 0x76
xor r14b, 0x30
rol r14b, 0x6d
popf
pushf
not r14b
add r14b, 0x67
xor r14b, 0xe3
rol r14b, 0x58
popf
pushf
not r14b
add r14b, 0x83
xor r14b, 0x5e
rol r14b, 0x63
popf
mov r15b, 0xd9
pushf
not r15b
add r15b, 0x27
xor r15b, 0x5f
rol r15b, 0x5c
popf
pushf
not r15b
add r15b, 0xc
xor r15b, 0x70
rol r15b, 0xa2
popf
mov r12b, 0x90
pushf
not r12b
add r12b, 0x6a
xor r12b, 0xe8
rol r12b, 0xd0
popf
pushf
not r12b
add r12b, 0x6a
xor r12b, 0xc
rol r12b, 0x83
popf
pushf
not r12b
add r12b, 0x2e
xor r12b, 0x48
rol r12b, 0xdf
popf
pushf
not r12b
add r12b, 0x17
xor r12b, 0xb0
rol r12b, 0x23
popf
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], r8b
xor byte [rsp + 0x23], r8b
xor byte [rsp + 0x24], r8b
xor byte [rsp + 0x25], r8b
xor byte [rsp + 0x26], r8b
xor byte [rsp + 0x27], r8b
xor byte [rsp + 0x28], r8b
xor byte [rsp + 0x29], r8b
xor byte [rsp + 0x2a], r8b
xor byte [rsp + 0x2b], r8b
xor byte [rsp + 0x2c], r8b
xor byte [rsp + 0x2d], r8b
xor byte [rsp + 0x2e], r8b
xor byte [rsp + 0x2f], r8b
movd eax, xmm2
xor al, r8b
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], r8b
xor byte [rsp + 0x32], r8b
xor byte [rsp + 0x33], r8b
xor byte [rsp + 0x34], r8b
xor byte [rsp + 0x35], r8b
xor byte [rsp + 0x36], r8b
xor byte [rsp + 0x37], r8b
xor byte [rsp + 0x38], r8b
xor byte [rsp + 0x39], r8b
xor byte [rsp + 0x3a], r8b
xor byte [rsp + 0x3b], r8b
xor byte [rsp + 0x3c], r8b
xor byte [rsp + 0x3d], r8b
xor byte [rsp + 0x3e], r8b
xor byte [rsp + 0x3f], r8b
xor cl, r8b
mov byte [rsp + 0x40], cl
xor dl, r8b
mov byte [rsp + 0x41], dl
xor r9b, r8b
mov byte [rsp + 0x42], r9b
xor r10b, r8b
mov byte [rsp + 0x43], r10b
xor r11b, r8b
mov byte [rsp + 0x44], r11b
xor bl, r8b
mov byte [rsp + 0x45], bl
xor dil, r8b
mov byte [rsp + 0x46], dil
xor sil, r8b
mov byte [rsp + 0x47], sil
xor r14b, r8b
mov byte [rsp + 0x48], r14b
xor r15b, r8b
mov byte [rsp + 0x49], r15b
xor r12b, r8b
mov byte [rsp + 0x4a], r12b
mov byte [rsp + 0x4b], 0
lea rdx, [rsp + 0x21]
lea rcx, [0x1b06ce8e8]
pushf
sub rcx, 0x70682308
popf
call fcn.1400b76ee
mov rcx, rax
call fcn.1400e2b9a
xor al, al
jmp 0x14016330f
mov word [rsp + 0x50], di
movzx ecx, word [rbx]
jmp 0x140162d2f
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x52], ax
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 0x10
jb 0x140162d78
push rax
pushf
mov eax, 0x3ed30195
pushf
not eax
add eax, 0xc807cddb
xor eax, 0xbf2cde5e
rol eax, 9
popf
pushf
not eax
add eax, 0xe14d4343
xor eax, 0x99290cd6
rol eax, 0x65
popf
jmp 0x1401624ff
push rax
pushf
mov eax, 0xe33359d2
pushf
not eax
add eax, 0xdb721153
xor eax, 0xcc0d8fc5
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xddcfda8a
xor eax, 0xfcbb09dd
rol eax, 0x9c
popf
jmp 0x1401624ff
mov rcx, qword [rcx]
push rax
pushf
mov eax, 0xfef8f83a
pushf
not eax
add eax, 0xb2a062d4
xor eax, 0x99df1b79
rol eax, 0x93
popf
pushf
not eax
add eax, 0xe4bc5974
xor eax, 0xac2a1da7
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe03921ab
xor eax, 0x84db5188
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xf2a988f0
xor eax, 0xb62097f0
rol eax, 0xac
popf
jmp 0x1401624ff
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rsp + 0x54], eax
movsxd rcx, dword [rbx + 0x28]
mov r8d, 0xfb096d
pushf
not r8d
add r8d, 0xf831cb3b
xor r8d, 0x8602b6f0
rol r8d, 0x1b
popf
pushf
not r8d
add r8d, 0xe977c671
xor r8d, 0xf4d5ccdb
rol r8d, 0xbc
popf
pushf
not r8d
add r8d, 0xa1014281
xor r8d, 0xe16d839a
rol r8d, 0x2c
popf
lea rdx, [rsp + 0x50]
jmp 0x140162e6d
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x140162ed5
push rax
pushf
mov eax, 0xf708a383
pushf
not eax
add eax, 0xabab072d
xor eax, 0xe00e9ed0
rol eax, 0x39
popf
pushf
not eax
add eax, 0xe7bb732f
xor eax, 0x9a10d5c6
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x8bf77306
xor eax, 0xfed7bff5
rol eax, 0x80
popf
pushf
not eax
add eax, 0xcb106a4c
xor eax, 0xb79232f2
rol eax, 0xd7
popf
jmp 0x1401624ff
push rax
pushf
mov eax, 0x3e836088
pushf
not eax
add eax, 0xa76a937f
xor eax, 0xc631407e
rol eax, 0xba
popf
pushf
not eax
add eax, 0xa51afc0f
xor eax, 0x821fa244
rol eax, 0xed
popf
jmp 0x1401624ff
lea ebx, [rax + 0x48]
mov ecx, 0x634d240e
pushf
not ecx
add ecx, 0xb2d27cfe
xor ecx, 0x9c6b00d6
rol ecx, 0x62
popf
pushf
not ecx
add ecx, 0xaa2dc500
xor ecx, 0xa58adbe7
rol ecx, 0x33
popf
jmp 0x140162f3b
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
jmp 0x140162f48
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm1, xmmword [0x140044e50]
movdqu xmmword [rsp + 0x20], xmm1
movdqa xmm2, xmmword [0x140044e40]
movdqu xmmword [rsp + 0x30], xmm2
mov cl, 0x3f
pushf
not cl
add cl, 0xc0
xor cl, 0xcb
rol cl, 0xc4
popf
pushf
not cl
add cl, 0xf
xor cl, 0x4f
rol cl, 0x32
popf
pushf
not cl
add cl, 0x81
xor cl, 0xbd
rol cl, 0x81
popf
pushf
not cl
add cl, 0x41
xor cl, 0x79
rol cl, 0x8b
popf
mov dl, 0xfe
pushf
not dl
add dl, 0xe7
xor dl, 0x7f
rol dl, 0xa0
popf
pushf
not dl
add dl, 0x51
xor dl, 2
rol dl, 0xc1
popf
mov r8b, 0x81
pushf
not r8b
add r8b, 0xd1
xor r8b, 0xd1
rol r8b, 0x4e
popf
pushf
not r8b
add r8b, 0xfc
xor r8b, 0xf9
rol r8b, 0x56
popf
mov r10b, 0x61
pushf
not r10b
add r10b, 0x67
xor r10b, 0xe3
rol r10b, 0x54
popf
pushf
not r10b
add r10b, 0xa7
xor r10b, 0x92
rol r10b, 0x84
popf
pushf
not r10b
add r10b, 0xd0
xor r10b, 0xe9
rol r10b, 0x77
popf
movzx r11d, cl
mov bl, 0x3d
pushf
not bl
add bl, 0x54
xor bl, 0x61
rol bl, 0x69
popf
pushf
not bl
add bl, 0x97
xor bl, 0xa6
rol bl, 0xbb
popf
movzx edi, r10b
mov sil, 0x21
pushf
not sil
add sil, 0x78
xor sil, 0xd
rol sil, 0x9c
popf
pushf
not sil
add sil, 0x5d
xor sil, 0x1f
rol sil, 0xd9
popf
mov r14b, 0xb3
pushf
not r14b
add r14b, 0x29
xor r14b, 0x19
rol r14b, 0x13
popf
pushf
not r14b
add r14b, 0x9f
xor r14b, 0x6c
rol r14b, 0x6c
popf
movzx r15d, r10b
movzx r12d, sil
mov r13b, 0x61
pushf
not r13b
add r13b, 0x18
xor r13b, 0x61
rol r13b, 0x2b
popf
pushf
not r13b
add r13b, 0xdc
xor r13b, 0x56
rol r13b, 0xa2
popf
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], r9b
xor byte [rsp + 0x23], r9b
xor byte [rsp + 0x24], r9b
xor byte [rsp + 0x25], r9b
xor byte [rsp + 0x26], r9b
xor byte [rsp + 0x27], r9b
xor byte [rsp + 0x28], r9b
xor byte [rsp + 0x29], r9b
xor byte [rsp + 0x2a], r9b
xor byte [rsp + 0x2b], r9b
xor byte [rsp + 0x2c], r9b
xor byte [rsp + 0x2d], r9b
xor byte [rsp + 0x2e], r9b
xor byte [rsp + 0x2f], r9b
movd eax, xmm2
xor al, r9b
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], r9b
xor byte [rsp + 0x32], r9b
xor byte [rsp + 0x33], r9b
xor byte [rsp + 0x34], r9b
xor byte [rsp + 0x35], r9b
xor byte [rsp + 0x36], r9b
xor byte [rsp + 0x37], r9b
xor byte [rsp + 0x38], r9b
xor byte [rsp + 0x39], r9b
xor byte [rsp + 0x3a], r9b
xor byte [rsp + 0x3b], r9b
xor byte [rsp + 0x3c], r9b
xor byte [rsp + 0x3d], r9b
xor byte [rsp + 0x3e], r9b
xor byte [rsp + 0x3f], r9b
xor cl, r9b
mov byte [rsp + 0x40], cl
xor dl, r9b
mov byte [rsp + 0x41], dl
xor r8b, r9b
mov byte [rsp + 0x42], r8b
xor r10b, r9b
mov byte [rsp + 0x43], r10b
xor r11b, r9b
mov byte [rsp + 0x44], r11b
xor bl, r9b
mov byte [rsp + 0x45], bl
xor dil, r9b
mov byte [rsp + 0x46], dil
xor sil, r9b
mov byte [rsp + 0x47], sil
xor r14b, r9b
mov byte [rsp + 0x48], r14b
xor r15b, r9b
mov byte [rsp + 0x49], r15b
xor r12b, r9b
mov byte [rsp + 0x4a], r12b
xor r13b, r9b
mov byte [rsp + 0x4b], r13b
mov byte [rsp + 0x4c], 0
lea rdx, [rsp + 0x21]
lea rcx, [0x1b232cee2]
pushf
sub rcx, 0x722e0902
popf
call fcn.1400b76ee
mov rcx, rax
call fcn.1400e2b9a
xor al, al
jmp 0x14016330f
mov al, 0x3e
pushf
not al
add al, 0xdb
xor al, 0x8b
rol al, 0x85
popf
pushf
not al
add al, 0xf0
xor al, 0x4d
rol al, 0x12
popf
jmp 0x14016330f
xor al, al
push rax
pushf
mov eax, 0x28b0c486
pushf
not eax
add eax, 0xee82cfa3
xor eax, 0xb3449f27
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x8a28a3c9
xor eax, 0x99ff83ad
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xa6dc9bdf
xor eax, 0xeee36f51
rol eax, 0x75
popf
jmp 0x1401624ff
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.14012cd5d
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
int3