Function at 0x1400e8df0
Capabilities:
Read file on windows

Disassembly:
push rbx
push rdi
push r14
push r15
sub rsp, 0x188
mov rax, qword [0x1402ba4e0]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov rbx, rcx
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
add rcx, 0xd
call fcn.14010a204
mov rdx, rbx
mov r15, rax
mov qword [rsp + 0x50], rax
sub rax, rbx
nop dword [rax + rax]
movzx ecx, byte [rdx]
inc rdx
mov byte [rax + rdx - 1], cl
test cl, cl
jne 0x1400e8e40
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r15
repne scasb al, byte [rdi]
mov rax, qword [str.wf_update.xml]
or rcx, 0xffffffffffffffff
mov qword [rdi - 1], rax
mov eax, dword [0x140233908]
xor r9d, r9d
mov dword [rdi + 7], eax
movzx eax, word [0x14023390c]
mov edx, 0x80000000
mov word [rdi + 0xb], ax
xor eax, eax
mov rdi, rbx
repne scasb al, byte [rdi]
xor ebx, ebx
lea r8d, [rax + 3]
not rcx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov byte [rcx + r15 + 0xc], al
mov rcx, r15
mov edi, ebx
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400e9093
mov qword [rsp + 0x1c0], rsi
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0x105
mov qword [rsp + 0x1c8], r12
mov qword [rsp + 0x180], r13
call fcn.140116eb8
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov r8d, 0x104
mov rcx, r14
mov esi, ebx
mov dword [rsp + 0x40], 0x104
mov r12d, ebx
mov r13d, ebx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400e9072
mov qword [rsp + 0x1b8], rbp
nop
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x1400e9053
test r13d, r13d
jne 0x1400e9053
lea r12d, [r12 + rax + 1]
mov ecx, r12d
call fcn.14010a204
mov r8d, r12d
xor edx, edx
mov rcx, rax
mov rbx, rax
call fcn.140116eb8
test rsi, rsi
je 0x1400e8f86
mov rcx, rbx
mov rdx, rsi
sub rcx, rsi
movzx eax, byte [rdx]
inc rdx
mov byte [rcx + rdx - 1], al
test al, al
jne 0x1400e8f70
mov rcx, rsi
call fcn.14010d304
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x60]
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
mov byte [rdi + rcx - 2], al
test al, al
jne 0x1400e8fa0
lea rdx, str._updatestring_string_
mov rcx, rbx
mov rsi, rbx
call fcn.14010dda8
mov rbx, rax
add rbx, 0x16
je 0x1400e9017
lea rdx, [0x1402338e0]
mov rcx, rbx
call fcn.14010dda8
mov rbp, rax
test rax, rax
je 0x1400e9017
sub rbp, rbx
lea rcx, [rbp + 1]
call fcn.14010a204
lea r8, [rbp + 1]
xor edx, edx
mov rcx, rax
mov r15, rax
mov qword [rsp + 0x48], rax
call fcn.140116eb8
mov r8, rbp
mov rdx, rbx
mov rcx, r15
call fcn.140112d28
mov r13d, 1
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0x105
call fcn.140116eb8
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov r8d, 0x104
mov rcx, r14
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400e8f30
mov rbp, qword [rsp + 0x1b8]
mov r15, qword [rsp + 0x50]
test rsi, rsi
je 0x1400e906d
mov rcx, rsi
call fcn.14010d304
mov rdi, qword [rsp + 0x48]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rsp + 0x180]
mov r12, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1c0]
mov rcx, r15
call fcn.14010d304
mov rax, rdi
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.14010d170
add rsp, 0x188
pop r15
pop r14
pop rdi
pop rbx
ret