Function at 0x1800e9f60
Capabilities:
Get file size
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x378]
sub rsp, 0x450
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x18020d140]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov r15, rdx
mov r13, rcx
xor edi, edi
xor ebx, ebx
call fcn.1800eb41c
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1800f1dfc
nop
call fcn.1800eb424
mov rsi, rax
mov rcx, rax
call fcn.1800f28cc
lea rcx, [rsp + 0x60]
test al, al
je 0x1800ea082
mov rdx, r15
call fcn.1800f2124
lea rcx, [rsp + 0x60]
call fcn.18007c880
mov rcx, rax
and qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rdi + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x1800ea029
lea rcx, [rsp + 0x60]
call fcn.1800f1f54
jmp 0x1800ea1ea
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
test eax, eax
je 0x1800ea01a
and dword [rsp + 0x40], 0
mov ecx, ebx
call fcn.18014874c
mov rdi, rax
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x40]
mov r8d, ebx
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x40], ebx
je 0x1800ea1d7
mov rcx, rdi
call fcn.180148104
xor edi, edi
jmp 0x1800ea01a
mov rdx, rsi
call fcn.1800f20fc
call fcn.1800eb758
test al, al
je 0x1800ea09d
call fcn.1800eb42c
mov rsi, rax
jmp 0x1800ea0fd
call fcn.1800eb434
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.1800f1dfc
nop
lea rcx, [rbp + 0x80]
call fcn.18007c880
mov rcx, rax
xor edx, edx
call fcn.1800f1010
mov r14, rax
lea rcx, [rsp + 0x60]
call fcn.18007c880
mov rcx, rax
mov rdx, r14
call fcn.1800f8088
mov rsi, rax
test r14, r14
je 0x1800ea0f1
mov rcx, r14
call fcn.180148104
nop
lea rcx, [rbp + 0x80]
call fcn.1800f1f54
test rsi, rsi
je 0x1800ea01a
and dword [rsp + 0x44], 0
or r8d, 0xffffffff
mov rdx, r15
lea rcx, [rbp - 0x10]
call fcn.1800f1e2c
nop
lea r8, [0x1801b9b20]
lea rdx, [0x1801b330c]
lea rcx, [rbp - 0x10]
call fcn.1800f2b48
lea rcx, [rbp - 0x10]
call fcn.18007c880
mov rdx, rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
mov r8b, 1
mov rcx, rsi
call fcn.1800f7a8c
test eax, eax
je 0x1800ea16d
lea rcx, [rbp - 0x10]
call fcn.1800f1f54
jmp 0x1800ea01a
mov ebx, dword [rbp + 0x33c]
test ebx, ebx
je 0x1800ea15f
mov ecx, ebx
call fcn.18014874c
mov rdi, rax
mov r9d, ebx
mov r8, rax
mov edx, dword [rsp + 0x44]
mov rcx, rsi
call fcn.1800f8584
test eax, eax
je 0x1800ea1bb
cmp eax, 0x600
je 0x1800ea1bb
mov rcx, rdi
call fcn.180148104
xor edi, edi
call fcn.1800eb758
test al, al
jne 0x1800ea15f
mov rcx, rsi
call fcn.1800f77cc
jmp 0x1800ea15f
call fcn.1800eb758
test al, al
jne 0x1800ea1cd
mov rcx, rsi
call fcn.1800f77cc
nop
lea rcx, [rbp - 0x10]
call fcn.1800f1f54
nop
lea rcx, [rsp + 0x60]
call fcn.1800f1f54
test rdi, rdi
jne 0x1800ea271
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1800ea271
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
test eax, eax
je 0x1800ea271
and dword [rsp + 0x48], 0
mov ecx, ebx
call fcn.18014874c
mov rdi, rax
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x48]
mov r8d, ebx
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x48], ebx
je 0x1800ea271
mov rcx, rdi
call fcn.180148104
xor edi, edi
lea r9, [rsp + 0x4c]
xor r8d, r8d
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.GDI32.dll_AddFontMemResourceEx]
mov rbx, rax
mov rcx, rdi
call fcn.180148104
lea rcx, [r13 + 0x5b0]
mov rdx, rbx
call fcn.1800f2168
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.180147bf0
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret