Function at 0x140006f7b
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x140007146
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push rbp
mov rbp, rsp
sub rsp, 0x88
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006ff7
or qword [0x140009a30], rdx
sub ecx, dword [rbp - 0x7f]
mov dword [rbp - 0x4c], edx
mov dword [rbp - 0xe], ecx
mov r9, qword [rbp - 0x2b]
movzx ecx, dh
mov rax, 0xba27
mov ecx, edx
mov dword [rbp - 0x19], ecx
inc qword [rsp]
mov edx, 0xbe96
cmp edx, dword [rsp]
jl 0x140006fd0
add rsp, 0x10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1400070a5
mov ecx, 0x25c6
movzx edx, dl
and qword [rbp - 0x2a], rcx
add dword [rbp - 0x60], eax
sub rdx, 0xb417
movzx ecx, cl
sub eax, dword [rbp - 0x2b]
add qword [rbp - 0x6a], rdx
mov eax, dword [rbp - 0x14]
xor ecx, dword [rbp - 0x5f]
mov r8, 0x6bf9
add dword [rbp - 0x30], ecx
sub rcx, rax
mov r8, rax
mov r9, 0x602e
mov rdx, r9
mov qword [rbp - 0x3e], r11
add edx, 0xb450
mov ecx, dword [rbp - 0xd]
add r11, qword [rbp - 0x4b]
mov eax, dword [rbp - 0x18]
movzx ecx, ax
mov rcx, rax
mov r10, rax
or rax, rcx
mov rcx, qword [0x140009a35]
movzx eax, cl
mov qword [rbp - 0x53], rax
movzx eax, cx
sub eax, 0x7225
add r9, qword [rbp - 3]
mov ecx, eax
add r10, rdx
mov r9, r10
mov dword [rbp - 0x7b], ecx
and ecx, dword [rbp - 0x65]
mov eax, dword [rbp - 0x22]
inc qword [rsp]
mov rax, 0xc5d4
cmp qword [rsp], rax
jle 0x140007016
add rsp, 0x10
xor qword [rbp - 0x42], r11
mov eax, dword [rbp - 0x2f]
mov edx, dword [rbp - 0x3a]
mov dword [rbp - 0x34], eax
mov dword [rbp - 0x6f], edx
mov rcx, r10
mov qword [rbp - 0x44], rdx
sub dword [rbp - 0x4f], eax
mov rdx, qword [rbp - 0x61]
mov eax, dword [rbp - 0x5b]
mov edx, dword [rbp - 0xa]
mov dword [rbp - 0x13], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14000711f
mov qword [rbp - 0x5c], r9
mov r10, 0x4685
mov edx, ecx
mov dword [rbp - 0x77], eax
mov edx, dword [rbp - 0x3e]
and ecx, dword [0x140009a2c]
add dword [rbp - 0x6e], ecx
mov r8, rdx
mov r10, r8
mov rax, qword [rbp - 5]
or r9, rdx
mov eax, dword [rbp - 0x6b]
inc qword [rsp]
cmp qword [rsp], 0x2c41
jle 0x1400070ef
add rsp, 0x10
leave
lea rdx, [0x140006f66]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x1400072c1
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [0x140009782]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x140006fa1
push r15
push rbp
mov rbp, rsp
sub rsp, 0x1d8
mov edx, dword [rbp - 0xeb]
add dword [rbp - 0x174], edx
or r10, r15
mov dword [rbp - 0x16f], edx
xor ecx, eax
or r15, qword [rbp - 0x100]
or edx, eax
mov qword [rbp - 0x5e], r11
mov dword [rbp - 0xa9], edx
movzx ecx, ch
and dword [rbp - 0x7c], edx
mov rdx, qword [rbp - 0x11d]
mov dword [rbp - 0x194], ecx
sub eax, dword [rbp - 0x180]
and qword [rbp - 0x7f], r8
mov r11, rdx
movzx ecx, cl
mov dword [rbp - 0x9a], edx
mov dword [rbp - 0xeb], eax
cmp ecx, 0x65f8a9ef
js 0x1400071e8
and qword [rbp - 0x173], r8
mov dword [rbp - 0x11], ecx
lea ecx, [rbp - 0x14d]
mov qword [rbp - 0x1b4], r8
mov r11, qword [rbp - 0x6c]
sub rcx, r10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14000724a
mov rcx, qword [rbp - 0xc2]
movzx ecx, byte [rbp - 0x11b]
movzx eax, byte [rbp - 0x172]
add rax, r10
mov dword [rbp - 0x35], edx
mov r15, qword [rbp - 0x199]
mov rdx, rcx
mov qword [rbp - 0x1b2], rax
mov qword [rbp - 0xd4], rcx
mov edx, dword [0x140009a2e]
movzx eax, ah
or edx, dword [rbp - 0xa4]
inc qword [rsp]
mov r11, 0x176b
cmp qword [rsp], r11
jle 0x140007204
add rsp, 0x10
mov qword [rbp - 0x147], r15
mov dword [rbp - 0x13], eax
mov edx, eax
mov r9, qword [rbp - 0x198]
mov rdx, 0x5b37
mov ecx, dword [rbp - 0xa]
and dword [rbp - 0xaa], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007293
xor dword [rbp - 0x12], eax
inc qword [rsp]
cmp qword [rsp], 0x6a86
jle 0x14000728c
add rsp, 0x10
leave
pop r15
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x140006f6b]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x140007448
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push r13
push rsi
push rdi
push r12
push r15
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x4d8
xor r15, 0xb96b
mov esi, dword [rbp - 0x3e]
xor eax, dword [rbp - 0x11f]
mov r8, qword [rbp - 0x40a]
mov dword [rbp - 0x174], esi
mov ebx, esi
mov dword [rbp - 0x2a7], eax
mov dword [rbp - 0x3b8], ebx
movzx ebx, al
add dword [rbp - 0x11f], edx
mov bl, byte [rbp - 0x191]
mov r8, 0x53e9
mov r9, qword [rbp - 0x1bc]
mov ebx, dword [rbp - 0xf]
movzx edi, cx
mov eax, dword [rbp - 0x40a]
sub rbx, qword [rbp - 0x52]
mov qword [0x140009a2d], rbx
mov ebx, edi
mov dword [0x140009a38], esi
sub esi, edi
mov rax, qword [rbp - 0x2a5]
xor rbx, r8
sub r8, rbx
mov qword [rbp - 0x37c], r12
mov rdi, qword [rbp - 0x26]
sub cl, byte [0x140009a3a]
mov edi, dword [rbp - 0x238]
lea r13, [rbp - 0x35f]
mov dword [rbp - 0x201], esi
mov qword [rbp - 0x25b], rcx
sub r11, rcx
and qword [rbp - 0x479], rdx
mov r12, qword [rbp - 0xe7]
or eax, edx
mov qword [0x140009a36], r11
mov rax, qword [rbp - 0x484]
mov dword [rbp - 0xea], ecx
mov eax, dword [rbp - 0x24f]
cmp rsi, qword [0x140009a36]
jns 0x14000743e
mov si, dx
mov qword [rbp - 0x182], rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007430
add r12, 0x39a5
mov r15, qword [rbp - 0x218]
movzx edx, bx
add r12, qword [rbp - 0x260]
sub dword [rbp - 0x1a], eax
mov edx, dword [rbp - 0x165]
mov rdi, 0x13bb
mov word [rbp - 0x199], cx
inc qword [rsp]
cmp qword [rsp], 0x455
jle 0x1400073fd
add rsp, 0x10
leave
pop rbx
pop r15
pop r12
pop rdi
pop rsi
pop r13
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x14000762b
jmp 0x140007656
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x140007656
push rbp
mov rbp, rsp
sub rsp, 0x288
mov ecx, dword [rbp - 0x102]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1400074a8
inc qword [rsp]
cmp qword [rsp], 0x6183
jle 0x1400074a4
add rsp, 0x10
mov ecx, edx
and edx, eax
mov qword [rbp - 0x22a], r10
or r10, 0x6a3f
add r10, rax
mov dword [rbp - 0x244], eax
mov r11, r8
mov r10, 0xbca5
mov rcx, r11
mov r10, qword [rbp - 0x278]
movzx edx, dx
mov dword [rbp - 0x1da], ecx
mov eax, dword [rbp - 0xdf]
mov rcx, qword [rbp - 0x202]
and dword [rbp - 0x19], ecx
mov eax, 0x1274
mov r11, 0x5af5
or r10, qword [rbp - 0x15b]
mov r11, qword [rbp - 0x2f]
sub rcx, qword [rbp - 0x1df]
sub qword [0x140009a38], r10
mov rax, r9
mov r10, qword [rbp - 0x270]
add ecx, dword [rbp - 0x266]
cmp rdx, 0xfffffffff54baf2b
jns 0x14000757e
mov edx, 0x4c0d
movzx ecx, dh
mov dword [rbp - 0x188], ecx
mov rdx, qword [rbp - 0x193]
mov dword [rbp - 0x21c], ecx
xor eax, dword [rbp - 0x214]
mov rcx, qword [rbp - 0x7e]
lea rax, [rbp - 0x238]
add r10, 0xd4e0
and ch, 0xa2
mov eax, dword [rbp - 0x68]
mov r11, r9
mov dword [rbp - 0xcf], ecx
cmp rdx, 0x6a48d690
jo 0x1400075e0
add rdx, 0xa163
add dword [rbp - 0xe3], ecx
lea r10, [rbp - 0x17b]
and dword [rbp - 0x6e], eax
mov r11, r9
mov ecx, dword [rbp - 0x10a]
mov r8, rcx
xor rax, qword [rbp - 0x117]
mov qword [rbp - 0x1ea], r9
sub eax, dword [rbp - 0x5f]
add r9, 0x3b40
mov ecx, eax
mov r11, rax
mov al, byte [rbp - 0x1e6]
mov edx, dword [0x140009a2f]
add r11, 0xb8
mov dword [rbp - 0x44], ecx
mov r9, r10
mov rcx, qword [rbp - 0x261]
mov r11, qword [rbp - 0x201]
and edx, ecx
or rdx, r10
mov r10, r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14000761c
mov eax, dword [rbp - 0xda]
or qword [rbp - 0x18f], r10
sub qword [rbp - 0x138], rcx
inc qword [rsp]
cmp qword [rsp], 0x963a
jle 0x140007604
add rsp, 0x10
leave
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [0x140009782]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x140007464
jmp 0x1400072a4
mov qword [0x1400092f0], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x1400072b3