Function at 0x18003b000
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
lea ebx, [rdx + 9]
mov r15, r9
mov dword [rsp + 0x78], ebx
cmp edx, ebx
mov ebx, dword [rsp + 0x78]
mov rsi, r8
mov r13d, edx
jae case.0x18003b067.3
mov rdi, qword [rsp + 0x38]
lea r12d, [rdx - 0x4e]
mov eax, dword [rsp + 0x78]
lea rdx, [0x180000000]
mov r8d, 0x14
cmp r12d, 0x11
ja case.default.0x18003b067
mov ecx, dword [rdx + r12*4 + 0x3b2cc]
add rcx, rdx
jmp rcx
mov r8d, dword [r15]
mov edx, 1
mov r9, qword [rsp + 0x38]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
jmp 0x18003b1c0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ebx, 1
jmp 0x18003b1c0
lea r14, [rsi + 0x20]
mov ebp, 0x1e8480
nop dword [rax]
nop word [rax + rax]
xor edx, edx
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8, rsi
lea ecx, [rdx + 0x3e]
call fcn.180014400
sub rbp, 1
jne 0x18003b0b0
jmp 0x18003b1c0
mov rdx, qword [r15]
cmp rdx, 0x14
jb 0x18003b0fa
movzx eax, byte [rsi + 0x13]
mov edi, 0x6d4
and al, 7
cmp al, 6
lea rax, [rdx + rsi]
cmovne rdi, r8
add rdi, rsi
cmp rdi, rax
jb 0x18003b1c6
mov eax, 0x20
jmp 0x18003b1e2
mov rax, qword [r15]
xor r9d, r9d
sub rax, rdi
xor r8d, r8d
add rax, rsi
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov ecx, 0x108
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.18003b320
mov rdi, rax
test rax, rax
je 0x18003b1c0
nop dword [rax + rax]
mov rdx, qword [r15]
lea rax, [rdx + rsi]
cmp rdi, rax
je 0x18003b2b8
cmp byte [rdi], 0xff
jne 0x18003b16b
movzx eax, byte [rdi + 1]
sub eax, 4
je 0x18003b2a4
cmp eax, 1
je 0x18003b200
sub rdx, rdi
lea rax, [rsp + 0x30]
add rdx, rsi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdx
xor r9d, r9d
mov rdx, rdi
xor r8d, r8d
mov ecx, 0x108
call fcn.18003b320
mov rdi, rax
test rax, rax
jne 0x18003b140
jmp 0x18003b1c0
lea rdx, [0x180074d5c]
lea rcx, str.children:bF_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rsp + 0x38], rax
cmp rax, 0
je 0x18003b2b8
mov r8d, 0x14
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x78]
inc r13d
inc r12d
cmp r13d, eax
jb 0x18003b052
mov eax, ebx
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r8d, 0xa0
cmp r8d, 0xa0
je 0x18003b24e
cmp r8d, 0x6e0
je 0x18003b230
cmp r8d, 0xd20
je 0x18003b22c
cmp r8d, 0x1360
je case.0x18003b067.3
jmp 0x18003b290
xor ebx, ebx
jmp 0x18003b290
movzx eax, byte [rdi + 2]
mov byte [rsi + 8], al
movzx eax, byte [rdi + 3]
mov byte [rsi + 9], al
movzx eax, byte [rdi + 4]
mov byte [rsi + 0xa], al
movzx eax, byte [rdi + 5]
mov byte [rsi + 0xb], al
jmp 0x18003b290
movzx eax, byte [rdi + 3]
movzx edx, byte [rdi + 2]
movzx ecx, byte [rsi + 8]
shl edx, 8
or edx, eax
shl ecx, 8
movzx eax, byte [rdi + 4]
shl edx, 8
or edx, eax
movzx eax, byte [rdi + 5]
shl edx, 8
or edx, eax
movzx eax, byte [rsi + 9]
or ecx, eax
movzx eax, byte [rsi + 0xa]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsi + 0xb]
shl ecx, 8
or ecx, eax
cmp edx, ecx
ja 0x18003b2ae
add r8d, 0x640
cmp r8d, 0x1900
jbe 0x18003b206
mov eax, 0x40
jmp 0x18003b1e2
mov eax, 0x6c
jmp 0x18003b1e2
xor eax, eax
jmp 0x18003b1e2
mov eax, 0x60
jmp 0x18003b1e2