Function at 0x14001ba40
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Execute command
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rbx
sub rsp, 0x2a0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], rcx
mov rax, rsp
mov rsi, rax
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.1400a3570
lea rax, [rbp - 0x10]
mov rdx, rax
mov ecx, 0x202
mov rax, qword [sym.imp.WS2_32.dll_WSAStartup]
call rax
test eax, eax
setne al
test al, al
je 0x14001baad
lea rax, str.pause
mov rcx, rax
call sub.msvcrt.dll_system
mov ebx, 1
jmp 0x14001be3d
mov r8d, 6
mov edx, 1
mov ecx, 2
mov rax, qword [sym.imp.WS2_32.dll_socket]
call rax
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x260]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_gethostbyname]
call rax
mov qword [rbp + 0x208], rax
mov ecx, 0x50
mov rax, qword [sym.imp.WS2_32.dll_htons]
call rax
mov word [rbp - 0x1e], ax
mov word [rbp - 0x20], 2
mov rax, qword [rbp + 0x208]
mov rax, qword [rax + 0x18]
mov rax, qword [rax]
mov eax, dword [rax]
mov dword [rbp - 0x1c], eax
lea rdx, [rbp - 0x20]
mov rax, qword [rbp + 0x210]
mov r8d, 0x10
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_connect]
call rax
test eax, eax
setne al
test al, al
je 0x14001bb51
lea rax, str.pause
mov rcx, rax
call sub.msvcrt.dll_system
mov ebx, 1
jmp 0x14001be3d
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400a3570
lea rax, [rbp - 0x40]
lea rdx, str.GET___HTTP_1.1_r_nHost:
mov rcx, rax
call fcn.1400a18a0
mov rdx, qword [rbp + 0x260]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400a18a0
lea rax, [rbp - 0x40]
lea rdx, str._r_nConnection:_close_r_n_r_n
mov rcx, rax
call fcn.1400a18a0
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14002c180
mov rcx, rax
call sub.msvcrt.dll_strlen
mov ebx, eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14002c180
mov rdx, rax
mov rax, qword [rbp + 0x210]
mov r9d, 0
mov r8d, ebx
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_send]
call rax
mov eax, dword [0x1400bc040]
mov edx, eax
sub rdx, 1
mov qword [rbp + 0x200], rdx
mov edx, eax
mov r14, rdx
mov r15d, 0
mov edx, eax
mov r12, rdx
mov r13d, 0
mov eax, eax
add rax, 0xf
shr rax, 4
shl rax, 4
call fcn.140010d00
sub rsp, rax
lea rax, [rsp + 0x20]
add rax, 0
mov qword [rbp + 0x1f8], rax
jmp 0x14001bca5
mov dword [rbp + 0x21c], 0
jmp 0x14001bc60
mov rdx, qword [rbp + 0x1f8]
mov eax, dword [rbp + 0x21c]
cdqe
movzx eax, byte [rdx + rax]
movsx edx, al
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.1400a30c0
add dword [rbp + 0x21c], 1
mov rdx, qword [rbp + 0x1f8]
mov eax, dword [rbp + 0x21c]
cdqe
movzx eax, byte [rdx + rax]
cmp al, 0x1f
jg 0x14001bc34
mov rdx, qword [rbp + 0x1f8]
mov eax, dword [rbp + 0x21c]
cdqe
movzx eax, byte [rdx + rax]
cmp al, 0xa
je 0x14001bc34
mov rdx, qword [rbp + 0x1f8]
mov eax, dword [rbp + 0x21c]
cdqe
movzx eax, byte [rdx + rax]
cmp al, 0xd
je 0x14001bc34
mov eax, dword [0x1400bc040]
mov ecx, eax
mov rdx, qword [rbp + 0x1f8]
mov rax, qword [rbp + 0x210]
mov r9d, 0
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_recv]
call rax
test eax, eax
setg al
test al, al
jne 0x14001bc28
mov rax, qword [rbp + 0x210]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_closesocket]
call rax
mov rax, qword [sym.imp.WS2_32.dll_WSACleanup]
call rax
lea rax, [rbp + 0x190]
mov r8d, 0
lea rdx, [0x1400bd0c5]
mov rcx, rax
call fcn.14002bff0
mov dword [rbp + 0x1f4], eax
lea rax, [rbp + 0x190]
mov r8d, 0
lea rdx, str.__p_
mov rcx, rax
call fcn.14002bff0
mov dword [rbp + 0x1f0], eax
mov eax, dword [rbp + 0x1f0]
sub eax, dword [rbp + 0x1f4]
mov r8d, eax
mov ecx, dword [rbp + 0x1f4]
lea rax, [rbp - 0x60]
lea rdx, [rbp + 0x190]
mov r9, r8
mov r8, rcx
mov rcx, rax
call fcn.14002c380
lea rax, str.PORT:
mov rdx, rax
mov rax, qword [0x1400c30c0]
mov rcx, rax
call fcn.1400b42b0
mov rbx, rax
lea rax, [rbp + 0x1b0]
lea rdx, [rbp - 0x60]
mov r9, 0xffffffffffffffff
mov r8d, 3
mov rcx, rax
call fcn.14002c380
lea rax, [rbp + 0x1b0]
mov rdx, rax
mov rcx, rbx
call fcn.1400b45b0
mov rcx, rax
mov rax, qword [0x1400c30d0]
mov rdx, rax
call fcn.140077550
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.1400a3e90
lea rax, [rbp + 0x1d0]
lea rdx, [rbp - 0x60]
mov r9, 0xffffffffffffffff
mov r8d, 3
mov rcx, rax
call fcn.14002c380
lea rax, [rbp + 0x1d0]
mov r8d, 0xa
mov edx, 0
mov rcx, rax
call fcn.1400aa590
mov ebx, eax
lea rax, [rbp + 0x1d0]
mov rcx, rax
call fcn.1400a3e90
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400a3e90
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400a3e90
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.1400a3e90
mov rsp, rsi
mov eax, ebx
lea rsp, [rbp + 0x220]
pop rbx
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret