Function at 0x140089e70
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
lea r12, [0x1401b76b0]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xffffffffffffffff
lea rax, [rbp - 0x58]
mov qword [rbp - 0x68], rax
xor r15d, r15d
mov dword [rbp - 0x60], r15d
mov dword [rbp - 0x5c], 0x104
mov word [rbp - 0x58], r15w
lea rax, [0x1401b7690]
mov qword [rbp - 0x70], rax
mov r8d, 0x104
lea rdx, [rbp - 0x58]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140089f0e
mov edx, dword [rbp - 0x5c]
mov rcx, rbx
call fcn.14003c814
mov dword [rbp - 0x60], eax
mov rbx, qword [rbp - 0x68]
jmp 0x140089f12
mov dword [rbp - 0x60], r15d
mov rcx, qword [rsp + 0x48]
cmp rcx, 0xffffffffffffffff
je 0x140089f2f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x48], rcx
test rbx, rbx
je 0x140089f66
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 3]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, rax
mov qword [rsp + 0x48], rax
cmp rcx, 0xffffffffffffffff
je 0x14008a110
mov ebx, r15d
nop dword [rax]
nop word [rax + rax]
mov dword [rbp + 0x1e8], r15d
mov r8d, 0x40
sub r8d, ebx
mov eax, ebx
lea rdx, [rsp + 0x50]
add rdx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x1e8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140089fc8
mov eax, dword [rbp + 0x1e8]
test eax, eax
je 0x140089fc8
add ebx, eax
cmp ebx, 0x40
jae 0x140089fc8
mov rcx, qword [rsp + 0x48]
jmp 0x140089f80
mov eax, ebx
lock add qword [0x1401f4d70], rax
cmp ebx, 0x40
jne 0x14008a10b
movzx eax, word [rsp + 0x74]
mov word [rbp + 0x1e8], ax
movzx eax, word [rsp + 0x76]
mov word [rbp + 0x1ea], ax
mov edx, dword [rbp + 0x1e8]
mov rcx, qword [rsp + 0x48]
cmp rcx, 0xffffffffffffffff
je 0x14008a110
mov qword [rbp + 0x1f0], rdx
xor r9d, r9d
lea r8, [rbp + 0x1f4]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rbp + 0x1f0], eax
cmp eax, 0xffffffff
jne 0x14008a038
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14008a10b
cmp qword [rbp + 0x1f0], 0xffffffffffffffff
je 0x14008a10b
lea rbx, [rdi + 0x8950]
nop dword [rax]
lea rdx, [rsp + 0x40]
lea rcx, [rdi + 0x8938]
call fcn.14001fc30
test al, al
je 0x14008a071
lea rbx, [rdi + 0x8950]
cmp dword [rbx], 2
jne 0x14008a050
cmp dword [rbx], 2
je 0x14008a082
lea rcx, [rdi + 0x8938]
call fcn.14001f3e0
mov edx, dword [rbp + 0x1e8]
mov rcx, qword [rsp + 0x48]
cmp rcx, 0xffffffffffffffff
je 0x14008a110
mov qword [rbp + 0x1e8], rdx
xor r9d, r9d
lea r8, [rbp + 0x1ec]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rbp + 0x1e8], eax
cmp eax, 0xffffffff
jne 0x14008a0bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14008a10b
cmp qword [rbp + 0x1e8], 0xffffffffffffffff
je 0x14008a10b
lea rbx, [rdi + 0x89c8]
lea rdx, [rsp + 0x40]
lea rcx, [rdi + 0x89b0]
call fcn.14001fc30
test al, al
je 0x14008a0f1
lea rbx, [rdi + 0x89c8]
cmp dword [rbx], 3
jne 0x14008a0d0
cmp dword [rbx], 3
je 0x14008a102
lea rcx, [rdi + 0x89b0]
call fcn.14001f3e0
mov bl, 1
mov rcx, qword [rsp + 0x48]
jmp 0x14008a112
mov rcx, qword [rsp + 0x48]
xor bl, bl
lea rax, [0x1401b7738]
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], r15
mov dword [rbp - 0x60], r15d
mov qword [rsp + 0x40], r12
cmp rcx, 0xffffffffffffffff
je 0x14008a136
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, bl
mov rbx, qword [rsp + 0x2e0]
add rsp, 0x2b0
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret