Function at 0x18002a9c0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, qword [rsp + 0xa8]
mov esi, r8d
mov rbx, qword [rsp + 0x38]
xor edi, edi
mov r12, qword [rsp + 0xa8]
mov r8, rdx
imul ebp, esi, 0x318
mov r15, rcx
mov r14d, esi
cmp esi, ebp
ja 0x18002ace3
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x30], rax
nop dword [rax]
cmp r14d, 0x488
ja 0x18002aba0
je 0x18002ab52
cmp r14d, 8
je 0x18002ab32
cmp r14d, 0x30
je 0x18002acd0
cmp r14d, 0x47
je 0x18002ab1b
cmp r14d, 0xd1
je 0x18002aa94
cmp r14d, 0x248
jne 0x18002aca8
mov rax, qword [r8]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rax + 0x28]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov ecx, 0xaa
mov qword [rsp + 0x20], rax
call fcn.180037ad0
jmp 0x18002aca8
mov ecx, 0x78
call fcn.180073d68
mov r13, rax
test rax, rax
jne 0x18002aca8
mov esi, 0xaf
nop
mov ecx, esi
sub ecx, 0xaf
je 0x18002aaf8
sub ecx, 0x43
je 0x18002aadf
cmp ecx, 0x43
jne 0x18002ab04
mov rax, rbx
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rsp + 0x98]
mov ecx, dword [rax]
call fcn.18007f2f8
mov rbx, rdi
mov qword [rsp + 0x38], rbx
jmp 0x18002ab04
test r15, r15
je 0x18002ab04
mov dword [r15], 0x6d
add esi, 0x43
cmp esi, 0x178
jb 0x18002aab0
mov esi, dword [rsp + 0xa0]
jmp 0x18002aca8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r8], xmm0
movups xmmword [r8 + 0x10], xmm0
mov qword [r8 + 0x20], rax
jmp 0x18002aca8
mov rax, qword [r8]
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x18002aca8
mov rax, qword [rax + 0x48]
mov rcx, qword [rax + 0x18]
call qword [rax + 0x10]
jmp 0x18002aca8
mov rax, qword [r8]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x18002ab91
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x40]
mov ecx, 0x9f
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call fcn.180067a40
mov rcx, qword [rsp + 0x98]
mov rax, qword [rcx]
mov qword [rax + 0x10], rdi
mov rax, qword [rcx]
mov rcx, qword [rax + 0x68]
mov rdx, rax
call qword [rax + 0x60]
jmp 0x18002aca8
cmp r14d, 0x3b99
je 0x18002ac7c
cmp r14d, 0x7661
je 0x18002ac69
cmp r14d, 0xb129
je 0x18002ac07
cmp r14d, 0xebf1
je 0x18002abf5
cmp r14d, 0x126b9
jne 0x18002aca8
mov ecx, dword [r8]
lea rdx, [0x180099598]
call fcn.180085878
mov rdx, rax
mov qword [rsp + 0x30], rax
jmp 0x18002acad
mov ecx, dword [r8]
mov edx, 0x8000
call fcn.18007ff38
jmp 0x18002aca8
test r12, r12
jne 0x18002aca8
mov esi, 0xdd
mov eax, esi
sub eax, 0xdd
je 0x18002ac3a
sub eax, 1
je 0x18002ac30
cmp eax, 1
jne 0x18002ac56
mov rax, rdi
jmp 0x18002aac7
mov rcx, r13
call fcn.180073d60
jmp 0x18002ac4e
test r15, r15
je 0x18002ac46
mov dword [r15], 0x6d
mov ecx, dword [r8]
call fcn.18007f2f8
mov r8, qword [rsp + 0x98]
inc esi
cmp esi, 0xe0
jb 0x18002ac15
mov esi, dword [rsp + 0xa0]
jmp 0x18002aca8
mov ecx, 0x6160
mov qword [r13 + 0x18], rdi
call fcn.180073d68
mov r12, rax
jmp 0x18002aca8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm0
movups xmmword [r13 + 0x20], xmm0
movups xmmword [r13 + 0x30], xmm0
movups xmmword [r13 + 0x40], xmm0
movups xmmword [r13 + 0x50], xmm0
movups xmmword [r13 + 0x60], xmm0
mov qword [r13 + 0x70], rax
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x98]
lea eax, [rsi + rsi*8]
lea r14d, [r14 + rax*8]
cmp r14d, ebp
ja 0x18002acf0
jmp 0x18002aa20
cmp qword [r8], 0xffffffffffffffff
setne byte [rsp + 0x38]
mov rax, qword [rsp + 0x38]
jmp 0x18002aac7
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x30], rdx
lea r14d, [rsi + 0xb]
cmp esi, r14d
jae case.0x18002ad24.10
lea ebp, [rsi - 0xd1]
lea r9, [0x180000000]
nop word [rax + rax]
cmp ebp, 0xa
ja case.default.0x18002ad24
mov ecx, dword [r9 + rbp*4 + 0x2af54]
add rcx, r9
jmp rcx
mov rbx, r13
jmp case.default.0x18002ad24
xor r9d, r9d
mov r8d, 0x8a
mov rdx, r13
xor ecx, ecx
call fcn.180010120
test eax, eax
jne 0x18002ad90
mov esi, 0x12b
nop word [rax + rax]
mov eax, esi
sub eax, 0x129
je case.0x18002ad24.10
sub eax, 1
je 0x18002ad7b
cmp eax, 1
jne 0x18002ad86
mov rcx, qword [rsp + 0x30]
call fcn.180079b78
mov rcx, r12
call fcn.180073d60
jmp 0x18002ad86
mov rcx, r13
call fcn.180073d60
mov rbx, rdi
dec esi
cmp esi, 0x128
ja 0x18002ad50
mov rdx, qword [rsp + 0x30]
lea r9, [0x180000000]
jmp case.default.0x18002ad24
mov qword [r12 + 0x38], rdx
mov dword [r12], 8
jmp case.default.0x18002ad24
mov dword [r13 + 0x60], edi
jmp case.default.0x18002ad24
cmp byte [rsp + 0xab], 0x39
sete al
mov byte [r12 + 0x6158], al
jmp case.default.0x18002ad24
mov r8d, 3
mov byte [rsp + 0xae], dil
lea rdx, [rsp + 0xa8]
lea rcx, str.GIFVER
call fcn.180074a90
test eax, eax
je 0x18002ad90
mov esi, 0x11a
nop
mov eax, esi
sub eax, 0x11a
je 0x18002ae32
sub eax, 1
je 0x18002ae28
sub eax, 1
je 0x18002ae1e
cmp eax, 1
je 0x18002ac28
jmp 0x18002ae48
mov rcx, r13
call fcn.180073d60
jmp 0x18002ae48
mov rcx, r12
call fcn.180073d60
jmp 0x18002ae48
test r15, r15
je 0x18002ae3e
mov dword [r15], 0x67
mov rcx, qword [rsp + 0x30]
call fcn.180079b78
inc esi
cmp esi, 0x11e
jb 0x18002ae00
mov rdx, qword [rsp + 0x30]
lea r9, [0x180000000]
jmp case.default.0x18002ad24
mov r9, qword [r13 + 0x70]
mov rax, qword [r9 + 0x40]
test rax, rax
je 0x18002ae87
mov r8d, 6
lea rdx, [rsp + 0xa8]
mov rcx, r13
call rax
cdqe
jmp 0x18002aea1
mov r9, qword [r9 + 0x38]
lea rcx, [rsp + 0xa8]
mov edx, 1
lea r8d, [rdx + 5]
call fcn.180079e64
cmp rax, 6
je 0x18002ad90
mov esi, 0x7b
mov eax, esi
sub eax, 0x7b
je 0x18002aeed
sub eax, 1
je 0x18002aed9
sub eax, 1
je 0x18002aecc
cmp eax, 1
je case.0x18002ad24.10
jmp 0x18002aef9
mov rcx, r13
call fcn.180073d60
mov rbx, rdi
jmp 0x18002aef9
mov rcx, qword [rsp + 0x30]
call fcn.180079b78
mov rcx, r12
call fcn.180073d60
jmp 0x18002aef9
test r15, r15
je 0x18002aef9
mov dword [r15], 0x66
inc esi
cmp esi, 0x7f
jb 0x18002aeb0
mov rdx, qword [rsp + 0x30]
lea r9, [0x180000000]
jmp case.default.0x18002ad24
mov eax, dword [r8]
mov dword [r12 + 4], eax
jmp case.default.0x18002ad24
mov qword [r12 + 0x40], rdi
mov qword [r13 + 0x68], rdi
jmp case.default.0x18002ad24
mov qword [r13 + 0x70], r12
mov r8d, dword [rsp + 0xa0]
inc ebp
inc r8d
mov dword [rsp + 0xa0], r8d
cmp r8d, r14d
jae case.0x18002ad24.10
mov r8, qword [rsp + 0x98]
jmp 0x18002ad10