Function at 0x14000f9a0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x160], rbx
mov rax, qword [0x14003c008]
xor rax, rsp
mov qword [rbp + 8], rax
mov r14, rdx
mov r15, rcx
cmp word [0x14003f6a0], 0
jne 0x14000fa42
movsx rdx, word [0x14003ee64]
lea r9, [0x14000ccd0]
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
xor esi, esi
movzx r8d, si
cmp word [r15 + 8], 1
jbe 0x14000fa25
inc r8w
movsx rax, r8w
lea rdx, [rax + rax*4]
cmp word [r15 + rdx*2 + 8], 1
ja 0x14000fa10
mov word [0x14003ee64], r8w
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rcx, str.tmp1cod.dat
jmp 0x14000fd74
xor esi, esi
movzx edi, si
cmp si, word [0x14003ee64]
jge 0x14000fb17
lea rbx, [rcx + 4]
nop dword [rax + rax]
movzx r8d, word [rbx - 4]
test r8w, r8w
jne 0x14000fa86
cmp word [rbx - 2], si
jne 0x14000fa86
cmp word [rbx], si
jne 0x14000fa86
cmp word [rbx + 2], si
jne 0x14000fa86
cmp word [rbx + 4], si
je 0x14000fb04
movzx eax, word [rbx + 2]
movzx ecx, word [rbx]
movzx edx, word [rbx - 2]
movzx r9d, r8w
movzx r8d, word [rbx + 4]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
lea rdx, str._04x__04x__04x__04x__04x_r_n
lea rcx, [rbp - 0x30]
call fcn.14000bec0
test eax, eax
js 0x14000fb0d
movzx ecx, si
nop dword [rax]
movsx rax, cx
lea rdx, [rbp - 0x30]
add rdx, rax
movzx eax, byte [rdx]
test al, al
je 0x14000fadf
not al
mov byte [rdx], al
inc cx
cmp cx, 0x32
jl 0x14000fac0
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.14000be70
test eax, eax
js 0x14000fb0d
add rbx, 0xa
inc di
cmp di, word [0x14003ee64]
jge 0x14000fb17
jmp 0x14000fa60
mov word [0x14003ee64], di
jmp 0x14000fb17
mov eax, 1
jmp 0x14000fd92
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
call fcn.1400299f0
test eax, eax
jne 0x14000fb0d
lea r8, [rsp + 0x68]
mov edx, dword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140028810
test eax, eax
jne 0x14000fb0d
lea rcx, str.tmp1cod.dat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
call fcn.140029810
test eax, eax
jne 0x14000fb0d
lea r8, [rsp + 0x68]
mov edx, dword [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140028810
test eax, eax
jne 0x14000fb0d
lea rcx, str.tmp1cod.srt
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
lea rcx, str.tmp1cod.dat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
mov word [0x14003ee64], si
mov rcx, rsi
lea r13, str.tmp1cod.frs
nop
movzx eax, byte [rcx + r13]
mov byte [rbp + rcx - 0x50], al
lea rcx, [rcx + 1]
test al, al
jne 0x14000fbd0
mov ecx, 0x10
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonLinkCtrl::XElementButtonLinkCtrl]
mov rdi, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14000fc2c
mov word [rax], si
mov qword [rax + 8], rsi
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x14000fc2f
inc eax
movsxd rcx, eax
call qword [sym.imp.mfc140u.dll_operator_1]
mov qword [rdi + 8], rax
lea rdx, [rbp - 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x14000fc2f
mov rdi, rsi
mov ebx, 1
mov edx, ebx
mov rcx, rdi
call fcn.14002a380
mov r12, rax
test rax, rax
jne 0x14000fc4e
movzx eax, bx
jmp 0x14000fd92
test rdi, rdi
je 0x14000fc6f
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000fc62
call qword [sym.imp.mfc140u.dll_operator]
mov edx, 0x10
mov rcx, rdi
call fcn.14002c9cc
movzx r14d, si
cmp si, word [0x14003ee64]
jge 0x14000fd69
lea rdi, [r15 + 4]
lea r15, [0x140030680]
nop dword [rax + rax]
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x40]
mov r8d, 0x1a
lea rdx, [rbp - 0x70]
mov rcx, qword [r12]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x14000fcd7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x58
jae 0x14000fcc5
mov eax, eax
mov ecx, dword [r15 + rax*4]
jmp 0x14000fcca
mov ecx, operator
mov dword [0x140042de8], ecx
mov byte [0x1400433b0], 0
mov rcx, rsi
nop word [rax + rax]
not byte [rbp + rcx - 0x70]
movzx eax, byte [rbp + rcx - 0x6f]
not al
mov byte [rbp + rcx - 0x6f], al
add rcx, 2
cmp rcx, 0x1a
jl 0x14000fce0
cmp dword [rsp + 0x40], 0x1a
jne 0x14000fc46
lea rax, [rdi + 2]
lea rcx, [rdi - 2]
lea r9, [rdi - 4]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea r8, [rdi + 4]
lea rdx, str._04hx__04hx__04hx__04hx__04hx_r_n
lea rcx, [rbp - 0x70]
call fcn.14000bf20
cmp eax, 5
jne 0x14000fc46
cmp word [rdi + 4], bx
je 0x14000fd61
add rdi, 0xa
inc r14w
cmp r14w, word [0x14003ee64]
lea r15, [0x140030680]
jl 0x14000fc90
jmp 0x14000fd69
mov word [0x14003ee64], r14w
mov rcx, r12
call fcn.14002a1e0
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
mov eax, 0xfa0
cmp word [0x14003ee64], ax
jle 0x14000fd8f
mov word [0x14003ee64], ax
movzx eax, si
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.14002c160
mov rbx, qword [rsp + 0x160]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret