Function at 0x18000720f
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x18000742b
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push rbp
mov rbp, rsp
sub rsp, 0x248
lea rcx, [rbp - 0xc2]
add rax, r10
mov eax, dword [0x180008b92]
mov edx, eax
or r8, qword [rbp - 0x1ed]
mov r9, qword [rbp - 0xcc]
mov edx, dword [rbp - 0xb2]
cmp r11, rax
je 0x180007281
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007360
or qword [rbp - 0x23f], r8
mov r8, qword [rbp - 0x1ee]
mov ecx, dword [rbp - 0x38]
xor ecx, eax
mov dword [0x180008b95], ecx
mov rdx, qword [rbp - 0x42]
mov rax, qword [rbp - 0x1c1]
and qword [rbp - 0x34], r10
mov rdx, r11
and r9, r10
mov edx, dword [rbp - 0x15]
mov dword [rbp - 0xfe], ecx
mov rcx, qword [rbp - 0x1db]
xor qword [rbp - 9], rax
mov r9, qword [rbp - 0xd3]
xor dword [rbp - 0xb5], ecx
movzx edx, byte [rbp - 0x3d]
add eax, 0x4edc
lea r11, [rbp - 0x122]
sub ecx, dword [rbp - 0xe7]
mov edx, dword [rbp - 0x20c]
sub dx, word [rbp - 0xb]
mov ecx, eax
sub qword [rbp - 0x233], rcx
or ecx, dword [rbp - 0x23f]
mov qword [rbp - 0x1f7], r8
and dword [0x180008b93], ecx
movzx edx, cx
mov dword [rbp - 0x115], eax
mov edx, dword [rbp - 0x18d]
mov rcx, r8
mov ecx, dword [rbp - 0x88]
add dword [rbp - 0xae], edx
sub qword [rbp - 0x109], rcx
mov dword [str.IFiDRy2W4BXUWltsjNjt72SnvT0oHvhr3VKSdcnrH0EOa416uIy55h9dbDVR164191c2xTEjfpspCo], eax
mov qword [0x180008b91], r10
sub qword [rbp - 0x22f], rdx
mov ecx, dword [rbp - 0xe2]
inc qword [rsp]
mov eax, 0x5c75
cmp eax, dword [rsp]
jl 0x180007292
add rsp, 0x10
mov rcx, 0x1365
mov r9, r11
lea r10, [rbp - 0x16c]
mov rdx, rax
mov dword [rbp - 0xa7], ecx
mov eax, dword [rbp - 0xd0]
xor eax, dword [rbp - 0x1c7]
mov dword [0x180008b99], ecx
mov dx, word [rbp - 0x207]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007404
mov r8, rcx
lea r11, [rbp - 0x26]
xor rdx, r8
mov eax, dword [0x180008b99]
mov qword [rbp - 0x122], rdx
mov r9, rcx
mov eax, dword [rbp - 0x36]
mov r11, rdx
mov byte [rbp - 0x12e], ch
lea rdx, [rbp - 0x43]
mov rax, r8
add r8, r9
add ax, 0x7ebd
mov qword [rbp - 0x112], r9
movzx edx, ch
add rcx, r10
mov edx, 0x5525
lea r11, [rbp - 0x224]
inc qword [rsp]
cmp qword [rsp], 0xcefb
jle 0x1800073b3
add rsp, 0x10
leave
lea rdx, [0x1800071fa]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x18000765a
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [0x1800088c1]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x180007235
push rbp
mov rbp, rsp
sub rsp, 0x4b8
mov qword [rbp - 0x403], rcx
add rax, r8
add qword [rbp - 0x216], r11
mov edx, dword [rbp - 0x1c9]
mov dword [rbp - 0x3f9], edx
or edx, dword [rbp - 0x203]
or ecx, 0x107d
mov ecx, dword [rbp - 0x194]
and qword [rbp - 0x2f8], r10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800075ab
sub dword [rbp - 0x3c2], edx
or rdx, qword [0x180008b92]
mov dword [rbp - 0x3a6], edx
and r11, r9
mov qword [0x180008b91], rdx
mov edx, dword [0x180008b8f]
mov qword [rbp - 0x272], rcx
and r10, rax
mov dword [rbp - 0x79], ecx
mov edx, dword [rbp - 0x19e]
add dword [rbp - 0x2e9], ecx
mov r10, qword [rbp - 0x1e1]
sub ecx, 0x6860
sub r10, rax
mov ecx, edx
mov qword [rbp - 0x3ed], rdx
add rcx, qword [rbp - 0x5a]
and qword [rbp - 0x213], rdx
mov eax, edx
mov r10, qword [rbp - 0x86]
xor ecx, edx
mov qword [rbp - 0x36c], r11
mov dword [0x180008b98], ecx
add r10, rdx
mov ecx, edx
mov dword [rbp - 0x1d7], edx
mov edx, dword [rbp - 0x42d]
mov ecx, dword [rbp - 0x23f]
mov qword [rbp - 0x426], r9
mov rcx, qword [rbp - 0x428]
mov dword [rbp - 0x81], eax
add eax, 0xe01f
mov rcx, qword [rbp - 0x317]
mov qword [0x180008b8e], r8
or eax, 0x6254
xor dword [rbp - 0x432], edx
add rdx, 0xf471
mov rax, r9
mov dword [rbp - 0x476], eax
mov edx, dword [0x180008b99]
movzx edx, cx
and ecx, edx
add r10, qword [rbp - 0x1e8]
add eax, ecx
mov qword [rbp - 0x11d], r8
sub r10, rax
mov r9, 0x211
mov rax, qword [rbp - 0x1b3]
movzx ecx, ah
sub eax, dword [0x180008b91]
inc qword [rsp]
mov r10, 0x612
cmp qword [rsp], r10
jle 0x1800074a1
add rsp, 0x10
movzx edx, dh
cmp ecx, 0x36f69fa8
jae 0x18000763c
mov rcx, qword [0x180008b8d]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000762e
mov dword [rbp - 0x31f], ecx
mov eax, 0x6f15
mov ecx, dword [rbp - 0x363]
mov r9, r10
mov ecx, dword [rbp - 0x347]
lea rcx, [rbp - 0x291]
mov rax, qword [rbp - 0x3fb]
sub edx, 0xaf32
mov ecx, dword [rbp - 0x121]
mov dword [rbp - 0x33c], edx
add rdx, qword [rbp - 0x123]
movzx ecx, dl
add edx, 0x7d3c
inc qword [rsp]
mov eax, 0xb2b1
cmp eax, dword [rsp]
jl 0x1800075e0
add rsp, 0x10
leave
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x1800071ff]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x180007844
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push rbp
mov rbp, rsp
sub rsp, 0x508
mov qword [rbp - 0x118], rax
cmp rax, r10
jo 0x1800077b8
sub dword [rbp - 0x83], edx
sub edx, dword [rbp - 0x4c7]
mov edx, dword [rbp - 0xd2]
add edx, dword [rbp - 0x4e0]
movzx edx, al
mov eax, dword [rbp - 0x4f7]
sub eax, edx
xor r9, rax
movzx eax, ch
mov eax, ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000776e
mov qword [rbp - 0x4da], rdx
movzx ecx, ah
or rdx, 0x2ed5
add edx, dword [0x180008b94]
mov dword [rbp - 0x449], ecx
mov edx, dword [rbp - 0x495]
and dword [str.IFiDRy2W4BXUWltsjNjt72SnvT0oHvhr3VKSdcnrH0EOa416uIy55h9dbDVR164191c2xTEjfpspCo], edx
mov dword [rbp - 0x121], ecx
mov qword [rbp - 0x44a], rax
mov qword [rbp - 0x4d2], r11
mov ecx, eax
mov qword [rbp - 0x4be], r9
xor r11, qword [rbp - 0x3bc]
mov edx, dword [rbp - 0x5b]
mov r8, qword [rbp - 0x3f5]
lea r8, [0x180008b8e]
add rdx, 0xd977
and r10, qword [rbp - 0x292]
add ecx, dword [rbp - 0xa4]
sub ecx, eax
mov dword [rbp - 0x2b7], eax
mov ecx, dword [rbp - 0x36b]
inc qword [rsp]
cmp qword [rsp], 0x5352
jle 0x1800076ea
add rsp, 0x10
mov rdx, qword [rbp - 0x2ad]
mov r8, qword [rbp - 0x3d8]
add qword [rbp - 0x34c], r10
or r10, qword [rbp - 0x2bb]
and r8, qword [rbp - 0xeb]
mov qword [rbp - 0x489], r10
sub r11, 0xddea
mov qword [rbp - 0xc5], rcx
add r11, 0xf51c
mov qword [rbp - 0x483], rcx
lea rdx, [0x180008b92]
mov r10, qword [rbp - 0x31c]
mov qword [rbp - 0x1d0], r8
mov dword [rbp - 0x132], eax
add edx, 0x97ac
mov ecx, 0x90fd
add eax, ecx
cmp edx, 0x81f14678
jns 0x180007843
mov edx, dword [rbp - 0x392]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007835
mov qword [rbp - 0xd2], r9
add r9, rdx
mov eax, edx
mov qword [rbp - 0x23c], r9
sub r8, qword [rbp - 0x4ea]
xor r8, r11
or qword [rbp - 0x15], rax
xor ecx, dword [rbp - 0x3b4]
inc qword [rsp]
cmp qword [rsp], 0x86e
jle 0x18000780a
add rsp, 0x10
leave
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x180007a3b
jmp 0x180007a66
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x180007a66
push r15
push rbp
mov rbp, rsp
sub rsp, 0x478
mov r10, qword [rbp - 0x273]
cmp edx, dword [0x180008b96]
jb 0x18000789d
mov qword [rbp - 0x2bf], r9
or r10, qword [rbp - 0x354]
movzx eax, dl
add edx, dword [rbp - 0x9c]
mov r8, rcx
lea rcx, [rbp - 0xd6]
mov edx, dword [rbp - 0x146]
mov edx, 0x55c6
sub edx, dword [rbp - 0x3b]
sub dword [rbp - 0x43e], ecx
sub qword [rbp - 0x18d], rax
add edx, 0x7b37
mov qword [rbp - 0x146], r15
and eax, dword [rbp - 0x7a]
add r15, 0x4116
xor qword [rbp - 0x2eb], r8
sub eax, 0xa54c
mov qword [rbp - 0x43d], r9
add edx, dword [rbp - 0xcd]
sub r11, 0x7c83
sub edx, dword [rbp - 0x130]
or dword [rbp - 0xcc], ecx
lea r8, [rbp - 0x18]
movzx eax, al
mov r10, qword [rbp - 0x340]
mov ecx, dword [rbp - 0x3ed]
and dword [rbp - 0x198], ecx
add eax, dword [0x180008b94]
mov ch, 0x22
mov ecx, eax
mov edx, dword [rbp - 0x19c]
mov qword [rbp - 0x268], r8
mov qword [rbp - 0x72], rcx
and qword [rbp - 0x33b], rdx
and rax, qword [rbp - 0x1a1]
mov rax, qword [rbp - 0x7f]
add edx, 0x934f
mov edx, dword [rbp - 0x63]
movzx edx, dl
mov rdx, qword [0x180008b8e]
and r8, qword [rbp - 0x1aa]
sub byte [rbp - 0x3ff], ch
mov r8, qword [rbp - 0x11c]
mov edx, dword [0x180008b97]
add eax, 0x6883
add eax, dword [rbp - 0xc1]
mov qword [rbp - 0x3cc], r11
mov edx, eax
mov qword [rbp - 0x355], r15
mov dword [rbp - 0x188], ecx
add r15, 0x1e3f
mov dword [rbp - 0x1a2], ecx
and qword [rbp - 0xd], rcx
mov ecx, dword [rbp - 0x29c]
mov qword [rbp - 0x23c], r8
xor qword [rbp - 0x35c], r10
or edx, dword [0x180008b96]
mov ecx, dword [rbp - 0x2fb]
mov dx, cx
cmp r9, r10
jns 0x180007a38
mov rcx, qword [rbp - 0x18d]
mov rcx, qword [rbp - 0x285]
mov eax, 0xacb9
mov qword [rbp - 0x2d4], rcx
mov dword [0x180008b90], eax
mov eax, dword [rbp - 0x174]
mov eax, dword [rbp - 0x175]
mov r9, r15
mov r15, qword [rbp - 0x37d]
mov r8, r15
mov qword [rbp - 0x30c], r10
mov edx, ecx
mov dword [rbp - 0x460], eax
sub dword [rbp - 0x1be], ecx
leave
pop r15
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [0x1800088c1]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x180007860
jmp 0x18000763d
mov qword [0x180008417], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x18000764c