Function at 0x1400a10b4
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
mov eax, 0x1680
call fcn.1400d8110
sub rsp, rax
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0x16c0], rbx
mov rax, qword [0x1401006f0]
xor rax, rsp
mov qword [rsp + 0x1670], rax
mov dil, dl
mov r14b, cl
xor ebx, ebx
cmp r8b, bl
je 0x1400a1124
cmp word [0x14015e3de], bx
je 0x1400a111c
cmp qword [0x140182740], rbx
je 0x1400a111c
mov word [0x14015e3de], bx
lea r12d, [rbx + 3]
jmp 0x1400a119d
mov r12d, 3
jmp 0x1400a119d
mov cl, 1
call fcn.14009e138
mov r12d, 3
mov dword [0x140161524], r12d
movzx ecx, byte [0x14016156e]
movzx eax, dil
cmp dil, bl
cmovne ecx, eax
mov byte [0x14016156e], cl
mov qword [0x140149a10], rbx
mov cl, byte [0x140148965]
cmp cl, bl
jne 0x1400a1299
xor r8d, r8d
lea rdx, [0x140167808]
lea rcx, [0x140155380]
call fcn.14004d0b4
cmp byte [0x1401563aa], bl
je 0x1400a119d
mov eax, dword [0x140161520]
lea ecx, [r12 + 1]
cmp dword [0x140167830], 1
cmova eax, ecx
mov dword [0x140161520], eax
mov cl, byte [0x140148965]
cmp cl, bl
jne 0x1400a128b
cmp word [0x140166802], bx
jne 0x1400a128b
mov r14b, bl
lea rdx, [0x140166802]
mov ecx, dword [0x140163790]
call fcn.14009ae30
mov esi, 0x800
mov dword [rsp + 0x20], esi
lea r13, [0x1400e04f4]
mov r9, r13
lea r8, [rsp + 0x270]
lea rdx, str.DefFolder
lea rcx, [0x1400e1d00]
call fcn.14006d398
cmp word [rsp + 0x270], bx
jne 0x1400a1224
cmp byte [0x1401563aa], bl
je 0x1400a1262
lea rcx, [rsp + 0x270]
call fcn.14004932c
cmp word [rsp + 0x270], bx
je 0x1400a1262
mov rdx, rsi
lea rcx, [rsp + 0x270]
call fcn.14006119c
mov r8, rsi
lea rdx, [0x140166802]
lea rcx, [rsp + 0x270]
call fcn.1400805dc
mov r8, rsi
lea rdx, [rsp + 0x270]
lea rcx, [0x140166802]
call fcn.1400805a0
cmp word [0x14015c3d8], bx
setne r8b
mov r9d, dword [0x140163790]
mov rdx, rsi
lea rcx, [0x140166802]
call fcn.14009affc
mov cl, byte [0x140148965]
jmp 0x1400a12a5
mov esi, 0x800
lea r13, [0x1400e04f4]
jmp 0x1400a12a5
mov esi, 0x800
lea r13, [0x1400e04f4]
mov eax, dword [0x140161520]
mov edx, 5
cmp eax, ebx
cmove eax, edx
mov dword [0x140161520], eax
cmp cl, bl
je 0x1400a13d9
mov edi, dword [0x1401579d4]
cmp edi, ebx
je 0x1400a1305
cmp edi, 1
je 0x1400a1305
lea ecx, [rdx + 0x60]
call fcn.140076080
mov rdi, rax
mov ecx, 0x1fd
call fcn.140076080
mov rdx, rax
mov r9d, 0x30
mov r8, rdi
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1400a1734
mov r8, rsi
lea rdx, [0x140166802]
lea rcx, [0x1401575c0]
call fcn.140014e94
mov r8, rsi
lea rdx, [0x14015f3ec]
lea rcx, [0x1401575c0]
call fcn.140014e74
cmp word [0x14015f3ec], bx
je 0x1400a1349
mov rdx, rsi
lea rcx, [0x14015f3ec]
call fcn.14006119c
mov byte [0x140161588], bl
lea rdx, [rsp + 0x40]
lea rcx, [0x1401575c0]
call fcn.140014eb0
mov edx, dword [rsp + 0xc0]
mov dword [0x140163790], edx
cmp edx, ebx
jne 0x1400a1383
cmp byte [rsp + 0xc4], bl
je 0x1400a1383
mov byte [0x14016156f], 1
jmp 0x1400a1389
mov byte [0x14016156f], bl
cmp edi, ebx
jne 0x1400a1396
cmp dword [rsp + 0x14c], ebx
je 0x1400a13a3
mov eax, dword [rsp + 0x188]
mov dword [0x140161510], eax
cmp qword [rsp + 0x168], rbx
je 0x1400a13d2
mov rcx, rbx
lea rdx, [0x140000000]
movzx eax, word [rcx + rdx + 0xe0250]
mov word [rcx + rdx + 0x15c3d8], ax
add rcx, 2
cmp ax, bx
jne 0x1400a13b7
jmp 0x1400a13d9
mov word [0x14015c3d8], bx
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb rcx, rcx
and rcx, qword [0x14014aae0]
xor r8d, r8d
mov dl, r14b
call fcn.1400a0d98
cmp al, bl
je 0x1400a1716
mov eax, dword [0x14018274c]
cmp eax, 1
je 0x1400a1415
cmp eax, 2
jne 0x1400a147c
mov eax, dword [0x140182758]
mov dword [rsp + 0x28], eax
mov eax, dword [0x140182754]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x140182750]
lea r8, str._dd_dh_dm
mov edx, 0x50
lea rcx, [rsp + 0x1b0]
call fcn.140022b7c
cmp dword [0x14018274c], 1
jne 0x1400a1468
lea rdx, [rsp + 0x1b0]
lea rcx, [0x140161690]
call fcn.140083e54
jmp 0x1400a147c
lea rdx, [rsp + 0x1b0]
lea rcx, [0x140161698]
call fcn.140083e54
mov rcx, qword [0x140182740]
cmp rcx, rbx
je 0x1400a148f
call fcn.140098060
jmp 0x1400a14b2
cmp byte [0x140148965], bl
je 0x1400a14b2
cmp qword [rsp + 0x168], rbx
je 0x1400a14b2
cmp word [0x14015c3d8], 0x2a
jne 0x1400a14b2
mov word [0x14015c3d8], bx
cmp dword [0x140167830], ebx
jne 0x1400a14ef
mov ecx, 0x65
call fcn.140076080
mov rdi, rax
mov ecx, 0x14b
call fcn.140076080
mov rdx, rax
mov r9d, 0x30
mov r8, rdi
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1400a1716
cmp word [0x14015e3de], bx
je 0x1400a1573
cmp dword [0x14015f3e0], ebx
jne 0x1400a1573
lea rdx, [0x1400e3698]
lea rcx, [0x14015e3de]
call fcn.14003c204
mov rdi, rax
cmp rax, rbx
je 0x1400a1573
mov r9, rax
mov edx, 1
mov r8d, 0x400
lea rcx, [rsp + 0x1270]
call fcn.1400c9ab0
mov dword [rsp + 0x30], 0x30c
cmp rax, rbx
jbe 0x1400a156a
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x1270]
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
mov ecx, dword [0x14015f3e0]
cmp eax, ebx
cmovne ecx, r12d
mov dword [0x14015f3e0], ecx
mov rcx, rdi
call fcn.1400c8d40
nop
lea rcx, [rsp + 0x1b0]
call fcn.140080d68
nop
lea rcx, [0x140167808]
call fcn.140080b50
lea rcx, [0x140167808]
call fcn.140080e80
cmp rax, rbx
je 0x1400a15cf
mov r9, rsi
lea r8, [rsp + 0x270]
mov rdx, rax
lea rcx, [0x140155380]
call fcn.14004bca8
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x1b0]
call fcn.140080bc0
jmp 0x1400a158d
lea rdx, [rsp + 0x1b0]
lea rcx, [0x140167808]
call fcn.14002d3ec
nop
mov rcx, qword [rsp + 0x1b0]
cmp rcx, rbx
je 0x1400a15f7
call fcn.1400c7040
nop
jmp 0x1400a1607
cmp byte [0x1401657a5], bl
jne 0x1400a162c
mov r9, rsi
lea r8, [0x140166802]
lea rdx, [0x140166802]
lea rcx, [0x140155380]
call fcn.14004bca8
mov al, byte [0x1401604ec]
mov byte [0x14014ab30], al
lea rcx, [0x14014ab00]
call fcn.14007ff54
cmp byte [0x1401657c0], bl
je 0x1400a1653
call fcn.14009ef34
jmp 0x1400a1665
mov dl, byte [0x1401657a3]
lea rcx, [0x1401575c0]
call fcn.140019454
cmp qword [0x140182740], rbx
je 0x1400a167a
lea rcx, [0x14015e3de]
call fcn.14003be94
cmp dword [0x140148978], 1
je 0x1400a1716
cmp byte [0x140148965], bl
je 0x1400a169d
lea rcx, [0x140155380]
call fcn.140051918
jmp 0x1400a1716
cmp byte [0x14016156e], bl
je 0x1400a16b1
lea rcx, [0x140155358]
call fcn.140087064
mov r8, rsi
lea rdx, [rsp + 0x270]
lea rcx, [0x140155380]
call fcn.14004bc74
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x270]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x140166802]
lea rcx, [rsp + 0x270]
call fcn.1400883f8
cmp eax, ebx
jne 0x1400a1707
lea rcx, [0x140166802]
call fcn.1400615e8
mov r13, rax
mov rdx, r13
lea rcx, [0x140155380]
call fcn.14004fa64
mov rcx, qword [0x140182740]
call fcn.1400c72ec
mov byte [0x14014ab30], bl
lea rcx, [0x14014ab00]
call fcn.14007ff54
mov rcx, qword [rsp + 0x1670]
xor rcx, rsp
call fcn.1400c6350
mov rbx, qword [rsp + 0x16c0]
add rsp, 0x1680
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret