Function at 0x140238000
Capabilities:
Create thread
Delete file
Move file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x250
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x130], 0xfffffffffffffffe
mov dword [0x1406f4cf0], 1
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14006b3c0
call fcn.140074130
call fcn.14006abf0
mov rbx, qword [0x1406f4d48]
cmp dword [rbx - 8], 1
jle 0x140238069
mov edx, dword [rbx - 0x10]
lea rcx, [0x1406f4d48]
call fcn.1400083e8
mov rbx, qword [0x1406f4d48]
mov rcx, qword [0x1406f4d60]
cmp dword [rcx - 8], 1
jle 0x14023808c
mov edx, dword [rcx - 0x10]
lea rcx, [0x1406f4d60]
call fcn.1400083e8
mov rcx, qword [0x1406f4d60]
mov rdx, rbx
call fcn.1400741d0
mov rax, qword [0x1406f4d48]
xor esi, esi
test rax, rax
jne 0x1402380a6
mov ecx, esi
jmp 0x1402380c4
movsxd rdx, dword [rax - 0xc]
mov rcx, rax
call fcn.1401567cc
mov rcx, rax
test eax, eax
js 0x140238df8
mov rax, qword [0x1406f4d48]
cmp ecx, dword [rax - 0xc]
jg 0x140238df8
mov dword [rax - 0x10], ecx
movsxd rcx, ecx
mov rax, qword [0x1406f4d48]
mov word [rax + rcx*2], si
mov rax, qword [0x1406f4d60]
test rax, rax
jne 0x1402380ee
mov ecx, esi
jmp 0x14023810c
movsxd rdx, dword [rax - 0xc]
mov rcx, rax
call fcn.1401567cc
mov rcx, rax
test eax, eax
js 0x140238ded
mov rax, qword [0x1406f4d60]
cmp ecx, dword [rax - 0xc]
jg 0x140238ded
mov dword [rax - 0x10], ecx
movsxd rdx, ecx
mov rax, qword [0x1406f4d60]
mov word [rax + rdx*2], si
mov rcx, qword [0x1406f4d48]
cmp dword [rcx - 8], 1
jle 0x140238149
mov edx, dword [rcx - 0x10]
lea rcx, [0x1406f4d48]
call fcn.1400083e8
mov rcx, qword [0x1406f4d48]
call fcn.140074810
mov rax, qword [0x1406f4d48]
test rax, rax
jne 0x14023815e
mov ecx, esi
jmp 0x14023817c
movsxd rdx, dword [rax - 0xc]
mov rcx, rax
call fcn.1401567cc
mov rcx, rax
test eax, eax
js 0x140238de2
mov rax, qword [0x1406f4d48]
cmp ecx, dword [rax - 0xc]
jg 0x140238de2
mov dword [rax - 0x10], ecx
movsxd rcx, ecx
mov rax, qword [0x1406f4d48]
mov word [rax + rcx*2], si
lea rax, [rbp + 0x270]
mov qword [rbp + 0x268], rax
call fcn.14000b6b4
mov rcx, rax
test rax, rax
jne 0x1402381bc
mov ecx, 0x80004005
call fcn.14000b9ec
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x270], rax
lea rdx, [0x1403f4cd8]
test rdx, 0xffffffffffff0000
jne 0x140238202
movzx ebx, dx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x14023820f
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.140008224
jmp 0x14023820f
lea rcx, [rbp + 0x270]
call fcn.140006cb8
nop
lea rcx, [rbp + 0x270]
call fcn.14006a0f0
test eax, eax
setne al
mov byte [0x1406f4cb4], al
test al, al
je 0x140238238
mov byte [reloc.WS2_32.dll_accept], 0
xor eax, eax
jmp 0x140238e03
lea rcx, [rbp + 0x278]
call fcn.140067c20
nop
call fcn.14006ba90
mov dword [0x1406f4cdc], eax
call fcn.140068700
mov byte [0x1406f4cb7], al
call fcn.140028f40
or r15, 0xffffffffffffffff
test al, al
je 0x140238dbd
movabs r14, 0xffffffffffffff0
mov rdx, qword [rbp + 0x278]
test rdx, rdx
jne 0x140238287
mov rdi, rsi
jmp 0x1402382df
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140238290
inc r8d
cmp r8d, 0x3fffffff
jle 0x1402382ab
mov rdi, rsi
jmp 0x1402382df
movsxd rax, r8d
add rax, rax
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1402382bd
mov rcx, r14
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400ec150
sub rsp, rcx
lea rcx, [rsp + 0x30]
mov r9d, 3
call fcn.140070db0
mov rdi, rax
lea rcx, [rbp + 0x138]
call fcn.14002e5b0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1402382f8
mov rbx, qword [rax]
test rbx, rbx
jne 0x140238302
mov rax, rsi
jmp 0x140238354
mov rdx, r15
inc rdx
cmp byte [rbx + rdx], 0
jne 0x140238305
inc edx
cmp edx, 0x3fffffff
jle 0x14023831d
mov rax, rsi
jmp 0x140238354
movsxd rax, edx
add rax, rax
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x14023832f
mov rcx, r14
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400ec150
sub rsp, rcx
lea rcx, [rsp + 0x30]
mov r9d, 3
mov r8d, edx
mov rdx, rbx
call fcn.140070db0
mov rdx, rdi
mov rcx, rax
call fcn.140028e30
nop
mov rax, qword [rbp + 0x150]
cmp rax, 0x10
jb 0x1402383bc
inc rax
mov rcx, qword [rbp + 0x138]
cmp rax, 0x1000
jb 0x1402383b7
test cl, 0x1f
je 0x14023838a
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140238399
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x1402383a8
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x1402383b4
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
call fcn.140068c60
test al, al
je 0x14023845f
mov edx, Ordinal_46
lea rcx, [rbp + 0x178]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1402383e5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140005e54
nop
lea r8, [rbp + 0x278]
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.14000e0f4
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14023842b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x178]
call fcn.14000c7e0
mov rcx, qword [rbp + 0x28]
add rcx, 0xffffffffffffffe8
call fcn.140007924
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rcx, [rbp + 0x20]
call fcn.140075b30
nop
mov rdx, qword [rbp + 0x28]
jmp 0x1402384fd
call fcn.140068ee0
test al, al
je 0x140238517
mov edx, Ordinal_46
lea rcx, [rbp + 0x198]
call fcn.1400160a0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140238488
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.140005e54
nop
lea r8, [rbp + 0x278]
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.14000e0f4
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1402384ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x198]
call fcn.14000c7e0
mov rcx, qword [rbp + 0x38]
add rcx, 0xffffffffffffffe8
call fcn.140007924
add rax, 0x18
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0x30]
call fcn.140075b30
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140238517
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
xor r14b, r14b
lea rcx, [rbp + 0xa0]
call fcn.140075c30
nop
mov rbx, qword [rax]
call fcn.14000b6b4
mov rcx, rax
test rax, rax
jne 0x140238542
mov ecx, 0x80004005
call fcn.14000b9ec
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x268], rax
test rbx, rbx
je 0x140238586
test rbx, 0xffffffffffff0000
jne 0x140238586
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000b0cc
test rax, rax
je 0x140238596
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.1400080f4
jmp 0x140238596
mov rdx, rbx
lea rcx, [rbp + 0x268]
call fcn.140070930
nop
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1402385b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.140008548
mov qword [rbp + 0x10], rax
mov edx, 0x79
lea rcx, [rbp + 0x158]
call fcn.1400160a0
mov rbx, rax
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x80], rsi
mov byte [rbp + 0x70], 0
mov r8d, 1
lea rdx, [0x1402470a0]
lea rcx, [rbp + 0x70]
call fcn.14000d058
nop
mov r8, rbx
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0xd0]
call fcn.14001cd50
nop
lea r8, str._.exe
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.140053510
mov rdi, rax
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x60], rsi
mov byte [rbp + 0x50], 0
mov rbx, qword [rbp + 0x268]
cmp byte [rbx], 0
jne 0x140238660
mov r8, rsi
jmp 0x14023866d
mov r8, r15
inc r8
cmp byte [rbx + r8], 0
jne 0x140238663
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.14000d058
nop
lea r8, [rbp + 0x10]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.14006b090
nop
mov rax, qword [rbp + 0x68]
cmp rax, 0x10
jb 0x1402386e1
inc rax
mov rcx, qword [rbp + 0x50]
cmp rax, 0x1000
jb 0x1402386dc
test cl, 0x1f
je 0x1402386af
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1402386be
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x1402386cd
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x1402386d9
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x60], rsi
mov byte [rbp + 0x50], 0
mov rax, qword [rbp + 0xc8]
cmp rax, 0x10
jb 0x14023874d
inc rax
mov rcx, qword [rbp + 0xb0]
cmp rax, 0x1000
jb 0x140238748
test cl, 0x1f
je 0x14023871b
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14023872a
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x140238739
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x140238745
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0xc8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xc0], rsi
mov byte [rbp + 0xb0], 0
mov rax, qword [rbp + 0xe8]
cmp rax, 0x10
jb 0x1402387c2
inc rax
mov rcx, qword [rbp + 0xd0]
cmp rax, 0x1000
jb 0x1402387bd
test cl, 0x1f
je 0x140238790
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14023879f
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x1402387ae
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x1402387ba
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xe0], rsi
mov byte [rbp + 0xd0], 0
mov rax, qword [rbp + 0x88]
cmp rax, 0x10
jb 0x140238834
inc rax
mov rcx, qword [rbp + 0x70]
cmp rax, 0x1000
jb 0x14023882f
test cl, 0x1f
je 0x140238802
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140238811
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x140238820
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x14023882c
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x80], rsi
mov byte [rbp + 0x70], 0
mov rax, qword [rbp + 0x170]
cmp rax, 0x10
jb 0x1402388a6
inc rax
mov rcx, qword [rbp + 0x158]
cmp rax, 0x1000
jb 0x1402388a1
test cl, 0x1f
je 0x140238874
call fcn.140128ff4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140238883
call fcn.140128ff4
int3
sub rcx, rax
cmp rcx, 8
jae 0x140238892
call fcn.140128ff4
int3
cmp rcx, 0x27
jbe 0x14023889e
call fcn.140128ff4
int3
mov rcx, rax
call fcn.1400eb7f4
mov rax, qword [rbp + 0x10]
mov rdi, qword [rax]
cmp rdi, rax
je 0x140238988
lea r12, [rbx - 0x18]
nop word [rax + rax]
lea r14, [rdi + 0x10]
mov rcx, r12
call fcn.140007924
lea rbx, [rax + 0x18]
mov qword [rbp + 0x40], rbx
cmp qword [r14 + 0x18], 0x10
jb 0x1402388de
mov r14, qword [r14]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x140238904
mov edx, 0x800
lea rcx, [rbp + 0x40]
call fcn.14000799c
mov rbx, qword [rbp + 0x40]
mov rdx, r14
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140156670
test eax, eax
js 0x14023897d
cmp eax, dword [rbx - 0xc]
jg 0x14023897d
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x14023894a
xor edx, edx
lea r8d, [rax + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov r14b, 1
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140238967
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, qword [rdi]
cmp rdi, qword [rbp + 0x10]
jne 0x1402388c0
mov rbx, qword [rbp + 0x268]
jmp 0x140238988
mov ecx, 0x80070057
call fcn.14000b9ec
nop
mov qword [rbp], rsi
mov qword [rbp + 8], rsi
xor r8d, r8d
xor edx, edx
lea rcx, [rbp]
call fcn.140008548
mov qword [rbp], rax
mov edx, 0xef
lea rcx, [rbp + 0x1f8]
call fcn.1400160a0
mov rdi, rax
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x120], rsi
mov byte [rbp + 0x110], 0
mov r8d, 1
lea rdx, [0x1402470a0]
lea rcx, [rbp + 0x110]
call fcn.14000d058
nop
mov r8, rdi
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x1d8]
call fcn.14001cd50
nop
lea r8, str._.dll
mov rdx, rax
lea rcx, [rbp + reloc.OLEAUT32.dll_VarUI8FromDec]
call fcn.140053510
mov rdi, rax
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x100], rsi
mov byte [rbp + 0xf0], 0
cmp byte [rbx], 0
jne 0x140238a3c
mov r8, rsi
jmp 0x140238a4a
mov r8, r15
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140238a40
mov rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.14000d058
nop
lea r8, [rbp]
mov rdx, rdi
lea rcx, [rbp + 0xf0]
call fcn.14006b090
nop
lea rcx, [rbp + 0xf0]
call fcn.14000c7e0
nop
lea rcx, [rbp + reloc.OLEAUT32.dll_VarUI8FromDec]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x1d8]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x110]
call fcn.14000c7e0
nop
lea rcx, [rbp + 0x1f8]
call fcn.14000c7e0
mov rax, qword [rbp]
mov rdi, qword [rax]
cmp rdi, rax
je 0x140238b8a
lea r12, [rbx - 0x18]
lea r14, [rdi + 0x10]
mov rcx, r12
call fcn.140007924
lea rbx, [rax + 0x18]
mov qword [rbp + 0x48], rbx
cmp qword [r14 + 0x18], 0x10
jb 0x140238ae0
mov r14, qword [r14]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x800
or eax, ecx
jge 0x140238b06
mov edx, 0x800
lea rcx, [rbp + 0x48]
call fcn.14000799c
mov rbx, qword [rbp + 0x48]
mov rdx, r14
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140156670
test eax, eax
js 0x140238b7f
cmp eax, dword [rbx - 0xc]
jg 0x140238b7f
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x140238b4c
xor edx, edx
lea r8d, [rax + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov r14b, 1
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140238b69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, qword [rdi]
cmp rdi, qword [rbp]
jne 0x140238ac2
mov rbx, qword [rbp + 0x268]
jmp 0x140238b8a
mov ecx, 0x80070057
call fcn.14000b9ec
nop
cmp dword [0x1406f4cdc], 0
jbe 0x140238bb5
test r14b, r14b
je 0x140238bb5
xor ecx, ecx
call fcn.14006bb80
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1406f4cdc]
call fcn.14006bb80
mov dword [rbp + 0x260], esi
mov edi, esi
nop dword [rax]
cmp qword [0x1406f4cf8], 0
jne 0x140238c0c
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, section..code
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1406f4cf8], rax
test rax, rax
jne 0x140238c0c
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140238bc0
mov dword [rbp + 0x260], esi
mov edi, esi
cmp qword [0x1406f4d00], 0
jne 0x140238c60
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, section..code1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1406f4d00], rax
test rax, rax
jne 0x140238c60
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140238c14
mov dword [rbp + 0x260], esi
mov edi, esi
nop dword [rax + rax]
cmp qword [0x1406f4d10], 0
jne 0x140238cbc
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140242350]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1406f4d10], rax
test rax, rax
jne 0x140238cbc
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140238c70
mov dword [rbp + 0x260], esi
mov edi, esi
cmp qword [0x1406f4d18], 0
jne 0x140238d10
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140242380]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1406f4d18], rax
test rax, rax
jne 0x140238d10
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140238cc4
mov dword [rbp + 0x260], esi
mov edi, esi
nop dword [rax + rax]
cmp qword [0x1406f4d20], 0
jne 0x140238d6c
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, section..code7
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1406f4d20], rax
test rax, rax
jne 0x140238d6c
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140238d20
mov esi, 1
lea rcx, [rbp]
call fcn.140007610
mov edx, esi
lea r8d, [rsi + 0x2f]
mov rcx, qword [rbp]
call fcn.14000ce04
nop
lea rcx, [rbp + 0x10]
call fcn.140007610
mov edx, esi
lea r8d, [rsi + 0x2f]
mov rcx, qword [rbp + 0x10]
call fcn.14000ce04
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, esi
jg 0x140238dbd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x278]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x140238dde
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
mov eax, esi
jmp 0x140238e03
mov ecx, 0x80070057
call fcn.14000b9ec
int3
mov ecx, 0x80070057
call fcn.14000b9ec
int3
mov ecx, 0x80070057
call fcn.14000b9ec
int3
lea rsp, [rbp + 0x220]
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret