Function at 0x1800b2620
Capabilities:
Get file size
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x18020d140]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rbx, rdx
mov rdi, rcx
xor r13d, r13d
mov byte [rcx + 0x10], r13b
mov rax, qword [rcx]
call qword [rax]
mov qword [rsp + 0x30], r13
lea ecx, [r13 + 8]
call fcn.180147c14
mov qword [rsp + 0x38], rax
mov qword [rax], 0xffffffffffffffff
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
lea r9d, [r13 + 1]
mov r8d, 0x80000000
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.18001e280
test al, al
jne 0x1800b274e
lea rcx, [rbp + 0x38]
call fcn.1800bc780
nop
cmp qword [rdi + 8], r13
je 0x1800b26f3
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.1800051e0
nop
mov rcx, qword [rdi + 8]
mov r9, qword [rcx]
mov r8, rax
xor edx, edx
call qword [r9 + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 8
jb 0x1800b2733
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b272e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b2ad6
call fcn.180148104
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], r13w
mov rbx, qword [rsp + 0x30]
jmp 0x1800b2a6d
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1800b29d8
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x1800b29d8
lea rdx, [rbp - 0xc]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp eax, 0xffffffff
jne 0x1800b2788
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1800b29d8
mov r14d, dword [rbp - 0xc]
shl r14, 0x20
add r14, rsi
je 0x1800b29d8
mov r12b, 1
mov dword [rbp - 0x10], r13d
mov rsi, r13
mov ecx, 0x10000
call fcn.18014874c
mov r15, rax
movsd xmm6, qword [0x1801bc888]
nop dword [rax + rax]
test r15, r15
je 0x1800b2904
cmp qword [rbx], 0xffffffffffffffff
je 0x1800b291e
mov dword [rbp - 0x10], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x10]
mov r8d, 0x10000
mov rdx, r15
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1800b2904
movzx eax, byte [rdi + 0x10]
test al, al
jne 0x1800b2863
mov r8d, dword [rbp - 0x10]
test r8d, r8d
je 0x1800b28ff
mov rax, qword [rdi]
mov rdx, r15
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp - 0x10]
add rsi, rax
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1800b2855
mov rax, qword [rcx]
xorps xmm1, xmm1
cvtsi2sd xmm1, rsi
test rsi, rsi
jns 0x1800b283e
addsd xmm1, xmm6
xorps xmm0, xmm0
cvtsi2sd xmm0, r14
test r14, r14
jns 0x1800b284f
addsd xmm0, xmm6
divsd xmm1, xmm0
call qword [rax]
mov dword [rbp - 0x10], r13d
mov rbx, qword [rsp + 0x30]
jmp 0x1800b27c0
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
mov qword [rbp + 8], r13
mov eax, 7
mov qword [rbp + 0x10], rax
mov word [rbp - 8], r13w
cmp qword [rdi + 8], 0
je 0x1800b28af
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x70]
call fcn.1800051e0
nop
mov rcx, qword [rdi + 8]
mov r9, qword [rcx]
mov r8, rax
xor edx, edx
call qword [r9 + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp + 0x10]
xor r12b, r12b
cmp rax, 8
jb 0x1800b28ee
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b28e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b2adc
call fcn.180148104
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], 7
mov word [rbp - 8], r13w
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x1800b291e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x1800b291e
mov qword [rbx], 0xffffffffffffffff
mov rcx, r15
call fcn.180148104
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + InitCommonControls]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov edx, 7
mov qword [rsp + 0x58], rdx
mov word [rsp + 0x40], r13w
cmp qword [rdi + 8], 0
je 0x1800b2982
lea rax, [rbp - 0x50]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.1800051e0
nop
mov rcx, qword [rdi + 8]
mov r9, qword [rcx]
mov r8, rax
mov dl, 1
call qword [r9 + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800b29bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b29ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b2ae2
call fcn.180148104
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r13w
jmp 0x1800b2a70
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x28], r13
mov eax, 7
mov qword [rbp + 0x30], rax
mov word [rbp + 0x18], r13w
cmp qword [rdi + 8], 0
je 0x1800b2a24
lea rax, [rbp - 0x30]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x30]
call fcn.1800051e0
nop
mov rcx, qword [rdi + 8]
mov r9, qword [rcx]
mov r8, rax
xor edx, edx
call qword [r9 + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp + 0x30]
cmp rax, 8
jb 0x1800b2a5c
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b2a57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b2ad0
call fcn.180148104
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], r13w
xor r12b, r12b
test rbx, rbx
je 0x1800b2a9d
mov rcx, qword [rbx]
lea r8, [rcx - 1]
cmp r8, 0xfffffffffffffffd
ja 0x1800b2a8b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], r13
mov edx, 8
mov rcx, rbx
call fcn.180148104
mov qword [rsp + 0x30], r13
movzx eax, r12b
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.180147bf0
mov rbx, qword [rsp + 0x1c0]
movaps xmm6, xmmword [rsp + 0x160]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18014ebe4
nop
call fcn.18014ebe4
int3
call fcn.18014ebe4
int3
call fcn.18014ebe4
int3