Function at 0x18000279e
Capabilities:
Get file size
Read file on windows
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
push r15
push rbp
sub rsp, 0x60
mov eax, 0x60
mov esi, dword [0x1803e617b]
mov rax, qword gs:[rax]
mov rdx, qword [rax + 0x18]
add rdx, 0x10
mov rbp, qword [rdx]
cmp rbp, rdx
je 0x180002fc1
xor edi, edi
test esi, esi
je 0x180002fb8
mov rax, qword [rbp + 0x60]
mov ecx, edi
movzx r8d, word [rax]
test r8d, r8d
je 0x180002921
add rax, 0x10
movzx r9d, word [rax - 0x10]
cmp r9d, 0x41
jl 0x180002808
cmp r9d, 0x5a
lea r8d, [r9 + 0x20]
cmovle r9d, r8d
movzx r8d, r9w
movzx r10d, word [rax - 0xe]
add ecx, r8d
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x180002833
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
add ecx, r10d
movzx r10d, word [rax - 0xc]
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x18000285a
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
add ecx, r10d
movzx r10d, word [rax - 0xa]
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x180002881
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
add ecx, r10d
movzx r10d, word [rax - 8]
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x1800028a8
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
add ecx, r10d
movzx r10d, word [rax - 6]
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x1800028cb
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
add ecx, r10d
movzx r10d, word [rax - 4]
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x1800028ee
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
add ecx, r10d
movzx r10d, word [rax - 2]
test r10d, r10d
je 0x180002921
cmp r10d, 0x41
jl 0x180002911
cmp r10d, 0x5a
lea r8d, [r10 + 0x20]
movzx r9d, r8w
cmovle r10d, r9d
movzx r8d, word [rax]
add ecx, r10d
test r8d, r8d
jne 0x1800027ed
nop dword [rax]
cmp esi, ecx
je 0x180002fb8
mov rbp, qword [rbp]
cmp rbp, rdx
jne 0x1800027d2
xor r12d, r12d
mov edx, dword [0x1803e6143]
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbp, rax
mov rcx, rbp
mov edx, dword [0x1803e6143]
call fcn.180002fce
xor ecx, ecx
mov rdx, rbp
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [rbp]
test eax, eax
je 0x1800029fb
mov esi, edi
add esi, 8
lea r8d, [rsi - 7]
movzx r9d, word [rbp + r8*2]
test r9d, r9d
je 0x1800029f9
lea r8d, [rsi - 6]
movzx r9d, word [rbp + r8*2]
test r9d, r9d
je 0x1800029f9
lea r8d, [rsi - 5]
movzx r9d, word [rbp + r8*2]
movzx ecx, word [rbp + rax*2]
test r9d, r9d
je 0x1800029f9
lea r8d, [rsi - 4]
movzx r9d, word [rbp + r8*2]
test r9d, r9d
je 0x1800029f9
lea r8d, [rsi - 3]
movzx r9d, word [rbp + r8*2]
test r9d, r9d
je 0x1800029f9
lea r8d, [rsi - 2]
movzx r9d, word [rbp + r8*2]
test r9d, r9d
je 0x1800029f9
lea r8d, [rsi - 1]
movzx r9d, word [rbp + r8*2]
test r9d, r9d
je 0x1800029f9
movzx r8d, word [rbp + rsi*2]
test r8d, r8d
jne 0x180002982
test eax, eax
mov rax, qword [0x1803e6117]
mov r11d, edi
je 0x180002a87
mov esi, edi
add esi, 8
lea r11d, [rsi - 7]
movzx r8d, word [rbp + r11*2]
test r8d, r8d
je 0x180002a87
lea r11d, [rsi - 6]
movzx r8d, word [rbp + r11*2]
test r8d, r8d
je 0x180002a87
lea r11d, [rsi - 5]
movzx r8d, word [rbp + r11*2]
test r8d, r8d
je 0x180002a87
lea r11d, [rsi - 4]
movzx r8d, word [rbp + r11*2]
pop rbp
add byte [rbp - 0x7b], al
invalid
je 0x180002a87
lea r11d, [rsi - 3]
movzx r8d, word [rbp + r11*2]
test r8d, r8d
je 0x180002a87
lea r11d, [rsi - 2]
movzx r8d, word [rbp + r11*2]
test r8d, r8d
je 0x180002a87
lea r11d, [rsi - 1]
movzx r8d, word [rbp + r11*2]
test r8d, r8d
je 0x180002a87
mov r11d, esi
movzx r8d, word [rbp + rsi*2]
test r8d, r8d
jne 0x180002a0d
mov r13d, r11d
lea esi, [r11 - 1]
movzx r8d, word [rbp + rsi*2]
cmp r8d, 0x5c
je 0x180002b96
mov r9d, edi
mov r12, qword [rbp + 0x30]
jmp 0x18000293c
xor edi, edi
jmp 0x180002939