Function at 0x180025930
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x1800a9e28]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
xor r9d, r9d
mov qword [rsp + 0x40], r8
lea edi, [rdx - 0xd]
mov dword [rsp + 0x4c], edx
mov qword [rsp + 0x60], rcx
mov ebx, r9d
mov dword [rsp + 0x3c], ebx
mov eax, edx
mov dword [rsp + 0x34], edi
mov r13, rcx
cmp edx, edi
jbe 0x1800264ef
movzx r15d, word [rsp + 0x38]
lea r11, [0x180000000]
mov r12, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x34]
mov dword [rsp + 0x48], r15d
mov r10d, 0x16
add eax, 0xffffffba
movabs rdx, 0x7fffffffffffffff
mov esi, 0x2b2b
lea r14d, [r10 + 0x59]
cmp eax, 0x1a
ja case.default.0x1800259dc
mov ecx, dword [r11 + rax*4 + 0x26560]
add rcx, r11
jmp rcx
mov r15d, 0x100
mov dword [rsp + 0x48], r15d
jmp case.0x1800259dc.71
mov r8d, 3
lea rdx, [0x180083284]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor r9d, r9d
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x31], 1
jmp 0x1800264cd
mov r8d, 4
mov word [rbp + 0x50], r9w
lea rdx, [0x180083302]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor r9d, r9d
mov dword [rbp + 0x58], 0x6f0072
jmp 0x1800264cd
cmp byte [r13], 0
lea rax, str.True
lea rdx, str.False
mov rcx, r8
cmovne rdx, rax
call fcn.18007db00
xor r9d, r9d
jmp 0x1800264cd
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymInitialize]
xor r9d, r9d
movsx ecx, r15w
mov dword [rsp + 0x58], eax
xor edx, edx
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r8d, [r9 + 4]
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x70], rax
xor r9d, r9d
jmp 0x1800264cd
mov word [rbp + 0x7a], r9w
jmp case.0x1800259dc.71
mov r8d, 4
mov word [rbp + 0x5c], r9w
lea rdx, [0x18008344c]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 5
lea rdx, [0x1800834ca]
lea rcx, [rbp + 0x64]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r9d, r9d
mov word [rbp + 0x6e], r9w
jmp 0x1800264cd
mov eax, dword [0x180083572]
lea rdx, [0x180083584]
mov dword [rbp + 0x6e], eax
lea rcx, [rbp + 0x78]
movzx eax, word [0x180083576]
mov r8d, 1
mov word [rbp + 0x72], ax
mov dword [rbp + 0x74], 0x6e0069
mov word [rbp + 0x78], r9w
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r9d, r9d
jmp 0x1800264cd
cmp dword [rsp + 0x58], 0
mov ecx, r9d
movzx eax, byte [rsp + 0x31]
mov esi, r9d
mov r14, qword [rsp + 0x70]
cmovne ecx, eax
movzx eax, byte [rsp + 0x30]
test r14, r14
mov byte [rsp + 0x31], cl
cmovne esi, eax
mov byte [rsp + 0x30], sil
cmp cl, 0
je 0x180025cdd
mov r13, qword [rsp + 0x50]
mov ebx, r9d
mov edi, 0xa
cmp ebx, 9
ja case.0x180025b8d.8
mov eax, ebx
mov ecx, dword [r11 + rax*4 + 0x265cc]
add rcx, r11
jmp rcx
mov dword [rbp], 0x72437357
jmp case.0x180025b8d.8
mov r8d, 2
lea rdx, [0x1800835bf]
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xorps xmm0, xmm0
mov byte [rbp + 0x1a], 0
xor eax, eax
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x60], 0x58
mov dword [rbp - 0x10], 0x7d0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
jmp 0x180025cc0
mov byte [rbp + 0x15], 0
jmp case.0x180025b8d.8
movzx eax, word [0x1800835f8]
mov word [rbp + 8], ax
movzx eax, byte [0x1800835fa]
mov byte [rbp + 0xa], al
mov byte [rbp + 0xb], 0
jmp case.0x180025b8d.8
mov dword [rbp + 4], 0x65746165
mov byte [rbp + 8], 0
jmp case.0x180025b8d.8
mov r8d, 4
lea rdx, [0x18008361f]
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 1
mov byte [rbp + 0x14], 0
lea rdx, str.save_as_view
lea rcx, [rbp + 0x14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180025cc0
lea r8, [rbp - 0x60]
mov rcx, r13
lea rdx, [rbp]
call qword [sym.imp.dbghelp.dll_SymFromName]
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x180025cc0
mov r8d, 3
lea rdx, [0x180083648]
lea rcx, [rbp + 0x15]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x18], 0
jmp 0x180025cc0
movzx eax, word [0x1800836b9]
lea rdx, [0x1800836d1]
mov word [rbp + 0xb], ax
lea rcx, [rbp]
movzx eax, byte [0x1800836bb]
mov r8d, 1
mov byte [rbp + 0xd], al
mov byte [rbp + 0xe], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0xf], 0x46
lea r11, [0x180000000]
inc ebx
sub rdi, 1
jne 0x180025b77
mov r13, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
test sil, sil
je 0x180025d4d
movsx rax, r15w
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xf001f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov byte [rsp + 0x30], sil
mov rbx, rax
test rax, rax
jne 0x180025d25
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rsp + 0x30], bl
xor r9d, r9d
mov ebx, dword [rsp + 0x3c]
jmp 0x1800264cd
mov r8d, 9
lea r9, [rsp + 0x68]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rsp + 0x3c]
xor r9d, r9d
jmp 0x1800264cd
mov eax, dword [0x18008370a]
mov dword [rbp + 0x7a], eax
movzx eax, word [0x18008370e]
mov word [rbp + 0x7e], ax
mov word [rbp + 0x80], r9w
jmp case.0x1800259dc.71
cmp qword [r13 + 0x10], 0x35
mov qword [rsp + 0x50], 0xffffffffffffffff
jb 0x18002651e
mov r15d, 0xfe
nop dword [rax]
nop dword [rax + rax]
cmp r15d, 0x5d6
ja 0x180025f82
je 0x180025f50
cmp r15d, 0x36a
ja 0x180025eed
je 0x180025ec9
mov eax, r15d
sub eax, 0xfe
je 0x180025ec0
sub eax, 0x7c
je 0x180025e8d
sub eax, 0x7c
je 0x180025e5a
sub eax, 0x7c
je 0x180025e25
cmp eax, 0x7c
jne 0x1800264b2
lea r8d, [rax - 0x79]
lea rdx, str._cells_per_block__Size_2__2_
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x1800837bf]
mov word [rbp + 0x12], ax
movzx eax, byte [0x1800837c1]
mov byte [rbp + 0x14], al
mov word [rbp + 0x15], 0x74
jmp 0x1800264a1
movzx eax, word [0x180083931]
lea rdx, [0x180083942]
mov word [rbp + 0xa], ax
lea rcx, [rbp]
movzx eax, byte [0x180083933]
mov r8d, 2
mov byte [rbp + 0xc], al
mov byte [rbp + 0xd], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x1800264a1
mov r8d, 1
lea rdx, [0x1800838a2]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x1800838f4]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x1800264a1
mov r8d, 2
lea rdx, [0x180083825]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [0x18008387d]
mov dword [rbp + 2], eax
movzx eax, byte [0x180083881]
mov byte [rbp + 6], al
mov byte [rbp + 7], 0
jmp 0x1800264a1
mov byte [rbp], 0
jmp 0x1800264b2
mov r8d, 2
mov byte [rbp + 0x20], 0
lea rdx, str.________________ZZZZ____ZZZZ__ZZ__ZZZZZZZZZZZZZZZZZZZZZZZZZZ
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x22], si
jmp 0x1800264a1
mov eax, r15d
sub eax, 0x3e6
je 0x180025f47
sub eax, 0x7c
je 0x180025f37
sub eax, 0x7c
je 0x180025f2e
cmp eax, 0x7c
jne 0x1800264b2
lea r8d, [rax - 0x7b]
lea rdx, [0x180083926]
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x2a], 0x37
mov byte [rbp + 0x30], 0
jmp 0x1800264a1
mov byte [rbp + 0x29], 0
jmp 0x1800264b2
mov dword [rbp + 0x24], 0x252b2b2b
mov byte [rbp + 0x28], 0x32
jmp 0x1800264b2
mov byte [rbp + 0x24], 0
jmp 0x1800264b2
lea rax, [rbp + 0x30]
dec rax
nop word [rax + rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x180025f60
mov ecx, dword [str.Faile]
mov dword [rax], ecx
movzx ecx, word [0x18008388c]
mov word [rax + 4], cx
jmp 0x1800264b2
cmp r15d, 0x8be
ja 0x1800261ba
je 0x180026078
mov eax, r15d
sub eax, 0x652
je 0x18002604c
sub eax, 0x7c
je 0x180026024
sub eax, 0x7c
je 0x18002600e
sub eax, 0x7c
je 0x180025ffc
cmp eax, 0x7c
jne 0x1800264b2
lea rcx, [rbp + 0x30]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180025fc2
movzx eax, word [0x180083894]
mov word [rcx], ax
movzx eax, byte [0x180083896]
mov byte [rcx + 2], al
mov eax, 0x6c
mov dword [rbp + 0x45], 0x696620
mov word [rbp + 0x48], ax
mov dword [rbp + 0x49], 0x726574
jmp 0x1800264b2
mov dword [rbp + 0x3f], 0x636170
mov word [rbp + 0x42], 0x6b
jmp 0x1800264b2
movzx eax, word [0x180083890]
mov word [rbp + 0x3c], ax
mov word [rbp + 0x3e], 0x20
jmp 0x1800264b2
mov eax, 0x20
mov word [rbp + 0x38], r14w
mov word [rbp + 0x39], ax
movzx eax, word [0x1800837e0]
mov word [rbp + 0x3a], ax
movzx eax, byte [0x1800837e2]
mov byte [rbp + 0x3c], al
jmp 0x1800264b2
mov eax, 0x64
lea rdx, [0x1800837dc]
lea rcx, [rbp + 0x36]
mov word [rbp + 0x35], ax
lea r8d, [rax - 0x62]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, 0x74
mov word [rbp + 0x37], ax
jmp 0x1800264a1
mov esi, 0xb
mov byte [rsp + 0x38], 1
cmp qword [r13 + 0x10], rsi
mov r14, r13
mov qword [rbp - 0x70], 0xf
cmovb rsi, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0x10
mov byte [rsp + 0x78], 0
jb 0x1800260a6
mov r14, qword [r13]
cmp rsi, 0xf
ja 0x1800260ca
mov r8, rsi
mov qword [rbp - 0x78], rsi
mov rdx, r14
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rsi + 0x78], 0
jmp 0x18002615a
cmp rsi, rdx
ja 0x180026559
mov rdi, rsi
or rdi, 0xf
cmp rdi, rdx
jbe 0x1800260e4
mov rdi, rdx
jmp 0x1800260ec
cmp rdi, 0x16
cmovb rdi, r10
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180026125
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180026553
mov rcx, rax
call fcn.18007de38
test rax, rax
je 0x180026525
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180026137
test rcx, rcx
je 0x180026134
call fcn.18007de38
mov rbx, rax
jmp 0x180026137
mov rbx, r9
mov r8, rsi
mov qword [rbp - 0x78], rsi
mov rdx, r14
mov qword [rbp - 0x70], rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rsp + 0x78], rbx
mov ebx, dword [rsp + 0x3c]
or ebx, 2
lea rdx, [rsp + 0x78]
lea rcx, [0x18008c198]
mov dword [rsp + 0x3c], ebx
call fcn.1800031f0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x1800261ae
mov rcx, qword [rsp + 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800261a9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026525
call fcn.18007de74
mov r12, 0xffffffffffffffff
jmp 0x180026496
mov eax, r15d
sub eax, 0x93a
je 0x180026350
sub eax, 0x7c
je 0x180026224
sub eax, 0x7c
je 0x1800261e2
cmp eax, 0x7c
jne 0x1800264b2
mov al, 1
jmp 0x1800264f4
movzx eax, byte [rsp + 0x38]
lea r8, [rbp + 0x90]
cmp dword [rsp + 0x5c], 0
lea rdx, [rbp + 0x20]
mov ecx, r9d
cmovne ecx, eax
mov byte [rsp + 0x38], cl
lea rcx, [rbp]
call qword [sym.imp.dbghelp.dll_FindExecutableImage]
cmp byte [rsp + 0x38], 0
je 0x1800264a1
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x1800264a1
xor r8d, r8d
lea rdx, [rbp + 0x30]
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov rcx, qword [r13 + 0x10]
mov dword [rsp + 0x5c], eax
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
cmp rcx, 0x11
jb 0x18002654d
add rcx, 0xffffffffffffffef
mov esi, 0x24
cmp rcx, rsi
cmovb rsi, rcx
cmp qword [r13 + 0x18], 0x10
mov rcx, r13
jb 0x180026271
mov rcx, qword [r13]
lea r14, [rcx + 0x11]
cmp rsi, 0xf
ja 0x1800262a3
mov r8, rsi
mov qword [rbp - 0x78], rsi
mov rdx, r14
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll_memmove
or ebx, 4
mov byte [rsp + rsi + 0x78], 0
lea rcx, [0x18008c178]
jmp 0x18002644b
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x180026559
mov rdi, rsi
or rdi, 0xf
cmp rdi, rax
jbe 0x1800262c7
mov rdi, rax
jmp 0x1800262d4
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18002630d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180026553
mov rcx, rax
call fcn.18007de38
test rax, rax
je 0x180026525
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18002631e
test rcx, rcx
je 0x18002631c
call fcn.18007de38
mov rbx, rax
jmp 0x18002631e
xor ebx, ebx
mov r8, rsi
mov qword [rbp - 0x78], rsi
mov rdx, r14
mov qword [rbp - 0x70], rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
lea rcx, [0x18008c178]
mov qword [rsp + 0x78], rbx
mov ebx, dword [rsp + 0x3c]
or ebx, 4
jmp 0x18002644b
mov rax, qword [r13 + 0x10]
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
cmp rax, 0xb
jb 0x18002654d
add rax, 0xfffffffffffffff5
mov esi, 6
cmp rax, rsi
cmovb rsi, rax
cmp qword [r13 + 0x18], 0x10
mov rax, r13
jb 0x180026389
mov rax, qword [r13]
lea r14, [rax + 0xb]
cmp rsi, 0xf
ja 0x1800263b1
mov r8, rsi
mov qword [rbp - 0x78], rsi
mov rdx, r14
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rsi + 0x78], 0
jmp 0x180026441
cmp rsi, rdx
ja 0x180026559
mov rdi, rsi
or rdi, 0xf
cmp rdi, rdx
jbe 0x1800263cb
mov rdi, rdx
jmp 0x1800263d3
cmp rdi, 0x16
cmovb rdi, r10
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18002640c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180026553
mov rcx, rax
call fcn.18007de38
test rax, rax
je 0x180026525
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18002641e
test rcx, rcx
je 0x18002641b
call fcn.18007de38
mov rbx, rax
jmp 0x18002641e
mov rbx, r9
mov r8, rsi
mov qword [rbp - 0x78], rsi
mov rdx, r14
mov qword [rbp - 0x70], rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rsp + 0x78], rbx
mov ebx, dword [rsp + 0x3c]
or ebx, 1
lea rcx, [0x18008c1b8]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x3c], ebx
call fcn.1800031f0
mov rax, qword [rbp - 0x70]
cmp rax, 0x10
jb 0x180026496
mov rcx, qword [rsp + 0x78]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180026491
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026525
call fcn.18007de74
mov esi, 0x2b2b
mov r14d, 0x6f
xor r9d, r9d
movabs rdx, 0x7fffffffffffffff
lea r10d, [r9 + 0x16]
add r15d, 0x7c
cmp r15d, 0xb2a
jb 0x180025da0
mov rdi, qword [rsp + 0x50]
mov r15d, dword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
lea r11, [0x180000000]
mov ecx, dword [rsp + 0x34]
mov eax, dword [rsp + 0x4c]
dec eax
mov dword [rsp + 0x4c], eax
cmp eax, ecx
ja 0x1800259ac
movzx eax, byte [rsp + 0x38]
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.18007e380
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdi, qword [rsp + 0x50]
jmp case.0x1800259dc.71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor al, al
jmp 0x1800264f4
mov edx, 1
mov r9, r8
mov r8d, edx
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 1
sete al
jmp 0x1800264f4
call fcn.180041150
int3
call fcn.180040fd0
int3
call fcn.180041110
int3