Function at 0x1400834f0
Capabilities:
Contain obfuscated stackstrings
Create thread
Execute command
Get disk information
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x280
mov qword [rbp + 0xe0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14029e908]
xor rax, rsp
mov qword [rbp + 0x170], rax
call fcn.140082ff0
movdqa xmm0, xmmword [0x140284170]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x68], 0x7c613f
mov byte [rsp + 0x6c], 1
lea rcx, [rsp + 0x58]
call fcn.140084e90
lea rcx, [rsp + 0x58]
call fcn.14007bb80
lea r14, [0x1405d1490]
mov rdx, r14
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14008aa80
call fcn.140080860
movdqa xmm0, xmmword [0x140284110]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x68], 0x7c613e
mov byte [rsp + 0x6c], 1
lea rcx, [rsp + 0x58]
call fcn.140084e90
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089420
xor r12d, r12d
mov esi, r12d
mov edi, r12d
lea r15, [0x1405d3de8]
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov ebx, eax
lea ecx, [rax - 0x61]
cmp cl, 0x19
jbe 0x1400835e7
lea ecx, [rax - 0x41]
cmp cl, 0x19
jbe 0x1400835e7
lea ecx, [rax - 0x30]
cmp cl, 9
ja 0x140083617
mov byte [rdi + r15], bl
inc esi
inc rdi
mov word [rsp + 0x50], 0x60
mov byte [rsp + 0x52], 1
lea rcx, [rsp + 0x50]
call fcn.140084b40
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089420
cmp bl, 8
jne 0x14008363c
cmp rdi, 1
jl 0x1400835c7
lea rdx, [0x14028388c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089420
dec esi
dec rdi
jmp 0x1400835c7
cmp bl, 0xd
jne 0x1400835c7
movsxd rax, esi
cmp rax, 0x20
jae 0x14008458b
mov byte [rax + r15], r12b
mov word [rsp + 0x50], 0x40
mov byte [rsp + 0x52], 1
lea rcx, [rsp + 0x50]
call fcn.140084b40
lea rcx, [rsp + 0x50]
call fcn.14007bb80
cmp esi, 1
jg 0x140083738
mov ecx, reloc.WS2_32.dll_inet_ntoa
call fcn.140081580
movdqa xmm0, xmmword [0x140284000]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x68], 0x2a2f283b
mov dword [rsp + 0x6c], 0x41042d31
mov dword [rsp + 0x70], 0x908162c
mov word [rsp + 0x74], 0x100
lea rcx, [rsp + 0x58]
call fcn.140084ab0
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089420
mov rcx, rax
lea rdx, [0x1400895f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x40], 0x3e392a3a
mov word [rsp + 0x44], 0x2b
mov byte [rsp + 0x46], 1
lea rcx, [rsp + 0x40]
call fcn.140084e60
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1401e65b0
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140080860
mov dword [rbp + 0xe8], r12d
mov dword [rsp + 0x40], 0x62637109
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.140084c10
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0xe8]
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
jne 0x1400837f9
movdqa xmm0, xmmword [0x140284400]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1402845e0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x140284030]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x140283fe0]
movdqa xmmword [rbp - 0x50], xmm1
mov byte [rbp - 0x40], 1
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.1400845a0
mov rdx, rax
mov r9d, 0x40010
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [0x1405d1610]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x1405d1610]
lea rcx, [rbp + 0xa0]
call fcn.140080ed0
mov rdx, rax
lea rcx, [0x1405d1510]
call fcn.1400863b0
nop
lea rcx, [rbp + 0xa0]
call fcn.140086350
nop
mov edx, dword [rbp + 0xe8]
lea rcx, [rsp + 0x58]
call fcn.140088ba0
nop
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0xa0]
call fcn.140080ed0
mov rdx, rax
lea rdi, [0x1405d17d0]
mov rcx, rdi
call fcn.1400863b0
nop
lea rcx, [rbp + 0xa0]
call fcn.140086350
nop
lea rcx, [rsp + 0x58]
call fcn.140086350
nop
lea rcx, [rbp + 0x130]
call fcn.14008a810
lea rcx, [rbp + 0x130]
call fcn.140086c50
nop
mov dword [rsp + 0x50], 0x28292e
mov byte [rsp + 0x54], 1
lea rcx, [rsp + 0x50]
call fcn.140084a80
lea rax, [rsp + 0x50]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400838d1
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x130]
call fcn.140086e70
mov dword [rsp + 0x58], 0x1b2a1b65
mov dword [rsp + 0x5c], 0x1b211b3f
mov dword [rsp + 0x60], 0x1b371b36
mov dword [rsp + 0x64], 0x1b211b7e
mov dword [rsp + 0x68], 0x1b231b3a
mov word [rsp + 0x6c], r12w
mov byte [rsp + 0x6e], 1
lea rcx, [rsp + 0x58]
call fcn.140084a50
lea r8, [rsp + 0x58]
lea rdx, [0x1405d17b0]
lea rcx, [rbp + 0xa0]
call fcn.140089770
nop
mov rdx, rax
mov rcx, qword [0x1405d3e90]
call fcn.14007da40
nop
lea rcx, [rbp + 0xa0]
call fcn.14007e290
nop
mov dword [rsp + 0x50], 0x100763f
lea rcx, [rsp + 0x50]
call fcn.140084c40
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140086400
nop
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r14, qword [0x1405d1490]
mov r8, rbx
inc r8
cmp byte [r14 + r8], 0
jne 0x140083996
mov rdx, r14
lea rcx, [rbp + 0xf0]
call fcn.140086fd0
mov dword [rsp + 0x40], 0x713b6c
mov byte [rsp + 0x44], 1
lea rcx, [rsp + 0x40]
call fcn.140084a80
lea rax, [rsp + 0x40]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400839d0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xf0]
call fcn.140086fd0
mov r8, rbx
nop
inc r8
cmp byte [r15 + r8], 0
jne 0x1400839f0
mov rdx, r15
lea rcx, [rbp + 0xf0]
call fcn.140086fd0
mov dword [rsp + 0x40], 0x71236c
mov byte [rsp + 0x44], 1
lea rcx, [rsp + 0x40]
call fcn.140084a80
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140083a30
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xf0]
call fcn.140086fd0
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x1405d17d0]
mov r8, rbx
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x140083a60
mov rdx, rdi
lea rcx, [rbp + 0xf0]
call fcn.140086fd0
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0x10
cmovae rdx, qword [rbp + 0xf0]
mov r8d, dword [rbp + 0x100]
mov rcx, qword [0x1405d3e90]
call fcn.14007d9b0
mov rdx, qword [rbp + 0x100]
lea rcx, [rbp + 0xa0]
call fcn.140088c40
nop
mov dword [rbp - 0x80], 0x1b241b09
mov dword [rbp - 0x7c], 0x1b391b22
mov dword [rbp - 0x78], 0x1b211b2b
mov dword [rbp - 0x74], 0x1b7c1b24
mov dword [rbp - 0x70], 0x1b361b1e
mov dword [rbp - 0x6c], 0x1b321b3a
mov dword [rbp - 0x68], 0x1b3f1b22
mov dword [rbp - 0x64], 0x1b791b62
mov word [rbp - 0x60], r12w
mov byte [rbp - 0x5e], 1
lea rcx, [rbp - 0x80]
call fcn.140084a20
lea rax, [rbp - 0x80]
mov r9, rbx
nop dword [rax + rax]
inc r9
cmp word [rax + r9*2], 0
jne 0x140083b10
lea r8, [rbp - 0x80]
xor edx, edx
lea rcx, [rbp + 0xa0]
call fcn.14008a980
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.1400860c0
nop
mov dword [rbp - 0x10], 0x1b411b47
mov dword [rbp - 0xc], 0x1b221b0f
mov dword [rbp - 8], 0x1b3b1b20
mov dword [rbp - 4], 0x1b3f1b35
mov dword [rbp], 0x1b7e1b26
mov dword [rbp + 4], 0x1b2c1b00
mov dword [rbp + 8], 0x1b321b26
mov dword [rbp + 0xc], 0x1b791b62
mov dword [rbp + 0x10], 0x1b2b1b3b
mov dword [rbp + 0x14], 0x1b311b2c
mov dword [rbp + 0x18], 0x1b3c1b37
mov dword [rbp + 0x1c], 0x1b151b01
mov dword [rbp + 0x20], 0x1b0c1b0b
mov dword [rbp + 0x24], 0x1b4a1b0a
mov dword [rbp + 0x28], 0x1b4a1b1e
mov dword [rbp + 0x2c], 0x1b1e1b1f
mov dword [rbp + 0x30], 0x1b461b1d
mov dword [rbp + 0x34], 0x1b021b0a
mov dword [rbp + 0x38], 0x1b021b1c
mov dword [rbp + 0x3c], 0x1b041b5d
mov dword [rbp + 0x40], 0x1b1f1b00
mov dword [rbp + 0x44], 0x1b1b1b11
mov dword [rbp + 0x48], 0x1b181b15
mov dword [rbp + 0x4c], 0x1b1c1b1c
mov dword [rbp + 0x50], 0x1b761b1e
mov dword [rbp + 0x54], 0x1b76
mov byte [rbp + 0x58], 1
lea rcx, [rbp - 0x10]
call fcn.1400849f0
lea rax, [rbp - 0x10]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140083c04
mov r8, rbx
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xc0]
call fcn.140087700
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400860c0
nop
mov rcx, qword [0x1405d3e90]
add rcx, 0x120
lea rdx, [rsp + 0x58]
call fcn.140086040
nop
lea rcx, [rsp + 0x58]
call fcn.14007e290
nop
lea rcx, [rbp + 0xc0]
call fcn.14007e290
nop
lea rcx, [rbp + 0xa0]
call fcn.14007e290
nop
mov dword [rsp + 0x58], 0x1b041b1a
mov dword [rsp + 0x5c], 0x1b191b1f
mov word [rsp + 0x60], r12w
mov byte [rsp + 0x62], 1
lea rcx, [rsp + 0x58]
call fcn.1400850d0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xa0]
call fcn.1400860f0
nop
xor r8d, r8d
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x1405d3e90]
call fcn.14007c690
test al, al
sete bl
lea rcx, [rbp + 0xa0]
call fcn.14007e290
nop
test bl, bl
jne 0x14008453b
mov rdx, qword [0x1405d3e90]
add rdx, 0x50
lea rcx, [rbp + 0xc0]
call fcn.140086120
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x150]
call fcn.14007dd10
nop
mov rax, qword [0x1405d3e90]
mov r9d, dword [rax + 0xb8]
mov r8, qword [rax + 0xb0]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x110]
call fcn.14007e180
nop
mov dword [rsp + 0x40], 0x1712686e
mov dword [rsp + 0x44], 0x756b68
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140084ef0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x140083df7
mov byte [0x1405d3e0a], bl
movdqa xmm0, xmmword [0x1402842e0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140284190]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x140284490]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1402842a0]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1402846c0]
movdqa xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0xeee9bbee
mov dword [rbp - 0x2c], 0xc0ceedfb
mov dword [rbp - 0x28], 0x858ac6cf
mov word [rbp - 0x24], 0x100
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.1400845d0
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x40], 0x136f6f14
mov dword [rsp + 0x44], 0x1006c6b
lea rcx, [rsp + 0x40]
call fcn.1400849c0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x140083eb9
mov byte [0x1405d3e0a], 0
movdqa xmm0, xmmword [0x1402842e0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140284190]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1402844b0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x140284360]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x140284680]
movdqa xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0xf2ebe8e9
mov dword [rbp - 0x2c], 0x8efbec
mov byte [rbp - 0x28], 1
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140084600
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x40], 0x680c6814
mov word [rsp + 0x44], reloc.WS2_32.dll_recv
mov byte [rsp + 0x46], 1
lea rcx, [rsp + 0x40]
call fcn.140084e60
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x140083fd9
mov byte [0x1405d3e0a], 0
movdqa xmm0, xmmword [0x1402842e0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140284190]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140284460]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140284230]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x140284150]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [str.OsW_wM_fE]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x140284370]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x140284450]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x140284690]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x140284410]
movdqa xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x90], 0x988bd4c5
mov dword [rbp + 0x94], 0xcc9f9d9e
mov dword [rbp + 0x98], 0x829c9680
mov dword [rbp + 0x9c], 0x100939f
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.140084630
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x40], 0x6812686e
mov word [rsp + 0x44], WSASetLastError
mov byte [rsp + 0x46], 1
lea rcx, [rsp + 0x40]
call fcn.140084e60
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x1400840f9
mov byte [0x1405d3e0a], 0
movdqa xmm0, xmmword [0x1402842e0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140284190]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140284460]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140284230]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x140284150]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [str.OsW_wM_fE]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x140284370]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x140284450]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x140284690]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x140284410]
movdqa xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x90], 0x988bd4c5
mov dword [rbp + 0x94], 0xcc9f9d9e
mov dword [rbp + 0x98], 0x829c9680
mov dword [rbp + 0x9c], 0x100939f
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.140084630
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x40], 0x686f6f6c
mov dword [rsp + 0x44], 0x756c10
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140084ef0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x1400841d9
mov byte [0x1405d3e0a], 0
movdqa xmm0, xmmword [0x1402842e0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140284190]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140284490]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140284210]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [str.6c4jNxK2__0]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x140284390]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x140284580]
movdqa xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], 0xd9ced4cd
mov word [rbp + 0x64], 0x90
mov byte [rbp + 0x66], 1
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.140084660
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x40], 0x6e686e6f
mov dword [rsp + 0x44], 0x720e6c6b
mov word [rsp + 0x48], 0x100
lea rcx, [rsp + 0x40]
call fcn.140084ae0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x1400842a1
mov byte [0x1405d3e0a], 0
movdqa xmm0, xmmword [0x1402842e0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140284190]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [str._b__t_9__Qxy_LW]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1402842b0]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x140284650]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x140283fc0]
movdqa xmmword [rbp - 0x30], xmm1
mov byte [rbp - 0x20], 1
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140084690
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x40], 0x13680b69
mov dword [rsp + 0x44], 0x736b6a
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140084ef0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.14008a900
test al, al
je 0x1400843f9
call fcn.140080860
mov byte [0x1405d3e0a], 1
call fcn.1400815f0
mov dword [rsp + 0x40], 0x1f0709
mov byte [rsp + 0x44], 1
lea rcx, [rsp + 0x40]
call fcn.140084a80
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xa
call fcn.140081580
movdqa xmm0, xmmword [0x1402842f0]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x68], 0x117c3513
mov dword [rsp + 0x6c], 0x18023d6e
mov dword [rsp + 0x70], 0x805244d
mov dword [rsp + 0x74], 0x1004903
lea rcx, [rsp + 0x58]
call fcn.140084990
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089420
mov rcx, rax
lea rdx, [0x1400895f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x40], 0x3e392a3a
mov word [rsp + 0x44], 0x2b
mov byte [rsp + 0x46], 1
lea rcx, [rsp + 0x40]
call fcn.140084e60
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rsp + 0x40], 0x1f0709
mov byte [rsp + 0x44], 1
lea rcx, [rsp + 0x40]
call fcn.140084a80
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140082c40
nop
lea rcx, [rbp + 0x110]
call fcn.140086350
nop
lea rcx, [rbp + 0x150]
call fcn.14007e290
nop
lea rcx, [rbp + 0xf0]
call fcn.140086350
nop
lea rcx, [rbp + 0x130]
call fcn.140086350
nop
jmp 0x140083706
mov byte [0x1405d3e0a], 0
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [0x14007e7c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, reloc.WS2_32.dll_inet_ntoa
call fcn.140081580
movdqa xmm0, xmmword [0x1402841a0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140284240]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x140284090]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1402846a0]
movdqa xmmword [rbp - 0x50], xmm1
mov dword [rbp - 0x40], 0xe5f8e4f8
mov dword [rbp - 0x3c], 0xe5f5e1a0
mov word [rbp - 0x38], 0xcf
mov byte [rbp - 0x36], 1
lea rcx, [rbp - 0x80]
call fcn.140083490
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140089420
mov rcx, rax
lea rdx, [0x1400895f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1402843c0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140284500]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140284540]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140284270]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x140284290]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x1402845a0]
movdqa xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0x82cbcc84
mov dword [rbp + 0x54], 0xe3d7cec6
mov dword [rbp + 0x58], 0xf1d1f7d0
mov dword [rbp + 0x5c], 0x100fde1
lea rcx, [0x1405d1790]
call fcn.140086320
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.1400834c0
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movdqa xmm0, xmmword [0x140284120]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x68], 0x38292a3f
mov dword [rsp + 0x6c], 0x4e2b2d
mov byte [rsp + 0x70], 1
lea rcx, [rsp + 0x58]
call fcn.140083460
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140086400
lea rdx, [0x1402995b0]
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.1401e686c
int3