Function at 0x180062b20
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov ebx, dword [rsp + 0xb0]
mov eax, r8d
mov r14, qword [rsp + 0x50]
mov r12, rdx
mov esi, dword [rsp + 0xb0]
mov r13, r9
mov r15, qword [rsp + 0x50]
mov rdx, rcx
mov dword [rsp + 0x48], eax
mov ebp, r8d
add eax, 0xe
lea r8, [0x180000000]
cmp ebp, eax
jae case.0x180062b9e.233
lea eax, [rbp - 0xe2]
cmp eax, 0x2c
ja case.0x180062b9e.240
movzx eax, byte [r8 + rax + 0x62ffc]
mov ecx, dword [r8 + rax*4 + 0x62fc0]
add rcx, r8
jmp rcx
mov rax, qword [r13]
inc ebp
mov rdx, qword [rsp + 0xa0]
mov dword [rsp + 0x48], ebp
mov rax, qword [rax + 0x50]
mov qword [rsp + 0x50], rax
mov eax, dword [rsp + 0xb0]
jmp 0x180062b69
movsxd rax, esi
mov r8, r14
sub r8, rax
xor edx, edx
lea rcx, [rax + r15]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [r13]
mov rax, qword [rcx + 0x20]
test rax, rax
je case.0x180062b9e.240
mov edx, dword [rsp + 0x40]
mov r9, r15
mov dword [rsp + 0x30], edx
mov rdx, qword [rsp + 0xc8]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r8d, dword [rdx]
mov rdx, qword [rsp + 0xc0]
mov edx, dword [rdx]
call rax
mov rdx, qword [rsp + 0xa0]
inc ebp
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
mov rax, qword [rsp + 0xc8]
mov r15, rdx
mov edx, dword [rax]
test edx, edx
jns 0x180062c62
mov eax, dword [rsp + 0xb0]
neg edx
inc ebp
movsxd r14, edx
mov rdx, qword [rsp + 0xa0]
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
mov rax, qword [r13]
imul edx, dword [rax + 0x18]
mov eax, dword [rsp + 0xb0]
inc ebp
mov dword [rsp + 0x48], ebp
movsxd r14, edx
mov rdx, qword [rsp + 0xa0]
jmp 0x180062b69
mov rax, qword [r13]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rax + 0x20]
sub qword [r12], rcx
mov eax, dword [rsp + 0xb0]
inc ebp
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
test r14, r14
je 0x180062d4d
nop word [rax + rax]
mov ebp, 0x59
mov eax, ebp
sub eax, 0x59
je 0x180062d0f
sub eax, 1
je 0x180062cfe
sub eax, 1
je 0x180062ce3
cmp eax, 1
jne 0x180062d39
movsxd rax, esi
add r15, rax
jmp 0x180062d39
mov rdx, qword [r12 + 0xd8]
mov rcx, r15
movsxd rdi, esi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
sub r14, rdi
jmp 0x180062d39
mov rax, qword [r13]
movsxd rsi, dword [rax + 0x18]
cmp r14, rsi
cmovbe esi, r14d
jmp 0x180062d39
mov rax, qword [r13]
mov rdx, qword [r12 + 0xd8]
mov ecx, dword [r12 + 4]
mov r8d, dword [rax + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
mov esi, eax
mov rax, qword [r13]
cmp esi, dword [rax + 0x18]
jne 0x180062f0a
inc ebp
cmp ebp, 0x5d
jb 0x180062cc5
test r14, r14
jne 0x180062cc0
mov ebp, dword [rsp + 0x48]
mov eax, dword [rsp + 0xb0]
xor ebx, ebx
mov rdx, qword [rsp + 0xa0]
inc ebp
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
xor edx, edx
xor r9d, r9d
mov r8, r13
lea ecx, [rdx + 0x7f]
call fcn.1800ce3f0
xor edx, edx
mov qword [r12 + 8], rax
mov r8d, 0x106
mov rcx, r13
call fcn.180018750
mov rdx, qword [rsp + 0xa0]
inc ebp
mov dword [r12], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
mov eax, 0xc4
cmp eax, 0xc4
je 0x180062f81
add eax, 0x10d8
cmp eax, 0x10d8
jbe 0x180062db1
mov edi, 0x125
nop dword [rax]
cmp edi, 0x125
je 0x180062dfa
cmp edi, 0xd976
jne 0x180062e29
mov eax, ebx
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [r12]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x48], rax
xor r9d, r9d
mov rax, qword [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov dword [rsp + 0x20], 0xdd
call fcn.1800a30f0
mov ebx, eax
add edi, 0xd851
cmp edi, 0x1b0a2
jbe 0x180062dd0
mov rcx, qword [r13]
mov eax, dword [rcx + 0x80]
test eax, eax
je 0x180062e55
mov ecx, r15d
or ecx, r14d
dec eax
test eax, ecx
jne case.0x180062b9e.240
mov edi, 0x1a
mov dword [rsp + 0x44], edi
cmp edi, 0x3878
ja case.0x180062b9e.240
cmp edi, 0x1a
je 0x180062f16
cmp edi, 0xe38
je 0x180062ea1
cmp edi, 0x1c56
je 0x180062e97
cmp edi, 0x2a74
je case.0x180062b9e.233
add edi, 0xe1e
jmp 0x180062e5a
xor ebx, ebx
add edi, 0xe1e
jmp 0x180062e5a
movsxd rax, esi
cmp rax, r14
je 0x180062f38
mov ecx, 0xc2
cmp ecx, 0xc6
jae 0x180062f34
mov eax, ecx
sub eax, 0xc2
je 0x180062f0a
sub eax, 1
je 0x180062efd
sub eax, 1
je 0x180062ef1
cmp eax, 1
jne 0x180062f12
mov eax, dword [rsp + 0xb0]
mov ebp, 0x104
mov rdx, qword [rsp + 0xa0]
inc ebp
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
mov dword [rsp + 0x40], 0x7f2bb724
inc ecx
jmp 0x180062eb2
xor eax, eax
test esi, esi
cmovns eax, esi
inc ecx
mov esi, eax
jmp 0x180062eb2
mov ecx, 0xc2
lea ebp, [rcx + 0x3f]
inc ecx
jmp 0x180062eb2
mov ecx, dword [r12 + 4]
mov r8d, r14d
mov rdx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__read]
mov esi, eax
add edi, 0xe1e
jmp 0x180062e5a
mov edi, dword [rsp + 0x44]
add edi, 0xe1e
jmp 0x180062e5a
add qword [r12 + 0xe8], r14
mov eax, dword [rsp + 0xb0]
inc ebp
mov rdx, qword [rsp + 0xa0]
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
xor esi, esi
mov eax, dword [rsp + 0xb0]
inc ebp
mov rdx, qword [rsp + 0xa0]
mov dword [rsp + 0x48], ebp
jmp 0x180062b69
mov eax, dword [rsp + 0x40]
jmp 0x180062de2
mov eax, dword [r12]
lea r9, [rsp + 0xb0]
xor edx, edx
mov dword [rsp + 0xb0], eax
mov rax, qword [r13]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x50], rax
lea ecx, [rdx + 9]
call fcn.180062890
jmp 0x180062de2