Function at 0x1400aaa40
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rsi, rcx
mov rbx, r9
xor ecx, ecx
mov r15, r8
mov eax, ecx
mov r10d, ecx
xchg dword [0x14049c5e0], eax
xchg dword [0x14049c5e4], r10d
mov dword [rbp + 0x50], ecx
mov r12, rdx
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rcx
call fcn.1400aad54
mov rcx, qword [rsi + 0x38]
lea rdi, [rsi + 0x20]
mov dword [rbp - 0x10], ebx
mov r13, rax
mov qword [rbp - 8], rcx
mov rcx, rdi
shr rbx, 0x20
mov dword [rbp - 0xc], ebx
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockShared]
nop dword [rax + rax]
mov cl, byte [rsi + 0x18]
mov r14d, 1
test cl, cl
jne 0x1400aabc2
mov rcx, qword [rsi]
lea rax, [rbp - 0x20]
lea r9, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov r8d, r15d
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [rax + rax]
test eax, eax
setne bl
test rdi, rdi
je 0x1400aaafb
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
nop dword [rax + rax]
test bl, bl
jne 0x1400aabb2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
je 0x1400aab20
cmp eax, 0x3e5
jne 0x1400aabfd
mov eax, 2
xchg dword [0x14049c5e0], eax
and dword [rbp + 0x40], 0
mov ebx, dword [r13 + 0x18]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockShared]
nop dword [rax + rax]
mov rcx, qword [rsi]
lea r8, [rbp + 0x40]
and dword [rsp + 0x20], 0
lea rdx, [rbp - 0x20]
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_GetOverlappedResultEx]
nop dword [rax + rax]
test eax, eax
setne bl
test rdi, rdi
je 0x1400aab7a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
nop dword [rax + rax]
test bl, bl
je 0x1400aac6a
mov eax, 7
xchg dword [0x14049c5e0], eax
mov ecx, dword [rbp + 0x40]
mov rax, qword [rbp + 0x60]
mov qword [rax], rcx
xor eax, eax
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, 8
xchg dword [0x14049c5e0], eax
mov ecx, dword [rbp + 0x50]
jmp 0x1400aab90
mov rcx, qword [rsi + 0x28]
mov rax, r14
lock xadd qword [rcx + 0x38], rax
mov ecx, 0x323
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
test rdi, rdi
je 0x1400aab03
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
nop dword [rax + rax]
jmp 0x1400aab03
test eax, eax
jle 0x1400aac0a
movzx ebx, ax
or ebx, 0x80070000
call fcn.1400a4e1c
mov ecx, 4
cmp dword [rax], ecx
jbe 0x1400aac54
lea rcx, str.Failed_to_read_file_for_hashing
mov dword [rbp + 0x58], ebx
mov qword [rbp - 0x28], rcx
lea rdx, [0x1403f2c7d]
lea rcx, [rbp + 0x58]
mov qword [rbp - 0x30], r15
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.14000a680
xchg dword [0x14049c5e0], r14d
mov ecx, ebx
mov eax, ebx
xchg dword [0x14049c5e4], ecx
jmp 0x1400aab99
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x102
je 0x1400aacb3
movzx edx, ax
mov ecx, 3
mov edi, 0x80070000
xchg dword [0x14049c5e0], ecx
test eax, eax
jg 0x1400aac98
mov ecx, eax
jmp 0x1400aac9c
mov ecx, edx
or ecx, edi
xchg dword [0x14049c5e4], ecx
test eax, eax
jle 0x1400aab99
or edx, edi
mov eax, edx
jmp 0x1400aab99
mov rcx, rsi
call fcn.140241cb0
mov edi, 0x80070000
test al, al
jne 0x1400aacfd
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jle 0x1400aacdb
movzx ebx, ax
or ebx, edi
mov r8d, ebx
lea rcx, str.Common
mov edx, ebx
call fcn.1402e1a60
mov ecx, 4
xchg dword [0x14049c5e0], ecx
xchg dword [0x14049c5e4], ebx
or r9d, 0xffffffff
lea r8, [rbp + 0x40]
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.1400f4018
test al, al
jne 0x1400aad42
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x1400aad2a
movzx eax, ax
or eax, edi
mov ecx, 5
mov edx, eax
xchg dword [0x14049c5e0], ecx
xchg dword [0x14049c5e4], edx
jmp 0x1400aab99
mov eax, 6
jmp 0x1400aab87