Function at 0x1800134f0
Capabilities:
Read file on windows

Disassembly:
push rbp
lea rbp, [rsp - 0x40e0]
mov eax, 0x41e0
call fcn.1800a17b0
sub rsp, rax
mov rax, qword [0x1800c37a8]
xor rax, rsp
mov qword [rbp + 0x40a0], rax
lea eax, [r9 + 0x13]
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x60], rdx
mov r10, r8
mov qword [rsp + 0x50], rcx
mov r8, rcx
cmp r9d, eax
jae 0x180013b42
mov qword [rsp + 0x4208], rbx
lea r11, [0x180000000]
movzx ebx, word [rsp + 0x38]
mov qword [rsp + 0x41d8], rsi
mov rsi, qword [rbp - 0x60]
mov qword [rsp + 0x41d0], rdi
lea edi, [r9 - 0xf]
mov qword [rsp + 0x41c8], r12
xor r9d, r9d
movzx r12d, byte [rsp + 0x30]
mov qword [rsp + 0x41c0], r13
mov r13, qword [rbp - 0x60]
mov qword [rsp + 0x41b8], r14
lea eax, [r9 + 0x13]
mov r14d, dword [rsp + 0x6c]
mov qword [rsp + 0x41b0], r15
movzx r15d, byte [rsp + 0x30]
mov dword [rsp + 0x48], edi
mov qword [rsp + 0x40], 0x13
mov qword [rbp - 0x68], rbx
cmp edi, 0x16
ja case.default.0x1800135c7
mov ecx, dword [r11 + rdi*4 + 0x13b5c]
add rcx, r11
jmp rcx
mov byte [rsp + 0x30], 1
mov qword [rbp - 0x70], r9
jmp case.0x1800135c7.15
cmp qword [rsp + 0x70], 0
jne 0x1800135e7
xor r12b, r12b
jmp case.0x1800135c7.15
test r12b, r12b
je case.0x1800135c7.15
mov rbx, qword [rbp - 0x60]
mov edi, 0xe9
nop dword [rax]
cmp edi, 0xe9
je 0x18001368c
cmp edi, 0x1a65
je 0x18001363e
cmp edi, 0x33e1
jne 0x1800136b6
test r12b, r12b
je 0x1800136b6
mov rcx, qword [rbp - 0x70]
call sub.ADVAPI32.dll_LsaFreeMemory
mov rcx, qword [rsp + 0x70]
call sub.ADVAPI32.dll_LsaClose
jmp 0x1800136b3
cmp qword [rbp - 0x70], 0
jne 0x180013655
mov rcx, qword [rsp + 0x70]
call sub.ADVAPI32.dll_LsaClose
xor r12b, r12b
xor r9d, r9d
cmp rsi, 0xffffffffffffffff
movzx eax, r15b
mov ecx, r9d
cmovne ecx, eax
movzx r15d, cl
test cl, cl
je 0x1800136b6
lea rdx, [rsp + 0x78]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1800136b3
mov edx, dword [rsp + 0x78]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
jmp 0x1800136b3
mov rcx, qword [rsp + 0x70]
lea r9, [rsp + 0x7c]
lea r8, [rbp - 0x70]
mov rdx, rbx
mov r15b, 1
call sub.ADVAPI32.dll_LsaEnumerateAccountRights
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rsi, rax
xor r9d, r9d
add edi, 0x197c
cmp edi, 0x4c74
jbe 0x180013600
mov rbx, qword [rbp - 0x68]
mov edi, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x60]
lea r11, [0x180000000]
mov r10, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
jmp case.0x1800135c7.15
movzx eax, word [rdx]
lea rcx, [rsp + 0x48]
xor edx, edx
mov word [rsp + 0x48], ax
mov r9, r10
mov r8d, 0xd8
call fcn.18006b780
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov r8, qword [rsp + 0x50]
lea r11, [0x180000000]
mov r10, qword [rsp + 0x58]
xor r9d, r9d
mov rdx, qword [rsp + 0x60]
jmp case.0x1800135c7.15
lea rcx, [rbp + 0x70]
mov word [rbp + 0x86], r9w
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180013740
movups xmm0, xmmword [str.ec3__a_gl]
mov eax, dword [0x1800b5e18]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
jmp case.0x1800135c7.15
cmp dword [rsp + 0x68], 0
jge 0x18001377a
mov rdx, r10
mov ecx, 0x6b
call fcn.180034d30
xor r9d, r9d
mov rdx, qword [rsp + 0x50]
lea r8, [0x1800c4d40]
mov eax, 0x16
mov word [rsp + 0x48], r9w
mov word [rsp + 0x38], ax
lea rcx, [rsp + 0x38]
lea rax, [rsp + 0x48]
mov r9d, 0xcc
mov qword [rsp + 0x20], rax
call fcn.180016830
mov qword [rbp - 0x68], rax
mov rbx, rax
test ax, ax
jns 0x180013aae
lea rdx, str.List_Editor
mov ecx, 0x6b
call fcn.180034d30
jmp 0x18001370f
mov dword [rbp + 0x9c], 0x3b
mov r12b, 1
jmp case.0x1800135c7.15
xor edx, edx
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__open]
mov dword [rsp + 0x68], eax
jmp 0x18001370f
lea rcx, [rbp + 0x70]
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180013804
mov eax, dword [0x1800a812c]
mov dword [rcx], eax
mov dword [rbp + 0x9a], PathMakeUniqueName
jmp case.0x1800135c7.15
mov eax, dword [0x1800b5e2c]
mov dword [rbp + 0x7a], eax
movabs rax, 0x28006e0061
mov qword [rbp + 0x7e], rax
mov eax, 0x76
mov word [rbp + 0x84], ax
jmp case.0x1800135c7.15
lea rcx, [rbp + 0x70]
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180013860
mov eax, dword [0x1800b5e34]
mov dword [rcx], eax
jmp case.0x1800135c7.15
lea rax, [0x180013bc0]
mov dword [rbp - 0x80], r9d
mov qword [r10], rax
jmp case.0x1800135c7.15
xorps xmm0, xmm0
mov dword [rsp + 0x7c], 1
xor eax, eax
movups xmmword [rbp], xmm0
mov dword [rbp + 0x60], eax
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
jmp case.0x1800135c7.15
lea rcx, [r10 + 0xa]
cmp rcx, r8
je case.0x1800135c7.15
cmp qword [r8 + 0x18], 0x10
mov rdx, r8
jb 0x1800138d2
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.18001d7f0
jmp 0x18001370f
movzx eax, byte [rsp + 0x30]
lea rdx, [rbp - 0x48]
mov r8d, dword [rbp - 0x80]
mov ecx, r9d
test r13, r13
lea r9, [rsp + 0x70]
cmovne ecx, eax
mov byte [rsp + 0x30], cl
lea rcx, [rbp - 0x58]
call sub.ADVAPI32.dll_LsaOpenPolicy
movzx eax, byte [rsp + 0x30]
test al, al
je 0x180013aae
mov ebx, dword [rbp - 0x7c]
mov edi, 6
mov byte [rsp + 0x30], al
cmp edi, 6
je 0x180013996
cmp edi, 0x1b6
je 0x180013974
cmp edi, 0x366
jne 0x1800139a2
xor ecx, ecx
movzx eax, al
test r14d, r14d
cmove ecx, eax
mov byte [rsp + 0x30], cl
movzx eax, cl
test cl, cl
je 0x1800139a2
mov r8d, ebx
lea rdx, [rbp - 0x18]
mov rcx, r13
call qword [sym.imp.WINMM.dll_mmioAscend]
mov edx, reloc.SHELL32.dll_ILFindLastID
mov rcx, r13
mov r14d, eax
call qword [sym.imp.WINMM.dll_mmioClose]
movzx eax, byte [rsp + 0x30]
jmp 0x1800139a2
mov ebx, reloc.SHELL32.dll_ILFindLastID
lea rdx, [rbp - 0x18]
mov r9d, ebx
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.WINMM.dll_mmioDescend]
mov r14d, eax
movzx eax, byte [rsp + 0x30]
jmp 0x1800139a2
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp - 0x18], xmm0
mov dword [rbp - 8], ecx
add edi, 0x1b0
cmp edi, 0x510
jbe 0x180013921
mov edi, dword [rsp + 0x48]
mov dword [rbp - 0x7c], ebx
mov rbx, qword [rbp - 0x68]
jmp 0x18001370f
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
jmp 0x18001370f
mov r8d, dword [rsp + 0x6c]
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x70], r9
call qword [sym.imp.WINMM.dll_mmioOpenW]
xor r9d, r9d
mov r13, rax
mov qword [rbp - 0x60], r9
jmp 0x1800136d0
mov edi, dword [rsp + 0x68]
lea rdx, [rbp + 0xa0]
mov ecx, edi
mov r8d, 0x4000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
test eax, eax
jle 0x180013a7a
nop word [rax + rax]
lea r9, [0x1800c4d40]
mov dword [rbp - 0x78], eax
lea r8, [rbp - 0x78]
mov word [rsp + 0x38], bx
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x20], 0x20
lea rcx, [rbp + 0xa0]
call fcn.1800185c0
test eax, eax
jns 0x180013a61
lea rdx, str._________
mov ecx, 0x6b
call fcn.180034d30
mov r8d, 0x4000
lea rdx, [rbp + 0xa0]
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
test eax, eax
jg 0x180013a20
lea r8, [0x1800c4d40]
mov word [rsp + 0x38], bx
mov edx, 0x3b
lea rcx, [rsp + 0x38]
call fcn.1800147b0
test eax, eax
jns 0x180013aaa
lea rdx, str.ADDIdtprelL
mov ecx, 0x6b
call fcn.180034d30
mov edi, dword [rsp + 0x48]
xor r9d, r9d
jmp 0x1800136d0
xorps xmm0, xmm0
mov dword [rsp + 0x6c], r9d
movups xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x48], 0x30
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
jmp case.0x1800135c7.15
mov eax, dword [0x1800b5e58]
mov dword [rbp + 0x70], eax
mov eax, dword [0x1800b5e60]
mov dword [rbp + 0x74], eax
movzx eax, word [0x1800b5e64]
mov word [rbp + 0x78], ax
mov rax, qword [rsp + 0x40]
inc edi
sub rax, 1
mov dword [rsp + 0x48], edi
mov qword [rsp + 0x40], rax
jne 0x1800135b3
mov r15, qword [rsp + 0x41b0]
mov r14, qword [rsp + 0x41b8]
mov r13, qword [rsp + 0x41c0]
mov r12, qword [rsp + 0x41c8]
mov rdi, qword [rsp + 0x41d0]
mov rsi, qword [rsp + 0x41d8]
mov rbx, qword [rsp + 0x4208]
mov rcx, qword [rbp + 0x40a0]
xor rcx, rsp
call fcn.1800a1820
add rsp, 0x41e0
pop rbp
ret