Function at 0x140042df0
Capabilities:
Connect socket

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov r14, qword [rcx]
mov qword [r8], 0xffffffffffffffff
mov eax, dword [rdx + 4]
mov rbx, qword [rcx]
mov dword [rsp + 0x20], eax
mov eax, dword [rcx + 0xa4]
xor r15d, r15d
mov dword [rsp + 0x24], eax
cmp eax, 2
mov r13, r8
mov rsi, rcx
lea eax, [r15 + 0x11]
je 0x140042e41
mov eax, dword [rdx + 0xc]
mov dword [rsp + 0x28], eax
mov eax, dword [rdx + 0x10]
mov rdx, qword [rdx + 0x20]
mov ecx, pe_nt_image_headers64
cmp eax, ecx
cmova eax, ecx
lea rcx, [rbp - 0x79]
mov r8d, eax
mov dword [rbp - 0x7d], eax
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx + 0x278]
test rax, rax
je 0x140042e83
mov rcx, qword [rbx + 0x280]
lea r8, [rsp + 0x20]
xor edx, edx
call rax
jmp 0x140042e96
mov r8d, dword [rsp + 0x28]
mov edx, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x20]
call qword [sym.imp.WSOCK32.DLL_socket]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140043148
mov ecx, dword [rsi + 0xa0]
test ecx, ecx
je 0x140042ebb
mov eax, dword [rbp - 0x61]
cmp dword [rsp + 0x20], 0x17
cmove eax, ecx
mov dword [rbp - 0x61], eax
movzx ecx, word [rbp - 0x79]
xor ebx, ebx
cmp ecx, 2
je 0x140042ed5
cmp ecx, 0x17
jne 0x140043113
lea rdx, [rbp - 0x71]
jmp 0x140042ed9
lea rdx, [rbp - 0x75]
lea r8, [rbp + 7]
mov r9d, 0x2e
call fcn.140056d60
test rax, rax
je 0x140043113
movzx ecx, word [rbp - 0x77]
call qword [sym.imp.WSOCK32.DLL_ntohs]
lea r8, [rbp + 7]
lea rdx, [0x1400735e8]
mov rcx, r14
mov qword [rsp + 0x110], r12
call fcn.14003e630
mov eax, dword [rsp + 0x20]
cmp eax, 2
je 0x140042f24
cmp eax, 0x17
jne 0x140042f32
cmp dword [rsp + 0x24], 1
jne 0x140042f32
mov eax, 1
jmp 0x140042f34
xor eax, eax
test eax, eax
setne r12b
test r12b, r12b
je 0x140042f53
cmp byte [r14 + 0x45e], bl
je 0x140042f53
mov rdx, rdi
mov rcx, rsi
call fcn.140043270
mov rcx, rdi
call fcn.140042400
test r12b, r12b
je 0x140042f74
cmp byte [r14 + 0x61c], bl
je 0x140042f74
mov rdx, rdi
mov rcx, r14
call fcn.140043150
mov rax, qword [r14 + 0x268]
test rax, rax
je 0x140042fb2
mov rcx, qword [r14 + 0x270]
xor r8d, r8d
mov rdx, rdi
call rax
mov r15d, eax
cmp eax, 2
jne 0x140042f9c
mov r12b, 1
jmp 0x140042fb5
test eax, eax
je 0x140042fb2
mov rdx, rdi
mov rcx, rsi
call fcn.140041bf0
mov eax, 0x2a
jmp 0x140042ffd
xor r12b, r12b
mov eax, dword [rsp + 0x20]
cmp eax, 2
je 0x140042fc3
cmp eax, 0x17
jne 0x140043021
lea rcx, [rbp - 0x79]
call fcn.140056ce0
mov r8d, dword [rsp + 0x20]
mov rdx, rdi
mov r9d, eax
mov rcx, rsi
call fcn.1400428a0
mov ebx, eax
test eax, eax
je 0x140043021
mov rdx, rdi
mov rcx, rsi
call fcn.140041bf0
mov eax, 7
cmp ebx, 1
cmove ebx, eax
mov eax, ebx
mov r12, qword [rsp + 0x110]
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
mov edx, 1
mov rcx, rdi
call fcn.1400570e0
call fcn.140044790
cmp dword [rsi + 0x34c], 1
mov qword [rsi + 0x344], rax
jle 0x140043051
mov edx, dword [rsi + 0x350]
mov rcx, r14
call fcn.14003efd0
test r12b, r12b
jne 0x140043108
cmp dword [rsi + 0xa4], 1
jne 0x140043108
mov r8d, dword [rbp - 0x7d]
lea rdx, [rbp - 0x79]
mov rcx, rdi
call qword [sym.imp.WSOCK32.DLL_connect]
mov r12d, eax
cmp eax, 0xffffffff
jne 0x140043089
call qword [sym.imp.WSOCK32.DLL_WSAGetLastError]
mov r15d, eax
cmp dword [rsp + 0x20], 0x17
sete cl
mov byte [rsi + 0x32f], cl
cmp r12d, 0xffffffff
jne 0x1400430f7
cmp r15d, 0xb
je 0x1400430ec
lea eax, [r15 - 0x2733]
cmp eax, 1
jbe 0x1400430ec
mov edx, r15d
mov rcx, rsi
call fcn.140055d90
lea r8, [rbp + 7]
lea rdx, [0x1400735f8]
mov r9, rax
mov rcx, r14
call fcn.14003e630
mov rdx, rdi
mov rcx, rsi
mov dword [r14 + 0x8804], r15d
call fcn.140041bf0
lea ebx, [r12 + 8]
jmp 0x140042ffb
xor ebx, ebx
mov qword [r13], rdi
jmp 0x140042ffb
test ebx, ebx
jne 0x140042ffb
mov qword [r13], rdi
jmp 0x140042ffb
mov qword [r13], rdi
xor eax, eax
jmp 0x140042ffd
mov byte [rbp + 7], bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rsi
mov edx, eax
mov ebx, eax
call fcn.140055d90
lea rdx, [0x1400735b8]
mov r8d, ebx
mov r9, rax
mov rcx, r14
call fcn.14003e500
mov rdx, rdi
mov rcx, rsi
call fcn.140041bf0
xor eax, eax
jmp 0x140043005