Function at 0x18000ce60
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9b0]
sub rsp, 0xab0
mov rax, qword [0x1800a5088]
xor rax, rsp
mov qword [rbp + 0x9a0], rax
imul r14d, edx, 0x12c
mov edi, edx
mov r13d, edx
mov qword [rsp + 0x58], r8
xor edx, edx
mov qword [rsp + 0x50], rcx
mov r12, r8
cmp edi, r14d
ja 0x18000d121
mov rbx, qword [rsp + 0x58]
mov r15, rcx
mov rsi, qword [rsp + 0x58]
mov eax, edi
sub eax, 0x3f
je 0x18000d0ec
sub eax, 0x65
je 0x18000d0d5
sub eax, 0x22
je 0x18000d00a
sub eax, 0x264e
je 0x18000cf94
cmp eax, 0x2670
jne 0x18000d10d
mov rcx, rbx
call fcn.1800574a0
test eax, eax
jne 0x18000d16b
mov r8, rbx
mov byte [rbp + 0x68f], al
mov edx, 0x8e
xor ecx, ecx
call fcn.180025100
test eax, eax
jne 0x18000d18b
xor eax, eax
mov r8d, 0x1ff
mov r9d, eax
lea eax, [rsi - 1]
movsxd rdx, eax
test eax, eax
js 0x18000d003
nop word [rax + rax]
movzx eax, byte [rbp + rdx + 0x490]
lea ecx, [rax - 0x30]
cmp cl, 9
ja 0x18000cf54
sub al, 0x30
jmp 0x18000cf6a
lea ecx, [rax - 0x61]
cmp cl, 5
ja 0x18000cf60
sub al, 0x57
jmp 0x18000cf6a
lea ecx, [rax - 0x41]
cmp cl, 5
ja 0x18000cf87
sub al, 0x37
test r9d, r9d
jne 0x18000cf75
mov byte [r12 + r8], al
jmp 0x18000cf83
shl al, 4
or al, byte [r12 + r8]
mov byte [r8 + r12], al
dec r8
xor r9d, 1
sub rdx, 1
jns 0x18000cf40
xor edx, edx
jmp 0x18000d10d
xor edx, edx
lea rcx, [rbp + 0x490]
mov r8d, 0x200
call fcn.1800544b0
mov eax, dword [r15]
lea rdx, str.1449
mov dword [rsp + 0x30], eax
lea rcx, [0x18008fbfc]
lea rax, [rsp + 0x30]
mov dword [rsp + 0x28], 0x4a
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call fcn.18001e840
mov rbx, rax
test rax, rax
je 0x18000d18b
mov r9, rax
lea rcx, [rbp + 0x490]
mov edx, 1
mov r8d, 0x200
call fcn.1800632f8
mov rsi, rax
xor edx, edx
jmp 0x18000d10d
mov edx, 0x80
lea rcx, [rbp - 0x70]
call fcn.1800107e0
xor r9d, r9d
mov dword [rsp + 0x20], 0x3a
xor r8d, r8d
lea rcx, [rsp + 0x68]
xor edx, edx
call fcn.180013660
xor r9d, r9d
mov dword [rsp + 0x38], 2
lea rax, [rbp - 0x70]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x68]
lea edx, [r9 + 0x47]
call fcn.18003ce60
test al, al
je 0x18000d003
xor r15d, r15d
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x18000d0a1
mov rcx, qword [rsp + 0x68]
mov r9d, 0x80
xor r8d, r8d
call fcn.18002d200
test al, al
je 0x18000d0a1
mov eax, dword [rbp - 0x80]
lea r8, [rsp + 0x38]
mov r9d, 0x4c
mov dword [rsp + 0x38], eax
xor edx, edx
mov qword [rsp + 0x20], r15
xor ecx, ecx
call fcn.180008f40
xor r9d, r9d
mov dword [rsp + 0x38], 2
lea rax, [rbp - 0x70]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x68]
lea edx, [r9 + 0x47]
call fcn.18003ce60
test al, al
jne 0x18000d060
mov r15, qword [rsp + 0x50]
xor edx, edx
jmp 0x18000d10d
mov rsi, rdx
mov r8d, 0x200
xor edx, edx
mov rcx, r12
call fcn.1800544b0
xor edx, edx
jmp 0x18000d10d
mov eax, dword [0x180091424]
mov dword [rbp + 0x468], eax
movzx eax, word [0x180091428]
mov word [rbp + 0x46c], ax
mov word [rbp + 0x46e], dx
imul eax, r13d, 0x3c
add edi, eax
cmp edi, r14d
jbe 0x18000cec1
mov rcx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x48]
mov r14d, r13d
imul r15d, r13d, 0x17c
mov dword [rsp + 0x30], ebx
cmp r13d, r15d
ja 0x18000d2ae
nop dword [rax]
mov eax, r14d
sub eax, 0x93
je 0x18000d1c1
sub eax, 0x11
je 0x18000d1b6
sub eax, 0x22
je 0x18000d1a3
sub eax, 0x2b71
je 0x18000d195
cmp eax, 0x2ba4
je case.0x18000d30d.6
jmp 0x18000d283
lea rdx, str.federal_advisory_committee_for
mov ecx, 4
call fcn.18003cb00
mov r8, rbx
mov edx, 0x8e
xor ecx, ecx
call fcn.180025100
mov eax, 1
jmp 0x18000d632
mov ebx, 1
mov dword [rsp + 0x30], ebx
jmp 0x18000d283
mov edx, 0xcc
lea rcx, [rbp - 0x70]
call fcn.180025270
jmp 0x18000d281
mov ebx, edx
mov dword [rsp + 0x30], edx
jmp 0x18000d283
mov eax, dword [rcx]
lea r9, [rsp + 0x40]
mov rcx, qword [0x1800a9db8]
mov r8d, 0x9d
mov qword [rsp + 0x20], rdx
xor edx, edx
mov dword [rsp + 0x40], eax
call fcn.180012e00
test eax, eax
jne 0x18000d2a4
mov rdx, qword [0x1800af360]
lea r8, [rsp + 0x60]
xor eax, eax
xor r9d, r9d
mov ecx, 0xae
mov qword [rsp + 0x20], rax
call fcn.1800298d0
test eax, eax
jne 0x18000d632
mov esi, dword [rsp + 0x60]
xor edx, edx
mov edi, edx
test esi, esi
je 0x18000d283
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp + 0x220]
mov dword [rsp + 0x40], edi
mov edx, 0xa4
lea rcx, [rsp + 0x40]
call fcn.18000ce60
test eax, eax
jne 0x18000d632
mov rax, qword [rsp + 0x50]
lea rdx, [rsp + 0x48]
xor r9d, r9d
lea rcx, [rbp + 0x220]
mov r8d, 0xbf
mov eax, dword [rax]
mov dword [rsp + 0x48], eax
call fcn.180044260
test eax, eax
jne 0x18000d299
inc edi
cmp edi, esi
jb 0x18000d230
xor edx, edx
imul eax, r13d, 0x4c
add r14d, eax
cmp r14d, r15d
ja 0x18000d2ae
mov rcx, qword [rsp + 0x50]
jmp 0x18000d140
mov dword [r12], edi
xor eax, eax
jmp 0x18000d632
mov eax, 2
jmp 0x18000d632
lea esi, [r13 + 7]
mov ecx, 0x65
lea r14, [0x180000000]
cmp r13d, esi
jae 0x18000d413
lea edi, [r13 - 0x3f]
mov r8d, 0x6150
lea edx, [rcx + 0xe]
lea r10d, [rcx - 0x1f]
lea r11d, [rcx + 4]
lea r12d, [rcx + 7]
lea r15d, [rcx - 0x32]
lea r9d, [rcx - 1]
nop dword [rax + rax]
cmp edi, 0x65
ja case.default.0x18000d30d
movzx eax, byte [r14 + rdi + 0xd67c]
mov ecx, dword [r14 + rax*4 + 0xd65c]
add rcx, r14
jmp rcx
xor eax, eax
mov word [rbp + 0x438], r8w
mov word [rbp + 0x460], ax
jmp case.0x18000d30d.7
mov word [rbp + 0x43e], r10w
mov word [rbp + 0x43f], r11w
mov word [rbp + 0x440], r12w
mov dword [rbp + 0x43a], 0x794d6874
jmp case.0x18000d30d.7
mov r8d, 3
lea rdx, [0x180091504]
lea rcx, [rbp + 0x468]
call fcn.1800568cc
mov word [rbp + 0x474], r15w
mov dword [rbp + 0x476], 0x2e0032
jmp 0x18000d3e9
mov dword [rbp + 0x448], 0x730073
mov dword [rbp + 0x44c], 0x65006c
jmp case.0x18000d30d.7
mov dword [rbp + 0x450], 0x790061
mov word [rbp + 0x454], r15w
mov dword [rbp + 0x456], 0x2e0032
mov word [rbp + 0x45a], r9w
mov dword [rbp + 0x45c], 0x6c006c
jmp case.0x18000d30d.7
xor eax, eax
mov dword [rbp + 0x47a], 0x6c0064
lea rdx, [0x180091550]
mov word [rbp + 0x47e], ax
lea rcx, [rbp + 0x468]
lea r8d, [rax + 1]
call fcn.1800568cc
mov r11d, 0x69
mov r8d, 0x6150
lea r10d, [r11 - 0x23]
lea r9d, [r11 - 5]
lea edx, [r11 + 0xa]
mov ecx, 0x65
inc edi
lea eax, [rdi + 0x3f]
cmp eax, esi
jb 0x18000d2f0
lea r15d, [r13 + 5]
cmp r13d, r15d
jae case.0x18000d30d.6
mov r12, qword [rsp + 0x58]
mov edx, 0x6444
mov r14, qword [rsp + 0x58]
mov r8d, 0x614c
mov rbx, qword [rsp + 0x58]
nop word [rax + rax]
mov eax, r13d
sub eax, 0x3f
je 0x18000d5c9
sub eax, 1
je 0x18000d5c1
sub eax, 1
je 0x18000d5b3
sub eax, 1
je 0x18000d490
cmp eax, 1
jne 0x18000d610
mov r8d, 0x104
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0x438]
call qword [sym.imp.KERNEL32.dll_GetShortPathNameA]
xor eax, eax
mov qword [rbx], rax
jmp 0x18000d610
xor eax, eax
lea rbx, [0x180000000]
mov edi, eax
lea esi, [rax + 7]
nop
cmp edi, 0x4e
ja case.0x18000d4bd.7
mov eax, edi
movzx eax, byte [rbx + rax + 0xd704]
mov ecx, dword [rbx + rax*4 + 0xd6e4]
add rcx, rbx
jmp rcx
mov word [rbp + 0x420], dx
mov byte [rbp + 0x422], 0
jmp case.0x18000d4bd.7
mov r8, r12
mov byte [rbp + 0x432], 0
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x7a0]
call fcn.1800011d0
mov edx, 0x6444
mov r8d, 0x614c
jmp case.0x18000d4bd.7
movzx eax, word [0x18009156f]
mov word [rbp + 0x428], ax
movzx eax, byte [0x180091571]
mov byte [rbp + 0x42a], al
mov byte [rbp + 0x42b], 0
jmp case.0x18000d4bd.7
mov dword [rbp + 0x422], 0x74654765
mov word [rbp + 0x426], r8w
jmp case.0x18000d4bd.7
mov r8d, 2
mov byte [rbp + 0x42f], 0
lea rdx, [0x180091584]
lea rcx, [rbp + 0x42f]
call fcn.18005c310
mov edx, 0x6444
mov byte [rbp + 0x431], 0
mov r8d, 0x614c
jmp case.0x18000d4bd.7
mov r8d, 3
lea rdx, [0x1800915ae]
lea rcx, [rbp + 0x42b]
call fcn.18005c310
mov edx, 0x6444
mov byte [rbp + 0x42e], 0x72
mov r8d, 0x614c
jmp case.0x18000d4bd.7
mov byte [rbp + 0x431], 0x70
add edi, 0xd
sub rsi, 1
jne 0x18000d4a0
mov rbx, qword [rsp + 0x58]
jmp 0x18000d610
mov rax, qword [rsp + 0x50]
mov qword [rax], 0
jmp 0x18000d610
mov rcx, qword [rbx]
call r14
jmp 0x18000d610
mov edx, 0x95
mov word [rbp + 0x441], cx
lea rcx, [rbp + 0x468]
lea r8d, [rdx - 0x65]
call fcn.1800269e0
mov edx, 0x95
lea rcx, [rbp + 0x448]
mov r8d, 8
mov r14, rax
call fcn.1800269e0
mov rcx, qword [rsp + 0x50]
mov r12, qword [sym.imp.USER32.dll_DdeGetLastError]
mov rcx, qword [rcx]
call rax
inc r13d
mov edx, 0x6444
mov ecx, 0x65
mov r8d, 0x614c
cmp r13d, r15d
jb 0x18000d440
mov ebx, dword [rsp + 0x30]
mov eax, ebx
mov rcx, qword [rbp + 0x9a0]
xor rcx, rsp
call fcn.180051f60
mov rbx, qword [rsp + 0xaf8]
add rsp, 0xab0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret