Function at 0x1800bef90
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, qword [rsp + 0xb8]
lea rdx, [0x180000000]
mov ebx, dword [rsp + 0x90]
mov r12, r8
mov r14, qword [rsp + 0x40]
mov eax, ecx
mov rbp, qword [rsp + 0x40]
mov r13d, ecx
mov esi, dword [rsp + 0x90]
add eax, 6
cmp r13d, eax
jae case.0x1800bf007.226
lea eax, [r13 - 0xe1]
cmp eax, 9
ja case.0x1800bf007.227
mov ecx, dword [rdx + rax*4 + 0xbf254]
add rcx, rdx
jmp rcx
mov rax, qword [r12]
mov r8d, ebp
mov eax, dword [rax + 0x80]
test eax, eax
je 0x1800bf0d6
mov ecx, ebp
or ecx, r14d
dec eax
test eax, ecx
je 0x1800bf0d6
test rbp, rbp
je case.0x1800bf007.227
nop word [rax + rax]
mov edi, 0xd7
cmp edi, 0xd7
je 0x1800bf060
cmp edi, 0xa64a
jne 0x1800bf0a5
movsxd rax, esi
sub rbp, rax
add r14, rax
jmp 0x1800bf0a5
mov rax, qword [r12]
mov rdx, qword [r15 + 0xd8]
mov ecx, dword [r15 + 4]
mov r8d, dword [rax + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
mov esi, eax
mov rax, qword [r12]
movsxd rcx, dword [rax + 0x18]
cmp esi, ecx
jne 0x1800bf19b
mov rdx, qword [r15 + 0xd8]
cmp rbp, rcx
mov esi, ecx
mov rcx, r14
cmovbe esi, ebp
movsxd r8, esi
call sub.VCRUNTIME140.dll_memcpy
add edi, 0xa573
cmp edi, 0x14ae6
jbe 0x1800bf045
test rbp, rbp
jne 0x1800bf040
mov r9, qword [rsp + 0xa8]
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x90]
inc r13d
jmp 0x1800befe1
mov ecx, dword [r15 + 4]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
movsxd rsi, eax
cmp rsi, rbp
je case.0x1800bf007.233
mov ecx, SHTestTokenMembership
cmp ecx, 0xc47d
ja case.0x1800bf007.233
cmp ecx, 0xf3
je 0x1800bf19b
cmp ecx, 0x4272
je 0x1800bf17f
cmp ecx, 0x83f1
jne 0x1800bf1a0
movsxd rax, esi
mov r8, rbp
sub r8, rax
xor edx, edx
mov r13d, 0xe9
lea rcx, [rax + r14]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [r12]
mov rax, qword [rcx + 0x20]
test rax, rax
je 0x1800bf0b8
mov edx, dword [rsp + 0x40]
mov r9, r14
mov dword [rsp + 0x30], edx
mov rdx, qword [rsp + 0xb0]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbp
mov r8d, dword [rdx]
mov rdx, qword [rsp + 0x98]
mov edx, dword [rdx]
call rax
mov dword [rsp + 0x40], eax
jmp 0x1800bf0b8
xor eax, eax
mov dword [rsp + 0x40], 0x7f2bb724
test esi, esi
cmovns eax, esi
add ecx, 0x417f
mov esi, eax
jmp 0x1800bf0f4
mov ecx, SHTestTokenMembership
add ecx, 0x417f
jmp 0x1800bf0f4
mov rax, qword [rsp + 0xb0]
xor esi, esi
mov r14, r9
mov edx, dword [rax]
test edx, edx
jns 0x1800bf1e0
mov eax, dword [rsp + 0x90]
neg edx
movsxd rbp, edx
lea rdx, [0x180000000]
add qword [r15 + 0xe8], rbp
inc r13d
jmp 0x1800befe1
mov rax, qword [r12]
imul edx, dword [rax + 0x18]
mov eax, dword [rsp + 0x90]
movsxd rbp, edx
lea rdx, [0x180000000]
add qword [r15 + 0xe8], rbp
inc r13d
jmp 0x1800befe1
mov eax, dword [r12]
test eax, eax
je case.0x1800bf007.233
dec eax
xor edx, edx
div dword [r15]
lea rdx, [0x180000000]
inc r13d
lea ebx, [rax + 1]
mov eax, dword [rsp + 0x90]
jmp 0x1800befe1
mov eax, dword [rsp + 0x40]
jmp 0x1800bf23c
xor eax, eax
jmp 0x1800bf23c
mov eax, ebx
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret