Function at 0x18000dd94
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xbf0]
sub rsp, 0xcf0
mov rax, qword [0x18004e5f0]
xor rax, rsp
mov qword [rbp + 0xbe0], rax
and qword [rsp + 0x38], 0
mov r15d, r8d
mov dword [rsp + 0x60], r8d
mov r13, rcx
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x38]
lea rcx, [0x180050ff0]
mov r9d, 0xfde9
mov rbx, rdx
mov qword [rsp + 0x48], rdx
call fcn.180008328
mov rcx, qword [rsp + 0x38]
lea rdx, [0x18003f858]
call fcn.18001f06c
mov r12, rax
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x18000de2d
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18000de26
call fcn.18001a1d8
xor eax, eax
jmp 0x18000e00b
mov edi, 1
xor edx, edx
mov rcx, rax
lea r8d, [rdi + 1]
mov dword [rsp + 0x40], edi
call fcn.18001eac8
mov rcx, r12
call fcn.18001ef34
mov rcx, r12
mov esi, eax
mov dword [rsp + 0x34], eax
call fcn.18001ecbc
mov rcx, rbx
call fcn.18001b8d0
mov ecx, 0x320
mov ebx, 0x400
cmp rax, 0x64
cmova ebx, ecx
mov rcx, r12
call fcn.18001ef34
lea rcx, [rbp - 0x80]
mov dword [rsp + 0x30], eax
call fcn.180004e3c
cmp r15d, esi
jne 0x18000e035
mov r14d, 0x100000
mov ecx, r14d
call fcn.18001b978
mov rbx, rax
test rax, rax
je 0x18000de17
mov r9, r12
mov r8d, r14d
mov edx, edi
mov rcx, rax
xor r13d, r13d
call fcn.18001e510
mov rdi, rax
jmp 0x18000deef
lea rcx, [rbp - 0x80]
mov r8d, edi
mov rdx, rbx
call fcn.1800055a0
add r13d, edi
mov rcx, rbx
cmp r13d, esi
je 0x18000def5
mov r9, r12
mov r8, r14
mov edx, 1
call fcn.18001e510
mov edi, eax
test eax, eax
jne 0x18000dec3
jmp 0x18000defa
call fcn.18001a1d8
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.180005698
mov r14d, 0x20
lea rcx, [rbp - 0xf]
mov r8d, r14d
xor edx, edx
mov byte [rbp - 0x10], 0
call fcn.180019880
lea rbx, [rbp - 0x20]
lea rdi, [rbp - 0x10]
lea esi, [r14 - 0x10]
lea r12d, [r14 - 0x1f]
movzx r8d, byte [rbx]
lea rdx, str._02X
mov rcx, rdi
call fcn.18001e530
add rdi, 2
add rbx, r12
sub rsi, r12
jne 0x18000df2f
mov r15, qword [rsp + 0x50]
lea rdx, [rbp + 0x20]
mov r8b, r12b
mov rcx, r15
call fcn.18000d5dc
mov rcx, qword [rsp + 0x48]
mov rdi, rax
mov word [rax + 3], r12w
lea eax, [rsi + 3]
mov word [rdi + 1], ax
call fcn.18001b8d0
mov rdx, qword [rsp + 0x48]
add ax, 9
lea rcx, [rdi + 0x17]
mov word [rdi + 0xd], ax
call fcn.180019fe0
mov r11d, dword [rsp + 0x34]
mov dword [rdi + 0xf], r11d
mov dword [rdi + 0x13], r13d
movzx eax, word [rdi + 0xd]
lea rdx, [rbp - 0x10]
lea rcx, [rax + rdi + 0xf]
mov r8, r14
call fcn.18001b580
add word [rdi + 0xd], r14w
lea r8, [rdi + 0xd]
lea rdx, [rdi + 0xf]
mov rcx, r15
call fcn.18000d71c
movzx r8d, word [rdi + 0xd]
lea rcx, [r15 + 0xf6f0]
lea r9d, [rsi + 0x3c]
lea rdx, [rbp + 0x20]
add r8d, 0x2a
mov byte [rsp + 0x20], r12b
call fcn.1800124c8
mov r12, qword [rsp + 0x70]
mov rcx, r12
call fcn.18001a170
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18000e006
call fcn.18001a1d8
mov eax, 1
mov rcx, qword [rbp + 0xbe0]
xor rcx, rsp
call fcn.180019850
mov rbx, qword [rsp + 0xd40]
add rsp, 0xcf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movsxd rax, ebx
mov ebx, dword [rsp + 0x30]
mov esi, 0x10
lea r14d, [rsi + 0x10]
mov qword [rsp + 0x68], rax
lea rcx, [rbp + 0x600]
mov r9, r12
mov r8, rax
mov rdx, rdi
call fcn.18001e510
mov rdi, rax
test eax, eax
je 0x18000dfef
cmp byte [r13 + 0xf739], 0
jne 0x18000e20f
lea rdx, [rbp + 0x600]
lea rcx, [rbp - 0x80]
mov r8d, eax
call fcn.1800055a0
test r15d, r15d
je 0x18000e0a6
lea eax, [rbx + rdi]
cmp eax, r15d
ja 0x18000e0a6
mov ebx, eax
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x68]
mov edi, 1
jmp 0x18000e04a
lea rdx, [rbp + 0x20]
mov r8b, 1
mov rcx, r13
call fcn.18000d5dc
mov ecx, dword [rsp + 0x40]
mov word [rax + 3], cx
inc ecx
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x40], ecx
mov ecx, 3
lea r13, [rax + 0xd]
mov word [rax + 1], cx
mov rcx, qword [rsp + 0x48]
call fcn.18001b8d0
mov rdx, qword [rsp + 0x48]
add ax, di
add ax, 9
mov word [r13], ax
mov rax, qword [rsp + 0x58]
add rax, 0xf
mov qword [rsp + 0x78], rax
lea rcx, [rax + 8]
call fcn.180019fe0
mov rax, qword [rsp + 0x78]
mov r11d, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x48]
mov dword [rax], r11d
mov dword [rax + 4], ebx
call fcn.18001b8d0
mov rcx, qword [rsp + 0x58]
lea rdx, [rbp + 0x600]
lea rcx, [rax + rcx + 0x18]
mov r8d, edi
call fcn.18001b580
mov ebx, dword [rsp + 0x30]
add ebx, edi
mov dword [rsp + 0x30], ebx
cmp ebx, dword [rsp + 0x34]
jne 0x18000e1c7
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.180005698
lea rcx, [rbp - 0xf]
mov r8, r14
xor edx, edx
mov byte [rbp - 0x10], 0
call fcn.180019880
lea rbx, [rbp - 0x20]
lea rdi, [rbp - 0x10]
mov r12, rsi
mov r15d, 1
movzx r8d, byte [rbx]
lea rdx, str._02X
mov rcx, rdi
call fcn.18001e530
add rdi, 2
add rbx, r15
sub r12, r15
jne 0x18000e17a
movzx eax, word [r13]
mov rcx, qword [rsp + 0x58]
lea rdx, [rbp - 0x10]
lea rcx, [rax + rcx + 0xf]
mov r8, r14
call fcn.18001b580
add word [r13], r14w
mov r12, qword [rsp + 0x70]
mov r15d, dword [rsp + 0x60]
mov ebx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x50]
mov r8, r13
call fcn.18000d71c
movzx r8d, word [r13]
mov r13, qword [rsp + 0x50]
mov edi, 1
lea rcx, [r13 + 0xf6f0]
lea rdx, [rbp + 0x20]
lea r9d, [rdi + 0x3b]
add r8d, 0x2a
mov byte [rsp + 0x20], dil
call fcn.1800124c8
mov rax, qword [rsp + 0x68]
jmp 0x18000e04a
mov rcx, r12
call fcn.18001a170
jmp 0x18000de17