Function at 0x140006bf8
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x140006db8
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push rsi
push r12
push r13
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x268
mov rcx, qword [rbp - 0xaa]
or edx, ecx
mov edx, dword [rbp - 0xd3]
lea rdx, [rbp - 0xeb]
add esi, 0x688f
mov rbx, qword [rbp - 0x10b]
mov r12, r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006cf8
mov qword [rbp - 0x10d], rdx
lea r10, [rbp - 0xcd]
and dword [rbp - 0x166], eax
mov rcx, rax
mov eax, edx
mov qword [rbp - 0x4b], rax
mov r13, qword [rbp - 0x230]
mov r9, qword [rbp - 0x210]
mov ebx, esi
mov r10, qword [rbp - 0x10c]
or qword [rbp - 0x1c2], r11
mov qword [rbp - 0x39], rdx
mov dword [rbp - 0x166], eax
mov r13, qword [rbp - 0xae]
or rdx, qword [0x140009a38]
sub ecx, dword [rbp - 0x99]
or qword [rbp - 0xa4], rcx
movzx ebx, byte [rbp - 0x19a]
lea r13, [rbp - 0x12b]
movzx eax, dh
lea esi, [rbp - 0xc7]
mov qword [rbp - 0x71], rbx
inc qword [rsp]
mov ebx, 0xe07
cmp ebx, dword [rsp]
jl 0x140006c79
add rsp, 0x10
movzx edx, cl
mov esi, dword [rbp - 0x21e]
mov dword [rbp - 8], ebx
mov edx, dword [rbp - 0x84]
movzx ebx, ch
cmp rbx, qword [str.JwiAn37gx2fv8upnv3P9nne8dPy50ZKZ2kdBKeSpwMkJIv3ELFbQLq8SKRgwaeTn15mFv5LwpqoogI]
jne 0x140006d99
mov r13, r9
lea r11, [rbp - 0x210]
mov dword [rbp - 0x6d], eax
sub r8, r9
mov ebx, dword [rbp - 0x228]
xor ecx, 0x1836
lea rdx, [rbp - 0x28]
mov dword [rbp - 0x1c], edx
mov r10, qword [rbp - 0x192]
sub qword [rbp - 0x175], rbx
add eax, dword [rbp - 0x4d]
mov esi, 0x3d1d
and qword [rbp - 0xb3], rax
xor rcx, qword [rbp - 0x5d]
mov dword [rbp - 0xaf], ecx
mov r13, qword [rbp - 0x1db]
mov dword [rbp - 0x121], eax
sub qword [rbp - 0x25d], r8
mov r9, qword [rbp - 0x11a]
add rax, 0x68c6
mov dword [rbp - 0xae], esi
leave
pop rbx
pop r13
pop r12
pop rsi
lea rdx, [0x140006be3]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x140006fd5
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [str.::::::::]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x140006c1e
push rsi
push r12
push rdi
push r13
push r15
push rbp
mov rbp, rsp
sub rsp, 0x258
lea eax, [rbp - 0x148]
mov edi, dword [rbp - 0xa4]
mov r13, 0x6e5c
mov dword [rbp - 0x19f], edi
sub qword [0x140009a33], rdx
mov ecx, dword [rbp - 0x10b]
mov r12, qword [rbp - 0x1e8]
xor ecx, eax
mov rcx, rax
mov r9, qword [rbp - 0x1ca]
add qword [0x140009a31], rcx
sub eax, 0x2e16
mov rcx, qword [rbp - 0x3e]
mov r15, 0xe822
mov edx, dword [rbp - 0x39]
mov r15, qword [rbp - 0x11a]
sub qword [rbp - 0x15f], rdx
add rdi, qword [rbp - 0x1d0]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006e8c
mov ecx, dword [rbp - 0xd9]
mov rdx, r15
mov rax, qword [rbp - 0x19c]
movzx eax, word [rbp - 0x5f]
movzx edi, dh
mov dword [rbp - 0x148], ecx
mov dword [0x140009a2c], eax
inc qword [rsp]
mov edx, 0x37bc
cmp edx, dword [rsp]
jl 0x140006e65
add rsp, 0x10
movzx esi, word [rbp - 0x1d7]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006ee7
sub r10, r15
movzx eax, ah
lea r9, [rbp - 5]
or rsi, r10
mov dword [rbp - 0x130], eax
movzx ecx, cx
sub dword [rbp - 0xae], eax
mov dword [rbp - 0xae], edx
mov rdx, qword [rbp - 0x26]
mov ecx, esi
movzx edx, cl
xor edi, 0x1b89
and dword [rbp - 0x40], eax
inc qword [rsp]
mov rsi, 0x7d46
cmp qword [rsp], rsi
jle 0x140006eaf
add rsp, 0x10
xor dword [rbp - 0x1dc], eax
mov dh, 0x77
add r15, rdi
or dword [rbp - 0x99], eax
movzx edx, dh
mov dword [rbp - 0x1a9], esi
xor esi, dword [0x140009a36]
mov rdi, 0xb09e
add edx, dword [rbp - 0x109]
mov edi, dword [rbp - 0x14c]
mov ecx, dword [rbp - 0x47]
mov ecx, 0x8847
add dword [rbp - 0x10f], esi
mov dword [rbp - 0x24e], ecx
mov dword [0x140009a34], edi
and edi, dword [rbp - 0x46]
lea r10, [rbp - 0x90]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140006fa1
movzx ecx, byte [rbp - 0x3e]
add rax, qword [rbp - 0x148]
mov qword [rbp - 8], rdi
or ecx, dword [rbp - 0x87]
lea r9, [0x140009a32]
add r12, 0x640f
mov rsi, r9
mov qword [rbp - 0x8c], rcx
mov dword [rbp - 0x1ec], ecx
mov dword [rbp - 0x166], edi
mov qword [rbp - 0xf5], r13
inc qword [rsp]
mov ecx, 0xc0e0
cmp ecx, dword [rsp]
jl 0x140006f5d
add rsp, 0x10
leave
pop r15
pop r13
pop rdi
pop r12
pop rsi
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x140006be8]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x140007111
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push r12
push rbx
push rdi
push r13
push rsi
push r15
push rbp
mov rbp, rsp
sub rsp, 0x78
mov esi, dword [rbp - 0x39]
sub edx, eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1400070a3
mov rax, qword [rbp - 0x4e]
movzx ebx, byte [rbp - 0x33]
mov qword [rbp - 0xf], r12
add dword [rbp - 0x2f], eax
sub dword [0x140009a33], ecx
mov ecx, dword [rbp - 0x23]
mov rcx, rax
or dword [rbp - 0x44], edi
mov r11, 0x8a2b
mov r9, qword [rbp - 0x5a]
xor ecx, eax
mov edx, dword [rbp - 0x4b]
mov dword [rbp - 0x41], ecx
sub r12, r11
add rdi, qword [rbp - 0x60]
mov dword [0x140009a2e], edi
lea edi, [rbp - 0x61]
mov dword [rbp - 0x2d], ebx
or rcx, qword [rbp - 0x6f]
mov r13, qword [0x140009a3a]
add rdx, 0x45ef
mov r9, r12
xor r13, 0xa272
movzx edx, cl
mov qword [rbp - 0x16], rsi
mov ecx, dword [rbp - 0x21]
mov ecx, dword [rbp - 0x26]
inc qword [rsp]
mov edi, 0x58b6
cmp edi, dword [rsp]
jl 0x140007032
add rsp, 0x10
mov r11, r8
mov ecx, edx
cmp rcx, r8
je 0x140007107
xor rdx, qword [rbp - 0x6f]
mov r13, qword [rbp - 0x66]
mov edx, ebx
mov r9, qword [rbp - 0x4f]
mov dword [0x140009a30], edx
movzx edi, bh
mov ecx, 0x7d42
sub ecx, edi
mov r13, r12
test qword [0x140009a37], rdi
je 0x1400070fa
mov qword [0x140009a35], rcx
or qword [rbp - 0x46], r12
mov eax, dword [rbp - 0x49]
or rsi, 0xc272
add ebx, 0x5088
mov rdx, 0xc348
leave
pop r15
pop rsi
pop r13
pop rdi
pop rbx
pop r12
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x1400072a3
jmp 0x1400072ce
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x1400072ce
push rbp
mov rbp, rsp
sub rsp, 0x4f8
mov qword [0x140009a2f], rdx
sub dword [rbp - 0x3d7], edx
mov qword [rbp - 0x2b9], rdx
add r8, qword [rbp - 0x10d]
xor r8, r9
sub edx, dword [rbp - 0x28e]
add r10, 0x6a96
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14000719d
mov qword [0x140009a33], rax
inc qword [rsp]
mov edx, 0x9e06
cmp edx, dword [rsp]
jl 0x140007192
add rsp, 0x10
sub dword [rbp - 0x1df], eax
add r8, rcx
mov edx, dword [rbp - 0x11b]
mov dword [rbp - 0xaa], edx
mov rax, r9
mov edx, dword [rbp - 0x1aa]
add qword [rbp - 0x17], rcx
mov rdx, rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1400071ee
add edx, dword [0x140009a31]
and rcx, rdx
mov r11, rcx
inc qword [rsp]
mov rax, 0x2861
cmp qword [rsp], rax
jle 0x1400071de
add rsp, 0x10
sub dword [rbp - 0x2e0], edx
movzx eax, ch
mov qword [rbp - 0x394], rax
mov rdx, qword [rbp - 0x22d]
and ecx, 0x2a19
mov r9, qword [rbp - 0x1a]
mov dword [0x140009a2e], ecx
mov r11, rdx
mov dword [rbp - 0x9c], eax
mov rax, 0xf22e
mov edx, eax
add r11, qword [rbp - 0x439]
mov r8, qword [rbp - 0x60]
or byte [rbp - 0x81], al
add qword [rbp - 0xc9], rax
add eax, 0x4f30
add rax, qword [rbp - 0xae]
or rdx, r8
mov r11, r8
sub ecx, dword [rbp - 0xd2]
mov ecx, 0xb655
cmp rax, qword [0x140009a34]
jb 0x140007285
movzx edx, cx
xor ecx, dword [rbp - 0x28e]
mov dword [rbp - 0x3a8], edx
mov qword [rbp - 0x412], r10
and eax, ecx
sub rax, 0xdfa2
and qword [0x140009a39], r11
mov qword [rbp - 0x3a8], r9
leave
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [str.::::::::]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x14000712d
jmp 0x140006fb8
mov qword [0x1400092f0], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x140006fc7