Function at 0x1400296b4
Capabilities:
Create tcp socket
Create udp socket
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rax, qword [rcx]
cmp byte [rax], 0
mov byte [rax], 0
je 0x140029988
lea rdx, [0x1400a26e4]
lea rsi, [rsp + 0x50]
mov r8d, 0xb
mov rcx, rsi
call fcn.140059fb6
cmp qword [rsi], 0
je 0x140029937
lea rax, [rsp + 0x50]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
xor r14d, r14d
mov rax, qword [rsp + 0x88]
cmp rax, qword [rsp + 0x98]
je 0x14002991a
lea rcx, [rax + 0x20]
mov qword [rsp + 0x88], rcx
movzx esi, word [rax]
cmp si, 2
je 0x14002991a
mov qword [rsp + 0x38], r14
mov r12d, dword [rax + 2]
movzx edi, word [rax + 6]
mov r15d, dword [rax + 8]
mov rcx, qword [rax + 0xc]
mov qword [rsp + 0x78], rcx
mov r14d, dword [rax + 0x14]
mov ecx, dword [rax + 0x18]
mov dword [rsp + 0x4c], ecx
movzx r13d, word [rax + 0x1c]
call fcn.140059e66
mov ebp, 2
test si, si
je 0x140029786
mov ebp, 0x17
mov dword [rsp + 0x28], 0x81
and dword [rsp + 0x20], 0
mov ecx, ebp
mov edx, 2
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ws2_32.dll_WSASocketW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400297ec
shl rdi, 0x20
or rdi, r12
test si, si
je 0x14002985c
movabs rax, 0xffffffff0000
and rdi, rax
shr rdi, 0x10
mov r8d, 0x1c
mov cx, 0x17
mov rdx, qword [rsp + 0x78]
mov r9d, dword [rsp + 0x4c]
mov rax, rdi
jmp 0x14002987f
mov dword [rsp + 0x44], r14d
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
cmp eax, 0x2739
je 0x14002980c
mov r14d, eax
cmp eax, 0x2726
jne 0x1400298e3
mov dword [rsp + 0x28], 1
and dword [rsp + 0x20], 0
mov ecx, ebp
mov edx, 2
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ws2_32.dll_WSASocketW]
cmp rax, 0xffffffffffffffff
je 0x1400298ed
mov rbx, rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
call qword [sym.imp.kernel32.dll_SetHandleInformation]
test eax, eax
je 0x1400298f7
mov r14d, dword [rsp + 0x44]
jmp 0x1400297af
mov r13, rdi
shr r13, 0x20
mov r8d, 0x10
mov cx, 2
xor eax, eax
xor r15d, r15d
mov r14d, edi
mov rdx, qword [rsp + 0x70]
mov r9d, dword [rsp + 0x48]
rol r13w, 8
mov word [rsp + 0x50], cx
mov word [rsp + 0x52], r13w
mov dword [rsp + 0x54], r14d
shl r15, 0x20
or r15, rax
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x68], r9d
mov rcx, rbx
lea rdx, [rsp + 0x50]
call qword [sym.imp.ws2_32.dll_bind]
cmp eax, 0xffffffff
mov rsi, qword [rsp + 0x38]
jne 0x140029956
call fcn.140059f31
mov r14, rax
mov rcx, rbx
call qword [sym.imp.ws2_32.dll_closesocket]
jmp 0x14002990d
shl r14, 0x20
or r14, 2
jmp 0x140029908
call fcn.140059f31
mov r14, rax
jmp 0x140029908
call fcn.140028a27
mov r14, rax
mov rcx, rbx
call qword [sym.imp.ws2_32.dll_closesocket]
mov rsi, qword [rsp + 0x38]
mov rcx, rsi
call fcn.14000440b
jmp 0x140029719
lea rcx, [rsp + 0x80]
call fcn.1400285a2
test r14, r14
lea rcx, str.could_not_resolve_to_any_addresses
cmovne rcx, r14
jmp 0x14002993c
mov rcx, qword [rsp + 0x58]
call fcn.140003c7a
nop
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x80]
call fcn.1400285a2
mov rcx, rsi
call fcn.14000440b
mov rcx, rbx
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.ws2_32.dll_closesocket]
ud2