Function at 0x18005f440
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0x98
mov r11, qword [rbp - 0x29]
lea r14d, [r8 + 0x13]
mov rdi, qword [rbp - 0x29]
xor esi, esi
cmp r8d, r14d
mov dword [rbp - 0x41], r14d
mov eax, r8d
mov qword [rbp - 0x49], r11
mov r10, rdx
mov r13d, r8d
mov r8, qword [rbp - 0x29]
mov rbx, rcx
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x59], r8
mov qword [rbp - 0x39], rdx
jae 0x18005fa82
mov r15, qword [rbp - 0x29]
lea rcx, [0x180000000]
mov r12d, dword [rbp + 0x67]
nop word [rax + rax]
lea eax, [r13 - 0xa]
cmp eax, 0x23
ja case.default.0x18005f4de
mov ecx, dword [rcx + rax*4 + 0x60064]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
cmp r15, 4
jae 0x18005f5b9
mov r14d, 0x85
cmp r14d, 0x85
je 0x18005f52e
cmp r14d, 0x55b9
je 0x18005f526
cmp r14d, 0xaaed
jne 0x18005f5a1
mov rax, rdi
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rdi, rsi
jmp 0x18005f5a1
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
je 0x18005f59d
mov ebx, 0x63
mov eax, ebx
sub eax, 0x63
je 0x18005f564
sub eax, 1
je 0x18005f553
cmp eax, 1
je 0x18005f50f
jmp 0x18005f596
mov r9, qword [rbp + 0x6f]
mov eax, 1
mov rdi, rsi
mov dword [r9], eax
jmp 0x18005f596
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
xor edx, edx
mov ecx, dword [rax]
mov dword [rbp - 0x19], ecx
lea r8d, [rdx + 0x6b]
lea rcx, [rbp - 0x19]
call fcn.1800390d0
mov rcx, qword [rbp + 0x77]
lea r8, str.VisitProxyStaticFieldSymbol
mov r9, rax
mov edx, pe_nt_image_headers64
call fcn.18006f620
inc ebx
cmp ebx, 0x66
jb 0x18005f540
mov r10, qword [rbp + 0x5f]
add r14d, 0x5534
cmp r14d, 0xff9c
jbe 0x18005f4f0
mov r14d, dword [rbp - 0x41]
lea rcx, [rbp - 0x31]
mov r8d, 4
mov r9, r10
lea edx, [r8 - 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r8, qword [rbp - 0x59]
mov r15, rax
mov rdx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
jmp case.0x18005f4de.11
mov eax, dword [r8 + 0x18]
mov edx, dword [rbp - 0x3d]
cmp eax, edx
jae 0x18005f5f6
mov dword [r8 + 0x18], edx
mov eax, dword [rbp - 0x3d]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
mov qword [r8 + 0x20], rax
jmp case.0x18005f4de.11
mov rax, qword [rbp + 0x7f]
cmp dword [rax], 0xa0d0d0a
je 0x18005f645
mov eax, 0x39
cmp eax, 0x39
je 0x18005f636
cmp eax, 0xfe
je 0x18005f50f
jmp 0x18005f639
mov rdi, rsi
add eax, 0xc5
cmp eax, 0x1c3
jb 0x18005f624
lea rcx, [rbp - 0x3d]
jmp 0x18005f5bd
cmp dword [rbp - 0x3d], 0x1c
jae case.0x18005f4de.11
mov ebx, 0x11d
nop dword [rax]
cmp ebx, 0x11d
je 0x18005f68a
cmp ebx, 0x2166
je 0x18005f680
cmp ebx, 0x41af
jne 0x18005f6af
mov rax, rsi
jmp 0x18005f512
mov eax, 1
mov dword [r9], eax
jmp 0x18005f6af
mov r9d, dword [rbp - 0x3d]
lea r8, str._std__num_get_b48std__istreambuf_iterator_b19std__char_traits_b___
mov rcx, qword [rbp + 0x77]
mov edx, pe_nt_image_headers64
mov dword [rsp + 0x20], 0x1c
call fcn.18006f620
mov r9, qword [rbp + 0x6f]
add ebx, 0x2049
cmp ebx, 0x60db
jbe 0x18005f660
mov r8, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
jmp case.0x18005f4de.11
mov r10, qword [rbp + 0x57]
mov ecx, dword [r10]
test ecx, ecx
je 0x18005f783
cmp ecx, 1
jne 0x18005f70d
mov ecx, 0x91
mov eax, ecx
sub eax, 0x91
je 0x18005f6fb
cmp eax, 0x55
je case.0x18005f4de.39
jmp 0x18005f702
mov dword [r11], 0x3b9aca00
add ecx, 0x55
cmp ecx, 0x13b
jb 0x18005f6e7
mov ebx, 0x4a
cmp ebx, 0x4a
je 0x18005f73a
cmp ebx, 0x3046
je 0x18005f72d
cmp ebx, 0x6042
je 0x18005f50f
jmp 0x18005f764
mov eax, 1
mov rdi, rsi
mov dword [r9], eax
jmp 0x18005f764
mov r9d, dword [r10]
lea r8, str.WebRTC.Call.PacerBitrateInKbps_
mov rcx, qword [rbp + 0x77]
mov edx, pe_nt_image_headers64
call fcn.18006f620
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r9, qword [rbp + 0x6f]
mov r10, qword [rbp + 0x57]
add ebx, 0x2ffc
cmp ebx, 0x8ff4
jbe 0x18005f712
mov r8, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
jmp case.0x18005f4de.11
mov dword [r11], 0xf4240
mov r13d, 0x27
jmp case.0x18005f4de.11
mov r8, qword [rbp + 0x77]
lea rcx, [rbp - 0x29]
mov edx, reloc.SHELL32.dll_ILFindLastID
mov qword [rbp - 0x29], 0x18
call fcn.18005f030
mov rdx, qword [rbp - 0x39]
mov r8, rax
mov r11, qword [rbp - 0x49]
mov qword [rbp - 0x59], rax
jmp case.0x18005f4de.11
mov eax, dword [rbp - 0x3d]
mov rcx, qword [rbp - 0x21]
mov dword [rcx + 4], eax
mov eax, dword [rbp - 0x31]
mov dword [rdx], eax
jmp case.0x18005f4de.11
mov eax, dword [rbx]
mov dword [r8 + 0xb4], eax
mov dword [r8 + 0x18], 0x800
jmp case.0x18005f4de.11
test r8, r8
jne case.0x18005f4de.11
mov ecx, 0x34
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x33
je 0x18005f50f
cmp eax, 1
jne 0x18005f81b
mov eax, 1
mov rdi, rsi
mov dword [r9], eax
dec ecx
cmp ecx, 0x32
ja 0x18005f800
jmp case.0x18005f4de.11
mov rax, qword [r8 + 0x20]
mov qword [rbp - 0x21], rax
lea rdx, [rax + 8]
mov qword [rbp - 0x39], rdx
jmp case.0x18005f4de.11
mov rax, qword [rbp + 0x7f]
mov rcx, qword [rbp - 0x21]
mov eax, dword [rax]
mov dword [rcx], eax
jmp case.0x18005f4de.11
mov dword [r9], esi
jmp case.0x18005f4de.11
mov r11, qword [r8 + 0x38]
mov qword [rbp - 0x49], r11
mov dword [r8 + 0x48], r12d
jmp case.0x18005f4de.11
cmp r15, 4
jae 0x18005f92e
mov r14d, 0x61
cmp r14d, 0x61
je 0x18005f88e
cmp r14d, 0xe8
je 0x18005f50f
jmp 0x18005f90a
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
je 0x18005f903
mov ebx, 0x4c
mov eax, ebx
sub eax, 0x4c
je 0x18005f8c6
sub eax, 0x29
je 0x18005f8b7
cmp eax, 0x29
je 0x18005f50f
jmp 0x18005f8f8
mov rax, qword [rbp + 0x6f]
mov rdi, rsi
mov dword [rax], 1
jmp 0x18005f8f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
xor edx, edx
mov ecx, dword [rax]
mov dword [rbp - 0x51], ecx
lea r8d, [rdx + 0x6b]
lea rcx, [rbp - 0x51]
call fcn.1800390d0
mov rcx, qword [rbp + 0x77]
lea r8, str.MMC_GET_MAIL_CONFIGURATIONS
mov r9, rax
mov edx, pe_nt_image_headers64
call fcn.18006f620
add ebx, 0x29
cmp ebx, 0xc7
jb 0x18005f8a0
mov r10, qword [rbp + 0x5f]
mov rdi, rsi
add r14d, 0x87
cmp r14d, 0x16f
jb 0x18005f876
mov r14d, dword [rbp - 0x41]
mov r8, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
cmp dword [rbp - 0x31], 0x1a2b3c4d
je case.0x18005f4de.11
mov r8d, 0x11e
mov eax, r8d
sub eax, 0x11c
je 0x18005f98f
sub eax, 1
je 0x18005f980
cmp eax, 1
jne 0x18005f9be
mov ecx, dword [rbp - 0x31]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
and eax, 0xff00
shl ecx, 0x10
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [rbp - 0x31], edx
jmp 0x18005f9be
cmp dword [rbp - 0x31], 0x1a2b3c4d
jne 0x18005f678
jmp 0x18005f9be
mov edx, dword [rbp - 0x3d]
mov r12d, 1
mov ecx, edx
mov eax, edx
shr eax, 0x10
and ecx, 0xff0000
or ecx, eax
mov eax, edx
and eax, 0xff00
shl edx, 0x10
or eax, edx
shr ecx, 8
shl eax, 8
or ecx, eax
mov dword [rbp - 0x3d], ecx
dec r8d
cmp r8d, 0x11b
ja 0x18005f941
mov r8, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x39]
jmp case.0x18005f4de.11
mov dword [r10 + 8], esi
jmp case.0x18005f4de.11
mov r12d, esi
jmp case.0x18005f4de.11
cmp qword [r8 + 0x20], rsi
jne 0x18005fa57
mov ebx, 0xf7
mov eax, ebx
sub eax, 0xf7
je 0x18005fa1d
sub eax, 3
je 0x18005fa10
cmp eax, 3
je 0x18005f50f
jmp 0x18005fa40
mov eax, 1
mov rdi, rsi
mov dword [r9], eax
jmp 0x18005fa40
mov rcx, qword [rbp + 0x77]
lea r8, str.STAT_threads
mov edx, pe_nt_image_headers64
call fcn.18006f620
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r9, qword [rbp + 0x6f]
add ebx, 3
cmp ebx, 0x100
jb 0x18005f9f7
mov r8, qword [rbp - 0x59]
mov rdx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
mov dword [r11 + 4], 0x60020
lea rcx, [0x180000000]
mov r10, qword [rbp + 0x5f]
inc r13d
cmp r13d, r14d
jae 0x18005fa7f
mov r9, qword [rbp + 0x6f]
mov rbx, qword [rbp + 0x57]
jmp 0x18005f4c0
mov eax, dword [rbp + 0x67]
imul r13d, eax, 0x372
mov r15d, eax
mov dword [rbp - 0x41], r13d
cmp eax, r13d
ja 0x18005f50f
mov r12, qword [rbp - 0x29]
mov ebx, dword [rbp + 0x67]
lea rcx, [0x180058600]
lea rax, [0x1800585f0]
cmp r15d, 0x3212
ja 0x18005ff77
je 0x18005ff04
cmp r15d, 0x1651
ja 0x18005fc1d
je 0x18006000e
cmp r15d, 0x1d
je 0x18005fbcf
cmp r15d, 0x5aa
je 0x18005fb88
cmp r15d, 0xb37
je 0x18005fb0e
cmp r15d, 0x10c4
jne 0x180060045
movzx eax, word [rdx + 6]
mov dword [r8 + 0x6c], eax
jmp 0x180060045
cmp word [rdx + 4], 1
jne 0x18005fb20
mov eax, 1
cmp word [rdx + 6], si
je 0x18005fb7c
mov r14d, 0x6e
nop word [rax + rax]
mov eax, r14d
sub eax, 0x6d
je 0x18005fef5
cmp eax, 1
jne 0x18005fb67
movzx eax, word [rdx + 6]
lea r8, str.__VCTargetsPath_BuildCustomizationsCUDA
movzx r9d, word [rdx + 4]
mov edx, pe_nt_image_headers64
mov rcx, qword [rbp + 0x77]
mov dword [rsp + 0x20], eax
call fcn.18006f620
mov rdx, qword [rbp - 0x39]
dec r14d
cmp r14d, 0x6c
ja 0x18005fb30
movzx eax, word [rdx + 4]
mov r8, qword [rbp - 0x59]
mov r11, qword [rbp - 0x49]
movzx eax, ax
mov dword [r8 + 0x68], eax
jmp 0x180060045
cmp dword [r8 + 0x48], esi
je 0x180060045
mov ecx, 0xc3
mov eax, ecx
sub eax, 0xc3
je 0x18005fbb3
cmp eax, 0x57
jne 0x18005fbbf
movzx eax, word [rdx + 6]
rol ax, 8
mov word [rdx + 6], ax
jmp 0x18005fbbf
movzx eax, word [rdx + 4]
rol ax, 8
mov word [rdx + 4], ax
add ecx, 0x57
cmp ecx, 0x171
jb 0x18005fb97
jmp 0x180060045
mov rcx, qword [r8 + 0x20]
lea r9, [rbp - 0x21]
mov eax, 1
mov dword [rsp + 0x28], 0x48
mov dword [rbp - 0x51], eax
lea rdx, [rbp - 0x51]
mov eax, dword [rbp - 0x3d]
add rcx, 0xc
sub rax, 0xc
mov r8, r10
mov qword [rbp - 0x21], rax
mov rax, qword [rbp + 0x77]
mov qword [rsp + 0x20], rax
call fcn.180063c00
mov r8, qword [rbp - 0x59]
cmp eax, 0xffffffff
je 0x18005fef9
jmp 0x180060041
cmp r15d, 0x1bde
je 0x18005fcc3
cmp r15d, 0x216b
je 0x18005fcba
cmp r15d, 0x26f8
je 0x18005fc79
cmp r15d, 0x2c85
jne 0x180060045
movzx eax, word [r12]
lea r8, [rbp - 0x51]
xor r9d, r9d
mov dword [rbp - 0x51], eax
mov edx, 0xc7
xor ecx, ecx
call fcn.18004a690
mov r8, qword [rbp - 0x59]
mov dword [r8 + 0x74], eax
mov dword [r8 + 0x78], esi
jmp 0x180060041
mov eax, dword [r12 + 4]
mov dword [r8 + 0x70], eax
test eax, eax
jg 0x180060045
movzx eax, word [r12]
xor r9d, r9d
mov dword [rbp - 0x51], eax
xor edx, edx
lea rax, [rbp - 0x51]
xor ecx, ecx
mov r8d, 0xb4
mov qword [rsp + 0x20], rax
call fcn.18003d8d0
mov r8, qword [rbp - 0x59]
mov dword [r8 + 0x70], eax
jmp 0x180060041
mov dword [r8 + 0x7c], esi
jmp 0x180060045
mov r15d, 0x117
nop dword [rax]
cmp r15d, 0x117
je 0x18005fe59
cmp r15d, 0x809a
je 0x18005fe45
cmp r15d, 0x1001d
je 0x18005fd05
cmp r15d, 0x17fa0
jne 0x18005febb
jmp 0x18005febb
mov eax, dword [rbp - 1]
sub eax, 1
je 0x18005fd33
sub eax, 1
je 0x18005fe1e
sub eax, 1
je 0x18005fe1e
cmp eax, 3
je 0x18005fe1e
mov r15d, 0x17fa0
jmp 0x18005febb
mov r14d, reloc.SHELL32.dll_SHSetFolderPathW
nop dword [rax]
cmp r14d, 0xe8
je 0x18005fdd3
cmp r14d, 0x8e48
je 0x18005fd72
cmp r14d, 0x11ba8
jne 0x18005fe0a
mov r13d, dword [rbp - 0x41]
mov r15d, 0x1bde
jmp 0x180060041
cmp dword [r8 + 0x48], esi
je 0x18005fdb4
mov ecx, dword [r12 + 4]
mov edx, ecx
movzx eax, word [r12]
and edx, 0xff0000
rol ax, 8
mov word [r12], ax
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [r12 + 4], edx
mov r13, qword [rbp + 0x77]
lea rcx, [rbp - 0x11]
xor edx, edx
mov qword [rsp + 0x20], r13
mov r9, r8
lea r8d, [rdx + 0x19]
call fcn.180004ca0
test eax, eax
jmp 0x18005fe04
mov rdx, qword [rbp + 0x77]
lea rax, [rbp - 0x11]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x21]
xor r8d, r8d
mov dword [rsp + 0x20], 0x68
xor ecx, ecx
mov qword [rbp - 0x21], 8
call fcn.180044ed0
mov r12, rax
test rax, rax
mov r8, qword [rbp - 0x59]
je 0x18005fe4a
add r14d, 0x8d60
cmp r14d, 0x1a820
jbe 0x18005fd40
mov ecx, 0xa1
cmp ecx, 0xa1
je 0x18005fedc
add ecx, 0x1745
cmp ecx, 0x1745
jbe 0x18005fe23
mov r15d, 0x17fa0
jmp 0x18005febb
cmp ebx, 0xffffffff
jne 0x18005febb
mov r13d, dword [rbp - 0x41]
mov r15d, 0x4846
jmp 0x180060041
mov r13, qword [rbp + 0x77]
lea rdx, [rbp - 0x11]
mov qword [rsp + 0x20], r8
mov r9, r13
mov r8, r10
mov ecx, 0xd1
call fcn.18005e5e0
mov rbx, rax
test eax, eax
jne 0x18005febb
mov r14d, 0x11f
cmp r14d, 0x11f
je 0x18005fe97
cmp r14d, 0x380e
je 0x18005fef1
jmp 0x18005feab
lea r8, str.Exception_in_updtDaemonManager::updtDaemonManager:
mov edx, pe_nt_image_headers64
mov rcx, r13
call fcn.18006f620
add r14d, 0x36ef
cmp r14d, 0x6dde
jbe 0x18005fe83
mov r8, qword [rbp - 0x59]
add r15d, 0x7f83
mov r10, qword [rbp + 0x5f]
cmp r15d, 0x1fe0c
jbe 0x18005fcd0
jmp 0x18005fcc3
mov rcx, qword [rbp + 0x77]
lea r8, str.DX11Engine::OnContextCreate:_Create_Context_failed___context_already_exists
mov edx, pe_nt_image_headers64
call fcn.18006f620
mov r13d, dword [rbp - 0x41]
mov r8, qword [rbp - 0x59]
mov r15d, 0x4846
jmp 0x180060041
mov eax, dword [r8 + 0x74]
xor r9d, r9d
mov dword [rbp - 0x51], eax
xor edx, edx
lea rax, [rbp - 0x51]
xor ecx, ecx
mov r8d, 0xb4
mov qword [rsp + 0x20], rax
call fcn.18003d8d0
mov r11, qword [rbp - 0x49]
mov ecx, eax
add rcx, 0x20020
mov eax, dword [r11 + 4]
cmp rcx, rax
jbe 0x18005ff6e
mov rax, qword [rbp - 0x59]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xb4
mov eax, dword [rax + 0x74]
mov dword [rbp - 0x51], eax
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
call fcn.18003d8d0
mov r11, qword [rbp - 0x49]
add eax, 0x20020
mov dword [r11 + 4], eax
mov r8, qword [rbp - 0x59]
jmp 0x180060045
cmp r15d, 0x4dd3
ja 0x18005ffd2
je 0x18005ffcc
cmp r15d, 0x379f
je 0x18005ffc3
cmp r15d, 0x3d2c
je 0x18005ffb7
cmp r15d, 0x42b9
je 0x18005ffaf
cmp r15d, 0x4846
je 0x18005f50f
jmp 0x180060045
mov rdi, r8
jmp 0x180060045
mov qword [r8 + 0x2f0], rax
jmp 0x180060045
mov qword [r8 + 8], rcx
jmp 0x180060045
mov rcx, qword [r11 + 0x10]
jmp 0x180060037
cmp r15d, 0x5360
je 0x180060033
cmp r15d, 0x58ed
je 0x18006001d
cmp r15d, 0x5e7a
jne 0x180060045
mov ecx, 0x74
mov eax, ecx
sub eax, 0x74
je 0x180060004
cmp eax, 1
je 0x18005f50f
jmp 0x180060007
mov rdi, rsi
inc ecx
cmp ecx, 0x76
jb 0x18005fff2
mov rax, qword [rbp + 0x57]
mov eax, dword [rax]
mov dword [r8 + 0xb4], eax
jmp 0x180060045
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [rbp + 0x6f]
mov ecx, 1
mov dword [rax], ecx
jmp 0x18006003d
mov rcx, qword [r8 + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [rbp - 0x59]
mov r11, qword [rbp - 0x49]
imul eax, dword [rbp + 0x67], 0x31
add r15d, eax
cmp r15d, r13d
ja 0x18005f50f
mov rdx, qword [rbp - 0x39]
mov r10, qword [rbp + 0x5f]
jmp 0x18005faa0