Function at 0x140001830
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x148
mov qword [rsp + 0x130], 0xfffffffffffffffe
mov dword [rsp + 0x48], 0
mov rdx, qword [rsp + 0x160]
add rdx, 0x50
lea rcx, [rsp + 0x40]
call fcn.1400025b0
nop
mov rax, qword [rsp + 0x160]
cmp qword [rax + 8], 0
jne 0x1400018eb
mov dword [rsp + 0x48], 0x51f9461
xor eax, eax
cmp eax, 1
je 0x1400018e6
call fcn.140004430
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
je 0x1400018e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x50]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x51f9461
mov dword [rsp + 0x28], 0x51
lea rax, [0x14002e958]
mov qword [rsp + 0x20], rax
lea r9, [0x14002e9a0]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x50]
call qword [rdi + 0x30]
jmp 0x140001b57
mov dword [rsp + 0x88], 0
mov edx, 0x1000
lea rcx, [rsp + 0x58]
call fcn.1400023a0
nop
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.140002480
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x88]
mov r8d, 0x1000
mov rdx, rax
mov rcx, qword [rsp + 0x160]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400019e9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0xe8
je 0x1400019e9
mov dword [rsp + 0x48], 0x5bf9106
xor eax, eax
cmp eax, 1
je 0x1400019da
call fcn.140004430
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
je 0x1400019da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x90]
mov rdi, qword [rdi]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 0x5bf9106
mov dword [rsp + 0x28], 0x5b
lea rax, [0x14002ea08]
mov qword [rsp + 0x20], rax
lea r9, [0x14002ea50]
mov r8d, 0xf9
mov edx, 1
mov rcx, qword [rsp + 0x90]
call qword [rdi + 0x30]
nop
lea rcx, [rsp + 0x58]
call fcn.140002400
jmp 0x140001b3e
cmp dword [rsp + 0x88], 0
ja 0x140001a2d
mov rdx, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x160]
call fcn.140001ea0
movzx eax, al
test eax, eax
je 0x140001a1e
lea rcx, [rsp + 0x58]
call fcn.140002400
jmp 0x140001b3e
lea rcx, [rsp + 0x58]
call fcn.140002400
jmp 0x140001b1c
mov rcx, qword [rsp + 0x160]
add rcx, 0x20
lea rdx, [rsp + 0xd8]
call fcn.14000eb00
lea rdi, [rsp + 0x120]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0xc8]
lea rsi, [rsp + 0x120]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov edi, dword [rsp + 0x88]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x58]
call fcn.140002430
mov r8, rdi
lea rdx, [rsp + 0xa8]
mov rcx, rax
call fcn.140002610
lea rdi, [rsp + 0x110]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x58]
call fcn.140002430
lea rdi, [rsp + 0x100]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0xf0]
lea rsi, [rsp + 0xc8]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x160]
add rcx, 0x20
lea r9, [rsp + 0x110]
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xf0]
call fcn.140002f10
nop
lea rcx, [rsp + 0x58]
call fcn.140002400
mov edx, 0x64
mov rcx, qword [rsp + 0x160]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x1400018eb
mov eax, dword [rsp + 0x48]
and eax, 0xfff
test eax, eax
je 0x140001b4d
jmp 0x140001b57
xor eax, eax
test eax, eax
jne 0x14000186e
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0xe8], eax
lea rcx, [rsp + 0x40]
call fcn.1400025f0
mov eax, dword [rsp + 0xe8]
add rsp, 0x148
pop rdi
pop rsi
ret