Function at 0x14017ca90
Capabilities:
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xe8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x50], xmm6
mov rdi, rdx
mov r13, rcx
mov rbx, qword [rdx]
mov r14, qword [rdx + 0x10]
mov rax, rbx
sub rax, r14
mov qword [rbp + 8], rbx
mov rsi, r14
cmp rax, 0x20
jae 0x14017cafc
mov rcx, r13
mov rdx, rdi
call fcn.1401791e0
mov rsi, rdx
test rax, rax
je 0x14017caec
mov eax, 1
jmp 0x14017cd3e
test rsi, rsi
je 0x14017cd30
mov rbx, qword [rdi]
mov rsi, qword [rdi + 0x10]
mov qword [rbp + 0x38], r14
mov rax, qword [r13]
mov qword [rbp + 0x30], rax
mov r15d, 0x2000
xor r8d, r8d
xorps xmm6, xmm6
xor r14d, r14d
jmp 0x14017cb31
cmp r12, r15
cmovb rcx, r15
cmp rax, r12
cmove r15, rcx
sub r14, rax
mov qword [rbp], r8
cmp rbx, qword [rbp + 8]
jne 0x14017cb63
cmp rsi, rbx
jne 0x14017cb63
mov rcx, r13
mov rdx, rdi
call fcn.1401791e0
mov rsi, rdx
test rax, rax
jne 0x14017cae2
test rsi, rsi
je 0x14017cd34
mov rbx, qword [rdi]
mov rsi, qword [rdi + 0x10]
mov r12, rbx
sub r12, rsi
jne 0x14017cbc0
cmp rbx, 0xffffffffffffffdf
ja 0x14017cd05
mov r12, rdi
mov rdi, r13
lea r13, [rbx + 0x20]
lea rax, [rbx + rbx]
cmp rax, r13
cmova r13, rax
test r13, r13
js 0x14017cd05
test rbx, rbx
je 0x14017ccb3
mov rax, qword [r12 + 8]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x28], rbx
mov eax, 1
jmp 0x14017ccb5
mov rax, qword [rdi + 8]
cmp r12, r15
jb 0x14017cbcc
mov r12, r15
movups xmm0, xmmword [0x14027f678]
movaps xmmword [rbp + 0x10], xmm0
mov edx, 0xffffffff
mov rcx, r12
cmp r12, rdx
jb 0x14017cbe9
mov ecx, 0xffffffff
add rax, rsi
movups xmmword [rsp + 0x38], xmm6
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], ecx
mov rcx, qword [rbp + 0x30]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtReadFile
cmp eax, 0x103
jne 0x14017cc2c
mov rcx, qword [rbp + 0x30]
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov eax, dword [rbp + 0x10]
cmp eax, 0xc0000011
je 0x14017cd2a
cmp eax, 0x103
je 0x14017cd80
test eax, eax
mov r8, qword [rbp]
js 0x14017cd16
mov rax, qword [rbp + 0x18]
add rsi, rax
mov qword [rdi + 0x10], rsi
test rax, rax
je 0x14017cd38
cmp r14, rax
cmovbe r14, rax
cmp rax, r12
jb 0x14017cc80
xor r8d, r8d
jmp 0x14017cc83
inc r8d
mov rcx, 0xffffffffffffffff
mov rdx, 0xffffffffffffffff
cmp r8d, 2
jge 0x14017cc9a
mov rdx, r15
cmp r14, r12
cmovne r15, rdx
test r15, r15
js 0x14017cb20
lea rcx, [r15 + r15]
jmp 0x14017cb20
xor eax, eax
mov qword [rbp - 0x30], rax
mov edx, 1
lea rcx, [rbp + 0x10]
mov r8, r13
lea r9, [rbp - 0x38]
call fcn.140159160
cmp dword [rbp + 0x10], 1
je 0x14017cd59
mov rax, qword [rbp + 0x18]
mov rcx, r12
mov qword [r12 + 8], rax
mov qword [r12], r13
mov r12, r13
sub r12, rbx
mov rbx, r13
mov r13, rdi
mov rdi, rcx
cmp r12, r15
jae 0x14017cbc9
jmp 0x14017cbcc
mov eax, 1
movabs rsi, 0x2600000003
jmp 0x14017cd3e
mov ecx, eax
call sub.ntdll.dll_RtlNtStatusToDosError
mov ebx, eax
mov ecx, eax
call fcn.140156450
cmp al, 0xb
jne 0x14017cd6a
mov qword [rdi + 0x10], rsi
jmp 0x14017cd38
xor esi, esi
jmp 0x14017cd3c
mov rsi, qword [rdi + 0x10]
sub rsi, qword [rbp + 0x38]
xor eax, eax
mov rdx, rsi
movaps xmm6, xmmword [rbp + 0x50]
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
movabs rsi, 0x2600000003
mov eax, 1
jmp 0x14017cd3e
shl rbx, 0x20
or rbx, 2
mov qword [rdi + 0x10], rsi
mov eax, 1
mov rsi, rbx
jmp 0x14017cd3e
mov dword [rbp + 0x40], 0
mov byte [rbp + 0x44], 0
lea rax, [0x14027f6e8]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], 1
lea rax, [rbp + 0x48]
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rcx, [rbp + 0x40]
lea rdx, [rbp - 0x38]
call fcn.140153a00
mov qword [rbp - 8], rax
lea rcx, [rbp - 8]
call fcn.140153b10
mov ecx, 7
int 0x29
ud2