Function at 0x140002ec8
Capabilities:
Read file on windows

Disassembly:
jmp 0x140195ca8
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
movsxd r13, ecx
mov r9, rdx
mov r12d, r8d
cmp r13d, 0xfffffffe
jne 0x140195ce9
call fcn.1400055e2
xor esi, esi
mov dword [rax], esi
call fcn.14000377e
mov dword [rax], 9
jmp 0x1401960ec
xor esi, esi
test ecx, ecx
js 0x1401960d5
cmp r13d, dword [0x14022214c]
jae 0x1401960d5
mov rax, r13
lea edx, [rsi + 1]
and eax, 0x3f
mov qword [rsp + 0x48], rdx
mov r8, r13
lea r11, [0x140221c80]
shr r8, 6
mov qword [rsp + 0x40], r8
lea r14, [rax + rax*8]
mov rax, qword [r11 + r8*8]
test byte [rax + r14*8 + 0x38], dl
je 0x1401960d5
cmp r12d, 0x7fffffff
jbe 0x140195d54
call fcn.1400055e2
mov dword [rax], esi
call fcn.14000377e
mov dword [rax], socket
jmp 0x1401960e7
test r12d, r12d
je 0x1401960d1
test byte [rax + r14*8 + 0x38], 2
jne 0x1401960d1
test r9, r9
je 0x140195d3d
mov rcx, qword [rax + r14*8 + 0x28]
mov rbx, rsi
movsx r10d, byte [rax + r14*8 + 0x39]
mov edi, 4
mov qword [rsp + 0x38], rcx
mov ecx, r10d
mov byte [rsp + 0xa0], r10b
sub ecx, edx
je 0x140195dc6
cmp ecx, edx
jne 0x140195dbe
mov eax, r12d
not eax
test dl, al
jne 0x140195dbe
call fcn.1400055e2
mov dword [rax], esi
call fcn.14000377e
mov dword [rax], socket
call fcn.1400019f6
jmp 0x140195f57
mov ebp, r12d
mov r15, r9
jmp 0x140195e44
mov eax, r12d
not eax
test dl, al
je 0x140195da2
mov ebp, r12d
shr ebp, 1
cmp ebp, edi
cmovb ebp, edi
mov ecx, ebp
call fcn.140001082
xor ecx, ecx
mov rbx, rax
call fcn.140001311
xor ecx, ecx
call fcn.140001311
mov r15, rbx
test rbx, rbx
jne 0x140195e14
call fcn.14000377e
mov dword [rax], listen
call fcn.1400055e2
mov dword [rax], 8
jmp 0x140195f57
xor edx, edx
mov ecx, r13d
lea r8d, [rdx + 1]
call fcn.1400021f3
mov r8, qword [rsp + 0x40]
lea r11, [0x140221c80]
mov r10b, byte [rsp + 0xa0]
mov edx, 1
mov rcx, qword [r11 + r8*8]
mov qword [rcx + r14*8 + 0x30], rax
mov rax, qword [r11 + r8*8]
mov edi, esi
mov qword [rsp + 0x50], r15
mov r9d, 0xa
test byte [rax + r14*8 + 0x38], 0x48
je 0x140195ed6
mov al, byte [rax + r14*8 + 0x3a]
cmp al, r9b
je 0x140195ed6
test ebp, ebp
je 0x140195ed6
mov byte [r15], al
dec ebp
mov rax, qword [r11 + r8*8]
add r15, rdx
mov edi, edx
mov byte [rax + r14*8 + 0x3a], r9b
test r10b, r10b
je 0x140195ed6
mov rax, qword [r11 + r8*8]
mov cl, byte [rax + r14*8 + 0x3b]
cmp cl, r9b
je 0x140195ed6
test ebp, ebp
je 0x140195ed6
mov byte [r15], cl
lea edi, [r9 - 8]
mov rax, qword [r11 + r8*8]
add r15, rdx
dec ebp
mov byte [rax + r14*8 + 0x3b], r9b
cmp r10b, dl
jne 0x140195ed6
mov rax, qword [r11 + r8*8]
mov cl, byte [rax + r14*8 + 0x3c]
cmp cl, r9b
je 0x140195ed6
test ebp, ebp
je 0x140195ed6
mov byte [r15], cl
lea edi, [r9 - 7]
mov rax, qword [r11 + r8*8]
add r15, rdx
dec ebp
mov byte [rax + r14*8 + 0x3c], r9b
mov ecx, r13d
mov dword [rsp + 0x30], esi
call fcn.1400082d8
test eax, eax
je 0x140195f75
mov rax, qword [rsp + 0x40]
lea rcx, [0x140221c80]
mov rax, qword [rcx + rax*8]
cmp byte [rax + r14*8 + 0x38], sil
jge 0x140195f75
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x140195f75
cmp byte [rsp + 0xa0], 2
jne 0x140195f7a
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
shr ebp, 1
mov rdx, r15
mov r8d, ebp
mov dword [rsp + 0xb8], esi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
test eax, eax
jne 0x140195f69
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140003017
or edi, 0xffffffff
mov rcx, rbx
call fcn.140001311
mov eax, edi
jmp 0x1401960ef
mov eax, dword [rsp + 0xb8]
lea edi, [rdi + rax*2]
jmp 0x140195fbc
mov byte [rsp + 0x48], sil
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0xb8]
mov r8d, ebp
mov dword [rsp + 0xb8], esi
mov rdx, r15
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14019609b
cmp dword [rsp + 0xb8], r12d
ja 0x14019609b
add edi, dword [rsp + 0xb8]
mov rdx, qword [rsp + 0x40]
lea r11, [0x140221c80]
mov rax, qword [r11 + rdx*8]
cmp byte [rax + r14*8 + 0x38], sil
jge 0x140195f5a
cmp byte [rsp + 0xa0], 2
movsxd r8, edi
je 0x140196005
mov r9, qword [rsp + 0xa8]
mov rax, r12
shr rax, 1
mov rdx, r15
mov ecx, r13d
mov qword [rsp + 0x20], rax
call fcn.140195680
mov edi, eax
jmp 0x140195f5a
shr r8, 1
cmp byte [rsp + 0x48], sil
je 0x140196089
mov r10, qword [rsp + 0x50]
mov rax, r10
mov rdi, r10
lea r9, [r10 + r8*2]
cmp r10, r9
jae 0x14019607c
mov esi, 0xa
movzx ecx, word [rax]
cmp cx, 0x1a
je 0x14019606b
cmp cx, 0xd
jne 0x140196051
lea r8, [rax + 2]
cmp r8, r9
jae 0x140196051
cmp word [r8], si
jne 0x140196051
movzx ecx, si
mov r11d, 4
jmp 0x140196057
mov r11d, 2
add rax, r11
mov word [rdi], cx
lea r8, [rdi + 2]
mov rdi, r8
cmp rax, r9
jb 0x140196028
jmp 0x14019607c
lea rcx, [0x140221c80]
mov rax, qword [rcx + rdx*8]
or byte [rax + r14*8 + 0x38], 2
sub rdi, r10
sar rdi, 1
add edi, edi
jmp 0x140195f5a
mov rdx, qword [rsp + 0x50]
mov ecx, r13d
call fcn.140195384
jmp 0x140195ffe
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1401960c1
call fcn.14000377e
mov dword [rax], 9
call fcn.1400055e2
mov dword [rax], 5
jmp 0x140195f57
cmp eax, 0x6d
jne 0x140195f50
mov edi, esi
jmp 0x140195f5a
xor eax, eax
jmp 0x1401960ef
call fcn.1400055e2
mov dword [rax], esi
call fcn.14000377e
mov dword [rax], 9
call fcn.1400019f6
or eax, 0xffffffff
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret