Function at 0x1400b6d80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r13
push r15
sub rsp, 0x40
mov ebx, dword [rsp + 0x98]
mov r15d, r9d
mov rsi, rdx
mov r13, rcx
test ebx, ebx
jne 0x1400b6db3
lea eax, [rbx + 4]
add rsp, 0x40
pop r15
pop r13
pop rdi
pop rsi
pop rbx
ret
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r14
mov r14, qword [rsp + 0x90]
mov r12, qword [r14]
dec ebx
mov ecx, dword [r12 + 0x10]
test ecx, ecx
je 0x1400b6e08
dec ecx
je 0x1400b6dea
dec ecx
je 0x1400b6dea
sub ecx, 2
je 0x1400b6df3
dec ecx
je 0x1400b6e08
lea r12, [0x1400f1604]
jmp 0x1400b6e0c
mov rcx, qword [r12]
xor r8d, r8d
lea edx, [r8 + 1]
call fcn.140001820
mov r12, rax
jmp 0x1400b6e0c
mov r12, qword [r12]
mov edi, 4
lea rdx, str.Read
mov rcx, r12
mov r8d, edi
mov qword [rsp + 0x78], rbp
call fcn.1400d67b0
xor r9d, r9d
test eax, eax
jne 0x1400b6e64
cmp word [r12 + 8], r9w
lea rcx, [r12 + 8]
jne 0x1400b6e44
lea ebp, [rdi - 3]
jmp 0x1400b6fdc
lea rdx, str.Line
call fcn.1400d5fdc
mov ebp, 5
mov ecx, 3
test eax, eax
cmove ebp, ecx
jmp 0x1400b6fd9
lea rdx, str.Write
mov r8d, 5
mov rcx, r12
call fcn.1400d67b0
test eax, eax
jne 0x1400b6eb1
cmp word [r12 + 0xa], ax
lea rcx, [r12 + 0xa]
jne 0x1400b6e92
lea ebp, [rax + 2]
jmp 0x1400b6fd9
lea rdx, str.Line
call fcn.1400d5fdc
xor r9d, r9d
mov ecx, r9d
test eax, eax
setne cl
lea ebp, [rcx + 4]
jmp 0x1400b6fdc
lea rdx, str.RawRead
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6ecc
lea ebp, [rax + 6]
jmp 0x1400b6fd9
lea rdx, str.RawWrite
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6ee7
lea ebp, [rax + 6]
jmp 0x1400b6fd9
lea rdx, [0x1400f7d50]
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
je 0x1400b6fd4
lea rdx, str.Length
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6f19
lea ebp, [rax + 9]
jmp 0x1400b6fd9
lea rdx, str.AtEOF
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6f34
lea ebp, [rax + 0xa]
jmp 0x1400b6fd9
lea rdx, str.__Handle
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6f4f
lea ebp, [rax + 0xb]
jmp 0x1400b6fd9
lea rdx, str.Handle
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6f67
lea ebp, [rax + 0xb]
jmp 0x1400b6fd9
lea rdx, str.Encoding
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6f7f
lea ebp, [rax + 0xc]
jmp 0x1400b6fd9
lea rdx, str.Close
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b6f97
lea ebp, [rax + 0xd]
jmp 0x1400b6fd9
lea rdx, str.Position
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
je 0x1400b6fd4
lea rdx, str.Seek
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
je 0x1400b6fd4
lea rdx, str.Tell
mov rcx, r12
call fcn.1400d5fdc
test eax, eax
jne 0x1400b78e7
mov ebp, 8
xor r9d, r9d
test r15b, 2
jne 0x1400b6ff8
cmp ebp, 7
jl 0x1400b78e0
and r15d, 1
cmp ebx, r15d
jne 0x1400b78e0
lea eax, [rbp - 1]
mov dword [rsi + 0x10], 1
cmp eax, 0xc
ja case.0x1400b7097.69
lea rcx, [0x140000000]
cdqe
mov eax, dword [rcx + rax*4 + 0xb790c]
add rax, rcx
jmp rax
movzx eax, word [r12]
cmp ax, 0x52
je 0x1400b7036
cmp ax, 0x72
je 0x1400b7036
xor r15b, r15b
jmp 0x1400b7039
mov r15b, 1
movzx eax, r15b
mov ebp, r9d
neg al
sbb rcx, rcx
lea r13, [r12 + rcx*2 + 0xa]
movzx ecx, word [r12 + rcx*2 + 0xa]
call fcn.140014d90
cmp ax, 0x55
jne 0x1400b7064
add r13, 2
xor r12d, r12d
jmp 0x1400b706a
mov r12d, 1
movzx ecx, word [r13]
call fcn.140014d90
movzx edx, ax
add edx, 0xffffffbd
cmp edx, 0x10
ja case.0x1400b7097.69
lea rcx, [0x140000000]
movsxd rax, edx
mov edx, dword [rcx + rax*4 + 0xb7940]
add rdx, rcx
jmp rdx
mov dx, getservbyport
mov rcx, r13
call fcn.1400d75e4
test rax, rax
mov eax, 8
cmovne edi, eax
jmp 0x1400b70d5
mov r13d, 2
mov edi, r13d
jmp 0x1400b70db
mov edi, 1
jmp 0x1400b70d5
mov edi, 8
jmp 0x1400b70d5
mov edi, 8
mov ebp, 1
mov r13d, 2
test r15b, r15b
je 0x1400b719f
mov rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0x30]
mov r8d, edi
add rcx, 0x10
mov qword [rsp + 0x30], 0
call fcn.1400b6630
test eax, eax
je case.0x1400b7097.69
test ebp, ebp
je 0x1400b7145
cmp edi, 4
jne 0x1400b712d
movd xmm0, dword [rsp + 0x30]
mov dword [rsi + 0x10], r13d
lea eax, [rdi - 3]
cvtps2pd xmm0, xmm0
movsd qword [rsi], xmm0
jmp 0x1400b78e9
movsd xmm0, qword [rsp + 0x30]
mov dword [rsi + 0x10], r13d
mov eax, 1
movsd qword [rsi], xmm0
jmp 0x1400b78e9
test r12d, r12d
je 0x1400b718d
dec edi
je 0x1400b717a
dec edi
je 0x1400b7167
cmp edi, 2
jne 0x1400b718d
movsxd rax, dword [rsp + 0x30]
mov qword [rsi], rax
lea eax, [rdi - 1]
jmp 0x1400b78e9
movsx rax, word [rsp + 0x30]
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
movsx rax, byte [rsp + 0x30]
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
mov rax, qword [rsp + 0x30]
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
cmp ebx, 1
jne case.0x1400b7097.69
mov r9, qword [r14 + 8]
test ebp, ebp
je 0x1400b71e2
xor r8d, r8d
mov edx, ebx
mov rcx, r9
call fcn.140085940
lea rbp, [0x1400f1604]
movsd qword [rsp + 0x30], xmm0
cmp edi, 4
jne 0x1400b726d
cvtsd2ss xmm0, xmm0
movss dword [rsp + 0x30], xmm0
jmp 0x1400b726d
cmp edi, 8
jne 0x1400b7257
test r12d, r12d
jne 0x1400b7257
mov ecx, dword [r9 + 0x10]
cmp ecx, 1
je 0x1400b7257
cmp ecx, 2
je 0x1400b7257
test ecx, ecx
je 0x1400b7243
dec ecx
je 0x1400b720f
dec ecx
je 0x1400b720f
sub ecx, 2
je 0x1400b7223
dec ecx
je 0x1400b7243
lea rbp, [0x1400f1604]
mov rax, rbp
mov rcx, rax
call fcn.140050330
jmp 0x1400b7268
mov rcx, qword [r9]
xor r8d, r8d
lea edx, [r8 + 1]
call fcn.140001820
lea rbp, [0x1400f1604]
mov rcx, rax
call fcn.140050330
jmp 0x1400b7268
mov rax, qword [r9]
lea rbp, [0x1400f1604]
mov rcx, rax
call fcn.140050330
jmp 0x1400b7268
xor edx, edx
mov rcx, r9
call fcn.1400858a0
lea rbp, [0x1400f1604]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0x30]
mov r8d, edi
add rcx, 0x10
call fcn.1400b69c0
test eax, eax
jne 0x1400b729b
mov rcx, qword [0x1401255c8]
test byte [rcx + 0x140], 1
jne 0x1400b7842
mov eax, eax
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
cmp ebx, 1
jg case.0x1400b7097.69
test ebx, ebx
je 0x1400b72c7
mov rcx, qword [r14 + 8]
xor edx, edx
call fcn.1400858a0
mov rbx, rax
jmp 0x1400b72de
lea rcx, [r13 + 0x10]
call fcn.1400b5f70
lea rcx, [r13 + 0x10]
mov rbx, rax
call fcn.1400b5f20
sub ebx, eax
cmp ebx, 0xffffffff
je case.0x1400b7097.69
mov r8d, ebx
xor edx, edx
mov rcx, rsi
call fcn.140085e80
test eax, eax
je case.0x1400b7097.69
mov rdx, qword [rsi]
lea rcx, [r13 + 0x10]
xor r9d, r9d
mov r8d, ebx
call fcn.1400b6210
xor edx, edx
mov ecx, eax
mov rax, qword [rsi]
mov dword [rsi + 0x10], edx
mov word [rax + rcx*2], dx
mov qword [rsi + 8], rcx
lea eax, [rdx + 1]
jmp 0x1400b78e9
test ebx, ebx
jne case.0x1400b7097.69
mov ecx, 0x20002
call fcn.1400d6468
mov qword [rsi + 0x18], rax
test rax, rax
je case.0x1400b7097.69
mov qword [rsi], rax
xor edi, edi
mov qword [rsi + 8], 0x10000
mov word [rax + 0x20000], di
mov rdx, qword [rsi]
lea rcx, [r13 + 0x10]
lea r9d, [rbx + 1]
mov r8d, 0xffff
call fcn.1400b6210
mov dword [rsi + 0x10], edi
mov ecx, eax
mov rax, qword [rsi]
mov word [rax + rcx*2], di
mov qword [rsi + 8], rcx
lea eax, [rbx + 1]
jmp 0x1400b78e9
cmp ebx, 1
jg case.0x1400b7097.69
mov r12d, r9d
mov edi, r9d
test ebx, ebx
je 0x1400b7403
mov rdx, qword [rsi + 8]
mov rcx, qword [r14 + 8]
call fcn.140085a00
mov rdx, qword [r14 + 8]
cmp dword [rdx + 0x10], 4
mov rbx, rax
jne 0x1400b73df
mov rdx, qword [rdx]
cmp byte [rdx + 0x23], 0
jne 0x1400b73c9
mov rcx, qword [rdx + 0x10]
movzx ecx, byte [rcx + 0x21]
jmp 0x1400b73cd
movzx ecx, byte [rdx + 0x21]
test cl, 1
jne 0x1400b73df
mov rcx, rdx
call fcn.140024840
mov rdi, rax
jmp 0x1400b73f1
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea edi, [rcx - 1]
lea rcx, [r13 + 0x10]
mov r8d, edi
mov rdx, rbx
call fcn.1400b6780
mov r12d, eax
cmp ebp, 4
jne 0x1400b742c
test r12d, r12d
jne 0x1400b7411
test edi, edi
jne 0x1400b7435
lea rcx, [r13 + 0x10]
lea rdx, [0x1400fef14]
mov r8d, 1
inc edi
call fcn.1400b6780
add r12d, eax
test r12d, r12d
jne 0x1400b7449
test edi, edi
je 0x1400b7449
mov rax, qword [0x1401255c8]
test byte [rax + 0x140], 1
jne case.0x1400b7097.69
mov eax, r12d
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
cmp ebx, 2
jne case.0x1400b7097.69
movzx eax, word [r12 + 6]
cmp ax, 0x52
je 0x1400b7478
cmp ax, 0x72
je 0x1400b7478
xor bl, bl
jmp 0x1400b747a
mov bl, 1
mov rcx, qword [r14 + 0x10]
mov rdi, qword [r14 + 8]
xor edx, edx
call fcn.1400858a0
cmp dword [rdi + 0x10], 4
mov rbp, rax
jne 0x1400b751b
mov rax, qword [rdi]
cmp byte [rax + 0x23], 0
jne 0x1400b74a5
mov rcx, qword [rax + 0x10]
jmp 0x1400b74a8
mov rcx, rax
cmp byte [rcx + 0x23], 2
jne 0x1400b74b6
mov ecx, dword [0x14012d1d0]
jmp 0x1400b74ba
mov rcx, qword [rcx + 0x18]
mov edx, ebp
cmp rdx, rcx
jbe 0x1400b750a
test bl, bl
je 0x1400b74e7
mov r8d, edx
and edx, 1
xor r9d, r9d
shr r8, 1
mov rcx, rax
mov byte [rsp + 0x20], 0
add r8, rdx
xor edx, edx
call fcn.1400bcba0
test eax, eax
jne 0x1400b750a
mov rax, qword [0x1401255c8]
test byte [rax + 0x140], 1
jne case.0x1400b7097.69
xor eax, eax
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
mov rcx, qword [rdi]
xor r8d, r8d
lea edx, [r8 + 1]
call fcn.140001820
jmp 0x1400b7525
xor edx, edx
mov rcx, rdi
call fcn.1400858a0
cmp rax, 0x10000
jae 0x1400b7533
xor eax, eax
mov ecx, eax
jmp 0x1400b7553
lea rcx, [r13 + 0x10]
mov r8d, ebp
mov rdx, rax
test bl, bl
je 0x1400b7548
call fcn.1400b6630
jmp 0x1400b754d
call fcn.1400b69c0
mov ecx, eax
test eax, eax
jne 0x1400b756b
test ebp, ebp
je 0x1400b756b
mov rax, qword [0x1401255c8]
test byte [rax + 0x140], 1
jne case.0x1400b7097.69
mov eax, ecx
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
test ebx, ebx
jne 0x1400b7592
lea rcx, [r13 + 0x10]
call fcn.1400b5f20
mov qword [rsi], rax
lea eax, [rbx + 1]
jmp 0x1400b78e9
cmp ebx, 2
jg case.0x1400b7097.69
mov rcx, qword [r14 + 8]
xor edx, edx
call fcn.1400858a0
mov rdi, rax
cmp ebx, 2
jne 0x1400b75bd
mov rcx, qword [r14 + 0x10]
xor edx, edx
call fcn.1400858a0
xor ebx, ebx
jmp 0x1400b75cc
xor ebx, ebx
mov ecx, 2
test rdi, rdi
mov eax, ebx
cmovs eax, ecx
lea rcx, [r13 + 0x10]
mov r8d, eax
mov rdx, rdi
call fcn.1400b5e90
test al, al
jne 0x1400b7600
mov rax, qword [0x1401255c8]
test byte [rax + 0x140], 1
jne case.0x1400b7097.69
mov qword [rsi], rbx
mov eax, 1
jmp 0x1400b78e9
mov qword [rsi], 1
mov eax, 1
jmp 0x1400b78e9
test ebx, ebx
jne 0x1400b7629
lea rcx, [r13 + 0x10]
call fcn.1400b5f70
mov qword [rsi], rax
lea eax, [rbx + 1]
jmp 0x1400b78e9
cmp ebx, 1
jne case.0x1400b7097.69
mov rcx, qword [r14 + 8]
xor edx, edx
call fcn.1400858a0
lea rcx, [r13 + 0x10]
mov rdx, rax
call fcn.1400b5fc0
mov qword [rsi], rax
cmp rax, 0xffffffffffffffff
jne 0x1400b78e0
lea rbp, [0x1400f1604]
mov qword [rsi], rbp
jmp 0x1400b7842
test ebx, ebx
jne 0x1400b76bc
mov rcx, qword [r13 + 0x40]
test rcx, rcx
je 0x1400b767f
mov eax, dword [r13 + 0x1c]
add rax, qword [r13 + 0x48]
cmp rcx, rax
jb 0x1400b76a2
mov rax, qword [r13 + 0x10]
lea rcx, [r13 + 0x10]
call qword [rax + 0x30]
mov rbx, rax
test rax, rax
js 0x1400b76b4
mov rdx, qword [r13 + 0x10]
lea rcx, [r13 + 0x10]
call qword [rdx + reloc.WSOCK32.dll_getservbyport]
cmp rbx, rax
jge 0x1400b76b4
xor al, al
movzx eax, al
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
mov al, 1
movzx eax, al
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
test ebx, ebx
jne 0x1400b772a
mov rdx, qword [r13 + 0x40]
test rdx, rdx
je 0x1400b76f8
sub rdx, qword [r13 + 0x48]
mov eax, dword [r13 + 0x1c]
mov rdi, qword [r13 + 0x10]
lea r8d, [rbx + 1]
lea rcx, [r13 + 0x10]
sub rdx, rax
call qword [rdi + 0x28]
xor r9d, r9d
mov qword [r13 + 0x40], r9
mov dword [r13 + 0x1c], r9d
mov r8d, dword [r13 + 0x1c]
test r8d, r8d
je 0x1400b771e
cmp qword [r13 + 0x40], 0
jne 0x1400b771e
mov rax, qword [r13 + 0x10]
mov rdx, qword [r13 + 0x48]
lea rcx, [r13 + 0x10]
call qword [rax + 0x20]
xor r9d, r9d
mov dword [r13 + 0x1c], r9d
mov rax, qword [r13 + 0x50]
mov word [r13 + 0x3c], r9w
mov qword [rsi], rax
mov eax, 1
jmp 0x1400b78e9
test ebx, ebx
jle 0x1400b77aa
mov rcx, qword [r14 + 8]
call fcn.1400855b0
test eax, eax
je 0x1400b7752
mov rcx, qword [r14 + 8]
xor edx, edx
call fcn.1400858a0
jmp 0x1400b7796
mov rdi, qword [r14 + 8]
mov ecx, dword [rdi + 0x10]
test ecx, ecx
je 0x1400b778b
dec ecx
je 0x1400b776e
dec ecx
je 0x1400b776e
sub ecx, 2
je 0x1400b7777
dec ecx
je 0x1400b778b
lea rbp, [0x1400f1604]
jmp 0x1400b778e
mov rcx, qword [rdi]
xor r8d, r8d
lea edx, [r8 + 1]
call fcn.140001820
mov rbp, rax
jmp 0x1400b778e
mov rbp, qword [rdi]
mov rcx, rbp
call fcn.140028120
cmp eax, 0xffffffff
je 0x1400b77aa
btr eax, 0x1f
lea rcx, [r13 + 0x10]
mov edx, eax
call fcn.140005900
mov ecx, dword [r13 + 0x24]
cmp ecx, 0x4b0
je 0x1400b780b
cmp ecx, 0xfde9
je 0x1400b77f2
mov rdi, qword [rsi + 8]
mov eax, 0x43
mov word [rdi], ax
mov eax, 0x50
lea rdx, [rdi + 4]
lea r8d, [rax - 0x46]
mov word [rdi + 2], ax
call fcn.1400d5d30
xor eax, eax
mov qword [rsi], rdi
mov dword [rsi + 0x10], eax
mov eax, 1
jmp 0x1400b78e9
xor eax, eax
lea rdi, str.UTF_8
mov dword [rsi + 0x10], eax
mov qword [rsi], rdi
mov eax, 1
jmp 0x1400b78e9
xor eax, eax
lea rdi, str.UTF_16
mov dword [rsi + 0x10], eax
mov qword [rsi], rdi
mov eax, 1
jmp 0x1400b78e9
test ebx, ebx
jne 0x1400b7831
lea rcx, [r13 + 0x10]
call fcn.1400058b0
mov eax, 1
jmp 0x1400b78e9
lea rbp, [0x1400f1604]
mov rax, qword [0x1401255c8]
xor r12d, r12d
mov dword [rsi + 0x10], r12d
test byte [rax + 0x140], 1
je 0x1400b78e0
mov rbx, qword [0x14012cbe0]
lea ecx, [r12 + 0x20]
call fcn.1400d6c78
mov rdi, rax
test rax, rax
je 0x1400b78c3
lea r8, str.FileObject
lea rdx, [0x1400f569c]
mov r9, rbp
mov rcx, rbx
call fcn.14004cc80
mov qword [rdi], rax
test rax, rax
je 0x1400b78bb
mov rdx, qword [0x1401255c8]
mov r8, rdi
mov rcx, rbx
mov dword [rdi + 0x10], 6
mov qword [rdi + 0x18], r12
call fcn.14004ceb0
lea eax, [r12 + 1]
jmp 0x1400b78e9
mov rcx, rdi
call fcn.1400d6520
xorpd xmm3, xmm3
lea rcx, str.Out_of_memory.__The_current_thread_will_exit.
xor r8d, r8d
mov edx, 0x10000
mov qword [rsp + 0x20], r12
call fcn.1400bf5b0
mov eax, 1
jmp 0x1400b78e9
mov eax, edi
mov rbp, qword [rsp + 0x78]
mov r12, qword [rsp + 0x80]
mov r14, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r13
pop rdi
pop rsi
pop rbx
ret