Function at 0x140006dc6
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x140006fac
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push rbp
mov rbp, rsp
sub rsp, 0x328
movzx edx, byte [rbp - 0x1ef]
mov r10, 0x3592
sub rax, rcx
mov eax, 0x1fbf
movzx ecx, ax
xor rcx, 0x244c
mov ecx, dword [rbp - 0x9b]
movzx edx, al
movzx eax, dx
movzx ecx, ch
and r11, 0xcc32
mov ecx, eax
cmp r11, 0xffffffffcffcd83f
jns 0x140006f93
mov ecx, dword [rbp - 0x1a9]
movzx edx, word [rbp - 0x68]
add qword [rbp - 0x23], r8
movzx ecx, cl
mov r10, r8
add ecx, eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006e95
mov cx, word [rbp - 0x264]
mov qword [rbp - 0x271], r8
and eax, edx
mov r9, r10
add edx, dword [rbp - 0x1c4]
mov ecx, eax
inc qword [rsp]
mov r9, 0xb50f
cmp qword [rsp], r9
jle 0x140006e76
add rsp, 0x10
add eax, dword [rbp - 0x170]
or qword [rbp - 0x1ae], rcx
sub qword [rbp - 0x10b], r10
sub ecx, dword [rbp - 0x110]
mov edx, 0xa8cb
mov eax, dword [0x140009a38]
sub qword [rbp - 0x25b], r8
mov dword [0x140009a33], ecx
mov r8, qword [rbp - 0x193]
mov r8, qword [rbp - 0x183]
sub qword [rbp - 0x12d], r8
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006f81
mov dword [0x140009a33], edx
add eax, dword [rbp - 0x25f]
mov qword [rbp - 0x30d], rdx
add ecx, eax
lea edx, [rbp - 0xd4]
mov rcx, qword [rbp - 0x163]
mov qword [rbp - 0x263], r9
mov r10, qword [rbp - 0x1b8]
add r9, qword [rbp - 0x289]
mov edx, 0x367e
add r10, qword [rbp - 0x2ee]
mov r10, qword [rbp - 0x213]
add r9, qword [rbp - 0x8e]
mov qword [rbp - 0x260], rax
mov dword [rbp - 0x6c], eax
sub dword [rbp - 0x2fb], ecx
or r11, qword [rbp - 0x79]
add dword [rbp - 0x2f0], ecx
or rcx, qword [rbp - 0x300]
mov rax, qword [rbp - 0x2b6]
movzx ecx, al
movzx eax, dl
inc qword [rsp]
mov ecx, 0x7ed4
cmp ecx, dword [rsp]
jl 0x140006efe
add rsp, 0x10
leave
lea rdx, [0x140006db1]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x1400071a1
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [str.GGGGGGGG]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x140006dec
push rbx
push r14
push r15
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x398
or edi, dword [rbp - 0x37d]
sub rdx, r14
mov r9, qword [rbp - 0xd5]
mov rax, qword [rbp - 0xbe]
and dword [rbp - 0x125], ebx
mov r14, r15
mov r11, qword [rbp - 0x35b]
mov qword [rbp - 0x33c], r10
mov qword [rbp - 0x11f], r11
movzx edi, ah
mov qword [rbp - 0x27e], rdx
mov qword [rbp - 0xeb], rdi
movzx ecx, al
add rcx, rdi
add r11, qword [0x140009a36]
and r10, qword [rbp - 0x2de]
mov r8, r9
sub r9, 0x1af6
and dword [rbp - 0x3e], edx
sub eax, dword [rbp - 0x2b5]
mov r11, qword [rbp - 0x23d]
lea rdi, [rbp - 0xe2]
mov rdx, 0x6f76
mov eax, ecx
mov ah, bl
mov ecx, eax
xor r11, r15
add rbx, r9
mov qword [rbp - 0x247], r8
sub r14, 0x3b4c
mov r8, 0xfe7c
mov qword [rbp - 0x34], r10
mov edx, eax
mov qword [rbp - 0x151], rdi
movzx eax, ch
mov r9, r14
add qword [rbp - 0x24b], rax
mov rdx, 0xaa07
add edi, ecx
and r8, qword [rbp - 0x10d]
sub ecx, dword [rbp - 0x176]
mov edi, dword [rbp - 0x193]
mov edi, eax
sub r9, rdx
mov rbx, qword [rbp - 0x160]
xor ebx, dword [0x140009a39]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1400070e4
sub eax, dword [rbp - 0x286]
inc qword [rsp]
mov ecx, 0x4a01
cmp ecx, dword [rsp]
jl 0x1400070da
add rsp, 0x10
mov ebx, 0xe14
and rbx, r8
or r9, qword [rbp - 0x20d]
mov dword [rbp - 0x374], edi
sub dword [rbp - 0x65], ebx
lea r10, [rbp - 0x23a]
mov eax, dword [rbp - 0x2e9]
sub qword [rbp - 0x11d], rdi
movzx edi, byte [rbp - 0x16c]
movzx eax, dl
mov qword [0x140009a30], r14
sub qword [0x140009a33], rax
mov edx, dword [rbp - 0x235]
add r11, qword [rbp - 0x116]
movzx edx, al
mov qword [rbp - 0x354], rbx
mov eax, dword [rbp - 0xab]
mov ecx, ebx
mov ebx, 0x40a
mov edx, dword [rbp - 0xe7]
mov rdi, r14
add qword [str.fLlHJ2OTn6cPl9bBcMl4iQgpggh90ribDYGrFBdmT4JQSXUGoBfghBlTU5eCgMFJ3Hoy6jW0], r11
mov r10, qword [rbp - 0x221]
mov edx, edi
mov rax, qword [rbp - 0x2be]
mov rcx, r9
leave
pop rdi
pop r15
pop r14
pop rbx
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x140006db6]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x140007323
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push rbp
mov rbp, rsp
sub rsp, 0xf8
mov qword [rbp - 0x31], r8
add ecx, edx
mov r11, rax
mov r9, rdx
lea r10, [rbp - 0xc7]
mov eax, dword [rbp - 0x45]
movzx eax, al
mov r8, rdx
mov r11, r10
mov ecx, edx
movzx eax, dl
mov eax, dword [rbp - 6]
or dword [rbp - 0x5e], ecx
movzx edx, ax
lea rax, [rbp - 0x29]
xor r11, qword [rbp - 0x35]
and r9, 0x2170
mov r8, rax
mov qword [rbp - 0x57], r9
mov dword [rbp - 0x92], eax
add ecx, dword [rbp - 0x28]
mov eax, dword [rbp - 0xc]
sub qword [rbp - 0xc9], r10
cmp rcx, qword [0x140009a31]
jne 0x140007258
add ecx, dword [rbp - 0x25]
xor eax, dword [rbp - 0xcd]
mov qword [rbp - 0x44], rdx
add r8, 0x298d
sub r10, qword [rbp - 0x7f]
mov rcx, 0x7171
test eax, 0x949269c6
jne 0x140007322
mov rax, qword [rbp - 0xdb]
mov r11, qword [rbp - 0xe1]
movzx ecx, byte [rbp - 0x29]
mov rdx, qword [rbp - 8]
mov r10, 0xf7ea
sub r8, qword [rbp - 0x8e]
mov qword [rbp - 0x41], r11
lea r11, [rbp - 0x97]
add qword [rbp - 0xe4], r10
mov dword [rbp - 0x93], eax
sub edx, dword [rbp - 0xe0]
sub rcx, r8
mov dword [rbp - 0x53], eax
mov qword [0x140009a30], rcx
mov r8, r9
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007314
or qword [rbp - 0x69], r10
mov eax, dword [rbp - 0xa8]
mov rcx, r11
mov qword [rbp - 0xd1], rcx
sub r10, rcx
mov dword [rbp - 0xe6], edx
movzx eax, ah
mov ecx, dword [0x140009a38]
mov rcx, qword [0x140009a2c]
mov rcx, qword [rbp - 0xed]
mov dword [rbp - 0xdf], edx
lea r10, [rbp - 0x2c]
mov r9, qword [rbp - 0x46]
inc qword [rsp]
cmp qword [rsp], 0x3b6c
jle 0x1400072ce
add rsp, 0x10
leave
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x1400074a7
jmp 0x1400074d2
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x1400074d2
push rdi
push r12
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x18
sub qword [rbp - 0xe], rdx
mov ebx, edx
mov eax, dword [0x140009a3a]
mov qword [rbp - 0xe], rcx
movzx eax, bl
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007429
lea ebx, [0x140009a33]
mov rdx, r9
mov ebx, dword [0x140009a39]
mov ebx, eax
mov qword [rbp - 0xb], r9
movzx ebx, al
mov edi, edx
mov qword [rbp - 0xb], r12
movzx eax, byte [rbp - 1]
movzx ebx, ah
mov edi, dword [0x140009a32]
and eax, 0xd3f6
mov dword [rbp - 0xf], edi
mov r9, 0xd1c2
and edi, ecx
xor eax, edx
mov r10, qword [rbp - 0xa]
xor dword [rbp - 5], edi
mov dword [rbp - 0xb], edi
mov r10, rbx
sub edi, dword [rbp - 0xc]
lea r8, [rbp - 8]
mov rcx, qword [rbp - 1]
mov ecx, ebx
mov edi, dword [rbp - 2]
mov dword [rbp - 0xf], edi
movzx edx, byte [rbp - 5]
sub rdi, 0xef28
xor qword [rbp - 0xf], rdx
mov eax, dword [rbp - 2]
lea edx, [rbp - 3]
mov r11, qword [rbp - 5]
mov bh, byte [rbp - 5]
mov qword [rbp - 0xc], r8
movzx edi, bl
movzx edi, ch
or edi, ecx
mov rdx, qword [rbp - 5]
mov r8, qword [rbp - 6]
sub rcx, 0xa9f6
inc qword [rsp]
mov ecx, 0xacbc
cmp ecx, dword [rsp]
jl 0x140007390
add rsp, 0x10
lea rax, [0x140009a32]
mov r12, 0x89d
mov rax, qword [0x140009a35]
mov eax, 0x5fc7
mov dword [rbp - 0xe], edx
and r11, r12
add rdi, qword [rbp - 4]
mov edi, 0x702c
xor ebx, dword [rbp - 0xd]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007491
and r9, qword [rbp - 9]
mov edx, dword [rbp - 0xe]
mov rdi, qword [rbp - 4]
xor rbx, rax
mov dword [rbp - 5], ecx
mov byte [rbp - 0xb], bl
mov qword [rbp - 0xa], r10
inc qword [rsp]
mov r8, 0xcfa8
cmp qword [rsp], r8
jle 0x140007475
add rsp, 0x10
leave
pop rbx
pop r12
pop rdi
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [str.GGGGGGGG]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x14000733f
jmp 0x140007184
mov qword [0x1400092f0], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x140007193