Function at 0x1800b00d0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov rax, qword [0x1800e72b8]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov eax, dword [rsp + 0x48]
mov r15d, r8d
mov r8, qword [rsp + 0x160]
mov r14, rdx
movzx edx, byte [rsp + 0x40]
mov r12, r9
mov dword [rsp + 0x48], eax
mov rbp, rcx
mov r10d, dword [rsp + 0x48]
lea r13d, [r15 + 0xc]
mov r9d, dword [rsp + 0x48]
mov esi, r15d
mov ebx, dword [rsp + 0x48]
mov qword [rsp + 0x50], rcx
lea rcx, [0x180000000]
mov r11, qword [rsp + 0x50]
mov qword [rsp + 0x68], r8
mov byte [rsp + 0x40], dl
mov qword [rsp + 0x60], r11
mov dword [rsp + 0x44], r10d
mov dword [rsp + 0x4c], r9d
cmp r15d, r13d
jae 0x1800b02cc
mov rbp, qword [rsp + 0x50]
lea edi, [r15 - 0xdd]
nop dword [rax]
cmp edi, 0x28
ja case.default.0x1800b0192
movzx eax, byte [rcx + rdi + 0xb0554]
mov ecx, dword [rcx + rax*4 + 0xb0524]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, dword [r12 + 0xc]
mov dword [rsp + 0x48], eax
jmp case.0x1800b0192.11
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r8, qword [rsp + 0x68]
mov ebx, 1
mov r11, qword [rsp + 0x60]
jmp case.0x1800b0192.11
mov r8d, dword [r8]
mov r9, rbp
mov edx, 1
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r8, qword [rsp + 0x68]
mov r11, qword [rsp + 0x60]
jmp case.0x1800b0192.11
lea rdx, [0x1800c886c]
lea rcx, str.YI_321_GGOP
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rbp, rax
test rax, rax
je 0x1800b0308
mov r8, qword [rsp + 0x68]
mov r11, qword [rsp + 0x60]
jmp case.0x1800b0192.11
mov dword [r14], 2
jmp case.0x1800b0192.11
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 8]
mov dword [r14 + 8], eax
jmp case.0x1800b0192.11
mov r10d, 1
lea rcx, [0x180000000]
mov dword [rsp + 0x44], r10d
jmp 0x1800b02b0
mov r10d, dword [rsp + 0x44]
lea rcx, [0x180000000]
mov dl, 1
mov byte [rsp + 0x40], dl
jmp 0x1800b02b5
mov eax, dword [r12 + 0x3c]
lea rdx, [rsp + 0x58]
mov r8d, 0x119
mov dword [rsp + 0x4c], eax
mov rcx, r12
mov dword [rsp + 0x58], 0x3c
call fcn.180063400
movzx edx, byte [rsp + 0x40]
test eax, eax
je 0x1800b030f
mov r8, qword [rsp + 0x68]
lea rcx, [0x180000000]
mov r10d, dword [rsp + 0x44]
mov r11, qword [rsp + 0x60]
jmp 0x1800b02b5
xor r11d, r11d
mov qword [rsp + 0x60], r11
lea rcx, [0x180000000]
mov r10d, dword [rsp + 0x44]
movzx edx, byte [rsp + 0x40]
inc esi
inc edi
cmp esi, r13d
jb 0x1800b0170
mov r9d, dword [rsp + 0x4c]
mov rbp, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x50]
lea r14, [0x18001fd70]
mov esi, dword [rsp + 0x48]
cmp r15d, r13d
jae case.0x1800b0192.10
lea eax, [r15 - 0xdd]
cmp eax, 0x12
ja case.0x1800b0306.226
mov ecx, dword [rcx + rax*4 + 0xb0580]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
xor eax, eax
jmp 0x1800b03c2
mov eax, dword [rsp + 0x48]
lea r14, [0x18001fd70]
mov rdi, qword [rsp + 0x50]
mov r15d, 0xdf
mov esi, dword [rsp + 0x48]
mov dword [r12 + 0xc], eax
jmp case.0x1800b0306.226
xorps xmm0, xmm0
movzx eax, dl
xor ecx, ecx
test rdi, rdi
movups xmmword [rsp + 0x70], xmm0
cmovne ecx, eax
movzx edx, cl
mov byte [rsp + 0x40], cl
movups xmmword [rsp + 0x80], xmm0
movups xmmword [rsp + 0x90], xmm0
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movups xmmword [rsp + 0xc0], xmm0
movups xmmword [rsp + 0xd0], xmm0
movups xmmword [rsp + 0xe0], xmm0
jmp case.0x1800b0306.226
xor eax, eax
lea r9, [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov r8d, esi
mov edx, r10d
mov qword [rsp + 0x20], rax
mov rcx, r11
call sub.IMM32.dll_ImmGetImeMenuItemsA
jmp 0x1800b04f4
mov eax, 0xd0
cmp eax, 0xd0
je 0x1800b03ed
cmp eax, 0x1ee0
jne 0x1800b03ef
mov eax, ebx
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.1800bcd70
mov rbx, qword [rsp + 0x150]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ebx, ebx
add eax, 0x1e10
cmp eax, 0x3c20
jbe 0x1800b03b2
mov dword [r12 + 0x3c], r9d
jmp case.0x1800b0306.226
mov ecx, 0xbd
nop word [rax + rax]
mov eax, ecx
sub eax, 0xbd
je 0x1800b0420
cmp eax, 0x2e
je case.0x1800b0192.10
jmp 0x1800b0425
mov ebx, 1
add ecx, 0x2e
cmp ecx, 0x119
jb 0x1800b0410
mov eax, dword [rsp + 0x48]
mov r15d, 0xdf
mov dword [r12 + 0xc], eax
jmp case.0x1800b0306.226
test dl, dl
je case.0x1800b0306.226
mov rcx, rdi
call sub.IMM32.dll_ImmDestroyContext
jmp 0x1800b04f4
movzx eax, word [rbp]
lea r8, [rsp + 0x58]
mov r9, r12
mov word [rsp + 0x58], ax
mov edx, pe_nt_image_headers64
xor ecx, ecx
call fcn.180050e30
mov esi, 0x10
jmp 0x1800b04f4
lea rcx, [r12 + 0xa]
cmp rcx, r8
je case.0x1800b0306.226
cmp qword [r8 + 0x18], 0x10
mov rdx, r8
jb 0x1800b0494
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.18002e300
jmp 0x1800b04f4
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0xbc
xor ecx, ecx
call fcn.18002a380
test eax, eax
jne 0x1800b04f4
movzx edx, byte [rsp + 0x40]
mov eax, dword [rsp + 0x48]
mov r15d, 0xdf
mov dword [r12 + 0xc], eax
jmp case.0x1800b0306.226
mov dword [rsp + 0x70], 0x80
jmp case.0x1800b0306.226
call sub.IMM32.dll_ImmCreateContext
mov rdi, rax
mov qword [r12], r14
movzx edx, byte [rsp + 0x40]
mov r8, qword [rsp + 0x68]
lea rcx, [0x180000000]
mov r10d, dword [rsp + 0x44]
inc r15d
mov r11, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x4c]
mov rbp, qword [rsp + 0x50]
jmp 0x1800b02dc