Function at 0x140001570
Capabilities:
Connect socket
Create thread
Initialize winsock library
Resolve dns

Disassembly:
push rbx
sub rsp, 0x220
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x210], rax
lea rcx, [0x140006720]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rdx, [0x1400045ec]
lea rcx, str.response.txt
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rbx, rax
test rax, rax
je 0x1400018b6
lea rdx, str.start_n
mov qword [rsp + 0x230], rdi
mov rcx, rax
call fcn.140001010
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor edi, edi
lea rdx, [rsp + 0x70]
mov ecx, 0x202
mov qword [rsp + 0x30], rdi
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x140001603
mov edx, eax
lea rcx, str.WSAStartup_failed_with_error__d_n
call fcn.140001060
jmp 0x140001667
xorps xmm0, xmm0
mov dword [rsp + 0x38], edi
xorps xmm1, xmm1
mov dword [rsp + 0x3c], 2
lea r9, [rsp + 0x30]
mov dword [rsp + 0x40], 1
lea r8, [rsp + 0x38]
mov dword [rsp + 0x44], 6
lea rdx, str.1347
lea rcx, str.10.0.0.7
movdqu xmmword [rsp + 0x48], xmm0
movdqu xmmword [rsp + 0x58], xmm1
call qword [sym.imp.WS2_32.dll_getaddrinfo]
test eax, eax
je 0x14000168d
mov edx, eax
lea rcx, str.getaddrinfo_failed_with_error__d_n
call fcn.140001060
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 1
mov rdi, qword [rsp + 0x230]
mov rcx, qword [rsp + 0x210]
xor rcx, rsp
call fcn.140002080
add rsp, 0x220
pop rbx
ret
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x14000170f
nop word [rax + rax]
mov r8d, dword [rbx + 0xc]
mov edx, dword [rbx + 8]
mov ecx, dword [rbx + 4]
call qword [sym.imp.WS2_32.dll_socket]
mov qword [0x140006078], rax
cmp rax, 0xffffffffffffffff
jne 0x1400016d3
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, str.Error_at_socket__:__ld_n
call fcn.140001060
jmp 0x140001701
mov r8d, dword [rbx + 0x10]
mov rcx, rax
mov rdx, qword [rbx + 0x20]
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x14000170a
mov rcx, qword [0x140006078]
call qword [sym.imp.WS2_32.dll_closesocket]
mov qword [0x140006078], 0xffffffffffffffff
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x1400016a0
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
cmp qword [0x140006078], 0xffffffffffffffff
jne 0x140001733
lea rcx, str.Unable_to_connect_to_server__n
call fcn.140001060
jmp 0x140001661
call fcn.140001270
mov r10, rax
movzx ecx, byte [rax]
imul r8d, ecx, 0x1f
movzx ecx, byte [rax + 1]
movzx eax, byte [rax + 2]
imul r9d, eax, 0x1f
imul r11d, ecx, 0x1f
movzx ecx, byte [r10 + 3]
sub r8d, 0x432100f0
xor r8d, 0x12345678
mov edx, r8d
shl r8d, 5
add r9d, 0x1950c838
shr edx, 0x1b
or edx, r8d
sub r11d, 0x91a2b54
mov eax, edx
lea r8, str._08X_08X
shr eax, 3
xor r9d, 0xfedcba9
add ecx, eax
ror r9d, 0x1b
imul eax, ecx, 0x1f
xor r11d, 0x9abcdef0
ror r11d, 0x1b
lea rcx, [0x140006690]
xor r9d, edx
mov edx, send
xor eax, 0x87654321
ror eax, 0x1b
xor eax, r11d
mov dword [rsp + 0x20], eax
call fcn.140001120
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x1400018f0]
mov byte [0x1400066a0], dil
xor edx, edx
mov dword [rsp + 0x20], edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x1400019c0]
mov qword [0x140006700], rax
xor edx, edx
mov dword [rsp + 0x20], edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x140001a60]
mov qword [0x140006708], rax
xor edx, edx
mov dword [rsp + 0x20], edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x140001b60]
mov qword [0x140006710], rax
xor edx, edx
mov dword [rsp + 0x20], edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rbx, [0x140006700]
mov r9d, 0xffffffff
mov rdx, rbx
mov qword [0x140006718], rax
mov r8d, 1
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
lea rdi, [0x140006720]
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 8
cmp rbx, rdi
jl 0x140001890
lea rcx, [0x140006720]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
xor eax, eax
jmp 0x14000166c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.response.txt
lea rdx, str.Error:_Could_not_create__s_n
call fcn.140001010
mov eax, 1
jmp 0x140001674