Function at 0x14000ccb0
Capabilities:
Connect socket
Encode data using xor
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2440
call fcn.14004e850
sub rsp, rax
mov rax, qword [0x1400781b0]
xor rax, rsp
mov qword [rsp + 0x2430], rax
mov r13, rcx
mov qword [rsp + 0xf8], rcx
lea rdx, [0x1401cb6f8]
lea rcx, [rsp + 0xd0]
call fcn.14000aea0
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.140005680
nop
movdqa xmm0, xmmword [0x140066820]
movdqu xmmword [rsp + 0x80], xmm0
movdqa xmm1, xmmword [0x140066870]
movdqu xmmword [rsp + 0x90], xmm1
mov word [rsp + 0xa0], 0x100
xor edi, edi
mov ecx, edi
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x80], al
inc rcx
cmp rcx, 0x20
jb 0x14000cd42
mov byte [rsp + 0xa1], dil
lea rcx, [rsp + 0x80]
mov r15, 0xffffffffffffffff
mov rax, r15
nop
inc rax
cmp byte [rcx + rax], dil
jne 0x14000cd70
lea rcx, [rsp + 0x160]
cmp qword [rsp + 0x178], 0x10
cmovae rcx, qword [rsp + 0x160]
mov r8, qword [rsp + 0x170]
cmp r8, rax
jne 0x14000e66e
lea rdx, [rsp + 0x80]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000e66e
mov r12d, edi
mov r14, r15
nop
cmp r12d, 3
jge 0x14000e606
mov ecx, 0x202
lea rdx, [rsp + 0x290]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x14000ce4f
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000ce24
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cf8e
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
xor al, al
jmp 0x14000e6ec
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0x260], 0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x270], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x280], xmm1
mov dword [rsp + 0x268], 1
mov dword [rsp + 0x26c], 6
mov dword [rsp + 0x30], 0x1017262f
mov word [rsp + 0x34], 0x100
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x14000ceb0
mov byte [rsp + 0x35], 0
lea rdx, [0x1401cb6f8]
lea rcx, [rsp + 0x80]
call fcn.14000aea0
cmp qword [rax + 0x18], 0x10
jb 0x14000cee3
mov rax, qword [rax]
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x260]
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.WS2_32.dll_getaddrinfo]
mov ebx, eax
mov rdx, qword [rsp + 0x98]
cmp rdx, 0x10
jb 0x14000cf49
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cf44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
test ebx, ebx
je 0x14000cfc5
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000cf9a
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cf95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
xor al, al
jmp 0x14000e6ec
mov rbx, qword [rsp + 0xf0]
test rbx, rbx
je 0x14000d02c
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [rbx + 0xc]
mov edx, dword [rbx + 8]
mov ecx, dword [rbx + 4]
call qword [sym.imp.WS2_32.dll_socket]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14000d01b
mov r8d, dword [rbx + 0x10]
mov rdx, qword [rbx + 0x20]
mov rcx, rax
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x14000d024
mov rcx, r14
call qword [sym.imp.WS2_32.dll_closesocket]
mov r14, r15
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14000cfe0
mov rbx, qword [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
cmp r14, 0xffffffffffffffff
jne 0x14000d049
call qword [sym.imp.WS2_32.dll_WSACleanup]
inc r12d
jmp 0x14000cdc0
lea rcx, [rsp + 0x1a0]
call fcn.14000b1a0
nop
lea rax, [rsp + 0x180]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], rdi
mov rbx, qword [rsp + 0x1b0]
lea rsi, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0x10
cmovae rsi, qword [rsp + 0x1a0]
cmp rbx, 0x10
jae 0x14000d0c3
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x198], socket
jmp 0x14000d149
mov rdi, rbx
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000d11a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e719
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14000d113
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000d128
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000d126
call fcn.14004de90
jmp 0x14000d128
xor eax, eax
mov qword [rsp + 0x180], rax
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x198], rdi
xor edi, edi
mov qword [rsp + 0x190], rbx
lea rdx, [rsp + 0xb0]
mov rcx, r13
call fcn.140005870
nop
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14001ce00
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d17a
mov rax, qword [rax]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], socket
mov byte [rsp + 0x40], 0
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14000d195
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14001f770
nop
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x120]
call fcn.14000b440
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000d208
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d203
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d203
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], socket
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14000d25b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d256
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d256
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], socket
mov byte [rsp + 0x60], 0
movzx edx, byte [rsp + 0xb0]
lea rcx, [rsp + 0xb8]
call fcn.14001ffd0
nop
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], rdi
mov rdi, qword [rsp + 0x1b0]
lea rsi, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0x10
cmovae rsi, qword [rsp + 0x1a0]
cmp rdi, 0x10
jae 0x14000d2e0
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x158], socket
jmp 0x14000d364
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000d337
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e71f
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14000d330
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000d345
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000d343
call fcn.14004de90
jmp 0x14000d345
xor eax, eax
mov qword [rsp + 0x140], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x150], rdi
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x120]
call fcn.1400081b0
nop
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14001ce00
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d39a
mov rax, qword [rax]
xor edi, edi
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], socket
mov byte [rsp + 0x100], dil
mov r8, r15
inc r8
cmp byte [rax + r8], dil
jne 0x14000d3c3
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14001f770
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14000d41d
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d418
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d418
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], socket
mov byte [rsp + 0x60], 0
movzx edx, byte [rsp + 0xc0]
lea rcx, [rsp + 0xc8]
call fcn.14001ffd0
nop
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rdx, qword [rsp + 0x100]
xor r9d, r9d
mov r8d, dword [rsp + 0x110]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_send]
mov rcx, r14
cmp eax, 0xffffffff
jne 0x14000d5f8
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
inc r12d
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000d4d2
mov rcx, qword [rsp + 0x100]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4cd
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e4d4
call fcn.14004dbe0
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], socket
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000d531
mov rcx, qword [rsp + 0x140]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d52c
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e591
call fcn.14004dbe0
mov rdx, qword [rsp + 0x138]
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], socket
mov byte [rsp + 0x140], 0
cmp rdx, 0x10
jb 0x14000d590
mov rcx, qword [rsp + 0x120]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d58b
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e591
call fcn.14004dbe0
mov byte [rsp + 0x120], 0
mov qword [rsp + 0x138], socket
mov qword [rsp + 0x130], rdi
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0x10
jb 0x14000cdc0
inc rdx
mov rcx, qword [rsp + 0x1a0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000d5ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e5ff
call fcn.14004dbe0
jmp 0x14000cdc0
mov edx, 1
call qword [sym.imp.WS2_32.dll_shutdown]
cmp eax, 0xffffffff
jne 0x14000d610
mov rcx, r14
jmp 0x14000d480
movdqa xmm0, xmmword [str.WqIUKBHLNFN_np]
movdqu xmmword [rsp + 0x180], xmm0
mov dword [rsp + 0x190], 0x1f1e721d
mov dword [rsp + 0x194], 0x1003912
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x180], al
inc rcx
cmp rcx, 0x16
jb 0x14000d640
mov byte [rsp + 0x197], 0
lea rcx, [rsp + 0x180]
call fcn.140001970
xor r9d, r9d
mov r8d, 0x2000
lea rdx, [rsp + 0x430]
mov rcx, r14
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x14000d69b
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2746
je 0x14000d69b
mov rcx, r14
jmp 0x14000d480
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], socket
mov byte [rsp + 0x40], 0
lea rax, [rsp + 0x430]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000d6c0
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x40]
call fcn.14001f770
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x1c0]
call fcn.140007f70
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000d730
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d72b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d72b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], socket
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov rbx, qword [rsp + 0x1f0]
lea rsi, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae rsi, qword [rsp + 0x1e0]
cmp rbx, 0x10
jae 0x14000d790
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x78], socket
jmp 0x14000d810
mov rdi, rbx
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000d7e7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e725
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14000d7e0
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000d7f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000d7f3
call fcn.14004de90
jmp 0x14000d7f5
xor eax, eax
mov qword [rsp + 0x60], rax
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x78], rdi
xor edi, edi
mov qword [rsp + 0x70], rbx
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x80]
call fcn.14000b9f0
nop
mov rdx, rax
lea rcx, [rsp + 0x200]
call fcn.140005f60
nop
mov rdx, qword [rsp + 0x98]
cmp rdx, 0x10
jb 0x14000d887
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d882
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d882
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], socket
mov byte [rsp + 0x80], 0
mov dword [rsp + 0x38], 0x44556d6a
mov word [rsp + 0x3c], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 4
jb 0x14000d8c0
mov byte [rsp + 0x3d], 0
lea rcx, [rsp + 0x38]
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14000d8e0
lea rcx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0x10
cmovae rcx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x250]
cmp r8, rax
jne 0x14000d922
lea rdx, [rsp + 0x38]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000d922
mov al, 1
jmp 0x14000d924
xor al, al
test al, al
je 0x14000e3bd
lea rcx, [rsp + 0x40]
call fcn.14000abc0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000d944
mov rax, qword [rax]
lea rcx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0x10
cmovae rcx, qword [rsp + 0x220]
mov r8, qword [rsp + 0x230]
cmp r8, rdx
jne 0x14000d97b
mov rdx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000d97b
xor bl, bl
jmp 0x14000d97d
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000d9bd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d9b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d9b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
test bl, bl
je 0x14000dc7b
lea rcx, [rsp + 0x200]
call fcn.1400063d0
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0x10
jb 0x14000da16
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1a3
call fcn.14004dbe0
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], socket
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0x10
jb 0x14000da75
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1a3
call fcn.14004dbe0
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1d8], socket
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000dad4
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dacf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e205
call fcn.14004dbe0
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], socket
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000db33
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2c2
call fcn.14004dbe0
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], socket
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14000db92
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2c2
call fcn.14004dbe0
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], socket
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0x10
jb 0x14000dbf1
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dbec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e324
call fcn.14004dbe0
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1b8], socket
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000dc50
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e386
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
xor al, al
jmp 0x14000e6ec
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x180]
call fcn.14000aea0
nop
mov dword [rsp + 0x30], 0x4f4e7e5c
mov dword [rsp + 0x34], 0x1004747
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 6
jb 0x14000dcb0
mov byte [rsp + 0x37], 0
lea rax, [rsp + 0x30]
nop word [rax + rax]
inc r15
cmp byte [rax + r15], 0
jne 0x14000dcd0
lea rcx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rcx, qword [rsp + 0x180]
mov r8, qword [rsp + 0x190]
cmp r8, r15
jne 0x14000e06f
lea rdx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000e06f
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], socket
xor r8d, r8d
lea rdx, [0x14005a44b]
lea rcx, [rsp + 0x80]
call fcn.14001f770
lea rdx, [rsp + 0x80]
xor ecx, ecx
call fcn.14000cac0
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000dd9d
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e0d8
call fcn.14004dbe0
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], socket
mov byte [rsp + 0x180], 0
lea rcx, [rsp + 0x200]
call fcn.1400063d0
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0x10
jb 0x14000de0a
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1a3
call fcn.14004dbe0
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], socket
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0x10
jb 0x14000de69
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1a3
call fcn.14004dbe0
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1d8], socket
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000dec8
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dec3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e205
call fcn.14004dbe0
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], socket
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000df27
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000df22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2c2
call fcn.14004dbe0
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], socket
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14000df86
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000df81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2c2
call fcn.14004dbe0
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], socket
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0x10
jb 0x14000dfe5
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dfe0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e324
call fcn.14004dbe0
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1b8], socket
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000e044
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e03f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e386
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
xor al, al
jmp 0x14000e6ec
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0x10
cmovae rdx, qword [rsp + 0x220]
mov r8, qword [rsp + 0x230]
lea rcx, [0x1401c7728]
call fcn.14001f770
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000e0e4
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e0df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], socket
mov byte [rsp + 0x180], 0
lea rcx, [rsp + 0x200]
call fcn.1400063d0
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0x10
jb 0x14000e14d
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e148
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1a3
call fcn.14004dbe0
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], socket
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0x10
jb 0x14000e1af
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e1aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1d8], socket
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000e211
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e20c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e20c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], socket
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000e26c
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e267
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2c2
call fcn.14004dbe0
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], socket
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14000e2ce
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e2c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e2c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], socket
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0x10
jb 0x14000e330
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e32b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e32b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1b8], socket
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000e392
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e38d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e38d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
mov al, 1
jmp 0x14000e6ec
mov rcx, r14
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
inc r12d
lea rcx, [rsp + 0x200]
call fcn.1400063d0
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0x10
jb 0x14000e41c
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e417
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e472
call fcn.14004dbe0
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], socket
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0x10
jb 0x14000e47e
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e479
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e479
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1d8], socket
mov byte [rsp + 0x1c0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000e4e0
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e4db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e4db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], socket
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000e53b
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e536
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e591
call fcn.14004dbe0
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], socket
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14000e59d
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e598
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e598
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], socket
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0x10
jb 0x14000cdc0
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d5ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d5ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rax, qword [rsp + 0x178]
cmp rax, 0x10
jb 0x14000e646
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e641
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e6a9
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
xor al, al
jmp 0x14000e6ec
mov rax, qword [rsp + 0x178]
cmp rax, 0x10
jb 0x14000e6b5
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e6b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], socket
mov byte [rsp + 0x160], 0
mov rcx, r13
call fcn.140005df0
xor al, al
jmp 0x14000e6ec
mov rcx, qword [rsp + 0x2430]
xor rcx, rsp
call fcn.14004dbc0
lea r11, [rsp + 0x2440]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140001b30
nop
call fcn.140001b30
nop
call fcn.140001b30
int3