Function at 0x18006d470
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r14d, dword [rsp + 0x98]
mov r13, r8
mov ebx, dword [rsp + 0x98]
mov r10, r9
mov edi, dword [rsp + 0x98]
mov eax, edx
mov esi, dword [rsp + 0x40]
mov r8d, edx
mov rbp, qword [rsp + 0xb8]
mov dword [rsp + 0x48], edx
mov r12, qword [rsp + 0x48]
mov r15, qword [rsp + 0x48]
nop dword [rax]
add eax, 0x7bc
cmp r8d, eax
jae 0x18006d5eb
cmp r8d, 0x3b2
ja 0x18006d5b2
je 0x18006d58a
cmp r8d, 0x1c3
ja 0x18006d52c
je 0x18006d524
mov eax, r8d
sub eax, 2
je 0x18006d7bb
sub eax, 0xa5
je 0x18006d5eb
cmp eax, 0x77
jne 0x18006d85e
xor r14d, r14d
jmp 0x18006d85e
mov r12, rcx
jmp 0x18006d85e
cmp r8d, 0x268
jne 0x18006d85e
mov rax, qword [rsp + 0xb0]
mov edx, dword [rax]
cmp edx, 1
jne 0x18006d55e
mov rax, qword [rbp]
mov edx, dword [rax + 0x18]
movsxd r15, edx
add qword [r13 + 0xf0], r15
jmp 0x18006d85e
test edx, edx
jns 0x18006d573
neg edx
movsxd r15, edx
add qword [r13 + 0xf0], r15
jmp 0x18006d85e
mov rax, qword [rbp]
imul edx, dword [rax + 0x18]
movsxd r15, edx
add qword [r13 + 0xf0], r15
jmp 0x18006d85e
mov rax, qword [rbp]
mov eax, dword [rax + 0x80]
test eax, eax
je 0x18006d5a8
mov ecx, r12d
or ecx, r15d
dec eax
test eax, ecx
jne 0x18006d85e
mov edi, 0x22
jmp 0x18006d7ed
cmp r8d, 0x457
je 0x18006d654
cmp r8d, 0x4fc
je 0x18006d5eb
cmp r8d, 0x5a1
je 0x18006d77b
cmp r8d, 0x646
je 0x18006d605
cmp r8d, 0x6eb
jne 0x18006d85e
mov eax, ebx
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [rbp]
mov rax, qword [rcx + 0x28]
test rax, rax
je 0x18006d647
mov rdx, qword [rsp + 0xb0]
mov r9, r12
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r15
mov r8d, dword [rdx]
mov edx, dword [r10]
call rax
mov r8d, dword [rsp + 0x48]
mov edx, eax
mov dword [rsp + 0x40], eax
mov ebx, eax
mov esi, eax
jmp 0x18006d85e
mov edx, dword [rsp + 0x40]
mov ebx, edx
mov esi, edx
jmp 0x18006d85e
test r15, r15
je 0x18006d7bb
nop dword [rax]
mov edx, dword [rsp + 0x40]
mov ebp, 0x4c
nop dword [rax]
mov eax, ebp
mov esi, edx
sub eax, 0x4c
je 0x18006d71b
sub eax, 1
je 0x18006d713
sub eax, 1
je 0x18006d6df
sub eax, 1
je 0x18006d6a7
cmp eax, 1
jne 0x18006d796
movsxd rax, r14d
sub r15, rax
add r12, rax
jmp 0x18006d796
mov rsi, qword [rsp + 0xb8]
mov rdx, qword [r13 + 0xd8]
mov ecx, dword [r13 + 4]
mov rax, qword [rsi]
mov r8d, dword [rax + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov rcx, qword [rsi]
mov r14d, eax
cmp eax, dword [rcx + 0x18]
jne 0x18006d7c2
mov edx, dword [rsp + 0x40]
jmp 0x18006d796
mov rax, qword [rsp + 0xb8]
mov rdx, r12
mov rax, qword [rax]
movsxd rcx, dword [rax + 0x18]
cmp r15, rcx
cmovbe ecx, r14d
movsxd r14, ecx
mov rcx, qword [r13 + 0xd8]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [rsp + 0x40]
jmp 0x18006d796
mov r14d, r15d
jmp 0x18006d796
mov rax, qword [rsp + 0xb8]
mov rax, qword [rax]
movsxd r8, dword [rax + 0x18]
cmp r15, r8
jae 0x18006d796
mov rdx, qword [r13 + 0xd8]
mov ecx, dword [r13 + 4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
mov r14d, eax
mov edx, esi
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x40], edx
mov rax, qword [rax]
cmp r14d, dword [rax + 0x18]
je 0x18006d796
mov ecx, 0x78
mov dword [rsp + 0x40], edx
mov eax, ecx
sub eax, 0x78
je 0x18006d786
cmp eax, 1
jne 0x18006d78f
mov esi, dword [rsp + 0x40]
mov rbp, qword [rsp + 0xb8]
mov r8d, 0x5a1
jmp 0x18006d85e
mov edx, 0x7f2bb724
mov dword [rsp + 0x40], edx
inc ecx
cmp ecx, 0x7a
jb 0x18006d763
inc ebp
cmp ebp, 0x51
jb 0x18006d670
test r15, r15
jne 0x18006d660
mov esi, dword [rsp + 0x40]
mov rbp, qword [rsp + 0xb8]
mov r8d, dword [rsp + 0x48]
xor ebx, ebx
jmp 0x18006d85e
mov esi, dword [rsp + 0x40]
mov rbp, qword [rsp + 0xb8]
mov r8d, 0x3b2
mov eax, 0xbc
mov dword [rsp + 0x48], r8d
inc eax
cmp eax, 0xbf
jb 0x18006d832
add edi, 0x1034
cmp edi, 0x309c
ja 0x18006d859
cmp edi, 0x22
je 0x18006d813
cmp edi, 0x1056
je 0x18006d80f
cmp edi, 0x208a
jne 0x18006d7e7
jmp 0x18006d5eb
xor ebx, ebx
jmp 0x18006d7e7
mov ecx, dword [r13 + 4]
mov r8d, r15d
mov rdx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
movsxd r14, eax
cmp r14, r15
je 0x18006d7e7
mov eax, 0xbc
jmp 0x18006d7e0
mov ecx, eax
sub ecx, 0xbc
je 0x18006d7ce
sub ecx, 1
je 0x18006d84e
cmp ecx, 1
jne 0x18006d7de
mov r8d, 0x5a1
jmp 0x18006d85e
mov esi, 0x7f2bb725
mov dword [rsp + 0x40], esi
jmp 0x18006d7de
mov r8d, dword [rsp + 0x48]
mov eax, dword [rsp + 0x98]
add r8d, 0xa5
mov rcx, qword [rsp + 0x90]
mov r10, qword [rsp + 0xa8]
mov dword [rsp + 0x48], r8d
jmp 0x18006d4d0