Function at 0x1800192c0
Capabilities:
Read file on windows

Disassembly:
push rdi
sub rsp, 0x40
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov rdi, rcx
mov edx, dword [rcx + 0x34]
mov qword [rsp + 0x58], rdx
xor r9d, r9d
lea r8, [rsp + 0x58]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x1800192ff
call fcn.180003180
jmp 0x1800195d8
mov ecx, 0xa290
call fcn.18006b9f0
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x180019320
mov eax, 0x8007000e
jmp 0x1800195d8
xor edx, edx
mov r8d, 0xa290
mov rcx, rax
call fcn.18006cf60
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x50]
mov r8d, 0xa290
mov rdx, rbx
mov rcx, qword [rdi + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180019373
call fcn.180003180
mov edi, eax
mov rcx, rbx
call fcn.18006aaac
mov eax, edi
jmp 0x1800195d8
lea r9, [0x180000000]
mov r8d, dword [rbx + 0x8001]
cmp r8d, dword [r9 + 0xe1cb4]
jne 0x18001939e
mov r8b, byte [rbx + 0x8005]
cmp r8b, byte [r9 + 0xe1cb8]
jne 0x18001939e
xor eax, eax
jmp 0x1800193a3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, dword [rbx + 0x8001]
cmp edx, dword [r9 + 0xe1cbc]
jne 0x1800193cd
mov dl, byte [rbx + 0x8005]
cmp dl, byte [r9 + 0xe1cc0]
jne 0x1800193cd
xor eax, eax
jmp 0x1800193d2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov r8d, dword [rbx + 0x9311]
cmp r8d, dword [r9 + 0xe1cb4]
jne 0x1800193fe
mov r8b, byte [rbx + 0x9315]
cmp r8b, byte [r9 + 0xe1cb8]
jne 0x1800193fe
xor eax, eax
jmp 0x180019403
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, dword [rbx + 0x9311]
cmp edx, dword [r9 + 0xe1cbc]
jne 0x18001942d
mov dl, byte [rbx + 0x9315]
cmp dl, byte [r9 + 0xe1cc0]
jne 0x18001942d
xor eax, eax
jmp 0x180019432
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, dword [rbx + 0x9319]
cmp edx, dword [r9 + 0xe1cb4]
jne 0x18001945c
mov dl, byte [rbx + 0x931d]
cmp dl, byte [r9 + 0xe1cb8]
jne 0x18001945c
xor eax, eax
jmp 0x180019461
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, 0x9319
mov rcx, rbx
call fcn.18001b610
test eax, eax
jne 0x1800195ce
mov edx, dword [rbx + 0x9911]
cmp edx, dword [r9 + 0xe1cb4]
jne 0x18001949c
mov dl, byte [rbx + 0x9915]
cmp dl, byte [r9 + 0xe1cb8]
je 0x1800194a1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, 0x9911
mov rcx, rbx
call fcn.18001b610
test eax, eax
jne 0x1800195ce
mov edx, dword [rbx + 0x9919]
cmp edx, dword [r9 + 0xe1cb4]
jne 0x1800194dc
mov dl, byte [rbx + 0x991d]
cmp dl, byte [r9 + 0xe1cb8]
je 0x1800194e1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, 0x9919
mov rcx, rbx
call fcn.18001b610
test eax, eax
jne 0x1800195ce
mov edx, dword [rbx + 0x9209]
cmp edx, dword [r9 + 0xe1cb4]
jne 0x18001951c
mov dl, byte [rbx + 0x920d]
cmp dl, byte [r9 + 0xe1cb8]
je 0x180019521
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, 0x9209
mov rcx, rbx
call fcn.18001b610
test eax, eax
jne 0x1800195ce
mov edx, dword [rbx + 0x9201]
cmp edx, dword [r9 + 0xe1cb4]
jne 0x18001955c
mov dl, byte [rbx + 0x9205]
cmp dl, byte [r9 + 0xe1cb8]
je 0x180019561
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1800195ce
mov edx, 0x9201
mov rcx, rbx
call fcn.18001b610
test eax, eax
jne 0x1800195ce
cmp dword [rdi + 0x34], eax
je 0x180019594
mov dword [rdi + 0x34], eax
mov rcx, rdi
call fcn.1800192c0
mov edi, eax
mov rcx, rbx
call fcn.18006aaac
mov eax, edi
jmp 0x1800195d8
mov eax, dword [rdi + 0x38]
cmp eax, 1
jne 0x1800195ab
mov rcx, rbx
call fcn.18006aaac
mov eax, 0xe003200b
jmp 0x1800195d8
cmp eax, 2
jne 0x1800195bf
mov rcx, rbx
call fcn.18006aaac
mov eax, 0xe003200a
jmp 0x1800195d8
mov rcx, rbx
call fcn.18006aaac
mov eax, 0xe00e1001
jmp 0x1800195d8
mov rcx, rbx
call fcn.18006aaac
xor eax, eax
mov rbx, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret