Function at 0x140005b40
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x14002d4f0]
xor rax, rsp
mov qword [rbp - 8], rax
mov r12d, ecx
mov ecx, 0x30032
mov r13, r8
mov qword [rbp - 0x30], rdx
call fcn.14000c130
mov rsi, rax
test rax, rax
jne 0x140005b89
or eax, 0xffffffff
jmp 0x140005e73
lea r9, [rbp - 0x38]
lea r8, [rbp - 0x40]
mov rdx, rax
mov ecx, r12d
call fcn.140005e98
or r14d, 0xffffffff
cmp eax, r14d
je 0x140005e70
mov rdx, qword [rbp - 0x38]
xor r8d, r8d
mov ecx, r12d
call fcn.14000dd7c
test rax, rax
js 0x140005e70
mov r8d, 0x400
mov rdx, rsi
mov ecx, r12d
call fcn.140013b90
mov r15d, eax
test eax, eax
js 0x140005e68
xor ecx, ecx
cmp byte [rsi + 1], 0x4b
mov rdi, rsi
sete cl
xor eax, eax
cmp byte [rsi + 3], 2
sete al
and ecx, eax
xor eax, eax
cmp byte [rsi + 2], 1
sete al
and ecx, eax
xor eax, eax
cmp byte [rsi], 0x50
sete al
test eax, ecx
je 0x140005e68
cmp r15d, 0x2e
jge 0x140005c46
movsxd rbx, r15d
mov rdx, rdi
mov rcx, rsi
mov r8, rbx
call fcn.14000ba30
lea rdx, [rbx + rsi]
mov r8d, 0x400
mov ecx, r12d
mov rdi, rax
call fcn.140013b90
test eax, eax
jle 0x140005e68
add r15d, eax
movzx eax, byte [rdi + 0x20]
movzx edx, byte [rdi + 0x21]
movzx ecx, byte [rdi + 0x1f]
movzx ebx, byte [rdi + 0x1d]
shl edx, 8
shl ecx, 8
or edx, eax
movzx eax, byte [rdi + 0x1e]
shl ebx, 8
or ecx, eax
movzx eax, byte [rdi + 0x1c]
or ebx, eax
add edx, ecx
add ebx, 0x2e
add ebx, edx
lea eax, [rbx + 4]
cmp r15d, eax
jge 0x140005cc1
cmp rdi, rsi
je 0x140005c92
movsxd r8, r15d
mov rdx, rdi
mov rcx, rsi
call fcn.14000ba30
mov rdi, rax
mov eax, 0x400
mov r8d, ebx
movsxd rdx, r15d
sub r8d, r15d
mov ecx, r12d
add r8d, 4
cmp r8d, eax
cmovl r8d, eax
add rdx, rsi
call fcn.140013b90
test eax, eax
jle 0x140005e68
add r15d, eax
mov rcx, r13
call fcn.14000bfb0
movzx ecx, byte [rdi + 0x1d]
shl ecx, 8
movsxd rdx, ecx
movzx ecx, byte [rdi + 0x1c]
or rdx, rcx
cmp rdx, rax
jne 0x140005cfa
mov rcx, r13
call fcn.14000bfb0
lea rcx, [rdi + 0x2e]
mov rdx, r13
mov r8, rax
call fcn.14000dc10
test eax, eax
je 0x140005d2c
xor ecx, ecx
sub r15d, ebx
movsxd rax, ebx
add rdi, rax
cmp byte [rdi + 1], 0x4b
sete cl
xor eax, eax
cmp byte [rdi + 3], 2
sete al
and ecx, eax
xor eax, eax
cmp byte [rdi + 2], 1
sete al
and ecx, eax
xor eax, eax
cmp byte [rdi], 0x50
jmp 0x140005c04
movzx eax, byte [rdi + 0x2c]
movzx edx, byte [rdi + 0x2d]
xor r8d, r8d
shl edx, 8
mov ecx, r12d
or edx, eax
movzx eax, byte [rdi + 0x2b]
shl edx, 8
or edx, eax
movzx eax, byte [rdi + 0x2a]
shl edx, 8
or rdx, rax
add rdx, qword [rbp - 0x40]
call fcn.14000dd7c
test rax, rax
js 0x140005e68
lea rdx, [rbp - 0x28]
mov r8d, 0x1e
mov ecx, r12d
call fcn.140013b90
test eax, eax
js 0x140005e68
xor ecx, ecx
cmp byte [rbp - 0x27], 0x4b
sete cl
xor eax, eax
cmp byte [rbp - 0x28], 0x50
sete al
and ecx, eax
xor eax, eax
cmp byte [rbp - 0x26], 3
sete al
and ecx, eax
xor eax, eax
cmp byte [rbp - 0x25], 4
sete al
test eax, ecx
je 0x140005e68
movzx eax, byte [rdi + 0x1a]
movzx ecx, byte [rdi + 0x1b]
mov r9, qword [rbp - 0x30]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdi + 0x19]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdi + 0x18]
shl ecx, 8
or rcx, rax
mov qword [r9], rcx
movzx eax, byte [rdi + 0x16]
movzx ecx, byte [rdi + 0x17]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdi + 0x15]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdi + 0x14]
shl ecx, 8
or rcx, rax
mov qword [r9 + 8], rcx
movzx eax, byte [rdi + 0x2c]
movzx r8d, byte [rdi + 0x2d]
shl r8d, 8
or r8d, eax
movzx eax, byte [rdi + 0x2b]
shl r8d, 8
or r8d, eax
movzx eax, byte [rdi + 0x2a]
shl r8d, 8
or r8, rax
movzx eax, byte [rbp - 0xd]
shl eax, 8
movsxd rdx, eax
movzx eax, byte [rbp - 0xe]
or rdx, rax
movzx eax, byte [rbp - 0xb]
add rdx, qword [rbp - 0x40]
shl eax, 8
movsxd rcx, eax
movzx eax, byte [rbp - 0xc]
or rcx, rax
lea rax, [r8 + rdx]
add rcx, 0x1e
add rax, rcx
mov qword [r9 + 0x10], rax
movzx ecx, byte [rdi + 0xb]
movzx eax, byte [rdi + 0xa]
shl ecx, 8
or ecx, eax
xor r14d, r14d
mov dword [r9 + 0x18], ecx
mov rcx, rsi
call fcn.14000c0f0
mov eax, r14d
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14000cdf0
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret