Function at 0x18002b4a0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov r13, r9
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov eax, 1
mov dword [rbp - 0x40], eax
xor r14d, r14d
mov qword [rdx], r14
mov qword [rdx + 8], r14
mov dword [rdx + 0x10], 0x1000
mov dword [rbp - 0x40], eax
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov dword [rbp - 0x28], 0x80
mov rax, qword [rcx]
call qword [rax + 0x2b0]
mov rbx, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x2e0]
mov qword [rsp + 0x20], rbx
lea r8, [rbp - 0x38]
mov rdx, r13
mov rcx, rdi
call fcn.1800669e0
test eax, eax
jne 0x18002b52d
mov rcx, qword [rbp - 0x38]
jmp 0x18002b774
mov r15, qword [rbp - 0x38]
cmp eax, 2
jne 0x18002b5d3
mov dword [rbp + 0x40], r14d
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x2b0]
cmp dword [rbp - 0x2c], 0
je 0x18002b556
mov rdi, r15
jmp 0x18002b564
mov byte [0x180186048], 0
lea rdi, [0x180186048]
mov r9, rax
lea r8, [rbp + 0x40]
mov rdx, r13
mov rcx, rdi
call fcn.180066b80
mov rdi, rax
mov r8b, 1
movsxd rbx, dword [rbp + 0x40]
mov edx, ebx
mov rcx, rsi
call fcn.1800126d0
test ebx, ebx
js 0x18002b771
xor r8d, r8d
mov edx, ebx
mov rcx, rsi
call fcn.1800126d0
cmp dword [rsi + 0xc], ebx
cmove r14, rax
test r14, r14
je 0x18002b771
mov r8, rbx
mov rcx, r14
test rdi, rdi
je 0x18002b5c7
mov rdx, rdi
call fcn.1801188c0
jmp 0x18002b771
xor edx, edx
call fcn.180118500
jmp 0x18002b771
cmp eax, 1
jne 0x18002b771
cmp dword [rbp - 0x2c], 0
je 0x18002b5e7
mov rdi, r15
jmp 0x18002b5f5
mov byte [0x180186048], 0
lea rdi, [0x180186048]
lea rdx, [0x18013218c]
lea rcx, [rbp - 0x20]
call fcn.18001f0e0
cmp dword [rax + 0xc], 0
je 0x18002b610
mov r12, qword [rax]
jmp 0x18002b613
mov r12, r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov dword [rbp - 0x28], 0x1000
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, 1
mov ecx, 1
cmovl eax, ecx
lea edx, [rax + rax]
movzx r8d, cl
lea rcx, [rbp - 0x38]
call fcn.1800126d0
mov eax, dword [rbp - 0x2c]
mov ebx, eax
shr ebx, 1
mov r13, r14
test eax, eax
cmovne r13, qword [rbp - 0x38]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, 1
mov ecx, 1
cmovl eax, ecx
cmp eax, ebx
jg 0x18002b6c0
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
mov r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x18002b6c5
mov word [r13], r14w
mov rcx, r14
cmp dword [rbp - 0x2c], r14d
cmovne rcx, qword [rbp - 0x38]
mov rdx, r12
call fcn.1800f0bcc
mov rdi, rax
mov rcx, qword [rbp - 0x38]
call fcn.1800e1170
mov rcx, qword [rbp - 0x20]
call fcn.1800e1170
test rdi, rdi
je 0x18002b771
xor edx, edx
mov r8d, 2
mov rcx, rdi
call fcn.1800f10f4
mov rcx, rdi
test eax, eax
jne 0x18002b76b
call fcn.1800f09a4
movsxd rbx, eax
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1800f10f4
test eax, eax
jne 0x18002b768
mov r8b, 1
mov edx, ebx
mov rcx, rsi
call fcn.1800126d0
cmp dword [rsi + 0xc], 0
je 0x18002b739
mov r14, qword [rsi]
mov r9, rdi
mov r8, rbx
mov edx, 1
mov rcx, r14
call fcn.1800f2c60
cmp rax, rbx
je 0x18002b768
mov rcx, rdi
call fcn.1800f0d54
mov r8b, 1
xor edx, edx
mov rcx, rsi
call fcn.1800126d0
jmp 0x18002b771
mov rcx, rdi
call fcn.1800f0d54
nop
mov rcx, r15
call fcn.1800e1170
nop
mov rax, rsi
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret