Function at 0x140011037
Capabilities:
Create thread

Disassembly:
jmp 0x140023420
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
sub rsp, 0x1d0
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x38
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x1f8]
mov rax, qword [0x140034098]
xor rax, rbp
mov qword [rbp + 0x198], rax
lea rcx, [0x14004606b]
call fcn.140011555
lea rax, [rbp + 8]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
lea rax, [rbp + 0x28]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_recv
rep stosb byte [rdi], al
lea rax, [0x140011532]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x98], 0
cmp dword [rbp + 0x1c0], 2
jb 0x1400235f5
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0x1c8]
mov rax, qword [rcx + rax]
mov qword [rbp + 0x188], rax
mov qword [rbp + 0x190], 0xffffffffffffffff
inc qword [rbp + 0x190]
mov rax, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x190]
cmp word [rax + rcx*2], 0
jne 0x1400234de
mov rax, qword [rbp + 0x190]
add rax, 2
mov edx, eax
lea rcx, [rbp + 0x28]
call fcn.1400113d4
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0x1c8]
mov rax, qword [rcx + rax]
mov qword [rbp + 0x188], rax
mov qword [rbp + 0x190], 0xffffffffffffffff
inc qword [rbp + 0x190]
mov rax, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x190]
cmp word [rax + rcx*2], 0
jne 0x140023536
mov rax, qword [rbp + 0x190]
shl rax, 1
mov ecx, 8
imul rcx, rcx, 1
mov rdx, qword [rbp + 0x1c8]
mov rdi, qword [rbp + 0x30]
mov rsi, qword [rdx + rcx]
mov rcx, rax
rep movsb byte [rdi], byte [rsi]
mov r9d, 2
lea r8, [0x140030740]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x28]
call fcn.140011082
test eax, eax
jne 0x1400235ac
lea rdx, [0x140034310]
lea rcx, str.127.0.0.1
call fcn.1400113f7
jmp 0x1400235cc
mov eax, 8
imul rax, rax, 1
lea rdx, [0x140034310]
mov rcx, qword [rbp + 0x1c8]
mov rcx, qword [rcx + rax]
call fcn.1400113f7
lea rcx, [rbp + 0x28]
call fcn.140011505
lea rax, [rbp + 0x174]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [rbp + 0x174]
mov qword [rbp + 8], rax
jmp 0x140023608
lea rdx, [0x140034310]
lea rcx, str.127.0.0.1
call fcn.1400113f7
lea rdx, [0x140034300]
lea rcx, [0x140034310]
call fcn.14001109b
lea rcx, [0x140034310]
call fcn.1400112da
lea rax, [0x140034328]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [0x140034308]
mov r8, qword [rbp + 0x58]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140034320], rax
cmp qword [0x140034320], 0
jne 0x14002366a
mov byte [rbp + 0x184], 1
jmp 0x140023671
mov byte [rbp + 0x184], 0
movzx eax, byte [rbp + 0x184]
test eax, eax
je 0x140023688
mov dword [rbp + 0x188], 1
jmp 0x140023692
mov dword [rbp + 0x188], 0
cmp dword [rbp + 0x188], 0
je 0x1400236b1
lea rcx, [0x140034300]
call fcn.14001110e
mov eax, 0xc0000008
jmp 0x140023758
mov edx, 0xffffffff
mov rcx, qword [0x140034320]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14003432c]
mov rcx, qword [0x140034320]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov rcx, qword [0x140034320]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140034320], 0
mov dword [0x140034328], 0
cmp dword [0x14003432c], 0
je 0x140023746
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov dword [rsp + 0x20], 0x1bd
mov r9, qword [0x140034308]
lea r8, str.wmain
lea rdx, str.__S_:_the_target__S:_u_appears_to_not_be_vulnerable_to_MS17_10..._n_n
mov rcx, rax
call fcn.140011483
lea rcx, [0x140034300]
call fcn.14001110e
mov eax, dword [0x14003432c]
jmp 0x140023758
lea rcx, [0x140034300]
call fcn.14001110e
mov eax, dword [0x14003432c]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140030710]
call fcn.1400114b0
mov rax, rdi
mov rcx, qword [rbp + 0x198]
xor rcx, rbp
call fcn.140011299
lea rsp, [rbp + 0x1a0]
pop rdi
pop rsi
pop rbp
ret