Function at 0x1402a4d70
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x1404f2b48]
xor rax, rsp
mov qword [rbp + 0x110], rax
xorps xmm0, xmm0
movsxd rax, r8d
xor r13d, r13d
mov rsi, rcx
cmp byte [rdx + 0x348], r13b
mov edi, 0x2a0
mov rbx, rdx
mov qword [rsp + 0x58], r13
lea rcx, [rax + rax*2]
mov r12, qword [rdx + rcx*8 + 0x278]
lea eax, [r13 + 8]
mov edx, dword [rdx + 0x13c]
lea r14d, [rdi + 0x18]
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x30], r12
movups xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x80], 4
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
je 0x1402a4e72
cmp byte [r12 + 0x6b], r13b
mov ecx, 0x20
cmovne ecx, eax
cmp edx, 2
jne 0x1402a4e24
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
mov eax, edi
cmovne eax, r14d
cmp dword [rax + rbx], edx
je 0x1402a4e24
movzx eax, byte [rsi + 0x723]
jmp 0x1402a4e2b
movzx eax, byte [rsi + 0x65b]
test al, al
je 0x1402a4e37
or ecx, 0x1800
jmp 0x1402a4e77
cmp edx, 2
jne 0x1402a4e59
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
cmp dword [rax + rbx], edx
je 0x1402a4e59
movzx eax, byte [rsi + 0x725]
jmp 0x1402a4e60
movzx eax, byte [rsi + 0x65d]
test al, al
je 0x1402a4e6c
or ecx, 0x1a00
jmp 0x1402a4e77
bts ecx, 9
jmp 0x1402a4e77
mov ecx, 0x1808
mov dword [rbp - 0x38], ecx
cmp byte [rbx + 0x349], r13b
jne 0x1402a4e89
or ecx, 4
mov dword [rbp - 0x38], ecx
cmp edx, 2
jne 0x1402a4eab
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
cmp dword [rax + rbx], edx
je 0x1402a4eab
movzx eax, byte [rsi + 0x727]
jmp 0x1402a4eb2
movzx eax, byte [rsi + 0x65f]
test al, al
jne 0x1402a4ec8
and ecx, 0xffffffbf
lea rdx, [0x140443760]
or ecx, 0x10
mov dword [rbp - 0x38], ecx
jmp 0x1402a4ecf
lea rdx, [0x140443798]
mov rcx, rsi
call fcn.140267e40
movsxd r8, dword [rbx + 0x2d8]
cmp r8d, 7
ja case.default.0x1402a4efa
lea rcx, [0x140000000]
mov eax, dword [rcx + r8*4 + 0x2a5884]
add rax, rcx
jmp rax
mov r10d, dword [rbx + 0x13c]
cmp r10d, 2
jne 0x1402a4f52
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
cmp dword [rax + rbx], r10d
je 0x1402a4f2e
mov r8d, dword [rbx + 0x350]
mov r9d, dword [rbx + 0x354]
jmp 0x1402a4f59
cmp r10d, 2
jne 0x1402a4f52
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
cmp dword [rax + rbx], r10d
je 0x1402a4f52
mov r9d, dword [rbx + 0x354]
jmp 0x1402a4f59
mov r9d, dword [rbx + 0x2dc]
test r9d, 0xfffeffff
mov qword [rsp + 0x278], r15
mov eax, 0x60000
cmove r9d, eax
sar r9d, 0x10
cmp r8d, r9d
jg 0x1402a4fcb
mov edx, dword [rbp - 0x48]
nop dword [rax]
mov ecx, r8d
sub ecx, 4
je 0x1402a4fbc
sub ecx, 1
je 0x1402a4fb6
sub ecx, 1
je 0x1402a4fb0
cmp ecx, 1
jne 0x1402a4fc3
lea rdx, [0x140443330]
mov rcx, rsi
call fcn.140267cd0
mov eax, 0x23
jmp 0x1402a53e7
bts edx, 0xb
jmp 0x1402a4fc0
bts edx, 9
jmp 0x1402a4fc0
bts edx, 7
mov dword [rbp - 0x48], edx
inc r8d
cmp r8d, r9d
jle 0x1402a4f80
cmp r10d, 2
jne 0x1402a4fef
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
cmp dword [rax + rbx], r10d
je 0x1402a4fef
mov rax, qword [rbx + 0x388]
jmp 0x1402a4ff6
mov rax, qword [rbx + 0x310]
test rax, rax
je 0x1402a50de
cmp r10d, 2
jne 0x1402a5020
cmp qword [rbx + 0x1f0], 0xffffffffffffffff
cmovne rdi, r14
cmp dword [rdi + rbx], r10d
je 0x1402a5020
mov rbx, qword [rbx + 0x388]
jmp 0x1402a5027
mov rbx, qword [rbx + 0x310]
lea r15, [r12 + 0x6c]
mov r14d, r13d
test rbx, rbx
je 0x1402a50d6
mov rdi, r13
nop dword [rax + rax]
cmp byte [rbx], r13b
je 0x1402a50d6
cmp rdi, 0x2d
jge 0x1402a50d6
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1403d6cb0
test eax, eax
jne 0x1402a50ad
mov rcx, rbx
call fcn.1402a4730
test eax, eax
jne 0x1402a50ad
lea r8d, [rax + 0x11]
mov rcx, rbx
lea rdx, [0x1404436a0]
call fcn.1403ddfe0
test eax, eax
je 0x1402a50a4
mov r8d, 0x15
lea rdx, [0x1404436b8]
mov rcx, rbx
call fcn.1403ddfe0
test eax, eax
jne 0x1402a512a
or dword [rbp - 0x38], 0x400000
jmp 0x1402a50b7
inc r14d
mov dword [r15 + rdi*4], eax
inc rdi
mov edx, 0x3a
mov rcx, rbx
call fcn.1403cc2e0
mov rbx, rax
test rax, rax
je 0x1402a50d6
add rbx, 1
jne 0x1402a5040
mov qword [rbp - 0x50], r15
mov dword [rbp - 0x58], r14d
mov rcx, qword [rsi + 0x5b8]
test rcx, rcx
jne 0x1402a5143
cmp qword [rsi + 0x5e8], r13
je 0x1402a54dc
mov rax, qword [rsi + 0x5e8]
mov r14d, r13d
mov qword [rsp + 0x68], rax
mov r12, r13
mov qword [rsp + 0x70], rcx
mov r15, rcx
mov rdi, rcx
mov rdx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdx
jmp 0x1402a532d
lea rdx, [0x140443828]
mov rcx, rsi
call fcn.140267cd0
mov eax, 0x3b
jmp 0x1402a53e7
mov rax, qword [rsi + 0x5e8]
xor r8d, r8d
mov qword [rsp + 0x70], r8
mov r14d, r13d
mov qword [rsp + 0x60], r8
mov r12, r13
mov qword [rsp + 0x50], r8
mov r15d, r8d
mov qword [rsp + 0x68], rax
mov edi, r8d
test rax, rax
je 0x1402a5188
mov rdx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdx
jmp 0x1402a532d
call case.0x14025c7d9.0
mov rdi, rax
test rax, rax
je case.0x1402a5823.2146893056
mov edx, 0x5c
mov rcx, rax
call fcn.1403cc2e0
mov r15, rax
test rax, rax
je 0x1402a5300
mov rbx, rax
lea rdx, [0x1404436d0]
sub rbx, rdi
mov rcx, rdi
mov r8, rbx
call fcn.1403ddfe0
test eax, eax
jne 0x1402a51d9
mov r14d, 0x10000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x1404436e0]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a51fa
mov r14d, 0x20000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x1404436f0]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a521b
mov r14d, 0x40000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x140443700]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a5239
mov r14d, 0x50000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x14044370c]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a5257
mov r14d, 0x60000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x140443718]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a5275
mov r14d, 0x70000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x140443730]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a5293
mov r14d, 0x80000
jmp 0x1402a52af
mov r8, rbx
lea rdx, [0x140443748]
mov rcx, rdi
call fcn.1403ddfe0
test eax, eax
jne 0x1402a5300
mov r14d, 0x90000
mov edx, 0x5c
lea rcx, [r15 + 1]
call fcn.1403cc2e0
mov rbx, rax
test rax, rax
je 0x1402a5300
lea r13, [rax + 1]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], r12b
jne 0x1402a52d0
cmp rax, 0x28
jne 0x1402a5300
lea rcx, [r15 + 1]
mov byte [rbx], r12b
call qword [case.0x14025c7d9.0]
mov byte [rbx], 0x5c
mov r12, rax
test rax, rax
jne 0x1402a538a
lea ebx, [rax + 0x1b]
jmp 0x1402a5305
mov ebx, 0x3a
mov rcx, qword [rsi + 0x5b8]
cmp byte [rcx], 0
je 0x1402a582c
lea rdx, [0x1404ca184]
call fcn.1402a2b60
mov r15, rax
test rax, rax
je 0x1402a582c
mov rcx, qword [rsi + 0x630]
test rcx, rcx
je 0x1402a5373
lea rdx, [0x14044389c]
call fcn.14026e180
test eax, eax
jne 0x1402a5373
cmp qword [rsp + 0x68], 0
lea r14, [0x1404438a0]
jne 0x1402a535f
mov r14, qword [rsi + 0x5b8]
mov r8, r14
lea rdx, [0x1404438b0]
mov rcx, rsi
call fcn.140267cd0
jmp 0x1402a53d5
mov rax, qword [rsp + 0x68]
test r15, r15
jne 0x1402a5520
test rax, rax
jne 0x1402a5520
xor edx, edx
mov qword [rsp + 0x20], r12
mov r9d, r14d
xor r8d, r8d
bts r9d, 0xe
lea ecx, [rdx + 9]
call qword [sym.imp.crypt32.dll_CertOpenStore]
mov rbx, rax
test rax, rax
jne 0x1402a5410
call qword [sym.imp.kernel32.dll_GetLastError]
mov r9, r12
lea rdx, [0x1404439e8]
mov r8d, r14d
mov dword [rsp + 0x20], eax
mov rcx, rsi
call fcn.140267cd0
mov rcx, r12
call qword [fcn.1403d8820]
test rdi, rdi
je 0x1402a53e2
mov rcx, rdi
call fcn.1403d8820
mov eax, 0x3a
mov r15, qword [rsp + 0x278]
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1403cb150
add rsp, 0x220
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, r12
call qword [fcn.1403d8820]
xor ecx, ecx
mov dword [rbp - 0x28], 0x14
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 8]
mov qword [rsp + 0x28], rcx
lea r9, [rbp - 8]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x28]
lea edx, [rcx + 0x28]
mov qword [rsp + 0x20], rax
lea r8d, [rcx + 4]
mov rcx, r13
call qword [sym.imp.crypt32.dll_CryptStringToBinaryA]
test eax, eax
jne 0x1402a5476
test rdi, rdi
je 0x1402a5763
mov rcx, rdi
call fcn.1403d8820
xor edx, edx
mov rcx, rbx
call qword [sym.imp.crypt32.dll_CertCloseStore]
jmp 0x1402a53e2
mov r9d, 0x10000
lea rax, [rbp - 0x28]
xor r13d, r13d
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov rcx, rbx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 1]
call qword [sym.imp.crypt32.dll_CertFindCertificateInStore]
mov qword [rsp + 0x58], rax
test rdi, rdi
je 0x1402a54b4
mov rcx, rdi
call fcn.1403d8820
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x1402a5763
lea rax, [rsp + 0x58]
mov dword [rbp - 0x7c], 1
xor edx, edx
mov qword [rbp - 0x78], rax
mov rcx, rbx
call qword [sym.imp.crypt32.dll_CertCloseStore]
mov r12, qword [rbp - 0x30]
mov edx, 0x20
lea ecx, [rdx - 0x1f]
call qword [fcn.1403df840]
mov qword [r12], rax
test rax, rax
jne 0x1402a5773
lea rdx, [0x140443a28]
mov rcx, rsi
call fcn.140267cd0
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je case.0x1402a5823.2146893056
call qword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov eax, 0x1b
jmp 0x1402a53e7
xor ecx, ecx
lea r14, [0x1404438a0]
mov ebx, ecx
mov r13d, ecx
test rax, rax
jne 0x1402a553a
mov r14, qword [rsi + 0x5b8]
test rdi, rdi
je 0x1402a5549
mov rcx, rdi
call fcn.1403d8820
xor ecx, ecx
test r15, r15
je 0x1402a5620
xor edx, edx
mov r12d, ecx
mov rcx, r15
lea r8d, [rdx + 2]
call fcn.1403d7e60
test eax, eax
sete dil
test eax, eax
jne 0x1402a55b6
mov rcx, r15
call fcn.1403d75f0
mov r12d, eax
test eax, eax
jns 0x1402a55b6
xor dil, dil
mov r12, qword [rsp + 0x60]
mov rax, qword [rsp + 0x50]
test r12, r12
je 0x1402a55f4
mov r9, r15
mov r8d, 1
mov rdx, rax
mov rcx, r12
call fcn.1403d8aa0
cmp eax, 1
jne 0x1402a55f4
mov rcx, r15
call fcn.1403d7be0
test dil, dil
jne 0x1402a5625
jmp 0x1402a55fc
mov eax, r12d
mov qword [rsp + 0x50], rax
test dil, dil
je 0x1402a55ed
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.1403d7e60
test eax, eax
sete dil
test eax, eax
jne 0x1402a557f
mov rcx, qword [rsp + 0x50]
inc rcx
call qword [section._________1]
mov r12, rax
jmp 0x1402a5584
mov r12, qword [rsp + 0x60]
jmp 0x1402a5589
mov rcx, r15
call fcn.1403d7be0
mov r8, qword [rsi + 0x5b8]
lea rdx, [0x1404438f0]
mov rcx, rsi
call fcn.140267cd0
mov rcx, r12
call qword [fcn.1403d8820]
jmp 0x1402a53e2
mov r12, qword [rsp + 0x60]
mov rax, qword [rsp + 0x50]
mov dword [rbp - 0x18], eax
mov rax, qword [rsi + 0x650]
mov qword [rbp - 0x10], r12
test rax, rax
je 0x1402a564d
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], r13b
jne 0x1402a5644
lea rcx, [rbx*2 + 2]
call qword [section._________1]
mov rdi, rax
test rax, rax
je 0x1402a56c8
test rbx, rbx
je 0x1402a5695
mov r8, qword [rsi + 0x650]
lea ecx, [rbx + 1]
mov dword [rsp + 0x28], ecx
mov r9d, ebx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
mov edx, 8
call qword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov r13d, eax
test eax, eax
js 0x1402a56a5
cmp r13d, ebx
jg 0x1402a56a5
mov eax, r13d
xor ecx, ecx
mov word [rdi + rax*2], cx
jmp 0x1402a56aa
xor ecx, ecx
mov word [rdi], cx
xor r8d, r8d
lea rcx, [rbp - 0x18]
mov rdx, rdi
call qword [sym.imp.crypt32.dll_PFXImportCertStore]
mov rcx, rdi
mov rbx, rax
call qword [fcn.1403d8820]
jmp 0x1402a56cd
mov rbx, qword [rsp + 0x70]
cmp qword [rsp + 0x68], 0
jne 0x1402a56de
mov rcx, r12
call qword [fcn.1403d8820]
test rbx, rbx
jne 0x1402a5719
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, r14
mov rcx, rsi
cmp eax, 0x56
jne 0x1402a5705
lea rdx, [0x140443918]
call fcn.140267cd0
jmp 0x1402a53e2
mov r9d, eax
lea rdx, [0x140443958]
call fcn.140267cd0
jmp 0x1402a53e2
xor r13d, r13d
xor r9d, r9d
mov qword [rsp + 0x28], r13
xor r8d, r8d
mov edx, 0x10001
mov qword [rsp + 0x20], r13
mov rcx, rbx
call qword [sym.imp.crypt32.dll_CertFindCertificateInStore]
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x1402a54bd
call qword [sym.imp.kernel32.dll_GetLastError]
mov r8, r14
lea rdx, [0x1404439a0]
mov r9d, eax
mov rcx, rsi
call fcn.140267cd0
xor edx, edx
mov rcx, rbx
call qword [sym.imp.crypt32.dll_CertCloseStore]
jmp 0x1402a53e2
mov dword [rax + 0x18], 1
lea rdx, [0x140443a50]
mov rcx, qword [r12]
xor r9d, r9d
lea rax, [rcx + 0x10]
mov qword [rsp + 0x40], rax
lea r8d, [r9 + 2]
mov qword [rsp + 0x38], rcx
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r13
xor ecx, ecx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
mov rax, qword [0x140545678]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0x58]
mov ebx, eax
test rcx, rcx
je 0x1402a57cb
call qword [sym.imp.crypt32.dll_CertFreeCertificateContext]
test ebx, ebx
je 0x1402a5825
mov r8d, 0x100
lea rdx, [rbp + 0x10]
mov ecx, ebx
call fcn.14024a960
mov r8, rax
lea rdx, [0x140443a80]
mov rcx, rsi
call fcn.140267cd0
mov rcx, qword [r12]
call qword [fcn.1403d8820]
add ebx, 0x7ff6fd00
mov qword [r12], r13
cmp ebx, 0xe
ja case.0x1402a5823.2146893055
lea rdx, [0x140000000]
movsxd rax, ebx
mov ecx, dword [rdx + rax*4 + 0x2a58a4]
add rcx, rdx
jmp rcx
xor eax, eax
jmp 0x1402a53e7
mov r8, qword [rsi + 0x5b8]
lea rdx, [0x140443860]
mov rcx, rsi
call fcn.140267cd0
mov rcx, rdi
call fcn.1403d8820
mov eax, ebx
jmp 0x1402a53e7
lea rdx, [0x1404437d0]
mov rcx, rsi
call fcn.140267cd0
mov eax, 4
jmp 0x1402a53ef
lea rdx, [0x1404437f0]
mov rcx, rsi
call fcn.140267cd0
mov eax, 0x23
jmp 0x1402a53ef