Function at 0x14007bab0
Capabilities:
Read file on windows
Receive data
Receive data on socket

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x30
xor r13d, r13d
movsxd rbp, r8d
mov rsi, rdx
mov rbx, rcx
mov edi, r13d
mov r14, rcx
mov r15d, r13d
test rcx, rcx
je 0x14007be79
mov rax, qword [rcx + 0x58]
test rax, rax
je 0x14007bb10
mov r8, rdx
mov dword [rsp + 0x28], 1
lea edx, [r13 + 2]
mov dword [rsp + 0x20], r13d
mov r9d, ebp
call rax
mov edi, eax
test eax, eax
jle 0x14007be7b
mov qword [rsp + 0x68], r12
mov rax, qword [rbx + 0x18]
test rax, rax
je 0x14007bb2c
cmp byte [rbx + 0x80], 3
je 0x14007bb2c
mov rbx, rax
jmp 0x14007bb15
mov r12, qword [rsp + 0x60]
lea r9, [0x140000000]
mov r8d, 0xffffffff
nop
test edi, edi
js 0x14007be50
mov rax, qword [rbx + 8]
test rax, rax
je 0x14007bb75
mov r9, qword [rax + 0x110]
test r9, r9
je 0x14007bb6e
mov r8d, ebp
mov rdx, rsi
mov rcx, rbx
call r9
jmp 0x14007be24
lea r9, [0x140000000]
movzx edx, byte [rbx + 0x80]
lea eax, [rdx - 2]
cmp eax, 6
ja case.default.0x14007bb95
cdqe
mov ecx, dword [r9 + rax*4 + 0x7be94]
add rcx, r9
jmp rcx
test r15d, r15d
jle case.default.0x14007bb95
lea r9, [rsp + 0x60]
mov dword [rsp + 0x60], r15d
mov r8, rsi
mov edx, r15d
mov rcx, rsi
call fcn.1400c5f50
mov edi, dword [rsp + 0x60]
test eax, eax
mov r8d, 0xffffffff
cmovne edi, r8d
jmp case.default.0x14007bb95
mov edi, 0xfffffffe
cmp dl, 4
jne 0x14007bbdf
mov edi, r13d
jmp case.default.0x14007bb95
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14007bc65
test ebp, ebp
jne 0x14007bbfc
movsxd r12, dword [rcx + 0x6c]
mov edi, r13d
add r12, qword [rcx + 0x30]
jmp case.default.0x14007bb95
movsxd rax, dword [rcx + 0x6c]
mov edi, dword [rcx + 0x68]
mov r12, rax
add r12, qword [rcx + 0x30]
test edi, edi
jle 0x14007bc15
cmp eax, edi
jl 0x14007bc15
mov edi, dword [rcx + 0x60]
sub edi, eax
test edi, edi
jne 0x14007bc23
mov edi, r8d
jmp case.default.0x14007bb95
cmp ebp, edi
cmovl edi, ebp
add eax, edi
mov dword [rcx + 0x6c], eax
mov rcx, qword [rbx + 0x20]
mov eax, dword [rcx + 0x60]
cmp dword [rcx + 0x6c], eax
jne 0x14007bc4d
mov dword [rcx + 0x6c], r13d
mov rcx, qword [rbx + 0x20]
mov eax, dword [rcx + 0x60]
cmp dword [rcx + 0x68], eax
jne 0x14007bc4d
mov dword [rcx + 0x68], r13d
mov rcx, qword [rbx + 0x20]
mov eax, dword [rcx + 0x68]
cmp dword [rcx + 0x6c], eax
jne 0x14007bc65
mov dword [rcx + 0x6c], r13d
mov rax, qword [rbx + 0x20]
mov dword [rax + 0x68], r13d
test edi, edi
jle case.default.0x14007bb95
movsxd r8, edi
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14007be26
mov r8d, ebp
mov rdx, rsi
mov rcx, rbx
call fcn.14007b960
jmp 0x14007be24
mov r9, qword [rbx + 0x30]
test r9, r9
je 0x14007bcb5
mov r8, rbp
mov edx, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rdi, rax
jmp 0x14007be26
mov edi, 0xffffff52
jmp case.default.0x14007bb95
cmp dword [r14 + 0x78], r13d
jne 0x14007be0d
and dword [rbx + 0x7c], 0xffffffef
mov rdi, qword [rbx + 0x30]
test rdi, rdi
je 0x14007bd3b
mov rax, qword [rdi + 0x530]
test rax, rax
je 0x14007bd00
mov edx, 4
mov rcx, rdi
lea r8d, [rdx - 3]
call rax
mov r8d, 0xffffffff
mov dword [rdi + 0x538], 4
test rsi, rsi
je 0x14007bd3b
test ebp, ebp
js 0x14007bd3b
mov r8d, ebp
mov rdx, rsi
mov rcx, rdi
call fcn.140098b10
mov edi, eax
mov r8d, 0xffffffff
test eax, eax
jns 0x14007bd28
mov edi, r8d
jmp 0x14007bd40
jne case.default.0x14007bb95
mov dword [r14 + 0x78], 1
jmp case.default.0x14007bb95
mov edi, 0xffffff53
mov rdx, qword [rbx + 0x30]
test rdx, rdx
je 0x14007bd2e
mov ecx, dword [rdx + 0x2e8]
lea eax, [rcx + 0x147]
test eax, 0xfffffffb
je 0x14007bd82
cmp ecx, 0xfffffea9
je 0x14007bd2e
mov eax, 0x2000
test word [rdx + 0x4e6], ax
jne 0x14007bd2e
cmp ecx, 0xfffffe73
je 0x14007bd2e
lea eax, [rcx - 2]
cmp eax, 1
ja 0x14007bd2e
or dword [rbx + 0x7c], 0x10
jmp case.default.0x14007bb95
mov r9, qword [rbx + 0x30]
test r9, r9
je 0x14007bdf4
cmp dword [r9 + 0x240], r13d
jne 0x14007bdd1
cmp qword [0x140528fe8], r13
lea rax, [0x140528fe0]
je 0x14007bdc2
mov ecx, dword [r9 + 0x230]
cmp ecx, dword [rax]
je 0x14007bdef
add rax, 0x10
cmp qword [rax + 8], r13
jne 0x14007bdb4
mov ecx, dword [r9 + 0x230]
cmp ecx, 0x357
jne 0x14007bdf4
mov r8d, edi
mov rdx, rsi
mov rcx, r9
call fcn.1400734c0
cmp eax, 1
je 0x14007be26
mov r8d, 0xffffffff
mov edi, r8d
jmp case.default.0x14007bb95
mov ecx, dword [rax + 4]
jmp 0x14007bdc9
movsxd r8, edi
mov rdx, rsi
mov rcx, r9
call fcn.140073a80
mov r8d, 0xffffffff
cmp eax, 1
je case.default.0x14007bb95
mov edi, r8d
jmp case.default.0x14007bb95
mov ecx, dword [rbx + 0x74]
xor r9d, r9d
mov r8d, ebp
mov rdx, rsi
call qword [sym.imp.WS2_32.dll_recv]
mov edi, eax
mov r8d, 0xffffffff
cmp rbx, r14
je 0x14007be50
mov rbx, qword [rbx + 0x10]
lea r9, [0x140000000]
test edi, edi
mov eax, edi
cmovle eax, r15d
mov r15d, eax
test rbx, rbx
jne 0x14007bb40
mov rax, qword [r14 + 0x58]
mov r12, qword [rsp + 0x68]
test rax, rax
je 0x14007be79
mov dword [rsp + 0x28], edi
mov r9d, ebp
mov r8, rsi
mov dword [rsp + 0x20], r13d
mov edx, 0x82
mov rcx, r14
call rax
mov edi, eax
mov eax, edi
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret