Function at 0x14001e570
Capabilities:
Read file on windows
Terminate process

Disassembly:
push rbx
push rbp
push rdi
push r14
sub rsp, 0x78
mov rax, qword [0x140028008]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rbp, r8
mov rdi, rdx
mov r8d, dword [0x14002867c]
mov rbx, r9
mov edx, dword [0x140028688]
inc r8d
mov dword [0x14002867c], r8d
mov r14, rcx
test edx, edx
je 0x14001e5bf
mov dword [0x140028688], 0
jmp 0x14001e698
mov edx, 1
lea rcx, [rsp + 0x60]
mov r9, rdi
lea r8d, [rdx + 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test rax, rax
jne 0x14001e5ed
mov dword [0x14002867c], eax
mov rax, 0xffffffffffffffff
jmp 0x14001e9ef
cmp rax, 4
je 0x14001e66e
cmp dword [0x140028678], 1
jl 0x14001e662
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x28
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e662
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Unrecognized_header_:_Magic_Number_unreadable
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e662
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movzx eax, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x63]
mov r8d, dword [0x14002867c]
shl edx, 8
add edx, eax
movzx eax, byte [rsp + 0x61]
shl edx, 8
add edx, eax
movzx eax, byte [rsp + 0x60]
shl edx, 8
add edx, eax
mov eax, edx
and eax, 0xfffffff0
cmp eax, 0x184d2a50
je 0x14001e888
cmp edx, 0x184c2102
je 0x14001e852
cmp edx, 0x184d2204
je 0x14001e813
cmp edx, 0x184d2a50
je 0x14001e888
cmp r8d, 1
jne 0x14001e785
cmp dword [rbx + 8], 0
jne 0x14001e70a
cmp dword [rbx + 4], 0
je 0x14001e70a
cmp dword [rbx], 0
je 0x14001e70a
mov r9d, dword [rbx + 0x24]
lea r8, [rsp + 0x60]
mov rdx, rbp
mov dword [0x14002867c], 0
mov rcx, rdi
call fcn.14001e270
jmp 0x14001e9ef
cmp dword [0x140028678], 1
jl 0x14001e779
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x2c
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e779
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Unrecognized_header_:_file_cannot_be_decoded
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e779
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov ecx, dword [0x140028678]
mov ebx, eax
cmp ecx, 2
jl 0x14001e7bb
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Stream_followed_by_undecodable_data
call fcn.140015200
mov ecx, dword [0x140028678]
cmp ebx, 0xffffffff
je 0x14001e7e8
cmp ecx, 2
jl 0x14001e807
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, str.at_position__i
mov rcx, rax
call fcn.140015200
mov ecx, dword [0x140028678]
cmp ecx, 2
jl 0x14001e807
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140022b38]
call fcn.140015200
mov rax, 0xfffffffffffffffe
jmp 0x14001e9ef
movups xmm0, xmmword [r14]
mov r9, rbx
mov r8, rbp
movups xmm1, xmmword [r14 + 0x10]
lea rcx, [rsp + 0x20]
mov rdx, rdi
movaps xmmword [rsp + 0x20], xmm0
movups xmm0, xmmword [r14 + 0x20]
movaps xmmword [rsp + 0x30], xmm1
movups xmm1, xmmword [r14 + 0x30]
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
call fcn.14001dd90
jmp 0x14001e9ef
cmp dword [0x140028678], 4
jl 0x14001e875
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Detected_:_Legacy_format__n
call fcn.140015200
mov r8, rbx
mov rdx, rbp
mov rcx, rdi
call fcn.14001d690
jmp 0x14001e9ef
cmp dword [0x140028678], 4
jl 0x14001e8ab
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Skipping_detected_skippable_area__n
call fcn.140015200
mov edx, 1
lea rcx, [rsp + 0x60]
mov r9, rdi
lea r8d, [rdx + 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 4
je 0x14001e943
cmp dword [0x140028678], 1
jl 0x14001e937
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x2a
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e937
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Stream_error_:_skippable_size_unreadable
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e937
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movzx eax, byte [rsp + 0x62]
mov rcx, rdi
movzx edx, byte [rsp + 0x63]
shl edx, 8
add edx, eax
movzx eax, byte [rsp + 0x61]
shl edx, 8
add edx, eax
movzx eax, byte [rsp + 0x60]
shl edx, 8
add edx, eax
call fcn.14001e4f0
test eax, eax
je 0x14001e9ed
cmp dword [0x140028678], 1
jl 0x14001e9e1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x2b
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e9e1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Stream_error_:_cannot_skip_skippable_area
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001e9e1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor eax, eax
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140020560
add rsp, 0x78
pop r14
pop rdi
pop rbp
pop rbx
ret