Function at 0x1400326a0
Capabilities:
Read file on windows

Disassembly:
push r15
mov eax, 0x4078
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.140048f80
sub rsp, rax
mov rdi, qword [rsp + 0x40e0]
mov ebp, dword [rcx + 0x11c]
mov rbx, rcx
mov r12, rdx
mov rsi, r8
mov r13, r9
lea r14, [rsp + 0x60]
nop dword [rax + rax]
mov r9, qword [rbx]
mov r8d, 0x10
mov edx, 1
mov rcx, r14
call sym.fread
cmp rax, 0xf
jbe 0x1400329b8
add qword [rbx + 0x138], rax
cmp ebp, 1
je 0x140032990
cmp ebp, 2
je 0x140032970
mov dword [r12], 0xa3a3
mov edx, 0xa3a3
mov dword [rsi], 0xa3a3
mov dword [rdi], 0xa3a3
mov dword [r13], edx
mov eax, dword [rsi]
cmp eax, 0xf42a4
jbe 0x1400328ca
cmp eax, 0xffffff00
ja 0x1400328b8
lea rax, [rbx + 0x1c]
mov qword [rsp + 0x40d8], r13
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40e0], rdi
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__ftelli64]
mov r14, qword [rbx + 0x128]
mov ecx, 2
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x140032b9c
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rsp + 0x28], r15
mov r8, qword [rsp + 0x50]
mov r9, r14
mov qword [rsp + 0x20], r15
mov rcx, rax
lea rdx, str._s:_lld:_corruption_found_at_0x_08llx___lld__n
call sym.fprintf_1
mov r9, qword [rbx]
mov rcx, qword [rsp + 0x48]
mov r8d, 0x4000
mov edx, 1
call sym.fread
test rax, rax
je 0x140032bda
mov r13d, dword [rbx + 0x120]
mov qword [rsp + 0x58], r15
mov ecx, ebp
xor edi, edi
add qword [rbx + 0x138], rax
mov rbp, rsi
mov r14d, eax
mov rsi, rbx
xor r8d, r8d
mov ebx, r13d
mov r13, rax
mov r10d, r14d
sub r10d, edi
cmp r10d, 0xf
jbe 0x140032888
mov rax, qword [rsp + 0x48]
add r8, rax
mov rdx, r8
call sym.PCAP32
lea rdx, [r8 + 4]
mov r9d, eax
call sym.PCAP32
lea rdx, [r8 + 8]
mov r15d, eax
call sym.PCAP32
lea rdx, [r8 + 0xc]
mov r11d, eax
call sym.PCAP32
cmp eax, r11d
setb dl
cmp r15d, 0xf4240
seta r15b
or r15d, edx
cmp eax, 0x2710
seta al
sub r9d, 0x26000000
or r15d, eax
cmp r9d, 0x2a000000
seta al
or al, r15b
jne 0x140032888
lea eax, [r11 - 0x10]
cmp eax, 0x2700
jbe 0x1400329f3
lea r8d, [rdi + 1]
mov rdi, r8
cmp r8, r13
jb 0x140032804
mov rbx, rsi
mov rsi, rbp
mov ebp, ecx
lea rcx, str.No_valid_packet_found_in_chunk
call sym.puts
jmp 0x140032771
sub dword [r12], 1
mov eax, dword [rsi]
add eax, 0xf4240
mov dword [rsi], eax
mov edx, dword [r13]
mov r8d, dword [rdi]
test eax, eax
jne 0x1400328e0
mov eax, dword [r12]
or eax, r8d
or eax, edx
je 0x1400326e0
cmp dword [rsp + 0x40f0], edx
mov eax, edx
cmovbe eax, dword [rsp + 0x40f0]
cmp eax, r8d
jb 0x14003274e
sub edx, 8
cmp edx, 0x270f8
ja 0x14003274e
mov r9, qword [rbx]
mov rcx, qword [rsp + 0x40e8]
mov edx, 1
call sym.fread
mov edx, dword [rdi]
cmp rax, rdx
jb 0x140032c09
add qword [rbx + 0x138], rax
mov rax, qword [rbx + 0x128]
test rax, rax
jne 0x140032948
mov edx, dword [r12]
mov dword [rbx + 0xc], edx
mov edx, dword [rsi]
mov dword [rbx + 0x10], edx
mov edx, dword [r12]
add rax, 1
mov dword [rbx + 0x14], edx
mov edx, dword [rsi]
mov qword [rbx + 0x128], rax
mov eax, 1
mov dword [rbx + 0x18], edx
jmp 0x1400329bf
mov eax, dword [rsp + 0x60]
mov edx, dword [rsp + 0x6c]
mov dword [r12], eax
mov eax, dword [rsp + 0x64]
mov dword [rsi], eax
mov eax, dword [rsp + 0x68]
mov dword [rdi], eax
jmp 0x140032732
mov eax, dword [rsp + 0x60]
mov edx, dword [rsp + 0x6c]
bswap eax
mov dword [r12], eax
mov eax, dword [rsp + 0x64]
bswap edx
bswap eax
mov dword [rsi], eax
mov eax, dword [rsp + 0x68]
bswap eax
mov dword [rdi], eax
jmp 0x140032732
test rax, rax
jne 0x1400329d3
xor eax, eax
add rsp, 0x4078
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea r8, [rbx + 0x1c]
lea rdx, [0x14006e460]
mov rcx, rax
call sym.fprintf_1
jmp 0x1400329bd
lea eax, [r11 + 0x10]
cmp eax, r10d
jb 0x140032ad7
cmp ebx, 1
jne 0x140032888
cmp byte [r8 + 0xc], 8
jne 0x140032888
cmp byte [r8 + 0xd], 0
jne 0x140032888
cmp byte [r8 + 0xe], 0x45
jne 0x140032888
mov r14d, edi
mov r15, qword [rsp + 0x58]
mov rbx, rsi
xor r8d, r8d
mov edx, r14d
mov rsi, rbp
mov rcx, qword [rbx]
mov r13, qword [rsp + 0x40d8]
add rdx, r15
mov rdi, qword [rsp + 0x40e0]
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
call rbp
test eax, eax
jne 0x140032b60
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__ftelli64]
mov r14, qword [rbx + 0x128]
mov ecx, 2
mov rbp, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rsp + 0x28], rbp
mov r8, qword [rsp + 0x50]
mov r9, r14
mov qword [rsp + 0x20], rbp
mov rcx, rax
lea rdx, str._s:_lld:_good_packet_found_at_0x_08llx___lld__n
call sym.fprintf_1
mov qword [rsp + 0x20], rdi
mov r9, r13
mov r8, rsi
mov eax, dword [rsp + 0x40f0]
mov rdx, r12
mov rcx, rbx
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x40e8]
mov qword [rsp + 0x28], rax
call dbg.pcapfile_readframe
jmp 0x1400329bf
lea r8, [r8 + r11 + 0x10]
mov rdx, r8
call sym.PCAP32
lea rdx, [r8 + 4]
mov r11d, eax
call sym.PCAP32
lea rdx, [r8 + 8]
mov r10d, eax
call sym.PCAP32
lea rdx, [r8 + 0xc]
mov r9d, eax
call sym.PCAP32
cmp eax, r9d
mov edx, eax
setb al
cmp r10d, 0xf4240
seta r8b
or eax, r8d
cmp edx, 0x2710
seta dl
sub r11d, 0x26000000
or eax, edx
cmp r11d, 0x2a000000
seta dl
or al, dl
jne 0x140032888
sub r9d, 0x10
cmp r9d, 0x2700
ja 0x140032888
jmp 0x140032a2a
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, qword [rsp + 0x50]
lea rdx, str._s:_could_not_resolve_file_corruption__seek_forward__n
mov rcx, rax
mov r8, rdi
call sym.fprintf_1
mov rcx, rdi
call sym.perror
mov rcx, qword [rbx]
mov r8d, 2
xor edx, edx
call rbp
jmp 0x1400329bd
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, qword [rsp + 0x50]
mov r9, r14
lea rdx, str._s:_lld:_could_not_resolve_file_corruption__ftell__n
mov rcx, rax
mov r8, rdi
call sym.fprintf_1
mov rcx, rdi
call sym.perror
mov rcx, qword [rbx]
mov r8d, 2
xor edx, edx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
jmp 0x1400329bd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, qword [rsp + 0x50]
lea rdx, str._s:_error_at_end_of_file_n
mov rcx, rax
mov r8, rdi
call sym.fprintf_1
mov rcx, rdi
call sym.perror
jmp 0x1400329bd
test rax, rax
jne 0x140032c46
mov rsi, qword [rbx + 0x128]
mov ecx, 2
add rbx, 0x1c
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str._s:_could_not_read_packet_data__frame__lld_n
mov rcx, rax
mov r9, rsi
call sym.fprintf_1
mov rcx, rbx
call sym.perror
jmp 0x1400329bd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea r8, [rbx + 0x1c]
lea rdx, str._s:_premature_end_of_file_n
mov rcx, rax
call sym.fprintf_1
jmp 0x1400329bd