Function at 0x1400a0438
Capabilities:
Get file size
Read file on windows

Disassembly:
jmp 0x1400b8c90
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x548
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0xe2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x568]
mov rax, qword [0x140248940]
xor rax, rbp
mov qword [rbp + 0x4f8], rax
lea rcx, [0x14026602e]
call fcn.1400a4e07
mov dword [rbp + 4], 0
mov dword [rbp + 0x24], 0
mov qword [rbp + 0x48], 0xffffffffffffffff
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x88], 0
lea rax, [rbp + 0x130]
mov rdi, rax
xor eax, eax
mov ecx, 0x80
rep stosb byte [rdi], al
lea rax, [rbp + 0x270]
mov rdi, rax
xor eax, eax
mov ecx, 0x100
rep stosb byte [rdi], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 0xc0000000
mov rcx, qword [rbp + 0x528]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0xffffffffffffffff
jne 0x1400b8d9a
mov rax, qword [rbp + 0x520]
add rax, 8
xor r9d, r9d
lea r8, [0x1401f5bf4]
lea rdx, [0x1401f5d10]
mov rcx, rax
call fcn.1400a24cc
jmp 0x1400b9a18
lea rdx, [rbp + 0xe8]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x1400b8ddd
mov rax, qword [rbp + 0x520]
add rax, 8
xor r9d, r9d
lea r8, [0x1401f5bf4]
lea rdx, [0x1401f5d20]
mov rcx, rax
call fcn.1400a24cc
jmp 0x1400b9a18
mov eax, dword [rbp + 0xe8]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa4]
mov ecx, eax
call fcn.1400a2e31
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xc4]
mov r8d, dword [rbp + 0xa4]
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400b8e57
mov rax, qword [rbp + 0x520]
add rax, 8
xor r9d, r9d
lea r8, [0x1401f5bf4]
lea rdx, [0x1401f5d38]
mov rcx, rax
call fcn.1400a24cc
jmp 0x1400b9a18
lea rcx, [0x140248030]
call fcn.1400a2503
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x1400b8e9c
mov rax, qword [rbp + 0x520]
add rax, 8
xor r9d, r9d
lea r8, [0x1401f5bf4]
lea rdx, [0x1401f5d48]
mov rcx, rax
call fcn.1400a24cc
jmp 0x1400b9a18
mov r9d, dword [rbp + 0xc4]
mov r8, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
call fcn.1400a1f6d
mov rax, qword [rbp + 0x88]
add rax, 0x20
mov r8d, 0x100
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.1400a25d5
cmp dword [rbp + 0x270], 0x57115786
je 0x1400b8f14
mov rax, qword [rbp + 0x520]
add rax, 8
xor r9d, r9d
lea r8, [0x1401f5bf4]
lea rdx, [0x1401f5d58]
mov rcx, rax
call fcn.1400a24cc
jmp 0x1400b9a18
lea rdx, [rbp + 0x2ea]
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x48]
call qword [sym.imp.USER32.dll_SetWindowTextW]
lea rdx, [rbp + 0x2a8]
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x50]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov rax, qword [rbp + 0x288]
mov qword [rbp + 0x108], rax
xor edx, edx
mov rax, qword [rbp + 0x108]
mov ecx, 0x989680
div rcx
mov qword [rbp + 0x108], rax
xor edx, edx
mov rax, qword [rbp + 0x108]
mov ecx, 0xe10
div rcx
mov qword [rbp + 0x108], rax
xor edx, edx
mov rax, qword [rbp + 0x108]
mov ecx, 0x18
div rcx
mov qword [rbp + 0x108], rax
mov r9d, dword [rbp + 0x108]
lea r8, [0x1401f5d6c]
mov edx, 0x20
lea rcx, [rbp + 0x130]
call fcn.1400a1806
lea rdx, [rbp + 0x130]
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov r9d, dword [rbp + 0x274]
lea r8, [0x1401f5d6c]
mov edx, 0x20
lea rcx, [rbp + 0x130]
call fcn.1400a1806
lea rdx, [rbp + 0x130]
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x80]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, dword [rbp + 0x278]
and eax, 1
test eax, eax
je 0x1400b903c
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b905b
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x88]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, str.AABBCCDDEEFFGGHHIIJJKKLLMMNNPP
lea rcx, [rbp + 0x2a8]
call fcn.1400a262a
test eax, eax
jne 0x1400b9093
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x58]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b90af
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x58]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
shr eax, 1
and eax, 1
test eax, eax
je 0x1400b90df
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x78]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b90fb
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x78]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
shr eax, 2
and eax, 1
test eax, eax
je 0x1400b912f
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xb0]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b914e
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xb0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
shr eax, 3
and eax, 1
test eax, eax
je 0x1400b9182
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xb8]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b91a1
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xb8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
shr eax, 4
and eax, 1
test eax, eax
je 0x1400b91d5
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xc0]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b91f4
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xc0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
shr eax, 5
and eax, 1
test eax, eax
je 0x1400b9228
xor r9d, r9d
mov r8d, 1
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xc8]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b9247
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf1
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0xc8]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1009
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8d, 0x58
xor edx, edx
lea rcx, [rbp + 0x1d0]
call fcn.1400a39d0
mov dword [rbp + 0x1d0], 1
mov dword [rbp + 0x244], 0
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5d74]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rbp + 0x270]
lea r8, str.0x_x
mov edx, 0x20
lea rcx, [rbp + 0x130]
call fcn.1400a1806
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5d90]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, [rbp + 0x2ea]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5da0]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, [rbp + 0x2a8]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5db0]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, str.AABBCCDDEEFFGGHHIIJJKKLLMMNNOOPP
lea rcx, [rbp + 0x2a8]
call fcn.1400a262a
test eax, eax
je 0x1400b94cb
lea rax, [0x1401f5e10]
mov qword [rbp + 0x1e8], rax
jmp 0x1400b94d9
lea rax, [0x1401f5e18]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, str._T_u
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
and eax, 1
test eax, eax
je 0x1400b9578
lea rax, [0x1401f5e30]
mov qword [rbp + 0x1e8], rax
jmp 0x1400b9586
lea rax, str.g_T_u
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f71f8]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x278]
shr eax, 1
and eax, 1
test eax, eax
je 0x1400b9627
lea rax, [0x1401f7208]
mov qword [rbp + 0x1e8], rax
jmp 0x1400b9635
lea rax, [0x1401f7218]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5e50]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rbp + 0x108]
lea r8, [0x1401f5e60]
mov edx, 0x40
lea rcx, [rbp + 0x130]
call fcn.1400a1806
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5e70]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rbp + 0x108]
lea r8, [0x1401f5e60]
mov edx, 0x40
lea rcx, [rbp + 0x130]
call fcn.1400a1806
mov r8d, 0x40
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0x280]
call fcn.1400a33e0
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5e80]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8d, 0x40
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0x290]
call fcn.1400a33e0
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5e90]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8d, 0x40
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0x298]
call fcn.1400a33e0
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0x244]
inc eax
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0x1d4], eax
lea rax, [0x1401f5b70]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 0
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104d
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rbp + 0x274]
lea r8, [0x1401f5d6c]
mov edx, 0x20
lea rcx, [rbp + 0x130]
call fcn.1400a1806
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x1d8], 1
lea r9, [rbp + 0x1d0]
xor r8d, r8d
mov edx, 0x104c
mov rax, qword [rbp + 0x520]
mov rcx, qword [rax + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rbp + 0xa4], 0x200
jbe 0x1400b9a11
mov eax, dword [rbp + 0xa4]
sub eax, 0x200
mov rcx, qword [rbp + 0x88]
add rcx, 0x200
mov r8d, eax
mov rdx, rcx
mov rcx, qword [rbp + 0x520]
call fcn.1400a239b
mov dword [rbp + 4], 1
cmp qword [rbp + 0x88], 0
je 0x1400b9a2e
mov rcx, qword [rbp + 0x88]
call fcn.1400a1bcb
cmp qword [rbp + 0x48], 0xffffffffffffffff
je 0x1400b9a3f
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x68], 0
je 0x1400b9a4f
mov rcx, qword [rbp + 0x68]
call fcn.1400a2882
mov eax, dword [rbp + 4]
mov edi, eax
lea rcx, [rbp - 0x40]
lea rdx, [0x1401f6770]
call fcn.1400a3fe8
mov eax, edi
mov rcx, qword [rbp + 0x4f8]
xor rcx, rbp
call fcn.1400a25bc
lea rsp, [rbp + 0x508]
pop rdi
pop rbp
ret