Function at 0x14001a990
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4b8]
sub rsp, 0x5b8
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov rax, qword [0x140105358]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x20], edx
test rcx, rcx
je 0x14001ae60
cmp dword [rcx], 0
jne 0x14001ae60
add rcx, 0x10
lea rdx, str.params
call fcn.140016760
test rax, rax
je 0x14001ae60
cmp dword [rax], 1
jne 0x14001ae60
mov rcx, qword [rax + 0x18]
cmp ecx, 1
jl 0x14001ae60
xor r14d, r14d
test rcx, rcx
je 0x14001aa34
mov rax, qword [rax + 0x20]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001aa34
cmp dword [rcx], 2
jne 0x14001aa34
mov r15, qword [rcx + 0x10]
jmp 0x14001aa37
mov r15, r14
mov r8d, 0x12c
lea rdx, [rbp + 0x370]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, [rbp + 0x370]
or rsi, 0xffffffffffffffff
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x14001aa60
movsxd rcx, eax
test eax, eax
jle 0x14001aa84
cmp byte [rbp + rcx + 0x370], 0x5c
je 0x14001aa84
dec eax
dec rcx
test rcx, rcx
jg 0x14001aa70
inc eax
movsxd rcx, eax
cmp rcx, 0x12c
jae 0x14001ae5a
mov byte [rbp + rcx + 0x370], r14b
lea rcx, [rbp + 0x370]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], r14b
jne 0x14001aab0
xor edx, edx
nop dword [rax + rax]
movzx eax, byte [r15 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14001aac0
mov qword [rbp + 0x358], r14
mov dword [rbp + 0x350], r14d
mov word [rsp + 0x50], r14w
lea rax, [rbp + 0x370]
mov qword [rsp + 0x38], rax
mov byte [rbp + 0x360], 0
xor eax, eax
mov dword [rbp + 0x361], eax
mov byte [rbp + 0x365], al
lea rcx, [rbp + 0x360]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], al
jne 0x14001ab10
movzx eax, word [0x1400daa6c]
mov word [rcx], ax
lea rcx, [rbp + 0x360]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x14001ab30
movzx eax, word [0x1400daa74]
mov word [rcx], ax
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x370]
call fcn.14008691c
mov qword [rbp + 0x358], rax
test rax, rax
je 0x14001ab86
xor r9d, r9d
mov r8d, 0x200
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14008c320
mov dword [rbp + 0x350], 1
jmp 0x14001abd1
call fcn.140087430
cmp dword [rax], 0
je 0x14001abd1
lea r9, [rbp + 0x370]
lea r8, str.Cannot_open_file__s_n
mov edx, 3
xor ecx, ecx
call fcn.140015030
nop
mov rcx, qword [rbp + 0x358]
test rcx, rcx
je 0x14001ae71
call fcn.140088070
mov rcx, qword [rbp + 0x358]
call fcn.140086bc4
jmp 0x14001ae71
mov rbx, qword [rbp + 0x358]
test rbx, rbx
jne 0x14001abe2
mov rdi, r14
jmp 0x14001ac48
mov rcx, rbx
call fcn.14008ad3c
mov edi, eax
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, qword [rbp + 0x358]
call fcn.14008bb14
mov rcx, qword [rbp + 0x358]
call fcn.14008ad3c
movsxd rbx, eax
xor r8d, r8d
mov edx, edi
mov rcx, qword [rbp + 0x358]
call fcn.14008bb14
mov rdi, rbx
cmp ebx, 0x4000
jle 0x14001ac41
lea r8, str.too_big_file_n
mov edx, 3
xor ecx, ecx
call fcn.140015030
jmp 0x14001abab
mov rbx, qword [rbp + 0x358]
movsxd r12, edi
mov rcx, r12
call fcn.140085e1c
mov r13, rax
test rbx, rbx
je 0x14001acc4
test byte [rbp + 0x350], 1
je 0x14001ac9e
mov r9, rbx
mov r8, r12
mov edx, 1
mov rcx, rax
call fcn.1400883bc
cmp eax, edi
je 0x14001ac97
mov rcx, qword [rbp + 0x358]
call fcn.14008880c
test eax, eax
jne 0x14001ac97
mov rcx, qword [rbp + 0x358]
call fcn.140088834
mov rbx, qword [rbp + 0x358]
test rbx, rbx
je 0x14001acc4
mov rcx, rbx
call fcn.140088070
mov rcx, qword [rbp + 0x358]
call fcn.140086bc4
mov qword [rbp + 0x358], r14
mov word [rsp + 0x50], r14w
mov edx, edi
mov rcx, r13
call fcn.14001a900
mov r12, rax
mov rcx, r13
call fcn.140085b44
call fcn.1400183e0
mov rbx, rax
movsxd rcx, dword [rsp + 0x20]
call fcn.1400188c0
mov r8, rax
lea rdx, [0x1400d6ee0]
mov rcx, rbx
call fcn.1400184d0
mov edx, 5
lea rcx, str.error
call fcn.140018330
test eax, eax
je 0x14001ad69
lea rdi, reloc.WS2_32.dll_getsockopt
test rbx, rbx
je 0x14001ad4b
cmp dword [rbx], 0
jne 0x14001ad4b
cmp rbx, rdi
je 0x14001ad4b
mov r8, qword [rbx + 0x38]
lea rax, [r8 + 1]
mov qword [rbx + 0x38], rax
lea rcx, [rbx + 0x10]
mov r9, rdi
lea rdx, str.error
call fcn.1400165e0
test eax, eax
je 0x14001ad8e
mov rax, qword [0x140107b30]
cmp rax, 0xffffffffffffffff
je 0x14001ad8e
dec rax
mov qword [0x140107b30], rax
jne 0x14001ad8e
mov rcx, rdi
jmp 0x14001ad89
mov rax, qword [0x140107b30]
cmp rax, 0xffffffffffffffff
je 0x14001ad8e
dec rax
mov qword [0x140107b30], rax
jne 0x14001ad8e
lea rcx, reloc.WS2_32.dll_getsockopt
call fcn.140018960
call fcn.140018560
mov rdi, rax
mov r8, rax
lea rdx, str.result
mov rcx, rbx
call fcn.1400184d0
test r15, r15
jne 0x14001adb2
mov rax, r14
jmp 0x14001adba
mov rcx, r15
call fcn.140018870
mov rdx, rax
mov rcx, rdi
call fcn.140018700
test r12, r12
je 0x14001add5
mov rcx, r12
call fcn.140018870
mov r14, rax
mov rdx, r14
mov rcx, rdi
call fcn.140018700
mov rcx, rbx
call fcn.140015fc0
mov rdi, rax
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14001adf0
movsxd r8, esi
mov r14, qword [rsp + 0x28]
movsxd rcx, dword [r14]
add rcx, qword [rsp + 0x30]
mov rdx, rax
call fcn.140084c70
add dword [r14], esi
test rbx, rbx
je 0x14001ae34
mov rax, qword [rbx + 8]
cmp rax, 0xffffffffffffffff
je 0x14001ae34
dec rax
mov qword [rbx + 8], rax
jne 0x14001ae34
mov rcx, rbx
call fcn.140018960
mov rcx, rdi
call fcn.140085b44
mov rcx, r12
call fcn.140085b44
mov r8, r15
lea rdx, str.Remote_management:_file__s_was_uploaded_n
xor ecx, ecx
call fcn.140014e30
jmp 0x14001abab
call fcn.1400861e0
int3
lea rdx, str.srv:_wrong_miner_getfile:params_format_n
mov ecx, 2
call fcn.140014e30
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.140084a30
add rsp, 0x5b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret