Function at 0x140018e30
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x70
lea rdi, [rsp + 0x30]
mov ecx, reloc.WS2_32.dll_recv
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x80]
mov rax, qword [0x140575740]
xor rax, rsp
mov qword [rsp + 0x60], rax
cmp qword [0x140576740], 0
je 0x140018eca
mov dword [rsp + 0x44], 0
jmp 0x140018e85
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
mov eax, dword [0x140576720]
cmp dword [rsp + 0x44], eax
jge 0x140018eae
movsxd rax, dword [rsp + 0x44]
mov edx, 1
mov rcx, qword [0x140576740]
mov rcx, qword [rcx + rax*8]
call fcn.1403ba8b0
nop
jmp 0x140018e7b
mov edx, 1
mov rcx, qword [0x140576740]
call fcn.1403ba8b0
mov qword [0x140576740], 0
mov eax, dword [0x1404dc880]
mov dword [0x1404dc87c], eax
mov eax, dword [0x1405766f8]
imul eax, dword [0x1404dc87c]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov dword [0x140576710], eax
mov eax, dword [0x1405766fc]
imul eax, dword [0x1404dc87c]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov dword [0x140576714], eax
mov eax, dword [0x140576710]
cdq
idiv dword [0x1405766dc]
mov dword [0x14057671c], eax
mov eax, dword [0x140576714]
cdq
idiv dword [0x1405766e0]
mov dword [0x140576720], eax
mov eax, dword [0x140576710]
cdq
idiv dword [0x1405766dc]
mov eax, edx
test eax, eax
je 0x140018f5b
mov eax, dword [0x14057671c]
inc eax
mov dword [0x14057671c], eax
mov eax, dword [0x140576714]
cdq
idiv dword [0x1405766e0]
mov eax, edx
test eax, eax
je 0x140018f7c
mov eax, dword [0x140576720]
inc eax
mov dword [0x140576720], eax
mov cx, 7
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 0
mov word [rsp + rcx + 0x38], ax
mov cx, 8
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 1
mov word [rsp + rcx + 0x38], ax
movzx ecx, word [0x140576710]
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 2
mov word [rsp + rcx + 0x38], ax
movzx ecx, word [0x140576714]
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 3
mov word [rsp + rcx + 0x38], ax
mov r8, qword [rsp + 0x88]
mov edx, 8
lea rcx, [rsp + 0x38]
call qword [rsp + 0x80]
movsxd rax, dword [0x140576720]
shl rax, 3
mov r9d, 0x2cb
lea r8, [0x1404dcc20]
mov edx, 1
mov rcx, rax
call fcn.1403ba980
mov qword [0x140576740], rax
cmp qword [0x140576740], 0
jne 0x140019075
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9d, 0xfe
mov r8d, 0x2cb
lea rdx, [0x1404dcc70]
xor ecx, ecx
call fcn.14014da80
mov r8d, 0x2cb
lea rdx, [0x1404dccc0]
lea rcx, [0x1404dcd08]
call fcn.140015e70
mov ecx, 0xfe
call fcn.14038e600
nop
mov dword [rsp + 0x44], 0
jmp 0x140019089
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
mov eax, dword [0x140576720]
cmp dword [rsp + 0x44], eax
jge 0x14001912d
movsxd rax, dword [0x14057671c]
shl rax, 3
mov r9d, 0x2cd
lea r8, [0x1404dcd30]
mov edx, 1
mov rcx, rax
call fcn.1403ba980
mov qword [rsp + 0x58], rax
movsxd rax, dword [rsp + 0x44]
mov rcx, qword [0x140576740]
mov rdx, qword [rsp + 0x58]
mov qword [rcx + rax*8], rdx
cmp qword [rsp + 0x58], 0
jne 0x140019128
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9d, 0xfe
mov r8d, 0x2cd
lea rdx, [0x1404dcd80]
xor ecx, ecx
call fcn.14014da80
mov r8d, 0x2cd
lea rdx, str.C:UsersyfjvyDownloadsMeshAgent_mastermeshcoreKVMWindowskvm.c
lea rcx, [0x1404dce18]
call fcn.140015e70
mov ecx, 0xfe
call fcn.14038e600
nop
jmp 0x14001907f
mov dword [rsp + 0x44], 0
jmp 0x140019141
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
mov eax, dword [0x140576720]
cmp dword [rsp + 0x44], eax
jge 0x1400191a7
mov dword [rsp + 0x48], 0
jmp 0x140019161
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov eax, dword [0x14057671c]
cmp dword [rsp + 0x48], eax
jge 0x1400191a5
movsxd rax, dword [rsp + 0x44]
movsxd rcx, dword [rsp + 0x48]
mov rdx, qword [0x140576740]
mov rax, qword [rdx + rax*8]
mov dword [rax + rcx*8], 0xff
movsxd rax, dword [rsp + 0x44]
movsxd rcx, dword [rsp + 0x48]
mov rdx, qword [0x140576740]
mov rax, qword [rdx + rax*8]
mov byte [rax + rcx*8 + 4], 0
jmp 0x140019157
jmp 0x140019137
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_accept
call fcn.14037c300
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14037c650
add rsp, 0x70
pop rdi
ret