Function at 0x1800062bb
Capabilities:
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rcx, qword [str.kernel32.dll]
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r14, rax
mov edx, dword [0x1803bad1b]
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
mov edx, dword [0x1803bad1b]
mov rcx, rax
call fcn.18000620b
xor ecx, ecx
mov rdx, rdi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, 0xffffffff
mov rcx, qword [str.buccinator.avi]
inc eax
cmp word [rdi + rax*2], 0
jne 0x180006328
lea edx, [rax - 1]
cmp word [rdi + rdx*2], 0x5c
je 0x18000634a
mov edx, eax
mov word [rdi + rdx*2], 0
lea edx, [rax - 2]
dec eax
jmp 0x180006334
mov bl, byte [rcx]
test bl, bl
je 0x18000636b
mov edx, 1
movsx ebp, bl
mov ebx, eax
mov word [rdi + rbx*2], bp
inc eax
mov ebp, edx
mov bl, byte [rcx + rbp]
inc edx
test bl, bl
jne 0x180006355
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
mov rcx, rdi
mov edx, 1
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x180006561
mov rbx, rax
mov rdx, qword [str.GetFileSize]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
xor edx, edx
call rax
mov ebp, eax
mov edi, dword [0x1803bad6b]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
mov edx, dword [0x1803bad6b]
mov rcx, rax
call fcn.18000620b
lea r9, [rsp + 0x38]
mov dword [r9], 0
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov rdx, rdi
mov r8d, ebp
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180006561
mov r15d, dword [rsp + 0x38]
mov edx, dword [0x1803bad0f]
lea rbp, [rdi + rdx]
mov eax, dword [rdi + rdx]
test rax, rax
je 0x180006446
mov ecx, dword [rdi + rdx + 4]
add rdx, rdi
add rdx, 8
xor ebx, ebx
add dword [rdx + rbx*4], ecx
inc rbx
cmp eax, ebx
jne 0x18000643c
mov esi, dword [0x1803bad3b]
lea rdx, [rsi + rbp]
inc rdx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x180006561
mov rbx, rax
add rbp, rsi
movsx rsi, byte [rbp]
lea rdx, [rsi + rbp]
inc rdx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x180006561
mov r14, rax
add rbp, rsi
movsx rsi, byte [rbp]
lea rcx, [rsi + rbp]
inc rcx
call rbx
test rax, rax
je 0x180006561
add rdi, r15
add rbp, rsi
movsx rcx, byte [rbp]
mov ebx, dword [0x1803bad37]
add rbx, rbp
add rbx, rcx
mov r13d, dword [rbp + rcx + 4]
mov ebp, dword [rbp + rcx + 8]
lea r12, [rbx + rbp]
movsxd rcx, dword [rax + 0x3c]
mov esi, dword [rax + rcx + 0x2c]
add rsi, rax
lea r15, [rsp + 0x3c]
mov dword [r15], 0
mov r8d, dword [0x1803bad67]
mov rcx, rsi
mov rdx, rbp
mov r9, r15
call r14
mov rcx, rsi
mov rdx, rbx
mov r8d, ebp
call fcn.18000625b
mov r8d, dword [r15]
mov rcx, rsi
mov rdx, rbp
mov r9, r15
call r14
add rsi, r13
mov rax, qword [str.legroom.tiff]
cmp byte [rax], 0
je 0x180006547
xor eax, eax
mov rcx, qword [str.legroom.tiff]
movsx ecx, byte [rcx + rax]
mov word [rdi + rax*2], cx
mov rcx, qword [str.legroom.tiff]
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x180006522
mov eax, eax
jmp 0x180006549
xor eax, eax
mov word [rdi + rax*2], 0
lea rcx, [rsp + 0x40]
mov qword [rcx + 8], rdi
mov qword [rcx], r12
mov byte [rcx + 0x10], 1
call rsi
nop
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret