Function at 0x140030ef0
Capabilities:
Read file on windows

Disassembly:
push r15
mov eax, 0x4068
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.140041200
sub rsp, rax
mov r13, qword [rsp + 0x40d0]
mov ebx, dword [rcx + 0x11c]
lea r15, [rsp + 0x54]
lea rbp, [rsp + 0x58]
mov rsi, rcx
mov r14, r9
mov qword [rsp + 0x40], r15
lea r12, [rsp + 0x50]
lea rdi, [rsp + 0x5c]
mov r15, rdx
mov qword [rsp + 0x48], rbp
mov rbp, r8
mov qword [rsp + 0x40b8], rdx
mov qword [rsp + 0x40c0], r8
jmp 0x140030f81
sub dword [r15], 1
mov eax, dword [rbp]
lea edx, [rax + 0xf4240]
mov dword [rbp], edx
mov eax, dword [r14]
mov r8d, dword [r13]
test edx, edx
jne 0x140031484
mov ecx, dword [r15]
or ecx, r8d
or ecx, eax
jne 0x140030ffb
mov r9, qword [rsi]
mov r8d, 0x10
mov edx, 1
mov rcx, r12
call sym.fread
cmp rax, 0xf
jbe 0x1400311f8
add qword [rsi + 0x138], rax
mov ecx, ebx
mov rdx, r12
call sym.PCAP32
mov rdx, qword [rsp + 0x40]
mov dword [r15], eax
call sym.PCAP32
mov rdx, qword [rsp + 0x48]
mov dword [rbp], eax
call sym.PCAP32
mov rdx, rdi
mov dword [r13], eax
call sym.PCAP32
mov dword [r14], eax
mov edx, dword [rbp]
cmp edx, 0xf42a4
jbe 0x140030f6b
cmp edx, 0xffffff00
ja 0x140030f58
mov r8d, dword [r13]
mov edx, 1
cmp dword [rsp + 0x40e0], r8d
jae 0x140031158
lea rax, [rsi + 0x1c]
mov qword [rsp + 0x40d0], r13
mov rbp, r14
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsi]
call dbg.ftello64
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x1400313c7
mov rdi, qword [rsi + 0x128]
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov qword [rsp + 0x28], r12
mov r8, qword [rsp + 0x48]
lea rdx, str._s:_lld:_corruption_found_at_0x_08llx___lld__n
mov qword [rsp + 0x20], r12
mov rcx, rax
mov r9, rdi
call sym.fprintf_27
mov r9, qword [rsi]
mov rcx, qword [rsp + 0x40]
mov r8d, 0x4000
mov edx, 1
call sym.fread
test rax, rax
je 0x1400313f5
add qword [rsi + 0x138], rax
mov ecx, ebx
mov r11d, eax
mov rbx, r12
mov r13d, dword [rsi + 0x120]
xor r14d, r14d
xor r8d, r8d
mov r12, rax
mov r10d, r11d
sub r10d, r14d
cmp r10d, 0xf
jbe 0x140031130
mov rax, qword [rsp + 0x40]
add r8, rax
mov rdx, r8
call sym.PCAP32
lea rdx, [r8 + 4]
mov r9d, eax
call sym.PCAP32
lea rdx, [r8 + 8]
mov r15d, eax
call sym.PCAP32
lea rdx, [r8 + 0xc]
mov edi, eax
call sym.PCAP32
cmp eax, edi
setb dl
cmp r15d, 0xf4240
seta r15b
or r15d, edx
cmp eax, 0x2710
seta al
sub r9d, 0x26000000
or r15d, eax
cmp r9d, 0x2a000000
seta al
or al, r15b
jne 0x140031130
lea eax, [rdi - 0x10]
cmp eax, 0x2700
jbe 0x140031233
lea r8d, [r14 + 1]
mov r14, r8
cmp r8, r12
jb 0x1400310af
mov ebx, ecx
lea rcx, str.No_valid_packet_found_in_chunk_n
call sym.printf.constprop.0_5
jmp 0x140031027
cmp eax, r8d
jb 0x140031009
sub eax, 8
cmp eax, 0x270f8
ja 0x140031009
test edx, edx
jne 0x140031009
mov r9, qword [rsi]
mov rcx, qword [rsp + 0x40d8]
mov edx, 1
call sym.fread
mov edx, dword [r13]
cmp rax, rdx
jb 0x140031424
add qword [rsi + 0x138], rax
mov rax, qword [rsi + 0x128]
test rax, rax
jne 0x1400311c6
mov rdi, qword [rsp + 0x40b8]
mov edx, dword [rdi]
mov rdi, qword [rsp + 0x40c0]
mov dword [rsi + 0xc], edx
mov edx, dword [rdi]
mov dword [rsi + 0x10], edx
mov rdi, qword [rsp + 0x40b8]
add rax, 1
mov edx, dword [rdi]
mov rdi, qword [rsp + 0x40c0]
mov dword [rsi + 0x14], edx
mov edx, dword [rdi]
mov qword [rsi + 0x128], rax
mov eax, 1
mov dword [rsi + 0x18], edx
jmp 0x1400311ff
test rax, rax
jne 0x140031213
xor eax, eax
add rsp, 0x4068
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call qword [dbg.__acrt_iob_func]
lea r8, [rsi + 0x1c]
lea rdx, [0x140064e20]
mov rcx, rax
call sym.fprintf_27
jmp 0x1400311fd
lea eax, [rdi + 0x10]
cmp eax, r10d
jb 0x140031306
cmp r13d, 1
jne 0x140031130
cmp byte [r8 + 0xc], 8
jne 0x140031130
cmp byte [r8 + 0xd], 0
jne 0x140031130
cmp byte [r8 + 0xe], 0x45
jne 0x140031130
mov edx, r14d
mov rcx, qword [rsi]
xor r8d, r8d
mov r13, qword [rsp + 0x40d0]
add rdx, rbx
call dbg.fseeko64
test eax, eax
jne 0x140031388
mov rcx, qword [rsi]
call dbg.ftello64
mov rbx, qword [rsi + 0x128]
mov ecx, 2
mov r12, rax
call qword [dbg.__acrt_iob_func]
mov qword [rsp + 0x28], r12
mov r8, qword [rsp + 0x48]
mov r9, rbx
mov qword [rsp + 0x20], r12
mov rcx, rax
lea rdx, str._s:_lld:_good_packet_found_at_0x_08llx___lld__n
call sym.fprintf_27
mov qword [rsp + 0x20], r13
mov r9, rbp
mov rcx, rsi
mov eax, dword [rsp + 0x40e0]
mov r8, qword [rsp + 0x40c0]
mov rdx, qword [rsp + 0x40b8]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x40d8]
mov qword [rsp + 0x28], rax
call dbg.pcapfile_readframe
jmp 0x1400311ff
lea r8, [r8 + rdi + 0x10]
mov rdx, r8
call sym.PCAP32
lea rdx, [r8 + 4]
mov r9d, eax
call sym.PCAP32
lea rdx, [r8 + 8]
mov edi, eax
call sym.PCAP32
lea rdx, [r8 + 0xc]
mov r10d, eax
call sym.PCAP32
cmp eax, r10d
mov edx, eax
setb al
cmp edi, 0xf4240
seta r8b
or eax, r8d
cmp edx, 0x2710
seta dl
sub r9d, 0x26000000
or eax, edx
cmp r9d, 0x2a000000
seta dl
or al, dl
jne 0x140031130
sub r10d, 0x10
cmp r10d, 0x2700
ja 0x140031130
jmp 0x14003126a
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov rdi, qword [rsp + 0x48]
lea rdx, str._s:_could_not_resolve_file_corruption__seek_forward__n
mov rcx, rax
mov r8, rdi
call sym.fprintf_27
mov rcx, rdi
call sym.perror
mov rcx, qword [rsi]
mov r8d, 2
xor edx, edx
call dbg.fseeko64
jmp 0x1400311fd
mov rbx, qword [rsi + 0x128]
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov rdi, qword [rsp + 0x48]
lea rdx, str._s:_lld:_could_not_resolve_file_corruption__ftell__n
mov rcx, rax
mov r9, rbx
mov r8, rdi
call sym.fprintf_27
jmp 0x1400313aa
mov ecx, 2
call qword [dbg.__acrt_iob_func]
mov rdi, qword [rsp + 0x48]
lea rdx, str._s:_error_at_end_of_file_n
mov rcx, rax
mov r8, rdi
call sym.fprintf_27
mov rcx, rdi
call sym.perror
jmp 0x1400311fd
test rax, rax
jne 0x140031461
mov rbx, qword [rsi + 0x128]
mov ecx, 2
add rsi, 0x1c
call qword [dbg.__acrt_iob_func]
mov r8, rsi
lea rdx, str._s:_could_not_read_packet_data__frame__lld_n
mov rcx, rax
mov r9, rbx
call sym.fprintf_27
mov rcx, rsi
call sym.perror
jmp 0x1400311fd
mov ecx, 2
call qword [dbg.__acrt_iob_func]
lea r8, [rsi + 0x1c]
lea rdx, str._s:_premature_end_of_file_n
mov rcx, rax
call sym.fprintf_27
jmp 0x1400311fd
xor edx, edx
jmp 0x140030ffb