Function at 0x1400309f0
Capabilities:
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x60], xmm6
mov rsi, rdx
mov r10, qword [rdx]
mov rbx, qword [rdx + 0x10]
mov r12d, 0x2000
mov qword [rbp + 8], r8
test r8b, 1
je 0x140030a6d
cmp r9, 0xfffffffffffffbff
ja 0x140030a5c
lea r12, [r9 + 0x400]
mov rax, r12
and rax, 0x1fff
je 0x140030a62
mov rdx, rcx
mov ecx, 0x2000
sub rcx, rax
add r12, rcx
mov rcx, rdx
setb al
test al, 1
je 0x140030a62
mov r12d, 0x2000
mov r14, r10
mov rdi, rbx
test r9, r9
jne 0x140030aa3
mov rax, r10
sub rax, rbx
cmp rax, 0x20
jae 0x140030a9d
mov r13, r10
mov r15, rcx
mov rdx, rsi
call case.0x14002be6d.20
mov rdi, rdx
test rax, rax
je 0x140030cd8
mov eax, 1
jmp 0x140030d40
mov r14, r10
mov rdi, rbx
mov qword [rbp + 0x10], r10
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x18], rcx
mov r15, qword [rcx]
mov qword [rbp + 0x50], 0
xorps xmm6, xmm6
xor ebx, ebx
cmp rdi, r14
je 0x140030aed
jmp 0x140030b17
mov qword [rbp + 0x50], 0
mov rbx, rcx
sub rbx, rax
test byte [rbp + 8], 1
je 0x140030c44
cmp rdi, r14
jne 0x140030b17
cmp r14, qword [rbp + 0x10]
jne 0x140030b17
mov rcx, qword [rbp + 0x18]
mov rdx, rsi
call case.0x14002be6d.20
mov rdi, rdx
test rax, rax
jne 0x140030a93
test rdi, rdi
je 0x140030cef
mov r14, qword [rsi]
mov rdi, qword [rsi + 0x10]
cmp rdi, r14
jne 0x140030b60
cmp rdi, 0xffffffffffffffdf
ja 0x140030cc7
lea r14, [rdi + 0x20]
lea rax, [rdi + rdi]
cmp rax, r14
cmova r14, rax
test r14, r14
js 0x140030cc7
test rdi, rdi
je 0x140030c87
mov rax, qword [rsi + 8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], rdi
mov eax, 1
jmp 0x140030c89
mov r14, qword [rsi]
mov rax, qword [rsi + 8]
mov r13, r14
sub r13, rdi
cmp r13, r12
jb 0x140030b75
mov r13, r12
movups xmm0, xmmword [0x1400a3480]
movaps xmmword [rbp + 0x20], xmm0
mov edx, 0xffffffff
mov rcx, r13
cmp r13, rdx
jb 0x140030b92
mov ecx, 0xffffffff
add rax, rdi
movups xmmword [rsp + 0x38], xmm6
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], ecx
mov rcx, r15
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtReadFile
cmp eax, 0x103
jne 0x140030bd3
mov rcx, r15
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov eax, dword [rbp + 0x20]
cmp eax, 0xc0000011
jne 0x140030bf0
xor eax, eax
add rdi, rax
mov qword [rsi + 0x10], rdi
test rax, rax
jne 0x140030c17
jmp 0x140030d0d
cmp eax, 0x103
je 0x140030d5b
test eax, eax
js 0x140030cf5
mov rax, qword [rbp + 0x28]
add rdi, rax
mov qword [rsi + 0x10], rdi
test rax, rax
je 0x140030d0d
cmp rbx, rax
mov rcx, rbx
cmovbe rcx, rax
cmp rax, r13
jae 0x140030ad0
mov rdx, qword [rbp + 0x50]
inc edx
mov qword [rbp + 0x50], rdx
mov rbx, rcx
sub rbx, rax
test byte [rbp + 8], 1
jne 0x140030ae8
mov rdx, 0xffffffffffffffff
mov r8, 0xffffffffffffffff
cmp dword [rbp + 0x50], 2
jge 0x140030c5b
mov r8, r12
cmp rcx, r13
cmovne r12, r8
test r12, r12
js 0x140030c6b
lea rdx, [r12 + r12]
cmp r13, r12
cmovb rdx, r12
cmp rax, r13
cmove r12, rdx
cmp rdi, r14
je 0x140030aed
jmp 0x140030b17
xor eax, eax
mov qword [rbp - 0x28], rax
mov edx, 1
lea rcx, [rbp + 0x20]
mov r8, r14
lea r9, [rbp - 0x30]
call fcn.1400139a0
cmp dword [rbp + 0x20], 1
je 0x140030d15
mov rax, qword [rbp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi], r14
mov r13, r14
sub r13, rdi
cmp r13, r12
jae 0x140030b72
jmp 0x140030b75
mov eax, 1
movabs rdi, 0x2600000003
jmp 0x140030d40
test rdi, rdi
je 0x140030d26
mov r14, qword [rsi]
mov rdi, qword [rsi + 0x10]
mov rcx, r15
mov r10, r13
jmp 0x140030aa3
mov rdi, qword [rsi + 0x10]
jmp 0x140030d0d
mov ecx, eax
call sub.ntdll.dll_RtlNtStatusToDosError
mov ebx, eax
mov ecx, eax
call fcn.14004e210
cmp al, 0xb
jne 0x140030d2c
mov qword [rsi + 0x10], rdi
sub rdi, qword [rbp + 0x40]
xor eax, eax
jmp 0x140030d40
movabs rdi, 0x2600000003
mov eax, 1
jmp 0x140030d40
xor edi, edi
xor eax, eax
jmp 0x140030d40
shl rbx, 0x20
or rbx, 2
mov qword [rsi + 0x10], rdi
mov eax, 1
mov rdi, rbx
mov rdx, rdi
movaps xmm6, xmmword [rbp + 0x60]
add rsp, 0xf8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov dword [rbp + 0x48], 0