Function at 0x140004b84
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x150], rbx
mov rax, qword [0x14030cf00]
xor rax, rbp
mov qword [rbp + 0xf0], rax
and qword [rbp], 0
lea rbx, [0x140317480]
mov r12, rdx
mov dword [rsp + 0x28], 0x1000
mov r8, rcx
mov qword [rsp + 0x20], rbx
xor edi, edi
or r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
xor r13d, r13d
xor r14d, r14d
lea esi, [rdi + 1]
mov r15d, esi
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r8, [0x14026fb9c]
mov rdx, rbx
lea rcx, [rbp]
call fcn.1401e6f50
mov rcx, qword [rbp]
test rcx, rcx
je 0x140004f21
and dword [rbp + 8], edi
xor r8d, r8d
xor edx, edx
call fcn.1401e7a0c
mov r9, qword [rbp]
lea rbx, [0x14031a480]
mov rcx, rbx
lea r8d, [rdi + 2]
mov edx, esi
call fcn.1401ea344
movzx ecx, word [0x14031a480]
call qword [sym.imp.WS2_32.dll_ntohs]
mov ecx, 0x4d5a
cmp ax, cx
jne 0x140004d7d
mov rcx, qword [rbp]
lea edx, [rdi + 0x3c]
xor r8d, r8d
call fcn.1401e7a0c
mov r9, qword [rbp]
lea r8d, [rdi + 4]
mov edx, esi
lea rcx, [rbp + 8]
call fcn.1401ea344
mov edx, dword [rbp + 8]
xor r8d, r8d
mov rcx, qword [rbp]
call fcn.1401e7a0c
mov r13d, dword [rbp + 8]
lea r8d, [rdi + 0x18]
mov r9, qword [rbp]
mov edx, esi
mov rcx, rbx
add r13d, 0x58
call fcn.1401ea344
cmp dword [0x14031a480], 0x4550
jne 0x140004f18
movzx edx, word [0x14031a494]
lea rax, [rdx + 0x38]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x140004ccc
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1401da3f0
sub rsp, rcx
mov r9d, esi
mov r8d, 8
lea rcx, [rsp + 0x30]
call fcn.14009faa0
mov rbx, rax
mov rdx, rsi
add rax, 8
mov rcx, rbx
mov qword [rbx], rax
mov r9, qword [rbp]
mov r8, qword [rbx - 0x18]
call fcn.1401ea344
cmp qword [rbx - 0x18], 4
jbe 0x140004f18
mov eax, 0x10b
cmp word [rbx], ax
je 0x140004d56
mov eax, 0x20b
cmp word [rbx], ax
jne 0x140004f18
cmp qword [rbx - 0x18], 0x94
jb 0x140004d4c
mov r14d, dword [rbp + 8]
mov edi, dword [rbx + 0x90]
add r14d, 0xa8
xor r15d, r15d
test r15d, r15d
je 0x140004d75
jmp 0x140004f18
cmp qword [rbx - 0x18], 0x84
jb 0x140004f18
mov r14d, dword [rbp + 8]
mov edi, dword [rbx + 0x80]
add r14d, 0x98
test edi, edi
jne 0x140004e26
mov rcx, qword [rbp]
mov edx, 0xfffffff0
and dword [rbp + 0xc], 0
lea r8d, [rdx + 0x12]
call fcn.1401e7a0c
mov r9, qword [rbp]
lea r15, [0x14031a480]
mov rcx, r15
mov r8d, reloc.WS2_32.dll_recv
mov rdx, rsi
call fcn.1401ea344
mov rax, qword [0x14031a480]
cmp rax, qword [0x14030dbf0]
jne 0x140004e19
mov rax, qword [0x14031a488]
cmp rax, qword [0x14030dbf8]
jne 0x140004e19
mov rcx, qword [rbp]
mov r8d, esi
mov edx, 0xffffffec
call fcn.1401e7a0c
mov r9, qword [rbp]
lea rcx, [rbp + 0xc]
mov r8d, 4
mov rdx, rsi
call fcn.1401ea344
mov ecx, dword [rbp + 0xc]
call qword [sym.imp.WS2_32.dll_ntohl]
mov rcx, qword [rbp]
mov dword [rbp + 0xc], eax
call fcn.1401e07ac
mov edi, eax
mov eax, 0xfffffffc
sub eax, dword [rbp + 0xc]
add edi, eax
jmp 0x140004e2d
mov rcx, qword [rbp]
call fcn.1401e07ac
mov edi, eax
jmp 0x140004e2d
lea r15, [0x14031a480]
lea rcx, [rbp + 0x10]
call fcn.1400cf080
mov rcx, qword [rbp]
xor r8d, r8d
xor edx, edx
mov ebx, edi
call fcn.1401e7a0c
test r13d, r13d
je 0x140004ec3
mov r9, qword [rbp]
lea r8d, [r13 + 4]
mov rdx, rsi
mov rcx, r15
call fcn.1401ea344
lea rdx, [0x14031a480]
mov r8, rax
and dword [r13 + rdx], 0
lea rcx, [rbp + 0x10]
mov r15, rax
call fcn.1400cf110
test edi, edi
je 0x140004e81
sub ebx, r15d
mov r9, qword [rbp]
lea r15, [0x14031a480]
sub r14d, r13d
mov rdx, rsi
mov rcx, r15
lea r8d, [r14 + 4]
call fcn.1401ea344
mov r8, rax
lea rcx, [rbp + 0x10]
mov rdx, r15
mov r14, rax
and dword [rax + r15 - 8], 0
and dword [rax + r15 - 4], 0
call fcn.1400cf110
test edi, edi
je 0x140004ec3
sub ebx, r14d
mov r13d, 0x1000
jmp 0x140004ee3
mov r8, r14
lea rcx, [rbp + 0x10]
mov rdx, r15
call fcn.1400cf110
test edi, edi
je 0x140004ee3
sub ebx, r14d
je 0x140004f0a
mov r9, qword [rbp]
cmp ebx, r13d
mov r8d, ebx
mov rdx, rsi
cmova r8, r13
mov rcx, r15
test edi, edi
cmove r8, r13
call fcn.1401ea344
mov r14, rax
test rax, rax
jne 0x140004ecb
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.1400cf060
xor esi, esi
mov rcx, qword [rbp]
call fcn.1401e757c
mov eax, esi
mov rcx, qword [rbp + 0xf0]
xor rcx, rbp
call fcn.1401d9e80
mov rbx, qword [rbp + 0x150]
lea rsp, [rbp + 0x100]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret