Function at 0x180088ec0
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x180101090]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov rbp, r8
mov r15, rdx
mov r14, rcx
mov ecx, 8
call fcn.18009a960
test rax, rax
je 0x180088f19
lea rcx, [rsp + 0x48]
mov qword [rax], rcx
jmp 0x180088f1b
xor eax, eax
mov qword [rsp + 0x48], rax
and qword [rsp + 0x60], 0
and qword [rsp + 0x68], 0
and qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 1
mov dword [rsp + 0x7c], 5
mov esi, 3
mov dword [rsp + 0x80], esi
mov dword [rsp + 0x84], 7
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x88], rbx
xor r12d, r12d
lea r13, [rsp + 0x78]
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, dword [r13]
mov edx, 0x80000000
mov rcx, r14
call qword [0x18010d230]
mov rdi, rax
cmp rbx, 0xffffffffffffffff
je 0x180088fab
test rbx, rbx
je 0x180088fab
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, rdi
mov qword [rsp + 0x88], rbx
test rdi, rdi
je 0x180088fc1
cmp rdi, 0xffffffffffffffff
jne 0x180088fce
inc r12d
add r13, 4
cmp r12d, 4
jb 0x180088f6d
xor r12d, r12d
cmp rdi, r12
je 0x180089076
cmp rdi, 0xffffffffffffffff
je 0x180089076
mov dword [rsp + 0x40], r12d
or qword [rsp + 0x98], 0xffffffffffffffff
or dword [rsp + 0xa0], 0xffffffff
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8d, [r12 + 0xc]
lea rdx, [rsp + 0x98]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
movabs r11, 0x706c646f70bfbbef
cmp qword [rsp + 0x98], r11
je 0x18008903c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, r12d
jmp 0x18008908d
mov ecx, dword [rsp + 0xa0]
sub ecx, 2
je 0x180089066
cmp ecx, 1
je 0x18008905b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, r12d
jmp 0x18008908d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18008908d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 2
jmp 0x18008908d
cmp rdi, 0xffffffffffffffff
je 0x18008908a
cmp rdi, r12
je 0x18008908a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, r12d
sub esi, 2
je 0x180089156
cmp esi, 1
je 0x1800890f0
mov rcx, qword [rsp + 0x60]
cmp rcx, r12
je 0x1800890e8
mov rdi, qword [rsp + 0x68]
cmp rcx, rdi
je 0x1800890e3
lea rbx, [rcx + 0x20]
cmp qword [rbx], 0x10
jb 0x1800890c2
mov rcx, qword [rbx - 0x18]
call fcn.18009a864
mov qword [rbx], sendto
mov qword [rbx - 8], r12
mov byte [rbx - 0x18], r12b
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x1800890b3
mov rcx, qword [rsp + 0x60]
call fcn.18009a864
mov edi, r12d
jmp 0x180089239
mov r8, rbp
mov rdx, r15
mov rcx, r14
call fcn.180087ed0
mov edi, eax
mov rcx, qword [rsp + 0x60]
cmp rcx, r12
je 0x180089239
mov rsi, qword [rsp + 0x68]
cmp rcx, rsi
je 0x18008914c
lea rbx, [rcx + 0x20]
cmp qword [rbx], 0x10
jb 0x18008912b
mov rcx, qword [rbx - 0x18]
call fcn.18009a864
mov qword [rbx], sendto
mov qword [rbx - 8], r12
mov byte [rbx - 0x18], r12b
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rsi
jne 0x18008911c
mov rcx, qword [rsp + 0x60]
call fcn.18009a864
jmp 0x180089239
mov rbx, qword [rbp + 0x18]
cmp rbx, qword [rbp + 0x20]
jbe 0x180089165
call fcn.18009a80c
mov rdi, qword [rbp]
mov rsi, qword [rbp + 0x20]
cmp qword [rbp + 0x18], rsi
jbe 0x180089178
call fcn.18009a80c
cmp rdi, r12
je 0x180089183
cmp rdi, qword [rbp]
je 0x180089188
call fcn.18009a80c
cmp rbx, rsi
je 0x1800891da
cmp rdi, r12
jne 0x18008919c
call fcn.18009a80c
mov r11, r12
jmp 0x18008919f
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x20]
jb 0x1800891aa
call fcn.18009a80c
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.18000cd40
cmp rdi, r12
jne 0x1800891c6
call fcn.18009a80c
mov r11, r12
jmp 0x1800891c9
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x20]
jb 0x1800891d4
call fcn.18009a80c
add rbx, 0x30
jmp 0x180089169
lea r8, [rsp + 0x48]
mov rdx, r15
mov rcx, r14
call fcn.180086828
mov edi, eax
mov rcx, qword [rsp + 0x60]
cmp rcx, r12
je 0x180089239
mov rsi, qword [rsp + 0x68]
cmp rcx, rsi
je 0x180089234
lea rbx, [rcx + 0x20]
cmp qword [rbx], 0x10
jb 0x180089213
mov rcx, qword [rbx - 0x18]
call fcn.18009a864
mov qword [rbx], sendto
mov qword [rbx - 8], r12
mov byte [rbx - 0x18], r12b
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rsi
jne 0x180089204
mov rcx, qword [rsp + 0x60]
call fcn.18009a864
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov rcx, qword [rsp + 0x48]
call fcn.18009a864
mov eax, edi
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.180099fe0
mov rbx, qword [rsp + 0x108]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret