Function at 0x14000c7a0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x18], r8
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor ebp, ebp
lea rdx, [0x140032ad4]
mov r12d, ebp
mov esi, ebp
mov rdi, r9
mov r13, rcx
call fcn.1400158d8
mov r15, rax
test rax, rax
je 0x14000c856
xor edx, edx
mov r8d, 2
mov rcx, rax
call fcn.1400166f4
mov rcx, r15
call fcn.1400163d8
xor r8d, r8d
mov r12d, eax
xor edx, edx
mov rcx, r15
call fcn.1400166f4
movsxd rcx, r12d
call fcn.1400152a0
mov rsi, rax
test r12d, r12d
jle 0x14000c84e
mov ebx, ebp
mov r14d, r12d
nop
mov edx, 1
lea rcx, [rsi + rbx]
mov r8d, edx
mov r9, r15
call fcn.1400169fc
cmp rax, 1
je 0x14000c845
mov rcx, rsi
call fcn.140014e70
mov rsi, rbp
inc rbx
sub r14, 1
jne 0x14000c820
mov rcx, r15
call fcn.140015a08
test rsi, rsi
je 0x14000c86d
mov eax, 0x5a4d
cmp word [rsi], ax
je 0x14000c874
mov rcx, rsi
call fcn.140014e70
xor eax, eax
jmp 0x14000ccdb
mov eax, dword [rsi + 0x3c]
mov r11d, dword [rsi + rax + 0x58]
lea r14, [rsi + rax]
test r11d, r11d
je 0x14000c917
cmp r12d, dword [r14 + 0x50]
je 0x14000c917
add eax, 0x58
mov r9d, r12d
mov rdx, rbp
mov r8, rbp
test r12d, r12d
je 0x14000c8e3
mov r10d, eax
movabs rbx, 0x100000000
cmp r8, r10
je 0x14000c8da
mov ecx, dword [rsi + r8]
mov rax, rdx
shr rax, 0x20
add rcx, rax
mov edx, edx
add rdx, rcx
cmp rdx, rbx
jbe 0x14000c8da
mov rcx, rdx
mov edx, edx
shr rcx, 0x20
add rdx, rcx
add r8, 4
cmp r8, r9
jl 0x14000c8b1
movzx eax, dx
mov rcx, rdx
shr rcx, 0x10
add rcx, rax
mov rax, rcx
shr rax, 0x10
add eax, ecx
movzx r9d, ax
add r9d, r12d
cmp r11d, r9d
je 0x14000c917
mov r8d, r11d
lea rcx, str._ninvalid_checksum:__s__lx___lx_n_n
mov rdx, r13
call fcn.1400012a0
mov r13d, dword [r14 + 0x50]
mov eax, 0x14c
cmp word [r14 + 4], ax
jne 0x14000c92d
mov r12d, dword [r14 + 0x34]
jmp 0x14000c931
mov r12, qword [r14 + 0x30]
mov rcx, r13
call fcn.1400152a0
mov r8d, dword [r14 + 0x54]
mov rdx, rsi
mov rcx, rax
mov rbx, rax
call fcn.140027080
mov eax, 0x14c
mov ecx, pe_nt_image_headers64
cmp word [r14 + 4], ax
mov r15d, 0xf8
cmovne r15d, ecx
add r15, r14
cmp bp, word [r14 + 6]
jae 0x14000c9a2
nop
movzx eax, bp
lea rcx, [rax + rax*4]
mov eax, dword [r15 + rcx*8 + 0x10]
test eax, eax
je 0x14000c998
mov edx, dword [r15 + rcx*8 + 0x14]
mov r8d, eax
mov ecx, dword [r15 + rcx*8 + 0xc]
add rdx, rsi
add rcx, rbx
call fcn.140027080
inc bp
cmp bp, word [r14 + 6]
jb 0x14000c970
mov rcx, rsi
call fcn.140014e70
mov rcx, qword [rsp + 0x60]
mov rax, rbx
mov ebp, dword [rbx + 0x3c]
sub rax, r12
add rbp, rbx
mov r10, rcx
sub r10, r12
test rcx, rcx
cmove r10, rax
test r10, r10
je 0x14000ccd8
mov r8d, 0x14c
mov esi, 0x88
cmp word [rbp + 4], r8w
mov eax, 0x98
cmovne esi, eax
mov ecx, dword [rsi + rbp + 0x1c]
test ecx, ecx
je 0x14000ccd8
mov eax, dword [rsi + rbp + 0x18]
test eax, eax
je 0x14000ccd8
lea rdx, [rbx + rax]
mov eax, dword [rbx + rax]
cmp eax, 0xcdcdcdcd
je 0x14000ccd8
test eax, eax
je 0x14000ccd8
lea r11, [rdx + rcx]
cmp rdx, r11
jae 0x14000ca90
mov eax, dword [rdx + 4]
test eax, eax
je 0x14000ca8a
lea r9, [rax - 8]
shr r9, 1
lea r8, [rdx + 8]
je 0x14000ca7f
nop dword [rax + rax]
movzx eax, word [r8]
movzx ecx, ax
shr cx, 0xc
cmp cx, 0xa
jne 0x14000ca61
mov ecx, dword [rdx]
and eax, 0xfff
add rax, rbx
add qword [rcx + rax], r10
jmp 0x14000ca75
cmp cx, 3
jne 0x14000ca75
mov ecx, dword [rdx]
and eax, 0xfff
add rax, rbx
add dword [rcx + rax], r10d
add r8, 2
sub r9, 1
jne 0x14000ca40
mov eax, dword [rdx + 4]
add rdx, rax
cmp rdx, r11
jb 0x14000ca24
mov r8d, 0x14c
lea rcx, [rbp + 0xc8]
cmp word [rbp + 4], r8w
je 0x14000caa5
lea rcx, [rbp + 0xd8]
mov eax, dword [rcx]
test eax, eax
je 0x14000ccd8
mov edx, dword [rcx + 4]
cmp edx, 0x108
jb 0x14000ccd8
cmp eax, r13d
ja 0x14000ccd8
cmp dword [rax + rbx], edx
jne 0x14000ccd8
mov ecx, dword [rax + rbx + 0xe0]
test ecx, ecx
je 0x14000ccd8
mov eax, dword [rsi + rbp + 0x18]
add rax, rbx
add rcx, rax
mov ebp, dword [rcx + 4]
lea rsi, [rcx + 8]
add rbp, rcx
cmp rsi, rbp
jae 0x14000ccd8
nop dword [rax]
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000ccd8
cmp rcx, 7
je 0x14000ccc5
mov edx, dword [rsi + 8]
lea rax, [rsi + 0xc]
cmp rcx, 5
jne 0x14000cb87
lea r10, [rax + rdx]
cmp rax, r10
jae 0x14000ccc5
cmp dword [rax], 0
je 0x14000ccc5
mov r9d, dword [rax + 4]
lea r8, [rax + 8]
add r9, rax
cmp r8, r9
jae 0x14000cb77
nop dword [rax]
movzx edx, word [r8]
add r8, 2
mov ecx, dword [rax]
and edx, 0xfff
add rdx, rcx
mov ecx, dword [rdx + rdi]
mov dword [rdx + rbx], ecx
movzx ecx, byte [rdx + rdi + 4]
mov byte [rdx + rbx + 4], cl
cmp r8, r9
jb 0x14000cb50
mov ecx, dword [rax + 4]
add rax, rcx
cmp rax, r10
jb 0x14000cb30
jmp 0x14000ccc5
cmp rcx, 4
jne 0x14000cc08
lea r10, [rax + rdx]
cmp rax, r10
jae 0x14000ccc5
nop word [rax + rax]
cmp dword [rax], 0
je 0x14000ccc5
mov ecx, dword [rax + 4]
test ecx, ecx
je 0x14000ccc5
lea r9, [rax + rcx]
lea r8, [rax + 8]
cmp r8, r9
jae 0x14000cbf8
nop dword [rax]
nop word [rax + rax]
movzx edx, word [r8]
add r8, 2
mov ecx, dword [rax]
and edx, 0xfff
add rdx, rcx
mov ecx, dword [rdx + rdi]
mov dword [rdx + rbx], ecx
movzx ecx, word [rdx + rdi + 4]
mov word [rdx + rbx + 4], cx
cmp r8, r9
jb 0x14000cbd0
mov ecx, dword [rax + 4]
add rax, rcx
cmp rax, r10
jb 0x14000cba0
jmp 0x14000ccc5
cmp rcx, 3
jne 0x14000cc77
lea r10, [rdx + rax]
cmp rax, r10
jae 0x14000ccc5
nop dword [rax + rax]
cmp dword [rax], 0
je 0x14000ccc5
mov ecx, dword [rax + 4]
test ecx, ecx
je 0x14000ccc5
lea r8, [rax + 8]
lea r9, [r8 + rcx]
cmp r8, r9
jae 0x14000cc6a
mov edx, dword [r8]
add r8, 4
mov ecx, dword [rax]
and edx, 0xfff
add rdx, rcx
movsd xmm0, qword [rdx + rdi]
movsd qword [rdx + rbx], xmm0
mov ecx, dword [rdx + rdi + 8]
mov dword [rdx + rbx + 8], ecx
cmp r8, r9
jb 0x14000cc41
mov ecx, dword [rax + 4]
add rax, rcx
cmp rax, r10
jb 0x14000cc20
jmp 0x14000ccc5
lea r11, [rdx + rax]
cmp rax, r11
jae 0x14000ccc5
cmp dword [rax], 0
je 0x14000ccc5
mov ecx, dword [rax + 4]
test ecx, ecx
je 0x14000ccc5
lea r10, [rax + rcx]
lea r9, [rax + 8]
cmp r9, r10
jae 0x14000ccba
nop dword [rax]
movzx r8d, word [r9]
add r9, 2
mov ecx, dword [rax]
add r8, rcx
mov rcx, qword [r8 + rdi]
mov qword [r8 + rbx], rcx
cmp r9, r10
jb 0x14000cca0
mov ecx, dword [rax + 4]
add rax, rcx
cmp rax, r11
jb 0x14000cc80
mov eax, dword [rsi + 8]
add rsi, 0xc
add rsi, rax
cmp rsi, rbp
jb 0x14000cb00
mov rax, rbx
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret