Function at 0x1400033af
Capabilities:
Read file on windows

Disassembly:
jmp 0x140193168
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
movsxd r13, ecx
mov r9, rdx
mov r12d, r8d
cmp r13d, 0xfffffffe
jne 0x1401931a9
call fcn.1400062df
xor esi, esi
mov dword [rax], esi
call fcn.140003dd2
mov dword [rax], 9
jmp 0x14019359a
xor esi, esi
test ecx, ecx
js 0x140193583
cmp r13d, dword [0x140242b1c]
jae 0x140193583
mov rax, r13
lea edx, [rsi + 1]
and eax, 0x3f
mov qword [rsp + 0x48], rdx
mov r8, r13
lea r11, [0x140242650]
shr r8, 6
mov qword [rsp + 0x40], r8
lea r14, [rax + rax*8]
mov rax, qword [r11 + r8*8]
test byte [rax + r14*8 + 0x38], dl
je 0x140193583
cmp r12d, 0x7fffffff
jbe 0x140193214
call fcn.1400062df
mov dword [rax], esi
call fcn.140003dd2
mov dword [rax], socket
jmp 0x140193595
test r12d, r12d
je 0x14019357f
test byte [rax + r14*8 + 0x38], 2
jne 0x14019357f
test r9, r9
je 0x1401931fd
mov rcx, qword [rax + r14*8 + 0x28]
mov rbx, rsi
movsx r10d, byte [rax + r14*8 + 0x39]
mov edi, 4
mov qword [rsp + 0x38], rcx
mov ecx, r10d
mov byte [rsp + 0xa0], r10b
sub ecx, edx
je 0x140193286
cmp ecx, edx
jne 0x14019327e
mov eax, r12d
not eax
test dl, al
jne 0x14019327e
call fcn.1400062df
mov dword [rax], esi
call fcn.140003dd2
mov dword [rax], socket
call fcn.140001bdb
jmp 0x14019340c
mov ebp, r12d
mov r15, r9
jmp 0x140193304
mov eax, r12d
not eax
test dl, al
je 0x140193262
mov ebp, r12d
shr ebp, 1
cmp ebp, edi
cmovb ebp, edi
mov ecx, ebp
call fcn.140001087
xor ecx, ecx
mov rbx, rax
call fcn.1400013c5
xor ecx, ecx
call fcn.1400013c5
mov r15, rbx
test rbx, rbx
jne 0x1401932d4
call fcn.140003dd2
mov dword [rax], reloc.WS2_32.dll_inet_ntoa
call fcn.1400062df
mov dword [rax], 8
jmp 0x14019340c
xor edx, edx
mov ecx, r13d
lea r8d, [rdx + 1]
call fcn.1400024d7
mov r8, qword [rsp + 0x40]
lea r11, [0x140242650]
mov r10b, byte [rsp + 0xa0]
mov edx, 1
mov rcx, qword [r11 + r8*8]
mov qword [rcx + r14*8 + 0x30], rax
mov rax, qword [r11 + r8*8]
mov edi, esi
mov qword [rsp + 0x50], r15
mov r9d, 0xa
test byte [rax + r14*8 + 0x38], 0x48
je 0x140193396
mov al, byte [rax + r14*8 + 0x3a]
cmp al, r9b
je 0x140193396
test ebp, ebp
je 0x140193396
mov byte [r15], al
dec ebp
mov rax, qword [r11 + r8*8]
add r15, rdx
mov edi, edx
mov byte [rax + r14*8 + 0x3a], r9b
test r10b, r10b
je 0x140193396
mov rax, qword [r11 + r8*8]
mov cl, byte [rax + r14*8 + 0x3b]
cmp cl, r9b
je 0x140193396
test ebp, ebp
je 0x140193396
mov byte [r15], cl
lea edi, [r9 - 8]
mov rax, qword [r11 + r8*8]
add r15, rdx
dec ebp
mov byte [rax + r14*8 + 0x3b], r9b
cmp r10b, dl
jne 0x140193396
mov rax, qword [r11 + r8*8]
mov cl, byte [rax + r14*8 + 0x3c]
cmp cl, r9b
je 0x140193396
test ebp, ebp
je 0x140193396
mov byte [r15], cl
lea edi, [r9 - 7]
mov rax, qword [r11 + r8*8]
add r15, rdx
dec ebp
mov byte [rax + r14*8 + 0x3c], r9b
mov ecx, r13d
call fcn.1400097e6
test eax, eax
je 0x14019342a
mov rax, qword [rsp + 0x40]
lea rcx, [0x140242650]
mov rax, qword [rcx + rax*8]
cmp byte [rax + r14*8 + 0x38], sil
jge 0x14019342a
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x14019342a
cmp byte [rsp + 0xa0], 2
jne 0x14019342f
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
shr ebp, 1
mov rdx, r15
mov r8d, ebp
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
test eax, eax
jne 0x14019341e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.14000354e
or edi, 0xffffffff
mov rcx, rbx
call fcn.1400013c5
mov eax, edi
jmp 0x14019359d
mov eax, dword [rsp + 0xb8]
lea edi, [rdi + rax*2]
jmp 0x14019346a
mov byte [rsp + 0x48], sil
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
mov r8d, ebp
mov qword [rsp + 0x20], rsi
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140193549
cmp dword [rsp + 0xb8], r12d
ja 0x140193549
add edi, dword [rsp + 0xb8]
mov rdx, qword [rsp + 0x40]
lea r11, [0x140242650]
mov rax, qword [r11 + rdx*8]
cmp byte [rax + r14*8 + 0x38], sil
jge 0x14019340f
cmp byte [rsp + 0xa0], 2
movsxd r8, edi
je 0x1401934b3
mov r9, qword [rsp + 0xa8]
mov rax, r12
shr rax, 1
mov rdx, r15
mov ecx, r13d
mov qword [rsp + 0x20], rax
call fcn.140192bc4
mov edi, eax
jmp 0x14019340f
shr r8, 1
cmp byte [rsp + 0x48], sil
je 0x140193537
mov r10, qword [rsp + 0x50]
mov rax, r10
mov rdi, r10
lea r9, [r10 + r8*2]
cmp r10, r9
jae 0x14019352a
mov esi, 0xa
movzx ecx, word [rax]
cmp cx, 0x1a
je 0x140193519
cmp cx, 0xd
jne 0x1401934ff
lea r8, [rax + 2]
cmp r8, r9
jae 0x1401934ff
cmp word [r8], si
jne 0x1401934ff
movzx ecx, si
mov r11d, 4
jmp 0x140193505
mov r11d, 2
add rax, r11
mov word [rdi], cx
lea r8, [rdi + 2]
mov rdi, r8
cmp rax, r9
jb 0x1401934d6
jmp 0x14019352a
lea rcx, [0x140242650]
mov rax, qword [rcx + rdx*8]
or byte [rax + r14*8 + 0x38], 2
sub rdi, r10
sar rdi, 1
add edi, edi
jmp 0x14019340f
mov rdx, qword [rsp + 0x50]
mov ecx, r13d
call fcn.140192914
jmp 0x1401934ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14019356f
call fcn.140003dd2
mov dword [rax], 9
call fcn.1400062df
mov dword [rax], 5
jmp 0x14019340c
cmp eax, 0x6d
jne 0x140193405
mov edi, esi
jmp 0x14019340f
xor eax, eax
jmp 0x14019359d
call fcn.1400062df
mov dword [rax], esi
call fcn.140003dd2
mov dword [rax], 9
call fcn.140001bdb
or eax, 0xffffffff
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret