Function at 0x140034810
Capabilities:
Read file on windows

Disassembly:
push rbp
push r12
push r13
push r14
sub rsp, 0x58
mov r12, rdx
mov r13d, r9d
xor edx, edx
mov rbp, r8
mov r14, rcx
test r8, r8
jne 0x14003484b
mov dword [rcx + 0x10], edx
mov rax, rcx
mov dword [rcx], 1
mov qword [rcx + 8], rdx
add rsp, 0x58
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rsp + 0x80], rbx
mov rcx, rbp
mov qword [rsp + 0x90], rdi
mov edi, 2
mov r8d, edi
call fcn.140047e58
mov rcx, rbp
call fcn.1400483e4
xor r8d, r8d
xor edx, edx
mov rcx, rbp
mov rbx, rax
call fcn.140047e58
test rbx, rbx
jns 0x14003489a
xor edx, edx
mov dword [r14], edi
mov dword [r14 + 0x10], edx
mov qword [r14 + 8], rdx
jmp 0x140034967
mov rax, qword [section..data]
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x50], r15
lea r15, [rbx + 1]
mov rcx, r15
call rax
mov rsi, rax
test rax, rax
jne 0x1400348d5
xor edx, edx
mov dword [r14], 3
mov dword [r14 + 0x10], edx
mov qword [r14 + 8], rdx
jmp 0x14003495a
mov r9, rbp
mov r8, rbx
mov edx, 1
mov rcx, rsi
call fcn.140047b20
cmp rax, rbx
je 0x140034905
mov rcx, rsi
call qword [0x140097008]
xor edx, edx
mov dword [r14], edi
mov dword [r14 + 0x10], edx
mov qword [r14 + 8], rdx
jmp 0x14003495a
mov eax, dword [rsp + 0xa0]
cmp eax, 8
je 0x14003491e
cmp eax, 4
je 0x14003491e
cmp eax, 7
jne 0x140034986
lea edi, [rax - 2]
mov rdx, rbx
mov r15, rdx
mov rax, qword [rsp + 0xa8]
mov r9, rsi
mov qword [rsp + 0x48], rax
mov r8, r12
mov byte [rsp + 0x40], 1
mov rdx, r12
mov byte [rsp + 0x38], 1
mov rcx, r14
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
call fcn.140034570
mov rsi, qword [rsp + 0x88]
mov r15, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x80]
mov rax, r14
mov rdi, qword [rsp + 0x90]
add rsp, 0x58
pop r14
pop r13
pop r12
pop rbp
ret
test eax, eax
je 0x140034994
mov edi, eax
mov rdx, rbx
jmp 0x140034d29
cmp rbx, 4
jb 0x140034d21
movzx r9d, byte [rsi]
mov rdx, rbx
movzx ecx, byte [rsi + 1]
movzx eax, byte [rsi + 2]
movzx r8d, byte [rsi + 3]
test r9b, r9b
jne 0x1400349fe
test cl, cl
jne 0x1400349e1
cmp al, 0xfe
jne 0x1400349d3
cmp r8b, 0xff
jne 0x140034d24
mov edi, 6
jmp 0x140034d29
test al, al
jne 0x140034d24
cmp r8b, 0x3c
jmp 0x1400349c3
cmp cl, 0x3c
jne 0x140034d24
test al, al
jne 0x140034a37
cmp r8b, 0x3f
jne 0x140034a37
mov edi, 3
jmp 0x140034d29
cmp r9b, 0xff
jne 0x140034a28
cmp cl, 0xfe
jne 0x140034d24
test al, al
jne 0x140034d29
test r8b, r8b
jne 0x140034d29
mov edi, 5
jmp 0x140034d29
cmp r9b, 0xfe
jne 0x140034a41
cmp cl, 0xff
jne 0x140034d24
mov edi, 3
jmp 0x140034d29
cmp r9b, 0xef
je 0x140034d24
cmp r9b, 0x3c
jne 0x140034d24
test cl, cl
je 0x140034a0d
cmp cl, 0x3f
jne 0x140034d24
cmp al, 0x78
jne 0x140034d24
cmp r8b, 0x6d
jne 0x140034d24
cmp rbx, 6
jb 0x140034d21
xor edx, edx
cmp byte [rsi + 4], 0x6c
mov eax, edx
sete al
cmp r9b, r9b
cmove edx, eax
test edx, edx
je 0x140034d21
movzx eax, byte [rsi + 5]
lea r11, [0x14005a160]
test byte [rax + r11], 8
je 0x140034d21
mov edi, 6
mov rdx, rbx
cmp rbx, 7
jbe 0x140034d24
mov r8d, 1
lea rcx, [rsi + 6]
sub r8, rsi
nop dword [rax]
movzx eax, byte [rcx]
cmp al, 0x3f
je 0x140034d24
inc rcx
cmp al, 0x65
jne 0x140034ae7
cmp byte [rcx], 0x6e
je 0x140034af8
inc rdi
lea rax, [r8 + rcx]
cmp rax, rbx
jb 0x140034ad0
jmp 0x140034d24
cmp rdi, rbx
jae 0x140034d24
lea rcx, [rdi + 1]
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x6e
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x63
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x6f
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x64
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x69
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x6e
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
cmp byte [rcx + rsi], 0x67
jne 0x140034d24
inc rcx
cmp rcx, rbx
jae 0x140034d24
nop dword [rax + rax]
movzx r8d, byte [rcx + rsi]
mov rax, rbx
test byte [r8 + r11], 8
je 0x140034bcc
inc rcx
cmp rcx, rbx
jb 0x140034bb0
jmp 0x140034d24
cmp r8b, 0x3d
jne 0x140034d24
inc rcx
cmp rcx, rax
jae 0x140034bf7
nop
movzx eax, byte [rcx + rsi]
test byte [rax + r11], 8
je 0x140034cc6
inc rcx
cmp rcx, rdx
jb 0x140034be0
mov r9b, 0x27
cmp rcx, rdx
jae 0x140034d24
cmp byte [rcx + rsi], r9b
jne 0x140034d24
inc rcx
mov r10, rcx
lea r8, [rcx + rsi]
cmp rcx, rdx
jae 0x140034c33
nop dword [rax]
movzx eax, byte [rcx + rsi]
test byte [rax + r11], 0x40
je 0x140034c33
inc rcx
cmp rcx, rdx
jb 0x140034c20
mov rax, rcx
sub rax, r10
cmp rcx, rdx
jae 0x140034d24
cmp byte [rcx + rsi], r9b
jne 0x140034d24
cmp rax, 0xa
jne 0x140034cd7
movzx eax, byte [r8]
or al, 0x20
cmp al, 0x69
jne 0x140034d24
movzx eax, byte [r8 + 1]
or al, 0x20
cmp al, 0x73
jne 0x140034d24
movzx eax, byte [r8 + 2]
or al, 0x20
cmp al, 0x6f
jne 0x140034d24
cmp byte [r8 + 3], 0x2d
jne 0x140034d24
cmp byte [r8 + 4], 0x38
jne 0x140034d24
cmp byte [r8 + 5], 0x38
jne 0x140034d24
cmp byte [r8 + 6], 0x35
jne 0x140034d24
cmp byte [r8 + 7], 0x39
jne 0x140034d24
cmp byte [r8 + 8], 0x2d
jne 0x140034d24
cmp byte [r8 + 9], 0x31
jne 0x140034d24
mov edi, 9
jmp 0x140034d29
cmp al, 0x22
jne 0x140034bf7
movzx r9d, al
jmp 0x140034c03
cmp rax, 6
jne 0x140034d24
movzx eax, byte [r8]
or al, 0x20
cmp al, 0x6c
jne 0x140034d24
movzx eax, byte [r8 + 1]
or al, 0x20
cmp al, 0x61
jne 0x140034d24
movzx eax, byte [r8 + 2]
or al, 0x20
cmp al, 0x74
jne 0x140034d24
movzx eax, byte [r8 + 3]
or al, 0x20
cmp al, 0x69
jne 0x140034d24
movzx eax, byte [r8 + 4]
or al, 0x20
cmp al, 0x6e
jne 0x140034d24
cmp byte [r8 + 5], 0x31
jne 0x140034d24
mov edi, 9
jmp 0x140034d29
mov rdx, rbx
mov edi, 1
cmp edi, 1
jne 0x140034921
mov byte [rsi + rdx], 0
jmp 0x140034924