Function at 0x180004290
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x550
mov rax, qword [0x1800923a0]
xor rax, rsp
mov qword [rbp + 0x430], rax
movzx r13d, byte [rbp - 0x80]
lea edi, [r8 + 0x6bf]
mov qword [rbp - 0x40], rcx
mov r15, rcx
mov qword [rbp - 0x68], rdx
mov eax, r8d
mov r12, qword [rbp - 0x68]
mov r10d, 0x73
mov r14, qword [rbp - 0x68]
mov ebx, r8d
mov rsi, qword [rbp - 0x68]
mov dword [rbp - 0x78], eax
mov ecx, dword [rbp - 0x78]
mov dword [rbp - 0x60], ecx
mov ecx, dword [rbp - 0x78]
mov dword [rbp - 0x70], ecx
mov ecx, dword [rbp - 0x78]
mov qword [rbp - 0x30], r9
lea r9d, [r10 - 0x20]
mov dword [rbp - 0x50], ecx
cmp r8d, edi
jae 0x1800044db
lea r9d, [r10 - 0x2c]
lea r8d, [r10 - 0xe]
mov r10d, 0x6f50
lea r11d, [r9 + 0x30]
lea rax, str.example
nop
cmp ebx, 0x161
ja 0x1800043e5
je 0x1800043c6
mov eax, ebx
sub eax, 0x25
je 0x1800043ba
sub eax, 0xb
je 0x1800043ab
sub eax, 0x92
je 0x180004381
sub eax, 2
je 0x180004371
cmp eax, 9
jne 0x1800044b9
mov eax, 0x74
mov word [rbp + 0x12], ax
jmp 0x1800044b9
xor ecx, ecx
xor r12d, r12d
mov dword [rbp - 0x70], ecx
xor r14d, r14d
jmp 0x1800044b9
cmp dword [r15 + 0x54], 0
mov dword [rbp - 0x60], 0
je 0x180004545
cmp dword [rdx], 0
jne 0x1800044b9
mov dword [r15 + 0x58], 1
xor eax, eax
jmp 0x180004662
mov word [rbp + 0x10], r9w
mov word [rbp + 0x11], r8w
jmp 0x1800044b9
mov dword [rbp - 0x50], 0
jmp 0x1800044b9
xor esi, esi
mov qword [0x1800924d8], rax
cmp dword [r15], 2
mov r13b, 9
jne 0x180004554
mov r12, qword [rdx + 8]
jmp 0x1800044c0
mov eax, ebx
sub eax, 0x16a
je 0x1800044b0
sub eax, 0x94
je 0x180004464
sub eax, 9
je 0x18000443e
sub eax, 0x94
je 0x180004428
cmp eax, 9
jne 0x1800044b9
mov dword [rbp + 0x19], 0x776f50
mov eax, 0x72
mov word [rbp + 0x1c], r8w
mov word [rbp + 0x1d], ax
jmp 0x1800044b9
xorps xmm0, xmm0
mov qword [rbp - 0x28], r12
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x10], xmm1
jmp 0x1800044b9
mov eax, 0x79
mov word [rbp + 0x14], ax
mov eax, 0x73
mov word [rbp + 0x15], ax
mov eax, 0x74
mov word [rbp + 0x16], ax
mov eax, 0x6d65
mov word [rbp + 0x17], ax
jmp 0x1800044b9
mov edx, 1
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
test eax, eax
jne 0x1800045c1
lea rdx, [0x180087ed4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r14, rax
test rax, rax
je 0x18000457e
mov rdx, qword [rbp - 0x68]
mov r8d, 0x65
mov r10d, 0x6f50
lea r9d, [r8 - 0x1e]
lea r11d, [r8 + 0x12]
jmp 0x1800044b9
mov eax, 0x53
mov word [rbp + 0x13], ax
lea rax, str.example
add ebx, 0x9d
cmp ebx, edi
jb 0x180004330
mov eax, dword [rbp - 0x78]
mov r9d, 0x53
lea r10d, [r9 + 0x20]
mov rdi, qword [rbp - 0x68]
mov ebx, eax
lea eax, [rax + rax*8]
shl eax, 5
cmp ebx, eax
ja 0x18000465f
cmp ebx, 0x1230
ja 0x18000468c
je 0x18000465f
cmp ebx, 0x4b0
ja 0x18000462d
je 0x180004608
cmp ebx, 0x25
je 0x1800048b3
cmp ebx, 0x30
je 0x1800045ee
cmp ebx, 0xc4
jne 0x18000489b
mov dword [rbp - 0x1c], 0
mov qword [rbp - 0x18], 0
jmp 0x18000489b
mov dword [r15 + 0x58], 4
xor eax, eax
jmp 0x180004662
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.example
lea rdx, str.IMAGE_SAMPLE_D_V1_V1
call fcn.180077230
mov rdi, qword [rbp - 0x68]
jmp 0x18000471c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800924d8]
lea rdx, str.void_glEnableClientStateiEXT__s___u_
mov rcx, rax
mov qword [rsp + 0x20], rbx
mov r9, r12
call fcn.180077230
mov rdi, qword [rbp - 0x68]
jmp 0x18000471c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800924d8]
lea rdx, str.VirtualDiskVFlashCacheConfigInfo
mov rcx, rax
mov r9, r12
call fcn.180077230
mov rdi, qword [rbp - 0x68]
jmp 0x18000471c
mov word [rbp + 0x1e], r9w
mov eax, 0x75
mov dword [rbp + 0x1f], 0x746174
mov word [rbp + 0x22], ax
jmp 0x18000489b
xor r9d, r9d
mov word [rbp + 0x23], r10w
lea r8, [rbp + 0x10]
mov ecx, 0x8b
lea rdx, str.kernel32.dll
call fcn.18001eff0
mov rdi, rax
jmp 0x18000489b
cmp ebx, 0x930
je 0x18000464e
cmp ebx, 0xdb0
jne 0x18000489b
cmp byte [rbp], 1
sete byte [rbp - 0x58]
jmp 0x18000489b
lea rcx, [rbp]
call rdi
test eax, eax
jne 0x18000489b
mov byte [rbp - 0x58], al
mov eax, dword [rbp - 0x58]
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.180077c10
mov rbx, qword [rsp + 0x5a0]
add rsp, 0x550
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp ebx, 0x1324
je 0x1800047bd
cmp ebx, 0x2584
je 0x1800046f8
cmp ebx, 0x37e4
je 0x1800046db
cmp ebx, 0x4a44
je 0x1800046c1
cmp ebx, 0x5ca4
jne 0x18000489b
mov eax, dword [rbp - 0x70]
jmp 0x180004662
test r14, r14
je 0x18000489b
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor r14d, r14d
jmp 0x18000489b
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, qword [rbp - 0x18]
xor r14d, r14d
test rcx, rcx
je 0x180004723
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180004723
test rsi, rsi
jne 0x180004746
lea ecx, [rsi + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800924d8]
lea rdx, str._UnnamedClass_0xcddfe18f_216_
mov rcx, rax
call fcn.180077230
mov dword [rbp - 0x70], 1
mov ebx, 0x37e4
test rsi, rsi
je 0x18000489b
mov r8d, 0x84
mov rdx, rsi
xor ecx, ecx
call fcn.18006eed0
jmp 0x18000489b
lea r8, [0x18006ed00]
mov edx, 6
mov rcx, rsi
call fcn.180070bb0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x1800047b3
nop word [rax + rax]
mov r9, r14
lea rcx, [rbp + 0x30]
mov edx, 1
mov r8d, 0x400
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
lea r9, [rbp - 0x48]
mov r8d, 0x35
lea rdx, [rbp + 0x30]
mov qword [rbp - 0x48], rax
mov rcx, rsi
call fcn.18000caf0
test eax, eax
jne 0x1800047b3
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x180004770
mov ebx, 0x2584
jmp 0x18000489b
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rbp - 8], rax
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], 0
jne 0x1800047d3
cmp rax, 4
jbe 0x18000484c
lea r8, [rax + r12]
xor ecx, ecx
lea rdx, [0x180087828]
movzx eax, byte [r8 + rcx - 3]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x18000480a
cmp rcx, 4
jne 0x1800047f0
mov r13b, 0x2c
jmp 0x18000484c
xor ecx, ecx
lea r15, [0x18008782c]
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [r8 + rcx - 3]
inc rcx
movzx eax, byte [r15 + rcx - 1]
sub edx, eax
jne 0x180004839
cmp rcx, 4
jne 0x180004820
mov r15, qword [rbp - 0x40]
test edx, edx
movzx r13d, r13b
mov eax, 9
cmove r13d, eax
movsx eax, r13b
lea r8, [rbp - 0x28]
mov dword [rbp - 0x20], eax
lea rdx, [rbp - 0x48]
lea rax, [0x18006ecd0]
mov dword [rsp + 0x30], 0xf7
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x38]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov byte [rbp - 0x80], r13b
mov qword [rbp - 0x48], 0
call fcn.1800660a0
mov rsi, rax
mov eax, dword [rbp - 0x78]
mov r9d, 0x53
lea ecx, [rax + rax*2]
lea ebx, [rbx + rcx*8]
lea r10d, [r9 + 0x20]
jmp 0x1800044e1
mov rdx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov eax, dword [r15 + 0x94]
mov dword [rdx + 4], eax
cmp dword [rsi], 0
je 0x1800048da
cmp dword [r15 + 0x94], 0
je 0x180004940
mov dword [rsi], 0
xor r12d, r12d
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x78], r12
xor r8d, r8d
mov qword [rsp + 0x70], rdx
lea rdx, [rbp - 0x78]
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r12
lea ecx, [r9 + 0x6c]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov dword [rbp - 0x78], 1
call fcn.1800274e0
jmp 0x180004662
mov r8, r15
xor edx, edx
mov ecx, 0xe5
call fcn.18004b060
xor r12d, r12d
xor r8d, r8d
mov qword [rsp + 0x28], r12
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x67]
call fcn.18004b830
test eax, eax
jne 0x18000498c
mov r9d, 0x120
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18006b620
mov eax, r12d
jmp 0x180004662
cmp dword [r15 + 0x98], 1
mov rbx, qword [rbp - 0x68]
je 0x1800049a6
mov edi, dword [rbp - 0x50]
mov r14d, dword [rbp - 0x60]
mov dword [rsi], r12d
jmp 0x1800049e9
mov ecx, dword [r15 + 0x9c]
mov edx, dword [rbx + 8]
cmp ecx, edx
jne 0x1800049c7
mov eax, dword [r15 + 0x94]
mov edi, r12d
mov r14d, dword [rbp - 0x60]
mov dword [rbx + 4], eax
jmp 0x1800049e9
lea eax, [rdx + 4]
cmp ecx, eax
jae 0x1800049da
mov edi, dword [rbp - 0x50]
mov r14d, dword [rbp - 0x60]
mov dword [rsi], r12d
jmp 0x1800049e9
mov r14d, dword [r15 + 0x94]
mov edi, ecx
sub edi, edx
mov dword [rbx + 4], r12d
mov r9d, 0x120
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18006b620
test eax, eax
je 0x180004984
cmp dword [rsi], r12d
je 0x180004a75
mov qword [rsp + 0x28], r12
mov r9d, 0x67
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
xor ecx, ecx
call fcn.18004b830
test eax, eax
je 0x180004984
mov r8, r15
test edi, edi
jne 0x180004a4e
mov qword [rsp + 0x28], r12
mov r9, rbx
mov edx, 0x116
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.180029960
jmp 0x180004662
lea eax, [rdi - 4]
mov dword [rbp - 0x58], r14d
lea r9, [rbp - 0x78]
mov dword [rbp - 0x78], eax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xd8
mov rcx, rbx
call fcn.180076d40
jmp 0x180004662
mov rdx, qword [rbp - 0x68]
jmp 0x1800048dd