Function at 0x140035260
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbx
push rdi
sub rsp, 0x48
mov eax, dword [reloc.WSOCK32.dll_inet_addr]
mov rbx, rcx
mov rcx, qword [0x14013df58]
add eax, 4
movsxd rdx, eax
imul rdx, rdx, 0x150
call qword [sym.imp.MSVCR100.dll_realloc]
mov rdi, rax
mov qword [0x14013df58], rax
test rax, rax
jne 0x1400352a0
add rsp, 0x48
pop rdi
pop rbx
ret
mov rdx, qword [0x14013b0f8]
mov rcx, rax
mov r8d, 0x150
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r14
call sub.MSVCR100.dll_memcpy
mov rcx, qword [0x14013f6f8]
lea r9, [0x140004f60]
mov edx, recv
mov r8d, 0x4ef6d80
mov qword [0x14013b0f8], rdi
call qword [sym.imp.USER32.dll_SetTimer]
xor r14d, r14d
cmp qword [rbx + 0x658], r14
jne 0x1400352fa
lea r13d, [r14 + 1]
jmp 0x140035423
mov rax, qword [0x14013b0f8]
mov byte [rax + 0x12c], r14b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp byte [0x14013f884], r14b
mov rcx, qword [0x14013b0f8]
mov dword [rcx + 0x11c], eax
mov dword [rcx + 0x120], WSAAsyncSelect
jne 0x140035355
mov rcx, qword [0x14013f6f8]
mov edx, reloc.WSOCK32.dll_inet_ntoa
lea r9, [0x140004e30]
lea r8d, [rdx + 0x59]
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
setne byte [0x14013f884]
mov byte [rbx + 0xbd9], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
inc dword [0x14013f898]
mov dword [rbx + 0xbfc], eax
mov dword [rbx + 0xbf8], eax
mov rcx, qword [0x140141fd8]
cmp rcx, qword [0x140141fe0]
jne 0x140035390
call fcn.140007370
mov rcx, qword [0x140141fd8]
cmp rcx, qword [0x140141fd0]
jb 0x1400353aa
mov rax, qword [0x140143818]
mov qword [rcx], rax
mov rcx, qword [0x140141fd8]
add rcx, 0x18
lea rax, str.Auto_execute
xor r9d, r9d
mov qword [0x140141fd8], rcx
mov qword [rcx + 8], rax
mov qword [rcx], r14
mov dword [rcx + 0x10], r14d
mov rcx, qword [rbx + 0x658]
lea edx, [r9 + 1]
xor r8d, r8d
call fcn.1400516d0
sub qword [0x140141fd8], 0x18
dec dword [0x14013f898]
cmp byte [0x14013f884], r14b
mov r13d, eax
je 0x14003541c
mov rcx, qword [0x14013f6f8]
mov edx, reloc.WSOCK32.dll_inet_ntoa
call qword [sym.imp.USER32.dll_KillTimer]
movzx ecx, byte [0x14013f884]
test eax, eax
cmovne ecx, r14d
mov byte [0x14013f884], cl
mov byte [rbx + 0xbd9], r14b
mov rbx, qword [0x14013b0f8]
cmp qword [rbx + 0x148], r14
je 0x14003547a
mov rcx, qword [rbx + 0x148]
cmp dword [rcx + 0x10], 6
jne 0x140035449
mov rcx, qword [rcx]
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rax, qword [rbx + 0x148]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x14003545f
call qword [sym.imp.MSVCR100.dll_free]
mov rcx, qword [rbx + 0x148]
call qword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_]
mov qword [rbx + 0x148], r14
mov rbx, qword [0x14013b0f8]
lea rcx, [0x14013e0b0]
mov rdx, rbx
mov r8d, 0x150
mov qword [rsp + 0x40], r12
mov qword [rbx + 0xd8], r14
mov qword [rbx + 0xe0], r14
mov qword [rbx + 0xe8], r14
mov qword [rbx + 0xf8], r14
mov dword [rbx + 0x100], r14d
mov byte [rbx + 0x138], r14b
mov dword [rbx + 0x38], r14d
mov qword [rbx + 0x68], r14
mov byte [rbx + 0x128], r14b
mov qword [rbx + 0x60], r14
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov qword [rbx + 0x20], r14
mov qword [rbx + 0x28], r14
mov qword [rbx + 0x148], r14
mov dword [rbx + 0x140], r14d
mov byte [rbx + 0x12c], 1
call sub.MSVCR100.dll_memcpy
mov byte [rbx + 0x12c], 1
mov dword [rbx + 0x120], r14d
mov word [rbx + 0x12d], 1
mov dword [rbx + 0x3c], 0x80000000
mov rbx, qword [0x140140268]
movzx ecx, byte [rbx + 0x23]
test cl, cl
jne 0x140035548
mov rcx, qword [rbx + 0x10]
lea rdx, [0x140103674]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e6e20
jmp 0x14003579e
lea r12, [0x140103674]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x70], rsi
cmp qword [rbx + 8], r12
jne 0x140035568
mov rbp, qword [rbx + 0x10]
shr rbp, 1
jmp 0x14003556d
mov ebp, 1
lea rax, [rbp + 1]
lea rsi, [rax + rax]
cmp cl, 2
jne 0x14003558a
mov rdx, rbp
mov rcx, r12
call fcn.140006bc0
jmp 0x140035794
mov rcx, qword [0x14013b0d0]
cmp rsi, rcx
jbe 0x1400355bb
cmp rsi, qword [rbx + 0x18]
jbe 0x1400355bb
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
jmp 0x140035794
cmp rax, 2
jae 0x1400355d5
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 3]
call fcn.1400e74d0
jmp 0x140035794
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400355f2
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x14013b0d0]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x14003576b
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140035625
cmp al, 2
je 0x140035662
mov rdi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
jmp 0x14003575f
mov edi, 0x80
cmp rsi, rdi
ja 0x140035662
cmp rsi, 8
ja 0x14003563c
mov edi, 8
jmp 0x140035648
mov eax, reloc.WSOCK32.dll_recv
cmp rsi, rax
cmovbe rdi, rax
mov rcx, rdi
call fcn.1400dd290
test rax, rax
je 0x140035794
mov byte [rbx + 0x20], 1
jmp 0x14003575f
cmp rsi, 0x20
jae 0x140035672
mov edi, SafeArrayAllocDescriptor
jmp 0x14003571c
mov edi, 0x208
cmp rsi, rdi
jb 0x14003571c
cmp rsi, 0x50000
jae 0x1400356d8
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14003569f
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x1400356ce
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400356ce
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rdi, xmm0
add rdi, rax
jmp 0x14003571c
cmp rsi, 0x320000
jae 0x1400356ea
lea rdi, [rsi + 0x8000]
jmp 0x14003571c
cmp rsi, 0xc80000
jae 0x140035715
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x14003571c
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x14003573d
test r8, r8
je 0x14003573d
mov rcx, qword [rbx + 8]
mov sil, 1
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x140035740
xor sil, sil
test rdi, rdi
js 0x14003580b
mov rcx, rdi
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
je 0x14003580b
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r12
je 0x140035782
lea r8, [rbp + rbp]
mov rdx, r12
call qword [sym.imp.MSVCR100.dll_memmove]
mov rax, qword [rbx + 8]
lea rcx, [rbp + rbp]
mov word [rcx + rax], r14w
mov qword [rbx + 0x10], rcx
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov rax, qword [0x14013ccd8]
mov r14, qword [rsp + 0x30]
mov r12, qword [rsp + 0x40]
cmp word [rax], 0
jne 0x1400357fa
cmp dword [0x14014053c], 0
jne 0x1400357fa
cmp qword [0x14013f848], 0
jne 0x1400357fa
cmp qword [0x14013f850], 0
jne 0x1400357fa
cmp byte [0x14013f880], 0
jne 0x1400357fa
mov edx, 9
mov eax, 2
test r13d, r13d
cmove edx, eax
lea rcx, [0x140143150]
xor r8d, r8d
call fcn.140035b90
mov eax, 1
mov r13, qword [rsp + 0x38]
add rsp, 0x48
pop rdi
pop rbx
ret
test sil, sil
je 0x140035821
lea rax, [0x140141fa8]
mov qword [rbx + 0x18], r14
mov qword [rbx + 8], rax
jmp 0x140035829
mov rax, qword [rbx + 8]
mov word [rax], r14w
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
mov qword [rbx + 0x10], r14
call fcn.14005f7b0
jmp 0x140035794