Function at 0x1400088d0
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov rdx, qword [0x140127a60]
mov rsi, rcx
mov rcx, qword [rcx + 0x20]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0xe0], 0
call qword [sym.imp.WSOCK32.dll_WSAAsyncSelect]
mov rcx, qword [rsi + 0x20]
lea r8, [rsp + 0xe0]
mov edx, 0x8004667e
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
xor edi, edi
lea r14, [0x1401241f0]
xor ebx, ebx
mov rax, qword [rsi + 0x40]
cmp rbx, rax
jae 0x140008953
mov rcx, qword [rsi + 0x30]
nop dword [rax + rax]
cmp byte [rcx + rbx], 0
je 0x1400089a2
mov rax, qword [rsi + 0x40]
inc edi
mov ebx, edi
cmp rbx, rax
jb 0x140008940
cmp rax, qword [rsi + 0x38]
jne 0x140008978
mov rax, qword [rsi + 0x38]
lea rdx, [rax + rax]
test rax, rax
jne 0x14000896b
mov edx, 0x800
lea rcx, [rsi + 0x30]
call fcn.14000e1d0
test eax, eax
jne 0x1400089ab
mov r8d, dword [rsi + 0x38]
xor r9d, r9d
mov rdx, qword [rsi + 0x30]
sub r8d, dword [rsi + 0x40]
add rdx, qword [rsi + 0x40]
mov rcx, qword [rsi + 0x20]
call qword [sym.imp.WSOCK32.dll_recv]
cmp eax, 0xffffffff
je 0x1400089ab
cdqe
add qword [rsi + 0x40], rax
jmp 0x14000892e
mov dword [rsp + 0xe8], edi
jmp 0x1400089c1
lea rcx, str.An_internal_error_has_occurred_in_the_debugger_engine._nContinue_running_the_script_without_the_debugger_
call fcn.14000d7a0
mov ebx, eax
test eax, eax
jne 0x140008bb2
mov rbp, qword [rsi + 0x30]
mov edx, SafeArrayAllocDescriptor
mov rcx, rbp
call qword [sym.imp.VCRUNTIME140.dll_strchr]
xor r13d, r13d
lea r15, [0x1400efd7e]
test rax, rax
je 0x140008c23
lea rbx, [rax + 1]
mov byte [rax], r13b
movzx eax, byte [rbx]
xor r14d, r14d
test al, al
je 0x140008c1c
nop dword [rax + rax]
cmp r14, 0x10
je 0x140008ad6
cmp al, 0x2d
jne 0x140008ad6
movzx ecx, byte [rbx + 1]
inc rbx
test cl, cl
je 0x140008ad6
cmp byte [rbx + 1], 0x20
lea rax, [rbx + 1]
jne 0x140008a36
cmp byte [rbx + 2], 0x2d
je 0x140008a36
mov rbx, rax
mov byte [rax], cl
cmp cl, 0x69
mov qword [rsp + r14*8 + 0x20], rbx
lea rax, [r14 + 1]
cmovne r14, rax
lea r8, [rbx + 1]
mov rax, r8
cmovne rax, r15
mov r15, rax
mov rdi, rax
lea eax, [r13 + 1]
cmovne r13d, eax
cmp cl, 0x2d
je 0x140008c1c
cmp byte [r8], 0x22
jne 0x140008bf2
movzx eax, byte [rbx + 2]
add rbx, 2
cmp al, 0x22
je 0x140008aa8
nop
movzx ecx, al
cmp al, 0x5c
jne 0x140008a8b
movzx ecx, byte [rbx + 1]
lea rdx, [rbx + 1]
cmovne rdx, rbx
test cl, cl
je 0x140008ad6
mov byte [r8], cl
lea rbx, [rdx + 1]
movzx eax, byte [rbx]
inc r8
cmp al, 0x22
jne 0x140008a80
inc rbx
mov byte [r8], 0
cmp byte [rbx], 0
je 0x140008c1c
mov r8d, 2
lea rdx, [0x1400f01b8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x140008c0d
mov ebx, 1
mov qword [rsi + 0x60], 0
mov dword [rsi + 0x68], 0
cmp qword [rsi + 0x20], 0xffffffffffffffff
je 0x140008bb2
mov r9, r15
lea rdx, str._response_command__s__transaction_id__e
mov r8, rbp
lea rcx, [rsi + 0x50]
call fcn.14000dac0
cmp dword [rsi + 0x68], 0
jne 0x140008b3f
mov rdx, qword [rsi + 0x60]
lea rcx, [rsi + 0x50]
add rdx, 2
call fcn.14000e1d0
test eax, eax
jne 0x140008b3f
mov r8, qword [rsi + 0x60]
movzx eax, word [0x1400f0c34]
mov rdx, qword [rsi + 0x50]
mov word [r8 + rdx], ax
add qword [rsi + 0x60], 2
mov r8d, ebx
lea rdx, str._error_code__i_____response_
lea rcx, [rsi + 0x50]
call fcn.14000dac0
mov rcx, rsi
call fcn.14000d060
mov ebx, eax
test eax, eax
jne 0x140008bb2
cmp qword [rsi + 0x40], 0
je 0x140008b9a
mov eax, dword [rsp + 0xe8]
inc eax
movsxd rdi, eax
mov rax, qword [rsi + 0x40]
cmp rdi, rax
jae 0x140008b93
mov rcx, qword [rsi + 0x30]
sub rax, rdi
mov r8, rax
lea rdx, [rcx + rdi]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rsi + 0x40]
sub rax, rdi
mov qword [rsi + 0x40], rax
mov eax, dword [rsi + 0x70]
cmp eax, 2
je 0x140008923
test eax, eax
je 0x140008bb2
mov rcx, rsi
call fcn.1400088a0
mov rcx, qword [rsi + 0x20]
cmp rcx, 0xffffffffffffffff
je 0x140008bd5
mov rdx, qword [0x140127a60]
mov r9d, SafeArrayAllocDescriptor
mov r8d, 0x408
call qword [sym.imp.WSOCK32.dll_WSAAsyncSelect]
mov eax, ebx
mov rbx, qword [rsp + 0xf8]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [0x1400f01b8]
mov rcx, r8
call qword [sym.imp.VCRUNTIME140.dll_strstr]
mov rbx, rax
test rax, rax
je 0x140008c1c
mov byte [rax], 0
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140008a00
lea r14, [0x1401241f0]
lea r11, [0x140124050]
xor r10d, r10d
mov r9, r11
mov rax, qword [r9]
mov r8, rbp
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140008c53
inc rax
test ecx, ecx
jne 0x140008c40
test edx, edx
je 0x140008c6d
inc r10
add r9, 0x10
cmp r9, r14
jne 0x140008c30
mov ebx, 4
jmp 0x140008adb
add r10, r10
lea rdx, [rsp + 0x20]
mov r9, r15
mov r8d, r13d
mov rcx, rsi
call qword [r11 + r10*reloc.WSOCK32.dll_htonl + 8]
mov ebx, eax
test eax, eax
jne 0x140008cbd
cmp qword [rsi + 0x60], 0
jne 0x140008ca6
lea rcx, [rsi + 0x50]
mov r9, r15
mov r8, rbp
lea rdx, str._response_command__s__transaction_id__e___
call fcn.14000dac0
mov rcx, rsi
call fcn.14000d060
mov ebx, eax
test eax, eax
jne 0x140008bb2
jmp 0x140008b60
cmp eax, 0xffffffff
jne 0x140008adb
xor ebx, ebx
jmp 0x140008b60