Function at 0x180011e00
Capabilities:
Get file size
Read file on windows

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x2a0
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
mov rax, qword [0x1800f7050]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov r12, rdx
mov r14, rcx
mov qword [r11 - 0x248], 7
xor esi, esi
mov qword [rsp + 0x78], rsi
mov word [rsp + 0x68], si
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x60]
call fcn.180002750
nop
lea rcx, [r14 + 0x78]
lea rdx, [rsp + 0x60]
call fcn.180013750
nop
cmp qword [rsp + 0x80], 8
jb 0x180011e97
mov rcx, qword [rsp + 0x68]
call fcn.1800620e0
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 1]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
mov qword [rsp + 0x50], rax
cmp rax, 0xffffffffffffffff
jne 0x180011f44
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
je 0x180011efd
cmp eax, 0x20
je 0x180011efd
cmp eax, 0xa7
je 0x180011efd
cmp eax, 0x21
je 0x180011efd
cmp eax, 0x13
je 0x180011efd
test eax, eax
jle 0x180011ef8
movzx eax, ax
or eax, 0x80070000
jmp 0x1800122f5
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
mov qword [rsp + 0x50], rax
cmp rax, 0xffffffffffffffff
jne 0x180011f3c
call fcn.1800030e0
nop
jmp 0x1800122f5
mov dword [r14 + 0x24], 1
lea rdx, [rsp + 0x48]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x180011f73
call fcn.1800030e0
mov ebx, eax
cmp rdi, 0xffffffffffffffff
je 0x180011f6c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
jmp 0x1800122f5
mov byte [rsp + 0x90], 0
xor edx, edx
mov r8d, 0x1ff
lea rcx, [rsp + 0x91]
call fcn.1800644c0
mov dword [rsp + 0x40], esi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x40]
mov r8d, 0x200
lea rdx, [rsp + 0x90]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180011fd6
call fcn.1800030e0
mov ebx, eax
cmp rdi, 0xffffffffffffffff
je 0x180011fcf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
jmp 0x1800122f5
mov r8d, 0x15
lea rdx, str._Disk_DescriptorFile
lea rcx, [rsp + 0x90]
call fcn.18006eac0
test eax, eax
jne 0x180012118
mov rax, qword [rsp + 0x48]
cmp rax, 0x100000
jl 0x18001201e
cmp rdi, 0xffffffffffffffff
je 0x180012014
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x80004005
jmp 0x1800122f5
lea ecx, [rax + 1]
lea rdx, [0x1800fee28]
call fcn.1800626b4
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x180012053
cmp rdi, 0xffffffffffffffff
je 0x180012049
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8007000e
jmp 0x1800122f5
mov r8d, dword [rsp + 0x48]
inc r8d
xor edx, edx
mov rcx, rax
call fcn.1800644c0
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x1800120a1
call fcn.1800030e0
mov esi, eax
mov rcx, rbx
call fcn.1800626bc
nop
cmp rdi, 0xffffffffffffffff
je 0x18001209a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x1800122f5
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x40]
mov r8d, dword [rsp + 0x48]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1800120e6
call fcn.1800030e0
mov esi, eax
mov rcx, rbx
call fcn.1800626bc
nop
cmp rdi, 0xffffffffffffffff
je 0x1800120df
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x1800122f5
xor r9d, r9d
mov r8, r12
mov rdx, rbx
mov rcx, r14
call fcn.180012330
mov esi, eax
mov rcx, rbx
call fcn.1800626bc
nop
cmp rdi, 0xffffffffffffffff
je 0x180012111
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x1800122f5
mov eax, dword [rsp + 0x90]
cmp eax, 0x44574f43
jne 0x18001213f
cmp rdi, 0xffffffffffffffff
je 0x180012135
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe0033001
jmp 0x1800122f5
cmp eax, 0x564d444b
je 0x18001215f
cmp rdi, 0xffffffffffffffff
je 0x180012155
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe00e1001
jmp 0x1800122f5
mov rax, qword [rsp + 0x48]
cqo
and edx, 0x1ff
add rax, rdx
and eax, 0x1ff
cmp rax, rdx
je 0x180012192
cmp rdi, 0xffffffffffffffff
je 0x180012188
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe003300c
jmp 0x1800122f5
cmp qword [rsp + 0xac], 0
jne 0x1800121b6
cmp rdi, 0xffffffffffffffff
je 0x1800121ac
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe0033005
jmp 0x1800122f5
cmp word [rsp + 0xdd], 0
je 0x1800121da
cmp rdi, 0xffffffffffffffff
je 0x1800121d0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe0033003
jmp 0x1800122f5
mov ebp, dword [rsp + 0xb4]
shl ebp, 9
mov r13d, ebp
lea rdx, [0x1800fee28]
mov ecx, ebp
call fcn.1800626b4
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x18001221b
cmp rdi, 0xffffffffffffffff
je 0x180012211
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8007000e
jmp 0x1800122f5
mov r8, r13
xor edx, edx
mov rcx, rax
call fcn.1800644c0
mov rdx, qword [rsp + 0xac]
shl rdx, 9
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x18001226d
call fcn.1800030e0
mov esi, eax
mov rcx, rbx
call fcn.1800626bc
nop
cmp rdi, 0xffffffffffffffff
je 0x180012266
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x1800122f5
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x40]
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1800122ad
call fcn.1800030e0
mov esi, eax
mov rcx, rbx
call fcn.1800626bc
nop
cmp rdi, 0xffffffffffffffff
je 0x1800122a9
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x1800122f5
cmp rdi, 0xffffffffffffffff
je 0x1800122c5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or rdi, 0xffffffffffffffff
mov qword [rsp + 0x50], rdi
mov r9d, 1
mov r8, r12
mov rdx, rbx
mov rcx, r14
call fcn.180012330
mov esi, eax
mov rcx, rbx
call fcn.1800626bc
nop
cmp rdi, 0xffffffffffffffff
je 0x1800122f3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.180062100
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret