Function at 0x140066f80
Capabilities:
Read file on windows
Receive data
Receive data on socket

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x30
xor r13d, r13d
movsxd rbp, r8d
mov rsi, rdx
mov rbx, rcx
mov edi, r13d
mov r14, rcx
mov r15d, r13d
test rcx, rcx
je 0x140067355
mov rax, qword [rcx + 0x58]
test rax, rax
je 0x140066fe0
mov r8, rdx
mov dword [rsp + 0x28], 1
lea edx, [r13 + 2]
mov dword [rsp + 0x20], r13d
mov r9d, ebp
call rax
mov edi, eax
test eax, eax
jle 0x140067357
mov qword [rsp + 0x68], r12
mov rax, qword [rbx + 0x18]
test rax, rax
je 0x140066ff9
cmp byte [rbx + 0x7c], 3
je 0x140066ff9
mov rbx, rax
jmp 0x140066fe5
mov r12, qword [rsp + 0x60]
lea r9, [0x140000000]
mov r8d, 0xffffffff
nop dword [rax + rax]
test edi, edi
js 0x14006732c
mov rax, qword [rbx + 8]
test rax, rax
je 0x140067045
mov r9, qword [rax + 0x110]
test r9, r9
je 0x14006703e
mov r8d, ebp
mov rdx, rsi
mov rcx, rbx
call r9
jmp 0x140067300
lea r9, [0x140000000]
movzx edx, byte [rbx + 0x7c]
lea eax, [rdx - 2]
cmp eax, 6
ja case.default.0x140067062
cdqe
mov ecx, dword [r9 + rax*4 + 0x67370]
add rcx, r9
jmp rcx
test r15d, r15d
jle case.default.0x140067062
lea r9, [rsp + 0x60]
mov dword [rsp + 0x60], r15d
mov r8, rsi
mov edx, r15d
mov rcx, rsi
call fcn.1400a9850
mov edi, dword [rsp + 0x60]
test eax, eax
mov r8d, 0xffffffff
cmovne edi, r8d
jmp case.default.0x140067062
mov edi, 0xfffffffe
cmp dl, 4
jne 0x1400670ac
mov edi, r13d
jmp case.default.0x140067062
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140067132
test ebp, ebp
jne 0x1400670c9
movsxd r12, dword [rcx + 0x68]
mov edi, r13d
add r12, qword [rcx + 0x30]
jmp case.default.0x140067062
movsxd rax, dword [rcx + 0x68]
mov edi, dword [rcx + 0x64]
mov r12, rax
add r12, qword [rcx + 0x30]
test edi, edi
jle 0x1400670e2
cmp eax, edi
jl 0x1400670e2
mov edi, dword [rcx + 0x60]
sub edi, eax
test edi, edi
jne 0x1400670f0
mov edi, r8d
jmp case.default.0x140067062
cmp ebp, edi
cmovl edi, ebp
add eax, edi
mov dword [rcx + 0x68], eax
mov rcx, qword [rbx + 0x20]
mov eax, dword [rcx + 0x60]
cmp dword [rcx + 0x68], eax
jne 0x14006711a
mov dword [rcx + 0x68], r13d
mov rcx, qword [rbx + 0x20]
mov eax, dword [rcx + 0x60]
cmp dword [rcx + 0x64], eax
jne 0x14006711a
mov dword [rcx + 0x64], r13d
mov rcx, qword [rbx + 0x20]
mov eax, dword [rcx + 0x64]
cmp dword [rcx + 0x68], eax
jne 0x140067132
mov dword [rcx + 0x68], r13d
mov rax, qword [rbx + 0x20]
mov dword [rax + 0x64], r13d
test edi, edi
jle case.default.0x140067062
movsxd r8, edi
mov rdx, r12
mov rcx, rsi
call fcn.1400f7100
jmp 0x140067302
mov r8d, ebp
mov rdx, rsi
mov rcx, rbx
call fcn.140066e60
jmp 0x140067300
mov r9, qword [rbx + 0x30]
test r9, r9
je 0x140067181
mov r8, rbp
mov edx, 1
mov rcx, rsi
call fcn.1400d5468
mov rdi, rax
jmp 0x140067302
mov edi, 0xffffff52
jmp case.default.0x140067062
cmp dword [r14 + 0x74], r13d
jne 0x1400672e9
and dword [rbx + 0x78], 0xffffffef
mov rdi, qword [rbx + 0x30]
test rdi, rdi
je 0x14006722a
mov rax, qword [rdi + 0x4e8]
test rax, rax
je 0x1400671d0
mov edx, 4
mov rcx, rdi
lea r8d, [rdx - 3]
call rax
mov r8d, 0xffffffff
mov dword [rdi + 0x4f0], 4
test rsi, rsi
je 0x14006722a
test ebp, ebp
js 0x14006722a
test byte [rdi + 0x4c6], 8
je 0x1400671f8
lea eax, [rbp + 0x1f4]
mov edx, 0x578
cmp eax, edx
cmovg edx, eax
mov dword [rdi + 0x5f8], edx
mov r8d, ebp
mov rdx, rsi
mov rcx, rdi
call fcn.140080e10
mov edi, eax
mov r8d, 0xffffffff
test eax, eax
jns 0x140067217
mov edi, r8d
jmp 0x14006722f
jne case.default.0x140067062
mov dword [r14 + 0x74], 1
jmp case.default.0x140067062
mov edi, 0xffffff53
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14006721d
mov ecx, dword [rcx + 0x2d0]
lea eax, [rcx + 0x147]
test eax, 0xfffffffb
je 0x14006725b
cmp ecx, 0xfffffea9
je 0x14006721d
lea eax, [rcx - 2]
cmp eax, 1
ja 0x14006721d
or dword [rbx + 0x78], 0x10
jmp case.default.0x140067062
mov r9, qword [rbx + 0x30]
test r9, r9
je 0x1400672d0
cmp dword [r9 + 0x240], r13d
jne 0x1400672ad
cmp qword [0x140106348], r13
lea rax, [0x140106340]
je 0x14006729e
mov ecx, dword [r9 + 0x230]
nop dword [rax]
cmp ecx, dword [rax]
je 0x1400672cb
add rax, 0x10
cmp qword [rax + 8], r13
jne 0x140067290
mov ecx, dword [r9 + 0x230]
cmp ecx, 0x357
jne 0x1400672d0
mov r8d, edi
mov rdx, rsi
mov rcx, r9
call fcn.14005f720
cmp eax, 1
je 0x140067302
mov r8d, 0xffffffff
mov edi, r8d
jmp case.default.0x140067062
mov ecx, dword [rax + 4]
jmp 0x1400672a5
movsxd r8, edi
mov rdx, rsi
mov rcx, r9
call fcn.14005f900
mov r8d, 0xffffffff
cmp eax, 1
je case.default.0x140067062
mov edi, r8d
jmp case.default.0x140067062
mov ecx, dword [rbx + 0x70]
xor r9d, r9d
mov r8d, ebp
mov rdx, rsi
call qword [sym.imp.WS2_32.dll_recv]
mov edi, eax
mov r8d, 0xffffffff
cmp rbx, r14
je 0x14006732c
mov rbx, qword [rbx + 0x10]
lea r9, [0x140000000]
test edi, edi
mov eax, edi
cmovle eax, r15d
mov r15d, eax
test rbx, rbx
jne 0x140067010
mov rax, qword [r14 + 0x58]
mov r12, qword [rsp + 0x68]
test rax, rax
je 0x140067355
mov dword [rsp + 0x28], edi
mov r9d, ebp
mov r8, rsi
mov dword [rsp + 0x20], r13d
mov edx, 0x82
mov rcx, r14
call rax
mov edi, eax
mov eax, edi
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret