Function at 0x180035a40
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa0
mov edi, edx
mov r13, r8
add edx, 9
mov r8, rcx
mov dword [rbp - 0x49], edx
cmp edi, edx
jae case.0x180035abd.1
mov r12, qword [rbp - 0x41]
lea ebx, [rdi - 0xf]
mov rsi, qword [rbp - 0x41]
lea r10, [0x180000000]
mov r15, qword [rbp - 0x41]
mov r14, qword [rbp - 0x41]
mov eax, dword [rbp - 0x49]
mov dword [rbp - 0x45], ebx
mov edx, dword [rbp - 0x45]
mov rbx, qword [rbp - 0x41]
cmp edx, 0xf
ja case.default.0x180035abd
mov eax, edx
mov ecx, dword [r10 + rax*4 + 0x35e44]
add rcx, r10
jmp rcx
mov qword [rsp + 0x20], r9
lea rdx, [rbp - 9]
mov r9d, 0xd3
xor r8d, r8d
xor ecx, ecx
call fcn.18001d520
test al, al
je 0x180035e1e
mov rax, qword [rbp - 9]
lea rcx, [rbp - 0x51]
xor edx, edx
mov qword [rbp - 0x51], rax
mov r8d, 0xfd
call fcn.18000d1f0
mov r9, qword [rbp + 0x77]
mov r8d, 1
mov rdx, qword [rbp - 9]
mov rcx, rax
mov qword [r13], rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 1
je 0x180035b4b
mov edi, 0x78
nop
mov eax, edi
sub eax, 0x77
je 0x180035e16
cmp eax, 1
jne 0x180035b41
mov rcx, qword [r13]
xor r8d, r8d
mov edx, 0x10a
call fcn.18000d640
dec edi
cmp edi, 0x76
ja 0x180035b20
mov edi, dword [rbp + 0x67]
mov byte [rbp - 0x31], 1
jmp 0x180035dee
mov rax, qword [r8]
lea rdx, [rbp - 0x29]
mov qword [rbp - 0x51], rax
lea rcx, [rbp - 0x39]
mov rax, qword [r9]
mov r8d, 0x8c
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x51]
mov rax, qword [r13]
mov qword [rbp - 0x29], rax
call fcn.1800342a0
mov qword [rbp - 0x29], rax
jmp 0x180035dee
cmp qword [rbp - 0x29], 0xffffffffffffffff
jne case.0x180035abd.2
xor eax, eax
jmp 0x180035e26
mov rcx, qword [r13]
mov edi, 0xbd
mov qword [rbp - 0x51], rcx
nop dword [rax]
mov eax, edi
sub eax, 0xbc
je 0x180035c17
sub eax, 1
je 0x180035bf8
sub eax, 3
je 0x180035c17
cmp eax, 1
jne 0x180035c0d
mov eax, dword [pe_dos_header]
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x21]
mov dword [rbp - 0x39], eax
lea rdx, [rbp - 0x51]
mov dword [rbp - 0x21], 1
mov ecx, 0xd0
call fcn.18002ce40
mov rcx, qword [rbp - 0x51]
mov dword [rbp - 1], eax
jmp 0x180035c0d
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x180035c00
mov qword [rbp - 1], rax
dec edi
cmp edi, 0xb9
ja 0x180035bb0
mov rcx, qword [rbp + 0x5f]
mov edi, 0xbd
mov r12, qword [rbp - 1]
mov rcx, qword [rcx]
mov qword [rbp - 0x51], rcx
nop dword [rax + rax]
mov eax, edi
sub eax, 0xbc
je 0x180035c97
sub eax, 1
je 0x180035c78
sub eax, 3
je 0x180035c97
cmp eax, 1
jne 0x180035c8d
mov eax, dword [pe_dos_header]
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x19]
mov dword [rbp - 0x39], eax
lea rdx, [rbp - 0x51]
mov dword [rbp - 0x19], 1
mov ecx, 0xd0
call fcn.18002ce40
mov rcx, qword [rbp - 0x51]
mov dword [rbp + 7], eax
jmp 0x180035c8d
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x180035c80
mov qword [rbp + 7], rax
dec edi
cmp edi, 0xb9
ja 0x180035c30
mov rsi, qword [rbp + 7]
mov edi, dword [rbp + 0x67]
jmp 0x180035dee
mov rcx, qword [rbp + 0x7f]
mov edi, 0xbd
mov rcx, qword [rcx]
mov qword [rbp - 0x51], rcx
mov eax, edi
sub eax, 0xbc
je 0x180035d19
sub eax, 1
je 0x180035cfb
sub eax, 3
je 0x180035d19
cmp eax, 1
jne 0x180035d0f
mov eax, dword [pe_dos_header]
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x11]
mov dword [rbp - 0x39], eax
lea rdx, [rbp - 0x51]
mov dword [rbp - 0x11], 1
mov ecx, 0xd0
call fcn.18002ce40
mov rcx, qword [rbp - 0x51]
mov dword [rbp + 0xf], eax
jmp 0x180035d0f
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x180035d02
mov qword [rbp + 0xf], rax
dec edi
cmp edi, 0xb9
ja 0x180035cb3
mov r15, qword [rbp + 0xf]
mov ecx, 0x5c
mov rdx, r15
sub rdx, rsi
inc rdx
nop dword [rax + rax]
cmp ecx, 0x5c
je 0x180035d45
add ecx, 0x86
cmp ecx, 0x168
jb 0x180035d30
jmp 0x180035d61
lea rax, [rdx + r12]
mov r8d, 0xfd
xor edx, edx
mov qword [rbp - 0x51], rax
lea rcx, [rbp - 0x51]
call fcn.18000d1f0
mov rbx, rax
mov rax, qword [r13]
lea r8, [rbp - 0x51]
mov rdi, qword [rbp - 0x29]
lea rdx, [rbp - 0x39]
mov r9d, 0x5e
mov qword [rbp - 0x51], rdi
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x41], rax
mov r14, rbx
mov qword [rbp - 0x39], rbx
call fcn.180033820
lea rax, [rbx + rdi]
mov r8d, 0x89
mov qword [rbp - 0x51], rax
lea rdx, [rbp - 0x41]
mov rax, qword [rbp + 0x7f]
lea rcx, [rbp - 0x51]
mov rax, qword [rax]
mov qword [rbp - 0x41], rax
call fcn.180035f90
mov edi, dword [rbp + 0x67]
jmp 0x180035dee
mov qword [rbp - 0x31], r14
jmp case.0x180035abd.2
lea rax, [r14 + r15]
mov r8d, 0x89
add rax, qword [rbp - 0x29]
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x51], rax
lea rcx, [rbp - 0x51]
mov rax, qword [r13]
add rax, rsi
add rax, qword [rbp - 0x29]
mov qword [rbp - 0x41], rax
call fcn.180035f90
mov r9, qword [rbp + 0x77]
lea r10, [0x180000000]
mov edx, dword [rbp - 0x45]
mov eax, dword [rbp - 0x49]
inc edi
inc edx
mov dword [rbp + 0x67], edi
mov dword [rbp - 0x45], edx
cmp edi, eax
jae case.0x180035abd.1
mov r8, qword [rbp + 0x5f]
jmp 0x180035aa7
mov qword [r13], 0
mov byte [rbp - 0x31], 0
mov rax, qword [rbp - 0x31]
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret