Function at 0x14000378d
Capabilities:
Read file on windows

Disassembly:
jmp 0x140114e4c
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
movsxd r13, ecx
mov r9, rdx
mov r12d, r8d
cmp r13d, 0xfffffffe
jne 0x140114e8d
call fcn.140008553
xor esi, esi
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 9
jmp 0x140115296
xor esi, esi
test ecx, ecx
js 0x14011527f
cmp r13d, dword [0x14017286c]
jae 0x14011527f
mov rbp, r13
lea r8d, [rsi + 1]
and ebp, 0x3f
mov qword [rsp + 0x48], r8
mov rdx, r13
shl rbp, 6
sar rdx, 6
lea r11, [0x1401723a0]
mov qword [rsp + 0x40], rdx
mov rax, qword [r11 + rdx*8]
test byte [rax + rbp + 0x38], r8b
je 0x14011527f
cmp r12d, 0x7fffffff
jbe 0x140114ef9
call fcn.140008553
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 0x16
jmp 0x140115291
test r12d, r12d
je 0x14011527b
test byte [rax + rbp + 0x38], 2
jne 0x14011527b
test r9, r9
je 0x140114ee2
mov rcx, qword [rax + rbp + 0x28]
mov rbx, rsi
movsx r10d, byte [rax + rbp + 0x39]
mov edi, 4
mov qword [rsp + 0x38], rcx
mov ecx, r10d
mov byte [rsp + 0xa0], r10b
sub ecx, r8d
je 0x140114f54
sub ecx, r8d
jne 0x140114f49
mov eax, r12d
not eax
test r8b, al
je 0x140114f5e
mov r14d, r12d
mov r15, r9
jmp 0x140114ff4
mov eax, r12d
not eax
test r8b, al
jne 0x140114f7a
call fcn.140008553
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 0x16
call fcn.140007b26
jmp 0x140115100
mov r14d, r12d
shr r14d, 1
cmp r14d, edi
cmovb r14d, edi
mov ecx, r14d
call fcn.140003576
xor ecx, ecx
mov rbx, rax
call fcn.140008bf7
xor ecx, ecx
call fcn.140008bf7
mov r15, rbx
test rbx, rbx
jne 0x140114fc3
call fcn.1400053e4
mov dword [rax], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call fcn.140008553
mov dword [rax], 8
jmp 0x140115100
xor edx, edx
mov ecx, r13d
lea r8d, [rdx + 1]
call fcn.1400097fa
mov rdx, qword [rsp + 0x40]
lea r11, [0x1401723a0]
mov r10b, byte [rsp + 0xa0]
mov r8d, 1
mov rcx, qword [r11 + rdx*8]
mov qword [rcx + rbp + 0x30], rax
mov rax, qword [r11 + rdx*8]
mov edi, esi
mov qword [rsp + 0x50], r15
mov r9d, 0xa
test byte [rax + rbp + 0x38], 0x48
je 0x140115089
mov cl, byte [rax + rbp + 0x3a]
cmp cl, r9b
je 0x140115089
test r14d, r14d
je 0x140115089
mov byte [r15], cl
dec r14d
mov rax, qword [r11 + rdx*8]
add r15, r8
mov edi, r8d
mov byte [rax + rbp + 0x3a], r9b
test r10b, r10b
je 0x140115089
mov rax, qword [r11 + rdx*8]
mov cl, byte [rax + rbp + 0x3b]
cmp cl, r9b
je 0x140115089
test r14d, r14d
je 0x140115089
mov byte [r15], cl
lea edi, [r9 - 8]
mov rax, qword [r11 + rdx*8]
add r15, r8
dec r14d
mov byte [rax + rbp + 0x3b], r9b
cmp r10b, r8b
jne 0x140115089
mov rax, qword [r11 + rdx*8]
mov cl, byte [rax + rbp + 0x3c]
cmp cl, r9b
je 0x140115089
test r14d, r14d
je 0x140115089
mov byte [r15], cl
lea edi, [r9 - 7]
mov rax, qword [r11 + rdx*8]
add r15, r8
dec r14d
mov byte [rax + rbp + 0x3c], r9b
mov ecx, r13d
call fcn.14000358a
test eax, eax
je 0x14011511e
mov rax, qword [rsp + 0x40]
lea rcx, [0x1401723a0]
mov rax, qword [rcx + rax*8]
test byte [rax + rbp + 0x38], 0x80
je 0x14011511e
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x14011511e
cmp byte [rsp + 0xa0], 2
jne 0x140115123
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
shr r14d, 1
mov rdx, r15
mov r8d, r14d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
test eax, eax
jne 0x140115112
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140006e6f
or edi, 0xffffffff
mov rcx, rbx
call fcn.140008bf7
mov eax, edi
jmp 0x140115299
mov eax, dword [rsp + 0xb8]
lea edi, [rdi + rax*2]
jmp 0x14011515e
mov byte [rsp + 0x48], sil
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
mov r8d, r14d
mov qword [rsp + 0x20], rsi
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140115245
cmp dword [rsp + 0xb8], r12d
ja 0x140115245
add edi, dword [rsp + 0xb8]
mov rdx, qword [rsp + 0x40]
lea r11, [0x1401723a0]
mov rax, qword [r11 + rdx*8]
test byte [rax + rbp + 0x38], 0x80
je 0x140115103
cmp byte [rsp + 0xa0], 2
je 0x1401151a7
mov r9, qword [rsp + 0xa8]
mov rax, r12
shr rax, 1
mov rdx, r15
movsxd r8, edi
mov ecx, r13d
mov qword [rsp + 0x20], rax
call fcn.14011487c
mov edi, eax
jmp 0x140115103
mov rax, qword [rsp + 0x48]
test al, al
je 0x14011522d
mov r8, qword [rsp + 0x50]
movsxd rax, edi
mov rcx, r8
shr rax, 1
mov rdi, r8
lea r10, [r8 + rax*2]
cmp r8, r10
jae 0x140115220
lea rax, [r8 + 2]
mov esi, 0xa
movzx r9d, word [rcx]
cmp r9w, 0x1a
je 0x140115217
cmp r9w, 0xd
jne 0x140115200
cmp rax, r10
jae 0x140115200
cmp word [rax], si
jne 0x140115200
add rcx, 4
mov word [rdi], si
add rax, 4
add rdi, 2
jmp 0x140115210
mov word [rdi], r9w
add rcx, 2
add rdi, 2
add rax, 2
cmp rcx, r10
jb 0x1401151d3
jmp 0x140115220
mov rax, qword [r11 + rdx*8]
or byte [rax + rbp + 0x38], 2
sub rdi, r8
sar rdi, 1
add edi, edi
jmp 0x140115103
mov rdx, qword [rsp + 0x50]
mov ecx, r13d
movsxd r8, edi
shr r8, 1
call fcn.140114540
jmp 0x1401151a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14011526b
call fcn.1400053e4
mov dword [rax], 9
call fcn.140008553
mov dword [rax], 5
jmp 0x140115100
cmp eax, 0x6d
jne 0x1401150f9
mov edi, esi
jmp 0x140115103
xor eax, eax
jmp 0x140115299
call fcn.140008553
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 9
call fcn.140007b26
or eax, 0xffffffff
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret