Function at 0x14001f5b0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4b8]
sub rsp, 0x5b8
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov rax, qword [0x14010b358]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x20], edx
test rcx, rcx
je 0x14001fa80
cmp dword [rcx], 0
jne 0x14001fa80
add rcx, 0x10
lea rdx, str.params
call fcn.140019ca0
test rax, rax
je 0x14001fa80
cmp dword [rax], 1
jne 0x14001fa80
mov rcx, qword [rax + 0x18]
cmp ecx, 1
jl 0x14001fa80
xor r14d, r14d
test rcx, rcx
je 0x14001f654
mov rax, qword [rax + 0x20]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001f654
cmp dword [rcx], 2
jne 0x14001f654
mov r15, qword [rcx + 0x10]
jmp 0x14001f657
mov r15, r14
mov r8d, 0x12c
lea rdx, [rbp + 0x370]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, [rbp + 0x370]
or rsi, 0xffffffffffffffff
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x14001f680
movsxd rcx, eax
test eax, eax
jle 0x14001f6a4
cmp byte [rbp + rcx + 0x370], 0x5c
je 0x14001f6a4
dec eax
dec rcx
test rcx, rcx
jg 0x14001f690
inc eax
movsxd rcx, eax
cmp rcx, 0x12c
jae 0x14001fa7a
mov byte [rbp + rcx + 0x370], r14b
lea rcx, [rbp + 0x370]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], r14b
jne 0x14001f6d0
xor edx, edx
nop dword [rax + rax]
movzx eax, byte [r15 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14001f6e0
mov qword [rbp + 0x358], r14
mov dword [rbp + 0x350], r14d
mov word [rsp + 0x50], r14w
lea rax, [rbp + 0x370]
mov qword [rsp + 0x38], rax
mov byte [rbp + 0x360], 0
xor eax, eax
mov dword [rbp + 0x361], eax
mov byte [rbp + 0x365], al
lea rcx, [rbp + 0x360]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], al
jne 0x14001f730
movzx eax, word [0x1400e097c]
mov word [rcx], ax
lea rcx, [rbp + 0x360]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x14001f750
movzx eax, word [0x1400e0984]
mov word [rcx], ax
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x370]
call fcn.14008bbac
mov qword [rbp + 0x358], rax
test rax, rax
je 0x14001f7a6
xor r9d, r9d
mov r8d, 0x200
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.140090334
mov dword [rbp + 0x350], 1
jmp 0x14001f7f1
call fcn.14008c1e4
cmp dword [rax], 0
je 0x14001f7f1
lea r9, [rbp + 0x370]
lea r8, str.Cannot_open_file__s_n
mov edx, 3
xor ecx, ecx
call fcn.140010980
nop
mov rcx, qword [rbp + 0x358]
test rcx, rcx
je 0x14001fa91
call fcn.14008a888
mov rcx, qword [rbp + 0x358]
call fcn.14008b124
jmp 0x14001fa91
mov rbx, qword [rbp + 0x358]
test rbx, rbx
jne 0x14001f802
mov rdi, r14
jmp 0x14001f868
mov rcx, rbx
call fcn.14008ed50
mov edi, eax
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, qword [rbp + 0x358]
call fcn.14008fb28
mov rcx, qword [rbp + 0x358]
call fcn.14008ed50
movsxd rbx, eax
xor r8d, r8d
mov edx, edi
mov rcx, qword [rbp + 0x358]
call fcn.14008fb28
mov rdi, rbx
cmp ebx, 0x4000
jle 0x14001f861
lea r8, str.too_big_file_n
mov edx, 3
xor ecx, ecx
call fcn.140010980
jmp 0x14001f7cb
mov rbx, qword [rbp + 0x358]
movsxd r12, edi
mov rcx, r12
call fcn.140089b68
mov r13, rax
test rbx, rbx
je 0x14001f8e4
test byte [rbp + 0x350], 1
je 0x14001f8be
mov r9, rbx
mov r8, r12
mov edx, 1
mov rcx, rax
call fcn.14008cd44
cmp eax, edi
je 0x14001f8b7
mov rcx, qword [rbp + 0x358]
call fcn.14008d084
test eax, eax
jne 0x14001f8b7
mov rcx, qword [rbp + 0x358]
call fcn.14008d0ac
mov rbx, qword [rbp + 0x358]
test rbx, rbx
je 0x14001f8e4
mov rcx, rbx
call fcn.14008a888
mov rcx, qword [rbp + 0x358]
call fcn.14008b124
mov qword [rbp + 0x358], r14
mov word [rsp + 0x50], r14w
mov edx, edi
mov rcx, r13
call fcn.14001f520
mov r12, rax
mov rcx, r13
call fcn.140089874
call fcn.14001b920
mov rbx, rax
movsxd rcx, dword [rsp + 0x20]
call fcn.14001be00
mov r8, rax
lea rdx, [0x1400dc7d4]
mov rcx, rbx
call fcn.14001ba10
mov edx, 5
lea rcx, str.error
call fcn.14001b870
test eax, eax
je 0x14001f989
lea rdi, reloc.WS2_32.dll_getsockopt
test rbx, rbx
je 0x14001f96b
cmp dword [rbx], 0
jne 0x14001f96b
cmp rbx, rdi
je 0x14001f96b
mov r8, qword [rbx + 0x38]
lea rax, [r8 + 1]
mov qword [rbx + 0x38], rax
lea rcx, [rbx + 0x10]
mov r9, rdi
lea rdx, str.error
call fcn.140019b20
test eax, eax
je 0x14001f9ae
mov rax, qword [0x14010db30]
cmp rax, 0xffffffffffffffff
je 0x14001f9ae
dec rax
mov qword [0x14010db30], rax
jne 0x14001f9ae
mov rcx, rdi
jmp 0x14001f9a9
mov rax, qword [0x14010db30]
cmp rax, 0xffffffffffffffff
je 0x14001f9ae
dec rax
mov qword [0x14010db30], rax
jne 0x14001f9ae
lea rcx, reloc.WS2_32.dll_getsockopt
call fcn.14001bea0
call fcn.14001baa0
mov rdi, rax
mov r8, rax
lea rdx, str.result
mov rcx, rbx
call fcn.14001ba10
test r15, r15
jne 0x14001f9d2
mov rax, r14
jmp 0x14001f9da
mov rcx, r15
call fcn.14001bdb0
mov rdx, rax
mov rcx, rdi
call fcn.14001bc40
test r12, r12
je 0x14001f9f5
mov rcx, r12
call fcn.14001bdb0
mov r14, rax
mov rdx, r14
mov rcx, rdi
call fcn.14001bc40
mov rcx, rbx
call fcn.140019500
mov rdi, rax
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14001fa10
movsxd r8, esi
mov r14, qword [rsp + 0x28]
movsxd rcx, dword [r14]
add rcx, qword [rsp + 0x30]
mov rdx, rax
call fcn.1400889a0
add dword [r14], esi
test rbx, rbx
je 0x14001fa54
mov rax, qword [rbx + 8]
cmp rax, 0xffffffffffffffff
je 0x14001fa54
dec rax
mov qword [rbx + 8], rax
jne 0x14001fa54
mov rcx, rbx
call fcn.14001bea0
mov rcx, rdi
call fcn.140089874
mov rcx, r12
call fcn.140089874
mov r8, r15
lea rdx, str.Remote_management:_file__s_was_uploaded_n
xor ecx, ecx
call fcn.140010790
jmp 0x14001f7cb
call fcn.140089f2c
int3
lea rdx, str.srv:_wrong_miner_getfile:params_format_n
mov ecx, 2
call fcn.140010790
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.140088760
add rsp, 0x5b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret