Function at 0x1800113b0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x130
mov rax, qword [0x180042010]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov rcx, qword [0x180043fa8]
lea rdx, [0x18003c8f8]
xor esi, esi
mov dword [rcx + 0x4774788], esi
add rcx, 0x11b0ee0
call fcn.18001a8d0
mov rdi, rax
test rax, rax
je 0x18001202e
mov rbx, qword [0x180043fa8]
xor edx, edx
mov r8d, 0x18000
lea rcx, [rbx + 0x18b12e0]
call fcn.180014c80
mov r9, rdi
lea r8d, [rsi + 1]
mov edx, 0x80
lea rcx, [rbx + 0x18b12e0]
call fcn.18001fe9c
mov rcx, rdi
call fcn.18001ade8
mov r8, qword [0x180043fa8]
cmp byte [r8 + 0x18b12e0], 0x42
jne 0x18001202e
cmp byte [r8 + 0x18b12e1], 0x48
jne 0x18001202e
cmp byte [r8 + 0x18b12e2], 0x32
jne 0x18001202e
cmp byte [r8 + 0x18b12e3], 0x2c
jne 0x18001202e
movsd xmm1, qword [0x18003cd58]
mov dword [r8 + 0x4774788], 1
movzx ecx, byte [r8 + 0x18b12e4]
mov eax, ecx
and ecx, 1
and eax, 0xfffe
mov dword [r8 + 0x4774700], ecx
mov dword [r8 + 0x47747bc], eax
movzx eax, byte [r8 + 0x18b12e5]
add eax, 0x64
mov dword [r8 + 0x47746e4], eax
movzx eax, byte [r8 + 0x18b12e6]
mov dword [r8 + 0x47746e0], eax
movzx eax, byte [r8 + 0x18b12e7]
mov dword [r8 + 0x47746dc], eax
movzx eax, byte [r8 + 0x18b12e8]
mov dword [r8 + 0x47746d8], eax
movzx eax, byte [r8 + 0x18b12e9]
mov dword [r8 + 0x47746d4], eax
movzx eax, byte [r8 + 0x18b12ea]
mov dword [r8 + 0x47746d0], eax
movzx eax, word [r8 + 0x18b12eb]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008a0], xmm0
movzx eax, word [r8 + 0x18b12ed]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008a8], xmm0
movzx eax, word [r8 + 0x18b12ef]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008b0], xmm0
movzx eax, word [r8 + 0x18b12f1]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008b8], xmm0
movzx eax, word [r8 + 0x18b12f3]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008c0], xmm0
movzx eax, word [r8 + 0x18b12f5]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008c8], xmm0
movzx eax, word [r8 + 0x18b12f7]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008d0], xmm0
movzx eax, word [r8 + 0x18b12f9]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008d8], xmm0
movzx eax, word [r8 + 0x18b12fb]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008e0], xmm0
movzx eax, word [r8 + 0x18b12fd]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008e8], xmm0
movzx eax, word [r8 + 0x18b12ff]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008f0], xmm0
movzx eax, word [r8 + 0x18b1301]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc008f8], xmm0
movzx eax, word [r8 + 0x18b1303]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00960], xmm0
movzx eax, word [r8 + 0x18b1305]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00968], xmm0
movzx eax, word [r8 + 0x18b1307]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00970], xmm0
movzx eax, word [r8 + 0x18b1309]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00978], xmm0
movzx eax, word [r8 + 0x18b130b]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00980], xmm0
movzx eax, word [r8 + 0x18b130d]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00988], xmm0
movzx eax, word [r8 + 0x18b130f]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00990], xmm0
movzx eax, word [r8 + 0x18b1311]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc00998], xmm0
movzx eax, word [r8 + 0x18b1313]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc009a0], xmm0
movzx eax, word [r8 + 0x18b1315]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc009a8], xmm0
movzx eax, word [r8 + 0x18b1317]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc009b0], xmm0
movzx eax, word [r8 + 0x18b1319]
sub eax, 0x8000
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [r8 + 0xc009b8], xmm0
mov eax, dword [r8 + 0x4774700]
test eax, eax
jne 0x180011cb7
movzx eax, byte [r8 + 0x18b131c]
movzx ecx, byte [r8 + 0x18b131d]
movsd xmm2, qword [0x18003cd78]
shl ecx, 8
add ecx, eax
movzx eax, byte [r8 + 0x18b131b]
shl ecx, 8
add ecx, eax
cmp dword [r8 + 0x47747bc], 2
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x18], xmm0
movzx eax, word [r8 + 0x18b131e]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x20], xmm0
movzx eax, word [r8 + 0x18b1320]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
divsd xmm1, xmm2
movsd qword [r8 + 0x47746a8], xmm1
movzx eax, word [r8 + 0x18b1322]
mov dword [r8 + 0x50], eax
movzx eax, byte [r8 + 0x18b1324]
mov dword [r8 + 0x5c], eax
movzx ecx, byte [r8 + 0x18b1325]
lea r9d, [rax + rax]
jl 0x180011b40
movsd xmm1, qword [0x18003cc78]
xor edx, edx
movsd xmm3, qword [0x18003cce8]
mov eax, r9d
movsd xmm4, qword [0x18003cc80]
div ecx
mov dword [r8 + 0x60], ecx
mov edx, 0xa
inc eax
mov ecx, esi
sub edx, dword [r8 + 0x18ca320]
mov dword [r8 + 0x58], eax
mov eax, esi
movsx r9d, byte [r8 + 0x18b1326]
mov dword [r8 + 0x18ca31c], r9d
nop dword [rax + rax]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
subsd xmm0, xmm3
subsd xmm0, xmm4
cmp eax, r9d
je 0x180011962
inc eax
add ecx, edx
cmp eax, 5
jl 0x180011940
cvttsd2si eax, xmm0
mov dword [r8 + 0x18ca318], eax
movzx ecx, byte [r8 + 0x18b1327]
mov dword [r8 + 0x18ca338], ecx
sub ecx, 1
je 0x1800119f3
sub ecx, 1
je 0x1800119e6
sub ecx, 1
je 0x1800119ce
sub ecx, 1
je 0x1800119b6
cmp ecx, 1
je 0x18001199e
mov qword [r8 + 0x18ca30c], rsi
jmp 0x180011a05
mov dword [r8 + 0x18ca310], 2
mov dword [r8 + 0x18ca30c], 3
jmp 0x180011a05
mov dword [r8 + 0x18ca310], 2
mov dword [r8 + 0x18ca30c], 2
jmp 0x180011a05
mov dword [r8 + 0x18ca310], 2
mov dword [r8 + 0x18ca30c], 1
jmp 0x180011a05
mov dword [r8 + 0x18ca310], 2
jmp 0x1800119fe
mov dword [r8 + 0x18ca310], 1
mov dword [r8 + 0x18ca30c], esi
cmp dword [r8 + 0x18ca364], esi
jne 0x180011a33
movsx eax, byte [r8 + 0x18b1328]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [r8 + 0x78], xmm0
movzx eax, word [r8 + 0x18b1329]
mov dword [r8 + 0x18ca308], eax
movzx eax, byte [r8 + 0x18b132b]
lea ecx, [rax + rax*2]
mov dword [r8 + 0x4774750], ecx
movzx eax, word [r8 + 0x18b132c]
add eax, 0x11170
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x18ca330], xmm0
movzx eax, word [r8 + 0x18b132e]
mov dword [r8 + 0x14], eax
movzx eax, byte [r8 + 0x18b1330]
add eax, eax
mov dword [r8 + 0x10], eax
movzx eax, byte [r8 + 0x18b1332]
movzx ecx, byte [r8 + 0x18b1333]
shl ecx, 8
add ecx, eax
movzx eax, byte [r8 + 0x18b1331]
shl ecx, 8
add ecx, eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 8], xmm0
movzx eax, byte [r8 + 0x18b1335]
movzx ecx, byte [r8 + 0x18b1336]
shl ecx, 8
add ecx, eax
movzx eax, byte [r8 + 0x18b1334]
shl ecx, 8
add ecx, eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x18ca300], xmm0
movzx eax, byte [r8 + 0x18b1337]
mov dword [r8 + 0x477468c], eax
movzx eax, word [r8 + 0x18b1338]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x88], xmm0
movzx eax, byte [r8 + 0x18b133a]
mov dword [r8 + 0x18ca39c], eax
movzx eax, byte [r8 + 0x18b133b]
mov dword [r8 + 0x47746f8], eax
call fcn.18000dac0
jmp 0x180011e77
mov dword [r8 + 0x58], ecx
lea eax, [rcx - 1]
cdq
idiv r9d
mov dword [r8 + 0x60], eax
movsx eax, byte [r8 + 0x18b1326]
mov dword [r8 + 0x18ca318], eax
movzx eax, byte [r8 + 0x18b1327]
mov dword [r8 + 0x18ca310], eax
movzx eax, byte [r8 + 0x18b1328]
mov dword [r8 + 0x18ca30c], eax
cmp dword [r8 + 0x18ca364], esi
jne 0x180011baa
movsx eax, byte [r8 + 0x18b1329]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [r8 + 0x78], xmm0
movzx eax, word [r8 + 0x18b132a]
mov dword [r8 + 0x18ca308], eax
movzx eax, byte [r8 + 0x18b132c]
lea ecx, [rax + rax*2]
mov dword [r8 + 0x4774750], ecx
movzx eax, word [r8 + 0x18b132d]
add eax, 0x11170
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x18ca330], xmm0
movzx eax, word [r8 + 0x18b132f]
mov dword [r8 + 0x14], eax
movzx eax, byte [r8 + 0x18b1331]
add eax, eax
mov dword [r8 + 0x10], eax
movzx eax, byte [r8 + 0x18b1333]
movzx ecx, byte [r8 + 0x18b1334]
shl ecx, 8
add ecx, eax
movzx eax, byte [r8 + 0x18b1332]
shl ecx, 8
add ecx, eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 8], xmm0
movzx eax, byte [r8 + 0x18b1336]
movzx ecx, byte [r8 + 0x18b1337]
shl ecx, 8
add ecx, eax
movzx eax, byte [r8 + 0x18b1335]
shl ecx, 8
add ecx, eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x18ca300], xmm0
movzx eax, byte [r8 + 0x18b1338]
mov dword [r8 + 0x477468c], eax
movzx eax, word [r8 + 0x18b1339]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x88], xmm0
movzx eax, byte [r8 + 0x18b133b]
mov dword [r8 + 0x18ca39c], eax
movzx eax, byte [r8 + 0x18b133c]
mov dword [r8 + 0x47746f8], eax
call fcn.18000dac0
jmp 0x180011e77
cmp eax, 1
jne 0x180011e7e
movzx eax, word [r8 + 0x18b131b]
movsd xmm2, qword [0x18003cd78]
add eax, 0x11170
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x18ca330], xmm0
movzx eax, word [r8 + 0x18b131d]
mov dword [r8 + 0x14], eax
movzx eax, byte [r8 + 0x18b1320]
movzx ecx, byte [r8 + 0x18b1321]
shl ecx, 8
add ecx, eax
movzx eax, byte [r8 + 0x18b131f]
shl ecx, 8
add ecx, eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 8], xmm0
movzx eax, byte [r8 + 0x18b1322]
add eax, eax
mov dword [r8 + 0x10], eax
movzx eax, word [r8 + 0x18b1323]
mov dword [r8], eax
cmp eax, 0x100
ja 0x180011d54
cmp dword [r8 + 0x50], 0x100
jle 0x180011d58
mov dword [r8 + 0x50], eax
movzx eax, word [r8 + 0x18b1326]
mov dword [r8 + 0x4774750], eax
movsx eax, byte [r8 + 0x18b1328]
mov dword [r8 + 0x18ca318], eax
movzx eax, byte [r8 + 0x18b1329]
mov dword [r8 + 0x18ca310], eax
movzx eax, byte [r8 + 0x18b132a]
mov dword [r8 + 0x18ca30c], eax
cmp dword [r8 + 0x18ca364], esi
jne 0x180011dd8
movzx eax, word [r8 + 0x18b132b]
mov dword [r8 + 0x18ca308], eax
movsx eax, byte [r8 + 0x18b132d]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [r8 + 0x70], xmm0
movsx eax, byte [r8 + 0x18b132e]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsd qword [r8 + 0x78], xmm1
cmp dword [r8 + 0x47747bc], 2
movzx eax, byte [r8 + 0x18b132f]
mov dword [r8 + 0x477468c], eax
movzx eax, word [r8 + 0x18b1330]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movsd qword [r8 + 0x88], xmm0
movzx eax, word [r8 + 0x18b1332]
mov dword [r8 + 0x50], eax
movzx eax, byte [r8 + 0x18b1334]
mov dword [r8 + 0x5c], eax
movzx ecx, byte [r8 + 0x18b1335]
lea r9d, [rax + rax]
jl 0x180011e45
xor edx, edx
mov dword [r8 + 0x60], ecx
mov eax, r9d
div ecx
inc eax
mov dword [r8 + 0x58], eax
jmp 0x180011e54
lea eax, [rcx - 1]
mov dword [r8 + 0x58], ecx
cdq
idiv r9d
mov dword [r8 + 0x60], eax
movzx eax, byte [r8 + 0x18b1336]
mov dword [r8 + 0x18ca39c], eax
movzx eax, byte [r8 + 0x18b1337]
mov dword [r8 + 0x47746f8], eax
call fcn.180001820
mov r8, qword [0x180043fa8]
call fcn.18000e710
or dword [r8 + 0x11b0b44], 8
mov ebx, esi
nop dword [rax]
test byte [r8 + 0x11b0b44], 8
je 0x180011ec3
test dword [r8 + 0x11b0b48], 0x80000
jne 0x180011ec3
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, qword [0x180043fa8]
inc ebx
cmp ebx, 0xbb8
jl 0x180011e90
mov dword [r8 + 0x18ca3a0], esi
call fcn.180012060
mov rcx, qword [0x180043fa8]
mov ebx, esi
mov dword [rcx + 0x4774784], eax
or dword [rcx + 0x11b0b44], 0x80
nop dword [rax + rax]
test byte [rcx + 0x11b0b44], 0x80
je 0x180011f23
test dword [rcx + 0x11b0b48], 0x80000
jne 0x180011f23
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0xbb8
jge 0x180011f23
mov rcx, qword [0x180043fa8]
jmp 0x180011ef0
call fcn.18000c9c0
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x18ca370], 2
mov dword [rcx + 0x18ca374], esi
mov dword [rcx + 0x477477c], 1
jne 0x180011f54
call fcn.18000e3f0
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x18ca370], 1
jne 0x18001202a
cmp dword [rcx + 0x47746f8], 1
jne 0x18001202a
add rcx, 0x11b0ce0
lea rdx, [0x18003cabc]
call fcn.18001a8d0
mov rbx, rax
test rax, rax
je 0x18001202a
mov rcx, qword [0x180043fa8]
mov eax, dword [rcx + 0x4774700]
test eax, eax
jne 0x180011fdb
lea rdx, [rsp + 0x20]
call fcn.18000f520
mov rcx, qword [0x180043fa8]
lea r9, [rsp + 0x20]
lea rdx, str.PPI__d__s_n
movzx r8d, word [rcx + 0x4774700]
mov rcx, rbx
or r8d, 2
call fcn.180003320
mov rcx, rbx
call fcn.18001ade8
xor eax, eax
jmp 0x180012033
movzx r8d, ax
lea rdx, str.PPI__d_
or r8d, 2
mov rcx, rbx
call fcn.180003320
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x100
call fcn.180014c80
lea rdx, [rsp + 0x20]
call fcn.18000ca90
lea r8, [rsp + 0x20]
mov rcx, rbx
lea rdx, [0x18003c81c]
call fcn.180003320
mov rcx, rbx
call fcn.18001ade8
xor eax, eax
jmp 0x180012033
mov eax, 0xffffffff
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.180013130
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret