Function at 0x18002eb30
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x120
mov rax, qword [0x1800a2078]
xor rax, rsp
mov qword [rbp], rax
lea eax, [rcx + 0xc]
mov qword [rbp - 0x70], r8
xor r12d, r12d
mov qword [rbp - 0x58], rdx
mov dword [rbp - 0x68], ecx
mov r9, r8
mov dword [rbp - 0x78], ecx
mov rdi, rdx
mov r15d, ecx
mov ebx, ecx
cmp ecx, eax
jae 0x18002f0af
movsxd rdx, dword [rbp - 0x80]
lea r14, [0x180000000]
mov rsi, rdx
mov qword [rbp - 0x50], rdx
nop dword [rax + rax]
lea eax, [rbx - 0x30]
cmp eax, 0xb
ja case.default.0x18002ebb7
mov ecx, dword [r14 + rax*4 + 0x2f348]
add rcx, r14
jmp rcx
xor r8d, r8d
xor edx, edx
mov ecx, 0xb7
call fcn.18005e360
xor r8d, r8d
mov edx, 0xf1
xor ecx, ecx
call fcn.180045400
jmp 0x18002f092
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
mov ecx, 0x119
call fcn.18005b540
mov edx, 0x11e
xor ecx, ecx
call fcn.18005fa90
jmp 0x18002f092
movzx eax, byte [rbp - 0x21]
movzx ecx, byte [rbp - 0x22]
movzx r10d, byte [rbp - 0x23]
movzx r11d, byte [rbp - 0x24]
movzx ebx, byte [rbp - 0x25]
movzx edi, byte [rbp - 0x26]
movzx esi, byte [rbp - 0x27]
movzx r14d, byte [rbp - 0x28]
movzx r15d, byte [rbp - 0x29]
movzx r12d, byte [rbp - 0x2a]
movzx r13d, byte [rbp - 0x2b]
movzx r9d, byte [rbp - 0x2e]
movzx r8d, byte [rbp - 0x2f]
movzx edx, byte [rbp - 0x30]
mov dword [rsp + 0x80], eax
movzx eax, byte [rbp - 0x2c]
mov dword [rsp + 0x78], ecx
lea rcx, str.ChatRoomManager::ReceivedChatMessageWasRead:_Received_invalid_receiver_endpoint
mov dword [rsp + 0x70], r10d
mov dword [rsp + 0x68], r11d
mov dword [rsp + 0x60], ebx
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
movzx eax, byte [rbp - 0x2d]
mov dword [rsp + 0x20], eax
call fcn.180083ee0
xor r12d, r12d
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0x67
xor ecx, ecx
call fcn.180066580
mov ebx, dword [rbp - 0x78]
lea r14, [0x180000000]
mov rdi, qword [rbp - 0x58]
mov r15d, dword [rbp - 0x68]
jmp 0x18002f092
mov qword [rsp + 0x28], r12
lea r8, [rbp - 0x30]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0x83
call fcn.180052690
mov edx, dword [0x18009d17c]
lea rcx, str.R_SPARC_JMP_SLOT
call fcn.180083ee0
jmp 0x18002f092
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x55]
call fcn.180033980
jmp 0x18002f092
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xc4
call fcn.18005ee40
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 5]
call fcn.18005e840
jmp 0x18002f092
xorps xmm1, xmm1
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm1
jmp case.default.0x18002ebb7
xor r8d, r8d
mov dword [rbp - 0x78], 3
lea rdx, [rbp - 0x78]
mov ecx, 0x95
call fcn.180061c00
xor edx, edx
mov qword [0x1800a2418], rax
xor r8d, r8d
lea ecx, [rdx + 0x60]
call fcn.1800563e0
test al, 1
je 0x18002f092
lea rdx, [rbp - 0x20]
mov ecx, 0xab
call fcn.18001eb00
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x60]
call fcn.1800563e0
mov rdx, qword [0x1800a2418]
lea r9, [rbp - 0x20]
test al, 1
mov r8d, 0xec
cmove r9, r12
xor ecx, ecx
call fcn.18005ee40
test eax, eax
jne 0x18002f092
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r9d, r9d
lea r8, [0x180087b0c]
mov rcx, rax
lea rdx, str.Size_tag:
lea rax, str._ZLjava_lang_invoke_MethodHandle_Ljava_lang_invoke_MethodHandle__Ljava_lang_invoke_MethodHandle_
mov qword [rsp + 0x20], rax
call fcn.180083e40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov edx, 0x86
xor ecx, ecx
call fcn.18005ad80
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x111
call fcn.180072cb0
jmp 0x18002f092
mov eax, dword [rdi]
cmp eax, 1
jle 0x18002ee4d
mov rcx, qword [r9 + 8]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov edx, dword [rbp - 0x80]
mov r9, qword [rbp - 0x70]
mov dword [0x18009d17c], eax
mov eax, dword [rdi]
cmp eax, 2
jle 0x18002ef3b
mov r14d, 0x57
nop dword [rax]
mov eax, r14d
sub eax, 0x57
je 0x18002ef0a
sub eax, 1
je 0x18002ef00
sub eax, 1
je 0x18002ee97
cmp eax, 1
jne 0x18002ef13
mov edx, dword [rbp - 0x80]
mov ebx, 0x31
mov dword [rbp - 0x78], ebx
lea r14d, [rbx + 0x29]
jmp 0x18002ef16
cmp rsi, 0x10
jge 0x18002ef13
mov rdi, qword [rbp - 0x48]
cmp byte [rdi], 0
je 0x18002ef13
cmp byte [rdi + 1], 0
je 0x18002ef13
mov ebx, 0x57
mov eax, ebx
sub eax, 0x56
je 0x18002eee6
cmp eax, 1
jne 0x18002eeee
lea r8, [rbp - 0x64]
mov rcx, rdi
lea rdx, str._2hx
call fcn.180084000
test eax, eax
je 0x18002ee83
movzx eax, byte [rbp - 0x64]
add rdi, 2
mov byte [rbp + rsi - 0x30], al
mov qword [rbp - 0x48], rdi
jmp 0x18002eeee
inc edx
mov dword [rbp - 0x80], edx
inc rsi
mov edx, dword [rbp - 0x80]
dec ebx
cmp ebx, 0x55
ja 0x18002eeb1
cmp rsi, 0x10
jge 0x18002ef13
jmp 0x18002eea1
mov rax, qword [r9 + 0x10]
mov qword [rbp - 0x48], rax
jmp 0x18002ef13
mov edx, r12d
mov rsi, r12
mov dword [rbp - 0x80], edx
mov ebx, dword [rbp - 0x78]
mov r9, qword [rbp - 0x70]
inc r14d
cmp r14d, 0x5b
jb 0x18002ee60
mov rdi, qword [rbp - 0x58]
lea r14, [0x180000000]
mov qword [rbp - 0x50], rsi
jmp case.default.0x18002ebb7
mov esi, PathMakeUniqueName
mov eax, esi
sub eax, 0x2d
je 0x18002f041
sub eax, 1
je 0x18002ef68
cmp eax, 1
jne 0x18002f059
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x18002f059
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x18002ef90
mov edx, reloc.SHELL32.dll_ILFindLastID
lea rcx, [rbp - 0x30]
mov r9, rbx
lea r8d, [rdx - 0xf]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test rax, rax
jne 0x18002f059
mov ebx, r12d
mov edi, 6
nop dword [rax + rax]
cmp ebx, 0x41
ja case.0x18002efbf.6
mov eax, ebx
movzx eax, byte [r14 + rax + 0x2f394]
mov ecx, dword [r14 + rax*4 + 0x2f378]
add rcx, r14
jmp rcx
mov rax, qword [rbp - 0x60]
shr rax, 0x30
xor byte [rbp - 0x2a], al
mov rax, qword [rbp - 0x60]
shr rax, 0x38
xor byte [rbp - 0x29], al
jmp case.0x18002efbf.6
mov rax, qword [rbp - 0x60]
shr rax, 0x20
xor byte [rbp - 0x2c], al
mov rax, qword [rbp - 0x60]
shr rax, 0x28
xor byte [rbp - 0x2b], al
jmp case.0x18002efbf.6
mov rax, qword [rbp - 0x60]
xor byte [rbp - 0x30], al
jmp case.0x18002efbf.6
mov rax, qword [rbp - 0x60]
shr rax, 0x18
xor byte [rbp - 0x2d], al
jmp case.0x18002efbf.6
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
imul rax, rax, 0x539
mov qword [rbp - 0x60], rax
jmp case.0x18002efbf.6
mov rax, qword [rbp - 0x60]
shr rax, 8
xor byte [rbp - 0x2f], al
mov rax, qword [rbp - 0x60]
shr rax, 0x10
xor byte [rbp - 0x2e], al
add ebx, 0xd
sub rdi, 1
jne 0x18002efa0
jmp 0x18002f059
lea rdx, [0x18009241c]
lea rcx, str.VGObjectType
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x40], rax
inc esi
cmp esi, 0x30
jb 0x18002ef40
mov ebx, dword [rbp - 0x78]
mov rdi, qword [rbp - 0x58]
jmp 0x18002f092
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x49]
call fcn.18002d030
jmp 0x18002f092
mov ecx, 0x5e
call fcn.1800609d0
xor edx, edx
mov ecx, 0x82
call fcn.18006a520
mov r9, qword [rbp - 0x70]
mov edx, dword [rbp - 0x80]
inc ebx
lea eax, [r15 + 0xc]
mov dword [rbp - 0x78], ebx
cmp ebx, eax
jae 0x18002f0af
mov rsi, qword [rbp - 0x50]
jmp 0x18002eba0
mov ebx, dword [rbp - 0x68]
mov edi, r15d
imul eax, r15d, 0x42c
mov dword [rbp - 0x78], r15d
mov dword [rbp - 0x80], eax
cmp r15d, eax
ja 0x18002f222
nop dword [rax]
cmp edi, 0x6450
ja 0x18002f1f2
je 0x18002f1db
cmp edi, 0x3240
ja 0x18002f175
je 0x18002f154
cmp edi, 0x30
je 0x18002f13d
cmp edi, 0x10e0
je 0x18002f12c
cmp edi, 0x2190
jne 0x18002f32d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xd9
call fcn.18005d930
mov edx, 0x8d
xor ecx, ecx
call fcn.180053900
jmp 0x18002f32d
xor edx, edx
mov ecx, 0x93
call fcn.180060400
jmp 0x18002f32d
xor r9d, r9d
xor r8d, r8d
mov edx, ILFree
xor ecx, ecx
call fcn.18000fe10
jmp 0x18002f32d
mov qword [rsp + 0x28], r12
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0xd3
call fcn.180066100
jmp 0x18002f32d
cmp edi, 0x42f0
je 0x18002f1aa
cmp edi, 0x53a0
jne 0x18002f32d
mov ecx, 0x111
call fcn.180060810
mov r9d, 0xe2
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18006ff00
jmp 0x18002f32d
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x2f]
call fcn.180074170
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x12]
call fcn.18005d5b0
jmp 0x18002f32d
mov r9d, 0x11f
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18006a190
jmp 0x18002f32d
cmp edi, 0x7500
je 0x18002f315
cmp edi, 0x85b0
je 0x18002f27b
cmp edi, 0x9660
je 0x18002f265
cmp edi, 0xa710
je 0x18002f251
cmp edi, 0xb7c0
jne 0x18002f32d
mov eax, ebx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.180084890
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.Type_3___User_Mode
call fcn.180083ee0
mov ebx, r12d
jmp 0x18002f32d
mov rdx, qword [0x1800a2418]
mov ecx, 0x4a
call fcn.180062640
jmp 0x18002f32d
movzx eax, byte [rbp - 0x11]
movzx ecx, byte [rbp - 0x12]
movzx r10d, byte [rbp - 0x13]
movzx r11d, byte [rbp - 0x14]
movzx edi, byte [rbp - 0x15]
movzx esi, byte [rbp - 0x16]
movzx r14d, byte [rbp - 0x17]
movzx r15d, byte [rbp - 0x18]
movzx r12d, byte [rbp - 0x19]
movzx r13d, byte [rbp - 0x1a]
movzx r9d, byte [rbp - 0x1e]
movzx r8d, byte [rbp - 0x1f]
movzx edx, byte [rbp - 0x20]
mov dword [rsp + 0x80], eax
movzx eax, byte [rbp - 0x1b]
mov dword [rsp + 0x78], ecx
lea rcx, str._tbrw__u::write_to_legacy_temp_file_events_stream_Begin_legacy_EventRegSetExs
mov dword [rsp + 0x70], r10d
mov dword [rsp + 0x68], r11d
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], eax
movzx eax, byte [rbp - 0x1c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbp - 0x1d]
mov dword [rsp + 0x20], eax
call fcn.180083ee0
mov edi, dword [rbp - 0x78]
mov r15d, dword [rbp - 0x68]
jmp 0x18002f32d
xor edx, edx
lea ecx, [rdx + 0x58]
call fcn.1800534c0
lea rdx, [rbp - 0x20]
mov ecx, 0xab
call fcn.18001eb00
imul eax, r15d, 0x59
add edi, eax
mov dword [rbp - 0x78], edi
cmp edi, dword [rbp - 0x80]
ja 0x18002f222
xor r12d, r12d
jmp 0x18002f0d0