Function at 0x18004ce80
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0x38
cmp dword [rcx + 0x30], 8
mov rsi, rdx
mov rdi, rcx
jne 0x18004ceaa
mov dword [rcx + 0x2c], 0x2c
mov dword [rcx + 0x20], 0x930
xor eax, eax
add rsp, 0x38
pop rdi
pop rsi
ret
mov edx, dword [rcx + 0x2c]
lea r8, [rsp + 0x60]
xor r9d, r9d
mov rcx, rsi
mov qword [rsp + 0x60], rdx
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x18004ced3
call fcn.1800030e0
add rsp, 0x38
pop rdi
pop rsi
ret
lea rdx, [0x1800fee28]
mov ecx, 0xa290
mov qword [rsp + 0x58], rbx
call fcn.1800626b4
mov rbx, rax
test rax, rax
jne 0x18004cf02
mov eax, 0x8007000e
mov rbx, qword [rsp + 0x58]
add rsp, 0x38
pop rdi
pop rsi
ret
xor edx, edx
mov r8d, 0xa290
mov rcx, rax
mov qword [rsp + 0x30], rbp
call fcn.1800644c0
lea r9, [rsp + 0x50]
xor ebp, ebp
mov r8d, 0xa290
mov rdx, rbx
mov rcx, rsi
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x18004cf5b
call fcn.1800030e0
mov rcx, rbx
mov edi, eax
call fcn.1800626bc
mov rbp, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x58]
mov eax, edi
add rsp, 0x38
pop rdi
pop rsi
ret
cmp dword [rsp + 0x50], 0xa290
jne 0x18004d124
mov edx, dword [rbx + 0x8001]
lea r9, [0x1800dcde4]
cmp edx, dword [r9]
jne 0x18004cf8b
mov dl, byte [rbx + 0x8005]
cmp dl, byte [r9 + 4]
jne 0x18004cf8b
mov eax, ebp
jmp 0x18004cf90
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d1c8
mov edx, 0x8001
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d1c8
mov edx, dword [rbx + 0x9311]
cmp edx, dword [r9]
jne 0x18004cfc8
mov dl, byte [rbx + 0x9315]
cmp dl, byte [r9 + 4]
jne 0x18004cfc8
mov eax, ebp
jmp 0x18004cfcd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d1b1
mov edx, 0x9311
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d1b1
mov edx, dword [rbx + 0x9319]
cmp edx, dword [r9]
jne 0x18004d005
mov dl, byte [rbx + 0x931d]
cmp dl, byte [r9 + 4]
jne 0x18004d005
mov eax, ebp
jmp 0x18004d00a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d19a
mov edx, 0x9319
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d19a
mov edx, dword [rbx + 0x9911]
cmp edx, dword [r9]
jne 0x18004d042
mov dl, byte [rbx + 0x9915]
cmp dl, byte [r9 + 4]
jne 0x18004d042
mov eax, ebp
jmp 0x18004d047
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d183
mov edx, 0x9911
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d183
mov edx, dword [rbx + 0x9919]
cmp edx, dword [r9]
jne 0x18004d07f
mov dl, byte [rbx + 0x991d]
cmp dl, byte [r9 + 4]
jne 0x18004d07f
mov eax, ebp
jmp 0x18004d084
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d16c
mov edx, 0x9919
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d16c
mov edx, dword [rbx + 0x9209]
cmp edx, dword [r9]
jne 0x18004d0bc
mov dl, byte [rbx + 0x920d]
cmp dl, byte [r9 + 4]
jne 0x18004d0bc
mov eax, ebp
jmp 0x18004d0c1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d155
mov edx, 0x9209
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d155
mov ecx, dword [rbx + 0x9201]
cmp ecx, dword [r9]
jne 0x18004d0f5
mov cl, byte [rbx + 0x9205]
cmp cl, byte [r9 + 4]
jne 0x18004d0f5
mov eax, ebp
jmp 0x18004d0fa
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x18004d142
mov edx, 0x9201
mov rcx, rbx
call fcn.18004ce40
test eax, eax
jne 0x18004d142
cmp dword [rdi + 0x30], 4
jne 0x18004d121
mov dword [rdi + 0x20], 0x930
jmp 0x18004d1d6
mov dword [rdi + 0x30], ebp
mov rcx, rbx
call fcn.1800626bc
mov rbp, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x58]
mov eax, 0xe00e1001
add rsp, 0x38
pop rdi
pop rsi
ret
mov dword [rdi + 0x20], 0x920
mov dword [rdi + 0x28], 0x10
jmp 0x18004d1d6
mov dword [rdi + 0x20], 0x920
mov dword [rdi + 0x24], 8
mov dword [rdi + 0x28], 0x18
jmp 0x18004d1d9
mov dword [rdi + 0x20], 0x990
mov dword [rdi + 0x24], 0x18
mov dword [rdi + 0x28], 0x18
jmp 0x18004d1d9
mov dword [rdi + 0x20], 0x990
mov dword [rdi + 0x24], 0x10
mov dword [rdi + 0x28], 0x10
jmp 0x18004d1d9
mov dword [rdi + 0x20], 0x930
mov dword [rdi + 0x24], 0x18
mov dword [rdi + 0x28], 0x18
jmp 0x18004d1d9
mov dword [rdi + 0x20], 0x930
mov dword [rdi + 0x24], 0x10
mov dword [rdi + 0x28], 0x10
jmp 0x18004d1d9
mov dword [rdi + 0x20], 0x800
mov dword [rdi + 0x28], 0x18
mov dword [rdi + 0x24], ebp
mov rcx, rbx
call fcn.1800626bc
mov rbp, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x58]
xor eax, eax
add rsp, 0x38
pop rdi
pop rsi
ret