Function at 0x1400019f0
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x790]
sub rsp, 0x890
mov rax, qword [0x1400172f0]
xor rax, rsp
mov qword [rbp + 0x780], rax
mov rsi, rcx
mov qword [rsp + 0x48], rcx
mov rcx, qword [0x140017330]
xor r15d, r15d
xor r12d, r12d
xor r13b, r13b
call fcn.14000bad0
mov qword [rsp + 0x40], rax
mov rbx, rax
test rax, rax
jne 0x140001a6b
cmp dword [0x140019bf8], 4
jg 0x140001db1
lea rdx, str.could_not_open_directory___s_:__m
jmp 0x140001da0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rcx, rbx
mov dword [rax], r12d
call fcn.14000bc40
mov rdi, rax
test rax, rax
je 0x140001d81
lea rsi, [0x140010fac]
nop
lea rbx, [rdi + 8]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x140001aa0
cmp rax, 0x18
jne 0x140001ad0
lea rdx, str.0123456789ABCDEF
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strspn]
cmp rax, 0x18
jne 0x140001ad0
xor sil, sil
xor dil, dil
jmp 0x140001bbf
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140001ad7
cmp rax, 0x20
jne 0x140001b1b
lea rdx, str.0123456789ABCDEF
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strspn]
cmp rax, 0x18
jne 0x140001b1b
lea rcx, [rdi + 0x20]
lea rdx, str..partial
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x140001b1b
mov sil, 1
xor dil, dil
jmp 0x140001bbf
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140001b22
cmp rax, 0x1b
jne 0x140001b6c
lea rdx, str.0123456789ABCDEF
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strspn]
cmp rax, 0x18
jne 0x140001b6c
xor eax, eax
nop dword [rax]
movzx ecx, byte [rdi + rax + 0x20]
inc rax
cmp cl, byte [rsi + rax - 1]
jne 0x140001b6c
cmp rax, 4
jne 0x140001b50
xor sil, sil
mov dil, 1
jmp 0x140001bbf
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140001b73
cmp rax, 0x23
jne 0x140001d57
lea rdx, str.0123456789ABCDEF
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strspn]
cmp rax, 0x18
jne 0x140001d57
lea rcx, [rdi + 0x20]
lea rdx, str..gz.partial
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x140001d57
mov sil, 1
movzx edi, sil
lea rax, [rsp + 0x38]
mov rcx, rbx
lea r9, [rsp + 0x34]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x3c]
lea rdx, str._08X_08X_08X
call fcn.140002170
mov ecx, dword [0x140019be0]
xor edx, edx
movabs rax, 0x100000000
div rcx
mov ecx, dword [rsp + 0x34]
mov r14, rax
imul r14, rcx
mov ecx, dword [rsp + 0x38]
add r14, rcx
test sil, sil
jne 0x140001d2a
mov r9, qword [0x140017330]
lea r8, str._s__s
mov edx, 0x800
mov qword [rsp + 0x20], rbx
lea rcx, [rbp - 0x80]
call fcn.140009f60
lea rcx, [rbp - 0x80]
test dil, dil
jne 0x140001c84
lea rdx, [rsp + 0x50]
call fcn.140008ca0
test eax, eax
jne 0x140001dbd
mov r9d, dword [rsp + 0x64]
cmp r9d, dword [0x140019be0]
je 0x140001d2a
cmp dword [0x140019bf8], 3
jg 0x140001d50
mov r8, rbx
lea rdx, str.segment_file___s__has_incorrect_size__d__skipping
lea ecx, [rax + 3]
call fcn.140007aa0
jmp 0x140001d50
xor r8d, r8d
mov edx, 0x8000
call fcn.14000b780
mov edi, eax
test eax, eax
js 0x140001e3b
mov edx, 0xfffffffc
mov ecx, eax
lea r8d, [rdx + 6]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__lseek]
test eax, eax
js 0x140001e29
mov r8d, 4
lea rdx, [rsp + 0x30]
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
cmp eax, 4
jne 0x140001de7
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
movsx eax, byte [rsp + 0x32]
movsx r9d, byte [rsp + 0x33]
shl r9d, 8
or r9d, eax
movsx eax, byte [rsp + 0x31]
shl r9d, 8
or r9d, eax
movsx eax, byte [rsp + 0x30]
shl r9d, 8
or r9d, eax
cmp r9d, dword [0x140019be0]
je 0x140001d2a
cmp dword [0x140019bf8], 3
jg 0x140001d50
mov r8, rbx
lea rdx, str.compressed_segment_file___s__has_incorrect_uncompressed_size__d__skipping
mov ecx, 3
call fcn.140007aa0
jmp 0x140001d50
mov eax, dword [rsp + 0x3c]
cmp r14, r15
ja 0x140001d46
jne 0x140001d50
cmp eax, r12d
ja 0x140001d46
jne 0x140001d50
test r13b, r13b
je 0x140001d50
test sil, sil
jne 0x140001d50
mov r15, r14
mov r12d, eax
movzx r13d, sil
lea rsi, [0x140010fac]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
mov dword [rax], 0
call fcn.14000bc40
mov rdi, rax
test rax, rax
jne 0x140001a90
mov rsi, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 0
je 0x140001e65
cmp dword [0x140019bf8], 4
jg 0x140001db1
lea rdx, str.could_not_read_directory___s_:__m
mov r8, qword [0x140017330]
mov ecx, 4
call fcn.140007aa0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x140019bf8], 4
jg 0x140001ddb
lea r8, [rbp - 0x80]
mov ecx, 4
lea rdx, str.could_not_stat_file___s_:__m
call fcn.140007aa0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
jns 0x140001dfd
cmp dword [0x140019bf8], 4
jg 0x140001e59
lea rdx, str.could_not_read_compressed_file___s_:__m
jmp 0x140001e4b
cmp dword [0x140019bf8], 4
jg 0x140001e59
mov r9d, eax
mov qword [rsp + 0x20], 4
lea r8, [rbp - 0x80]
mov ecx, 4
lea rdx, str.could_not_read_compressed_file___s_:_read__d_of__zu
call fcn.140007aa0
jmp 0x140001e59
cmp dword [0x140019bf8], 4
jg 0x140001e59
lea rdx, str.could_not_seek_in_compressed_file___s_:__m
jmp 0x140001e4b
cmp dword [0x140019bf8], 4
jg 0x140001e59
lea rdx, str.could_not_open_compressed_file___s_:__m
lea r8, [rbp - 0x80]
mov ecx, 4
call fcn.140007aa0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [0x140017330]
mov rcx, rbx
call fcn.1400020e0
test r15, r15
je 0x140001e93
mov ecx, dword [0x140019be0]
lea rax, [r15 + 1]
test r13b, r13b
mov dword [rsi], r12d
cmovne rax, r15
imul rax, rcx
jmp 0x140001e95
xor eax, eax
mov rcx, qword [rbp + 0x780]
xor rcx, rsp
call fcn.14000e3e0
lea r11, [rsp + 0x890]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret