Function at 0x140026890
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rdi
push r14
push r15
lea rbp, [rsp - 0xfe0]
mov eax, 0x10e0
call fcn.140174150
sub rsp, rax
mov r15, rdx
lea r14, [rbp + 0x1008]
mov rbx, rcx
lea r8, [fcn.14002ae10]
add r14, 0xfffffffffffffff8
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.140029110
lea r8, [0x140025c10]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x1020]
mov rcx, r14
call fcn.140029110
call fcn.140021980
mov rcx, qword [rbp + 0x1020]
lea rdx, [0x1401a4ea0]
mov r8, rax
mov r9, rbx
call fcn.14002a330
lea r8, [0x140025c10]
mov qword [rbp + 0x1020], rax
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.140029110
lea r8, [0x140025c10]
mov qword [rsp + 0x30], rax
lea rdx, [rbp + 0x1028]
mov rcx, r14
call fcn.140029110
lea r8, [0x140025c10]
mov qword [rbp + 0x1028], rax
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.140029110
mov rdx, qword [rbp + 0x1020]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov rdx, qword [rdx]
call fcn.14002ae40
mov rcx, qword [rbp + 0x1020]
mov rcx, qword [rcx]
call fcn.14002c670
test eax, eax
jne 0x1400269d6
mov rax, qword [rbp + 0x1020]
lea rdx, str.dll_missing__s
mov rbx, qword [rax]
mov r8, r15
mov rcx, r14
call fcn.1400294a0
xor edi, edi
mov rcx, qword [rax]
xor r9d, r9d
mov dword [rsp + 0x28], 1
mov rdx, rbx
mov dword [rsp + 0x20], edi
lea r8d, [r9 + 1]
call fcn.14001fb10
or eax, 0xffffffff
add rsp, 0x10e0
pop r15
pop r14
pop rdi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x1020]
mov rcx, qword [rcx]
call fcn.14002cce0
cmp eax, 0x5fa1f8
je 0x140026a0d
mov r9d, 0x5fa1f8
lea rdx, str._d__d
mov r8d, eax
mov rcx, r14
call fcn.1400294a0
lea rdx, str.dll_invalid_size__s
jmp 0x140026996
mov rax, qword [rbp + 0x1020]
mov qword [rsp + 0x1110], rsi
mov rsi, qword [rsp + 0x30]
mov rcx, rsi
mov rbx, qword [rax]
call fcn.14002a470
lea rcx, [rsp + 0x70]
call fcn.14005f750
lea rdx, [0x1401a5ec4]
mov rcx, rbx
call fcn.14002c6c0
xor edi, edi
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x140026a6a
mov rcx, qword [rsi]
test rcx, rcx
je 0x140026af4
call fcn.1401762fc
mov qword [rsi], rdi
jmp 0x140026af4
mov r9, rax
lea rcx, [rbp - 0x20]
mov edx, 1
mov r8d, 0x1000
call fcn.140176e10
test eax, eax
je 0x140026abe
nop word [rax + rax]
movsxd r8, eax
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14005f7c0
mov r9, qword [rsp + 0x48]
lea rcx, [rbp - 0x20]
mov edx, 1
mov r8d, 0x1000
call fcn.140176e10
test eax, eax
jne 0x140026a90
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.14005f430
mov r9d, 0x20
lea r8, [rsp + 0x50]
xor edx, edx
mov rcx, rsi
call fcn.14002ec60
mov rcx, qword [rsi]
call fcn.14002ace0
lea rcx, [rsp + 0x48]
call fcn.14002c690
cmp qword [rsi], rdi
mov rsi, qword [rsp + 0x1110]
jne 0x140026b22
mov rax, qword [rbp + 0x1020]
lea rdx, str.dll_failed_open__s
mov r8, r15
mov rcx, r14
mov rbx, qword [rax]
call fcn.1400294a0
jmp 0x1400269a6
mov rcx, qword [rsp + 0x30]
lea rdx, str.24347de0c339f3e635cc9ff4c07ee60d3e6908d282d7aee20f3545a7c330932c
mov rcx, qword [rcx]
call fcn.14002a0e0
test eax, eax
je 0x140026b72
mov r8, qword [rsp + 0x30]
lea r9, str.24347de0c339f3e635cc9ff4c07ee60d3e6908d282d7aee20f3545a7c330932c
lea rdx, str._s__s
mov rcx, r14
mov r8, qword [r8]
call fcn.1400294a0
lea rdx, str.dll_invalid_hash__s
mov r8, r15
mov rcx, r14
mov rbx, qword [rax]
call fcn.1400294a0
jmp 0x1400269a6
mov rcx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov rdx, qword [rbp + 0x1028]
mov rcx, qword [rcx]
call fcn.140026c30
test eax, eax
je 0x140026bae
mov rax, qword [rsp + 0x40]
lea rdx, str.dll_failed_verify__s
mov r8, r15
mov rcx, r14
mov rbx, qword [rax]
call fcn.1400294a0
jmp 0x1400269a6
mov rcx, qword [rbp + 0x1028]
lea rdx, str.CIL__PostalCode4250713__LNetanya__STREET3_Hamachshev_st__OLuminati_Networks_Ltd__CNLuminati_Networks_Ltd
mov rcx, qword [rcx]
call fcn.14002a0e0
test eax, eax
je 0x140026c1d
mov rcx, qword [rbp + 0x1028]
lea rdx, str.CIL__SCentral__OBright_Data_Ltd.__CNBright_Data_Ltd.
mov rcx, qword [rcx]
call fcn.14002a0e0
test eax, eax
je 0x140026c1d
mov rcx, qword [rbp + 0x1028]
lea rdx, str.OID.2.5.4.15Private_Organization__OID.1.3.6.1.4.1.311.60.2.1.3IL__SERIALNUMBER514114842__CIL__LNetanya__OBright_Data_Ltd__CNBright_Data_Ltd
mov rcx, qword [rcx]
call fcn.14002a0e0
test eax, eax
je 0x140026c1d
mov rax, qword [rbp + 0x1028]
lea rdx, str.dll_invalid_signature__s
mov r8, r15
mov rcx, r14
mov rbx, qword [rax]
call fcn.1400294a0
jmp 0x1400269a6
xor eax, eax
add rsp, 0x10e0
pop r15
pop r14
pop rdi
pop rbx
pop rbp
ret