Function at 0x14001103c
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Initialize winsock library
Terminate process

Disassembly:
jmp 0x1400160c0
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x3e0
lea rbp, [rsp + 0x30]
lea rcx, [0x14004601f]
call fcn.140011555
mov rax, qword [rbp + 0x3d0]
mov qword [rax], 0
lea rax, [rbp + 0x1c8]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_recv
rep stosb byte [rdi], al
lea rax, [rbp + 0x1c8]
mov rdi, qword [rbp + 0x3d8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x200]
mov rdi, rax
xor eax, eax
mov ecx, 0x198
rep stosb byte [rdi], al
lea rax, [rbp + 0x200]
mov rdi, qword [rbp + 0x3e0]
mov rsi, rax
mov ecx, 0x198
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x3f0]
mov dword [rax], 0
mov qword [rbp + 8], 0
mov qword [rbp + 0x28], 0
mov rdx, qword [rbp + 0x3e0]
mov cx, 0x202
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov rcx, qword [rbp + 0x3f0]
mov dword [rcx], eax
mov rax, qword [rbp + 0x3f0]
cmp dword [rax], 0
je 0x1400161a1
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
jmp 0x140016452
lea rcx, str.ws2_32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400161bc
mov byte [rbp + 0x3a4], 1
jmp 0x1400161c3
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x1400161da
mov dword [rbp + 0x3a8], 1
jmp 0x1400161e4
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140016200
lea rcx, str.ws2_32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 8], rax
jmp 0x140016211
lea rcx, str.ws2_32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x140016221
mov byte [rbp + 0x3a4], 1
jmp 0x140016228
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x14001623f
mov dword [rbp + 0x3a8], 1
jmp 0x140016249
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x14001625e
mov eax, 0xc0000008
jmp 0x140016452
lea rdx, str.inet_addr
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x140016283
mov byte [rbp + 0x3a4], 1
jmp 0x14001628a
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x1400162a1
mov dword [rbp + 0x3a8], 1
jmp 0x1400162ab
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x1400162c1
mov ecx, 0xc0000008
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rbp + 0x3e8]
call qword [rbp + 0x28]
mov rcx, qword [rbp + 0x3d8]
mov dword [rcx + 4], eax
mov eax, 2
mov rcx, qword [rbp + 0x3d8]
mov word [rcx], ax
mov cx, 0x1bd
call qword [sym.imp.WS2_32.dll_htons]
mov rcx, qword [rbp + 0x3d8]
mov word [rcx + 2], ax
mov r8d, 6
mov edx, 1
mov ecx, 2
call qword [sym.imp.WS2_32.dll_socket]
mov rcx, qword [rbp + 0x3d0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d0]
cmp qword [rax], 0xffffffffffffffff
je 0x14001632f
mov byte [rbp + 0x3a4], 1
jmp 0x140016336
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x14001634d
mov dword [rbp + 0x3a8], 1
jmp 0x140016357
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140016445
mov r8d, reloc.WS2_32.dll_recv
mov rdx, qword [rbp + 0x3d8]
mov rax, qword [rbp + 0x3d0]
mov rcx, qword [rax]
call qword [sym.imp.WS2_32.dll_connect]
mov rcx, qword [rbp + 0x3f0]
mov dword [rcx], eax
mov rax, qword [rbp + 0x3f0]
cmp dword [rax], 0xffffffff
jne 0x14001639f
mov byte [rbp + 0x3a4], 1
jmp 0x1400163a6
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x1400163bd
mov dword [rbp + 0x3a8], 1
jmp 0x1400163c7
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x14001641d
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rcx, str.connect__
mov qword [rsp + 0x20], rcx
mov r9d, 0xc0000001
lea r8, str.TargetConnect
lea rdx, str.__ws_:_t_error_0x_08x_occured_when_calling___ws__n
mov rcx, rax
call fcn.140011483
xor edx, edx
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_SleepEx]
mov ecx, 0xc0000001
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, qword [rbp + 0x3f0]
mov eax, dword [rax]
and eax, 0
mov rcx, qword [rbp + 0x3f0]
mov dword [rcx], eax
mov rax, qword [rbp + 0x3f0]
mov dword [rax], 0
xor eax, eax
jmp 0x140016452
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
jmp 0x140016452
lea rsp, [rbp + 0x3b0]
pop rdi
pop rsi
pop rbp
ret