Function at 0x14003cd00
Capabilities:
Capture network configuration via ipconfig
Execute command
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x350
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140071010]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
lea r8d, [r15 + 7]
lea rdx, str.Unknown
lea rcx, [rbp - 0x20]
call fcn.140001870
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], r15
lea r8d, [r15 + 7]
lea rdx, str.Unknown
lea rcx, [rbp]
call fcn.140001870
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], r15
lea r8d, [r15 + 7]
lea rdx, str.Unknown
lea rcx, [rbp + 0x20]
call fcn.140001870
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
mov ecx, 0x80
call fcn.14003e130
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x30], rax
lea rdx, [rbp + 0x90]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], r15
lea rax, [rbp + 0x90]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14003ce50
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x70]
call fcn.140001870
lea rax, [rbp + 0x70]
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae rdx, qword [rbp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14003cee2
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003cedd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003cedd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e16c
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.14003bf20
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14003cf05
mov rdx, qword [rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14003cf5c
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14003cf57
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d092
mov rcx, r8
call fcn.14003e16c
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], send
mov byte [rbx], 0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.14003bd30
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14003cf8e
mov rdx, qword [rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14003cfe5
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14003cfe0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d099
mov rcx, r8
call fcn.14003e16c
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], send
mov byte [rbx], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], r15
mov r8d, 0x22
lea rdx, str.Welcome_to_the_Daulaires_CLI_Tool_
lea rcx, [rbp + 0x70]
call fcn.140001870
lea rax, [rbp + 0x70]
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae rdx, qword [rbp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14003d0a5
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d0a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003d0a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e16c
mov ecx, 0x80
call fcn.14003e130
mov rsi, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi + 0x28], xmm0
movups xmmword [rsi + 0x38], xmm0
movups xmmword [rsi + 0x48], xmm0
movups xmmword [rsi + 0x58], xmm0
movups xmmword [rsi + 0x68], xmm0
mov qword [rsi + 0x78], rax
mov qword [rsi], r15
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
mov rcx, rsi
call fcn.14003c120
xor dil, dil
mov r12d, 1
lea r13, str.Eject
movss xmm7, dword [0x1400687f4]
movss xmm8, dword [0x1400687e8]
movss xmm9, dword [0x14006875c]
movss xmm10, dword [0x140068710]
movss xmm12, dword [0x140068714]
movss xmm13, dword [0x14006871c]
movss xmm11, dword [0x140068718]
movss xmm14, dword [0x140068720]
movss xmm15, dword [0x140068728]
nop word [rax + rax]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14003d1ab
nop dword [rax + rax]
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx edi, dil
cmp dword [rbp + 0x48], 0x12
cmove edi, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14003d170
test dil, dil
jne 0x14003db2b
cmp dword [rsi + 0x10], 0
je 0x14003d22a
cmp dword [rsi + 0x14], 0
je 0x14003d22a
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x14003d1d3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rsi + 0x20], r15
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, dword [rsi + 0x14]
mov r8d, dword [rsi + 0x10]
xor edx, edx
call qword [rax + 0x68]
mov qword [rsi + 0x10], r15
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
lea r9, [rbp - 0x38]
lea r8, [0x140068540]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [rsi]
mov rax, qword [rcx]
lea r9, [rsi + 0x20]
xor r8d, r8d
mov rdx, qword [rbp - 0x38]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140071cf8]
test rax, rax
je 0x14003d23f
mov rcx, qword [rax + 0x98]
jmp 0x14003d242
mov rcx, r15
cmp qword [rcx + 0x48], 0
jne 0x14003d24e
call fcn.140002fa0
call fcn.140003f80
call fcn.14000a870
mov rax, qword [0x140071cf8]
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mov qword [rax + 0x47c8], r15
mov qword [rax + 0x47d0], r15
mov dword [rax + 0x47bc], r12d
or dword [rax + 0x47b8], 3
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], r12d
call fcn.14003c670
xor edx, edx
mov r8d, 0x2422
lea rcx, str.Home
call fcn.14000f730
test al, al
je 0x14003da95
call fcn.140031520
test al, al
je 0x14003d2f7
mov r8b, 1
xor edx, edx
lea rcx, str.Main
call fcn.140031b00
test al, al
je 0x14003d2f2
xor r9d, r9d
call fcn.140032850
movzx edi, dil
test al, al
cmovne edi, r12d
call fcn.140032750
call fcn.1400317d0
mov rbx, qword [0x140071cf8]
mov rax, qword [rbx + 0x3ed8]
movss xmm6, dword [rax + 0x28]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r13
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm8
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rbp - 0x78]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002c1a0
movss xmm0, dword [rbp - 0x78]
addss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x78], xmm1
subss xmm6, xmm1
mulss xmm6, xmm10
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov qword [rbp - 0x70], 0
lea rdx, [rbp - 0x70]
mov rcx, r13
call fcn.14002fab0
test al, al
je 0x14003d3bf
xor r9d, r9d
lea r8, str.Hello_World_
lea rdx, str.You_clicked_Eject_button_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140014f20
mov rbx, qword [0x140071cf8]
mov rax, qword [rbx + 0x3ed8]
movss xmm6, dword [rax + 0x28]
mov qword [rsp + 0x30], r15
lea rax, str.Inject
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm8
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rbp - 0x68]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002c1a0
movss xmm0, dword [rbp - 0x68]
addss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x68], xmm1
addss xmm6, xmm1
mulss xmm6, xmm12
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov qword [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
lea rcx, str.Inject
call fcn.14002fab0
test al, al
je 0x14003d49d
xor r9d, r9d
lea r8, str.Hello_World_
lea rdx, str.You_clicked_me_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140014f20
mov rbx, qword [0x140071cf8]
mov qword [rsp + 0x30], r15
lea rax, str.nslookup
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm8
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rbp - 0x58]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002c1a0
movss xmm0, dword [rbp - 0x58]
addss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x58], xmm1
mov rax, qword [rbx + 0x3ed8]
movss xmm2, dword [rax + 0x28]
subss xmm2, xmm1
mulss xmm2, xmm13
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov qword [rbp - 0x50], 0
lea rdx, [rbp - 0x50]
lea rcx, str.nslookup
call fcn.14002fab0
test al, al
je 0x14003d615
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, socket
lea rdx, str.Launching_nslookup...
lea rcx, [rsp + 0x40]
call fcn.140001870
lea rax, [rsp + 0x40]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003d5fd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d5f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003db0f
call fcn.14003e16c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.c:windows_system32_nslookup.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rbx, qword [0x140071cf8]
mov qword [rsp + 0x30], r15
lea rax, [0x140068614]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm8
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002c1a0
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x70], xmm0
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x2c]
addss xmm1, dword [rsp + 0x74]
mulss xmm1, xmm11
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm1
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov qword [rbp - 0x48], 0
lea rdx, [rbp - 0x48]
lea rcx, [0x140068614]
call fcn.14002fab0
test al, al
je 0x14003d787
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Launching_arp...
lea rcx, [rsp + 0x40]
call fcn.140001870
lea rax, [rsp + 0x40]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003d76f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d76a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003db16
call fcn.14003e16c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.c:windows_system32_arp.exe__a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140014f20
mov rbx, qword [0x140071cf8]
mov rax, qword [rbx + 0x3ed8]
movss xmm6, dword [rax + 0x2c]
mov qword [rsp + 0x30], r15
lea rax, [0x140068650]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm8
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002c1a0
movss xmm0, dword [rsp + 0x78]
addss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x78], xmm0
subss xmm6, dword [rsp + 0x7c]
mulss xmm6, xmm14
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov qword [rbp - 0x40], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x140068650]
call fcn.14002fab0
test al, al
je 0x14003d903
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Launching_cmd...
lea rcx, [rsp + 0x40]
call fcn.140001870
lea rax, [rsp + 0x40]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003d8f3
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d8ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003db1d
call fcn.14003e16c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003b920
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140014f20
mov rbx, qword [0x140071cf8]
mov rax, qword [rbx + 0x3ed8]
movss xmm6, dword [rax + 0x2c]
mov qword [rsp + 0x30], r15
lea rax, str.ipconfig
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm8
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rbp - 0x80]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002c1a0
movss xmm0, dword [rbp - 0x80]
addss xmm0, xmm9
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x80], xmm0
addss xmm6, dword [rbp - 0x7c]
mulss xmm6, xmm15
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
mov qword [rsp + 0x60], 0
lea rdx, [rsp + 0x60]
lea rcx, str.ipconfig
call fcn.14002fab0
test al, al
je 0x14003da85
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, socket
lea rdx, str.Launching_ipconfig...
lea rcx, [rsp + 0x40]
call fcn.140001870
lea rax, [rsp + 0x40]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140034f50
lea rdx, [0x140035120]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003da6d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003da68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003db24
call fcn.14003e16c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.c:windows_system32ipconfig.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140014f20
call fcn.1400119c0
call fcn.14000c550
call fcn.14000c940
mov rcx, qword [rsi + 0x18]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rsi + 0x20]
mov edx, r12d
call qword [rax + 0x108]
movaps xmm0, xmmword [0x1400688b0]
movups xmmword [rbp + 0x70], xmm0
mov rcx, qword [rsi + 0x18]
mov rax, qword [rcx]
lea r8, [rbp + 0x70]
mov rdx, qword [rsi + 0x20]
call qword [rax + 0x190]
mov rax, qword [0x140071cf8]
mov rcx, qword [rax + 0x48c8]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r15
cmp byte [rax], r15b
cmovne rcx, rax
call fcn.140002530
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r12d
call qword [rax + 0x40]
jmp 0x14003d150
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_FreeConsole]
nop
mov r8, qword [rbp - 0x30]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.14003ded0
mov edx, 0x80
mov rcx, qword [rbp - 0x30]
call fcn.14003e16c
nop
lea rcx, [rbp - 0x20]
call fcn.140036cc0
mov al, 1
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.14003e110
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret