Function at 0x1800402d0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x170
lea esi, [r8 + 0x365]
mov r13, r9
mov dword [rsp + 0x30], esi
mov ebx, r8d
mov rdi, rdx
mov r12, rcx
cmp r8d, esi
jae 0x18004064f
mov r15, qword [rsp + 0x60]
lea rdx, [0x180000000]
mov r14, qword [rsp + 0x60]
mov esi, dword [rsp + 0x1c0]
mov eax, dword [rsp + 0x30]
nop dword [rax]
cmp ebx, 0x1b3
ja 0x1800403a9
je 0x18004064f
lea eax, [rbx - 0x85]
cmp eax, 0xf7
ja case.0x18004035d.143
movzx eax, byte [rdx + rax + 0x406f8]
mov ecx, dword [rdx + rax*4 + 0x406cc]
add rcx, rdx
jmp rcx
mov rbp, qword [rdi]
mov edx, 1
mov qword [rsp + 0x60], rbp
mov r9, qword [rbp + 0x18]
mov r8, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x30]
mov r15, qword [rbp + 0x48]
call fcn.180082cbc
cmp rax, qword [rbp + 0x40]
je 0x18004039e
mov rax, qword [r12]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x2b
mov rcx, qword [r12]
mov rax, qword [rcx]
call qword [rax]
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x30]
add ebx, 0x4f
mov dword [rsp + 0x1c0], ebx
cmp ebx, eax
jb 0x180040330
jmp 0x18004064f
xor ebp, ebp
lea r9, [rsp + 0x44]
lea r8, [rsp + 0x40]
mov rdx, r14
lea ecx, [rbp + 0x77]
call fcn.18006f8d0
test eax, eax
je 0x18004039e
nop dword [rax + rax]
mov edi, 0x9e
nop word [rax + rax]
cmp edi, 0x9e
je 0x1800404a2
cmp edi, 0x1da0
je 0x180040464
cmp edi, 0x3aa2
jne 0x1800404b3
mov rax, qword [rsp + 0x1d0]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x68]
mov dword [rsp + 0x48], ebp
mov edx, 0x7b
lea rcx, [rsp + 0x58]
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
mov eax, dword [r13]
mov dword [rsp + 0x58], eax
mov rax, qword [r12]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1800700b0
inc ebp
jmp 0x1800404b3
mov ebx, 1
nop dword [rax]
lea r9, [rsp + 0x44]
mov rdx, r14
lea r8, [rsp + 0x40]
mov ecx, 0x77
call fcn.18006f8d0
test eax, eax
je 0x18004061e
mov eax, dword [rsp + 0x40]
mov dword [rsp + rbx*4 + 0x70], eax
inc rbx
cmp rbx, 0x40
jl 0x180040470
jmp 0x1800404b3
cmp ebp, 4
jge 0x18004066f
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x70], eax
add edi, 0x1d02
cmp edi, 0x5706
jbe 0x1800403f0
lea r9, [rsp + 0x44]
mov rdx, r14
lea r8, [rsp + 0x40]
mov ecx, 0x77
call fcn.18006f8d0
test eax, eax
jne 0x1800403e0
mov ebx, dword [rsp + 0x1c0]
mov rdi, qword [rsp + 0x1b8]
jmp 0x18004039e
lea rdx, [0x1800a6348]
mov rcx, rdi
call fcn.180082884
mov r14, rax
test rax, rax
jne 0x18004039e
lea ecx, [rax + 2]
call fcn.180081710
mov rcx, rax
lea rdx, str.UnregisterAppId___done_0x
mov r8, rdi
call fcn.180075910
jmp 0x180040647
mov dword [rsp + 0x38], 0
jmp case.0x18004035d.143
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx + 0x20]
mov rdx, qword [rcx + 0x30]
mov r8, qword [rax]
mov rax, qword [r12]
mov r10d, dword [rax + 0x30]
test r10d, r10d
je 0x18004039e
mov r9d, 0xd3
mov eax, r9d
sub eax, 0xcf
je 0x1800405d7
sub eax, 1
je 0x1800405ca
sub eax, 1
je 0x1800405b4
sub eax, 1
je 0x18004058c
cmp eax, 1
jne 0x1800405e5
movzx esi, byte [rdx]
inc rdx
jmp 0x1800405e5
movzx eax, byte [rdx]
shl eax, 8
or eax, esi
cdqe
movzx ecx, byte [rax + r15]
mov byte [r8], cl
inc r8
movzx eax, byte [rdx + 2]
movzx esi, byte [rdx + 1]
shl eax, 8
or esi, eax
add rdx, 3
jmp 0x1800405e5
movsxd rax, esi
movzx ecx, byte [rax + r15]
mov byte [r8], cl
inc r8
movzx esi, byte [rdx]
inc rdx
jmp 0x1800405e5
movzx eax, byte [rdx]
shl eax, 8
or esi, eax
inc rdx
jmp 0x1800405e5
movsxd rax, esi
movzx ecx, byte [rax + r15]
mov byte [r8], cl
inc r8
dec r9d
cmp r9d, 0xce
ja 0x180040566
add r10d, 0xffffffff
jne 0x180040560
jmp 0x18004039e
inc dword [0x1800c7e04]
jmp case.0x18004035d.143
mov dword [0x1800c7e04], 0
jmp case.0x18004035d.143
mov ecx, 2
call fcn.180081710
mov r8, qword [rsp + 0x1b8]
lea rdx, str.the_reader_is_already_released
mov rcx, rax
call fcn.180075910
mov rcx, r14
call fcn.18008201c
mov dword [rsp + 0x38], 0
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 2
call fcn.180081710
mov r8, qword [rsp + 0x1b8]
lea rdx, str.BUFFER_LOAD_SSHORT_OFFEN_vi
mov rcx, rax
jmp 0x18004063a
cmp dword [rsp + 0x44], 0xffffffff
je 0x1800406ad
mov ecx, 2
call fcn.180081710
mov rcx, rax
lea rdx, str.define___FLT_HAS_DENORM___1
mov r8, rdi
jmp 0x18004063a
mov rcx, r14
call fcn.18008201c
mov dword [rsp + 0x38], 1
jmp 0x18004064f
mov rcx, qword [rdi]
call fcn.18007c774
jmp 0x180040654