Function at 0x140073d60
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xcd0]
sub rsp, 0xdd0
mov rax, qword [0x1401f7280]
xor rax, rsp
mov qword [rbp + 0xcc0], rax
mov r14, rcx
mov ebx, r8d
mov r15d, edx
lea rcx, [rbp - 0x49]
xor edx, edx
mov r8d, 0x1f9
mov rdi, r9
mov dword [rbp - 0x50], 0
mov word [rbp - 0x4c], 0
mov byte [rbp - 0x4a], 0
call fcn.1400f9ab0
mov rcx, qword [0x1401fbba0]
lea r8, [rbp + 0x1b0]
mov r9d, 0x40
mov edx, 0x4e73
call qword [sym.imp.USER32.dll_LoadStringW]
lea r8, [0x140188fd0]
lea rdx, [rbp + 0x1b0]
mov rcx, rdi
call fcn.1400f98c8
lea rdx, [0x140183378]
mov r13d, 1
test r15d, r15d
mov rcx, r14
cmovne ebx, r13d
call fcn.1400fafe4
mov r12, rax
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x140073e4d
mov rcx, qword [0x1401fbba0]
lea r9d, [r13 + 0x3f]
lea r8, [rbp + 0x1b0]
mov edx, 0x4e70
call qword [sym.imp.USER32.dll_LoadStringW]
lea rdx, [rbp + 0x1b0]
mov r8, r14
mov rcx, rdi
call fcn.1400f98c8
xor eax, eax
jmp 0x14007437a
mov qword [rsp + 0xe20], rsi
mov esi, 0x200
lea rcx, [rbp - 0x50]
mov r9, rax
mov rdx, r13
mov r8d, esi
call fcn.1400fabdc
lea rdx, [0x140188fd8]
lea rcx, [rbp - 0x50]
mov r8d, 7
call fcn.1400fe7f0
test eax, eax
jne 0x140073e9e
mov rcx, r12
call fcn.1400fa904
mov rdx, rdi
mov rcx, r14
call fcn.1400737a0
jmp 0x140074372
lea rdx, [0x140188fe0]
lea rcx, [rbp - 0x50]
mov r8d, 7
call fcn.1400fe7f0
test eax, eax
je 0x140073ec7
mov rcx, r12
call fcn.1400fa904
xor eax, eax
jmp 0x140074372
cmp ebx, 3
jle 0x140073f2e
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor ebx, ebx
mov r9d, r15d
mov dword [rsp + 0x70], ebx
mov rcx, rax
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], rdi
lea rax, [0x140208860]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov r8, r14
xor edx, edx
mov dword [rsp + 0x28], 7
mov dword [rsp + 0x20], ebx
call fcn.140078c60
jmp 0x140074372
xor r8d, r8d
mov edx, 0xe02
mov rcx, r12
call fcn.1400fad50
lea rcx, [rbp - 0x80]
mov r9, r12
mov r8, r13
mov rdx, r13
call fcn.1400fabdc
and byte [rbp - 0x80], 7
xor r8d, r8d
mov rcx, r12
dec ebx
je 0x140073f8f
dec ebx
je 0x140073f66
dec ebx
je 0x140073f7d
mov edx, 0xb800
call fcn.1400fad50
mov esi, 0x100
mov r12d, 0x180
jmp 0x140073fa4
mov edx, 0x30000
call fcn.1400fad50
mov r12d, 0x300
jmp 0x140073fa4
mov edx, 0x2000
call fcn.1400fad50
mov esi, 0x80
mov r12d, 0xc0
mov eax, esi
mov ecx, 0x40
imul eax, r12d
lea eax, [rax + rax*2]
movsxd rdx, eax
add rdx, 0x28
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r13, rax
mov qword [rbp - 0x60], rax
test rax, rax
jne 0x140073ff6
mov rcx, qword [0x1401fbba0]
mov r9d, 0x80
mov r8, rdi
mov edx, 0x50a
call qword [sym.imp.USER32.dll_LoadStringW]
mov rcx, qword [rbp - 0x78]
call fcn.1400fa904
xor eax, eax
jmp 0x140074372
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
xor ebx, ebx
lea ecx, [rsi - 2]
mov dword [rax], 0x28
mov dword [rax + 4], r12d
mov dword [rax + 8], esi
mov qword [rax + 0x20], rbx
mov qword [rax + 0xc], 0x180001
mov qword [rax + 0x14], rbx
mov dword [rax + 0x1c], ebx
lea rdi, [rax + 0x28]
lea r10d, [rbx + 1]
test ecx, ecx
js 0x1400742e2
mov r13, qword [rbp - 0x78]
mov r15d, ecx
mov eax, r12d
cdq
add ecx, 2
movsxd rsi, r12d
imul r15d, r12d
sub eax, edx
sar eax, 1
movsxd r14, eax
mov eax, r12d
neg eax
mov qword [rbp - 0x58], r14
add eax, eax
shr rcx, 1
mov qword [rbp - 0x68], rcx
mov dword [rbp - 0x70], eax
nop word [rax + rax]
mov r8d, 0x300
lea rcx, [rbp + 0x6c0]
mov r9, r13
cmp rsi, r8
mov rdx, r10
cmovb r8, rsi
call fcn.1400fabdc
mov r8d, 0x300
lea rcx, [rbp + 0x9c0]
cmp rsi, r8
mov r9, r13
mov edx, 1
cmovb r8, rsi
call fcn.1400fabdc
mov r8d, 0x180
lea rcx, [rbp + 0x540]
cmp r14, r8
mov r9, r13
mov edx, 1
cmovb r8, r14
call fcn.1400fabdc
mov r8d, 0x180
lea rcx, [rbp + 0x3c0]
cmp r14, r8
mov r9, r13
mov edx, 1
cmovb r8, r14
call fcn.1400fabdc
mov r11d, ebx
lea r14, [rbp + 0x6c0]
nop dword [rax]
mov eax, 0x300
cmp rsi, rax
cmovb rax, rsi
cmp r11d, eax
jge 0x1400741d9
movzx eax, byte [r14]
imul ecx, eax, 0xff
mov eax, 0x2d4279a3
imul ecx
mov r8d, edx
sar r8d, 5
mov eax, r8d
shr eax, 0x1f
add r8d, eax
mov eax, r11d
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
movzx eax, byte [rbp + rcx + 0x540]
add eax, 0xffffff61
lea r9d, [r8 + rax*2]
movzx eax, byte [rbp + rcx + 0x3c0]
lea ecx, [r8 + r8*4]
add eax, 0xffffff77
add ecx, ecx
lea r10d, [r8 + rax*2]
lea eax, [r10 + r10*2]
sub ecx, eax
mov eax, 0x2aaaaaab
sub ecx, r9d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0xff
test r10d, r10d
jns 0x14007418f
mov r10d, ebx
jmp 0x140074196
cmp r10d, eax
cmovg r10d, eax
test edx, edx
jns 0x14007419e
mov edx, ebx
jmp 0x1400741a3
cmp edx, eax
cmovg edx, eax
test r9d, r9d
jns 0x1400741ad
mov r9d, ebx
jmp 0x1400741b4
cmp r9d, eax
cmovg r9d, eax
lea eax, [r15 + r11]
inc r11d
add eax, r12d
inc r14
lea eax, [rax + rax*2]
movsxd rcx, eax
mov byte [rcx + rdi], r9b
mov byte [rcx + rdi + 1], dl
mov byte [rcx + rdi + 2], r10b
jmp 0x140074100
mov r11d, ebx
lea r14, [rbp + 0x9c0]
mov r13d, 0xff
nop dword [rax]
mov eax, 0x300
cmp rsi, rax
cmovb rax, rsi
cmp r11d, eax
jge 0x1400742c2
movzx eax, byte [r14]
imul ecx, eax, 0xff
mov eax, 0x2d4279a3
imul ecx
mov r8d, edx
sar r8d, 5
mov eax, r8d
shr eax, 0x1f
add r8d, eax
mov eax, r11d
cdq
sub eax, edx
sar eax, 1
movsxd rcx, eax
movzx eax, byte [rbp + rcx + 0x540]
add eax, 0xffffff61
lea r9d, [r8 + rax*2]
movzx eax, byte [rbp + rcx + 0x3c0]
lea ecx, [r8 + r8*4]
add eax, 0xffffff77
add ecx, ecx
lea r10d, [r8 + rax*2]
lea eax, [r10 + r10*2]
sub ecx, eax
mov eax, 0x2aaaaaab
sub ecx, r9d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
test r10d, r10d
jns 0x14007427a
mov r10d, ebx
jmp 0x140074281
cmp r10d, r13d
cmovg r10d, r13d
test edx, edx
jns 0x140074289
mov edx, ebx
jmp 0x140074290
cmp edx, r13d
cmovg edx, r13d
test r9d, r9d
jns 0x14007429a
mov r9d, ebx
jmp 0x1400742a1
cmp r9d, r13d
cmovg r9d, r13d
lea eax, [r15 + r11]
inc r11d
inc r14
lea eax, [rax + rax*2]
cdqe
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], dl
mov byte [rax + rdi + 2], r10b
jmp 0x1400741f0
add r15d, dword [rbp - 0x70]
dec qword [rbp - 0x68]
mov r13, qword [rbp - 0x78]
mov r14, qword [rbp - 0x58]
mov r10d, 1
jne 0x140074070
mov r13, qword [rbp - 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [rbp - 0x78]
call fcn.1400fa904
movzx eax, byte [rbp - 0x80]
cmp al, 3
jne 0x140074306
mov rcx, r13
call fcn.140043720
jmp 0x140074312
cmp al, 1
jne 0x14007432c
mov rcx, r13
call fcn.140043470
mov rcx, r13
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rax, rbx
jmp 0x140074372
cmp al, 2
jne 0x14007436f
mov rcx, r13
call fcn.140043470
mov rcx, r13
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, rbx
call fcn.140043470
mov r13, rax
test rbx, rbx
je 0x14007436f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rax, r13
mov rsi, qword [rsp + 0xe20]
mov rcx, qword [rbp + 0xcc0]
xor rcx, rsp
call fcn.1400f9a80
add rsp, 0xdd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbx
pop rbp
ret