Function at 0x180063e50
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1800f10e0]
xor rax, rsp
mov qword [rbp + 0x160], rax
mov rax, qword [rbp + 0x1e0]
mov rdi, r9
mov qword [rsp + 0x48], rax
mov rsi, r8
xor eax, eax
mov r13, rdx
mov qword [rsp + 0x30], rax
mov r15, rcx
mov qword [rsp + 0x38], rax
mov ebx, eax
mov qword [rdx], rax
mov r12d, eax
test r8, r8
je 0x1800642db
call fcn.1800643b0
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x180063ec9
lea eax, [r12 + 0x1b]
jmp 0x1800642db
test rdi, rdi
mov qword [rsp + 0x20], rax
lea r9, str.Content_Type:_multipart_form_data
cmovne r9, rdi
lea r8, str._s__boundary_s_r_n
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
je 0x180063f07
mov rcx, qword [rsp + 0x40]
call qword [fcn.18007314c]
mov eax, edi
jmp 0x1800642db
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x278], r14
nop
test rbx, rbx
je 0x180063f45
lea r8, [0x1800daa98]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov r9, qword [rsp + 0x40]
lea r8, str.___s_r_n
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
lea r8, str.Content_Disposition:_form_data__name_
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
movsxd r9, dword [rsi + 0x10]
lea rax, [rsp + 0x38]
mov r8, qword [rsi + 8]
lea edx, [rdi + 1]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.180063a20
mov edi, eax
test eax, eax
jne 0x1800642b3
lea r8, [0x1800d943c]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
cmp qword [rsi + 0x48], 0
je 0x18006401a
mov rcx, r12
call qword [fcn.18007314c]
mov rcx, r15
call fcn.1800643b0
mov r12, rax
test rax, rax
je 0x180064338
mov r9, rax
lea r8, str._r_nContent_Type:_multipart_mixed__boundary_s_r_n
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov r14, rsi
nop dword [rax]
cmp qword [rsi + 0x48], 0
je 0x180064062
mov r9, r12
lea r8, str._r_n___s_r_nContent_Disposition:_attachment
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
lea r8, [rsp + 0x38]
mov rcx, r14
lea rdx, [rsp + 0x30]
call fcn.1800643f0
mov edi, eax
test eax, eax
jmp 0x18006408a
mov eax, dword [rsi + 0x50]
test al, 0x51
je 0x180064090
cmp qword [rsi + 0x58], 0
jne 0x180064074
test al, 1
je 0x180064088
lea r8, [rsp + 0x38]
mov rcx, rsi
lea rdx, [rsp + 0x30]
call fcn.1800643f0
mov edi, eax
test edi, edi
jne 0x1800642b3
mov r9, qword [r14 + 0x38]
test r9, r9
je 0x1800640b9
lea r8, str._r_nContent_Type:__s
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov rbx, qword [r14 + 0x40]
test rbx, rbx
je 0x1800640fe
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rbx]
lea r8, str._r_n_s
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1800640d0
jmp 0x180064106
test edi, edi
jne 0x1800642b3
lea r8, str._r_n_r_n
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov eax, dword [rsi + 0x50]
test al, 3
jne 0x1800641a3
test al, 0x10
je 0x18006413b
movsxd r9, dword [rsi + 0x30]
mov r8, qword [rsi + 0x28]
jmp 0x180064183
test al, 0x40
je 0x180064171
test al, al
jns 0x180064149
mov r9, qword [rsi + 0x68]
jmp 0x18006414d
movsxd r9, dword [rsi + 0x20]
mov r8, qword [rsi + 0x60]
lea rax, [rsp + 0x38]
mov edx, 3
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x30]
call fcn.180063a20
mov edi, eax
jmp 0x1800642a2
test al, al
jns 0x18006417b
mov r9, qword [rsi + 0x68]
jmp 0x18006417f
movsxd r9, dword [rsi + 0x20]
mov r8, qword [rsi + 0x18]
mov edx, 2
lea rax, [rsp + 0x38]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.180063a20
mov edi, eax
jmp 0x1800642a2
mov rcx, qword [r14 + 0x18]
movzx eax, byte [0x1800d93f4]
cmp al, byte [rcx]
jne 0x1800641c7
movzx eax, byte [0x1800d93f5]
cmp al, byte [rcx + 1]
jne 0x1800641c7
xor ecx, ecx
call fcn.180077b90
jmp 0x1800641d3
lea rdx, [0x1800daa9c]
call fcn.180078c48
mov rbx, rax
test rax, rax
je 0x18006427d
xor ecx, ecx
call fcn.180077b90
cmp rbx, rax
je 0x180064200
mov rcx, rbx
call fcn.180077c9c
mov r8, qword [r14 + 0x18]
xor r9d, r9d
lea edx, [r9 + 4]
jmp 0x180064188
mov r9, rbx
lea rcx, [rsp + 0x60]
mov edx, 1
mov r8d, 0x200
call fcn.18007ec54
test rax, rax
je 0x1800642a2
lea rcx, [rsp + 0x38]
mov r9, rax
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x60]
lea rcx, [rsp + 0x30]
mov edx, 2
call fcn.180063a20
mov edi, eax
test eax, eax
jne 0x1800642a2
mov rcx, rbx
call fcn.180080428
test eax, eax
jne 0x1800642a2
mov rcx, rbx
call fcn.180080454
test eax, eax
jne 0x1800642a2
mov r9, rbx
lea edx, [rdi + 1]
mov r8d, 0x200
lea rcx, [rsp + 0x60]
call fcn.18007ec54
test rax, rax
jne 0x180064221
jmp 0x1800642a2
test r15, r15
je 0x180064295
mov r8, qword [r14 + 0x18]
lea rdx, str.couldnt_open_file___s_
mov rcx, r15
call fcn.180042620
mov qword [r13], 0
mov edi, reloc.WLDAP32.dll_Ordinal_26
mov r14, qword [r14 + 0x48]
test r14, r14
je 0x1800642fc
test edi, edi
je 0x180064020
lea rcx, [rsp + 0x58]
call fcn.180063dc0
mov rcx, r12
call qword [fcn.18007314c]
mov rcx, qword [rsp + 0x40]
call qword [fcn.18007314c]
mov eax, edi
mov r14, qword [rsp + 0x278]
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.18006c2f0
add rsp, 0x280
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test edi, edi
jne 0x1800642b3
cmp qword [rsi + 0x48], 0
je 0x180064326
mov r9, r12
lea r8, str._r_n___s__
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov rsi, qword [rsi]
test rsi, rsi
je 0x180064342
mov rbx, qword [rsp + 0x38]
jmp 0x180063f20
mov edi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1800642b3
test edi, edi
jne 0x1800642b3
mov rbx, qword [rsp + 0x40]
lea r8, str._r_n___s___r_n
mov r9, rbx
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.180063bc0
mov edi, eax
test eax, eax
jne 0x1800642b3
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x38]
mov qword [rcx], rax
mov rcx, r12
call qword [fcn.18007314c]
mov rcx, rbx
call qword [fcn.18007314c]
mov rax, qword [rsp + 0x50]
mov qword [r13], rax
xor eax, eax
jmp 0x1800642d3