Function at 0x140030600
Capabilities:
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x60], xmm6
mov rsi, rdx
mov r12, rcx
mov r15, qword [rdx]
mov r14, qword [rdx + 0x10]
mov eax, 0x2000
mov qword [rbp + 0x58], rax
mov qword [rbp + 8], r8
test r8b, 1
je 0x140030688
cmp r9, 0xfffffffffffffbff
ja 0x140030674
lea rdx, [r9 + 0x400]
mov rax, rdx
and rax, 0x1fff
je 0x140030912
mov ecx, 0x2000
sub rcx, rax
add rdx, rcx
mov qword [rbp + 0x58], rdx
setb al
test al, 1
je 0x14003067d
mov eax, 0x2000
mov qword [rbp + 0x58], rax
mov rbx, r15
mov rdi, r14
test r9, r9
jne 0x1400306bb
mov rax, r15
sub rax, r14
cmp rax, 0x20
jae 0x1400306b5
mov rcx, r12
mov rdx, rsi
call fcn.140030f50
mov rdi, rdx
test rax, rax
je 0x1400308fb
mov eax, 1
jmp 0x140030979
mov rbx, r15
mov rdi, r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x48], 0
xorps xmm6, xmm6
xor r14d, r14d
mov qword [rbp + 0x38], rsi
cmp rdi, rbx
je 0x1400306fd
jmp 0x140030725
mov qword [rbp + 0x48], 0
mov r14, rcx
sub r14, rax
test byte [rbp + 8], 1
je 0x14003089e
cmp rdi, rbx
jne 0x140030725
cmp rbx, r15
jne 0x140030725
mov rcx, r12
mov rdx, rsi
call fcn.140030f50
mov rdi, rdx
test rax, rax
jne 0x1400306ab
test rdi, rdi
je 0x14003090c
mov rbx, qword [rsi]
mov rdi, qword [rsi + 0x10]
cmp rdi, rbx
jne 0x140030770
cmp rdi, 0xffffffffffffffdf
ja 0x1400308ea
lea rbx, [rdi + 0x20]
lea rax, [rdi + rdi]
cmp rax, rbx
cmova rbx, rax
test rbx, rbx
js 0x1400308ea
test rdi, rdi
je 0x140030779
mov rax, qword [rsi + 8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], rdi
mov eax, 1
jmp 0x14003077b
mov rbx, qword [rsi]
mov rax, qword [rsi + 8]
jmp 0x1400307a9
xor eax, eax
mov qword [rbp - 0x28], rax
mov edx, 1
lea rcx, [rbp + 0x10]
mov r8, rbx
lea r9, [rbp - 0x30]
call fcn.1400139a0
cmp dword [rbp + 0x10], 1
je 0x14003094e
mov rax, qword [rbp + 0x18]
mov qword [rsi + 8], rax
mov qword [rsi], rbx
mov r13, rbx
sub r13, rdi
mov rsi, r15
mov rcx, qword [rbp + 0x58]
cmp r13, rcx
jb 0x1400307be
mov r13, rcx
mov r15, r12
mov r12, qword [r12]
movups xmm0, xmmword [0x1400a3480]
movaps xmmword [rbp + 0x10], xmm0
mov edx, 0xffffffff
mov rcx, r13
cmp r13, rdx
jb 0x1400307e2
mov ecx, 0xffffffff
add rax, rdi
movups xmmword [rsp + 0x38], xmm6
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov rcx, r12
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtReadFile
cmp eax, 0x103
jne 0x140030823
mov rcx, r12
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov eax, dword [rbp + 0x10]
cmp eax, 0xc0000011
jne 0x140030840
xor eax, eax
mov r12, r15
mov r15, rsi
jmp 0x14003085d
cmp eax, 0x103
je 0x140030994
test eax, eax
js 0x14003092a
mov r12, r15
mov r15, rsi
mov rax, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x38]
add rdi, rax
mov qword [rsi + 0x10], rdi
test rax, rax
je 0x140030946
cmp r14, rax
mov rcx, r14
cmovbe rcx, rax
cmp rax, r13
jae 0x1400306e0
mov rdx, qword [rbp + 0x48]
inc edx
mov qword [rbp + 0x48], rdx
mov r14, rcx
sub r14, rax
test byte [rbp + 8], 1
jne 0x1400306f8
mov rdx, 0xffffffffffffffff
mov r8, 0xffffffffffffffff
cmp dword [rbp + 0x48], 2
jge 0x1400308b6
mov r8, qword [rbp + 0x58]
cmp rcx, r13
mov rcx, qword [rbp + 0x58]
cmovne rcx, r8
test rcx, rcx
js 0x1400308ca
lea rdx, [rcx + rcx]
cmp r13, rcx
cmovb rdx, rcx
cmp rax, r13
cmove rcx, rdx
mov qword [rbp + 0x58], rcx
cmp rdi, rbx
je 0x1400306fd
jmp 0x140030725
mov eax, 1
movabs rdi, 0x2600000003
jmp 0x140030979
test rdi, rdi
je 0x14003095f
mov rbx, qword [rsi]
mov rdi, qword [rsi + 0x10]
jmp 0x1400306bb
mov rdi, qword [rsi + 0x10]
jmp 0x140030946
mov qword [rbp + 0x58], rdx
mov rbx, r15
mov rdi, r14
test r9, r9
jne 0x1400306bb
jmp 0x140030688
mov ecx, eax
call sub.ntdll.dll_RtlNtStatusToDosError
mov ebx, eax
mov ecx, eax
call fcn.14004e210
cmp al, 0xb
mov rax, qword [rbp + 0x38]
jne 0x140030965
mov qword [rax + 0x10], rdi
sub rdi, qword [rbp + 0x30]
xor eax, eax
jmp 0x140030979
movabs rdi, 0x2600000003
mov eax, 1
jmp 0x140030979
xor edi, edi
xor eax, eax
jmp 0x140030979
shl rbx, 0x20
or rbx, 2
mov qword [rax + 0x10], rdi
mov eax, 1
mov rdi, rbx
mov rdx, rdi
movaps xmm6, xmmword [rbp + 0x60]
add rsp, 0xf8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov dword [rbp + 0x40], 0
mov byte [rbp + 0x44], 0
lea rax, str.86_n_
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
lea rax, [rbp + 0x50]
mov qword [rbp - 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
lea rcx, [rbp + 0x40]
lea rdx, [rbp - 0x30]
call fcn.140031a10
mov qword [rbp], rax
mov rcx, rbp
call fcn.140005800
mov ecx, 7
int 0x29
ud2