Function at 0x180042e10
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1800eb008]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
mov byte [rbp - 0x18], 0
xor eax, eax
mov qword [rbp - 0x17], rax
mov word [rbp - 0xf], ax
mov byte [rbp - 0xd], al
mov rdx, qword [rcx + 0x20]
lea r13, [0x18000b5a0]
xor r12d, r12d
test rdx, rdx
je 0x180042ed1
mov rbx, qword [rcx + 0x370]
sub rbx, 0xc
mov qword [rbp - 0x28], rbx
lea r8d, [rax + 0xc]
mov rcx, qword [rdx + 0x130]
cmp rbx, rcx
jae 0x180042f29
lea rax, [rbx + 0xc]
cmp rax, rcx
jbe 0x180042e9e
mov r8d, ecx
sub r8d, ebx
lea rcx, [rdx + 0xc8]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r13
mov r9d, r8d
lea r8, [rbp - 0x18]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
js 0x180043118
cmp eax, 1
jne 0x180042f21
jmp 0x180043118
mov r9d, 2
lea r8, [rbp - 0x28]
mov rdx, 0xfffffffffffffff4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x180042efa
call fcn.180002050
jmp 0x180043118
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x40]
mov r8d, recv
lea rdx, [rbp - 0x18]
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180042f21
cmp dword [rbp - 0x40], 0xc
je 0x180042ef0
mov rbx, qword [rbp - 0x28]
movzx eax, byte [rbp - 0xd]
cmp dword [rbp - 0x18], 0x3552454e
jne 0x180042f70
mov qword [rbp - 0x38], r12
mov byte [rbp - 0x38], al
movzx eax, byte [rbp - 0xe]
mov byte [rbp - 0x37], al
movzx eax, byte [rbp - 0xf]
mov byte [rbp - 0x36], al
movzx eax, byte [rbp - 0x10]
mov byte [rbp - 0x35], al
movzx eax, byte [rbp - 0x11]
mov byte [rbp - 0x34], al
movzx eax, byte [rbp - 0x12]
mov byte [rbp - 0x33], al
movzx eax, byte [rbp - 0x13]
mov byte [rbp - 0x32], al
movzx eax, byte [rbp - 0x14]
mov byte [rbp - 0x31], al
mov rsi, qword [rbp - 0x38]
jmp 0x180042f9c
cmp dword [rbp - 0x14], 0x4f52454e
jne 0x180043113
mov dword [rbp - 0x40], r12d
mov byte [rbp - 0x40], al
movzx eax, byte [rbp - 0xe]
mov byte [rbp - 0x3f], al
movzx eax, byte [rbp - 0xf]
mov byte [rbp - 0x3e], al
movzx eax, byte [rbp - 0x10]
mov byte [rbp - 0x3d], al
mov esi, dword [rbp - 0x40]
cmp rbx, rsi
jae 0x180042fab
mov eax, 0x80004005
jmp 0x180043118
mov qword [r14 + 0x370], rsi
sub ebx, esi
mov r15d, ebx
lea rdx, [0x1800ece24]
mov ecx, ebx
call fcn.180072944
mov rdi, rax
mov qword [rbp - 0x38], rax
test rax, rax
jne 0x180042fdb
mov esi, 0x8007000e
jmp 0x180043102
mov r8, r15
xor edx, edx
mov rcx, rdi
call fcn.18008c000
mov rdx, qword [r14 + 0x20]
test rdx, rdx
je 0x180043044
mov r9d, ebx
mov rcx, qword [rdx + 0x130]
cmp rsi, rcx
jae 0x180043092
lea rax, [rbx + rsi]
cmp rax, rcx
jbe 0x180043013
mov r9d, ecx
sub r9d, esi
lea rcx, [rdx + 0xc8]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r13
mov r8, rdi
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov esi, eax
test eax, eax
js 0x180043102
cmp eax, 1
jne 0x180043092
jmp 0x180043102
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x180043065
call fcn.180002050
jmp 0x180043100
mov dword [rbp - 0x40], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x40]
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180043092
cmp dword [rbp - 0x40], ebx
jne 0x180043092
call fcn.180002050
jmp 0x180043100
mov ecx, r12d
test ebx, ebx
je 0x1800430f4
nop dword [rax]
mov edx, ecx
add rdx, rdi
mov eax, dword [rdx]
cmp eax, 0x21444e45
je 0x1800430f4
cmp eax, 0x494f4144
je 0x1800430ea
cmp eax, 0x584f4144
je 0x1800430ea
mov dword [rbp - 0x40], r12d
movzx eax, byte [rdx + 7]
mov byte [rbp - 0x40], al
movzx eax, byte [rdx + 6]
mov byte [rbp - 0x3f], al
movzx eax, byte [rdx + 5]
mov byte [rbp - 0x3e], al
movzx eax, byte [rdx + 4]
mov byte [rbp - 0x3d], al
mov eax, dword [rbp - 0x40]
add eax, 8
add ecx, eax
cmp ecx, ebx
jb 0x1800430a0
jmp 0x1800430f4
mov rcx, r14
call fcn.180043150
jmp 0x180043100
mov rdx, qword [r14 + 0x18]
mov rcx, r14
call fcn.180044360
mov esi, eax
test rdi, rdi
je 0x18004310f
mov rcx, rdi
call fcn.18007294c
mov eax, esi
jmp 0x180043118
mov eax, 0xe003200b
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.180072920
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret