Function at 0x1400159c0
Capabilities:
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push rbx
push rdi
push r13
sub rsp, 0x210
mov rax, qword [0x140121080]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
mov rdi, rdx
mov rbx, rcx
mov ecx, 0x101
lea rdx, [rsp + 0x40]
mov r13, r8
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x140015a05
mov eax, 0xffffdcd8
jmp 0x140015d12
movzx eax, word [rsp + 0x40]
cmp al, 1
jne 0x140015cfc
shr ax, 8
cmp al, 1
jne 0x140015cfc
mov qword [rsp + 0x248], rbp
xor ecx, ecx
mov qword [rsp + 0x208], rsi
mov qword [rsp + 0x200], r12
mov qword [rsp + 0x1f8], r14
mov qword [rsp + 0x1f0], r15
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov esi, 2
xor r8d, r8d
mov edx, esi
mov ecx, esi
call qword [sym.imp.WS2_32.dll_socket]
mov rcx, rbx
mov qword [0x140173280], rax
call qword [sym.imp.WS2_32.dll_inet_addr]
mov rcx, rdi
mov word [0x140173270], si
mov dword [0x140173274], eax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ecx, eax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x140173272], ax
movsx ecx, byte [r13]
movsx ebx, byte [r13 + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
sub al, 0x30
mov ecx, ebx
movzx edi, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
movsx ecx, byte [r13 + 2]
sub al, 0x30
movsx ebx, byte [r13 + 3]
movzx esi, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
sub al, 0x30
mov ecx, ebx
movzx ebp, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
movsx ecx, byte [r13 + 4]
sub al, 0x30
movsx ebx, byte [r13 + 5]
movzx r14d, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
sub al, 0x30
mov ecx, ebx
movzx r15d, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
movsx ecx, byte [r13 + 6]
sub al, 0x30
movsx ebx, byte [r13 + 7]
movzx r12d, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
sub al, 0x30
mov ecx, ebx
movzx r13d, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
sub al, 0x30
movzx r9d, al
cmp dil, 9
lea eax, [rdi - 7]
movzx edx, al
lea eax, [rsi - 7]
cmovbe edx, edi
movzx ecx, al
shl dl, 4
lea eax, [rbp - 7]
cmp sil, 9
cmovbe ecx, esi
add dl, cl
movsx r8d, dl
shl r8d, 8
cmp bpl, 9
movzx edx, al
lea eax, [r14 - 7]
cmovbe edx, ebp
movzx ecx, al
shl dl, 4
cmp r14b, 9
cmovbe ecx, r14d
add dl, cl
movsx eax, dl
or r8d, eax
lea eax, [r15 - 7]
shl r8d, 8
movzx edx, al
cmp r15b, 9
lea eax, [r12 - 7]
cmovbe edx, r15d
movzx ecx, al
shl dl, 4
cmp r12b, 9
cmovbe ecx, r12d
add dl, cl
movsx eax, dl
or r8d, eax
lea eax, [r13 - 7]
shl r8d, 8
movzx edx, al
cmp r13b, 9
lea eax, [r9 - 7]
cmovbe edx, r13d
movzx ecx, al
shl dl, 4
cmp r9b, 9
cmovbe ecx, r9d
add dl, cl
movsx eax, dl
or r8d, eax
mov dword [0x140172a30], r8d
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov rcx, qword [0x140173280]
lea rbx, [0x140173270]
xorps xmm0, xmm0
mov dword [0x140172a34], eax
xor eax, eax
mov dword [rsp + 0x28], reloc.WS2_32.dll_recv
xor r9d, r9d
mov qword [0x140172a20], rax
mov r8d, reloc.WS2_32.dll_recv
mov qword [0x140172e40], rax
lea rdx, [0x140172a30]
mov dword [0x140172e48], eax
mov dword [0x140172a38], 0
mov dword [0x140172a3c], 0xaf3c2828
movups xmmword [0x1401729f0], xmm0
mov qword [rsp + 0x20], rbx
movups xmmword [0x140172a00], xmm0
movups xmmword [0x140172a10], xmm0
call qword [sym.imp.WS2_32.dll_sendto]
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140173280]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, [0x140172e50]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
mov r8d, 0x400
mov dword [rsp + 0x30], reloc.WS2_32.dll_recv
call qword [sym.imp.WS2_32.dll_recvfrom]
mov r15, qword [rsp + 0x1f0]
mov r14, qword [rsp + 0x1f8]
mov r12, qword [rsp + 0x200]
mov rsi, qword [rsp + 0x208]
mov rbp, qword [rsp + 0x248]
test eax, eax
jns 0x140015ccb
mov eax, 0xffffdcdb
jmp 0x140015d12
mov eax, dword [0x140172a3c]
cmp dword [0x140172e5c], eax
je 0x140015ce0
mov eax, 0xffffdcdc
jmp 0x140015d12
mov ecx, dword [0x140172a38]
mov edx, 0xffffdcdd
cmp dword [0x140172e58], ecx
mov eax, dword [0x140172e54]
cmovne eax, edx
jmp 0x140015d12
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 0xffffdcd9
mov qword [0x140173280], 0xffffffffffffffff
mov rcx, qword [rsp + 0x1e0]
xor rcx, rsp
call fcn.1400ebdb0
add rsp, 0x210
pop r13
pop rdi
pop rbx
ret