Function at 0x1800c9d00
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x300], rbx
mov rax, qword [0x18020d020]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov r13, r8
mov rbx, rdx
cmp qword [rdx + 0x10], 0
je 0x1800ca309
mov rcx, rdx
call fcn.180086a50
test al, al
je 0x1800ca309
cmp qword [rbx + 0x18], 8
jb 0x1800c9d68
mov rbx, qword [rbx]
lea rdx, [0x1801b0ad8]
mov rcx, rbx
call fcn.1801708c4
mov rsi, rax
test rax, rax
je 0x1800ca309
mov r12b, 1
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18014d5c8
test eax, eax
jne 0x1800ca2f8
mov r9, rsi
lea edx, [rax + 1]
lea r8d, [rax + 0x4c]
lea rcx, [rsp + 0x50]
call fcn.18014d28c
cmp rax, 0x4c
jne 0x1800ca2f8
cmp dword [rsp + 0x50], eax
jne 0x1800ca2f8
mov eax, dword [rsp + 0x64]
mov r15d, eax
shr r15d, 7
and r15b, r12b
xor r14d, r14d
test r12b, al
je 0x1800c9f60
mov word [rsp + 0x20], r14w
mov r9, rsi
lea edx, [r14 + 2]
lea r8d, [r14 + 1]
lea rcx, [rsp + 0x20]
call fcn.18014d28c
cmp rax, 1
jne 0x1800ca2f8
movzx eax, word [rsp + 0x20]
test ax, ax
je 0x1800ca2f8
movzx ecx, ax
call fcn.18011e958
mov rdi, rax
movzx r8d, word [rsp + 0x20]
xor edx, edx
mov rcx, rax
call fcn.18013d3d0
movzx r8d, word [rsp + 0x20]
mov r9, rsi
lea edx, [r14 + 1]
mov rcx, rdi
call fcn.18014d28c
movzx ecx, word [rsp + 0x20]
cmp rax, rcx
je 0x1800c9e66
xor r12b, r12b
mov rcx, rdi
call fcn.18011e904
mov rcx, rsi
call fcn.18014ccdc
movzx eax, r12b
jmp 0x1800ca30b
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x60]
call fcn.18013d3d0
lea rdx, [rbp - 0x60]
mov rcx, rdi
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x1800c9ea3
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r14w
jne 0x1800c9e93
lea rdx, [rbp - 0x60]
jmp 0x1800c9ed2
movzx ebx, word [rdi]
add rbx, rdi
mov edx, 0x1000
lea rcx, [rbx + 8]
call qword [sym.imp.KERNEL32.dll_IsBadStringPtrW]
test eax, eax
jne 0x1800c9eda
mov r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2 + 8], r14w
jne 0x1800c9ec3
lea rdx, [rbx + 8]
mov rcx, r13
call fcn.180003960
mov ebx, r14d
mov edx, r14d
mov eax, 3
movzx r8d, word [rsp + 0x20]
cmp ax, r8w
ja 0x1800c9f58
mov eax, edx
movzx r14d, word [rax + rdi]
add edx, 3
cmp byte [rax + rdi + 2], 0x61
jne 0x1800c9f3e
movzx ecx, r8w
cmp edx, ecx
ja 0x1800c9f55
cmp byte [rdx + rdi], 0x80
jne 0x1800c9f3e
add edx, 5
cmp edx, ecx
ja 0x1800c9f55
add rdx, rdi
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x1800c9f21
lea rcx, [r13 + 0xc0]
call fcn.180003960
movzx r8d, word [rsp + 0x20]
movzx eax, r14w
add ebx, eax
mov edx, ebx
mov ecx, ebx
add rcx, 3
movzx eax, r8w
cmp rcx, rax
jbe 0x1800c9ef1
xor r14d, r14d
mov rcx, rdi
call fcn.18011e904
mov rcx, rsi
call fcn.18015d1a0
mov ebx, eax
mov ecx, dword [rsp + 0x64]
test cl, 2
je 0x1800c9fae
mov dword [rsp + 0x20], r14d
mov r9, rsi
mov edx, 4
lea r8d, [rdx - 3]
lea rcx, [rsp + 0x20]
call fcn.18014d28c
cmp rax, 1
jne 0x1800ca2f8
mov eax, dword [rsp + 0x20]
lea edx, [rax + rbx]
xor r8d, r8d
mov rcx, rsi
call fcn.18014d5c8
mov ecx, dword [rsp + 0x64]
test cl, 4
je 0x1800ca054
movzx r8d, r15b
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1800ca360
mov rbx, rax
lea rdi, [r13 + 0x20]
cmp rdi, rax
je 0x1800c9ffa
mov rcx, rdi
call fcn.1800038e0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1800ca03c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ca037
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ca33b
call fcn.18011e904
movdqa xmm0, xmmword [0x1801b2820]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r14w
mov ecx, dword [rsp + 0x64]
test cl, 8
je 0x1800ca0fa
movzx r8d, r15b
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1800ca360
mov rbx, rax
lea rdi, [r13 + 0x40]
cmp rdi, rax
je 0x1800ca0a0
mov rcx, rdi
call fcn.1800038e0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1800ca0e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ca0dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ca341
call fcn.18011e904
movdqa xmm0, xmmword [0x1801b2820]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r14w
mov ecx, dword [rsp + 0x64]
test cl, 0x10
je 0x1800ca1a0
movzx r8d, r15b
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1800ca360
mov rbx, rax
lea rdi, [r13 + 0x60]
cmp rdi, rax
je 0x1800ca146
mov rcx, rdi
call fcn.1800038e0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1800ca188
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ca183
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ca347
call fcn.18011e904
movdqa xmm0, xmmword [0x1801b2820]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r14w
mov ecx, dword [rsp + 0x64]
test cl, 0x20
je 0x1800ca249
movzx r8d, r15b
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1800ca360
mov rbx, rax
lea rdi, [r13 + 0x80]
cmp rdi, rax
je 0x1800ca1ef
mov rcx, rdi
call fcn.1800038e0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1800ca231
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ca22c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ca34d
call fcn.18011e904
movdqa xmm0, xmmword [0x1801b2820]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r14w
mov ecx, dword [rsp + 0x64]
test cl, 0x40
je 0x1800ca2fb
movzx r8d, r15b
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1800ca360
mov rbx, rax
lea rdi, [r13 + 0xa0]
cmp rdi, rax
je 0x1800ca298
mov rcx, rdi
call fcn.1800038e0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1800ca2d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ca2d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ca335
call fcn.18011e904
movdqa xmm0, xmmword [0x1801b2820]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r14w
mov rcx, rsi
call fcn.18014ccdc
movzx eax, r12b
jmp 0x1800ca30b
xor r12b, r12b
mov rcx, rsi
call fcn.18014ccdc
movzx eax, r12b
jmp 0x1800ca30b
xor al, al
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.18011e4c0
mov rbx, qword [rsp + 0x300]
add rsp, 0x2c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180146ad4
int3
call fcn.180146ad4
int3
call fcn.180146ad4
int3
call fcn.180146ad4
int3
call fcn.180146ad4
int3