Function at 0x1800a0b70
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov ebx, dword [rsp + 0xd8]
lea eax, [r9 - 0xd]
mov dword [rsp + 0x70], eax
mov r13d, r9d
mov r14, r8
mov r15, rdx
mov r12, rcx
cmp r9d, eax
jbe 0x1800a0c1c
mov ebp, dword [rsp + 0xd8]
xor esi, esi
lea eax, [r13 - 0xfc]
lea rdx, [0x180000000]
cmp eax, 0x2d
ja case.0x1800a0be1.265
movzx eax, byte [rdx + rax + 0xa1110]
mov ecx, dword [rdx + rax*4 + 0xa10d8]
add rcx, rdx
jmp rcx
mov rax, qword [r14]
mov ecx, dword [rax]
sub ecx, 0x7f2bb708
cmp ecx, 2
jbe case.0x1800a0be1.265
mov esi, 0xa3
nop dword [rax]
cmp esi, 0xa3
je 0x1800a0c43
cmp esi, 0x14d
je 0x1800a0c3f
cmp esi, 0x1f7
jne 0x1800a0cc1
mov eax, ebx
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
xor ebx, ebx
jmp 0x1800a0cc1
mov rax, qword [r14]
mov ecx, dword [rax]
sub ecx, 0x7f2bb76d
cmp ecx, 2
ja 0x1800a0cc1
mov edi, 0x3a
cmp edi, 0x3a
je 0x1800a0c67
cmp edi, 0x2cdc
je 0x1800a0c1c
jmp 0x1800a0cb3
mov rax, qword [r14]
lea r8, [0x1800d926f]
xor r9d, r9d
mov qword [rsp + 0x68], rax
xor edx, edx
mov dword [rsp + 0x20], 0xd6
lea rcx, [rsp + 0x68]
call fcn.180064c30
mov eax, dword [r15]
lea r8, [rsp + 0x68]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x78]
mov rax, qword [r14]
mov edx, 0x95
mov qword [rsp + 0x68], rax
call fcn.180051c90
mov ebx, eax
add edi, 0x2ca2
cmp edi, 0x5944
jbe 0x1800a0c58
add esi, 0xaa
cmp esi, 0x2a1
jb 0x1800a0c00
xor esi, esi
jmp case.0x1800a0be1.265
mov rax, qword [r14]
mov r8d, dword [rax + 0x28]
mov rdx, qword [rax + 0x108]
mov ecx, dword [rax + 0x110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
mov rdx, qword [r14]
cmp eax, dword [rdx + 0x28]
je 0x1800a0d24
mov ecx, 0xf8
mov eax, ecx
sub eax, 0xf8
je 0x1800a0d15
cmp eax, 1
je 0x1800a1031
jmp 0x1800a0d1a
mov ebp, 0x7f2bb724
inc ecx
cmp ecx, 0xfa
jb 0x1800a0d01
mov rax, qword [rdx + 0x108]
mov qword [rsp + 0x80], rax
jmp case.0x1800a0be1.265
test r12, r12
je case.0x1800a0be1.265
mov rax, qword [r14]
mov rdx, qword [rax + 0x108]
cmp r12, rdx
je case.0x1800a0be1.265
mov r8d, dword [rax + 0x28]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
jmp case.0x1800a0be1.265
mov eax, 0x65
nop word [rax + rax]
cmp eax, 0x65
je 0x1800a0e98
add eax, 0x41e3
cmp eax, 0x41e3
jbe 0x1800a0d70
mov eax, 6
nop word [rax + rax]
cmp eax, 6
je 0x1800a1086
add eax, 0x18
cmp eax, 0x1e
jb 0x1800a0d90
mov rax, qword [rsp + 0x80]
cmp dword [rax], 0x4d4d50
je 0x1800a1031
mov ecx, 0x116
nop word [rax + rax]
mov eax, ecx
sub eax, 0x115
je 0x1800a1031
cmp eax, 1
jne 0x1800a0dd7
mov ebp, 0x7f2bb78a
dec ecx
cmp ecx, 0x114
ja 0x1800a0dc0
mov r13d, 0xfd
jmp case.0x1800a0be1.265
mov rax, qword [r14]
mov ecx, dword [r15]
cmp rcx, qword [rax + 0x20]
jb 0x1800a0e02
cmp rcx, qword [rax + 0x28]
jbe case.0x1800a0be1.265
mov edi, 0x12d
nop word [rax + rax]
mov eax, edi
sub eax, 0x12b
je 0x1800a0c1c
sub eax, 1
je 0x1800a0e59
cmp eax, 1
jne 0x1800a0e5b
mov rax, qword [r14]
lea r9, [rsp + 0x68]
mov r8d, 0xf5
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0xd8]
mov dword [rsp + 0xd8], 2
lea rcx, [rsp + 0x78]
call fcn.18007a510
jmp 0x1800a0e5b
mov ebx, esi
dec edi
cmp edi, 0x12a
ja 0x1800a0e10
jmp case.0x1800a0be1.265
mov rax, qword [r14]
cmp qword [rax + 0x108], 0
jne case.0x1800a0be1.265
mov edi, 0x1b
mov eax, edi
sub eax, 0x1b
je 0x1800a0e9f
cmp eax, 1
jne 0x1800a0f2a
test ebp, ebp
je 0x1800a0f2a
mov eax, ebp
jmp 0x1800a0c1e
mov rax, qword [r14]
mov r9d, 0xef
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov qword [rsp + 0x28], rsi
xor edx, edx
mov qword [rsp + 0x20], rsi
mov ecx, dword [rax + 0x110]
mov dword [rsp + 0x60], ecx
lea rcx, [rsp + 0x60]
call fcn.1800cebc0
mov r8, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x50], rsi
xor edx, edx
mov dword [rsp + 0x68], eax
xor ecx, ecx
mov eax, dword [r8 + 0x28]
add r8, 0x108
mov dword [rsp + 0xd8], eax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x3c
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rax
call fcn.1800ca140
mov ebp, eax
inc edi
cmp edi, 0x1d
jb 0x1800a0e80
jmp case.0x1800a0be1.265
mov edi, 0xaa
nop
mov eax, edi
sub eax, 0xaa
je 0x1800a0f54
cmp eax, 1
je 0x1800a0c1c
jmp 0x1800a0f70
mov rax, qword [r14]
mov r9, r12
mov edx, dword [r15]
mov r8d, 1
mov rcx, qword [rax + 8]
mov rax, qword [rcx + 8]
call qword [rax + 0x30]
mov ebx, eax
inc edi
cmp edi, 0xac
jb 0x1800a0f40
mov ebp, esi
jmp case.0x1800a0be1.265
mov rax, qword [r14]
test dword [rax + 0x10], 0x2000
je case.0x1800a0be1.265
mov ecx, 0xd6
nop word [rax + rax]
mov eax, ecx
sub eax, 0xd5
je 0x1800a0c1c
cmp eax, 1
jne 0x1800a0fb4
mov ebx, esi
dec ecx
cmp ecx, 0xd4
ja 0x1800a0fa0
jmp case.0x1800a0be1.265
mov r8, qword [r14]
mov rdx, qword [r15]
mov rcx, qword [r8 + 0x20]
mov eax, dword [rcx + 0x14]
cmp rdx, rax
jbe 0x1800a0fdd
mov eax, dword [rcx + 4]
cmp rdx, rax
jb 0x1800a1005
mov ecx, 0x106
mov eax, ecx
sub eax, 0x106
je 0x1800a0ff6
cmp eax, 1
je 0x1800a0c1c
jmp 0x1800a0ffb
mov ebx, 0x7f2bb78d
inc ecx
cmp ecx, 0x108
jb 0x1800a0fe2
cmp dword [r8 + 0x110], 0
jg case.0x1800a0be1.265
mov edi, 0x75
mov eax, edi
sub eax, 0x75
je 0x1800a1039
cmp eax, 1
jne 0x1800a1054
mov rax, qword [r14]
cmp dword [rax + 0x110], 0
jge 0x1800a1054
mov ebp, 0x7f2bb790
mov r13d, 0xfd
jmp case.0x1800a0be1.265
mov rcx, qword [r14]
mov edx, 2
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__open]
mov rcx, qword [r14]
mov dword [rcx + 0x110], eax
inc edi
cmp edi, 0x77
jb 0x1800a1014
jmp case.0x1800a0be1.265
mov eax, 0x71
cmp eax, 0x71
je 0x1800a10a8
add eax, 0x8e
cmp eax, 0xff
jb 0x1800a1062
dec r13d
cmp r13d, dword [rsp + 0x70]
jbe 0x1800a0c1c
jmp 0x1800a0bb8
mov rax, qword [r14]
lea rdx, [rsp + 0x80]
mov ecx, 0x44
mov qword [rsp + 0x80], rax
call fcn.180084940
jmp 0x1800a0c1e
mov rax, qword [r14]
lea r9, [rsp + 0xd8]
mov ecx, dword [r15]
xor edx, edx
sub ecx, dword [rax + 0x20]
mov r8, qword [rax + 0x40]
mov dword [rsp + 0xd8], ecx
mov ecx, 0xc4
call fcn.18009cc80
jmp 0x1800a0c1e