Function at 0x14001f9b0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov r15, r9
mov rbx, rdx
mov rdi, rcx
lea rdx, [0x1401e559c]
mov rcx, r8
call fcn.1401a5dd0
mov rsi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001fa8a
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.1401aa4bc
mov rcx, rsi
call fcn.1401aaa0c
mov r14, rax
mov qword [rsp + 0x60], rax
mov rcx, rsi
call fcn.1401aaa24
movabs rax, 0xaaaaaaaaaaaaaaab
mul r14
shr rdx, 2
mov eax, 0x100000
cmp rdx, rax
cmova rdx, rax
lea r13, [rdx + r14]
cmp r13, 0x7fffffff
jbe 0x14001fa91
call fcn.14000c980
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], ecx
lea rcx, str.File_size_problem
mov qword [rsp + 0x20], rcx
lea r9, str.File_is_too_big_to_be_opened_by_Notepad
xor r8d, r8d
lea rdx, str.FileTooBigToOpen
mov rcx, qword [rax + 0x33368]
call fcn.14007aff0
mov rcx, rsi
call fcn.1401a5bdc
xor al, al
jmp 0x14001fec5
xor r9d, r9d
xor r8d, r8d
mov edx, 0x94e
mov rcx, qword [rdi + 8]
call fcn.14000fa00
mov r9, rbx
xor r8d, r8d
mov edx, 0x936
mov rcx, qword [rdi + 8]
call fcn.14000fa00
xor r9d, r9d
xor r8d, r8d
mov edx, 0x85c
mov rcx, qword [rdi + 8]
call fcn.14000fa00
test rax, rax
setne byte [rsp + 0x43]
test rax, rax
je 0x14001faee
xor r9d, r9d
xor r8d, r8d
mov edx, 0x87b
mov rcx, qword [rdi + 8]
call fcn.14000fa00
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7d4
mov rcx, qword [rdi + 8]
call fcn.14000fa00
mov r14, qword [rsp + 0xc8]
movsxd rbx, dword [r14]
cmp ebx, 0x55
jge 0x14001fb2e
mov rax, rbx
shl rax, 5
lea rcx, [0x1402a547c]
movsxd r8, dword [rax + rcx]
xor r9d, r9d
mov edx, 0xfa1
jmp 0x14001fb68
call fcn.14000c980
mov rbx, qword [rax + rbx*8 + 0xc20]
call fcn.14000ca10
mov qword [rsp + 0x20], 0
mov r9d, 0xffffffff
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.14002c080
mov r9, rax
xor r8d, r8d
mov edx, 0xfa6
mov rcx, qword [rdi + 8]
call fcn.14000fa00
cmp dword [r14 + 4], 0xffffffff
je 0x14001fb8f
xor r9d, r9d
mov edx, 0x7f5
mov r8d, 0xfde9
mov rcx, qword [rdi + 8]
call fcn.14000fa00
mov r12b, 3
mov byte [rsp + 0x40], r12b
xor r9d, r9d
mov r8, r13
mov edx, 0x98e
mov rcx, qword [rdi + 8]
call fcn.14000fa00
xor r9d, r9d
xor r8d, r8d
mov edx, 0x94f
mov rcx, qword [rdi + 8]
call fcn.14000fa00
test rax, rax
jne 0x14001fedf
mov qword [rsp + 0x58], 0
mov r13b, 1
mov byte [rsp + 0x41], r13b
xor ebx, ebx
mov dword [rsp + 0x44], ebx
jmp 0x14001fbe6
mov rsi, qword [rsp + 0x50]
mov eax, 0x20004
sub eax, ebx
movsxd r8, eax
movsxd rcx, ebx
add rcx, r15
mov r9, rsi
mov edx, 1
call fcn.1401a6078
movsxd rsi, dword [rsp + 0x44]
add rsi, rax
mov qword [rsp + 0x58], rsi
mov rcx, qword [rsp + 0x50]
call fcn.1401a9f34
test eax, eax
je 0x14001fc29
xor bl, bl
mov byte [rsp + 0x42], bl
jmp 0x14001fdc0
test rsi, rsi
je 0x14001fdbe
test r13b, r13b
je 0x14001fc96
mov rdx, rsi
mov rcx, r15
call fcn.140146200
test eax, eax
je 0x14001fc50
mov dword [r14 + 4], 0xffffffff
jmp 0x14001fc77
cmp dword [r14 + 4], 0xffffffff
jne 0x14001fc77
call fcn.14000c980
cmp byte [rax + 0xd8], 0
je 0x14001fc77
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.14001e6b0
mov dword [r14 + 4], eax
cmp dword [r14], 0
jne 0x14001fc8e
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.14001e720
mov dword [r14], eax
xor r13b, r13b
mov byte [rsp + 0x41], r13b
mov eax, dword [r14 + 4]
cmp eax, 0xffffffff
je 0x14001fd2e
cmp eax, 0xfde9
jne 0x14001fcb2
mov r9, r15
mov r8, rsi
jmp 0x14001fd12
call fcn.14000ca10
mov rbx, rax
xor eax, eax
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x48], eax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, dword [r14 + 4]
mov rdx, r15
mov rcx, rbx
call fcn.140028020
lea rcx, [rsp + 0x4c]
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x48]
mov r8d, 0xfde9
mov rdx, rax
mov rcx, rbx
call fcn.14002c080
movsxd r8, dword [rsp + 0x4c]
mov r9, rax
mov edx, 0x8ea
mov rcx, qword [rdi + 8]
call fcn.14000fa00
cmp r12b, 3
jne 0x14001fd77
mov rdx, rsi
mov rcx, r15
jmp 0x14001fd67
mov r8, rsi
mov rdx, r15
mov rbx, qword [rsp + 0xc0]
mov rcx, rbx
call fcn.140145cb0
mov r9, qword [rbx + 0x10]
mov r8, rax
mov edx, 0x8ea
mov rcx, qword [rdi + 8]
call fcn.14000fa00
cmp r12b, 3
jne 0x14001fd77
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x10]
mov r8b, 3
call fcn.14001f0f0
mov byte [rsp + 0x40], al
movzx r12d, al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x94f
mov rcx, qword [rdi + 8]
call fcn.14000fa00
test rax, rax
jne 0x14001fee8
movsxd rbx, dword [rsp + 0x44]
test ebx, ebx
je 0x14001fdb5
mov r8, rbx
mov rdx, r15
sub rdx, rbx
add rdx, 0x20004
mov rcx, r15
call fcn.14019dbf0
test rsi, rsi
jne 0x14001fbe1
mov bl, 1
jmp 0x14001fe25
mov rcx, qword [rsp + 0x50]
call fcn.1401a5bdc
cmp r12b, 3
jne 0x14001fe65
call fcn.14000c980
add rax, 0x140
movzx ecx, byte [rax]
mov byte [r14 + 8], cl
cmp qword [rsp + 0x60], 0
jne 0x14001fe69
cmp dword [rax + 4], 4
jne 0x14001fe69
cmp byte [rax + 8], 0
je 0x14001fe69
mov dword [r14 + 4], 0xfde9
jmp 0x14001fe69
mov byte [r14 + 8], r12b
xor r9d, r9d
xor r8d, r8d
mov edx, 0x87f
mov rcx, qword [rdi + 8]
call fcn.14000fa00
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7de
mov rcx, qword [rdi + 8]
call fcn.14000fa00
cmp byte [rsp + 0x43], 0
je 0x14001fead
xor r9d, r9d
mov edx, 0x87b
lea r8d, [r9 + 1]
mov rcx, qword [rdi + 8]
call fcn.14000fa00
mov r9, qword [rdi + 0x10]
xor r8d, r8d
mov edx, 0x936
mov rcx, qword [rdi + 8]
call fcn.14000fa00
movzx eax, bl
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
xor edx, edx
xor ecx, ecx
call fcn.14019d50c
xor edx, edx
xor ecx, ecx
call fcn.14019d50c
nop
int3