Function at 0x1400244b0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x38
mov r14, r9
mov rbp, r8
mov rsi, rdx
mov r15, rcx
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rdi + r8], 0
jne 0x1400244d4
add rdi, rbp
cmp byte [rdi - 1], 0x2f
je 0x1400244f0
mov byte [rdi], 0x2f
inc rdi
mov byte [rdi], 0
lea rdx, [rsp + 0x80]
mov rcx, rsi
call fcn.140022330
movsxd rbx, eax
test eax, eax
jns 0x14002452d
mov r9, rsi
lea r8, [0x14017f6b0]
mov edx, 1
mov ecx, 0x7f0
call fcn.140001480
add rsp, 0x38
pop r15
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
movsxd rax, dword [0x1401ba7d4]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
mov qword [rsp + 0x30], r13
test byte [rcx + rax + 0x18], 1
je 0x140024570
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov edx, ebx
lea rcx, str.Number_of_files_to_archieve:__d_n
call fcn.140001fb0
xor r13d, r13d
mov qword [rsp + 0x20], rbx
test ebx, ebx
jle 0x140024763
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x70], r12
mov r12d, r13d
nop dword [rax]
mov rax, qword [rsp + 0x80]
mov rdx, rdi
mov rsi, qword [rax + r12*8]
mov rax, rsi
sub rdx, rsi
nop word [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x1400245b0
movsxd rax, dword [0x1401ba7d4]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rcx + rax + 0x18], 1
je 0x140024600
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov r8, rsi
lea rcx, [0x14017f720]
mov edx, r13d
call fcn.140001fb0
mov rax, 0xffffffffffffffff
nop word [rax + rax]
cmp byte [rsi + rax + 1], 0
lea rax, [rax + 1]
jne 0x140024610
cmp byte [rax + rsi - 1], 0x2f
jne 0x140024638
mov r9, r14
mov r8, rbp
mov rdx, rbx
mov rcx, r15
call fcn.1400244b0
jmp 0x140024744
mov rcx, qword [rsp + 0x78]
lea rdx, [0x14017f71c]
call fcn.14001ccc0
mov rbx, rax
test rax, rax
jne 0x14002466d
mov r9, rsi
lea r8, [0x14017f740]
lea edx, [rax + 1]
mov ecx, 0x7f1
call fcn.140001480
jmp 0x14002473f
mov rdx, rbp
mov rcx, r15
call fcn.140063bc0
test eax, eax
je 0x14002469a
mov r9, rbp
lea r8, [0x14017f770]
mov edx, 1
mov ecx, 0x7f1
call fcn.140001480
jmp 0x140024736
mov r9, rbx
mov edx, 1
mov r8d, 0x1000
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test eax, eax
jle 0x1400246f1
nop word [rax + rax]
mov r8d, eax
mov rdx, r14
mov rcx, r15
call fcn.1400ef778
test eax, eax
jne 0x1400247c6
mov r9, rbx
lea edx, [rax + 1]
mov r8d, 0x1000
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test eax, eax
jg 0x1400246c0
test eax, eax
jns 0x14002470c
lea r8, [0x14017f7a0]
mov r9, rbp
mov edx, 1
mov ecx, 0x7f1
call fcn.140001480
mov rcx, r15
call fcn.1400eeb4c
test eax, eax
je 0x140024731
mov r9, rbp
lea r8, [0x14017f800]
mov edx, 1
mov ecx, 0x7f1
call fcn.140001480
call fcn.140008a90
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rbx, qword [rsp + 0x78]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc r13d
inc r12
cmp r12, qword [rsp + 0x20]
jl 0x140024590
mov r12, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
mov r13, qword [rsp + 0x30]
test rcx, rcx
je 0x14002477b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movsxd rax, dword [0x1401ba7d4]
imul rdx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rdx + rax + 0x18], 1
je 0x1400247b7
mov r8, qword [rdx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
lea rcx, [0x14017f830]
call fcn.140001fb0
xor eax, eax
add rsp, 0x38
pop r15
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea r8, [0x14017f7d0]
jmp 0x1400246fa