Function at 0x140003db0
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x1f8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x42
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x218]
lea rcx, [0x1401a414a]
call fcn.14006b9e0
mov qword [rbp + 8], 0
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x68], 0
mov rcx, qword [0x140071238]
call fcn.14006b410
mov qword [rbp + 0x28], rax
lea r8, [0x1400715d4]
mov rdx, qword [rbp + 0x1e8]
lea rcx, [rbp + 8]
call qword [sym.imp.ucrtbased.dll_fopen_s]
mov dword [rbp + 0x84], eax
cmp dword [rbp + 0x84], 0
jne 0x140003e4d
cmp qword [rbp + 8], 0
jne 0x140003e5f
mov rcx, qword [rbp + 0x1e8]
call qword [sym.imp.ucrtbased.dll_perror]
jmp 0x14000446e
mov r9, qword [rbp + 8]
mov r8d, 0x63
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_fread]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0x63
jae 0x140003e95
mov rcx, qword [rbp + 0x1e8]
call qword [sym.imp.ucrtbased.dll_perror]
jmp 0x14000446e
mov r8d, recv
lea rdx, str.masscan_1.1
mov rcx, qword [rbp + 0x28]
call sub.VCRUNTIME140D.dll_memcmp
test eax, eax
je 0x140003ed5
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov r8, qword [rbp + 0x1e8]
lea rdx, str._s:_unknown_file_format__expeced__masscan_1.1___n
mov rcx, rax
call fcn.140001b10
jmp 0x14000446e
mov eax, 1
imul rax, rax, 0xb
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
cmp eax, 0x2e
jne 0x140003fdf
mov rax, qword [rbp + 0x28]
add rax, 0xc
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_strtoul]
cmp eax, 2
jb 0x140003fdf
mov dword [rbp + 0xa4], 0
jmp 0x140003f28
mov eax, dword [rbp + 0xa4]
inc eax
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0x61
jae 0x140003f58
mov eax, dword [rbp + 0xa4]
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x140003f58
mov eax, dword [rbp + 0xa4]
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
cmp eax, 0xa
je 0x140003f58
jmp 0x140003f1a
mov eax, dword [rbp + 0xa4]
inc eax
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa4]
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
cmp eax, 0x73
jne 0x140003f87
mov eax, dword [rbp + 0xa4]
inc eax
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa4]
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
cmp eax, 0x3a
jne 0x140003fa8
mov eax, dword [rbp + 0xa4]
inc eax
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0x61
jae 0x140003fdf
mov eax, dword [rbp + 0xa4]
mov rcx, qword [rbp + 0x28]
add rcx, rax
mov rax, rcx
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_strtoul]
mov eax, eax
mov rcx, qword [rbp + 0x1e0]
mov qword [rcx + 0x228], rax
mov r9, qword [rbp + 8]
mov r8d, 1
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_fread]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 1
je 0x140004008
jmp 0x14000446e
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
and eax, 0x7f
mov dword [rbp + 0xc4], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
and eax, 0x80
test eax, eax
je 0x140004089
mov r9, qword [rbp + 8]
mov r8d, 1
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_fread]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 1
je 0x140004062
jmp 0x140004089
mov eax, dword [rbp + 0xc4]
shl eax, 7
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rbp + 0x28]
movzx ecx, byte [rdx + rcx]
and ecx, 0x7f
or eax, ecx
mov dword [rbp + 0xc4], eax
jmp 0x140004022
mov r9, qword [rbp + 8]
mov r8d, 1
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_fread]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 1
je 0x1400040b2
jmp 0x14000446e
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
and eax, 0x7f
mov dword [rbp + 0xe4], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rbp + 0x28]
movzx eax, byte [rcx + rax]
and eax, 0x80
test eax, eax
je 0x140004133
mov r9, qword [rbp + 8]
mov r8d, 1
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_fread]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 1
je 0x14000410c
jmp 0x140004133
mov eax, dword [rbp + 0xe4]
shl eax, 7
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rbp + 0x28]
movzx ecx, byte [rdx + rcx]
and ecx, 0x7f
or eax, ecx
mov dword [rbp + 0xe4], eax
jmp 0x1400040cc
mov eax, dword [rbp + 0xe4]
cmp rax, qword [0x140071238]
jbe 0x140004161
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.file_corrupt_n
mov rcx, rax
call fcn.140001b10
jmp 0x14000446e
mov eax, dword [rbp + 0xe4]
mov r9, qword [rbp + 8]
mov r8d, eax
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_fread]
mov qword [rbp + 0x48], rax
mov eax, dword [rbp + 0xe4]
cmp qword [rbp + 0x48], rax
jae 0x140004192
jmp 0x14000446e
mov eax, dword [rbp + 0xc4]
mov dword [rbp + 0x1b4], eax
mov eax, dword [rbp + 0x1b4]
dec eax
mov dword [rbp + 0x1b4], eax
cmp dword [rbp + 0x1b4], 0x6c
ja case.0x1400041d8.7
mov eax, dword [rbp + 0x1b4]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x44e8]
mov eax, dword [rcx + rax*4 + 0x44b4]
add rax, rcx
jmp rax
mov rax, qword [rbp + 0x1f8]
cmp dword [rax + 8], 0
jne 0x140004200
mov r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x28]
mov edx, 1
mov rcx, qword [rbp + 0x1e0]
call fcn.140005320
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
cmp dword [rax + 8], 0
jne 0x14000422b
mov r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x28]
mov edx, 2
mov rcx, qword [rbp + 0x1e0]
call fcn.140005320
jmp 0x14000442a
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x1e0]
call fcn.1400048d0
jmp 0x14000442a
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x28]
add rcx, rax
mov rax, rcx
mov r9, qword [rbp + 8]
mov r8d, 1
mov edx, 1
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_fread]
cmp rax, 1
je 0x14000429a
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
lea rdx, str.read___error_n
mov rcx, rax
call fcn.140001b10
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
mov rax, qword [rbp + 0x48]
inc rax
mov qword [rbp + 0x48], rax
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x1e0]
call fcn.140004b20
jmp 0x14000442a
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x1e0]
call fcn.140004b20
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
cmp dword [rax + 8], 0
jne 0x140004309
mov rax, qword [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x28]
mov edx, 1
mov rcx, qword [rbp + 0x1e0]
call fcn.140005620
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
cmp dword [rax + 8], 0
jne 0x140004340
mov rax, qword [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x28]
mov edx, 2
mov rcx, qword [rbp + 0x1e0]
call fcn.140005620
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x1f0]
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x1e0]
call fcn.140005040
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
cmp dword [rax + 8], 0
jne 0x1400043a3
mov rax, qword [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x28]
mov edx, 1
mov rcx, qword [rbp + 0x1e0]
call fcn.140005950
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
cmp dword [rax + 8], 0
jne 0x1400043da
mov rax, qword [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x28]
mov edx, 2
mov rcx, qword [rbp + 0x1e0]
call fcn.140005950
jmp 0x14000442a
mov rax, qword [rbp + 0x1f8]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x1f0]
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x1e0]
call fcn.140004d90
jmp 0x14000442a
jmp 0x14000442a
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov r8d, dword [rbp + 0xc4]
lea rdx, str.file_corrupt:_unknown_type__u_n
mov rcx, rax
call fcn.140001b10
jmp 0x14000446e
mov rax, qword [rbp + 0x68]
inc rax
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x68]
and rax, 0xffff
test rax, rax
jne 0x140004469
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov r9, qword [rbp + 0x68]
mov r8, qword [rbp + 0x1e8]
lea rdx, str._s:__8llu_r
mov rcx, rax
call fcn.140001b10
jmp 0x140003fdf
cmp qword [rbp + 0x28], 0
je 0x14000447f
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ucrtbased.dll_free]
cmp qword [rbp + 8], 0
je 0x140004490
mov rcx, qword [rbp + 8]
call qword [sym.imp.ucrtbased.dll_fclose]
mov rax, qword [rbp + 0x68]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x1400715b0]
call fcn.14006b950
mov rax, rdi
lea rsp, [rbp + 0x1c8]
pop rdi
pop rbp
ret