Function at 0x14001d690
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x18], r8
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r14, rcx
xor r15d, r15d
mov ecx, 0x808090
mov r12d, r15d
mov r13, rdx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, 0x800000
mov rsi, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
test rsi, rsi
je 0x14001da04
test rax, rax
je 0x14001da04
mov qword [rsp + 0x60], rbx
lea edx, [r15 + 1]
mov r9, r14
mov qword [rsp + 0x68], rdi
lea r8d, [r15 + 4]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test rax, rax
je 0x14001d7bf
nop dword [rax + rax]
cmp rax, 4
jne 0x14001d94c
movzx eax, byte [rsi + 2]
movzx edi, byte [rsi + 3]
shl edi, 8
add edi, eax
movzx eax, byte [rsi + 1]
shl edi, 8
add edi, eax
movzx eax, byte [rsi]
shl edi, 8
add edi, eax
cmp edi, 0x808090
ja 0x14001d941
mov r9, r14
mov r8d, edi
mov edx, 1
mov ebx, edi
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, rbx
jne 0x14001d8c6
mov r9d, 0x800000
mov r8d, edi
mov rdx, rbp
mov rcx, rsi
call fcn.1400067c0
test eax, eax
js 0x14001d84b
movsxd r8, eax
mov rdx, rbp
mov rax, qword [rsp + 0x70]
mov rcx, r13
add r15, r8
mov dword [rsp + 0x20], r12d
mov r9d, dword [rax + 0x24]
call fcn.14001d050
mov edx, 1
mov r9, r14
mov rcx, rsi
mov r12d, eax
lea r8d, [rdx + 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test rax, rax
jne 0x14001d710
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
je 0x14001d9c7
cmp dword [0x140028678], 1
jl 0x14001d83f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x37
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d83f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Read_error_:_ferror
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d83f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x140028678], 1
jl 0x14001d8ba
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x36
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d8ba
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Decoding_Failed___Corrupted_input_detected__
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d8ba
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x140028678], 1
jl 0x14001d935
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x35
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d935
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Read_error_:_cannot_access_compressed_block__
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d935
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [0x140028688], edi
jmp 0x14001d7bf
cmp dword [0x140028678], 1
jl 0x14001d9bb
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x34
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d9bb
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Read_error_:_cannot_access_block_size
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001d9bb
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, r12d
mov rcx, r13
call fcn.14001d530
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rsp + 0x60]
mov rax, r15
mov rdi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rsi
ret
cmp dword [0x140028678], 1
jl 0x14001da73
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x33
lea rdx, str.Error__i_:
mov rcx, rax
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001da73
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Allocation_error_:_not_enough_memory
call fcn.140015200
cmp dword [0x140028678], 1
jl 0x14001da73
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x140024bf0]
call fcn.140015200
mov ecx, 0x33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3