Function at 0x18002b280
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
movaps xmmword [rsp + 0x120], xmm6
mov rax, qword [0x18007b130]
xor rax, rsp
mov qword [rbp + 0x18], rax
mov qword [rbp - 0x68], r9
mov qword [rbp - 0x60], r8
mov eax, edx
mov dword [rsp + 0x50], edx
mov r12, rcx
mov qword [rbp - 0x80], rcx
xor edi, edi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], dil
mov esi, edi
lea ecx, [rdx - 6]
mov dword [rsp + 0x30], ecx
mov r15, qword [rsp + 0x58]
cmp edx, ecx
jbe 0x18002b9bc
lea r8, [0x180000000]
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x40], rdx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x68], rcx
mov ecx, dword [rsp + 0x4c]
mov dword [rsp + 0x34], ecx
mov r14d, dword [rsp + 0x4c]
mov qword [rsp + 0x78], r14
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x70], rcx
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x60], rbx
mov r13d, dword [rsp + 0x4c]
mov dword [rsp + 0x48], r13d
mov ecx, dword [rsp + 0x30]
nop
add eax, 0xffffff24
cmp eax, 0xe
ja case.default.0x18002b359
mov ecx, dword [r8 + rax*4 + 0x2ba30]
add rcx, r8
jmp rcx
mov rbx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x18002b370
mov rbx, qword [r12]
nop word [rax + rax]
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x18002b37f
mov rcx, qword [r12]
add rcx, qword [r12 + 0x10]
cmp rbx, rcx
je 0x18002b95e
mov r13d, 0x2f
mov r14, qword [rbp - 0x60]
cmp r13d, 0x2f
je 0x18002b3bf
cmp r13d, 0x24b8
jne 0x18002b406
inc rsi
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rax, qword [rbp - 0x30]
movzx eax, byte [rax + rdx]
mov byte [rbx], al
jmp 0x18002b406
lea r12, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae r12, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
test r8, r8
je 0x18002b3eb
movsx edx, byte [rbx]
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x18002b3eb
sub rax, r12
jmp 0x18002b3f2
mov rax, 0xffffffffffffffff
mov rcx, rdi
cmp rax, 0xffffffffffffffff
cmovne rcx, rax
movzx edx, byte [rsi]
call qword [r14]
mov rdx, rax
add r13d, 0x2489
cmp r13d, 0x4912
jbe 0x18002b397
mov qword [rsp + 0x40], rdx
inc rbx
mov r14, qword [rsp + 0x78]
mov r12, qword [rbp - 0x80]
jmp 0x18002b370
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov ecx, 0xd5
call fcn.18003dcc0
mov r9, qword [rbp - 0x68]
mov rsi, r9
cmp qword [r9 + 0x18], 0x10
jb 0x18002b5dd
mov rsi, qword [r9]
jmp 0x18002b5dd
movsd xmm0, qword [r12]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [r12 + 8]
mov dword [rbp - 0x48], eax
lea rdx, [rbp - 0x50]
mov ecx, 0xba
call fcn.1800172b0
movsd xmm0, qword [r12]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [r12 + 8]
mov dword [rbp - 0x38], eax
mov edx, 0x3a
lea rcx, [rbp - 0x40]
call fcn.180017940
mov dword [rbp - 0x78], edi
mov dword [rsp + 0x38], 4
mov dword [rbp - 0x70], eax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x32
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x58]
call fcn.1800374d0
test al, 1
je 0x18002b4e7
lea rcx, str.ServerUnavailable
call fcn.1800432b0
jmp 0x18002b5dd
mov r12d, 0x7e
movsd xmm6, qword [rbp - 0x58]
mov r14, qword [rbp - 0x68]
mov rdi, qword [rsp + 0x68]
nop dword [rax + rax]
mov eax, r12d
sub eax, 0x7e
je 0x18002b582
cmp eax, 0x2a
jne 0x18002b5b7
mov eax, dword [r14]
mov dword [rsp + 0x38], eax
movsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x68], xmm0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rsp + 0x38]
mov edx, 0x10e
lea rcx, [0x18004b9f0]
call fcn.180035800
mov rbx, rax
mov qword [rsp + 0x20], rax
lea r9, str.Sunset
mov r8, rdi
lea rdx, str.Sunrise
lea rcx, str.DRIVER_STATIC
call fcn.1800432b0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18002b5b7
mov eax, dword [r14]
mov dword [rsp + 0x38], eax
movsd qword [rsp + 0x68], xmm6
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rsp + 0x38]
mov edx, 0x10e
lea rcx, [0x18004b9f0]
call fcn.180035800
mov rdi, rax
add r12d, 0x2a
cmp r12d, 0xd2
jb 0x18002b500
mov qword [rsp + 0x68], rdi
xor edi, edi
mov r14, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x60]
mov r12, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x40]
lea r8, [0x180000000]
mov ecx, dword [rsp + 0x30]
mov eax, dword [rsp + 0x50]
dec eax
mov dword [rsp + 0x50], eax
cmp eax, ecx
jbe 0x18002b9bc
jmp 0x18002b340
mov dword [rsp + 0x34], 0xffffffff
mov r14d, edi
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x70], rdi
lea rdx, [0x18005a444]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x18002b96d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
jmp 0x18002b5dd
mov r9, rbx
mov edx, 1
lea r8d, [rdx + 0x27]
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp byte [rbp - 8], 0x57
jne 0x18002b5dd
cmp byte [rbp - 7], 0x41
jne 0x18002b5dd
cmp byte [rbp - 6], 0x56
jne 0x18002b5dd
cmp byte [rbp - 5], 0x45
jne 0x18002b5dd
mov r12d, 0x86
nop
cmp r12d, 0x17c
ja 0x18002b8f1
je 0x18002b8c3
mov eax, r12d
sub eax, 0x86
je 0x18002b8b2
sub eax, 0x52
je 0x18002b7b0
cmp eax, 0x52
jne 0x18002b943
cmp byte [rbp + 6], 1
jne 0x18002b6dd
lea rcx, str.Acquisition_Context_Sequence
call fcn.1800432b0
mov eax, edi
mov dword [rsp + 0x34], eax
jmp 0x18002b6e1
mov eax, dword [rsp + 0x34]
cmp byte [rbp + 6], 2
jne 0x18002b6fc
lea rcx, str.markOopDesc::age_mask_in_place
call fcn.1800432b0
mov eax, 1
mov dword [rsp + 0x34], eax
cmp byte [rbp + 0x10], 1
jne 0x18002b740
mov ebx, 0x2a
mov eax, ebx
sub eax, 0x2a
je 0x18002b71d
cmp eax, 1
jne 0x18002b735
mov rcx, qword [rsp + 0x60]
jmp 0x18002b9b3
lea rcx, str.int_r2__round_ratio__2.0f__
call fcn.1800432b0
lea rcx, str.BEGIN_LIST_OF_TRUST_ANCHORS
call fcn.1800432b0
inc ebx
cmp ebx, 0x2c
jb 0x18002b707
mov eax, dword [rsp + 0x34]
cmp byte [rbp + 0x10], 2
jne 0x18002b943
cmp eax, 1
jne 0x18002b943
mov ebx, 0xa6
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xa6
je 0x18002b77e
sub eax, 1
je 0x18002b779
cmp eax, 1
je 0x18002b9bc
jmp 0x18002b7a1
mov r15, rdi
jmp 0x18002b7a1
lea rcx, str.indirect_call_rec_proxy_title
call fcn.1800432b0
lea rcx, str.BindPose___Incomplete_BindPose__link_nodes_
call fcn.1800432b0
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
inc ebx
cmp ebx, 0xa9
jb 0x18002b760
jmp 0x18002b943
test r14d, r14d
jne 0x18002b7cf
mov ecx, 0xfd
call fcn.180008e50
mov r14, rax
mov qword [rsp + 0x78], rax
test eax, eax
je 0x18002b97e
cmp r14d, 2
jne 0x18002b7f8
movzx r13d, byte [rbp + 9]
shl r13d, 8
movzx eax, byte [rbp + 0xa]
shl eax, 0x10
add r13d, eax
movzx eax, byte [rbp + 0xb]
shl eax, 0x18
add r13d, eax
movzx eax, byte [rbp + 8]
jmp 0x18002b819
movzx r13d, byte [rbp + 8]
shl r13d, 0x18
movzx eax, byte [rbp + 9]
shl eax, 0x10
add r13d, eax
movzx eax, byte [rbp + 0xa]
shl eax, 8
add r13d, eax
movzx eax, byte [rbp + 0xb]
add r13d, eax
mov dword [rsp + 0x48], r13d
cmp r13d, 0x7d00
je 0x18002b890
cmp r13d, 0x3e80
je 0x18002b890
cmp r13d, 0x5622
je 0x18002b890
cmp r13d, 0x5dc0
je 0x18002b890
cmp r13d, 0xac44
je 0x18002b890
cmp r13d, 0xbb80
je 0x18002b890
mov edx, r13d
lea rcx, str.Mutex_76AD2193_10B7_4e70_847A_878799F3053A
call fcn.1800432b0
lea rcx, str.ADOBEID_EXT_PROFILE_NAG_TIME_key_removed
call fcn.1800432b0
mov r13d, 0xac44
mov dword [rsp + 0x48], r13d
mov r12d, 0xd8
mov dword [rsp + 0x50], 0xdd
jmp 0x18002b943
mov edx, r13d
lea rcx, str.MULTIVERSIONED_FOR_DATA_DEPENDENCE
call fcn.1800432b0
mov r12d, 0xd8
mov dword [rsp + 0x50], 0xdd
jmp 0x18002b943
lea rcx, str.Single_channels_detected.
call fcn.1800432b0
jmp 0x18002b943
xor r8d, r8d
lea edx, [r8 + 0x2c]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x18002b995
lea edx, [rax + 0x20]
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x70], rax
mov qword [rax], rbx
jmp 0x18002b943
mov eax, r12d
sub eax, 0x1ce
je 0x18002b929
sub eax, 0x52
je 0x18002b90f
cmp eax, 0x52
jne 0x18002b943
mov rdi, qword [rsp + 0x70]
jmp 0x18002b9bf
mov rcx, qword [rsp + 0x70]
mov dword [rcx + 0xc], 0xffffffff
mov eax, edi
cmp r14d, 1
sete al
mov dword [rcx + 0x18], eax
jmp 0x18002b943
mov eax, edi
cmp dword [rsp + 0x34], 1
sete al
inc ax
mov rcx, qword [rsp + 0x70]
mov word [rcx + 8], ax
mov dword [rcx + 0x14], r13d
add r12d, 0x52
cmp r12d, 0x2c4
mov rbx, qword [rsp + 0x60]
jb 0x18002b690
jmp 0x18002b5d9
mov r13d, dword [rsp + 0x48]
mov rbx, qword [rsp + 0x60]
jmp 0x18002b5e2
mov rdx, r12
lea rcx, str.VmodlVimHostScsiDiskScsiDiskType
call fcn.1800432b0
jmp 0x18002b9b9
lea rcx, str.GLvoid_glMapNamedBuffer__
call fcn.1800432b0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x18002b9bf
mov rdx, qword [rbp - 0x80]
lea rcx, str._IpcMessageHandlerClass::OnNotifyInputDone
call fcn.1800432b0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x18002b9bf
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r15, rdi
mov rdi, r15
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18002b9fd
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b9f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002b9f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800434d8
mov rax, rdi
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.1800439f0
mov rbx, qword [rsp + 0x178]
movaps xmm6, xmmword [rsp + 0x120]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret