Function at 0x180011600
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
imul r12d, r8d, 0x378
mov rsi, r9
mov r14d, r8d
mov r13, rdx
mov rdi, rcx
mov ebp, r8d
cmp r8d, r12d
ja 0x18001179b
mov r15, qword [rsp + 0x60]
xor ebx, ebx
cmp ebp, 0x72
ja 0x180011851
je 0x180011740
mov eax, ebp
sub eax, 1
je 0x18001170b
sub eax, 0x42
je 0x1800118b5
sub eax, 0x19
je 0x180011678
cmp eax, 0x14
je 0x180011889
jmp 0x1800118a1
mov r9, qword [rsi + 0x70]
mov rax, qword [r9 + 0x40]
test rax, rax
je 0x18001169c
mov r8d, 2
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call rax
cdqe
jmp 0x1800116b6
mov r9, qword [r9 + 0x38]
lea rcx, [rsp + 0xb0]
mov edx, 1
lea r8d, [rdx + 1]
call fcn.180079e64
cmp rax, 2
je 0x1800116ef
mov ecx, 0xbd
mov eax, ecx
sub eax, 0xbb
je 0x18001179b
sub eax, 1
je 0x1800116e1
cmp eax, 1
jne 0x1800116e5
mov dword [rsi + 0x60], 0x66
jmp 0x1800116e5
mov dword [rsp + 0x58], ebx
dec ecx
cmp ecx, 0xba
ja 0x1800116c1
movzx ecx, byte [rsp + 0xb1]
movzx eax, byte [rsp + 0xb0]
shl ecx, 8
or ecx, eax
mov dword [rdi], ecx
jmp 0x1800118a1
xor r9d, r9d
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rbx
xor edx, edx
mov qword [rsp + 0x60], 0x38
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x44]
call fcn.18005ae80
mov r15, rax
jmp 0x1800118a1
cmp byte [rdi + 0x35a8], 0
jne 0x180011761
lea rdx, str._s:_private_key__s_contents_do_not_match_public
mov rcx, rsi
call fcn.18003d6d0
mov dword [rsp + 0x58], ebx
jmp 0x1800118a1
cmp byte [rdi + 0x35a9], 0
jne 0x180011782
lea rdx, str.each_rule_must_have_a_pattern_or_an_action_part
mov rcx, rsi
call fcn.18003d6d0
mov dword [rsp + 0x58], ebx
jmp 0x1800118a1
mov ebx, 0xe0
cmp ebx, 0xe0
je 0x1800117be
cmp ebx, 0x1340
jne 0x180011837
mov rax, qword [rsp + 0x58]
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
movsxd rax, dword [rdi + 0x3528]
test eax, eax
jne 0x1800117ce
mov rcx, qword [rdi]
jmp 0x1800117dc
imul rcx, rax, 0x88
add rcx, 0x10
add rcx, rdi
mov eax, dword [rdi + 0x3570]
lea r8, [rsp + 0x50]
mov r9, qword [rdi + 0x3560]
mov rdx, qword [rdi + 0x3530]
mov dword [rsp + 0x50], eax
mov eax, dword [rdi + 0x35ac]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x3548]
mov dword [rsp + 0x48], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov ecx, 0x19
mov qword [rsp + 0x20], rax
call fcn.18006b100
movzx ecx, al
mov dword [rsp + 0x58], ecx
add ebx, 0x1260
cmp ebx, 0x24c0
jbe 0x180011787
xor ebx, ebx
mov dword [rsp + 0x58], ebx
jmp 0x1800118a1
cmp ebp, 0xdf
je 0x1800118f0
cmp ebp, 0x2840
je 0x180011873
cmp ebp, 0x31e0
je 0x18001179b
jmp 0x1800118a1
mov eax, pe_nt_image_headers64
cmp eax, 0x108
je 0x1800118de
add eax, 0x12
cmp eax, 0x11a
jb 0x180011878
mov eax, dword [rsi]
lea rcx, [rsp + 0x50]
mov r8, r15
mov dword [rsp + 0x50], eax
mov edx, 0x123
call fcn.180039290
imul eax, r14d, 0x6f
add ebp, eax
cmp ebp, r12d
jbe 0x180011642
jmp 0x18001179b
cmp dword [rsi], 1
jl 0x1800118d4
jne 0x1800118ca
cmp dword [rdi], 2
jl 0x1800118d4
jne 0x1800118ca
cmp dword [r13], 3
jle 0x1800118d4
mov byte [rsp + 0x58], 0
jmp 0x18001179b
mov byte [rsp + 0x58], 1
jmp 0x18001179b
mov dword [rsp + 0x58], 1
jmp 0x18001179b
mov rax, r15
jmp 0x1800117a0