Function at 0x18003cb70
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
lea ebx, [rdx + 7]
mov r14, r9
mov dword [rsp + 0x98], ebx
cmp edx, ebx
mov ebx, dword [rsp + 0x98]
mov r12, r8
mov r13d, edx
mov r15, rcx
jae 0x18003cd56
mov eax, dword [rsp + 0x98]
lea ebp, [rdx - 0x7c]
mov dword [rsp + 0x30], ebp
lea r8, [0x180000000]
xor edx, edx
lea rdi, [0x18002ec40]
cmp ebp, 0xe
ja case.default.0x18003cbe3
mov ecx, dword [r8 + rbp*4 + 0x3cfac]
add rcx, r8
jmp rcx
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [r15 + 8]
jmp 0x18003cf3b
mov ecx, 0x670
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r14], rax
test rax, rax
je 0x18003cf9b
jmp 0x18003cf41
xorps xmm0, xmm0
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm0
jmp case.0x18003cbe3.3
mov rcx, qword [r14]
xor edx, edx
mov r8d, 0x670
call sub.VCRUNTIME140.dll_memset
mov esi, 0x4d
nop dword [rax]
mov eax, esi
sub eax, 0x4d
je 0x18003cdeb
sub eax, 1
je 0x18003cdc7
cmp eax, 1
jne 0x18003cdb7
mov rax, qword [r14]
cmp dword [rax], 0xffffffff
jne 0x18003ccb2
mov edi, 0xfd
nop word [rax + rax]
mov eax, edi
sub eax, 0xfd
je 0x18003cc97
cmp eax, 0x2a
jne 0x18003cca7
mov dword [rsp + 0x98], 1
mov qword [rsp + 0x20], 0
jmp 0x18003cf84
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r14], 0
add edi, 0x2a
cmp edi, 0x151
jb 0x18003cc70
mov rax, qword [r14]
xor r8d, r8d
mov ecx, dword [rax]
lea edx, [r8 + 0xb]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__lseek]
cmp eax, 0xffffffff
jne 0x18003cd1d
mov edi, 0x35
nop
mov eax, edi
sub eax, 0x35
je 0x18003cd0d
sub eax, 1
je 0x18003cce7
cmp eax, 1
je 0x18003cf9b
jmp 0x18003cd16
xor eax, eax
mov dword [rsp + 0x30], 1
lea r8, [rsp + 0x30]
mov qword [r14], rax
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r9d, [rax + 0x2a]
call fcn.18008b4c0
jmp 0x18003cd16
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc edi
cmp edi, 0x38
jb 0x18003ccd0
mov rax, qword [r14]
mov r8d, 2
mov ecx, dword [rax]
lea rdx, [rax + 0x14]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
cmp eax, 0xffffffff
jne 0x18003cdb0
mov edi, 0x6b
nop dword [rax]
mov eax, edi
sub eax, 0x6b
je 0x18003cda0
sub eax, 1
je 0x18003cd7a
sub eax, 1
je 0x18003cd76
cmp eax, 1
jne 0x18003cda9
mov eax, ebx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
xor ebx, ebx
jmp 0x18003cda9
xor eax, eax
mov dword [rsp + 0x30], 1
lea r8, [rsp + 0x30]
mov qword [r14], rax
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r9d, [rax + 0x2a]
call fcn.18008b4c0
jmp 0x18003cda9
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc edi
cmp edi, 0x6f
jb 0x18003cd40
lea rdi, [0x18002ec40]
inc esi
cmp esi, 0x50
jb 0x18003cc40
jmp 0x18003cf41
mov edx, dword [r12]
mov rcx, r15
bts edx, 0xf
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__open]
mov ecx, eax
mov rax, qword [r14]
mov dword [rax], ecx
mov rax, qword [r14]
mov dword [rax + 4], 1
jmp 0x18003cdb7
mov rax, qword [r14]
lea rcx, [0x1800399a0]
mov qword [rax + 0x650], rdi
mov rax, qword [r14]
mov qword [rax + 0x658], rcx
jmp 0x18003cdb7
cmp byte [r12], 0
je 0x18003ce42
cmp qword [0x1800bf700], r15
je case.0x18003cbe3.3
mov qword [0x1800bf700], r15
mov rax, qword [r15 + 0x200]
test rax, rax
je case.0x18003cbe3.3
movzx edx, byte [r12]
mov rcx, r15
call rax
jmp 0x18003cf41
cmp qword [0x1800bf700], r15
jne case.0x18003cbe3.3
mov ebp, 0x4a
cmp ebp, 0x4a
je 0x18003ceb0
cmp ebp, 0x20aa
jne 0x18003cf1f
mov edi, edx
lea rsi, [r15 + 0x54]
nop dword [rax + rax]
cmp byte [rsi], 1
jne 0x18003cea4
mov dword [rsp + 0x40], edx
lea rax, [rsp + 0x38]
mov dword [rsp + 0x48], edx
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r8, r15
mov dword [rsp + 0x38], edi
mov ecx, 0x2f
call fcn.180063fe0
xor edx, edx
inc edi
inc rsi
cmp edi, 7
jle 0x18003ce70
jmp 0x18003cf1f
mov qword [0x1800bf700], rdx
mov rax, qword [r15 + 0x200]
test rax, rax
je 0x18003cecf
movzx edx, byte [r12]
mov rcx, r15
call rax
xor edx, edx
mov edi, edx
lea rsi, [r15 + 0x5c]
cmp byte [rsi], 1
jne 0x18003cf12
mov dword [rsp + 0x48], edx
lea r9, [rsp + 0x48]
mov dword [rsp + 0x38], edx
lea r8, [rsp + 0x40]
mov dword [rsp + 0x40], edx
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x20], 0x9b
call fcn.180004360
xor edx, edx
inc edi
inc rsi
cmp edi, 0x15c
jle 0x18003ced5
add ebp, 0x2060
cmp ebp, 0x40c0
jbe 0x18003ce54
mov ebp, dword [rsp + 0x30]
jmp 0x18003cf41
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea r8, [0x180000000]
mov eax, dword [rsp + 0x98]
inc ebp
inc r13d
mov dword [rsp + 0x30], ebp
cmp r13d, eax
jae 0x18003cd56
jmp 0x18003cbc6
mov rax, qword [r14]
mov ecx, 0x200
cmp word [rax + 0x14], cx
je 0x18003cfa2
mov dword [rsp + 0x98], 5
mov qword [rsp + 0x20], rdx
mov r9d, 0x2a
lea r8, [rsp + 0x98]
xor edx, edx
xor ecx, ecx
call fcn.18008b4c0
xor eax, eax
jmp 0x18003cd58
mov eax, 1
jmp 0x18003cd58