Function at 0x1400817f0
Capabilities:
Read file on windows

Disassembly:
push rdi
mov eax, 0x12c0
call fcn.1400ea040
sub rsp, rax
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x12d8], rbx
mov qword [rsp + 0x12e0], rbp
mov qword [rsp + 0x12e8], rsi
mov rax, qword [0x14012df80]
xor rax, rsp
mov qword [rsp + 0x12b0], rax
mov rsi, rcx
mov rbx, qword [rcx + 0x178]
xor edi, edi
test rbx, rbx
je 0x1400818e2
mov rax, qword [rbx]
cmp dword [rax + 0x174], 4
jl 0x1400818e2
call fcn.14009d5e8
mov r11, rax
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x140081876
mov ecx, 0x80004005
call fcn.1400034f0
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rax, [0x1400fb278]
mov qword [rsp + 0x20], rax
lea r9, str.IsMyApp
lea r8, str.CSetupApp
lea rdx, str.private__s::_s__s_
lea rcx, [rsp + 0x40]
call fcn.14000a800
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14002f200
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x1400818e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi + 0x148]
mov r8, qword [rax + 0x170]
cmp dword [r8 - 0x10], 0
cmove r8, rdi
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov rbp, rax
test rax, rax
je 0x140081b6c
mov dword [rsi + 0x170], 1
mov rcx, qword [rsi + 0x148]
mov r8, qword [rcx + 0xf8]
cmp dword [r8 - 0x10], 0
cmove r8, rdi
mov ebx, 0x410
mov rdx, rbx
lea rcx, [rsp + 0x270]
mov r9d, edi
lea rax, [rsp + 0x270]
sub r8, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140081976
movzx eax, word [r8 + rcx]
test ax, ax
je 0x140081976
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140081951
jmp 0x14008197b
test rdx, rdx
jne 0x140081985
sub rcx, 2
mov r9d, 0x8007007a
mov word [rcx], 0
test r9d, r9d
jne 0x140081ac3
mov rdx, rbx
lea rcx, [rsp + 0xa90]
mov r9d, edi
lea r8, [rsp + 0x270]
lea rax, [rsp + 0xa90]
sub r8, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400819d9
movzx eax, word [r8 + rcx]
test ax, ax
je 0x1400819d9
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400819b4
jmp 0x1400819de
test rdx, rdx
jne 0x1400819e8
sub rcx, 2
mov r9d, 0x8007007a
mov word [rcx], 0
test r9d, r9d
jne 0x140081ac3
lea rdx, str.hwnd.tmp
lea rcx, [rsp + 0xa90]
call fcn.14002ae40
lea rcx, [rsp + 0x270]
mov r8d, edi
lea rdx, [rsp + 0xa90]
lea rax, [rsp + 0x270]
sub rdx, rax
nop
nop
lea rax, [rbx + 0x7ffffbee]
test rax, rax
je 0x140081a54
movzx eax, word [rdx + rcx]
test ax, ax
je 0x140081a54
mov word [rcx], ax
add rcx, 2
sub rbx, 1
jne 0x140081a30
jmp 0x140081a59
test rbx, rbx
jne 0x140081a63
sub rcx, 2
mov r8d, 0x8007007a
mov word [rcx], 0
mov eax, edi
test r8d, r8d
sete al
test eax, eax
je 0x140081ac3
mov edx, 0x104
lea rcx, [rsp + 0x60]
lea r8, [rsp + 0x270]
lea rax, [rsp + 0x60]
sub r8, rax
nop
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140081ab5
movzx eax, word [r8 + rcx]
test ax, ax
je 0x140081ab5
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140081a90
jmp 0x140081aba
test rdx, rdx
jne 0x140081abe
sub rcx, 2
mov word [rcx], 0
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140081b63
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48], 8
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x48]
mov r8d, 8
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140081b5a
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140081b5a
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2b14
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x20], edi
lea r9, [0x1400fb428]
lea r8, str.IsMyApp
lea rdx, str.CSetupApp
mov rcx, rsi
call fcn.140081270
mov eax, edi
mov rcx, qword [rsp + 0x12b0]
xor rcx, rsp
call fcn.1400cd6e0
lea r11, [rsp + 0x12c0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret