Function at 0x18001bef0
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbx, qword [rsp + 0x20]
lea ebp, [rdx - 0xb]
mov rsi, rcx
cmp edx, ebp
jbe case.0x18001bf53.17
mov r15, qword [rsp + 0x20]
lea edi, [rdx - 0x57]
mov r14, qword [rsp + 0x20]
lea rdx, [0x180000000]
mov r13, qword [rsp + 0x20]
mov r12, qword [rsp + 0x20]
nop
cmp edi, 0x16
ja case.0x18001bf53.1
mov ecx, dword [rdx + rdi*4 + 0x1c148]
add rcx, rdx
jmp rcx
mov rax, qword [rsp + 0x90]
mov eax, dword [rax]
mov dword [rsi + 4], eax
mov eax, dword [r9]
mov dword [rsi + 8], eax
jmp case.0x18001bf53.1
mov rax, qword [rsp + 0x98]
mov eax, dword [rax]
mov dword [rsi + 0xc], eax
jmp case.0x18001bf53.1
test r14, r14
je 0x18001c0c3
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
xor r8d, r8d
xor edx, edx
mov rcx, r14
movsxd r15, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
jmp 0x18001c087
cmp r13, r15
je 0x18001bfec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str.DUtil:_skipping_duplicate_endpoint_address:__d
mov rcx, rax
mov r8, rsi
call fcn.18003b800
mov rcx, r14
mov byte [r12 + r13], 0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
cmp eax, 0xffffffff
jne 0x18001c039
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str.ReadFile_returned_incorrect_message_length:
mov rcx, rax
mov r8, rsi
call fcn.18003b800
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_clearerr]
mov rbx, r12
jmp 0x18001c087
lea rdx, [0x180040dc8]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r14, rax
jmp 0x18001c087
mov eax, dword [r8]
mov dword [rsi], eax
jmp case.0x18001bf53.1
lea rcx, [r15 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
test rax, rax
je 0x18001c100
mov r9, r14
mov r8, r15
mov edx, 1
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r13, rax
mov r9, qword [rsp + 0x88]
lea rdx, [0x180000000]
mov r8, qword [rsp + 0x80]
dec edi
lea eax, [rdi + 0x57]
cmp eax, ebp
ja 0x18001bf40
mov rax, rbx
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str.__builtin_HEXAGON_V6_vS32b_nqpred_ai_128B
mov rcx, rax
mov r8, rsi
call fcn.18003b800
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [r15 + 1]
mov rcx, rax
lea rdx, str.Tokenized_method:_Dispatch_Should_not_be_replayed
call fcn.18003b800
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, rsi
jmp 0x18001c0ae