Function at 0x14000bfe0
Capabilities:
Terminate process

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov esi, edx
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetACP]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetOEMCP]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp - 0x29]
mov r15d, eax
call fcn.14000be90
lea rcx, [0x1400273b0]
mov dword [rbp + 0x77], 0x20
call fcn.1400133c0
lea rcx, str.sha256
call fcn.1400135e0
lea rcx, [rbp + 0x77]
mov dword [0x140033988], eax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x49]
mov ecx, eax
lea rdx, [rbp - 0x29]
mov r8d, reloc.WS2_32.dll_recv
call fcn.14000e140
test eax, eax
jne 0x14000c449
mov eax, dword [rbp - 0x49]
lea rcx, [0x140022b60]
movups xmm0, xmmword [str.abcdefghijklmnop]
mov dword [0x140036cc0], eax
mov eax, dword [rbp - 0x45]
mov dword [0x140036cc4], eax
mov eax, dword [rbp - 0x41]
mov dword [0x140036cc8], eax
mov eax, dword [rbp - 0x3d]
mov dword [0x140036ccc], eax
mov eax, dword [rbp - 0x39]
mov dword [0x140034ad8], eax
mov eax, dword [rbp - 0x35]
mov dword [0x140034adc], eax
mov eax, dword [rbp - 0x31]
mov dword [0x140034ae0], eax
mov eax, dword [rbp - 0x2d]
mov dword [0x140034ae4], eax
movups xmmword [0x140034ac8], xmm0
call fcn.1400134b0
lea rcx, [0x140029794]
call fcn.14000f620
xor r8d, r8d
mov dword [0x140033990], eax
lea r9, [0x140035c20]
lea rcx, [0x140036cc0]
lea edx, [r8 + 0x10]
call fcn.14000e270
test eax, eax
jne 0x14000c449
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], r12
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, eax
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov edx, 4
lea rcx, [rbp + 0x77]
call fcn.14000be90
mov eax, dword [rbp + 0x77]
and eax, 0x7ffffffe
mov dword [0x14003396c], eax
call fcn.14000a7b0
mov ecx, reloc.WS2_32.dll_ntohl
test eax, eax
mov r12d, 6
cmovne r12d, ecx
mov ecx, dword [reloc.WS2_32.dll_accept]
call qword [sym.imp.WS2_32.dll_htonl]
xor ecx, ecx
mov ebx, eax
call qword [sym.imp.WS2_32.dll_htonl]
inc dword [reloc.WS2_32.dll_accept]
mov dword [rdi], ebx
mov ebx, 8
mov dword [rbp - 0x41], ebx
mov dword [rdi + 4], eax
mov qword [rbp - 0x49], rdi
mov dword [rbp - 0x3d], esi
cmp esi, 0x18
jl 0x14000c1a5
movups xmm0, xmmword [rbp - 0x29]
mov ebx, 0x18
mov dword [rbp - 0x41], ebx
movups xmmword [rdi + 8], xmm0
lea ecx, [rbx - 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
lea ecx, [rbx + 2]
cmp ecx, esi
jg 0x14000c1c5
movsxd rax, ebx
mov ebx, ecx
mov dword [rbp - 0x41], ecx
add ecx, 0xfffffff8
mov word [rax + rdi], r14w
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
lea ecx, [rbx + 2]
cmp ecx, esi
jg 0x14000c1e5
movsxd rax, ebx
mov ebx, ecx
mov dword [rbp - 0x41], ecx
add ecx, 0xfffffff8
mov word [rax + rdi], r15w
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
mov ecx, dword [0x14003396c]
call qword [sym.imp.WS2_32.dll_htonl]
lea edx, [rbx + 4]
cmp edx, esi
jg 0x14000c20f
movsxd rcx, ebx
mov ebx, edx
mov dword [rbp - 0x41], edx
mov dword [rcx + rdi], eax
lea ecx, [rdx - 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call qword [sym.imp.WS2_32.dll_htonl]
lea edx, [rbx + 4]
cmp edx, esi
jg 0x14000c23b
movsxd rcx, ebx
mov ebx, edx
mov dword [rbp - 0x41], edx
mov dword [rcx + rdi], eax
lea ecx, [rdx - 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htons]
lea edx, [rbx + 2]
cmp edx, esi
jg 0x14000c262
movsxd rcx, ebx
mov ebx, edx
mov dword [rbp - 0x41], edx
mov word [rcx + rdi], ax
lea ecx, [rdx - 8]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
lea ecx, [rbx + 1]
cmp ecx, esi
jg 0x14000c27f
movsxd rax, ebx
mov dword [rbp - 0x41], ecx
add ecx, 0xfffffff8
mov byte [rax + rdi], r12b
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rdi + 4], eax
lea rcx, [rbp - 0x49]
call fcn.14000a850
mov ecx, 0xbeef
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rbp - 0x49]
xor edx, edx
mov r8d, 0x400
mov dword [rcx], eax
lea rcx, [0x140037a20]
call fcn.140021acb
movsxd r14, dword [rbp - 0x41]
lea rcx, [0x140037a20]
mov r8, r14
mov dword [0x140037a14], 0x80
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [0x140036d20]
mov r12, qword [rsp + 0x118]
cmp word [rax + 0x70], 3
jne 0x14000c2e9
mov rbx, qword [rax + 0x78]
jmp 0x14000c2eb
xor ebx, ebx
cmp word [rax + 0x1f0], 1
jne 0x14000c2fe
movzx ecx, word [rax + 0x1f8]
jmp 0x14000c300
xor ecx, ecx
mov word [0x140033994], cx
lea rcx, [0x1400270c0]
call fcn.1400131d0
lea rcx, str.sprng
call fcn.140010ba0
mov r15d, eax
lea rdx, [0x14002f0e0]
lea r8, str.LibTomMath
mov r9d, 3
nop word [rax + rax]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
lea r8, [r8 + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [r8 - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [r8 - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [r8 - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [r8 - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [r8 - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [r8 - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmmword [rdx - 0x10], xmm1
sub r9, 1
jne 0x14000c340
movups xmm0, xmmword [r8]
mov rcx, rbx
movups xmm1, xmmword [r8 + 0x10]
lea r8, [rbp - 0x19]
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
mov edx, 0xa2
call fcn.140012a60
mov rbx, qword [rsp + 0x110]
test eax, eax
jne 0x14000c43d
lea rax, [rbp - 0x19]
mov edx, r14d
mov qword [rsp + 0x50], rax
lea r9, [0x140037a14]
mov eax, dword [0x140033988]
lea r8, [0x140037a20]
mov dword [rsp + 0x48], 1
mov rcx, rdi
mov dword [rsp + 0x40], eax
lea rax, str.lparam
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 6
mov qword [rsp + 0x20], rax
call fcn.14000df50
test eax, eax
jne 0x14000c43d
mov r8, r14
xor edx, edx
mov rcx, rdi
add rsp, 0xe0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
jmp fcn.140021acb
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3