Function at 0x18003e4c0
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], r9
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf0
mov r15, qword [rsp + 0x50]
lea r14d, [rdx + 0x231]
movaps xmmword [rax - 0x48], xmm6
xor esi, esi
movaps xmmword [rax - 0x58], xmm7
mov r10, r9
movaps xmmword [rax - 0x78], xmm10
mov r13, r8
movss xmm10, dword [rsp + 0x138]
mov r9d, edx
movaps xmmword [rax - 0x88], xmm11
mov r11, rcx
movss xmm11, dword [rsp + 0x138]
mov edi, edx
movaps xmmword [rax - 0x98], xmm12
movss xmm12, dword [rsp + 0x138]
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [rsp + 0x50]
movss xmm13, dword [rsp + 0x138]
movaps xmmword [rsp + 0x70], xmm14
xorps xmm14, xmm14
movaps xmmword [rsp + 0x60], xmm15
movss xmm15, dword [rsp + 0x138]
cmp edx, r14d
jae 0x18003e8f6
mov r12, qword [rsp + 0x50]
movss xmm7, dword [0x180050a98]
movsd xmm6, qword [0x180050ad0]
mov ebp, dword [rsp + 0x138]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
nop word [rax + rax]
cmp edi, 0xd4
ja 0x18003e6cf
je 0x18003e67a
mov eax, edi
sub eax, 0x15
je 0x18003e659
sub eax, 0x23
je 0x18003e637
sub eax, 0x36
je 0x18003e62e
sub eax, 0x33
je 0x18003e619
cmp eax, 0xc
jne 0x18003e831
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor edx, edx
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
mov r10, qword [rsp + 0x148]
mov r15, rax
mov r11, qword [rsp + 0x130]
mov qword [rsp + 0x40], rsi
jmp 0x18003e831
movss xmm11, dword [r13]
movss xmm12, dword [r10]
movss xmm10, dword [r11]
jmp 0x18003e831
movaps xmm15, xmm14
jmp 0x18003e831
mov rdx, r10
mov ecx, 0x77
call fcn.180026940
mov r10, qword [rsp + 0x148]
mov r11, qword [rsp + 0x130]
jmp 0x18003e831
mov eax, 0xee
nop
cmp eax, 0xee
je 0x18003e8c9
add eax, 0x2c
cmp eax, 0x11a
jb 0x18003e660
jmp 0x18003e831
comiss xmm11, xmm7
jbe 0x18003e685
movaps xmm0, xmm6
jmp 0x18003e693
comiss xmm14, xmm11
xorps xmm0, xmm0
ja 0x18003e693
cvtss2sd xmm0, xmm11
comiss xmm12, xmm7
xorps xmm11, xmm11
cvtsd2ss xmm11, xmm0
jbe 0x18003e6b3
xorps xmm12, xmm12
movaps xmm0, xmm6
cvtsd2ss xmm12, xmm6
jmp 0x18003e831
comiss xmm14, xmm12
xorps xmm0, xmm0
ja 0x18003e6c1
cvtss2sd xmm0, xmm12
xorps xmm12, xmm12
cvtsd2ss xmm12, xmm0
jmp 0x18003e831
mov eax, edi
sub eax, 0x107
je 0x18003e7fa
sub eax, 6
je 0x18003e7cb
sub eax, 0x33
je 0x18003e773
sub eax, 0x33
je 0x18003e744
cmp eax, 0x33
jne 0x18003e831
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_rewind]
movsxd rbx, ebp
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, r12
mov r8, rbx
mov rcx, rax
mov qword [rsp + 0x38], rax
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r10, qword [rsp + 0x148]
mov r11, qword [rsp + 0x130]
mov qword [rsp + 0x50], rax
jmp 0x18003e831
xor edx, edx
mov rcx, r12
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov r10, qword [rsp + 0x148]
mov ebp, eax
mov r11, qword [rsp + 0x130]
jmp 0x18003e831
test r12, r12
jne 0x18003e831
mov ebx, 0xeb
mov eax, ebx
sub eax, 0xea
je 0x18003e8ea
cmp eax, 1
jne 0x18003e7af
mov rdx, r13
lea rcx, str.TrimCacheForFacetURI
call fcn.180043000
lea rcx, [0x180050748]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
dec ebx
cmp ebx, 0xe9
ja 0x18003e781
mov r10, qword [rsp + 0x148]
mov r11, qword [rsp + 0x130]
jmp 0x18003e831
lea rdx, [0x180050750]
mov rcx, r13
mov ebp, 0xffffffff
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r10, qword [rsp + 0x148]
mov r12, rax
mov r11, qword [rsp + 0x130]
mov qword [rsp + 0x48], rax
jmp 0x18003e831
comiss xmm10, xmm7
jbe 0x18003e805
movaps xmm0, xmm6
jmp 0x18003e813
comiss xmm14, xmm10
xorps xmm0, xmm0
ja 0x18003e813
cvtss2sd xmm0, xmm10
comiss xmm11, xmm12
xorps xmm10, xmm10
cvtsd2ss xmm10, xmm0
jbe 0x18003e828
movaps xmm13, xmm11
jmp 0x18003e82c
movaps xmm13, xmm12
maxss xmm13, xmm10
add edi, 0x33
cmp edi, r14d
jb 0x18003e5b0
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x38]
mov r9d, dword [rsp + 0x138]
mov rdi, qword [rsp + 0x58]
lea r12d, [r9 - 0xb]
movaps xmmword [rsp + 0xc0], xmm8
cmp r9d, r12d
jbe case.0x18003e8c7.8
movss xmm8, dword [rsp + 0x138]
lea r14d, [r9 - 0x6b]
movss xmm6, dword [rsp + 0x138]
lea rcx, [0x180000000]
movss xmm7, dword [rsp + 0x138]
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x58]
nop dword [rax + rax]
cmp r14d, 0xa2
ja case.default.0x18003e8c7
movzx eax, byte [rcx + r14 + 0x3ecbc]
mov ecx, dword [rcx + rax*4 + 0x3ec8c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [r13]
xor edx, edx
imul rax, qword [r10]
mov qword [r10], rax
div qword [r13 + 0x28]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx + rax*8]
add rax, rdx
jmp 0x18003ec48
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x50]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], rax
jmp 0x18003e84f
lea rax, [rsp + 0x40]
mov qword [rsp + 0x58], 2
mov r9, r15
mov qword [rsp + 0x20], rax
mov edx, 0xf0
lea rcx, [rsp + 0x58]
mov r8d, 2
call fcn.18002ccc0
mov r8d, 3
mov qword [rsp + 0x58], 3
lea rax, [rsp + 0x40]
mov edx, 0xf0
mov r9, r15
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x58]
call fcn.18002ccc0
mov r8, qword [rsp + 0x38]
mov r9d, dword [rsp + 0x138]
jmp case.0x18003e8c7.11
lea r8, [rsp + 0x30]
mov byte [rsp + 0x30], 1
mov rdx, r15
mov ecx, 0xec
call fcn.180030880
mov r8, qword [rsp + 0x38]
mov r15, rax
mov r9d, dword [rsp + 0x138]
jmp case.0x18003e8c7.11
mov qword [rsp + 0x58], 1
mov r8d, 1
jmp 0x18003e94e
movss dword [r13], xmm15
jmp case.0x18003e8c7.11
cmp qword [rsp + 0x50], rsi
jne 0x18003ea03
mov edi, 0x14
cmp edi, 0x14
je 0x18003e9e2
cmp edi, 0x60
jne 0x18003e9f0
mov rax, rsi
jmp 0x18003ec3f
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [rsp + 0x38]
add edi, 0x4c
cmp edi, 0xac
jb 0x18003e9d0
mov r9d, dword [rsp + 0x138]
mov rdi, r8
jmp case.0x18003e8c7.11
comiss xmm12, xmm11
jbe 0x18003ea17
movaps xmm0, xmm11
jmp 0x18003ea1b
movaps xmm0, xmm12
minss xmm0, xmm10
movaps xmm6, xmm13
movaps xmm8, xmm13
subss xmm6, xmm0
jmp case.0x18003e8c7.11
movss dword [r10], xmm7
movss dword [r11], xmm8
jmp case.0x18003e8c7.11
mov r8, qword [rsp + 0x40]
test r8, r8
je 0x18003ec16
cmp qword [r8 + 8], 2
jne 0x18003ec16
mov edx, 0xb9
nop
mov eax, edx
sub eax, 0xb9
je 0x18003eacf
sub eax, 0x23
je 0x18003eac8
sub eax, 0x5d
je 0x18003ea7f
sub eax, 0x23
je 0x18003eaa0
cmp eax, 0x80
jne 0x18003eaef
mov r8, rbx
xor edx, edx
mov ecx, 0xb2
call fcn.18000c280
mov r8, qword [rsp + 0x38]
mov r9d, dword [rsp + 0x138]
jmp case.0x18003e8c7.11
mov rcx, qword [r8]
test rcx, rcx
je 0x18003eac3
mov rax, qword [r15]
test cl, 1
je 0x18003eab4
imul rbp, rax
imul rax, rax
mov qword [r15], rax
shr qword [r8], 1
mov rcx, qword [r8]
jne 0x18003eaa8
mov rbx, rbp
jmp 0x18003eaef
mov ebp, 1
jmp 0x18003eaef
test r8, r8
je 0x18003eaec
cmp qword [r8 + 8], 1
je 0x18003eb03
jbe 0x18003eae3
mov r8, qword [r8 + 0x10]
jmp 0x18003eae7
mov r8, qword [r8 + 0x18]
test r8, r8
jne 0x18003ead4
mov rbx, rsi
sub edx, 0xffffff80
cmp edx, 0x339
jb 0x18003ea60
jmp 0x18003ea7f
mov rbx, r8
jmp 0x18003ea82
mov rcx, rdx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r8, qword [rsp + 0x38]
mov r9d, dword [rsp + 0x138]
jmp case.0x18003e8c7.11
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
comisd xmm0, xmmword [0x180050a78]
jbe 0x18003ebda
ucomiss xmm11, xmm13
movaps xmm7, xmm6
divss xmm7, xmm13
jp 0x18003eb76
jne 0x18003eb76
movaps xmm15, xmm12
subss xmm15, xmm10
divss xmm15, xmm6
comiss xmm14, xmm15
jbe 0x18003ebc3
xorps xmm0, xmm0
cvtss2sd xmm0, xmm15
addsd xmm0, qword [0x180050b08]
cvtpd2ps xmm15, xmm0
jmp 0x18003ebc3
ucomiss xmm12, xmm13
jp 0x18003eb99
jne 0x18003eb99
movaps xmm0, xmm10
subss xmm0, xmm11
divss xmm0, xmm6
cvtss2sd xmm0, xmm0
addsd xmm0, qword [0x180050ae0]
jmp 0x18003ebba
ucomiss xmm10, xmm13
jp 0x18003ebc3
jne 0x18003ebc3
movaps xmm0, xmm11
subss xmm0, xmm12
divss xmm0, xmm6
cvtss2sd xmm0, xmm0
addsd xmm0, qword [0x180050b00]
xorps xmm15, xmm15
cvtsd2ss xmm15, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm15
divsd xmm0, qword [0x180050b08]
cvtpd2ps xmm15, xmm0
jmp case.0x18003e8c7.11
movaps xmm7, xmm14
movaps xmm15, xmm14
lea rcx, [0x180000000]
dec r9d
dec r14d
mov dword [rsp + 0x138], r9d
cmp r9d, r12d
jbe case.0x18003e8c7.8
mov rdx, qword [rsp + 0x48]
mov r10, qword [rsp + 0x148]
mov r11, qword [rsp + 0x130]
jmp 0x18003e8a0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Images_userInputPreviousIcon.png
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, rdi
movaps xmm8, xmmword [rsp + 0xc0]
movaps xmm15, xmmword [rsp + 0x60]
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm10, xmmword [r11 - 0x40]
movaps xmm11, xmmword [r11 - 0x50]
movaps xmm12, xmmword [r11 - 0x60]
movaps xmm13, xmmword [r11 - 0x70]
movaps xmm14, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret