Function at 0x140011600
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov r12, rdx
mov r15d, r8d
mov rdi, rcx
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov ebx, 1
mov dword [rsp + 0x28], 0x8000080
xor r9d, r9d
mov r8d, ebx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x14001166d
lea eax, [rbx + 7]
jmp 0x140011a83
lea r9, [rbp + 0x338]
mov qword [rsp + 0x420], rsi
mov r8d, 0x38e
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140011a69
cmp dword [rbp + 0x338], 0x38e
jb 0x140011a69
xor sil, sil
cmp dword [rsp + 0x60], 0x10000
jb 0x1400116c3
mov eax, dword [rsp + 0x64]
movzx esi, bl
jmp 0x1400116c9
mov eax, dword [rbp + 0xaa]
cmp eax, r15d
jne 0x140011a6f
mov r8d, dword [rbp + 0x2c6]
test sil, sil
cmovne r8d, dword [rbp + 0x180]
test r8d, r8d
jne 0x1400116ee
mov ebx, r14d
jmp 0x140011761
cmp qword [rdi + 8], r14
je 0x140011761
test sil, sil
lea rax, [rbp + 0x2e2]
lea r9, [rbp + 0x19c]
cmove r9, rax
lea rdx, [rbp + 0x18c]
lea rax, [rbp + 0x2d2]
cmove rdx, rax
nop dword [rax + rax]
cmp ebx, 0x1f
jae 0x14001175b
mov eax, ebx
mov rcx, qword [rdi + rax*8]
cmp dword [rcx + 0x18], r8d
jne 0x140011750
mov eax, dword [r9]
cmp dword [rcx + 0x1c], eax
jne 0x140011750
mov eax, dword [rdx]
cmp dword [rcx + 0x20], eax
jne 0x140011750
mov eax, dword [rdx + 4]
cmp dword [rcx + 0x24], eax
jne 0x140011750
mov eax, dword [rdx + 8]
cmp dword [rcx + 0x28], eax
je 0x140011761
inc ebx
cmp qword [rdi + rbx*8], r14
jne 0x140011720
cmp ebx, 0x1f
je 0x140011a69
mov eax, ebx
cmp qword [rdi + rax*8], r14
lea rbx, [rdi + rax*8]
jne 0x1400117e4
mov ecx, 0x30
call fcn.140015aa0
mov rcx, rax
test rax, rax
je 0x14001188d
mov qword [rax], r14
test sil, sil
mov qword [rax + 8], r14
mov dword [rax + 0x10], r14d
mov qword [rbx], rax
mov eax, dword [rbp + 0x2c6]
cmovne eax, dword [rbp + 0x180]
mov dword [rcx + 0x18], eax
mov eax, dword [rbp + 0x2e2]
cmovne eax, dword [rbp + 0x19c]
mov dword [rcx + 0x1c], eax
mov eax, dword [rbp + 0x2d2]
cmovne eax, dword [rbp + 0x18c]
mov dword [rcx + 0x20], eax
mov eax, dword [rbp + 0x2d6]
cmovne eax, dword [rbp + 0x190]
mov dword [rcx + 0x24], eax
mov eax, dword [rbp + 0x2da]
cmovne eax, dword [rbp + 0x194]
mov dword [rcx + 0x28], eax
mov ecx, 0xc0
call fcn.140015aa0
mov r9, rax
test rax, rax
je 0x140011890
mov qword [rax], r14
mov qword [rax + 8], r14
movups xmm0, xmmword [r12]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rax + 0x20], xmm1
movups xmm0, xmmword [r12 + 0x20]
movups xmmword [rax + 0x30], xmm0
movups xmm1, xmmword [r12 + 0x30]
movups xmmword [rax + 0x40], xmm1
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rax + 0x50], xmm0
movups xmm1, xmmword [r12 + 0x50]
movups xmmword [rax + 0x60], xmm1
movups xmm0, xmmword [r12 + 0x60]
movups xmmword [rax + 0x70], xmm0
movups xmm1, xmmword [r12 + 0x70]
mov byte [rax + 0xbe], sil
movups xmmword [rax + 0x80], xmm1
test sil, sil
je 0x14001189b
movsd xmm0, qword [rbp + 0x1b0]
movsd qword [rax + 0x90], xmm0
mov eax, dword [rbp + 0x1b8]
mov dword [r9 + 0x98], eax
movzx eax, word [rbp + 0x1bc]
mov word [r9 + 0x9c], ax
jmp 0x1400118e0
mov qword [rbx], r14
mov r14d, reloc.ODBC32.dll_SQLExecute
jmp 0x140011a6f
movsd xmm0, qword [rbp + 0x98]
movsd qword [rax + 0x90], xmm0
mov eax, dword [rbp + 0xa0]
mov dword [r9 + 0x98], eax
movzx eax, word [rbp + 0xa4]
mov word [r9 + 0x9c], ax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [r9 + 0x9e], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [r9 + 0xae], xmm1
mov r11, qword [rbx]
mov rax, qword [r11]
test rax, rax
je 0x1400119db
nop
lea rcx, [rax + 0x10]
mov r10, r12
sub r10, rcx
nop word [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r10]
sub r8d, edx
jne 0x140011915
inc rcx
test edx, edx
jne 0x140011900
test r8d, r8d
je 0x140011a41
movsd xmm0, qword [rax + 0x90]
mov ebx, dword [rax + 0x98]
mov edi, dword [r9 + 0x98]
movzx esi, word [r9 + 0x9c]
movsd qword [rsp + 0x50], xmm0
movsd xmm0, qword [r9 + 0x90]
movsd qword [rsp + 0x40], xmm0
movzx ecx, word [rsp + 0x40]
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x48], edi
cmp cx, word [rsp + 0x50]
ja 0x1400119cf
jne 0x1400119f5
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
mov r8, rcx
mov r10, rdx
shr r8, 0x10
shr r10, 0x10
cmp r8w, r10w
ja 0x1400119cf
jne 0x1400119f5
mov r8, rcx
mov r10, rdx
shr r8, 0x20
shr r10, 0x20
cmp r8w, r10w
ja 0x1400119cf
jne 0x1400119f5
shr rcx, 0x30
shr rdx, 0x30
cmp cx, dx
ja 0x1400119cf
jne 0x1400119f5
movzx ecx, di
cmp cx, bx
ja 0x1400119cf
jne 0x1400119f5
shr edi, 0x10
shr ebx, 0x10
cmp di, bx
ja 0x1400119cf
jne 0x1400119f5
cmp si, word [rax + 0x9c]
jbe 0x1400119f5
mov rax, qword [rax]
test rax, rax
jne 0x1400118f0
cmp qword [r11 + 8], r14
jne 0x140011a50
mov qword [r11], r9
mov qword [r11 + 8], r9
mov qword [r9], r14
mov qword [r9 + 8], r14
inc dword [r11 + 0x10]
jmp 0x140011a6f
mov rcx, qword [r11]
cmp rcx, rax
jne 0x140011a29
test rcx, rcx
jne 0x140011a16
mov qword [r11], r9
mov qword [r11 + 8], r9
mov qword [r9], r14
mov qword [r9 + 8], r14
inc dword [r11 + 0x10]
jmp 0x140011a6f
mov qword [r9], rcx
mov rax, qword [r11]
mov qword [rax + 8], r9
inc dword [r11 + 0x10]
mov qword [r11], r9
jmp 0x140011a6f
mov rcx, qword [rax + 8]
mov qword [rcx], r9
mov qword [r9], rax
mov qword [rax + 8], r9
mov qword [r9 + 8], rcx
inc dword [r11 + 0x10]
jmp 0x140011a6f
mov edx, 0xc0
mov rcx, r9
call fcn.140015adc
jmp 0x140011a6f
mov rax, qword [r11 + 8]
mov qword [r9 + 8], rax
mov rax, qword [r11 + 8]
mov qword [rax], r9
inc dword [r11 + 0x10]
mov qword [r11 + 8], r9
jmp 0x140011a6f
mov r14d, 8
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rsp + 0x420]
mov eax, r14d
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret