Function at 0x140002af0
Capabilities:
Create thread
Execute command
Terminate process

Disassembly:
push rbx
sub rsp, 0x460
mov rax, qword [0x1400c1fc0]
xor rax, rsp
mov qword [rsp + 0x450], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, recv
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ebx, eax
test eax, eax
je 0x140002b5f
lea rdx, [0x1400a7550]
call fcn.140003390
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x140002b6b
lea rdx, [0x1400a7570]
call fcn.140003390
lea rdx, [0x140003760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140001ee0
mov edx, 1
lea rcx, [fcn.140002ea0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test eax, eax
je 0x140002bb9
lea rdx, str.The_handler_is_installed._n
call fcn.140003390
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Press_any_key_to_execute..._n
jmp 0x140002bc0
lea rdx, str.Could_not_install_the_handler._n
call fcn.140003390
lea rcx, [0x1400a7204]
mov qword [rsp + 0x470], rdi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dl, 1
mov byte [rsp + 0x20], 0
movzx ecx, dl
xor r9d, r9d
xor r8d, r8d
call fcn.140081b70
mov edx, 0xffffe425
mov qword [rsp + 0x20], 0
lea r9, [0x1400a73b8]
lea r8, str.ADDA9A2248227D14BF763AB9A8EE35F0B87AA6F0721C46E82FBAA4E7F306F92B9EE3CC160C114C217F
lea rcx, str.93.177.76.143
call fcn.140081bc0
mov edi, recv
mov ecx, 0xfffffff5
test al, al
jne 0x140002c87
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400a7418]
call fcn.140001300
mov ecx, 0xfffffff5
mov ebx, 7
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor r8d, r8d
lea rcx, [0x1400a7430]
xor edx, edx
call qword [sym.imp.mfc140.dll_Ordinal_2264]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400a75e8]
call fcn.140001300
mov ecx, 0xfffffff5
mov ebx, 7
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x3e8
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x60]
call fcn.14007fa20
mov ecx, 0xfffffff5
test al, al
je 0x140002db3
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400a75f8]
call fcn.140001300
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x60]
call fcn.140003390
lea rdx, [0x140003760]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400021d0
mov ecx, 0xfffffff5
test al, al
je 0x140002d98
mov edi, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400a76f8]
call fcn.140001300
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x140002e4d
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400a7718]
jmp 0x140002d77
mov edi, 0xa
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x1400a7728]
call fcn.140001300
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop dword [rax]
call fcn.140001610
cmp eax, 1
jne 0x140002e01
call fcn.140001ac0
jmp 0x140002e0b
cmp eax, 2
jne 0x140002df0
call fcn.140001830
test eax, eax
je 0x140002df0
call fcn.14007fb30
call fcn.14007fe30
xor r9d, r9d
mov qword [rsp + 0x28], 0
lea r8, [0x1400020f0]
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp qword [0x1400d0100], 1
je 0x140002e7d
call fcn.140001ee0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdi, qword [rsp + 0x470]
xor eax, eax
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.14007c870
add rsp, 0x460
pop rbx
ret
lea rdx, [0x1400c3b98]
lea rcx, [rsp + 0x38]
call fcn.140002f60
mov rdx, rax
mov ecx, 0x2126
call fcn.14006b560
int3