Function at 0x180071540
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x90
mov ebx, r8d
mov rdi, rcx
imul eax, ebx, 0x398
mov ecx, ebx
mov dword [rbp - 0x39], ebx
mov r12, r9
mov r8, rdx
cmp ebx, eax
mov dword [rbp - 9], eax
mov rbx, qword [rbp - 0x29]
ja 0x180071a0b
mov r13, qword [rbp - 0x29]
mov r15, qword [rbp - 0x29]
mov r14, qword [rbp - 0x29]
mov rsi, qword [rbp - 0x31]
mov qword [rbp - 1], rbx
nop word [rax + rax]
cmp ecx, 0x2aa3
ja 0x180071963
je 0x180071955
mov eax, ecx
sub eax, 0x39
je 0x180071a32
sub eax, 2
je 0x180071947
sub eax, 0x6d
je 0x1800718f8
sub eax, 0x1e
je 0x1800715fc
cmp eax, 0x14a9
jne 0x1800719f9
mov dword [r12], 0
jmp 0x1800719f9
xor r13d, r13d
test rdi, rdi
je 0x1800719f9
cmp qword [r8], r13
jbe 0x1800719f9
mov rbx, qword [rbp + 0x7f]
mov edx, 0x10d
mov dword [rbp - 0x21], edx
nop dword [rax]
mov eax, edx
sub eax, 0x10a
je 0x1800718e6
sub eax, 1
je 0x1800716cb
sub eax, 1
je 0x18007167e
cmp eax, 1
jne 0x180071664
mov rdx, qword [r12]
xor r9d, r9d
mov r8d, 0xfa
xor ecx, ecx
call fcn.180071a70
xor r15d, r15d
cmp byte [rbx], r15b
cmovne r15, rax
mov edx, dword [rbp - 0x21]
mov ecx, dword [rbp - 0x39]
mov r8, qword [rbp + 0x67]
dec edx
mov dword [rbp - 0x21], edx
cmp edx, 0x109
ja 0x180071620
mov rbx, qword [rbp - 1]
jmp 0x1800719f9
mov rax, qword [r8]
lea rdx, [rbp - 0x19]
xor r9d, r9d
mov qword [rbp - 0x11], rax
lea rcx, [rbp - 0x11]
mov qword [rbp - 0x19], r15
lea r8d, [r9 + 0x49]
call fcn.18005d190
test al, al
je 0x1800716b3
mov qword [rbp - 0x19], 0xffffffffffffffff
mov qword [rbp + 0xf], 0x4000
jmp 0x18007165e
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0xf], 0x4000
mov rax, qword [rax]
add rax, r15
mov qword [rbp - 0x19], rax
jmp 0x18007165e
mov rcx, qword [rbp - 0x19]
cmp r15, rcx
jae 0x180071661
xor ebx, ebx
nop word [rax + rax]
mov eax, 0xf8
mov dword [rbp - 0x11], eax
nop dword [rax + rax]
sub eax, 0xf7
je 0x180071782
cmp eax, 1
jne 0x1800718b3
mov rsi, qword [rbp + 0xf]
lea r8d, [rax + 0x48]
xor r9d, r9d
mov qword [rbp - 0x29], rsi
lea rdx, [rbp - 0x31]
mov qword [rbp - 0x31], r15
lea rcx, [rbp - 0x29]
call fcn.18005d190
mov rcx, qword [rbp - 0x19]
test al, al
jne 0x180071735
lea rax, [rsi + r15]
cmp rax, rcx
jb 0x18007173b
mov rsi, rcx
sub rsi, r15
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x31], rsi
cmp byte [rax], bl
je 0x1800718af
mov rcx, qword [r12]
test byte [rcx], 1
je 0x1800718ab
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
lea r8d, [r9 + 0x2a]
call fcn.18002b3a0
mov rcx, qword [rbp - 0x19]
cmp rsi, rax
cmovb rax, rsi
mov qword [rbp - 0x31], rax
mov rsi, rax
jmp 0x1800718b3
lea rdi, [rsi + r15]
mov r8, r12
lea rdx, [rbp - 0x29]
mov qword [rbp - 0x29], rdi
mov ecx, 0x10c
call fcn.180064fd0
cmp rax, rdi
jb 0x1800718d8
mov esi, 0xa8
nop dword [rax]
mov rdi, qword [rbp + 0x5f]
cmp esi, 0xa8
je 0x180071860
cmp esi, 0x149
jne 0x180071899
test r14, r14
je 0x1800718de
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne 0x1800718de
mov edi, 0x76
nop dword [rax + rax]
cmp edi, 0x76
je 0x180071831
cmp edi, 0x24e
je 0x180071818
cmp edi, 0x426
jne 0x18007184c
mov rax, r13
lea rcx, [r14 + r13]
test rax, rax
mov r13, r14
cmovns r13, rcx
jmp 0x18007184c
mov rdx, qword [r12]
lea rcx, [rbp - 0x41]
xor r9d, r9d
mov byte [rbp - 0x41], bl
lea r8d, [r9 + 0x55]
call fcn.18005d190
jmp 0x18007184c
mov r9, qword [r12]
lea rcx, [rbp - 0x29]
xor r8d, r8d
add r15, r14
mov qword [rbp - 0x29], r15
lea edx, [r8 + 0x4b]
call fcn.180064070
add edi, 0x1d8
cmp edi, 0x588
jbe 0x1800717f0
mov rdi, qword [rbp + 0x5f]
jmp 0x180071899
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x1800718de
mov r9, qword [r12]
xor edx, edx
xor ecx, ecx
mov r8d, 0xb5
call fcn.1800475b0
mov r8, qword [rbp - 0x31]
mov r9, rdi
mov edx, 1
lea rcx, [rax + r15]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r14, rax
add esi, 0xa1
cmp esi, 0x1ea
jb 0x1800717b0
mov rcx, qword [rbp - 0x19]
mov rsi, qword [rbp - 0x31]
mov eax, dword [rbp - 0x11]
dec eax
mov dword [rbp - 0x11], eax
cmp eax, 0xf6
ja 0x1800716f0
cmp r15, rcx
jb 0x1800716e0
mov rbx, qword [rbp + 0x7f]
jmp 0x18007165e
mov rdi, qword [rbp + 0x5f]
jmp 0x1800718e2
mov rsi, qword [rbp - 0x31]
mov rbx, qword [rbp + 0x7f]
mov ecx, 0xc6
mov edx, 0x10a
mov dword [rbp - 0x39], ecx
jmp 0x180071664
test r12, r12
je 0x180071a29
mov r8, qword [rbp + 0x7f]
lea r9, [rbp - 0x41]
mov rdx, r12
mov byte [rbp - 0x41], 1
mov ecx, reloc.SHELL32.dll_SHSetFolderPathW
call fcn.180022820
mov rdx, qword [r12]
lea r8, [rbp - 0x41]
mov r9d, ILClone
mov byte [rbp - 0x41], 0
mov rcx, r12
call fcn.180025480
mov ecx, dword [rbp - 0x39]
mov rbx, rax
mov r8, qword [rbp + 0x67]
mov qword [rbp - 1], rax
jmp 0x1800719f9
mov dword [r12 + 8], 0
jmp 0x1800719f9
mov rax, qword [r12 + 0x10]
mov qword [rbp + 7], rax
jmp 0x1800719f9
cmp ecx, 0x3d08
je 0x180071a0b
cmp ecx, 0x3fd7
je 0x1800719d5
cmp ecx, 0x47ee
je 0x18007198f
cmp ecx, 0x8f16
jne 0x1800719f9
mov rax, r13
jmp 0x180071a0e
test r13, r13
jg 0x1800719f9
mov rax, qword [rbp + 0x7f]
xor ecx, ecx
cmp byte [rax], cl
je 0x1800719ba
mov r9, r12
mov qword [rsp + 0x20], rcx
xor r8d, r8d
lea edx, [rcx + 0x3c]
call fcn.18005b5a0
mov ecx, dword [rbp - 0x39]
mov r8, qword [rbp + 0x67]
jmp 0x1800719f9
mov rdx, qword [r12]
xor r9d, r9d
mov r8d, 0xb9
call fcn.18005a1d0
mov ecx, dword [rbp - 0x39]
mov r8, qword [rbp + 0x67]
jmp 0x1800719f9
xor eax, eax
cmp dword [r12 + 4], eax
jle 0x1800719f9
mov rdx, qword [rbp + 7]
mov dword [rdx], 0
inc eax
add rdx, 4
cmp eax, dword [r12 + 4]
jl 0x1800719e2
mov qword [rbp + 7], rdx
imul eax, dword [rbp + 0x6f], 0x5c
add ecx, eax
mov dword [rbp - 0x39], ecx
cmp ecx, dword [rbp - 9]
jbe 0x1800715b0
mov rax, rbx
mov rbx, qword [rsp + 0xe8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [0x18009c050]
jmp 0x180071a0e
movzx eax, byte [rdi]
lea rdx, [rbp - 0x41]
mov r8, qword [r12]
lea rcx, [rbp - 0x29]
mov byte [rbp - 0x41], al
mov r9, r12
mov rax, qword [rbp + 0x7f]
mov dword [rsp + 0x28], 0x22
mov byte [rbp + 0x6f], 0
mov rax, qword [rax]
mov qword [rbp - 0x29], rax
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x20], rax
call fcn.18006cd60
jmp 0x180071a0e