Function at 0x140056a60
Capabilities:
Check if file exists
Get file attributes
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1400d50c0]
xor rax, rsp
mov qword [rbp], rax
mov r13, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x58], rdx
xor esi, esi
mov dword [rsp + 0x40], esi
lea r14, [rsi - 1]
cmp qword [rdx + 0x10], rsi
jne 0x140057164
lea rdx, [rcx + 0x80]
mov rax, qword [0x1400d5f40]
cmp rax, qword [0x1400d5f38]
jne 0x140056ae9
cmp r13, rdx
je 0x140057164
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 7
jbe 0x140056adc
mov rdx, qword [rdx]
mov rcx, r13
call fcn.14001d3b0
jmp 0x140057164
mov r10, qword [rdx + 0x10]
mov r9, rdx
mov r11, qword [rdx + 0x18]
cmp r11, 7
jbe 0x140056afd
mov r9, qword [rdx]
test r10, r10
je 0x140056b38
lea rcx, [r10 - 1]
mov rax, r14
cmp rcx, r14
cmovb rax, rcx
lea r8, [r9 + rax*2]
cmp word [r8], 0x5c
je 0x140056b30
nop dword [rax + rax]
cmp r8, r9
je 0x140056b38
sub r8, 2
cmp word [r8], 0x5c
jne 0x140056b20
sub r8, r9
sar r8, 1
jmp 0x140056b3b
mov r8, r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
cmp r10, r8
cmovb r8, r10
cmp r11, 7
jbe 0x140056b5a
mov rdx, qword [rdx]
lea rcx, [rbp - 0x80]
call fcn.140004ac0
mov r15d, 0x40
mov dword [rsp + 0x40], r15d
mov r12, qword [0x1400d5f38]
mov r14, qword [0x1400d5f40]
mov qword [rsp + 0x50], r14
mov rbx, qword [rbp - 0x80]
cmp r12, r14
je 0x1400570f4
movabs r9, 0x7fffffffffffffff
movabs r8, 0x7ffffffffffffffe
mov ecx, 0xa
lea rdi, [0x1400bfe1c]
mov rax, qword [r12 + 0x10]
mov r10, r12
cmp qword [r12 + 0x18], 7
jbe 0x140056bc2
mov r10, qword [r12]
cmp rax, 2
jb 0x140056c78
dec rax
lea r11, [r10 + rax*2]
mov rax, r10
nop word [rax + rax]
mov rcx, r11
sub rcx, rax
sar rcx, 1
mov rdx, rsi
je 0x140056c0a
cmp word [rax], 0x3a
je 0x140056c07
cmp rcx, 1
je 0x140056c0a
dec rcx
add rax, 2
cmp word [rax], 0x3a
jne 0x140056bf4
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x140056c5f
mov r8d, 2
mov rdx, rdi
mov r9, rax
sub r9, rdi
movzx ecx, word [rdx + r9]
cmp cx, word [rdx]
jne 0x140056c59
add rdx, 2
sub r8, 1
jne 0x140056c21
sub rax, r10
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x140056c5f
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.14001d5b0
mov rdi, rax
or r15d, 4
jmp 0x140056dbe
add rax, 2
jmp 0x140056be0
movabs r9, 0x7fffffffffffffff
movabs r8, 0x7ffffffffffffffe
mov ecx, 0xa
mov rax, r8
mov rdx, qword [rbp - 0x70]
sub rax, rdx
cmp rax, 1
jb 0x1400572b0
lea r14, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova r14, rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
lea rsi, [rdx + 1]
mov ebx, 7
lea rdi, [rbp - 0x60]
cmp rsi, rbx
jbe 0x140056d39
mov rbx, rsi
or rbx, 7
cmp rbx, r8
jbe 0x140056ccf
mov rbx, r8
lea rcx, [r9 + r9]
jmp 0x140056cf0
cmp rbx, 0xa
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, r9
ja 0x1400572c2
add rcx, rcx
cmp rcx, 0x1000
jb 0x140056d20
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400572c2
mov rcx, rax
call fcn.14006f4f4
test rax, rax
je 0x1400572bc
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp - 0x70]
jmp 0x140056d35
test rcx, rcx
je 0x140056d33
call fcn.14006f4f4
mov rdi, rax
mov rdx, qword [rbp - 0x70]
jmp 0x140056d35
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.140096c20
mov eax, dword [0x1400be798]
mov word [rdi + rbx], ax
xor eax, eax
mov word [rdi + rsi*2], ax
or r15d, 8
or r15d, 1
mov dword [rsp + 0x40], r15d
mov rdx, r12
cmp qword [r12 + 0x18], 7
jbe 0x140056d7f
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
lea rcx, [rbp - 0x60]
call fcn.14002b6f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r15d, 0x10
lea rdi, [rbp - 0x20]
or r15d, 2
mov r14, qword [rsp + 0x50]
mov dword [rsp + 0x40], r15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov rsi, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 7
jbe 0x140056de3
mov rdi, qword [rdi]
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
ja 0x1400572f2
cmp rsi, 7
ja 0x140056e17
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x60], xmm0
jmp 0x140056ec6
mov rbx, rsi
or rbx, 7
cmp rbx, rax
jbe 0x140056e36
mov rbx, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140056e66
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1400572ec
add rcx, rcx
cmp rcx, 0x1000
jb 0x140056e95
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400572ec
mov rcx, rax
call fcn.14006f4f4
mov rcx, rax
test rax, rax
je 0x1400572c8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140056ea3
test rcx, rcx
je 0x140056ea1
call fcn.14006f4f4
jmp 0x140056ea3
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rbx
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140096c20
nop
test r15b, 4
je 0x140056f29
and r15d, 0xfffffffb
mov dword [rsp + 0x40], r15d
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140056f15
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056f10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400572ce
call fcn.14006f4c0
xor esi, esi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], si
jmp 0x140056f2b
xor esi, esi
test r15b, 2
je 0x140056f7b
and r15d, 0xfffffffd
mov dword [rsp + 0x40], r15d
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140056f7b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056f75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400572d4
call fcn.14006f4c0
nop
test r15b, 1
je 0x140056fda
and r15d, 0xfffffffe
mov dword [rsp + 0x40], r15d
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140056fca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056fc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400572da
call fcn.14006f4c0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 7
cmova rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14005704e
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x140057038
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057033
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400572e0
call fcn.14006f4c0
add r12, 0x20
mov rbx, qword [rbp - 0x80]
cmp r12, r14
je 0x1400570ef
jmp 0x140056b8e
lea rax, [rsp + 0x60]
cmp r13, rax
je 0x1400570a9
mov rbx, qword [rsp + 0x70]
lea r9, [rsp + 0x60]
cmp qword [rsp + 0x78], 7
cmova r9, qword [rsp + 0x60]
mov rax, qword [r13 + 0x18]
cmp rbx, rax
ja 0x14005709d
mov rdi, r13
cmp rax, 7
jbe 0x140057084
mov rdi, qword [r13]
mov qword [r13 + 0x10], rbx
lea r8, [rbx + rbx]
mov rdx, r9
mov rcx, rdi
call fcn.140096c20
mov word [rdi + rbx*2], si
jmp 0x1400570a9
mov rdx, rbx
mov rcx, r13
call fcn.140020220
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x1400570eb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400570e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400572e0
call fcn.14006f4c0
mov rbx, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x48]
cmp qword [r13 + 0x10], 0
jne 0x14005711e
lea rdx, [rdi + 0x80]
cmp r13, rdx
je 0x14005711e
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 7
jbe 0x140057115
mov rdx, qword [rdx]
mov rcx, r13
call fcn.14001d3b0
nop
mov rax, qword [rbp - 0x68]
cmp rax, 7
jbe 0x14005715d
lea rdx, [rax*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140057155
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400572e6
mov rcx, rbx
call fcn.14006f4c0
mov r14, 0xffffffffffffffff
mov rcx, r13
cmp qword [r13 + 0x18], 7
jbe 0x140057172
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140057236
mov rcx, r13
cmp qword [r13 + 0x18], 7
jbe 0x14005718f
mov rcx, qword [r13]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
xor r15d, r15d
cmp rax, 0xffffffffffffffff
je 0x140057239
mov qword [rsp + 0x48], r15
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x14005722b
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.14006f968
mov rdi, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1400972c0
mov dword [rsp + 0x40], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x40]
mov r8d, dword [rsp + 0x48]
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140057223
movsxd rax, dword [rdi + 0x3c]
mov r14d, dword [rax + rdi + 8]
mov rcx, rdi
call fcn.14006f4c0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140057239
xor r15d, r15d
mov rdx, qword [r13 + 0x18]
cmp rdx, 7
jbe 0x140057275
lea rdx, [rdx*2 + 2]
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x140057270
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400572b6
mov rcx, r8
call fcn.14006f4c0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 7
mov word [r13], r15w
mov rax, r14
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.14006f4a0
mov rbx, qword [rsp + 0x160]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400017e0
nop
call fcn.1400765b0
nop
call fcn.1400765b0
int3
call fcn.140001740
nop
call fcn.1400765b0
nop
call fcn.1400765b0
nop
call fcn.1400765b0
nop
call fcn.1400765b0
nop
call fcn.1400765b0
nop
call fcn.1400765b0
nop
call fcn.140001740
int3
call fcn.1400017e0
int3