Function at 0x140002500
Capabilities:
Connect socket
Execute command
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x7b0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140029938]
xor rax, rsp
mov qword [rbp + 0x760], rax
mov rsi, rcx
mov qword [rbp + 8], rcx
xor edi, edi
mov qword [rbp + 0x1a0], rdi
lea rcx, [rbp + 0x208]
call fcn.140001f40
nop
mov ecx, 0x202
lea rdx, [rbp + 0x280]
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov ebx, eax
movabs r13, 0xff06ef642d42b5bb
movabs r12, 0x9afc7d8de56dd2ec
test eax, eax
je 0x1400026f0
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x8b748e107e03e6ec
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x440], rcx
movabs rax, 0xff9014ec834da299
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x448], rcx
movabs rax, 0x5f6efa2e706d7891
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x450], rax
movabs r14, 0x586be2c79b6d792e
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x458], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x420], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x428], rax
movabs r15, 0x5f6efa2e704d42f5
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x430], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x440], ymm1
lea rdx, [rbp + 0x440]
mov rcx, r8
vzeroupper
call fcn.1400051c0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x1400026be
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004280
call fcn.140018314
xor al, al
mov rcx, qword [rbp + 0x760]
xor rcx, rsp
call fcn.140018b00
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x248], edi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x258], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x268], xmm1
mov dword [rbp + 0x24c], 2
mov dword [rbp + 0x250], 1
mov dword [rbp + 0x254], 6
movabs rax, 0xff06ef521971878e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x480], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x488], rax
movdqa xmm0, xmmword [rbp + 0x70]
pxor xmm0, xmmword [rbp + 0x480]
movdqa xmmword [rbp + 0x70], xmm0
lea rcx, [rbp + 0x208]
cmp qword [rbp + 0x220], 0x10
cmovae rcx, qword [rbp + 0x208]
lea r9, [rbp + 0x1a0]
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x70]
call qword [sym.imp.WS2_32.dll_getaddrinfo]
mov ebx, eax
test eax, eax
je 0x1400028b6
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x96748b004c36d0dc
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x440], rcx
movabs rax, 0xf6951cebc502b482
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x448], rcx
movabs rax, 0x5f6efa2e50772690
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x450], rax
movabs r14, 0x586be2c79b6d792e
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x458], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x420], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x428], rax
movabs r15, 0x5f6efa2e704d42f5
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x430], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x440], ymm1
lea rdx, [rbp + 0x440]
mov rcx, r8
vzeroupper
call fcn.1400051c0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x14000267d
mov rax, qword [rbp + 0x1a0]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 8]
mov ecx, dword [rax + 4]
call qword [sym.imp.WS2_32.dll_socket]
mov rbx, rax
mov qword [rbp + 0x18], rax
cmp rax, 0xffffffffffffffff
jne 0x140002995
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x99269b014621dac8
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x420], rax
movabs rax, 0x9adc47e98001bb8d
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x428], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x440], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x448], rax
movdqa xmm0, xmmword [rbp + 0x420]
pxor xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x420], xmm0
lea rdx, [rbp + 0x420]
call fcn.1400051c0
mov rbx, rax
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x14000267d
mov rdx, qword [rbp + 0x1a0]
mov r8d, dword [rdx + 0x10]
mov rdx, qword [rdx + 0x20]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x140002abc
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x8b268a084f23dbee
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x440], rax
movabs rax, 0xf99913e38a0ef283
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x448], rax
movabs rax, 0x2d0b890e1f396281
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x450], rax
movabs rax, 0x586be2c7ba1f1c58
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x458], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x420], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x428], rax
movabs r15, 0x5f6efa2e704d42f5
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x430], rax
movabs r14, 0x586be2c79b6d792e
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x440], ymm1
lea rdx, [rbp + 0x440]
vzeroupper
call fcn.1400051c0
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x14000267d
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
lea rcx, [rbp + 0x228]
call fcn.1400021c0
nop
lea rcx, [rbp + 0x1c8]
call fcn.14000d960
nop
movabs rax, 0xb149a6377f07e39b
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x40], rax
movabs rax, 0x9afc7d8de56dd2cc
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x490], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x498], rax
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp + 0x40], xmm0
movabs rax, 0xff06cf206415fd9b
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x4a8], rax
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x30], xmm0
movabs rax, 0xff06ef640d1bf0f0
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140002bf1
mov rcx, qword [rsi + 0x10]
mov qword [rbp], rcx
movabs r15, 0x7fffffffffffffff
mov rax, r15
sub rax, rcx
cmp rax, rbx
jb 0x14000428d
cmp qword [rsi + 0x18], 0x10
jb 0x140002c29
mov rsi, qword [rsi]
mov qword [rbp + 8], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
lea rax, [rcx + rbx]
mov qword [rbp + 0x10], rax
mov esi, send
lea r14, [rbp + 0x50]
lea ecx, [rsi + 7]
cmp rax, rsi
jbe 0x140002cca
mov rsi, rax
or rsi, 0xf
cmp rsi, r15
jbe 0x140002c62
mov rsi, r15
jmp 0x140002c69
cmp rsi, rcx
cmovb rsi, rcx
mov rcx, rsi
add rcx, 1
cmovb rcx, rdi
cmp rcx, 0x1000
jb 0x140002cb0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004293
mov rcx, rax
call fcn.1400182d0
test rax, rax
je 0x140002ca9
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rax, qword [rbp + 0x10]
jmp 0x140002cc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002cc3
call fcn.1400182d0
mov r14, rax
mov rax, qword [rbp + 0x10]
jmp 0x140002cc6
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rsi
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + rbx]
mov r8, qword [rbp]
mov rdx, qword [rbp + 8]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x10]
mov byte [r14 + rax], 0
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140002d02
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.140004d20
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], r14b
lea rdx, [rbp + 0x228]
cmp qword [rbp + 0x240], 0x10
cmovae rdx, qword [rbp + 0x228]
mov r8, qword [rbp + 0x238]
lea rcx, [rbp + 0xd0]
call fcn.140004d20
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], r14b
lea rax, [rbp + 0x40]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140002dc0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xb0]
call fcn.140004d20
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rdx, qword [rbp + 0x1c8]
mov r8, qword [rbp + 0x1d8]
lea rcx, [rbp + 0x90]
call fcn.140004d20
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140002eba
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002eb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002eb5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x140002f15
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0xc0], xmm0
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140002f70
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0xe0], xmm0
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140002fc5
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
lea rdx, [rbp + 0x1e8]
cmp qword [rbp + 0x200], 0x10
cmovae rdx, qword [rbp + 0x1e8]
xor r9d, r9d
mov r8d, dword [rbp + 0x1f8]
mov rsi, qword [rbp + 0x18]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x1400031b8
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x96678944492cd0c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0x9afc7daddf09b780
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movdqa xmm0, xmmword [rbp + 0x420]
pxor xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x420], xmm0
lea rdx, [rbp + 0x420]
call fcn.1400051c0
mov rbx, rax
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x1400030fd
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004177
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x140003155
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003150
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400041d2
call fcn.140018314
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], send
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x14000267d
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000422f
call fcn.140018314
jmp 0x14000267d
xor r9d, r9d
mov r8d, 0x1ff
lea rdx, [rbp + 0x560]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x140004083
cdqe
cmp rax, 0x200
jae 0x140004287
mov byte [rbp + rax + 0x560], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], r14
lea rax, [rbp + 0x560]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140003211
cmp rbx, r15
ja 0x140004299
mov qword [rbp + 0x1c0], send
cmp rbx, 0x10
jae 0x14000325e
mov qword [rbp + 0x1b8], rbx
mov r8, rbx
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x1a8]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x1a8], 0
jmp 0x1400032fb
mov rax, rbx
or rax, 0xf
cmp rax, r15
ja 0x14000327a
mov r15, rax
cmp rax, 0x16
mov eax, socket
cmovb r15, rax
mov rcx, r15
add rcx, 1
cmovb rcx, rdi
cmp rcx, 0x1000
jb 0x1400032ba
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000429f
mov rcx, rax
call fcn.1400182d0
test rax, rax
je 0x140003f13
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400032cc
test rcx, rcx
je 0x1400032c9
call fcn.1400182d0
mov rsi, rax
jmp 0x1400032cc
mov rsi, r14
mov qword [rbp + 0x1a8], rsi
mov qword [rbp + 0x1b8], rbx
mov qword [rbp + 0x1c0], r15
mov r8, rbx
lea rdx, [rbp + 0x560]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], 0
mov rsi, qword [rbp + 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xdf3c82015931cce8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
movdqa xmm0, xmmword [rbp + 0x80]
pxor xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x80], xmm0
lea rdx, [rbp + 0x80]
call fcn.1400051c0
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0x10
cmovae rdx, qword [rbp + 0x1a8]
mov r8, qword [rbp + 0x1b8]
mov rcx, rax
call fcn.140005820
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rax, 0xac55aa276e17e6e0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0xf1dc0ff88a34f2b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x3e18da5d196d3b90
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x780f8ca6bb091042
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0xfc6ffe06ddada46e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rbx, 0x63f6ad9fb4d0c20
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs r15, 0x5f6efa2e704d42f5
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs r14, 0x586be2c79b6d792e
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rax, 0xfc419b70b4d9c70f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqa xmm0, xmmword [rbp + 0x180]
vpxor xmm0, xmm0, xmmword [rbp + 0x4e0]
vmovdqa xmmword [rbp + 0x180], xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x1a8]
vzeroupper
call fcn.1400048c0
cmp rax, 0xffffffffffffffff
je 0x1400036c1
mov ecx, 0x4b0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14001cdb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x140003569
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003564
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f13
call fcn.140018314
xor r14d, r14d
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], send
mov byte [rbp + 0x1a8], r14b
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x1400035c6
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f73
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x14000361e
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003619
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fce
call fcn.140018314
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], send
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140003679
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003673
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000402b
call fcn.140018314
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x1400036ba
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000407c
call fcn.140018314
mov al, 1
jmp 0x1400026c0
movabs rax, 0xb726b22b6b0cfce0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0xba8f1ce5c5299bbb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x3c1b890e1e282797
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x340797a1e81e1c4d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x8832f217d1abe776
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x6a6f4af79f287e45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xd16de31a17685bcc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xdda49b624d45da32
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xad730c8c4fc9074d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0xfb038bb0f0102be4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xfcaa2d39818766d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xc65f3d2fd0b21d05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movabs rax, 0xfc419b70b4d9c70f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movabs rax, 0xb6028f3a721b3aa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
movabs rax, 0xb4c5fc036d2bb312
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movabs rax, 0xc01c6fac20bd2723
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
movabs rax, 0x9377abd584754794
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movabs rax, 0x8fcf4e56f3f746bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
movabs rax, 0xc65f3d2fd0b23376
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x520]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x540]
vpxor ymm0, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x140], ymm0
lea rax, [rbp + 0x100]
vzeroupper
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140003940
lea r14, [rbp + 0x1a8]
mov r15, qword [rbp + 0x1a8]
mov r12, qword [rbp + 0x1c0]
cmp r12, 0x10
cmovae r14, r15
mov rsi, qword [rbp + 0x1b8]
cmp rdi, rsi
ja 0x1400039de
mov rax, rsi
sub rax, rdi
test rdi, rdi
je 0x140003a6e
lea r13, [rax + r14]
movsx edx, byte [rbp + 0x100]
lea r8, [r13 + 1]
sub r8, r14
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400039de
mov r8, rdi
lea rdx, [rbp + 0x100]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003a61
inc rbx
lea r8, [r13 + 1]
sub r8, rbx
movsx edx, byte [rbp + 0x100]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400039a3
lea rdi, [rbp + 0x1a8]
cmp r12, 0x10
cmovae rdi, r15
cmp rsi, 0x34
jb 0x140003c3e
lea r14, [rdi + rsi]
lea r8, [r14 - 0x33]
sub r8, rdi
mov edx, 0x5b
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003c3e
nop dword [rax + rax]
mov r8d, 0x34
lea rdx, str._ERROR__Version_mismatch._Please_update_your_client.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003c31
inc rbx
lea r8, [r14 - 0x33]
sub r8, rbx
mov edx, 0x5b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003a20
jmp 0x140003c3e
sub rbx, r14
cmp rbx, 0xffffffffffffffff
je 0x1400039de
mov ecx, 0x4b0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14001cdb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x140003ad8
inc rdx
mov rcx, qword [rbp + 0x1a8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003ad3
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f13
call fcn.140018314
xor r14d, r14d
mov byte [rbp + 0x1a8], r14b
mov qword [rbp + 0x1c0], send
mov qword [rbp + 0x1b8], r14
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x140003b35
inc rdx
mov rcx, qword [rbp + 0x1e8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003b30
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f73
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
mov byte [rbp + 0x1e8], 0
movdqu xmmword [rbp + 0x1f8], xmm0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x140003b8d
inc rdx
mov rcx, qword [rbp + 0x1c8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003b88
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fce
call fcn.140018314
mov byte [rbp + 0x1c8], 0
mov qword [rbp + 0x1e0], send
mov qword [rbp + 0x1d8], r14
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140003be8
inc rdx
mov rcx, qword [rbp + 0x228]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003be2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000402b
call fcn.140018314
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x1400026be
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000407c
jmp 0x1400026b9
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x140003a6e
lea rdi, [rbp + 0x1a8]
cmp r12, 0x10
cmovae rdi, r15
cmp rsi, 0x24
jb 0x140003cc7
lea r14, [rdi + rsi]
lea r8, [r14 - 0x23]
sub r8, rdi
mov edx, 0x5b
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003cc7
nop dword [rax]
nop word [rax + rax]
mov r8d, 0x24
lea rdx, str._ERROR__VPN_detected._Access_denied.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003cba
inc rbx
lea r8, [r14 - 0x23]
sub r8, rbx
mov edx, 0x5b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003c80
jmp 0x140003cc7
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x140003a6e
lea rdi, [rbp + 0x1a8]
cmp r12, 0x10
cmovae rdi, r15
cmp rsi, 0x32
jb 0x140003d47
lea r14, [rdi + rsi]
lea r8, [r14 - 0x31]
sub r8, rdi
mov edx, 0x5b
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003d47
nop dword [rax]
mov r8d, 0x32
lea rdx, str._ERROR__IP_address_change_detected._Access_denied.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003d3a
inc rbx
lea r8, [r14 - 0x31]
sub r8, rbx
mov edx, 0x5b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003d00
jmp 0x140003d47
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x140003a6e
lea rdi, [rbp + 0x1a8]
cmp r12, 0x10
cmovae rdi, r15
cmp rsi, 0x22
jb 0x140003dc7
lea r14, [rdi + rsi]
lea r8, [r14 - 0x21]
sub r8, rdi
mov edx, 0x5b
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003dc7
nop dword [rax]
mov r8d, 0x22
lea rdx, str._ERROR__You_banned._Access_denied.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003dba
inc rbx
lea r8, [r14 - 0x21]
sub r8, rbx
mov edx, 0x5b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003d80
jmp 0x140003dc7
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x140003a6e
lea rdi, [rbp + 0x1a8]
cmp r12, 0x10
cmovae rdi, r15
cmp rsi, 0x44
jb 0x140003e47
lea r14, [rdi + rsi]
lea r8, [r14 - 0x43]
sub r8, rdi
mov edx, 0x5b
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003e47
nop dword [rax]
mov r8d, 0x44
lea rdx, str._WARNING__Your_key_has_expired._Please_obtain_a_new_key_to_continue.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003e3a
inc rbx
lea r8, [r14 - 0x43]
sub r8, rbx
mov edx, 0x5b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003e00
jmp 0x140003e47
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x140003a6e
lea rdi, [rbp + 0x1a8]
cmp r12, 0x10
cmovae rdi, r15
cmp rsi, 0x32
jb 0x140003eca
lea r8, [rsi - 0x31]
add r8, rdi
sub r8, rdi
mov edx, 0x5b
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140003eca
nop dword [rax + rax]
mov r8d, 0x32
lea rdx, str._ERROR__Key_not_found._Please_provide_a_valid_key.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003ebd
inc rbx
lea r8, [rsi - 0x31]
add r8, rdi
sub r8, rbx
mov edx, 0x5b
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003e80
jmp 0x140003eca
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x140003a6e
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x140003f1f
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
xor r14d, r14d
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], send
mov byte [rbp + 0x1a8], r14b
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x140003f7f
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x140003fda
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003fd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], send
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140004038
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004032
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004032
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x1400026be
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x966789445b21d0c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0x9afc7daddf09b780
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movdqa xmm0, xmmword [rbp + 0x420]
pxor xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x420], xmm0
lea rdx, [rbp + 0x420]
call fcn.1400051c0
mov rbx, rax
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140005390]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x14001cdb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x140004183
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000417e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000417e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
movdqa xmm0, xmmword [0x14001cf20]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x1400041de
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400041d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400041d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], send
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x14000423c
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004236
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004236
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140018314
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x1400026be
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140018c28
nop
call fcn.140001f20
int3
call fcn.140001e70
nop
call fcn.140001f20
int3
call fcn.140001e70
int3