Function at 0x1400b6270
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x330
mov rax, qword [0x14036e3c8]
xor rax, rsp
mov qword [rsp + 0x320], rax
mov r15, rdx
call fcn.1400708c0
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14006b460
nop
call fcn.1400708d0
mov rcx, rax
call fcn.14006c390
xor ebx, ebx
test al, al
je 0x1400b6447
mov rdx, r15
lea rcx, [rsp + 0x60]
call fcn.14006ba40
lea rcx, [rsp + 0x60]
call fcn.14006b7b0
mov rcx, rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], Ordinal_133
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rbx + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400b637a
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
test eax, eax
je 0x1400b637a
mov dword [rsp + 0x40], ebx
mov ebp, esi
lea rdx, [0x140327600]
mov ecx, esi
call fcn.140243678
mov rdi, rax
test rax, rax
je 0x1400b6528
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov r8d, esi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x40], esi
je 0x1400b6528
mov rcx, rdi
call fcn.1402434a4
nop
lea rcx, [rsp + 0x60]
call fcn.140003ea0
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], Ordinal_133
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400b6418
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
test eax, eax
je 0x1400b6418
mov dword [rsp + 0x44], ebx
mov ebp, esi
lea rdx, [0x140327600]
mov ecx, esi
call fcn.140243678
mov rdi, rax
test rax, rax
je 0x1400b6418
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x44]
mov r8d, esi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x44], esi
je 0x1400b653b
mov rcx, rdi
call fcn.1402434a4
xor eax, eax
mov rcx, qword [rsp + 0x320]
xor rcx, rsp
call fcn.1402435c0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
call fcn.1400708d0
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14006ba20
call fcn.140070d30
test al, al
je 0x1400b646a
call fcn.1400708e0
jmp 0x1400b6482
lea rcx, [rsp + 0x60]
call fcn.14006b7b0
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 2]
call fcn.140091cf0
mov rsi, rax
test rax, rax
je 0x1400b637a
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
mov r8b, 1
mov rdx, r15
mov rcx, rsi
call fcn.140091640
test eax, eax
jne 0x1400b64bf
mov r14d, dword [rsp + 0x31c]
test r14d, r14d
jne 0x1400b64d9
call fcn.140070d30
test al, al
jne 0x1400b637a
mov rcx, rsi
call fcn.140091430
jmp 0x1400b637a
mov rbp, r14
mov rcx, r14
call fcn.140243670
mov rdi, rax
mov dword [rsp + 0x20], 3
mov r9d, r14d
mov r8, rax
mov edx, dword [rsp + 0x48]
mov rcx, rsi
call fcn.140092420
test eax, eax
je 0x1400b6516
cmp eax, 0x600
je 0x1400b6516
mov rcx, rdi
call fcn.1402434a4
jmp 0x1400b64bf
call fcn.140070d30
test al, al
jne 0x1400b6528
mov rcx, rsi
call fcn.140091430
nop
lea rcx, [rsp + 0x60]
call fcn.140003ea0
test rdi, rdi
je 0x1400b6384
mov rdx, rbp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r14, rax
test rax, rax
je 0x1400b65f3
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rax, rax
je 0x1400b65f3
mov r8, rbp
mov rdx, rdi
mov rcx, rax
call fcn.140245860
mov qword [rsp + 0x50], rbx
lea r8, [rsp + 0x50]
mov edx, 1
mov rcx, r14
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov rsi, rbx
mov rbp, qword [rsp + 0x50]
test rbp, rbp
je 0x1400b65f0
mov ecx, Ordinal_27
call sub.gdiplus.dll_GdipAlloc
mov rsi, rax
test rax, rax
je 0x1400b65cc
lea rax, vtable.Gdiplus::Image.0
mov qword [rsi], rax
lea rdx, [rsi + 8]
mov qword [rdx], rbx
mov rcx, rbp
call sub.gdiplus.dll_GdipLoadImageFromStream
mov dword [rsi + 0x10], eax
mov dword [rsi + 0x10], ebx
test eax, eax
je 0x1400b65f0
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, rdi
call fcn.1402434a4
mov rax, rbx
jmp 0x1400b641a
mov rbx, rsi
mov rcx, rdi
call fcn.1402434a4
mov rax, rbx
jmp 0x1400b641a