Function at 0x49ee83
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x470
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], r9
mov eax, pe_nt_image_headers64
mov r8, rax
mov rax, qword [rbp + 0x18]
mov r11, rax
lea rax, [rbp - 0x88]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, pe_nt_image_headers64
mov r11, rax
lea rax, [rbp - 0x88]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00423c2c
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov ecx, dword [rax]
movsxd rcx, ecx
mov eax, 0
mov r9, rax
mov eax, dword [rbp + 0x28]
mov r8, rax
mov rax, qword [rbp + 0x20]
mov r11, rax
mov r10, rcx
mov rcx, r10
mov rdx, r11
call sub.ws2_32.dll_recv
mov r11, rax
lea rax, [rbp - 0xe8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004e8983
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0xe8]
mov r11, rax
lea rax, [rbp - 0xb8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 0xb8]
cmp eax, 0
je 0x49efb3
movabs rax, 0x28
mov r8, rax
lea rax, [rbp - 0xb8]
mov r11, rax
lea rax, [rbp - 0x118]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x118]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x49f44e
mov eax, dword [rbp - 0x90]
mov dword [rbp - 0x11c], eax
mov eax, dword [rbp - 0x11c]
cmp eax, 0
jle 0x49f02a
mov eax, dword [rbp - 0x11c]
mov dword [rbp - 0x154], eax
mov eax, 4
mov r8, rax
lea rax, [rbp - 0x150]
mov r11, rax
lea rax, [rbp - 0x154]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0042c0a5
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x150]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x49f44e
call fcn.0049c6b2
mov dword [rbp - 0x158], eax
mov eax, dword [rbp - 0x158]
mov ecx, dword [0x0051278c]
cmp eax, ecx
jne 0x49f262
mov rax, qword [rbp - 8]
lea rcx, [rsp + 0x20]
mov edx, pe_nt_image_headers64
mov r8, rdx
mov r11, rax
mov r10, rcx
mov qword [rbp - 0x1c0], rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x1b8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0049ff7d
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x1b8]
mov r11, rax
lea rax, [rbp - 0x188]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 0x188]
cmp eax, 0
je 0x49f118
movabs rax, 0x28
mov r8, rax
lea rax, [rbp - 0x188]
mov r11, rax
lea rax, [rbp - 0x1f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x1f0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x49f44e
mov rax, qword [rbp - 8]
mov ecx, dword [rax]
movsxd rcx, ecx
mov eax, 0
mov r9, rax
mov eax, dword [rbp + 0x28]
mov r8, rax
mov rax, qword [rbp + 0x20]
mov r11, rax
mov r10, rcx
mov rcx, r10
mov rdx, r11
call sub.ws2_32.dll_recv
mov r11, rax
lea rax, [rbp - 0x250]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004e8983
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x250]
mov r11, rax
lea rax, [rbp - 0x220]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 0x220]
cmp eax, 0
je 0x49f1e8
movabs rax, 0x28
mov r8, rax
lea rax, [rbp - 0x220]
mov r11, rax
lea rax, [rbp - 0x280]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x280]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x49f44e
mov eax, dword [rbp - 0x1f8]
mov dword [rbp - 0x11c], eax
mov eax, dword [rbp - 0x11c]
mov r11, rax
lea rax, [rbp - 0x2e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0049bfab
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x2e0]
mov r11, rax
lea rax, [rbp - 0x2b0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x2b0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x49f44e
mov eax, dword [rbp - 0x158]
mov r11, rax
lea rax, [rbp - 0x340]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0049c386
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x340]
mov r11, rax
lea rax, [rbp - 0x310]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 0x310]
cmp eax, 0
je 0x49f30c
movabs rax, 0x28
mov r8, rax
lea rax, [rbp - 0x310]
mov r11, rax
lea rax, [rbp - 0x370]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x370]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x49f44e
mov eax, 1
mov byte [rbp - 0x3a0], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x39f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [0x0050d6c5]
mov qword [rbp - 0x3d0], rax
mov eax, 4
mov dword [rbp - 0x3c8], eax
mov eax, 1
mov dword [rbp - 0x3c4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x3d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x3c0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0042be7a
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x3c0]
mov r11, rax
lea rax, [rbp - 0x398]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x378], al
movabs rax, 3
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x377]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x374]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x3a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
leave
ret