Function at 0x180013880
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov eax, r8d
mov r12, r9
mov r8, rdx
mov r13, rcx
mov ebx, eax
lea edi, [rax + 0x6d8]
cmp eax, edi
jae 0x180013a49
mov rsi, qword [rsp + 0x30]
lea rbp, [0x180000000]
mov edx, 0x6573
lea r15, [0x18002a780]
mov r9d, 0x646e
movabs r14, 0x3200730077
nop word [rax + rax]
cmp ebx, 0x17c
ja 0x1800139b0
je 0x180013978
lea eax, [rbx - 0x58]
cmp eax, 0xbf
ja case.0x18001391e.88
movzx eax, byte [rax + rbp + 0x13df4]
mov ecx, dword [rbp + rax*4 + 0x13ddc]
add rcx, rbp
jmp rcx
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r8, qword [rsp + 0x148]
mov edx, 0x6573
mov rsi, rax
mov r9d, 0x646e
jmp case.0x18001391e.88
mov edx, 0x32
mov rcx, r13
call fcn.180015390
mov r8, qword [rsp + 0x148]
mov edx, 0x6573
mov r9d, 0x646e
jmp case.0x18001391e.88
mov dword [rsp + 0x30], 0x646e6573
jmp case.0x18001391e.88
movzx eax, word [r12]
lea rdx, [rsp + 0x38]
mov r9d, 0xf7
mov word [rsp + 0x38], ax
xor r8d, r8d
mov rcx, r13
call fcn.18001dbb0
mov r8, qword [rsp + 0x148]
mov edx, 0x6573
mov r9d, 0x646e
jmp case.0x18001391e.88
mov eax, ebx
sub eax, 0x1a9
je 0x180013a2a
sub eax, 0x65
je case.0x18001391e.88
sub eax, 0x2d
je 0x1800139f9
sub eax, 0x65
je 0x1800139f3
cmp eax, 0x2d
jne case.0x18001391e.88
lea r8d, [rax - 0x23]
lea rdx, [rsp + 0x4a]
lea ecx, [rax - 0x2b]
call fcn.180047890
mov r8, qword [rsp + 0x148]
mov edx, 0x6573
mov r9d, 0x646e
jmp case.0x18001391e.88
mov qword [r13], r15
jmp case.0x18001391e.88
mov r8d, 0xa
mov dword [rsp + 0x46], 0x5f
lea rdx, [rsp + 0x48]
lea ecx, [r8 - 7]
call fcn.180047890
mov r8, qword [rsp + 0x148]
mov edx, 0x6573
mov r9d, 0x646e
jmp case.0x18001391e.88
mov byte [rsp + 0x34], 0
mov qword [rsp + 0x40], r14
add ebx, 0x92
cmp ebx, edi
jb 0x1800138f0
mov eax, dword [rsp + 0x150]
mov ebx, dword [rsp + 0x150]
mov ebp, eax
mov r15, qword [rsp + 0x30]
mov esi, dword [rsp + 0x150]
mov r14, qword [rsp + 0x30]
imul eax, eax, 0x534
cmp ebp, eax
ja 0x180013c9a
cmp ebp, 0x4f45
ja 0x180013c62
je 0x180013c9a
cmp ebp, 0x2680
ja 0x180013be0
je 0x180013dbb
cmp ebp, 0x58
je 0x180013dbb
cmp ebp, 0x5b
je 0x180013bb3
cmp ebp, 0x117
jne 0x180013dbb
lea rcx, [rsp + 0x40]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180013ac0
mov eax, dword [0x180061fec]
mov r8, qword [rsp + 0x148]
mov dword [rcx], eax
imul eax, dword [rsp + 0x150], 0x6f
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
lea rbp, [0x18007de40]
nop dword [rax + rax]
mov edi, 0x84
mov eax, edi
sub eax, 0x84
je 0x180013b62
cmp eax, 1
jne 0x180013b88
cmp dword [0x18007de40], 0
jbe 0x180013b88
mov ebx, 0x3f
mov eax, ebx
sub eax, 0x3f
je 0x180013b41
cmp eax, 1
jne 0x180013b59
mov rcx, qword [0x18007e690]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x180013b59
mov eax, dword [0x18007de40]
mov byte [rax + rbp + 4], 0
mov rcx, qword [0x18007e688]
call qword [sym.imp.KERNEL32.dll_SetEvent]
inc ebx
cmp ebx, 0x41
jb 0x180013b21
jmp 0x180013b88
mov r9, rbp
mov qword [rsp + 0x20], 0
mov r8d, 0x800
lea rdx, [0x18007de44]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180013b9b
inc edi
cmp edi, 0x86
jb 0x180013b05
jmp 0x180013b00
mov ebx, dword [rsp + 0x150]
mov r15, qword [rsp + 0x30]
mov esi, dword [rsp + 0x150]
mov r14, qword [rsp + 0x30]
imul eax, dword [rsp + 0x150], 0x6f
mov ebp, 0x5b
mov r8, qword [rsp + 0x148]
mov dword [0x18007de40], 0
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
cmp ebp, 0x27d0
je 0x180013c35
cmp ebp, 0x4ca8
jne 0x180013dbb
lea rcx, [r13 + 0xa]
cmp rcx, r8
je 0x180013dbb
cmp qword [r8 + 0x18], 0x10
mov rdx, r8
jb 0x180013c0e
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.180031070
imul eax, dword [rsp + 0x150], 0x6f
mov r8, qword [rsp + 0x148]
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
mov rcx, qword [0x18007e688]
call qword [sym.imp.KERNEL32.dll_SetEvent]
imul eax, dword [rsp + 0x150], 0x6f
xor ebx, ebx
mov r8, qword [rsp + 0x148]
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
cmp ebp, 0x7a10
je 0x180013da5
cmp ebp, 0xf309
je 0x180013d50
cmp ebp, 0x16c02
je 0x180013d2f
cmp ebp, 0x1e4fb
je 0x180013cb7
cmp ebp, 0x25df4
jne 0x180013dbb
mov eax, ebx
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ebx, ebx
cmp dword [r12], ebx
jbe 0x180013dbb
mov edi, 0x11f
cmp edi, 0x11f
je 0x180013ce3
cmp edi, 0x7d9
jne 0x180013cfb
test esi, esi
jg 0x180013cfb
mov eax, 0xffffffff
jmp 0x180013c9c
mov r8d, dword [r12]
xor r9d, r9d
movsxd rcx, dword [r13]
sub r8d, ebx
mov edx, ebx
add rdx, r14
call r15
mov esi, eax
add edi, 0x6ba
cmp edi, 0xd74
jbe 0x180013cc8
add ebx, esi
cmp ebx, dword [r12]
jb 0x180013cc3
imul eax, dword [rsp + 0x150], 0x6f
mov r8, qword [rsp + 0x148]
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
imul eax, dword [rsp + 0x150], 0x6f
mov r14, r8
mov r8, qword [rsp + 0x148]
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
mov r8d, 1
lea rdx, [0x180061b8c]
lea rcx, [rsp + 0x40]
call fcn.1800470dc
lea r9, [rsp + 0x40]
mov r8d, 0xf5
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xa8]
call fcn.180024590
mov r8, qword [rsp + 0x148]
mov r15, qword [rax]
imul eax, dword [rsp + 0x150], 0x6f
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63
mov eax, dword [0x180061b84]
mov dword [rsp + 0x4e], eax
movzx eax, word [0x180061b88]
mov word [rsp + 0x52], ax
imul eax, dword [rsp + 0x150], 0x6f
mov r8, qword [rsp + 0x148]
add ebp, eax
mov eax, dword [rsp + 0x150]
jmp 0x180013a63