Function at 0x14000378d
Capabilities:
Read file on windows

Disassembly:
jmp 0x1401153fc
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
movsxd r13, ecx
mov r9, rdx
mov r12d, r8d
cmp r13d, 0xfffffffe
jne 0x14011543d
call fcn.140008553
xor esi, esi
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 9
jmp 0x140115846
xor esi, esi
test ecx, ecx
js 0x14011582f
cmp r13d, dword [0x1401738bc]
jae 0x14011582f
mov rbp, r13
lea r8d, [rsi + 1]
and ebp, 0x3f
mov qword [rsp + 0x48], r8
mov rdx, r13
shl rbp, 6
sar rdx, 6
lea r11, [0x1401733f0]
mov qword [rsp + 0x40], rdx
mov rax, qword [r11 + rdx*8]
test byte [rax + rbp + 0x38], r8b
je 0x14011582f
cmp r12d, 0x7fffffff
jbe 0x1401154a9
call fcn.140008553
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 0x16
jmp 0x140115841
test r12d, r12d
je 0x14011582b
test byte [rax + rbp + 0x38], 2
jne 0x14011582b
test r9, r9
je 0x140115492
mov rcx, qword [rax + rbp + 0x28]
mov rbx, rsi
movsx r10d, byte [rax + rbp + 0x39]
mov edi, 4
mov qword [rsp + 0x38], rcx
mov ecx, r10d
mov byte [rsp + 0xa0], r10b
sub ecx, r8d
je 0x140115504
sub ecx, r8d
jne 0x1401154f9
mov eax, r12d
not eax
test r8b, al
je 0x14011550e
mov r14d, r12d
mov r15, r9
jmp 0x1401155a4
mov eax, r12d
not eax
test r8b, al
jne 0x14011552a
call fcn.140008553
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 0x16
call fcn.140007b26
jmp 0x1401156b0
mov r14d, r12d
shr r14d, 1
cmp r14d, edi
cmovb r14d, edi
mov ecx, r14d
call fcn.140003576
xor ecx, ecx
mov rbx, rax
call fcn.140008bf7
xor ecx, ecx
call fcn.140008bf7
mov r15, rbx
test rbx, rbx
jne 0x140115573
call fcn.1400053e4
mov dword [rax], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call fcn.140008553
mov dword [rax], 8
jmp 0x1401156b0
xor edx, edx
mov ecx, r13d
lea r8d, [rdx + 1]
call fcn.1400097fa
mov rdx, qword [rsp + 0x40]
lea r11, [0x1401733f0]
mov r10b, byte [rsp + 0xa0]
mov r8d, 1
mov rcx, qword [r11 + rdx*8]
mov qword [rcx + rbp + 0x30], rax
mov rax, qword [r11 + rdx*8]
mov edi, esi
mov qword [rsp + 0x50], r15
mov r9d, 0xa
test byte [rax + rbp + 0x38], 0x48
je 0x140115639
mov cl, byte [rax + rbp + 0x3a]
cmp cl, r9b
je 0x140115639
test r14d, r14d
je 0x140115639
mov byte [r15], cl
dec r14d
mov rax, qword [r11 + rdx*8]
add r15, r8
mov edi, r8d
mov byte [rax + rbp + 0x3a], r9b
test r10b, r10b
je 0x140115639
mov rax, qword [r11 + rdx*8]
mov cl, byte [rax + rbp + 0x3b]
cmp cl, r9b
je 0x140115639
test r14d, r14d
je 0x140115639
mov byte [r15], cl
lea edi, [r9 - 8]
mov rax, qword [r11 + rdx*8]
add r15, r8
dec r14d
mov byte [rax + rbp + 0x3b], r9b
cmp r10b, r8b
jne 0x140115639
mov rax, qword [r11 + rdx*8]
mov cl, byte [rax + rbp + 0x3c]
cmp cl, r9b
je 0x140115639
test r14d, r14d
je 0x140115639
mov byte [r15], cl
lea edi, [r9 - 7]
mov rax, qword [r11 + rdx*8]
add r15, r8
dec r14d
mov byte [rax + rbp + 0x3c], r9b
mov ecx, r13d
call fcn.14000358a
test eax, eax
je 0x1401156ce
mov rax, qword [rsp + 0x40]
lea rcx, [0x1401733f0]
mov rax, qword [rcx + rax*8]
test byte [rax + rbp + 0x38], 0x80
je 0x1401156ce
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1401156ce
cmp byte [rsp + 0xa0], 2
jne 0x1401156d3
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
shr r14d, 1
mov rdx, r15
mov r8d, r14d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
test eax, eax
jne 0x1401156c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140006e6f
or edi, 0xffffffff
mov rcx, rbx
call fcn.140008bf7
mov eax, edi
jmp 0x140115849
mov eax, dword [rsp + 0xb8]
lea edi, [rdi + rax*2]
jmp 0x14011570e
mov byte [rsp + 0x48], sil
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
mov r8d, r14d
mov qword [rsp + 0x20], rsi
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1401157f5
cmp dword [rsp + 0xb8], r12d
ja 0x1401157f5
add edi, dword [rsp + 0xb8]
mov rdx, qword [rsp + 0x40]
lea r11, [0x1401733f0]
mov rax, qword [r11 + rdx*8]
test byte [rax + rbp + 0x38], 0x80
je 0x1401156b3
cmp byte [rsp + 0xa0], 2
je 0x140115757
mov r9, qword [rsp + 0xa8]
mov rax, r12
shr rax, 1
mov rdx, r15
movsxd r8, edi
mov ecx, r13d
mov qword [rsp + 0x20], rax
call fcn.140114e2c
mov edi, eax
jmp 0x1401156b3
mov rax, qword [rsp + 0x48]
test al, al
je 0x1401157dd
mov r8, qword [rsp + 0x50]
movsxd rax, edi
mov rcx, r8
shr rax, 1
mov rdi, r8
lea r10, [r8 + rax*2]
cmp r8, r10
jae 0x1401157d0
lea rax, [r8 + 2]
mov esi, 0xa
movzx r9d, word [rcx]
cmp r9w, 0x1a
je 0x1401157c7
cmp r9w, 0xd
jne 0x1401157b0
cmp rax, r10
jae 0x1401157b0
cmp word [rax], si
jne 0x1401157b0
add rcx, 4
mov word [rdi], si
add rax, 4
add rdi, 2
jmp 0x1401157c0
mov word [rdi], r9w
add rcx, 2
add rdi, 2
add rax, 2
cmp rcx, r10
jb 0x140115783
jmp 0x1401157d0
mov rax, qword [r11 + rdx*8]
or byte [rax + rbp + 0x38], 2
sub rdi, r8
sar rdi, 1
add edi, edi
jmp 0x1401156b3
mov rdx, qword [rsp + 0x50]
mov ecx, r13d
movsxd r8, edi
shr r8, 1
call fcn.140114af0
jmp 0x140115750
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x14011581b
call fcn.1400053e4
mov dword [rax], 9
call fcn.140008553
mov dword [rax], 5
jmp 0x1401156b0
cmp eax, 0x6d
jne 0x1401156a9
mov edi, esi
jmp 0x1401156b3
xor eax, eax
jmp 0x140115849
call fcn.140008553
mov dword [rax], esi
call fcn.1400053e4
mov dword [rax], 9
call fcn.140007b26
or eax, 0xffffffff
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret