Function at 0x180067f4c
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1800ba080]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov rbp, r8
mov r15, rdx
mov r14, rcx
mov ecx, 8
call fcn.18006ea94
test rax, rax
je 0x180067fa5
lea rcx, [rsp + 0x48]
mov qword [rax], rcx
jmp 0x180067fa7
xor eax, eax
mov qword [rsp + 0x48], rax
and qword [rsp + 0x60], 0
and qword [rsp + 0x68], 0
and qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 1
mov dword [rsp + 0x7c], 5
mov esi, 3
mov dword [rsp + 0x80], esi
mov dword [rsp + 0x84], 7
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x88], rbx
xor r12d, r12d
lea r13, [rsp + 0x78]
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, dword [r13]
mov edx, 0x80000000
mov rcx, r14
call qword [0x1800bfe40]
mov rdi, rax
cmp rbx, 0xffffffffffffffff
je 0x180068037
test rbx, rbx
je 0x180068037
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, rdi
mov qword [rsp + 0x88], rbx
test rdi, rdi
je 0x18006804d
cmp rdi, 0xffffffffffffffff
jne 0x18006805a
inc r12d
add r13, 4
cmp r12d, 4
jb 0x180067ff9
xor r12d, r12d
cmp rdi, r12
je 0x180068102
cmp rdi, 0xffffffffffffffff
je 0x180068102
mov dword [rsp + 0x40], r12d
or qword [rsp + 0x98], 0xffffffffffffffff
or dword [rsp + 0xa0], 0xffffffff
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8d, [r12 + 0xc]
lea rdx, [rsp + 0x98]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
movabs r11, 0x706c646f70bfbbef
cmp qword [rsp + 0x98], r11
je 0x1800680c8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, r12d
jmp 0x180068119
mov ecx, dword [rsp + 0xa0]
sub ecx, 2
je 0x1800680f2
cmp ecx, 1
je 0x1800680e7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, r12d
jmp 0x180068119
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180068119
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 2
jmp 0x180068119
cmp rdi, 0xffffffffffffffff
je 0x180068116
cmp rdi, r12
je 0x180068116
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, r12d
sub esi, 2
je 0x1800681e2
cmp esi, 1
je 0x18006817c
mov rcx, qword [rsp + 0x60]
cmp rcx, r12
je 0x180068174
mov rdi, qword [rsp + 0x68]
cmp rcx, rdi
je 0x18006816f
lea rbx, [rcx + 0x20]
cmp qword [rbx], 0x10
jb 0x18006814e
mov rcx, qword [rbx - 0x18]
call fcn.18006e998
mov qword [rbx], sendto
mov qword [rbx - 8], r12
mov byte [rbx - 0x18], r12b
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x18006813f
mov rcx, qword [rsp + 0x60]
call fcn.18006e998
mov edi, r12d
jmp 0x1800682c5
mov r8, rbp
mov rdx, r15
mov rcx, r14
call fcn.180066ea4
mov edi, eax
mov rcx, qword [rsp + 0x60]
cmp rcx, r12
je 0x1800682c5
mov rsi, qword [rsp + 0x68]
cmp rcx, rsi
je 0x1800681d8
lea rbx, [rcx + 0x20]
cmp qword [rbx], 0x10
jb 0x1800681b7
mov rcx, qword [rbx - 0x18]
call fcn.18006e998
mov qword [rbx], sendto
mov qword [rbx - 8], r12
mov byte [rbx - 0x18], r12b
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rsi
jne 0x1800681a8
mov rcx, qword [rsp + 0x60]
call fcn.18006e998
jmp 0x1800682c5
mov rbx, qword [rbp + 0x18]
cmp rbx, qword [rbp + 0x20]
jbe 0x1800681f1
call fcn.18006e940
mov rdi, qword [rbp]
mov rsi, qword [rbp + 0x20]
cmp qword [rbp + 0x18], rsi
jbe 0x180068204
call fcn.18006e940
cmp rdi, r12
je 0x18006820f
cmp rdi, qword [rbp]
je 0x180068214
call fcn.18006e940
cmp rbx, rsi
je 0x180068266
cmp rdi, r12
jne 0x180068228
call fcn.18006e940
mov r11, r12
jmp 0x18006822b
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x20]
jb 0x180068236
call fcn.18006e940
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.180018100
cmp rdi, r12
jne 0x180068252
call fcn.18006e940
mov r11, r12
jmp 0x180068255
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x20]
jb 0x180068260
call fcn.18006e940
add rbx, 0x30
jmp 0x1800681f5
lea r8, [rsp + 0x48]
mov rdx, r15
mov rcx, r14
call fcn.1800657fc
mov edi, eax
mov rcx, qword [rsp + 0x60]
cmp rcx, r12
je 0x1800682c5
mov rsi, qword [rsp + 0x68]
cmp rcx, rsi
je 0x1800682c0
lea rbx, [rcx + 0x20]
cmp qword [rbx], 0x10
jb 0x18006829f
mov rcx, qword [rbx - 0x18]
call fcn.18006e998
mov qword [rbx], sendto
mov qword [rbx - 8], r12
mov byte [rbx - 0x18], r12b
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rsi
jne 0x180068290
mov rcx, qword [rsp + 0x60]
call fcn.18006e998
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov rcx, qword [rsp + 0x48]
call fcn.18006e998
mov eax, edi
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.18006e130
mov rbx, qword [rsp + 0x108]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret