Function at 0x14002ee20
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
xor edi, edi
mov word [rbp - 0x29], 0x15ff
xor dl, dl
mov dword [rbp - 0x27], 2
mov byte [rbp + 0x67], dl
mov r14, rcx
mov byte [rbp + 0x6f], dl
mov r15d, edi
mov word [rbp - 0x23], 0x8eb
mov r12d, edi
mov qword [rbp - 0x21], rdi
mov word [rbp - 0x49], 0x25ff
mov dword [rbp - 0x47], edi
mov qword [rbp - 0x43], rdi
mov qword [rbp - 0x39], 0x25ff0e70
mov qword [rbp - 0x31], rdi
mov qword [rcx + 0x20], rdi
mov qword [rsp + 0xe0], r13
nop word [rax + rax]
mov rsi, qword [r14]
movzx ebx, dl
lea rdx, [rbp - 9]
add rbx, rsi
mov rcx, rbx
call fcn.14002e0a0
mov r9d, dword [rbp + 0x18]
mov r8d, eax
bt r9d, 0xc
jb 0x14002f19e
movzx edx, byte [rbp + 0x67]
mov r11, rbx
movzx r13d, byte [rbp - 9]
cmp dl, 5
jb 0x14002eedf
mov r8d, ntohs
mov qword [rbp - 0x43], rbx
lea r11, [rbp - 0x49]
lea r12d, [r8 - 0xd]
jmp 0x14002f066
movzx eax, byte [rbp + 4]
and al, 0xc7
cmp al, 5
jne 0x14002ef40
movzx eax, byte [rbp + 0x6f]
lea rdi, [rbp - 0x19]
mov rcx, r8
lea r11, [rbp - 0x19]
mov rsi, rbx
mov edx, ebx
sub edx, dword [r14 + 0x10]
rep movsb byte [rdi], byte [rsi]
sub edx, eax
mov ecx, r9d
add edx, dword [rbp + 0x14]
shr rcx, 2
and ecx, 0xf
movzx eax, r13b
sub rax, rcx
cmp byte [rbp + 2], 0xff
mov dword [rbp + rax - 0x1d], edx
jne 0x14002f062
cmp byte [rbp + 6], 4
movzx edx, byte [rbp + 0x67]
jne 0x14002f066
mov r12d, 1
jmp 0x14002f066
movzx edx, byte [rbp + 2]
cmp dl, 0xe8
jne 0x14002ef64
movsxd rax, dword [rbp + 0xc]
lea r11, [rbp - 0x29]
add rax, rbx
movzx ecx, r13b
add rcx, rax
mov qword [rbp - 0x21], rcx
jmp 0x14002f05c
movzx eax, dl
and al, 0xfd
cmp al, 0xe9
jne 0x14002efbf
movsx rax, byte [rbp + 0xc]
movzx ecx, r13b
add rcx, rbx
cmp dl, 0xeb
je 0x14002ef82
movsxd rax, dword [rbp + 0xc]
add rcx, rax
cmp rsi, rcx
ja 0x14002efa2
lea rax, [rsi + 5]
cmp rcx, rax
jae 0x14002efa2
cmp r15, rcx
cmovae rcx, r15
mov r15, rcx
jmp 0x14002f062
cmp rbx, r15
mov qword [rbp - 0x43], rcx
mov r12d, edi
lea r11, [rbp - 0x49]
setae r12b
mov r8d, ntohs
jmp 0x14002f062
movzx r9d, byte [rbp + 3]
movzx ecx, dl
and cl, 0xf0
cmp cl, 0x70
je 0x14002eff6
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x14002eff6
movzx eax, r9b
and al, 0xf0
cmp al, 0x80
je 0x14002eff6
and dl, 0xfe
cmp dl, 0xc2
jne 0x14002f062
cmp rbx, r15
mov r12d, edi
setae r12b
jmp 0x14002f062
movzx edi, r13b
add rdi, rbx
cmp cl, 0x70
je 0x14002f00f
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
movsxd rax, dword [rbp + 0xc]
jne 0x14002f014
movsx rax, byte [rbp + 0xc]
add rdi, rax
cmp rsi, rdi
ja 0x14002f031
lea rax, [rsi + 5]
cmp rdi, rax
jae 0x14002f031
cmp r15, rdi
cmovae rdi, r15
mov r15, rdi
jmp 0x14002f062
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x14002f19e
cmp dl, 0xf
movzx ecx, r9b
movzx eax, dl
lea r11, [rbp - 0x39]
cmovne ecx, eax
mov qword [rbp - 0x31], rdi
and cl, 0xf
xor cl, 0x71
mov byte [rbp - 0x39], cl
mov r8d, reloc.WSOCK32.dll_recv
movzx edx, byte [rbp + 0x67]
cmp rbx, r15
jae 0x14002f078
movzx eax, r13b
cmp r8d, eax
jne 0x14002f19e
movzx ebx, byte [rbp + 0x6f]
lea eax, [r8 + rbx]
cmp eax, 0x32
ja 0x14002f19e
mov eax, dword [r14 + 0x24]
cmp eax, 8
jae 0x14002f19e
mov byte [rax + r14 + 0x28], dl
mov rsi, r11
mov eax, dword [r14 + 0x24]
add dl, r13b
movzx edi, bl
mov ecx, r8d
mov byte [rbp + 0x67], dl
mov byte [rax + r14 + 0x30], bl
add bl, r8b
mov r10, qword [r14 + 0x10]
inc dword [r14 + 0x24]
add rdi, r10
mov byte [rbp + 0x6f], bl
rep movsb byte [rdi], byte [rsi]
mov edi, 0
test r12d, r12d
je 0x14002ee90
cmp dl, 5
jae 0x14002f16e
mov rdi, qword [r14]
movzx ecx, dl
movzx esi, dl
add rcx, rdi
mov edx, 5
sub edx, esi
call fcn.14002ede0
test eax, eax
jne 0x14002f16e
cmp byte [rbp + 0x67], 2
jae 0x14002f113
mov edx, 2
sub edx, esi
call fcn.14002ede0
test eax, eax
je 0x14002f19e
lea rcx, [rdi - 5]
mov r8d, gethostbyname
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [rbp + 0x17], 0x1000
jne 0x14002f19e
test byte [rbp + 0x1b], 0xf0
je 0x14002f19e
mov rax, qword [r14]
movzx edx, byte [rax - 5]
test dl, dl
je 0x14002f14b
cmp dl, 0x90
je 0x14002f14b
cmp dl, 0xcc
jne 0x14002f19e
mov ecx, 1
add rax, 0xfffffffffffffffc
cmp byte [rax], dl
jne 0x14002f19e
inc ecx
inc rax
cmp ecx, 5
jb 0x14002f154
mov r10, qword [r14 + 0x10]
mov dword [r14 + 0x20], 1
mov rcx, qword [r14 + 8]
mov eax, 1
mov qword [rbp - 0x43], rcx
mov ecx, dword [rbp - 0x41]
movsd xmm0, qword [rbp - 0x49]
movzx edx, bl
add rdx, r10
mov qword [r14 + 0x18], rdx
movsd qword [rdx], xmm0
mov dword [rdx + 8], ecx
movzx ecx, word [rbp - 0x3d]
mov word [rdx + 0xc], cx
jmp 0x14002f1a0
xor eax, eax
mov r13, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret