Function at 0x14001e1b0
Capabilities:
Connect socket
Get socket status
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x400]
sub rsp, 0x500
mov rax, qword [0x14015a038]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
mov r12, r9
mov rsi, rdx
xor r14d, r14d
mov ebx, r14d
lea rcx, str.WinInet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x14001e793
lea rdx, str.InternetGetConnectedState
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14001e235
mov dword [rsp + 0x70], r14d
xor edx, edx
lea rcx, [rsp + 0x70]
call rax
test eax, eax
je 0x14001e235
mov ebx, dword [rsp + 0x70]
and ebx, 0x17
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test ebx, ebx
je 0x14001e793
mov ecx, 0x101
lea rdx, [rbp + 0x40]
call qword [sym.imp.WS2_32.dll_WSAStartup]
lea rcx, str.www.lockxls.com
call qword [sym.imp.WS2_32.dll_gethostbyname]
test rax, rax
je 0x14001e26c
mov ebx, 1
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea rcx, str.url.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x14001e2b7
lea rdx, str.InetIsOffline
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14001e2a6
xor ecx, ecx
call rax
test eax, eax
cmovne ebx, r14d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test ebx, ebx
je 0x14001e793
mov ecx, 0x101
lea rdx, [rbp + 0x250]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x14001e793
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
xor r8d, r8d
mov r15d, 2
mov edx, r15d
mov ecx, r15d
call qword [sym.imp.WS2_32.dll_socket]
mov rbx, rax
mov qword [rsp + 0x70], rax
cmp rax, 0xffffffffffffffff
je 0x14001e77d
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.1400109a0
lea rdi, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdi, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x80], r15w
lea ecx, [r15 + 0x79]
call qword [sym.imp.WS2_32.dll_htons]
mov word [rbp - 0x7e], ax
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rbp - 0x7c], eax
cmp eax, 0xffffffff
jne 0x14001e365
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_gethostbyname]
test rax, rax
je 0x14001e55e
mov rax, qword [rax + 0x18]
mov rcx, qword [rax]
mov eax, dword [rcx]
mov dword [rbp - 0x7c], eax
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_connect]
mov edi, r14d
test eax, eax
sete dil
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14001e3bc
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e3b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e7c1
call fcn.14009b510
test edi, edi
je 0x14001e77d
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x10], 0x1b
lea rcx, [rsp + 0x70]
call fcn.14003df50
mov rsi, rax
mov rcx, qword [rax]
shr rcx, 0x20
call qword [sym.imp.WS2_32.dll_htonl]
mov edi, eax
mov ecx, dword [rsi]
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [rbp + 0x38], edi
mov dword [rbp + 0x3c], eax
xor r9d, r9d
lea r8d, [r9 + 0x30]
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14001e77d
mov qword [rsp + 0x70], 0xa
mov qword [rbp + 0x48], rbx
mov dword [rbp + 0x40], 1
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x40]
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_select]
cmp eax, 0xffffffff
je 0x14001e77d
test eax, eax
je 0x14001e77d
lea rcx, [rsp + 0x70]
call fcn.14003df50
mov rsi, qword [rax]
mov qword [rsp + 0x50], rsi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
mov dword [rbp], eax
xor r9d, r9d
lea r8d, [rax + 0x44]
lea rdx, [rbp - 0x40]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
je 0x14001e77d
movzx eax, byte [rbp - 0x3f]
mov dword [rsp + 0x34], eax
movzx eax, byte [rbp - 0x40]
shr eax, 6
mov dword [rsp + 0x30], eax
mov ecx, dword [rbp - 0x24]
call qword [sym.imp.WS2_32.dll_ntohl]
mov r15d, eax
mov ecx, dword [rbp - 0x28]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
shl rcx, 0x20
add r15, rcx
mov qword [rsp + 0x38], r15
mov ecx, dword [rbp - 0x1c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov r14d, eax
mov ecx, dword [rbp - 0x20]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
shl rcx, 0x20
add r14, rcx
mov qword [rsp + 0x40], r14
mov ecx, dword [rbp - 0x14]
call qword [sym.imp.WS2_32.dll_ntohl]
mov edi, eax
mov ecx, dword [rbp - 0x18]
call qword [sym.imp.WS2_32.dll_ntohl]
mov edx, eax
shl rdx, 0x20
add rdx, rdi
mov qword [rsp + 0x48], rdx
movsd xmm4, qword [0x14013a470]
xorps xmm1, xmm1
xorps xmm0, xmm0
movsd xmm2, qword [0x14013a3e0]
cmp rsi, r15
jb 0x14001e5a2
mov rcx, rsi
sub rcx, r15
mov rax, rcx
shr rax, 0x20
cvtsi2sd xmm1, rax
mov eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm1, xmm0
jmp 0x14001e5c6
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14001e77d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e598
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e7c1
call fcn.14009b510
jmp 0x14001e77d
mov rcx, r15
sub rcx, rsi
mov rax, rcx
shr rax, 0x20
cvtsi2sd xmm1, rax
mov eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm1, xmm0
xorps xmm1, xmm4
xorps xmm3, xmm3
xorps xmm0, xmm0
cmp r14, rdx
jb 0x14001e5f4
mov rcx, r14
sub rcx, rdx
mov rax, rcx
shr rax, 0x20
cvtsi2sd xmm3, rax
mov eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm3, xmm0
jmp 0x14001e618
mov rcx, rdx
sub rcx, r14
mov rax, rcx
shr rax, 0x20
cvtsi2sd xmm3, rax
mov eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm3, xmm0
xorps xmm3, xmm4
subsd xmm1, xmm3
movsd qword [rsp + 0x58], xmm1
xorps xmm3, xmm3
xorps xmm0, xmm0
cmp r14, r15
jb 0x14001e64e
sub r14, r15
mov rax, r14
shr rax, 0x20
cvtsi2sd xmm3, rax
mov eax, r14d
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm3, xmm0
jmp 0x14001e670
sub r15, r14
mov rax, r15
shr rax, 0x20
cvtsi2sd xmm3, rax
mov eax, r15d
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm3, xmm0
xorps xmm3, xmm4
xorps xmm1, xmm1
xorps xmm0, xmm0
cmp rdx, rsi
jb 0x14001e69b
sub rdx, rsi
mov rax, rdx
shr rax, 0x20
cvtsi2sd xmm1, rax
mov eax, edx
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm1, xmm0
jmp 0x14001e6bc
sub rsi, rdx
mov rax, rsi
shr rax, 0x20
cvtsi2sd xmm1, rax
mov eax, esi
cvtsi2sd xmm0, rax
mulsd xmm0, xmm2
addsd xmm1, xmm0
xorps xmm1, xmm4
addsd xmm1, xmm3
mulsd xmm1, qword [0x14013a3f0]
movsd qword [rsp + 0x60], xmm1
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.14003dd30
xor edx, edx
mov r8d, 0xac
lea rcx, [rbp + 0x40]
call fcn.14009e4c0
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
test eax, eax
je 0x14001e724
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
test eax, eax
je 0x14001e724
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rbp - 0x80]
movzx eax, dx
sub eax, 0x76c
mov dword [rbp - 0x5c], eax
mov rax, rdx
shr rax, 0x10
movzx ecx, ax
dec ecx
mov dword [rbp - 0x60], ecx
shr rdx, 0x30
mov dword [rbp - 0x64], edx
mov rcx, qword [rbp - 0x78]
movzx eax, cx
mov dword [rbp - 0x68], eax
mov rax, rcx
shr rax, 0x10
movzx eax, ax
mov dword [rbp - 0x6c], eax
shr rcx, 0x20
movzx eax, cx
mov dword [rbp - 0x70], eax
lea rcx, [rbp - 0x70]
call fcn.1400db258
mov dword [r12], eax
mov r14d, 1
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
cmp rbx, 0xffffffffffffffff
je 0x14001e793
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
mov eax, r14d
mov rcx, qword [rbp + 0x3f0]
xor rcx, rsp
call fcn.14009b5b0
lea r11, [rsp + 0x500]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1400ac408
nop
int3