Function at 0x140006c7c
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x1400270d0]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov rbx, rdx
mov edi, ecx
call fcn.140006acc
or r12, 0xffffffffffffffff
mov rsi, rax
cmp rax, r12
jne 0x140006cc8
mov rax, r12
jmp 0x140006eec
cmp byte [0x140028c90], 0
je 0x140006e8e
movzx eax, byte [rbx + 0xe]
movzx edx, byte [rbx + 0xf]
movzx ecx, byte [rbx + 0xb]
shl edx, 8
shl ecx, 8
or edx, eax
movzx eax, byte [rbx + 0xd]
shl edx, 8
or edx, eax
movzx eax, byte [rbx + 0xc]
shl edx, 8
or rdx, rax
movzx eax, byte [rbx + 0xa]
or ecx, eax
movzx eax, byte [rbx + 9]
shl rdx, 0x20
shl ecx, 8
or ecx, eax
movzx eax, byte [rbx + 8]
shl ecx, 8
or rcx, rax
or rdx, rcx
jl 0x140006cc0
xor r8d, r8d
mov ecx, edi
call fcn.14000d1b8
test rax, rax
js 0x140006cc0
lea rdx, [rsp + 0x20]
mov r8d, 0x400
mov ecx, edi
call fcn.140018dc8
test eax, eax
js 0x140006cc0
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x23]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x21]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x20]
shl ecx, 8
or ecx, eax
cmp ecx, 0x6064b50
jne 0x140006cc0
movzx eax, byte [rsp + 0x56]
movzx edx, byte [rsp + 0x57]
movzx ecx, byte [rsp + 0x53]
shl edx, 8
shl ecx, 8
or edx, eax
movzx eax, byte [rsp + 0x55]
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x54]
shl edx, 8
or rdx, rax
movzx eax, byte [rsp + 0x52]
or ecx, eax
movzx eax, byte [rsp + 0x51]
shl rdx, 0x20
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x50]
shl ecx, 8
or rcx, rax
or rdx, rcx
jl 0x140006cc0
xor r8d, r8d
mov ecx, edi
call fcn.14000d1b8
test rax, rax
js 0x140006cc0
movzx eax, byte [rsp + 0x4e]
movzx edx, byte [rsp + 0x4f]
movzx ecx, byte [rsp + 0x4b]
shl edx, 8
shl ecx, 8
mov r8, 0xffffffffffffffc8
or edx, eax
movzx eax, byte [rsp + 0x4d]
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x4c]
shl edx, 8
or rdx, rax
movzx eax, byte [rsp + 0x4a]
or ecx, eax
movzx eax, byte [rsp + 0x49]
shl rdx, 0x20
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x48]
shl ecx, 8
or rcx, rax
movzx eax, byte [rsp + 0x56]
or rdx, rcx
movzx ecx, byte [rsp + 0x53]
sub r8, rdx
movzx edx, byte [rsp + 0x57]
shl ecx, 8
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x55]
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x54]
shl edx, 8
or rdx, rax
movzx eax, byte [rsp + 0x52]
or ecx, eax
movzx eax, byte [rsp + 0x51]
shl rdx, 0x20
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x50]
shl ecx, 8
or rcx, rax
or rdx, rcx
sub r8, rdx
add rsi, r8
jmp 0x140006ee9
movzx eax, byte [rbx + 0x12]
movzx edx, byte [rbx + 0x13]
movzx ecx, byte [rbx + 0xf]
shl ecx, 8
shl edx, 8
xor r8d, r8d
or edx, eax
movzx eax, byte [rbx + 0x11]
shl edx, 8
or edx, eax
movzx eax, byte [rbx + 0x10]
shl edx, 8
or rdx, rax
movzx eax, byte [rbx + 0xe]
or ecx, eax
movzx eax, byte [rbx + 0xd]
shl ecx, 8
or ecx, eax
movzx eax, byte [rbx + 0xc]
shl ecx, 8
or rcx, rax
add rcx, rdx
sub rsi, rcx
mov ecx, edi
add rdx, rsi
call fcn.14000d1b8
test rax, rax
mov rax, r12
js 0x140006eec
mov rax, rsi
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.14000b6f0
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r12
pop rdi
pop rbp
ret