Function at 0x180006f50
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x18000711e
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push r15
push rdi
push rbx
push r14
push rbp
mov rbp, rsp
sub rsp, 0xb8
sub qword [rbp - 0x9c], r8
mov r15, qword [rbp - 0x98]
sub r11, qword [rbp - 0x2b]
sub ebx, dword [0x180008b68]
movzx ecx, cl
mov edx, dword [rbp - 0x8a]
mov qword [0x180008b6d], rdi
sub edi, dword [rbp - 0xa9]
mov eax, dword [rbp - 0x73]
mov eax, dword [0x180008b66]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007012
mov qword [rbp - 0x4c], rdi
mov rax, qword [rbp - 0x68]
add qword [rbp - 0x96], rdi
or dword [rbp - 0x21], eax
sub r10, qword [rbp - 0x38]
mov qword [rbp - 0x6b], r14
add qword [rbp - 0xa7], rbx
mov di, word [rbp - 0xaf]
sub qword [rbp - 0x13], r9
inc qword [rsp]
mov rdi, 0xe562
cmp qword [rsp], rdi
jle 0x180006fe2
add rsp, 0x10
mov eax, ebx
mov qword [rbp - 0x60], r15
xor eax, 0xbeaf
mov qword [rbp - 0x56], rdx
mov qword [rbp - 0x4b], r10
cmp rdx, qword [0x180008b65]
je 0x180007049
mov ecx, dword [rbp - 0x28]
and qword [rbp - 0x97], r8
movzx edx, bl
mov rdx, r8
sub rbx, qword [rbp - 0x8f]
mov eax, ebx
movzx edx, al
add dword [0x180008b70], eax
movzx eax, bh
add r8, qword [rbp - 0x65]
cmp r15, rcx
je 0x1800070ff
mov qword [rbp - 0x70], rdi
sub edx, 0x96e5
sub ecx, dword [rbp - 0x2b]
mov qword [rbp - 0x35], r8
add r14, r10
and edi, 0x8e93
and qword [rbp - 0x88], rbx
sub dword [rbp - 0xa8], eax
mov rbx, qword [0x180008b6d]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800070ee
add edx, 0xe1dd
sub edx, dword [rbp - 0x6a]
or dword [0x180008b6f], eax
mov rbx, r10
mov dword [rbp - 0x1e], ecx
mov edx, dword [rbp - 0xa2]
sub r11, 0xa230
mov dword [rbp - 0xa], edi
add ecx, 0xb705
mov dword [rbp - 0xaf], edx
mov eax, edx
mov r9, qword [rbp - 0x56]
mov eax, dword [rbp - 0xa8]
inc qword [rsp]
mov r10, 0x2375
cmp qword [rsp], r10
jle 0x1800070ad
add rsp, 0x10
leave
pop r14
pop rbx
pop rdi
pop r15
lea rdx, [0x180006f3b]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x1800072bf
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [0x180008898]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x180006f76
push rbp
mov rbp, rsp
sub rsp, 0x68
mov rdx, 0x21e3
mov rax, qword [rbp - 0x35]
add edx, dword [rbp - 0xb]
xor rcx, r10
or r9, rcx
mov r10, qword [rbp - 0x16]
movzx edx, byte [rbp - 0x3e]
mov qword [rbp - 0x5c], rcx
mov r10, qword [rbp - 0x4a]
and eax, dword [rbp - 0x51]
mov cx, word [rbp - 0x2a]
sub rax, 0xe7e1
mov qword [rbp - 0x2a], rcx
mov edx, dword [rbp - 0x18]
mov edx, eax
add edx, ecx
movzx edx, al
mov eax, dword [rbp - 0x21]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000719e
inc qword [rsp]
cmp qword [rsp], 0x9b43
jle 0x18000719a
add rsp, 0x10
mov r8, qword [rbp - 0x2c]
and edx, ecx
add qword [rbp - 0x35], rcx
mov dword [0x180008b6d], eax
mov eax, dword [rbp - 0x45]
mov r9, qword [rbp - 0x1d]
mov eax, dword [rbp - 0x4d]
cmp r9, 0xffffffffb52408f9
je 0x1800072a1
mov r10, rdx
mov dword [0x180008b67], eax
mov r8, rdx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000723c
mov rdx, qword [rbp - 7]
sub dword [rbp - 0x44], eax
sub r8, r10
mov r11, 0xe890
mov eax, dword [rbp - 0x36]
or ecx, dword [0x180008b73]
mov dword [0x180008b68], edx
mov dword [rbp - 0x49], eax
mov dword [rbp - 0xe], eax
add edx, dword [rbp - 0x3a]
lea r8, [rbp - 0xb]
mov dh, al
mov dword [rbp - 0x51], edx
add rax, qword [rbp - 0x53]
sub qword [rbp - 0x14], r9
mov ecx, dword [rbp - 0x18]
xor r8, rcx
sub rdx, 0x2d2e
mov r11, qword [rbp - 0x12]
inc qword [rsp]
mov ecx, 0xbaee
cmp ecx, dword [rsp]
jl 0x1800071ed
add rsp, 0x10
mov qword [rbp - 0x17], r9
mov dword [rbp - 0x5c], eax
cmp rax, qword [0x180008b6d]
jae 0x1800072a1
or eax, edx
lea rcx, [rbp - 0x17]
movzx ecx, dh
mov edx, dword [0x180008b6b]
mov r8, 0x8a69
mov ecx, dword [0x180008b6e]
add r9, qword [rbp - 0x52]
mov r10, qword [rbp - 0x4c]
mov rax, qword [rbp - 0x38]
mov dword [0x180008b72], edx
mov rax, r8
sub edx, 0x8957
and qword [rbp - 0x22], r8
add r9, qword [rbp - 0x3c]
sub r8, qword [rbp - 4]
mov rax, qword [rbp - 0x2d]
leave
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x180006f40]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x180007485
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push rbx
push r14
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x378
mov ebx, dword [rbp - 0xff]
mov qword [rbp - 0xd7], r9
or rax, qword [rbp - 0xc4]
sub r14, qword [rbp - 0x5f]
mov dword [rbp - 0x4d], edi
mov dword [rbp - 0x23], ecx
movzx edx, cx
mov dword [rbp - 0x1f6], ebx
mov ebx, dword [rbp - 0x100]
mov dword [rbp - 0x263], ecx
mov eax, dword [rbp - 0x243]
mov ecx, edi
sub al, byte [rbp - 0x257]
mov eax, ebx
and qword [rbp - 0x293], r8
add ecx, dword [rbp - 0xe8]
mov r8, qword [rbp - 0x29b]
xor ebx, dword [rbp - 0x297]
add dword [rbp - 0x362], edx
mov edi, dword [rbp - 0xd6]
or r14, qword [rbp - 0x2e8]
mov qword [rbp - 0x178], rax
add rax, 0xa28d
sub edi, ebx
sub rdx, r9
sub r11, rdi
test dword [0x180008b73], ebx
je 0x180007480
add rdx, qword [rbp - 0x2c7]
mov dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], ecx
mov qword [rbp - 0x45], r10
add dword [rbp - 0x172], edi
mov r10, 0x93f1
mov qword [rbp - 0x102], r8
mov rbx, 0xe10
mov rax, qword [rbp - 0xd0]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007449
add qword [rbp - 0x7f], r8
mov ebx, dword [rbp - 0xe0]
mov rbx, qword [rbp - 0x34b]
mov qword [rbp - 0x2a8], r11
add ebx, 0x9bc4
mov ebx, dword [rbp - 0x235]
mov qword [rbp - 0x255], r8
and r9, rdx
add edx, dword [rbp - 0x1ce]
or dword [rbp - 0x36], edi
mov edx, dword [rbp - 0x340]
mov qword [rbp - 0xa1], r9
mov dword [rbp - 0xc], edi
mov ecx, dword [0x180008b69]
mov dword [rbp - 0x2ac], ebx
and eax, dword [rbp - 0xcc]
mov dword [0x180008b6e], ebx
and r14, qword [rbp - 0x45]
sub ecx, ebx
add r10, 0x616d
inc qword [rsp]
mov r9, 0x52ed
cmp qword [rsp], r9
jle 0x1800073d9
add rsp, 0x10
add r14, r9
mov ecx, 0xb5c2
or qword [rbp - 0x33c], rcx
mov dword [rbp - 0x12a], eax
mov dword [0x180008b68], ecx
mov qword [rbp - 0x32e], r10
sub qword [rbp - 0x3d], r9
leave
pop rdi
pop r14
pop rbx
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x18000760a
jmp 0x180007635
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x180007635
push r14
push rsi
push r12
push rbp
mov rbp, rsp
sub rsp, 0xb8
mov edx, eax
mov rax, r8
mov r12, qword [rbp - 0x86]
add edx, ecx
cmp esi, 0xb3d33839
jne 0x180007505
mov byte [0x180008b69], cl
sub r9, rcx
add eax, esi
movzx esi, word [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
mov word [rbp - 0xad], cx
mov ecx, eax
mov edx, eax
and r11, rsi
cmp ecx, dword [0x180008b6f]
je 0x18000753c
sub eax, dword [0x180008b72]
add rdx, 0x1744
add dword [rbp - 0x18], eax
sub qword [rbp - 0x85], rdx
mov esi, ecx
sub edx, eax
and rsi, 0xbd9a
mov dword [rbp - 0xa3], eax
mov r12, qword [rbp - 0xd]
add rcx, rdx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180007591
movzx edx, dl
mov r9, qword [rbp - 0x87]
mov eax, dword [rbp - 0x49]
xor dword [rbp - 0xae], esi
lea r10, [rbp - 0x75]
mov dword [rbp - 0xad], ecx
sub dword [rbp - 0x46], eax
mov dword [rbp - 0x31], esi
movzx ecx, ah
movzx edx, cx
sub edx, dword [rbp - 0x52]
mov r14, qword [0x180008b73]
sub r9, rsi
lea r12, [rbp - 0x63]
mov ecx, dword [rbp - 0x69]
sub ecx, dword [rbp - 0x1f]
inc qword [rsp]
cmp qword [rsp], 0x8e7c
jle 0x18000754d
add rsp, 0x10
lea r9, [rbp - 0x16]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800075f3
mov qword [rbp - 0x7d], r10
mov eax, 0x75cb
mov qword [rbp - 0x78], r11
mov r14, qword [rbp - 0x87]
movzx edx, al
mov qword [rbp - 0x82], rax
and qword [rbp - 0x88], r11
mov r8, qword [rbp - 0x52]
add rcx, 0x1743
add qword [rbp - 0x54], r8
mov ecx, 0xa852
sub esi, dword [rbp - 0x78]
add eax, esi
inc qword [rsp]
mov r12, 0xf918
cmp qword [rsp], r12
jle 0x1800075b1
add rsp, 0x10
leave
pop r12
pop rsi
pop r14
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [0x180008898]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x1800074a1
jmp 0x1800072a2
mov qword [0x1800083ee], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x1800072b1