Function at 0x18001abd0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x180106b38]
xor rax, rsp
mov qword [rbp + 0x210], rax
imul eax, edx, 0x9a6
mov r10, r9
mov qword [rbp - 0x80], r9
mov r13, r8
mov qword [rsp + 0x78], r8
mov r14, rcx
mov dword [rsp + 0x30], edx
mov r15d, edx
mov dword [rsp + 0x48], eax
cmp edx, eax
ja 0x18001ac83
mov esi, dword [rsp + 0x48]
mov r12d, dword [rsp + 0x48]
xor ecx, ecx
lea rdi, [0x18009b5c0]
lea ebx, [rcx - 1]
cmp r15d, 0x1144b
ja 0x18001afe6
je 0x18001af7c
cmp r15d, 0x332c
ja 0x18001ad02
je 0x18001acd1
mov eax, r15d
sub eax, 1
je 0x18001acb9
sub eax, 0x63
je 0x18001acb1
cmp eax, 0x66
jne 0x18001b187
cmp dword [r14], 1
jne 0x18001b187
mov byte [rsp + 0x34], 1
mov eax, dword [rsp + 0x34]
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1800bfc40
mov rbx, qword [rsp + 0x368]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r12d, ebx
jmp 0x18001b187
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm0
mov qword [r13 + 0x20], rax
jmp 0x18001b187
lea rax, [rsp + 0x58]
mov qword [rsp + 0x58], 0x104
mov qword [rsp + 0x28], rax
lea rdx, [rbp]
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
mov ecx, 0xd6
call fcn.18005fea0
jmp 0x18001b183
cmp r15d, 0x65f4
je 0x18001ae6d
cmp r15d, 0x675e
je 0x18001ae07
cmp r15d, 0x8aad
je 0x18001af3e
cmp r15d, 0xcdf2
jne 0x18001b187
mov eax, dword [r14]
cmp eax, 0xa
jne 0x18001ad72
mov rbx, qword [rsp + 0x68]
lea ecx, [rax - 3]
mov r9, r14
mov qword [rsp + 0x20], r13
xor r8d, r8d
lea rdx, [rbx + 8]
call fcn.18009d6d0
mov dword [rbx + 0x10], 2
mov qword [r13 + 0x98], rdi
mov byte [rsp + 0x34], 1
jmp 0x18001b183
cmp eax, 8
jne 0x18001adb0
mov rbx, qword [rsp + 0x68]
mov r9d, 0x1a
mov r8, r14
mov rdx, r13
xor ecx, ecx
lea rax, [rbx + 8]
mov qword [rsp + 0x20], rax
call fcn.180062ee0
mov dword [rbx + 0x10], 1
mov qword [r13 + 0x98], rdi
mov byte [rsp + 0x34], 1
jmp 0x18001b183
mov ebx, 0xcf
mov eax, ebx
sub eax, 0xcf
je 0x18001adc9
cmp eax, 0x65
je 0x18001ac83
jmp 0x18001adeb
mov qword [rsp + 0x28], rcx
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov r9, r13
xor ecx, ecx
lea edx, [r8 + 0x69]
call fcn.18009da50
xor ecx, ecx
mov byte [rsp + 0x34], 0
add ebx, 0x65
cmp ebx, 0x199
jb 0x18001adb5
mov qword [r13 + 0x98], rdi
mov byte [rsp + 0x34], 1
jmp 0x18001b183
mov rax, qword [r13 + 0x58]
mov rdi, qword [rax + 0x10]
cmp qword [rdi + 8], 0
jne 0x18001ae5f
mov ebx, 0x3a
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x3a
je 0x18001ae32
cmp eax, 1
je 0x18001ac83
jmp 0x18001ae54
mov qword [rsp + 0x28], rcx
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov r9, r13
xor ecx, ecx
lea edx, [r8 + 0x69]
call fcn.18009da50
xor ecx, ecx
mov byte [rsp + 0x34], 0
inc ebx
cmp ebx, 0x3c
jb 0x18001ae20
mov edx, dword [rsp + 0x30]
mov rax, qword [rdi + 8]
mov qword [rsp + 0x68], rax
jmp 0x18001b187
mov ebx, 0x19
cmp ebx, 0x19
je 0x18001ae88
cmp ebx, 0x113
je 0x18001ac83
jmp 0x18001af27
lea r8, [rbp - 0x58]
xor edx, edx
lea rcx, [rbp]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x18001af22
mov r10d, dword [rbp - 0x38]
mov r8d, 0x1b
mov r11d, dword [rbp - 0x3c]
movabs r13, 0xd6bf94d5e57a42bd
mov edi, dword [rbp - 0x40]
mov esi, dword [rbp - 0x44]
mov r9d, dword [rbp - 0x58]
mov eax, r8d
sub eax, 0x1b
je 0x18001aedd
cmp eax, 0x6b
jne 0x18001af10
mov eax, r9d
and eax, 0x10
mov dword [r14], eax
xor r12d, r12d
jmp 0x18001af10
movabs rax, 0x19db1ded53e8000
mov rcx, r11
shl rcx, 0x20
or rcx, r10
mov qword [r14 + 8], rcx
mov rcx, rdi
shl rcx, 0x20
or rcx, rsi
sub rcx, rax
mov rax, r13
mul rcx
shr rdx, 0x17
mov qword [r14 + 0x10], rdx
add r8d, 0x6b
cmp r8d, 0xf1
jb 0x18001aec2
mov r13, qword [rsp + 0x78]
mov dword [rsp + 0x34], r12d
add ebx, 0xfa
cmp ebx, 0x1f4
jbe 0x18001ae72
xor ecx, ecx
lea ebx, [rcx - 1]
mov dword [rsp + 0x28], ecx
lea rax, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov edx, 0x8000
mov rcx, r14
lea r8d, [r9 + 0x40]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wsopen_dispatch]
mov esi, dword [rsp + 0x50]
test eax, eax
cmovne esi, ebx
test esi, esi
jns 0x18001b183
mov eax, 6
jmp 0x18001ac87
lea rax, [rbp - 0x78]
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rsp + 0x38]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov r8d, 0x9d
call fcn.180017ba0
test eax, eax
jne 0x18001ac87
mov dword [rsp + 0x28], eax
xor r9d, r9d
lea rax, [rsp + 0x54]
mov edx, 0x8000
mov rcx, r13
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x40]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wsopen_dispatch]
mov ecx, dword [rsp + 0x54]
test eax, eax
cmovne ecx, ebx
mov dword [rsp + 0x38], ecx
test ecx, ecx
js 0x18001af72
jmp 0x18001b183
cmp r15d, 0x33ac3
ja 0x18001b0ba
je 0x18001b08c
cmp r15d, 0x13486
je 0x18001ac83
cmp r15d, 0x19de9
je 0x18001b071
cmp r15d, 0x22787
je 0x18001b05b
cmp r15d, 0x2b125
jne 0x18001b187
mov ecx, dword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x18001b1a4
mov r8d, dword [rbp - 0x70]
mov rdx, rax
mov ecx, dword [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
cmp eax, dword [rbp - 0x70]
jne 0x18001af72
jmp 0x18001b183
mov eax, dword [rbp - 0x70]
cmp dword [rbp - 0x1c], eax
je 0x18001b187
mov eax, 8
jmp 0x18001ac87
mov ecx, dword [rsp + 0x38]
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__fstat64i32]
test eax, eax
jne 0x18001af72
jmp 0x18001b183
mov eax, dword [rbp - 0x70]
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x70]
mov ecx, 0xa7
mov dword [rsp + 0x40], eax
call fcn.180055760
cmp eax, dword [rbp - 0x6c]
je 0x18001b183
mov eax, 4
jmp 0x18001ac87
cmp r15d, 0x3c461
je 0x18001b153
cmp r15d, 0x44dff
je 0x18001b10b
cmp r15d, 0x4d79d
je 0x18001b0ed
cmp r15d, 0x5613b
jne 0x18001b187
mov eax, ecx
jmp 0x18001ac87
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
mov ecx, dword [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
mov ecx, dword [rsp + 0x4c]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
jmp 0x18001b183
mov edi, dword [rsp + 0x4c]
test edi, edi
js 0x18001af72
mov rbx, qword [rsp + 0x70]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x20], rbx
mov edx, 0x55
mov dword [rsp + 0x40], edi
xor ecx, ecx
mov dword [rsp + 0x58], esi
call fcn.18009da50
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18001b183
mov dword [rsp + 0x28], ecx
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov edx, 0x8301
mov rcx, r10
lea r8d, [r9 + 0x40]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wsopen_dispatch]
mov edi, dword [rsp + 0x60]
test eax, eax
cmovne edi, ebx
mov dword [rsp + 0x4c], edi
mov edx, dword [rsp + 0x30]
imul eax, edx, 0x82
add r15d, eax
cmp r15d, dword [rsp + 0x48]
ja 0x18001ac83
mov r10, qword [rbp - 0x80]
jmp 0x18001ac30
mov eax, 1
jmp 0x18001ac87