Function at 0x180045f80
Capabilities:
Read file on windows
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1010]
mov eax, 0x1110
call fcn.1800bfbd0
sub rsp, rax
mov rax, qword [0x180106b38]
xor rax, rsp
mov qword [rbp + 0x1000], rax
mov ecx, dword [rbp + 0x1078]
mov rbx, r8
mov qword [rbp - 0x70], rbx
mov r8, rdx
mov qword [rbp - 0x68], rdx
lea eax, [rcx + 0xc72]
mov dword [rsp + 0x48], eax
cmp ecx, eax
jae 0x1800465a1
mov eax, dword [rbp - 0x80]
xor esi, esi
mov r15, qword [rbp - 0x68]
mov r12d, dword [rbp - 0x80]
mov edi, dword [rbp - 0x80]
mov edx, dword [rsp + 0x48]
mov qword [rsp + 0x58], rax
nop word [rax + rax]
cmp ecx, 0x21e
ja 0x18004630c
je 0x18004624f
cmp ecx, 0x109
ja 0x180046156
je 0x180046149
mov eax, ecx
sub eax, 0xb
je 0x180046135
sub eax, 0x13
je 0x18004610b
sub eax, 0x9e
je 0x180046052
cmp eax, 0x16
je 0x180046a6d
mov rax, qword [rsp + 0x58]
jmp 0x1800469f4
mov rcx, qword [rbx + 8]
lea rdx, [0x1800ecba0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r15, rax
test rax, rax
je 0x180046ab8
mov r9, rax
mov qword [rsp + 0x40], rsi
mov r8d, 0x65
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
mov r9, r15
mov qword [rsp + 0x68], ILClone
mov r8d, 0x65
lea rdx, [rsp + 0x68]
xor ecx, ecx
mov ebx, eax
call fcn.1800b84f0
xor eax, ebx
cmp eax, 0x44
jne 0x180046aa0
mov r9, r15
mov qword [rsp + 0x40], rsi
lea r8d, [rax + 0x21]
xor ecx, ecx
lea rdx, [rsp + 0x40]
call fcn.1800b84f0
mov r9, r15
mov qword [rsp + 0x68], 0x15
mov r8d, 0x65
lea rdx, [rsp + 0x68]
xor ecx, ecx
mov ebx, eax
call fcn.1800b84f0
xor eax, ebx
cmp eax, 0x47
jne 0x180046aa0
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
mov rbx, qword [rbp - 0x70]
jmp 0x1800469f0
cmp byte [0x180117281], 0
je 0x1800461d7
call qword [0x180117278]
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
mov byte [0x180117281], 0
jmp 0x1800469f0
cmp dword [r8], 2
jne 0x180046ae0
mov rax, qword [rsp + 0x58]
jmp 0x1800469f4
mov qword [rbx + 0x10], 1
jmp 0x1800469f4
mov eax, ecx
sub eax, 0x111
je 0x180046213
sub eax, 0x5c
je 0x1800461e1
sub eax, 0x4d
je 0x1800461ca
cmp eax, 8
jne 0x1800461d7
cmp dword [rbp - 0x30], 0
je 0x1800461a6
mov dword [rsp + 0x28], 0x50
lea rcx, [rbp - 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
xor edx, edx
call fcn.1800b5940
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
test edi, edi
jne 0x1800461d7
lea r8, [rbp - 0x58]
xor edx, edx
lea ecx, [rdi + 0x3b]
call fcn.18002e250
mov ecx, dword [rbp + 0x1078]
mov edi, eax
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
mov dword [rbx], 0x14
inc qword [r8 + 0xd0]
mov rax, qword [rsp + 0x58]
jmp 0x1800469f4
mov r9, r15
mov qword [rsp + 0x40], rsi
mov r8d, 0x65
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
test eax, eax
jne 0x180046afc
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
mov eax, dword [r8]
lea r9, [rbp - 0x58]
xor r8d, r8d
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rsi
mov rdx, rbx
mov qword [rsp + 0x20], rax
lea ecx, [r8 + 0x6f]
call fcn.18005a290
mov ecx, dword [rbp + 0x1078]
mov rdi, rax
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
mov r9, r15
mov qword [rsp + 0x40], 0x61
mov r8d, 0x65
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
mov r9, r15
mov qword [rbp - 0x80], 0x62
mov r8d, 0x65
lea rdx, [rbp - 0x80]
xor ecx, ecx
mov ebx, eax
call fcn.1800b84f0
mov edx, 1
mov qword [rsp + 0x40], 0x40
mov r9, r15
mov r8d, 0x65
lea ecx, [rbx + rax]
shl edx, cl
xor ecx, ecx
mov dword [rbp - 0x80], edx
lea rdx, [rsp + 0x40]
call fcn.1800b84f0
test eax, eax
jne 0x1800462d6
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
mov rbx, qword [rbp - 0x70]
mov dword [rsp + 0x60], 3
jmp 0x1800469f0
mov r9, r15
mov qword [rsp + 0x40], 0x40
mov r8d, 0x65
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
mov ecx, dword [rbp + 0x1078]
mov rbx, qword [rbp - 0x70]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
cmp ecx, 0x324
ja 0x180046581
je 0x1800465a1
mov eax, ecx
sub eax, 0x26b
je 0x18004654e
sub eax, 8
je 0x18004651d
sub eax, 0x5c
je 0x18004634c
cmp eax, 0x4d
je 0x1800465a1
mov rax, qword [rsp + 0x58]
jmp 0x1800469f4
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], r15
mov r9d, 0x43
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov qword [rsp + 0x40], 0x40c
xor edx, edx
xor ecx, ecx
call fcn.1800b2120
test eax, eax
jne 0x1800464e0
mov edx, dword [rsp + 0x60]
mov esi, 0xf4
mov r14d, edx
shl r14d, 9
nop
mov eax, esi
sub eax, 0xf3
je 0x180046434
cmp eax, 1
jne 0x18004641c
movsxd r13, r14d
lea r8d, [rax + 0x64]
mov r9, r15
mov qword [rbp - 0x60], r13
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r13
xor ecx, ecx
call fcn.1800b84f0
cmp eax, 1
jne 0x180046b14
lea rax, [r13 + 1]
mov r9, r15
mov r8d, 0x65
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
cmp eax, 0x20
jne 0x180046b14
lea rax, [r13 + 9]
mov r9, r15
mov r8d, 0x65
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
cmp eax, 0x20
jne 0x180046b14
mov edx, dword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
dec esi
cmp esi, 0xf2
ja 0x180046390
jmp 0x1800469e4
mov r13, qword [rbp - 0x60]
lea rax, [rsp + 0x40]
inc edx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x60], edx
mov r9d, 0x43
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rbx, [r13 + 0xc]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rbx
add r14d, 0x200
call fcn.1800b2120
test eax, 0x1ff
jne 0x180046b2c
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], r15
mov r9d, 0x43
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov qword [rsp + 0x40], rbx
xor edx, edx
xor ecx, ecx
call fcn.1800b2120
cmp eax, r14d
jbe 0x180046b2c
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], r15
mov r9d, 0x43
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov qword [rsp + 0x40], rbx
xor edx, edx
xor ecx, ecx
call fcn.1800b2120
mov edx, dword [rsp + 0x60]
shr eax, 9
mov qword [rsp + 0x58], rax
jmp 0x180046421
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], r15
mov r9d, 0x43
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov qword [rsp + 0x40], 0x40c
xor edx, edx
xor ecx, ecx
call fcn.1800b2120
mov ecx, dword [rbp + 0x1078]
shr eax, 9
mov qword [rsp + 0x58], rax
jmp 0x1800469f0
mov qword [rsp + 0x28], rsi
lea r9, [rbp - 0x58]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
mov edx, 0xbb
xor ecx, ecx
call fcn.18001d960
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
mov dword [rsp + 0x78], edi
jmp 0x1800469f0
mov rax, qword [r8 + 0xc0]
test rax, rax
je 0x180046568
mov rdx, rbx
mov rcx, r8
call rax
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rbp + 0x1070]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
cmp ecx, 0x380
je 0x1800465e9
cmp ecx, 0x431
je 0x1800465d0
cmp ecx, 0x4e2
jne 0x1800469f4
mov dword [rsp + 0x78], esi
mov rax, qword [rsp + 0x78]
mov rcx, qword [rbp + 0x1000]
xor rcx, rsp
call fcn.1800bfc40
mov rbx, qword [rsp + 0x1150]
add rsp, 0x1110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ecx, dword [rbp + 0x1078]
mov rax, qword [rsp + 0x58]
jmp 0x1800469f0
mov edx, dword [rsp + 0x60]
mov esi, edx
mov dword [rbp - 0x78], edx
cmp edx, eax
jge 0x1800469ee
mov eax, edx
shl eax, 9
mov dword [rsp + 0x70], eax
nop dword [rax]
nop word [rax + rax]
movsxd r14, eax
lea rdx, [rsp + 0x40]
mov r9, r15
mov qword [rsp + 0x40], r14
mov r8d, 0x65
xor ecx, ecx
call fcn.1800b84f0
cmp eax, 1
jne 0x1800469c3
lea rbx, [r14 + 1]
mov r9, r15
lea r8d, [rax + 0x64]
mov qword [rsp + 0x40], rbx
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1800b84f0
cmp eax, 0x20
je 0x1800469c3
lea rax, [r14 + 0x10]
mov dword [rsp + 0x28], 0xb6
xor r9d, r9d
mov qword [rsp + 0x40], rax
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.18008e830
test eax, eax
jne 0x1800469c3
xorps xmm0, xmm0
mov qword [rsp + 0x68], rbx
movups xmmword [rbp - 0x20], xmm0
mov esi, 0x7b
nop dword [rax]
mov eax, esi
sub eax, 0x77
je 0x1800468f3
sub eax, 3
je 0x1800468cc
sub eax, 1
je 0x1800468ae
cmp eax, 4
jne 0x1800468fa
movzx eax, byte [rbp - 0x20]
lea r9, [rsp + 0x68]
mov r8d, 0x73
mov byte [rsp + 0x50], al
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.1800a0550
mov edx, 0x20
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x180046724
nop dword [rax]
mov edx, 0x20
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_strrchr
mov edx, 0x20
lea rcx, [rbp - 0x20]
mov byte [rax], 0
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
jne 0x180046700
lea rcx, [rbp - 0x20]
mov rax, 0xffffffffffffffff
nop
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x180046730
mov byte [rbp + rax - 0x20], 0x2e
lea rcx, [rbp - 0x20]
lea rax, [r14 + 9]
mov dword [rsp + 0x68], 3
mov qword [rsp + 0x40], rax
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180046760
lea rdx, [rbp - 0x20]
mov dword [rsp + 0x20], 0x7b
add rdx, rax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x68]
mov rcx, r15
call fcn.1800b22e0
mov edx, 0x20
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x1800467c4
nop dword [rax]
mov edx, 0x20
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_strrchr
mov edx, 0x20
lea rcx, [rbp - 0x20]
mov byte [rax], 0
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
jne 0x1800467a0
mov edx, 0x2f
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x180046bf0
lea edx, [rax + 0x5c]
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x180046bf0
lea rax, [r14 + 0x20]
mov dword [rsp + 0x28], 0xb6
xor r9d, r9d
mov qword [rsp + 0x40], rax
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.18008e830
imul eax, dword [rbp - 0x80]
mov r9d, 0x43
mov qword [rsp + 0x28], r15
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r13d, eax
lea rax, [r14 + 0xc]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.1800b2120
mov rbx, rax
test r13, r13
je 0x180046bce
test eax, eax
je 0x180046bce
lea rdx, [0x1800ed6f8]
lea rcx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180046bb2
nop dword [rax]
mov r14d, 0x76
cmp r14d, 0x76
je 0x180046932
cmp r14d, 0x1d0a
je 0x18004690a
cmp r14d, 0x399e
jne 0x18004699b
sub ebx, r12d
jmp 0x18004699b
xor r8d, r8d
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
test eax, eax
jne 0x180046b6e
mov rbx, qword [rsp + 0x68]
jmp 0x1800468fa
mov edx, 8
lea rcx, [rbp - 0x20]
mov r9, r15
lea r8d, [rdx - 7]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 1
jne 0x180046b6e
mov rbx, qword [rsp + 0x68]
jmp 0x1800468fa
mov qword [r15 + 0xb0], rbx
dec esi
cmp esi, 0x77
ja 0x1800466a0
jmp 0x1800466e6
movsxd rsi, r12d
lea rcx, [rbp]
mov rdx, rsi
mov r9, rax
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
jne 0x180046b82
add r13, rsi
jmp 0x180046996
mov r12d, 0x1000
mov rcx, r13
cmp ebx, r12d
mov qword [rsp + 0x68], rcx
mov esi, 0x7b
cmovb r12d, ebx
nop dword [rax]
mov eax, esi
sub eax, 0x77
je 0x180046a56
sub eax, 3
je 0x180046a2f
sub eax, 1
je 0x180046a11
cmp eax, 4
jne 0x180046a5d
movzx eax, byte [rbp]
lea r9, [rsp + 0x68]
mov r8d, 0x73
mov byte [rsp + 0x50], al
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.1800a0550
mov rax, qword [rsp + 0x40]
add r14d, 0x1c94
cmp r14d, 0x55bc
jbe 0x180046886
test ebx, ebx
jne 0x180046880
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov esi, dword [rbp - 0x78]
mov eax, dword [rsp + 0x70]
inc esi
add eax, 0x200
mov dword [rbp - 0x78], esi
mov dword [rsp + 0x70], eax
cmp esi, dword [rsp + 0x58]
jl 0x180046610
mov rax, qword [rsp + 0x58]
mov ecx, dword [rbp + 0x1078]
mov rbx, qword [rbp - 0x70]
xor esi, esi
mov edx, dword [rsp + 0x48]
add ecx, 0xb1
mov dword [rbp + 0x1078], ecx
cmp ecx, edx
jae 0x1800465a1
mov r8, qword [rbp - 0x68]
jmp 0x180046000
mov rdx, rcx
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
test eax, eax
jne 0x180046b9e
mov rcx, qword [rsp + 0x68]
jmp 0x180046a5d
movsxd rdx, r12d
lea rcx, [rbp]
mov r9, r15
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 1
jne 0x180046b9e
mov rcx, qword [rsp + 0x68]
jmp 0x180046a5d
mov qword [r15 + 0xb0], rcx
dec esi
cmp esi, 0x77
ja 0x180046950
jmp 0x180046996
mov qword [rsp + 0x38], rsi
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov qword [rsp + 0x28], r8
xor edx, edx
xor r8d, r8d
mov dword [rsp + 0x20], 0xb5
call fcn.18004e110
mov eax, dword [rax]
mov byte [rsp + 0x78], al
jmp 0x1800465a1
lea rcx, str._Ljava_lang_Object_JJ_V
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rbx + 8]
lea rcx, str.kPsmDisconnect
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rbx]
lea rcx, str.cuGLMapBufferObject
call fcn.1800bf220
mov dword [rsp + 0x78], 1
jmp 0x1800465a1
lea rcx, str.pm_t_cached_global_ld_misses
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.___unsafe_unretained____strong____weak____autoreleasing_3
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [r13 + 0xc]
mov qword [rsp + 0x28], r15
mov qword [rbp - 0x68], rax
mov r9d, 0x43
lea rax, [rbp - 0x68]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.1800b2120
mov edx, eax
lea rcx, str.sp__state__ZSTATE_INIT_ENCODE
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp - 0x20]
lea rcx, str.HaarClassifier.txt
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp - 0x20]
lea rcx, str.Failed_to_get_process_name
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, eax
lea rdx, [rbp - 0x20]
mov r8d, r13d
lea rcx, str._Incrementable_this_1__Iterator_category___
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp - 0x20]
lea rcx, str.MFL_PROP_SYM_RESERVED_76
call fcn.1800bf220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3