Function at 0x140011a60
Capabilities:
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x8688
call fcn.14006bba0
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x201a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x86a8]
mov rax, qword [0x14009f088]
xor rax, rbp
mov qword [rbp + 0x8658], rax
lea rcx, [0x1401a4225]
call fcn.14006b9e0
mov eax, 1
imul rax, rax, 0
mov byte [rbp + rax + 0x10], recv
mov eax, 0x4000
sub eax, dword [0x140074ba0]
cmp dword [rbp + 0x86c8], eax
jb 0x140011ae4
jmp 0x140011ef7
mov eax, 0x80
sub eax, dword [0x140074ba0]
cmp dword [rbp + 0x86c8], eax
jae 0x140011b20
mov eax, dword [0x140074ba0]
mov ecx, dword [rbp + 0x86c8]
add ecx, eax
mov eax, ecx
mov ecx, 1
imul rcx, rcx, 1
mov byte [rbp + rcx + 0x10], al
mov dword [rbp + 0x8024], 2
jmp 0x140011b71
mov eax, dword [0x140074ba0]
mov ecx, dword [rbp + 0x86c8]
add ecx, eax
mov eax, ecx
shr eax, 7
movzx eax, al
bts eax, 7
mov ecx, 1
imul rcx, rcx, 1
mov byte [rbp + rcx + 0x10], al
mov eax, dword [0x140074ba0]
mov ecx, dword [rbp + 0x86c8]
add ecx, eax
mov eax, ecx
and eax, 0x7f
mov ecx, 1
imul rcx, rcx, 2
mov byte [rbp + rcx + 0x10], al
mov dword [rbp + 0x8024], 3
mov rax, qword [rbp + 0x8690]
sar rax, 0x18
mov ecx, dword [rbp + 0x8024]
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8690]
sar rax, 0x10
mov ecx, dword [rbp + 0x8024]
inc ecx
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8690]
sar rax, 8
mov ecx, dword [rbp + 0x8024]
add ecx, 2
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov eax, dword [rbp + 0x8024]
add eax, 3
mov eax, eax
movzx ecx, byte [rbp + 0x8690]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x8024]
add eax, 4
mov eax, eax
movzx ecx, byte [rbp + 0x86a0]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x86a8]
shr eax, 8
mov ecx, dword [rbp + 0x8024]
add ecx, 5
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov eax, dword [rbp + 0x8024]
add eax, 6
mov eax, eax
movzx ecx, byte [rbp + 0x86a8]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x86b0]
sar eax, 8
mov ecx, dword [rbp + 0x8024]
add ecx, 7
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov eax, dword [rbp + 0x8024]
add eax, 8
mov eax, eax
movzx ecx, byte [rbp + 0x86b0]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x8024]
add eax, 9
mov eax, eax
movzx ecx, byte [rbp + 0x86b8]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x8024]
add eax, 0xa
mov eax, eax
mov rcx, qword [rbp + 0x8698]
movzx ecx, byte [rcx + 0x10]
mov byte [rbp + rax + 0x10], cl
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 0x38
mov ecx, dword [rbp + 0x8024]
add ecx, 0xb
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 0x30
mov ecx, dword [rbp + 0x8024]
add ecx, 0xc
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 0x28
mov ecx, dword [rbp + 0x8024]
add ecx, 0xd
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 0x20
mov ecx, dword [rbp + 0x8024]
add ecx, 0xe
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 0x18
mov ecx, dword [rbp + 0x8024]
add ecx, 0xf
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 0x10
mov ecx, dword [rbp + 0x8024]
add ecx, 0x10
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax]
shr rax, 8
mov ecx, dword [rbp + 0x8024]
add ecx, 0x11
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov eax, dword [rbp + 0x8024]
add eax, 0x12
mov eax, eax
mov rcx, qword [rbp + 0x8698]
movzx ecx, byte [rcx]
mov byte [rbp + rax + 0x10], cl
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 0x38
mov ecx, dword [rbp + 0x8024]
add ecx, 0x13
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 0x30
mov ecx, dword [rbp + 0x8024]
add ecx, 0x14
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 0x28
mov ecx, dword [rbp + 0x8024]
add ecx, 0x15
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 0x20
mov ecx, dword [rbp + 0x8024]
add ecx, 0x16
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 0x18
mov ecx, dword [rbp + 0x8024]
add ecx, 0x17
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 0x10
mov ecx, dword [rbp + 0x8024]
add ecx, 0x18
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov rax, qword [rbp + 0x8698]
mov rax, qword [rax + 8]
shr rax, 8
mov ecx, dword [rbp + 0x8024]
add ecx, 0x19
mov ecx, ecx
mov byte [rbp + rcx + 0x10], al
mov eax, dword [rbp + 0x8024]
add eax, 0x1a
mov eax, eax
mov rcx, qword [rbp + 0x8698]
movzx ecx, byte [rcx + 8]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x86c8]
mov ecx, dword [rbp + 0x8024]
lea rcx, [rbp + rcx + 0x2b]
mov r8d, eax
mov rdx, qword [rbp + 0x86c0]
call sub.VCRUNTIME140D.dll_memcpy
mov eax, dword [rbp + 0x8024]
mov ecx, dword [rbp + 0x86c8]
add ecx, eax
mov eax, ecx
add eax, dword [0x140074ba0]
mov eax, eax
mov r9, qword [rbp + 0x8688]
mov r8d, eax
mov edx, 1
lea rcx, [rbp + 0x10]
call qword [sym.imp.ucrtbased.dll_fwrite]
mov qword [rbp + 0x8048], rax
mov eax, dword [rbp + 0x8024]
mov ecx, dword [rbp + 0x86c8]
add ecx, eax
mov eax, ecx
add eax, dword [0x140074ba0]
mov eax, eax
cmp qword [rbp + 0x8048], rax
je 0x140011ed4
lea rcx, str.output
call qword [sym.imp.ucrtbased.dll_perror]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
mov rax, qword [rbp + 0x8680]
mov rax, qword [rax + 0x258]
add rax, qword [rbp + 0x8048]
mov rcx, qword [rbp + 0x8680]
mov qword [rcx + 0x258], rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140074dc0]
call fcn.14006b950
mov rcx, qword [rbp + 0x8658]
xor rcx, rbp
call fcn.14006bb70
lea rsp, [rbp + 0x8668]
pop rdi
pop rbp
ret