Function at 0x180006e24
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x18000703f
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push rdi
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x208
add rax, qword [rbp - 0x20]
add ecx, 0x9219
mov dword [rbp - 0x1aa], ecx
sub dword [rbp - 0x1e], eax
mov qword [rbp - 0x6e], rdi
mov qword [rbp - 0x146], r11
mov edi, dword [rbp - 0xa2]
add rdi, 0xd3ab
mov dword [0x18000894f], edx
mov r8, qword [rbp - 0x190]
lea rcx, [rbp - 0x158]
mov byte [rbp - 0x18b], ah
add dword [rbp - 0xa3], ecx
add r10, 0xa2ce
movzx esi, dh
mov esi, dword [rbp - 0x3e]
movzx edi, dh
mov eax, dword [0x180008956]
mov rsi, r11
mov qword [rbp - 0x108], r9
mov dword [rbp - 0x28], ecx
sub esi, dword [rbp - 0x18]
mov edi, dword [rbp - 0x1a1]
mov rdi, 0x5bbf
mov qword [rbp - 0x128], r9
mov r9, qword [rbp - 0x17f]
mov dword [rbp - 0xc8], esi
xor byte [rbp - 0x1c8], ch
mov dword [rbp - 0x13e], edx
mov rdx, qword [rbp - 0xe6]
sub ecx, dword [rbp - 0x92]
mov edi, esi
mov ch, al
xor qword [rbp - 0x1a4], rax
mov rax, rcx
mov qword [rbp - 0x46], rdx
mov edi, dword [rbp - 0x19]
cmp di, word [0x180008953]
jno 0x180006f4e
mov ecx, eax
lea rdx, [rbp - 0x2b]
and esi, dword [rbp - 0xaa]
sub edx, 0xb035
xor edx, dword [0x180008954]
xor eax, edx
mov qword [rbp - 0x128], rsi
add rdx, qword [rbp - 0x2e]
cmp rdx, 0x7d30a70c
jno 0x180007024
mov rdi, qword [0x180008955]
mov qword [rbp - 0x145], rax
mov r11, rsi
mov edx, eax
mov eax, 0x7e1d
mov rdi, qword [rbp - 0x9c]
cmp edx, 0xfb47b7d4
jno 0x180006f8f
xor dword [rbp - 0x16b], edx
mov ah, byte [0x180008959]
mov ecx, dword [rbp - 0x47]
mov r9, 0xfa88
mov dword [rbp - 0x155], esi
mov esi, 0xf076
mov rax, rdx
sub rdx, 0x80c0
sub esi, dword [rbp - 0xea]
mov qword [rbp - 0x14c], rdx
xor esi, dword [rbp - 0x129]
mov edi, dword [rbp - 0x12b]
mov dword [rbp - 0x16f], edi
mov esi, dword [0x18000895b]
mov ecx, dword [0x180008957]
mov rdi, r8
add dword [rbp - 0x116], ecx
mov r10, qword [rbp - 5]
mov dword [rbp - 0x167], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007016
and dword [rbp - 0x1bb], eax
mov ecx, dword [rbp - 0x13d]
inc qword [rsp]
cmp qword [rsp], 0xf541
jle 0x180007006
add rsp, 0x10
leave
pop rsi
pop rdi
lea rdx, [0x180006e0f]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x1800071bc
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [0x1800086af]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x180006e4a
push rbp
mov rbp, rsp
sub rsp, 0x38
add r10, 0xadd1
and eax, edx
mov r8, rdx
test dword [0x180008957], eax
jne 0x18000719e
mov rcx, r8
movzx edx, dh
mov ecx, 0xf4f7
and r9, qword [0x18000895b]
movzx edx, dh
mov qword [0x180008955], r8
and qword [rbp - 0x1d], rcx
sub dword [rbp - 0x20], edx
cmp eax, edx
je 0x18000719e
mov qword [rbp - 9], rcx
mov qword [rbp - 9], rax
add rax, qword [rbp - 0x28]
add r10, rcx
xor rcx, rax
mov eax, dword [rbp - 0x12]
mov rax, 0x558a
sub rcx, qword [rbp - 0x1e]
mov dword [rbp - 9], edx
add qword [rbp - 0x27], r9
mov rcx, qword [rbp - 0x13]
and eax, dword [rbp - 0x23]
mov ecx, dword [rbp - 6]
mov edx, ecx
mov qword [rbp - 0x22], rcx
mov dword [rbp - 0x21], ecx
add eax, 0xfbb6
xor r9, qword [rbp - 0x15]
mov eax, dword [rbp - 0x20]
sub rcx, rdx
or r8, rcx
mov qword [rbp - 0x1e], rdx
add eax, dword [rbp - 0x20]
mov edx, dword [rbp - 0x11]
mov rax, qword [0x180008955]
movzx ecx, ch
mov eax, dword [rbp - 0x29]
sub dword [rbp - 0x27], edx
mov dword [rbp - 0x1e], ecx
mov r11, qword [rbp - 2]
mov r11, qword [rbp - 0x13]
mov r8, r11
mov qword [rbp - 0xe], rcx
mov qword [rbp - 0x23], rax
mov qword [rbp - 0x23], r11
lea rcx, [rbp - 0x2d]
movzx edx, al
mov eax, dword [rbp - 0x17]
and rdx, qword [rbp - 1]
mov r9, qword [rbp - 0x12]
sub rcx, rdx
mov dword [rbp - 0xa], eax
mov dword [rbp - 0x13], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007190
mov rcx, qword [rbp - 0xa]
mov rdx, qword [rbp - 0x28]
add r9, qword [rbp - 0x1d]
mov qword [rbp - 0xd], rax
mov ecx, dword [rbp - 9]
mov dword [rbp - 0x1c], edx
mov edx, eax
movzx eax, al
xor r10, qword [0x180008957]
mov eax, dword [rbp - 0x2e]
mov edx, dword [rbp - 5]
mov eax, dword [0x180008952]
mov ecx, dword [rbp - 0x1a]
mov qword [rbp - 0x12], r8
inc qword [rsp]
mov edx, 0x5418
cmp edx, dword [rsp]
jl 0x180007157
add rsp, 0x10
leave
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x180006e14]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x18000733d
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push rbp
mov rbp, rsp
sub rsp, 0xd8
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007216
add qword [rbp - 0x27], r8
inc qword [rsp]
cmp qword [rsp], 0xe8b1
jle 0x18000720e
add rsp, 0x10
mov rdx, qword [rbp - 0x9e]
mov dword [rbp - 0x26], eax
mov qword [rbp - 0xaf], r8
lea r11, [rbp - 0x8c]
mov r9, r8
mov qword [rbp - 0x6c], rdx
sub edx, eax
mov ecx, dword [rbp - 0x4f]
mov ecx, edx
sub qword [rbp - 0x15], r9
add edx, eax
movzx eax, dh
mov byte [rbp - 0x9a], dl
mov rcx, qword [rbp - 0x50]
sub dword [rbp - 0x67], edx
mov edx, dword [rbp - 0x6d]
mov dx, word [0x180008959]
mov eax, dword [rbp - 0x33]
and eax, 0xabdd
movzx edx, word [rbp - 0x8a]
sub eax, 0xd0e9
cmp ecx, 0x910db8a0
je 0x1800072a1
movzx ecx, cl
and rcx, rax
mov qword [rbp - 0xb9], r8
mov rdx, qword [rbp - 0x6d]
mov qword [rbp - 0xbc], r8
movzx eax, al
movzx eax, ch
mov rdx, qword [rbp - 0xc5]
mov dword [rbp - 0xce], edx
mov rax, rdx
sub edx, 0xb9c6
mov dword [0x180008957], edx
mov edx, dword [rbp - 0x12]
xor r8, qword [rbp - 0x53]
mov rax, 0x803b
add qword [rbp - 0x3d], rcx
xor qword [rbp - 0xb1], rax
mov r9, 0xce3f
add eax, dword [rbp - 0xb5]
mov qword [rbp - 0xc5], r8
add dword [rbp - 0xb6], edx
movzx ecx, dl
mov eax, dword [rbp - 0x28]
add r9, rax
or dword [rbp - 0x9e], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000732e
mov qword [rbp - 0x1a], rdx
mov ecx, eax
movzx ecx, word [0x180008954]
mov qword [rbp - 0x2f], r8
movzx edx, dl
mov dword [rbp - 0x9b], eax
inc qword [rsp]
mov edx, 0x6f75
cmp edx, dword [rsp]
jl 0x180007310
add rsp, 0x10
leave
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x180007528
jmp 0x180007553
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x180007553
push rbp
mov rbp, rsp
sub rsp, 0x308
movzx edx, al
mov eax, ecx
mov qword [rbp - 0xb8], r9
sub dword [rbp - 0x81], ecx
movzx ecx, byte [rbp - 0x2b1]
cmp edx, ecx
jne 0x180007527
mov qword [rbp - 0x190], r9
cmp r11, 0x1a8a6504
jne 0x180007527
movzx eax, cx
add r10, qword [rbp - 0x166]
mov rdx, qword [rbp - 2]
mov r10, 0xab3e
mov dword [rbp - 0x2f8], edx
mov qword [rbp - 0x11], rax
or r9, 0x4c5b
sub rax, qword [rbp - 0x1d6]
xor rax, qword [rbp - 0x13e]
sub r11, 0x201a
mov ecx, edx
mov qword [rbp - 0x258], r8
mov eax, ecx
mov qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], rax
movzx eax, ah
lea rcx, [rbp - 0x132]
movzx edx, dh
movzx eax, word [rbp - 0x1d5]
mov qword [rbp - 0x2bb], r8
sub qword [rbp - 0x121], r11
sub edx, 0x82d3
mov dword [rbp - 0x26b], eax
mov qword [rbp - 0x6d], r8
xor dl, ch
mov ecx, 0xdd7b
mov r8, qword [rbp - 0x1d4]
mov qword [rbp - 0x14b], r8
movzx eax, cl
movzx edx, cl
add ecx, 0xebc3
mov ecx, eax
sub r11, 0xec03
mov r11, qword [rbp - 0xb0]
movzx ecx, al
sub eax, dword [rbp - 0x19b]
xor rcx, r8
mov eax, edx
mov dword [rbp - 0x19e], eax
sub r8, r9
sub rax, r11
mov dword [rbp - 0xda], eax
mov rdx, qword [rbp - 0x7b]
xor dword [rbp - 0x1d6], edx
mov qword [rbp - 0x61], r10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800074bf
and ecx, dword [rbp - 0x121]
mov eax, dword [rbp - 0x25b]
mov edx, eax
mov edx, dword [rbp - 0x2e3]
nop
inc qword [rsp]
cmp qword [rsp], 0x347c
jle 0x1800074a6
add rsp, 0x10
movzx eax, dh
mov r10, qword [rbp - 0xd]
mov eax, dword [rbp - 0x2ce]
or eax, dword [rbp - 2]
mov rdx, 0xebb1
sub dword [0x180008955], ecx
xor rcx, qword [rbp - 0xb6]
mov dword [0x180008955], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007519
mov rdx, 0x5b7b
sub eax, dword [rbp - 0x2fe]
mov dword [rbp - 0x12], ecx
inc qword [rsp]
mov eax, 0x9a8a
cmp eax, dword [rsp]
jl 0x180007505
add rsp, 0x10
leave
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [0x1800086af]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x180007359
jmp 0x18000719f
mov qword [0x180008205], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x1800071ae