Function at 0x1400dd2d0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rax, qword [0x1401f7280]
xor rax, rsp
mov qword [rbp + 7], rax
xor r13d, r13d
movsxd r12, r8d
mov r15, rdx
mov ebx, r9d
mov qword [rbp - 0x11], rdx
mov rdi, rcx
movzx eax, r13w
mov r8, r12
xor edx, edx
mov rcx, r15
mov dword [rbp - 0x19], r12d
mov dword [rbp - 0x21], ebx
mov dword [rbp - 0x25], eax
mov r14d, r13d
mov dword [rbp - 0x2d], r13d
call fcn.1400f9ab0
cmp ebx, 0xffffffff
jne 0x1400dd33c
lea rdx, [rbp - 0x21]
mov rcx, rdi
call fcn.1400e5350
lea rdx, [0x140183378]
mov rcx, rdi
call fcn.1400fafe4
mov rdi, rax
test rax, rax
je 0x1400dd446
cmp dword [rbp - 0x21], 0x73
mov qword [rsp + 0x98], rsi
jne 0x1400dd465
xor r8d, r8d
xor edx, edx
mov rcx, rax
mov r12d, r13d
call fcn.1400fad50
mov esi, 1
mov edx, esi
mov ecx, 0x4010
call fcn.1400f97a4
mov rbx, rax
test rax, rax
je 0x1400dd434
mov r15d, r13d
nop dword [rax]
test r14d, r14d
jne 0x1400dd420
mov r9, rdi
mov r8d, 0x4000
mov rdx, rsi
mov rcx, rbx
call fcn.1400fabdc
mov edx, r13d
mov rax, r13
nop
cmp byte [rax + rbx], 0x45
jne 0x1400dd3f6
cmp byte [rax + rbx + 1], 0x78
jne 0x1400dd3f6
cmp byte [rax + rbx + 2], 0x69
jne 0x1400dd3f6
cmp byte [rax + rbx + 3], 0x66
jne 0x1400dd3f6
movzx ecx, byte [rax + rbx + 6]
cmp cl, 0x49
jne 0x1400dd3eb
cmp byte [rax + rbx + 7], cl
je 0x1400dd405
cmp cl, 0x4d
jne 0x1400dd3f6
cmp byte [rax + rbx + 7], cl
je 0x1400dd405
inc rax
inc edx
cmp rax, 0x3ff8
jl 0x1400dd3c0
jmp 0x1400dd410
lea r14d, [r12 + 6]
mov dword [rbp - 0x25], esi
add r14d, edx
inc r15d
add r12d, 0x4000
cmp r15d, 3
jl 0x1400dd3a0
mov rcx, rbx
call fcn.1400f97e8
mov eax, dword [rbp - 0x25]
test ax, ax
jne 0x1400dd5e9
mov rcx, rdi
call fcn.1400fa904
xor eax, eax
mov rsi, qword [rsp + 0x98]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400f9a80
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbx
pop rbp
ret
mov esi, 1
lea rcx, [rbp - 9]
mov r9, rax
lea r8d, [rsi + 1]
mov edx, esi
call fcn.1400fabdc
movzx eax, byte [rbp - 9]
cmp al, 0xff
jne 0x1400dd5c8
cmp byte [rbp - 8], 0xd8
jne 0x1400dd434
mov rcx, rdi
call fcn.1400fa96c
test eax, eax
jne 0x1400dd434
nop word [rax + rax]
lea rcx, [rbp - 9]
mov r9, rdi
mov r8d, 2
mov rdx, rsi
call fcn.1400fabdc
cmp rax, 2
jne 0x1400dd434
cmp byte [rbp - 9], 0xff
jne 0x1400dd4cf
cmp byte [rbp - 8], 0xd8
je 0x1400dd597
lea rcx, [rbp - 0x35]
mov r9, rdi
mov r8d, 2
mov rdx, rsi
call fcn.1400fabdc
cmp rax, 2
jne 0x1400dd434
movzx eax, word [rbp - 0x35]
rol ax, 8
cmp byte [rbp - 9], 0xff
mov word [rbp - 0x35], ax
jne 0x1400dd55e
cmp byte [rbp - 8], 0xe1
jne 0x1400dd55e
mov rcx, rdi
call fcn.1400fe108
lea rcx, [rbp - 9]
mov r9, rdi
mov r8d, 5
mov rdx, rsi
mov ebx, eax
call fcn.1400fabdc
xor r8d, r8d
mov edx, ebx
mov rcx, rdi
call fcn.1400fad50
cmp byte [rbp - 9], 0x45
jne 0x1400dd54a
cmp byte [rbp - 8], 0x78
jne 0x1400dd54a
cmp byte [rbp - 7], 0x69
jne 0x1400dd54a
cmp byte [rbp - 6], 0x66
je 0x1400dd5ac
movzx edx, word [rbp - 0x35]
mov r8d, esi
mov rcx, rdi
sub edx, 2
call fcn.1400fad50
jmp 0x1400dd597
movzx edx, ax
mov r8d, esi
mov rcx, rdi
sub edx, 2
call fcn.1400fad50
test eax, eax
jne 0x1400dd434
mov rcx, rdi
call fcn.1400fa96c
test eax, eax
jne 0x1400dd434
mov rcx, rdi
call fcn.1400fa994
test eax, eax
jne 0x1400dd434
mov rcx, rdi
call fcn.1400fa96c
test eax, eax
je 0x1400dd4a0
jmp 0x1400dd434
mov rcx, rdi
call fcn.1400fe108
lea r14d, [rax - 2]
cmp r14d, 2
jbe 0x1400dd434
add r14d, 8
jmp 0x1400dd5f1
cmp al, 0x49
jne 0x1400dd5d6
cmp byte [rbp - 8], al
je 0x1400dd5f1
jmp 0x1400dd434
cmp al, 0x4d
jne 0x1400dd434
cmp byte [rbp - 8], al
jne 0x1400dd434
jmp 0x1400dd5f1
mov r15, qword [rbp - 0x11]
mov r12d, dword [rbp - 0x19]
xor r8d, r8d
mov edx, r14d
mov rcx, rdi
call fcn.1400fad50
lea rcx, [rbp - 0x31]
mov r9, rdi
mov r8d, 2
mov rdx, rsi
call fcn.1400fabdc
mov eax, 0x4d4d
lea rcx, [rbp - 0x31]
cmp word [rbp - 0x31], ax
mov ebx, r13d
mov r9, rdi
mov r8, rsi
mov edx, 2
cmove ebx, esi
call fcn.1400fabdc
lea rcx, [rbp - 0x29]
mov r9, rdi
mov r8, rsi
mov edx, 4
call fcn.1400fabdc
test ebx, ebx
je 0x1400dd67b
mov ecx, dword [rbp - 0x29]
mov edx, ecx
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
or edx, eax
mov eax, ecx
and ecx, 0xff00
shl eax, 0x10
shr edx, 8
or eax, ecx
shl eax, 8
or edx, eax
mov dword [rbp - 0x29], edx
jmp 0x1400dd67e
mov edx, dword [rbp - 0x29]
test edx, edx
je 0x1400dd6db
add edx, r14d
xor r8d, r8d
mov rcx, rdi
call fcn.1400fad50
test eax, eax
jne 0x1400dd6db
lea edx, [rax + 2]
lea rcx, [rbp - 0x39]
mov r9, rdi
mov r8, rsi
call fcn.1400fabdc
movzx eax, word [rbp - 0x39]
test ebx, ebx
je 0x1400dd6b6
rol ax, 8
mov word [rbp - 0x39], ax
mov dword [rsp + 0x30], r12d
lea r9, [rbp - 0x2d]
movzx r8d, ax
mov edx, r14d
mov rcx, rdi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebx
call fcn.1400dd760
mov r13d, dword [rbp - 0x2d]
or rax, 0xffffffffffffffff
nop
inc rax
cmp byte [r15 + rax], 0
jne 0x1400dd6e0
test rax, rax
jne 0x1400dd74a
test r13d, r13d
je 0x1400dd74a
lea edx, [r14 + r13]
xor r8d, r8d
mov rcx, rdi
call fcn.1400fad50
test eax, eax
jne 0x1400dd74a
lea edx, [rax + 2]
lea rcx, [rbp - 0x39]
mov r9, rdi
mov r8, rsi
call fcn.1400fabdc
movzx eax, word [rbp - 0x39]
test ebx, ebx
je 0x1400dd729
rol ax, 8
mov word [rbp - 0x39], ax
mov dword [rsp + 0x30], r12d
lea r9, [rbp - 0x2d]
movzx r8d, ax
mov edx, r14d
mov rcx, rdi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebx
call fcn.1400dd760
mov rcx, rdi
call fcn.1400fa904
mov eax, esi
jmp 0x1400dd43e