Function at 0x140006de0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf90]
mov eax, 0x1090
call fcn.14001abf0
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x10e0], rbx
mov rax, qword [0x140027018]
xor rax, rsp
mov qword [rbp + 0xf80], rax
mov rdi, rdx
mov r14, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rdx
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x140006e40
mov rcx, qword [rdx]
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r13 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x140006ed9
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], 0xf
mov byte [r14], r13b
xor r8d, r8d
lea rdx, [0x140024060]
mov rcx, r14
call fcn.1400029e0
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x140007104
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400070ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140007147
jmp 0x1400070fc
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp - 0x80]
call fcn.140008fd0
mov rbx, r13
mov qword [rsp + 0x68], rbx
mov r15d, 0xf
mov qword [rsp + 0x70], r15
mov byte [rsp + 0x58], bl
mov dword [rsp + 0x50], r13d
nop word [rax + rax]
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x50]
mov r8d, 0x1000
lea rdx, [rbp - 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140006f9e
mov esi, dword [rsp + 0x50]
mov rax, r15
sub rax, rbx
cmp rsi, rax
ja 0x140006f70
lea rax, [rbx + rsi]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp r15, 0x10
cmovae rax, qword [rsp + 0x58]
add rbx, rax
mov r8d, esi
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.14000adf0
mov byte [rbx + rsi], 0
jmp 0x140006f86
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x80]
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140006790
mov r15, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
cmp dword [rsp + 0x50], 0x1000
je 0x140006f10
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
cmp rbx, 0x22
ja 0x140007049
xor r8d, r8d
lea rdx, [0x140024060]
mov rcx, r14
call fcn.1400029e0
nop
cmp r15, 0x10
jb 0x140007005
lea rdx, [r15 + 1]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007159
call fcn.1400076d0
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x140007104
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400070ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000714d
jmp 0x1400070fc
cmp rbx, 0x20
jb 0x14000715f
lea rcx, [rbx - 0x22]
lea rax, [rbx - 0x20]
mov rdx, 0xffffffffffffffe0
mov r8, 0xffffffffffffffde
cmp rax, rcx
cmovb r8, rdx
add r8, rbx
lea rdx, [rsp + 0x58]
cmp r15, 0x10
cmovae rdx, qword [rsp + 0x58]
add rdx, 0x20
mov rcx, r14
call fcn.1400029e0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1400070c9
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400070c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007141
call fcn.1400076d0
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x140007104
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400070ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140007153
mov rcx, r8
call fcn.1400076d0
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
mov rax, r14
mov rcx, qword [rbp + 0xf80]
xor rcx, rsp
call fcn.140007670
mov rbx, qword [rsp + 0x10e0]
add rsp, 0x1090
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14000da34
nop
call fcn.14000da34
int3
call fcn.14000da34
int3
call fcn.14000da34
nop
call fcn.14000da34
nop
call fcn.140002b40
int3