Function at 0x140011046
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Initialize winsock library
Terminate process

Disassembly:
jmp 0x1400199b0
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x3e0
lea rbp, [rsp + 0x30]
lea rcx, [0x14004c0cb]
call fcn.140011726
mov rax, qword [rbp + 0x3d0]
mov qword [rax], 0
lea rax, [rbp + 0x1c8]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_recv
rep stosb byte [rdi], al
lea rax, [rbp + 0x1c8]
mov rdi, qword [rbp + 0x3d8]
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x200]
mov rdi, rax
xor eax, eax
mov ecx, 0x198
rep stosb byte [rdi], al
lea rax, [rbp + 0x200]
mov rdi, qword [rbp + 0x3e0]
mov rsi, rax
mov ecx, 0x198
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x3f0]
mov dword [rax], 0
mov qword [rbp + 8], 0
mov qword [rbp + 0x28], 0
mov rdx, qword [rbp + 0x3e0]
mov cx, 0x202
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov rcx, qword [rbp + 0x3f0]
mov dword [rcx], eax
mov rax, qword [rbp + 0x3f0]
cmp dword [rax], 0
je 0x140019a91
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
jmp 0x140019d42
lea rcx, str.ws2_32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140019aac
mov byte [rbp + 0x3a4], 1
jmp 0x140019ab3
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x140019aca
mov dword [rbp + 0x3a8], 1
jmp 0x140019ad4
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140019af0
lea rcx, str.ws2_32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 8], rax
jmp 0x140019b01
lea rcx, str.ws2_32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x140019b11
mov byte [rbp + 0x3a4], 1
jmp 0x140019b18
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x140019b2f
mov dword [rbp + 0x3a8], 1
jmp 0x140019b39
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140019b4e
mov eax, 0xc0000008
jmp 0x140019d42
lea rdx, str.inet_addr
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x140019b73
mov byte [rbp + 0x3a4], 1
jmp 0x140019b7a
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x140019b91
mov dword [rbp + 0x3a8], 1
jmp 0x140019b9b
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140019bb1
mov ecx, 0xc0000008
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rbp + 0x3e8]
call qword [rbp + 0x28]
mov rcx, qword [rbp + 0x3d8]
mov dword [rcx + 4], eax
mov eax, 2
mov rcx, qword [rbp + 0x3d8]
mov word [rcx], ax
mov cx, 0x1bd
call qword [sym.imp.WS2_32.dll_htons]
mov rcx, qword [rbp + 0x3d8]
mov word [rcx + 2], ax
mov r8d, 6
mov edx, 1
mov ecx, 2
call qword [sym.imp.WS2_32.dll_socket]
mov rcx, qword [rbp + 0x3d0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d0]
cmp qword [rax], 0xffffffffffffffff
je 0x140019c1f
mov byte [rbp + 0x3a4], 1
jmp 0x140019c26
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x140019c3d
mov dword [rbp + 0x3a8], 1
jmp 0x140019c47
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140019d35
mov r8d, reloc.WS2_32.dll_recv
mov rdx, qword [rbp + 0x3d8]
mov rax, qword [rbp + 0x3d0]
mov rcx, qword [rax]
call qword [sym.imp.WS2_32.dll_connect]
mov rcx, qword [rbp + 0x3f0]
mov dword [rcx], eax
mov rax, qword [rbp + 0x3f0]
cmp dword [rax], 0xffffffff
jne 0x140019c8f
mov byte [rbp + 0x3a4], 1
jmp 0x140019c96
mov byte [rbp + 0x3a4], 0
movzx eax, byte [rbp + 0x3a4]
test eax, eax
je 0x140019cad
mov dword [rbp + 0x3a8], 1
jmp 0x140019cb7
mov dword [rbp + 0x3a8], 0
cmp dword [rbp + 0x3a8], 0
je 0x140019d0d
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rcx, str.connect__
mov qword [rsp + 0x20], rcx
mov r9d, 0xc0000001
lea r8, [0x1400357b0]
lea rdx, str.__ws_:_t_error_0x_08x_occured_when_calling___ws__n
mov rcx, rax
call fcn.1400115e1
xor edx, edx
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_SleepEx]
mov ecx, 0xc0000001
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, qword [rbp + 0x3f0]
mov eax, dword [rax]
and eax, 0
mov rcx, qword [rbp + 0x3f0]
mov dword [rcx], eax
mov rax, qword [rbp + 0x3f0]
mov dword [rax], 0
xor eax, eax
jmp 0x140019d42
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
jmp 0x140019d42
lea rsp, [rbp + 0x3b0]
pop rdi
pop rsi
pop rbp
ret