Function at 0x4494b0
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rax, r8
mov rsi, rcx
mov r8d, 0xffffffff
cmp r9, r8
cmovb r8, r9
mov dword [rsp + 0x40], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x68], rcx
lea rcx, [0x0044a1b0]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
mov rcx, rdx
mov rdx, rax
call sub.KERNEL32.dll_ReadFileEx
test eax, eax
je 0x44955f
nop dword [rax]
mov ecx, 0xffffffff
mov edx, 1
call sub.KERNEL32.dll_SleepEx
cmp dword [rsp + 0x40], 0
je 0x449510
mov ecx, dword [rsp + 0x44]
test rcx, rcx
je 0x44959c
shl rcx, 0x20
or rcx, 2
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], 1
lea rdi, [rsp + 0x38]
mov eax, ecx
and eax, 3
lea rdx, [0x004496fc]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
shl rcx, 0x20
or rcx, 2
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], 1
lea rdi, [rsp + 0x38]
mov eax, ecx
and eax, 3
lea rdx, [0x004496fc]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
movzx eax, byte [rcx + 0x10]
jmp case.0x449604.0
mov eax, dword [rsp + 0x48]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0
jmp 0x4495d3
invalid
and ecx, dword [rdi]
mov dh, 0x41
por mm1, qword [rcx]
movzx eax, byte [rcx + 0xf]
jmp case.0x449604.0
shr rcx, 0x20
call fcn.004515e0
cmp al, 0xb
jne 0x4495d3
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov rcx, rdi
call fcn.00405e10
jmp 0x4495e4
mov rax, qword [rsp + 0x30]
mov qword [rsi], rax
mov rax, qword [rsp + 0x38]
mov qword [rsi + 8], rax
add rsp, 0x78
pop rdi
pop rsi
ret
shr rcx, 0x20
cmp ecx, 0x28
ja case.default.0x449604
xor eax, eax
lea rdx, [0x0044970c]
movsxd rcx, dword [rdx + rcx*4]
invalid
or al, 0x8a
add rcx, rdx
add ecx, edx
invalid
add ecx, edx
jmp rcx
mov al, 1
jmp case.0x449604.0
mov al, 0x29
jmp case.0x449604.0
mov al, 2
jmp case.0x449604.0
mov al, 3
jmp case.0x449604.0
mov al, 4
jmp case.0x449604.0
mov al, 5
jmp case.0x449604.0
mov al, 6
jmp case.0x449604.0
mov al, 7
jmp case.0x449604.0
mov al, 8
jmp case.0x449604.0
mov al, 9
jmp case.0x449604.0
mov al, 0xa
jmp case.0x449604.0
mov al, 0xb
jmp case.0x449604.0
invalid
mov dword [rax - 0x4f7a14f4], esi
or eax, 0xeb081eb
jmp case.0x449604.0
mov al, 0xe
mov al, 0xc
jmp case.0x449604.0
mov al, 0xd
jmp case.0x449604.0
mov al, 0xe
jmp case.0x449604.0
invalid
mov al, 0xf
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x10
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x11
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x12
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x13
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x14
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x15
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x16
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x17
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x18
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x19
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x1a
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x1b
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x1c
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x1d
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x1e
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x1f
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x20
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x21
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x22
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x23
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x24
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x25
jmp case.0x449604.0
invalid
invalid
invalid
mov al, 0x26
jmp case.0x449604.0
mov al, 0x27
jmp case.0x449604.0
mov al, 0x28
jmp case.0x449604.0