Function at 0x1400328f0
Capabilities:
Read file on windows

Disassembly:
push r15
mov eax, 0x4068
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.140044900
sub rsp, rax
mov r13, qword [rsp + 0x40d0]
mov ebx, dword [rcx + 0x11c]
lea r15, [rsp + 0x54]
lea rbp, [rsp + 0x58]
mov rsi, rcx
mov r14, r9
mov qword [rsp + 0x40], r15
lea r12, [rsp + 0x50]
lea rdi, [rsp + 0x5c]
mov r15, rdx
mov qword [rsp + 0x48], rbp
mov rbp, r8
mov qword [rsp + 0x40b8], rdx
mov qword [rsp + 0x40c0], r8
jmp 0x140032981
sub dword [r15], 1
mov eax, dword [rbp]
lea edx, [rax + 0xf4240]
mov dword [rbp], edx
mov eax, dword [r14]
mov r8d, dword [r13]
test edx, edx
jne 0x140032e84
mov ecx, dword [r15]
or ecx, r8d
or ecx, eax
jne 0x1400329fb
mov r9, qword [rsi]
mov r8d, 0x10
mov edx, 1
mov rcx, r12
call sym.fread
cmp rax, 0xf
jbe 0x140032bf8
add qword [rsi + 0x138], rax
mov ecx, ebx
mov rdx, r12
call sym.PCAP32
mov rdx, qword [rsp + 0x40]
mov dword [r15], eax
call sym.PCAP32
mov rdx, qword [rsp + 0x48]
mov dword [rbp], eax
call sym.PCAP32
mov rdx, rdi
mov dword [r13], eax
call sym.PCAP32
mov dword [r14], eax
mov edx, dword [rbp]
cmp edx, 0xf42a4
jbe 0x14003296b
cmp edx, 0xffffff00
ja 0x140032958
mov r8d, dword [r13]
mov edx, 1
cmp dword [rsp + 0x40e0], r8d
jae 0x140032b58
lea rax, [rsi + 0x1c]
mov qword [rsp + 0x40d0], r13
mov rbp, r14
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsi]
call dbg.ftello64
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x140032dc7
mov rdi, qword [rsi + 0x128]
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov qword [rsp + 0x28], r12
mov r8, qword [rsp + 0x48]
lea rdx, str._s:_lld:_corruption_found_at_0x_08llx___lld__n
mov qword [rsp + 0x20], r12
mov rcx, rax
mov r9, rdi
call sym.fprintf_28
mov r9, qword [rsi]
mov rcx, qword [rsp + 0x40]
mov r8d, 0x4000
mov edx, 1
call sym.fread
test rax, rax
je 0x140032df5
add qword [rsi + 0x138], rax
mov ecx, ebx
mov r11d, eax
mov rbx, r12
mov r13d, dword [rsi + 0x120]
xor r14d, r14d
xor r8d, r8d
mov r12, rax
mov r10d, r11d
sub r10d, r14d
cmp r10d, 0xf
jbe 0x140032b30
mov rax, qword [rsp + 0x40]
add r8, rax
mov rdx, r8
call sym.PCAP32
lea rdx, [r8 + 4]
mov r9d, eax
call sym.PCAP32
lea rdx, [r8 + 8]
mov r15d, eax
call sym.PCAP32
lea rdx, [r8 + 0xc]
mov edi, eax
call sym.PCAP32
cmp eax, edi
setb dl
cmp r15d, 0xf4240
seta r15b
or r15d, edx
cmp eax, 0x2710
seta al
sub r9d, 0x26000000
or r15d, eax
cmp r9d, 0x2a000000
seta al
or al, r15b
jne 0x140032b30
lea eax, [rdi - 0x10]
cmp eax, 0x2700
jbe 0x140032c33
lea r8d, [r14 + 1]
mov r14, r8
cmp r8, r12
jb 0x140032aaf
mov ebx, ecx
lea rcx, str.No_valid_packet_found_in_chunk_n
call sym.printf.constprop.0_6
jmp 0x140032a27
cmp eax, r8d
jb 0x140032a09
sub eax, 8
cmp eax, 0x270f8
ja 0x140032a09
test edx, edx
jne 0x140032a09
mov r9, qword [rsi]
mov rcx, qword [rsp + 0x40d8]
mov edx, 1
call sym.fread
mov edx, dword [r13]
cmp rax, rdx
jb 0x140032e24
add qword [rsi + 0x138], rax
mov rax, qword [rsi + 0x128]
test rax, rax
jne 0x140032bc6
mov rdi, qword [rsp + 0x40b8]
mov edx, dword [rdi]
mov rdi, qword [rsp + 0x40c0]
mov dword [rsi + 0xc], edx
mov edx, dword [rdi]
mov dword [rsi + 0x10], edx
mov rdi, qword [rsp + 0x40b8]
add rax, 1
mov edx, dword [rdi]
mov rdi, qword [rsp + 0x40c0]
mov dword [rsi + 0x14], edx
mov edx, dword [rdi]
mov qword [rsi + 0x128], rax
mov eax, 1
mov dword [rsi + 0x18], edx
jmp 0x140032bff
test rax, rax
jne 0x140032c13
xor eax, eax
add rsp, 0x4068
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call qword [dbg.__acrt_iob_func]
lea r8, [rsi + 0x1c]
lea rdx, [0x140068400]
mov rcx, rax
call sym.fprintf_28
jmp 0x140032bfd
lea eax, [rdi + 0x10]
cmp eax, r10d
jb 0x140032d06
cmp r13d, 1
jne 0x140032b30
cmp byte [r8 + 0xc], 8
jne 0x140032b30
cmp byte [r8 + 0xd], 0
jne 0x140032b30
cmp byte [r8 + 0xe], 0x45
jne 0x140032b30
mov edx, r14d
mov rcx, qword [rsi]
xor r8d, r8d
mov r13, qword [rsp + 0x40d0]
add rdx, rbx
call dbg.fseeko64
test eax, eax
jne 0x140032d88
mov rcx, qword [rsi]
call dbg.ftello64
mov rbx, qword [rsi + 0x128]
mov ecx, 2
mov r12, rax
call qword [dbg.__acrt_iob_func]
mov qword [rsp + 0x28], r12
mov r8, qword [rsp + 0x48]
mov r9, rbx
mov qword [rsp + 0x20], r12
mov rcx, rax
lea rdx, str._s:_lld:_good_packet_found_at_0x_08llx___lld__n
call sym.fprintf_28
mov qword [rsp + 0x20], r13
mov r9, rbp
mov rcx, rsi
mov eax, dword [rsp + 0x40e0]
mov r8, qword [rsp + 0x40c0]
mov rdx, qword [rsp + 0x40b8]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x40d8]
mov qword [rsp + 0x28], rax
call dbg.pcapfile_readframe
jmp 0x140032bff
lea r8, [r8 + rdi + 0x10]
mov rdx, r8
call sym.PCAP32
lea rdx, [r8 + 4]
mov r9d, eax
call sym.PCAP32
lea rdx, [r8 + 8]
mov edi, eax
call sym.PCAP32
lea rdx, [r8 + 0xc]
mov r10d, eax
call sym.PCAP32
cmp eax, r10d
mov edx, eax
setb al
cmp edi, 0xf4240
seta r8b
or eax, r8d
cmp edx, 0x2710
seta dl
sub r9d, 0x26000000
or eax, edx
cmp r9d, 0x2a000000
seta dl
or al, dl
jne 0x140032b30
sub r10d, 0x10
cmp r10d, 0x2700
ja 0x140032b30
jmp 0x140032c6a
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov rdi, qword [rsp + 0x48]
lea rdx, str._s:_could_not_resolve_file_corruption__seek_forward__n
mov rcx, rax
mov r8, rdi
call sym.fprintf_28
mov rcx, rdi
call sym.perror
mov rcx, qword [rsi]
mov r8d, 2
xor edx, edx
call dbg.fseeko64
jmp 0x140032bfd
mov rbx, qword [rsi + 0x128]
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov rdi, qword [rsp + 0x48]
lea rdx, str._s:_lld:_could_not_resolve_file_corruption__ftell__n
mov rcx, rax
mov r9, rbx
mov r8, rdi
call sym.fprintf_28
jmp 0x140032daa
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov rdi, qword [rsp + 0x48]
lea rdx, str._s:_error_at_end_of_file_n
mov rcx, rax
mov r8, rdi
call sym.fprintf_28
mov rcx, rdi
call sym.perror
jmp 0x140032bfd
test rax, rax
jne 0x140032e61
mov rbx, qword [rsi + 0x128]
mov ecx, 2
add rsi, 0x1c
call qword [dbg.__acrt_iob_func]
mov r8, rsi
lea rdx, str._s:_could_not_read_packet_data__frame__lld_n
mov rcx, rax
mov r9, rbx
call sym.fprintf_28
mov rcx, rsi
call sym.perror
jmp 0x140032bfd
mov ecx, 2
call qword [dbg.__acrt_iob_func]
lea r8, [rsi + 0x1c]
lea rdx, str._s:_premature_end_of_file_n
mov rcx, rax
call sym.fprintf_28
jmp 0x140032bfd
xor edx, edx
jmp 0x1400329fb