Function at 0x14002efa0
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
xor edi, edi
mov word [rbp - 0x29], 0x15ff
xor dl, dl
mov dword [rbp - 0x27], 2
mov byte [rbp + 0x67], dl
mov r14, rcx
mov byte [rbp + 0x6f], dl
mov r15d, edi
mov word [rbp - 0x23], 0x8eb
mov r12d, edi
mov qword [rbp - 0x21], rdi
mov word [rbp - 0x49], 0x25ff
mov dword [rbp - 0x47], edi
mov qword [rbp - 0x43], rdi
mov qword [rbp - 0x39], 0x25ff0e70
mov qword [rbp - 0x31], rdi
mov qword [rcx + 0x20], rdi
mov qword [rsp + 0xe0], r13
nop word [rax + rax]
mov rsi, qword [r14]
movzx ebx, dl
lea rdx, [rbp - 9]
add rbx, rsi
mov rcx, rbx
call fcn.14002e220
mov r9d, dword [rbp + 0x18]
mov r8d, eax
bt r9d, 0xc
jb 0x14002f31e
movzx edx, byte [rbp + 0x67]
mov r11, rbx
movzx r13d, byte [rbp - 9]
cmp dl, 5
jb 0x14002f05f
mov r8d, SafeArrayGetUBound
mov qword [rbp - 0x43], rbx
lea r11, [rbp - 0x49]
lea r12d, [r8 - 0xd]
jmp 0x14002f1e6
movzx eax, byte [rbp + 4]
and al, 0xc7
cmp al, 5
jne 0x14002f0c0
movzx eax, byte [rbp + 0x6f]
lea rdi, [rbp - 0x19]
mov rcx, r8
lea r11, [rbp - 0x19]
mov rsi, rbx
mov edx, ebx
sub edx, dword [r14 + 0x10]
rep movsb byte [rdi], byte [rsi]
sub edx, eax
mov ecx, r9d
add edx, dword [rbp + 0x14]
shr rcx, 2
and ecx, 0xf
movzx eax, r13b
sub rax, rcx
cmp byte [rbp + 2], 0xff
mov dword [rbp + rax - 0x1d], edx
jne 0x14002f1e2
cmp byte [rbp + 6], 4
movzx edx, byte [rbp + 0x67]
jne 0x14002f1e6
mov r12d, 1
jmp 0x14002f1e6
movzx edx, byte [rbp + 2]
cmp dl, 0xe8
jne 0x14002f0e4
movsxd rax, dword [rbp + 0xc]
lea r11, [rbp - 0x29]
add rax, rbx
movzx ecx, r13b
add rcx, rax
mov qword [rbp - 0x21], rcx
jmp 0x14002f1dc
movzx eax, dl
and al, 0xfd
cmp al, 0xe9
jne 0x14002f13f
movsx rax, byte [rbp + 0xc]
movzx ecx, r13b
add rcx, rbx
cmp dl, 0xeb
je 0x14002f102
movsxd rax, dword [rbp + 0xc]
add rcx, rax
cmp rsi, rcx
ja 0x14002f122
lea rax, [rsi + 5]
cmp rcx, rax
jae 0x14002f122
cmp r15, rcx
cmovae rcx, r15
mov r15, rcx
jmp 0x14002f1e2
cmp rbx, r15
mov qword [rbp - 0x43], rcx
mov r12d, edi
lea r11, [rbp - 0x49]
setae r12b
mov r8d, SafeArrayGetUBound
jmp 0x14002f1e2
movzx r9d, byte [rbp + 3]
movzx ecx, dl
and cl, 0xf0
cmp cl, 0x70
je 0x14002f176
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x14002f176
movzx eax, r9b
and al, 0xf0
cmp al, 0x80
je 0x14002f176
and dl, 0xfe
cmp dl, 0xc2
jne 0x14002f1e2
cmp rbx, r15
mov r12d, edi
setae r12b
jmp 0x14002f1e2
movzx edi, r13b
add rdi, rbx
cmp cl, 0x70
je 0x14002f18f
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
movsxd rax, dword [rbp + 0xc]
jne 0x14002f194
movsx rax, byte [rbp + 0xc]
add rdi, rax
cmp rsi, rdi
ja 0x14002f1b1
lea rax, [rsi + 5]
cmp rdi, rax
jae 0x14002f1b1
cmp r15, rdi
cmovae rdi, r15
mov r15, rdi
jmp 0x14002f1e2
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x14002f31e
cmp dl, 0xf
movzx ecx, r9b
movzx eax, dl
lea r11, [rbp - 0x39]
cmovne ecx, eax
mov qword [rbp - 0x31], rdi
and cl, 0xf
xor cl, 0x71
mov byte [rbp - 0x39], cl
mov r8d, reloc.WSOCK32.dll_recv
movzx edx, byte [rbp + 0x67]
cmp rbx, r15
jae 0x14002f1f8
movzx eax, r13b
cmp r8d, eax
jne 0x14002f31e
movzx ebx, byte [rbp + 0x6f]
lea eax, [r8 + rbx]
cmp eax, 0x32
ja 0x14002f31e
mov eax, dword [r14 + 0x24]
cmp eax, 8
jae 0x14002f31e
mov byte [rax + r14 + 0x28], dl
mov rsi, r11
mov eax, dword [r14 + 0x24]
add dl, r13b
movzx edi, bl
mov ecx, r8d
mov byte [rbp + 0x67], dl
mov byte [rax + r14 + 0x30], bl
add bl, r8b
mov r10, qword [r14 + 0x10]
inc dword [r14 + 0x24]
add rdi, r10
mov byte [rbp + 0x6f], bl
rep movsb byte [rdi], byte [rsi]
mov edi, 0
test r12d, r12d
je 0x14002f010
cmp dl, 5
jae 0x14002f2ee
mov rdi, qword [r14]
movzx ecx, dl
movzx esi, dl
add rcx, rdi
mov edx, 5
sub edx, esi
call fcn.14002ef60
test eax, eax
jne 0x14002f2ee
cmp byte [rbp + 0x67], 2
jae 0x14002f293
mov edx, 2
sub edx, esi
call fcn.14002ef60
test eax, eax
je 0x14002f31e
lea rcx, [rdi - 5]
mov r8d, gethostbyaddr
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [rbp + 0x17], 0x1000
jne 0x14002f31e
test byte [rbp + 0x1b], 0xf0
je 0x14002f31e
mov rax, qword [r14]
movzx edx, byte [rax - 5]
test dl, dl
je 0x14002f2cb
cmp dl, 0x90
je 0x14002f2cb
cmp dl, 0xcc
jne 0x14002f31e
mov ecx, 1
add rax, 0xfffffffffffffffc
cmp byte [rax], dl
jne 0x14002f31e
inc ecx
inc rax
cmp ecx, 5
jb 0x14002f2d4
mov r10, qword [r14 + 0x10]
mov dword [r14 + 0x20], 1
mov rcx, qword [r14 + 8]
mov eax, 1
mov qword [rbp - 0x43], rcx
mov ecx, dword [rbp - 0x41]
movsd xmm0, qword [rbp - 0x49]
movzx edx, bl
add rdx, r10
mov qword [r14 + 0x18], rdx
movsd qword [rdx], xmm0
mov dword [rdx + 8], ecx
movzx ecx, word [rbp - 0x3d]
mov word [rdx + 0xc], cx
jmp 0x14002f320
xor eax, eax
mov r13, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret