Function at 0x180033660
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd58]
sub rsp, 0xe58
xor edx, edx
lea ebx, [r8 - 0x12]
mov eax, 0xffffffff
mov dword [rsp + 0x40], ebx
mov dword [rbp - 0x38], eax
lea r10, [0x180000000]
mov eax, r8d
mov qword [rbp - 0x40], rdx
cmp r8d, ebx
mov dword [rsp + 0x58], eax
mov ebx, dword [rbp + 0xdb0]
mov rdi, r9
mov r15d, r8d
mov qword [rbp - 0x34], rdx
mov r12, rcx
mov qword [rbp - 0x2c], rdx
mov qword [rbp - 0x24], rdx
jbe 0x180033cd2
mov r13, qword [rsp + 0x60]
lea r8, str.1234
mov edi, dword [rbp + 0xdb0]
lea r9, [0x180013ec0]
mov r15d, dword [rbp + 0xdb0]
mov r11d, 0xffffffff
mov ecx, dword [rsp + 0x40]
add eax, 0xffffff14
cmp eax, 0x4c
ja case.default.0x180033723
movzx eax, byte [r10 + rax + 0x34218]
mov ecx, dword [r10 + rax*4 + 0x341cc]
add rcx, r10
jmp rcx
mov byte [rsp + 0x6e], 0x6f
jmp case.0x180033723.254
mov dword [rbp + 0x64], 2
jmp case.0x180033723.254
lea r8, [rbp - 0x40]
mov edx, 0xfd
xor ecx, ecx
call fcn.180013f20
xor edx, edx
lea r8, str.1234
lea r9, [0x180013ec0]
mov r11d, 0xffffffff
lea r10, [0x180000000]
jmp case.0x180033723.254
mov eax, 0xd1
cmp eax, 0xd1
je 0x180033d6a
add eax, 0x2c16
cmp eax, 0x2c16
jbe 0x180033772
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor edx, edx
xor r8d, r8d
mov ecx, 0xda
call fcn.180026e70
test eax, eax
je 0x180033911
mov r14d, 0xec
nop
cmp r14d, 0xec
je 0x1800337e6
cmp r14d, 0x174
jne 0x1800338f8
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xae
call fcn.180026e70
jmp 0x1800338f8
mov r8d, dword [0x18007c1a8]
lea r9, [0x18007de08]
mov rcx, qword [0x18007de00]
mov edx, 2
shl r8d, 0x10
or r8d, 1
call qword [sym.imp.ADVAPI32.dll_CryptGenKey]
test eax, eax
je 0x1800338e6
mov esi, 0x46
nop dword [rax + rax]
mov eax, esi
sub eax, 0x46
je 0x180033883
sub eax, 1
je 0x180033847
cmp eax, 1
jne 0x1800338d9
xor r8d, r8d
lea edx, [rax + 0x34]
xor ecx, ecx
call fcn.1800172d0
jmp 0x1800338d9
lea r9, [rsp + 0x48]
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov dword [rsp + 0x48], 7
lea rdx, str.26_35_28_J
mov ecx, 0x89
call fcn.180023ea0
lea rdx, str.MapBytesToUtf16
mov dword [rsp + 0x50], 7
jmp 0x1800338bd
lea r9, [rsp + 0x50]
mov dword [rsp + 0x48], 0
lea r8, [rsp + 0x48]
mov dword [rsp + 0x50], 6
lea rdx, str.nativeLayout
mov ecx, 0x89
call fcn.180023ea0
lea rdx, str.T_74__AR.x_.W
mov dword [rsp + 0x50], 6
lea r9, [rsp + 0x50]
mov dword [rsp + 0x48], 1
lea r8, [rsp + 0x48]
mov ecx, 0x89
call fcn.180023ea0
inc esi
cmp esi, 0x49
jb 0x180033820
jmp 0x1800338f8
mov edx, dword [0x18007c1a8]
lea rcx, str.NaClAppLoadFile
call fcn.18003edc0
add r14d, 0x88
cmp r14d, 0x1fc
jb 0x1800337b0
jmp 0x18003374b
lea rcx, str.sbidFsSplitDropButton
call fcn.18003edc0
jmp 0x18003374b
mov dword [rbp + 0x68], 0xffffffff
jmp case.0x180033723.254
mov r8d, 1
lea rdx, [0x1800626c8]
lea rcx, [rsp + 0x68]
call fcn.180047330
mov dword [rsp + 0x70], 0x74656b
jmp 0x18003374b
mov qword [rbp + 0x58], rdx
jmp case.0x180033723.254
mov r9, qword [rbp + 0xdb8]
lea rdx, [rbp + 0x120]
xor r8d, r8d
mov ecx, 0x114
call fcn.180023ea0
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0x120]
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
jmp 0x18003374b
movzx eax, word [0x1800626cc]
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800626d0]
mov word [rsp + 0x6c], ax
movzx eax, byte [0x1800626d2]
mov byte [rsp + 0x6e], al
jmp case.0x180033723.254
mov rcx, r8
mov qword [rbp + 0x50], r8
call fcn.1800485b4
mov dword [rbp + 0x60], eax
jmp 0x18003374b
movzx eax, word [0x1800626dc]
mov word [rsp + 0x68], ax
movzx eax, byte [0x1800626de]
mov byte [rsp + 0x6a], al
jmp case.0x180033723.254
mov byte [rsp + 0x6f], 0
jmp case.0x180033723.254
cmp r13, 0xffffffffffffffff
je 0x180033c4f
mov r14d, 0x121
mov eax, r14d
sub eax, 0x121
je 0x180033c16
sub eax, 1
je 0x180033be1
sub eax, 1
je 0x180033bc7
cmp eax, 1
jne 0x180033c38
test edi, edi
jne 0x180033b83
cmp dword [rbp + 0x424], edi
jne 0x180033b83
mov esi, 6
mov eax, esi
sub eax, 6
je 0x180033b47
sub eax, 0x39
je 0x180033a93
sub eax, 0x39
je 0x180033b40
cmp eax, 0x39
jne 0x180033b61
mov dword [rsp + 0x58], 0x113
jmp 0x180033b61
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x420]
lea rdx, [rbp + 0x424]
mov r8d, 0x800
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180033b61
nop dword [rax]
mov ebx, 0xb4
mov eax, ebx
sub eax, 0xb4
je 0x180033b2f
sub eax, 1
je 0x180033b11
cmp eax, 1
jne 0x180033add
test r15d, r15d
jne 0x180033b40
xor eax, eax
inc ebx
cmp ebx, 0xb7
jb 0x180033ac5
lea r9, [rbp + 0x420]
mov qword [rsp + 0x20], rax
mov r8d, 0x800
lea rdx, [rbp + 0x424]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180033ac0
jmp 0x180033b61
xor r9d, r9d
lea r8, [rbp + 0x420]
mov edx, 0xc2
mov rcx, r12
call fcn.1800342b0
mov rdi, rax
test eax, eax
jmp 0x180033adb
xor eax, eax
cmp dword [rbp + 0x420], eax
mov r15d, eax
sete r15b
jmp 0x180033adf
mov esi, 0x78
jmp 0x180033b61
lea r8, [rbp + 0x224]
lea rdx, [rbp + 0x120]
lea rcx, str.fcache_shared_bb_capacity
call fcn.18003efe0
add esi, 0x39
mov edx, 0
cmp esi, 0xea
jb 0x180033a64
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180033c36
mov ebx, 3
mov eax, ebx
sub eax, 3
je 0x180033ba9
cmp eax, 1
jne 0x180033bb5
lea rdx, [rbp + 0x224]
lea rcx, str.Mon_Jan_19_16:53:25_2009
call fcn.18003edc0
jmp 0x180033bb5
mov ecx, dword [rbp + 0x424]
call qword [sym.imp.KERNEL32.dll_SetLastError]
inc ebx
cmp ebx, 5
jb 0x180033b88
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180033c36
xor r9d, r9d
lea rcx, [rbp + 0x420]
mov r8, r12
lea edx, [r9 + 0x61]
call fcn.180014ba0
mov edi, eax
jmp 0x180033c36
mov r8d, 0x103
lea rdx, [rbp + 0x224]
lea rcx, [rbp + 0x428]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
xor r9d, r9d
lea r8, [rbp + 0x420]
mov edx, 0xc2
mov rcx, r12
call fcn.1800342b0
mov edi, eax
jmp 0x180033c36
lea rcx, [rbp + 0x224]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 4
mov dword [rbp + 0x424], 2
mov dword [rbp + 0x420], eax
xor edx, edx
inc r14d
cmp r14d, 0x125
jb 0x180033a22
mov ebx, edi
jmp 0x18003374b
lea rdx, [rbp + 0x120]
lea rcx, str.getCopyPasteData
call fcn.18003edc0
mov ebx, edi
jmp 0x18003374b
mov rdx, qword [rsp + 0x60]
mov eax, dword [rdx + 8]
mov dword [rbp - 0x38], eax
lea rax, [rdx + 0xc]
mov qword [rbp - 0x34], rax
xor edx, edx
jmp case.0x180033723.254
xor edx, edx
lea rcx, [rbp + 0x40]
mov r8d, 0xa8
call fcn.180043230
jmp 0x18003374b
mov qword [rsp + 0x60], r12
jmp case.0x180033723.254
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x2c], r9
mov rax, qword [rax]
mov qword [rbp - 0x40], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x58]
add eax, r11d
mov dword [rsp + 0x58], eax
cmp eax, ecx
ja 0x180033701
mov r15d, dword [rbp + 0xdb0]
mov rdi, qword [rbp + 0xdb8]
lea r14d, [r15 + 0x8c0]
mov esi, r15d
mov r11d, 0x73
cmp r15d, r14d
jae 0x180033f7f
lea ecx, [r11 - 4]
lea r10d, [r11 + 2]
lea edx, [rcx - 0x21]
lea eax, [rcx + 7]
lea r11d, [rcx - 2]
lea r13d, [rcx - 0x18]
lea r8d, [rcx - 0x2a]
lea r9d, [rcx + 5]
nop dword [rax]
cmp esi, 0x2a6
ja 0x180033ea5
je case.0x180033fe1.0
cmp esi, 0x18e
ja 0x180033e60
je 0x180033dbc
mov eax, esi
sub eax, 0xf0
je 0x180033da4
sub eax, 0x12
je 0x180033d71
sub eax, 0x12
je case.0x180033fe1.0
cmp eax, 0x68
mov eax, 0x76
jne 0x180033f62
mov word [rsp + 0x7d], r10w
mov word [rsp + 0x7e], r11w
jmp 0x180033f62
mov eax, edx
jmp 0x1800341b6
lea rcx, str.var_ay_StringSplit_X___4294967295__
call fcn.18003efe0
mov eax, dword [r12]
lea r9, [rbp + 0xdb0]
mov r8, rdi
mov dword [rbp + 0xdb0], eax
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x40]
call fcn.180038850
jmp 0x180033e40
mov word [rsp + 0x78], r13w
mov eax, 0x76
mov dword [rsp + 0x79], 0x6e454153
jmp 0x180033f62
cmp dword [rbp + 0x68], 0xffffffff
jne 0x180033dce
xor eax, eax
cmp qword [rbp + 0x58], rax
sete al
mov dword [rbp + 0x68], eax
lea rdx, [rbp + 0x40]
mov ecx, 0x9f
call fcn.18001d140
test eax, eax
je 0x180033e40
mov edi, 0xd8
mov eax, edi
sub eax, 0xd8
je 0x180033e11
cmp eax, 1
jne 0x180033e36
xor r9d, r9d
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x40]
mov edx, 0xfa
xor ecx, ecx
call fcn.18002fe90
jmp 0x180033e36
xor ecx, ecx
lea r8, [rbp + 0x40]
cmp dword [rbp + 0x68], 1
jne 0x180033e2c
mov r9d, 0xbf
xor edx, edx
call fcn.180037050
jmp 0x180033e36
mov edx, 0xf7
call fcn.180011b90
inc edi
cmp edi, 0xda
jb 0x180033de5
mov ecx, 0x6f
lea edx, [rcx - 0x21]
lea eax, [rcx + 7]
lea r8d, [rcx - 0x2a]
lea r9d, [rcx + 5]
lea r10d, [rcx + 6]
lea r11d, [rcx - 2]
jmp 0x180033f62
mov eax, esi
sub eax, 0x208
je 0x180033e96
sub eax, 0x12
je 0x180033e8c
cmp eax, 0x7a
mov eax, 0x76
jne 0x180033f62
mov dword [rbp - 0x80], 0x777465
mov word [rbp - 0x7d], cx
jmp 0x180033f62
xor ebx, ebx
lea eax, [rbx + 0x76]
jmp 0x180033f62
mov word [rsp + 0x7f], dx
mov eax, 0x76
jmp 0x180033f62
cmp esi, 0x4c4
ja 0x180033f06
je 0x180033ef2
cmp esi, 0x320
je 0x180033ede
cmp esi, 0x3ac
je 0x180033ed4
cmp esi, 0x438
jne 0x180033f62
mov word [rbp - 0x79], ax
jmp 0x180033f62
mov word [rbp - 0x7a], r8w
jmp 0x180033f62
mov edi, 0x72
mov word [rbp - 0x7c], di
mov edi, 0x6b
mov word [rbp - 0x7b], di
jmp 0x180033f62
mov edi, 0x65
mov word [rbp - 0x78], di
mov edi, 0x6e
mov word [rbp - 0x77], di
jmp 0x180033f62
cmp esi, 0x550
je 0x180033f5d
cmp esi, 0x5dc
je 0x180033f38
cmp esi, 0x668
jne 0x180033f62
mov eax, dword [0x180062779]
mov dword [rbp - 0x6d], eax
movzx eax, byte [0x18006277d]
mov byte [rbp - 0x69], al
mov eax, 0x76
jmp 0x180033f62
mov eax, 0x73
mov word [rbp - 0x75], ax
movzx eax, word [0x180062739]
mov word [rbp - 0x70], ax
movzx eax, byte [0x18006273b]
mov byte [rbp - 0x6e], al
mov eax, 0x76
jmp 0x180033f62
mov word [rbp - 0x76], r9w
add esi, 0x8c
cmp esi, r14d
jae 0x180033f79
mov rdi, qword [rbp + 0xdb8]
jmp 0x180033d10
mov r11d, 0x73
lea esi, [r15 - 0x10]
cmp r15d, esi
jbe case.0x180033fe1.0
mov r12, qword [rsp + 0x60]
lea edi, [r15 - 0xe1]
mov r15, qword [rbp + 0xdc0]
mov edx, 0x6c
mov r13, qword [rsp + 0x60]
mov r14d, dword [rbp + 0xdb0]
lea r8d, [rdx - 0x39]
lea r9d, [rdx - 8]
lea r10d, [rdx + 0xb]
nop dword [rax]
cmp edi, 0xf
ja case.default.0x180033fe1
lea rcx, [0x180000000]
mov ecx, dword [rcx + rdi*4 + 0x34268]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [rbp + 0xda8]
xor r8d, r8d
mov rcx, qword [r15]
mov edx, dword [rax]
mov rax, qword [rbp + 0xda0]
mov rdx, qword [rax + rdx*8]
call r12
jmp 0x180034187
lea r9, str.ws2_32.dll
mov r8d, 0xf5
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x330]
call fcn.180024590
mov r13, qword [rax]
jmp 0x180034187
mov word [rbp - 0x50], r8w
mov dword [rbp - 0x4e], 0x2e0032
jmp case.default.0x180033fe1
lea r9, str.ws2_32.dll
mov r8d, 0xf5
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x380]
call fcn.180024590
lea r9, [rbp - 0x58]
mov r8d, 0xf5
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x3d0]
movups xmm2, xmmword [rax]
movq qword [rsp + 0x60], xmm2
call fcn.180024590
mov r12, qword [rax]
jmp 0x180034187
mov word [rbp - 0x4a], r9w
jmp case.default.0x180033fe1
mov word [rbp - 0x56], r11w
mov dword [rbp - 0x54], 0x5f0032
jmp case.default.0x180033fe1
mov dword [rbp - 0x46], 0x6c
jmp case.default.0x180033fe1
mov byte [rbp - 0x62], 0
mov word [rbp - 0x58], r10w
jmp case.default.0x180033fe1
mov rax, qword [rbp + 0xdb8]
mov r9d, 0xffffffff
mov rdx, qword [rbp + 0xda0]
xor r8d, r8d
mov ecx, dword [rax]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov rcx, qword [r15]
lea r8, [rbp + 0xf0]
mov r14d, eax
mov rax, qword [rbp + 0xda8]
mov edx, dword [rax]
mov rax, qword [rbp + 0xda0]
mov rdx, qword [rax + rdx*8]
call qword [rsp + 0x60]
jmp 0x180034187
mov rcx, qword [r15]
lea r8, [rbp - 0x60]
xor eax, eax
mov edx, 0x8004667e
mov dword [rbp - 0x60], eax
call r13
jmp 0x180034187
test byte [rbp + 0xf0], 0x20
mov ebx, 0xffffffff
cmovne r14d, ebx
mov ebx, r14d
jmp case.default.0x180033fe1
mov byte [rbp - 0x68], 0
jmp case.default.0x180033fe1
mov word [rbp - 0x48], dx
jmp case.default.0x180033fe1
mov rax, qword [rbp + 0xda8]
mov r8d, 0x21
mov rcx, qword [r15]
mov edx, dword [rax]
mov rax, qword [rbp + 0xda0]
mov rdx, qword [rax + rdx*8]
call r12
jmp 0x180034187
mov r8d, 3
lea rdx, [0x1800627b3]
lea rcx, [rbp - 0x70]
call fcn.180047330
movzx eax, word [0x1800627f3]
mov word [rbp - 0x65], ax
movzx eax, byte [0x1800627f5]
mov byte [rbp - 0x63], al
mov edx, 0x6c
lea r8d, [rdx - 0x39]
lea r9d, [rdx - 8]
lea r10d, [rdx + 0xb]
mov eax, 0xffffffff
add edi, eax
lea eax, [rdi + 0xe1]
cmp eax, esi
jbe case.0x180033fe1.0
mov r11d, 0x73
jmp 0x180033fc0
mov eax, ebx
add rsp, 0xe58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret