Function at 0x140006600
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x30
cmp dword [rcx + 0x230], 0
mov ebp, r8d
mov r12, rdx
mov rdi, rcx
je 0x14000665c
mov ebx, 0x410
lea rcx, [0x140057dc0]
lea rdx, [0x140058e00]
mov r8d, ebx
call fcn.140020ac0
lea rcx, [0x1400581d0]
lea rdx, [0x140059210]
mov r8d, ebx
call fcn.140020ac0
mov r11d, dword [0x140054664]
jmp 0x1400066a1
cmp dword [0x140057db8], 0
jne 0x140006a40
mov ebx, 0x410
lea rcx, [0x140057dc0]
lea rdx, [0x1400585e0]
mov r8d, ebx
call fcn.140020ac0
lea rcx, [0x1400581d0]
lea rdx, [0x1400589f0]
mov r8d, ebx
call fcn.140020ac0
mov r11d, dword [0x140054660]
mov dword [0x14005465c], r11d
movzx ecx, byte [r12]
cmp ecx, 7
jg 0x140006961
je 0x14000694e
test ecx, ecx
je 0x14000692e
dec ecx
je 0x14000681c
dec ecx
je 0x14000678e
sub ecx, 2
je 0x140006716
dec ecx
je 0x1400066ea
dec ecx
jne 0x140006a40
jmp 0x140006941
mov rcx, rdi
call fcn.1400064f8
mov rcx, qword [0x140057db0]
lea r9, [0x14004142c]
lea r8, [0x1400414e8]
mov edx, 2
call fcn.140006ad8
jmp 0x140006a40
mov r13d, 0x20470
mov ecx, r13d
call fcn.140020e60
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.140021110
lea r11d, [rbp - 1]
mov ecx, r11d
mov ebx, r11d
call fcn.140021420
lea rdx, [r12 + 1]
mov r8d, ebx
mov rcx, rax
mov rdi, rax
call fcn.140020ac0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140020e60
lea ecx, [rbp - 1]
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov dword [rsi + 0x404], ecx
mov rcx, qword [rax]
mov r9, rax
mov dword [rcx], 2
and qword [rsp + 0x28], 0
lea r8, [0x140005004]
jmp 0x140006a29
mov r13d, 0x20470
mov ecx, r13d
call fcn.140020e60
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rbp, rax
call fcn.140021110
lea rdx, [r12 + 1]
mov r8d, r13d
mov rcx, rbp
call fcn.140020ac0
movsxd rsi, dword [r12 + 0x20471]
mov rcx, rsi
call fcn.140021420
lea rdx, [r12 + 0x20475]
mov r8, rsi
mov rcx, rax
mov rdi, rax
call fcn.140020ac0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140020e60
lea rdx, [rsp + 0x78]
lea rcx, [0x140059620]
mov qword [rax], rbp
mov qword [rax + 8], rdi
mov qword [rsp + 0x78], rax
mov rax, qword [rax]
mov dword [rax + 0x404], esi
call fcn.14000647c
mov r9, qword [rsp + 0x78]
jmp 0x14000677c
mov r13d, 0x20470
mov ecx, r13d
call fcn.140020e60
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.140021110
lea rdx, [r12 + 1]
mov r8d, r13d
mov rcx, rsi
call fcn.140020ac0
mov rbx, qword [0x140059620]
mov r9, qword [0x140059628]
jmp 0x140006887
mov rax, qword [rbx]
lea r8, [rsi + 4]
mov rcx, qword [rax]
add rcx, 4
sub r8, rcx
movzx eax, word [rcx]
movzx edx, word [rcx + r8]
sub eax, edx
jne 0x14000687f
add rcx, 2
test edx, edx
jne 0x14000686b
test eax, eax
je 0x1400068db
add rbx, 8
cmp rbx, r9
jne 0x14000685a
mov ebp, 0x20471
mov ecx, ebp
call fcn.140021420
mov r8, r13
mov rdx, rsi
mov rbx, rax
mov byte [rax], 5
mov eax, 1
lea rcx, [rbx + 1]
mov dword [rsi + 0x400], eax
call fcn.140020ac0
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call fcn.140006acc
mov rcx, rsi
call fcn.140020df4
mov rcx, rbx
call fcn.140020df4
jmp 0x140006a40
mov rax, qword [rbx]
lea r8, [rsi + 0x202]
mov edx, 0xff
mov rcx, qword [rax]
add rcx, 0x202
call fcn.140021428
mov r9, qword [rbx]
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
lea r8, [0x140005004]
xor edx, edx
xor ecx, ecx
call fcn.14002247c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rsi, rsi
je 0x140006a40
mov rcx, rsi
jmp 0x1400068d1
mov eax, 1
mov rcx, rdi
xchg dword [rdi + 0x234], eax
call fcn.1400064f8
mov rcx, rdi
call fcn.140005254
jmp 0x140006a40
mov r8d, ebp
mov rdx, r12
mov rcx, rdi
call fcn.140006194
jmp 0x140006a40
sub ecx, 8
je 0x140006a0e
dec ecx
je 0x1400069cb
dec ecx
je 0x14000699a
sub ecx, 0x5a
je 0x14000698a
dec ecx
jne 0x140006a40
and dword [0x140057db8], ecx
jmp 0x140006a40
mov eax, 1
mov dword [0x140057db8], eax
jmp 0x140006a40
movzx ecx, byte [r12 + 1]
test ecx, ecx
je 0x1400069b5
dec ecx
jne 0x140006a40
lea rdx, str.BEIZHU
jmp 0x1400069bc
lea rdx, [0x140041518]
lea r8, [r12 + 2]
mov rcx, rdi
call fcn.14000560c
jmp 0x140006a40
mov edx, dword [r12 + 1]
mov rcx, rdi
call fcn.140005364
mov rcx, qword [0x140057db0]
mov edx, 2
test eax, eax
je 0x1400069fb
lea r9, [0x14004144c]
lea r8, [0x1400414f8]
jmp 0x14000670c
lea r9, [0x1400414a4]
lea r8, [0x140041508]
jmp 0x14000670c
and dword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
lea r9, [r12 + 1]
mov qword [rsp + 0x28], rax
lea r8, [0x140005dc4]
and dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call fcn.14002247c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret