Function at 0x14008569c
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x9f0
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x9e0], rax
xor esi, esi
mov dil, dl
mov bl, cl
lea r13, [0x14010e71c]
lea r14, [0x140000000]
lea r12d, [rsi + 3]
cmp r8b, sil
je 0x140085703
cmp word [0x14010a370], si
je 0x14008577c
cmp qword [0x140123170], rsi
je 0x14008577c
mov word [0x14010a370], si
jmp 0x14008577c
mov cl, 1
call fcn.140082a9c
movzx ecx, byte [0x14010bcee]
cmp dil, sil
movzx eax, dil
mov dword [0x14010bcac], r12d
mov qword [0x1400ff4b0], rsi
cmovne ecx, eax
mov byte [0x14010bcee], cl
mov cl, byte [0x1400fec05]
cmp cl, sil
jne 0x140085872
mov rdx, qword [0x14010ef20]
lea rcx, [0x1401055a0]
mov r8b, 1
call fcn.1400407ec
cmp byte [0x140105dca], sil
je 0x14008577c
mov ecx, dword [0x14010bca8]
mov rax, qword [0x14010ef20]
mov edx, 4
cmp dword [rax + 0x40], 1
cmova ecx, edx
mov dword [0x14010bca8], ecx
mov cl, byte [0x1400fec05]
cmp cl, sil
jne 0x140085872
cmp word [0x14010e71c], si
jne 0x140085872
mov ecx, dword [0x14010c6b4]
mov rdx, r13
mov bl, sil
call fcn.14007fe04
lea r9, [0x1400c3f4c]
lea r8, [rsp + 0x1e0]
lea rdx, str.DefFolder
lea rcx, [0x1400c4630]
mov dword [rsp + 0x20], 0x400
call fcn.14005c464
cmp word [rsp + 0x1e0], si
jne 0x140085802
cmp byte [0x140105dca], sil
je 0x140085853
lea rcx, [rsp + 0x1e0]
mov edx, 0x400
call fcn.140087598
cmp word [rsp + 0x1e0], si
je 0x140085853
lea rcx, [rsp + 0x1e0]
call fcn.140052588
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1e0]
repne scasw ax, word [rdi]
xor ecx, ecx
movzx eax, word [r13 + rcx]
add rcx, 2
mov word [rdi + rcx - 4], ax
test ax, ax
jne 0x140085822
mov rcx, rsi
movzx eax, word [rsp + rcx + 0x1e0]
add rcx, 2
mov word [rcx + r14 + 0x10e71a], ax
cmp ax, si
jne 0x140085839
cmp word [0x140108b70], si
mov r8d, dword [0x14010c6b4]
mov rcx, r13
setne dl
call fcn.14007ffe0
mov cl, byte [0x1400fec05]
mov eax, dword [0x14010bca8]
mov edx, 5
lea r12, [0x140105fe0]
cmp eax, esi
cmove eax, edx
mov dword [0x14010bca8], eax
cmp cl, sil
je 0x140085981
mov edi, dword [0x1401063f4]
cmp edi, esi
je 0x1400858da
cmp edi, 1
je 0x1400858da
lea ecx, [rdx + 0x60]
call fcn.140061d94
mov ecx, 0x1fd
mov rdi, rax
call fcn.140061d94
mov rcx, qword [0x1400ffd80]
mov r9d, 0x30
mov r8, rdi
mov rdx, rax
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140085c12
mov r8d, 0x400
mov rdx, r13
mov rcx, r12
call fcn.140012a08
lea rdx, [0x14010af78]
mov r8d, 0x400
mov rcx, r12
call fcn.1400129e8
cmp word [0x14010af78], si
je 0x140085915
lea rcx, [0x14010af78]
call fcn.140052588
lea rdx, [rsp + 0x40]
mov rcx, r12
mov byte [0x14010bcf2], sil
call fcn.140012a24
mov edx, dword [rsp + 0xc0]
mov dword [0x14010c6b4], edx
cmp edi, esi
jne 0x140085943
cmp dword [rsp + 0x148], esi
je 0x140085950
mov eax, dword [rsp + 0x178]
mov dword [0x14010bc98], eax
cmp qword [rsp + 0x160], rsi
je 0x14008597a
mov rcx, rsi
movzx eax, word [rcx + r14 + 0xc42d4]
add rcx, 2
mov word [rcx + r14 + 0x108b6e], ax
cmp ax, si
jne 0x14008595d
jmp 0x140085981
mov word [0x140108b70], si
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_IsWindowVisible]
mov dl, bl
neg eax
sbb rcx, rcx
xor r8d, r8d
and rcx, qword [0x1400ffd80]
call fcn.140085394
cmp al, sil
je 0x140085bf3
mov eax, dword [0x14012317c]
cmp eax, 1
je 0x1400859bd
cmp eax, 2
jne 0x140085a0d
mov eax, dword [0x140123188]
mov r9d, dword [0x140123184]
mov r8d, dword [0x140123180]
lea rdx, str._dd_dh_dm
lea rcx, [rsp + 0x190]
mov dword [rsp + 0x20], eax
call fcn.1400a8700
cmp dword [0x14012317c], 1
lea rdx, [rsp + 0x190]
lea rcx, [0x14010bd78]
je 0x140085a08
lea rcx, [0x14010bd9c]
call fcn.14006e578
mov rcx, qword [0x140123170]
cmp rcx, rsi
je 0x140085a20
call fcn.14007d4dc
jmp 0x140085a44
cmp byte [0x1400fec05], sil
je 0x140085a44
cmp qword [rsp + 0x160], rsi
je 0x140085a44
cmp word [0x140108b70], 0x2a
jne 0x140085a44
mov word [0x140108b70], si
mov rax, qword [0x14010ef20]
cmp dword [rax + 0x40], esi
jne 0x140085a85
mov ecx, 0x65
call fcn.140061d94
mov ecx, 0x14b
mov rdi, rax
call fcn.140061d94
mov rcx, qword [0x1400ffd80]
mov r9d, 0x30
mov r8, rdi
mov rdx, rax
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140085bf3
cmp word [0x14010a370], si
je 0x140085b13
cmp dword [0x14010ab70], esi
jne 0x140085b13
lea rdx, [0x1400c378c]
lea rcx, [0x14010a370]
xor r8d, r8d
call fcn.140031a0c
mov rdi, rax
cmp rax, rsi
je 0x140085b13
lea rcx, [rsp + 0x1e0]
mov r9, rax
mov edx, 1
mov r8d, 0x400
call fcn.1400aa184
mov dword [rsp + 0x30], 0x30c
cmp rax, rsi
jbe 0x140085b0b
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x1e0]
mov edx, eax
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
mov ecx, dword [0x14010ab70]
cmp eax, esi
mov eax, 3
cmovne ecx, eax
mov dword [0x14010ab70], ecx
mov rcx, rdi
call fcn.1400aa5c0
cmp word [0x14010b778], si
lea rcx, [0x1400ffda0]
setne byte [0x1400ffdd0]
call fcn.14006b304
cmp byte [0x14012318e], sil
je 0x140085b3d
call fcn.14008392c
jmp 0x140085b4b
mov dl, byte [0x14010d6bb]
mov rcx, r12
call fcn.140016b98
cmp qword [0x140123170], rsi
je 0x140085b60
lea rcx, [0x14010a370]
call fcn.140031400
cmp dword [0x1400fec18], 1
je 0x140085bf3
cmp byte [0x1400fec05], sil
je 0x140085b84
lea rcx, [0x1401055a0]
call fcn.1400447d4
jmp 0x140085bf3
cmp byte [0x14010bcee], sil
je 0x140085b99
lea rcx, [0x140105568]
call fcn.1400717b0
lea rcx, [rsp + 0x1e0]
mov edx, 0x400
call fcn.140087598
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x1e0]
mov rdx, r13
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x1e0]
call fcn.140073fe4
cmp eax, esi
jne 0x140085be4
mov rcx, r13
call fcn.140052af8
mov rdx, rax
jmp 0x140085be7
mov rdx, r13
lea rcx, [0x1401055a0]
call fcn.1400433a8
mov rcx, qword [0x140123170]
call fcn.1400a93c8
lea rcx, [0x1400ffda0]
mov byte [0x1400ffdd0], sil
call fcn.14006b304
mov rcx, qword [rsp + 0x9e0]
xor rcx, rsp
call fcn.1400a86e0
mov rbx, qword [rsp + 0xa30]
add rsp, 0x9f0
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret