Function at 0x1400172a0
Capabilities:
Get file size
Read file on windows

Disassembly:
push rbp
push rdi
sub rsp, 0x7a8
lea rbp, [rsp + 0x50]
lea rcx, [0x14002f1d6]
call fcn.140011447
lea rax, [rbp]
mov rdi, rax
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
lea rax, [rbp]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1a
xor ecx, ecx
call qword [0x1400273c8]
mov rdx, qword [0x140028508]
lea rcx, [rbp]
call qword [0x1400273d8]
lea rax, [rbp + 0x110]
mov rdi, rax
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
lea rdx, [rbp]
lea rcx, [rbp + 0x110]
call qword [0x1400273d0]
mov rdx, qword [0x1400284d8]
lea rcx, [rbp + 0x110]
call qword [0x1400273d8]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 1
lea rcx, [rbp + 0x110]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rbp + 0x220], rax
cmp qword [rbp + 0x220], 0xffffffffffffffff
jne 0x14001737a
jmp 0x140017686
xor edx, edx
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rbp + 0x228], eax
mov eax, dword [rbp + 0x228]
inc eax
mov eax, eax
mov ecx, eax
call fcn.140011424
mov qword [rbp + 0x230], rax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x22c]
mov r8d, dword [rbp + 0x228]
mov rdx, qword [rbp + 0x230]
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [rbp + 0x228]
mov rcx, qword [rbp + 0x230]
mov byte [rcx + rax], 0
mov rdx, qword [0x140028510]
mov rcx, qword [rbp + 0x230]
call qword [0x140027428]
mov qword [rbp + 0x238], rax
cmp qword [rbp + 0x238], 0
jne 0x140017412
jmp 0x14001766c
mov rax, qword [rbp + 0x238]
add rax, 0xb
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
movsx eax, byte [rax]
cmp eax, 0x31
jne 0x14001743f
mov dword [rbp + 0x748], 1
jmp 0x140017449
mov dword [rbp + 0x748], 0
mov eax, dword [rbp + 0x748]
mov dword [rbp + 0x240], eax
mov rdx, qword [0x140028518]
mov rcx, qword [rbp + 0x230]
call qword [0x140027428]
mov qword [rbp + 0x248], rax
cmp qword [rbp + 0x248], 0
jne 0x140017484
jmp 0x14001766c
lea rdx, [0x140022c08]
mov rcx, qword [rbp + 0x248]
call qword [0x140027428]
mov qword [rbp + 0x250], rax
cmp qword [rbp + 0x250], 0
jne 0x1400174b3
jmp 0x14001766c
mov rax, qword [rbp + 0x250]
mov byte [rax], 0
mov rax, qword [rbp + 0x248]
add rax, 5
mov qword [rbp + 0x248], rax
lea rax, [rbp + 0x260]
mov rdi, rax
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
cmp dword [rbp + 0x240], 0
je 0x1400174fc
lea rdx, [rbp]
lea rcx, [rbp + 0x260]
call qword [0x1400273d0]
mov rdx, qword [rbp + 0x248]
lea rcx, [rbp + 0x260]
call qword [0x1400273d8]
lea rcx, [rbp + 0x370]
call fcn.1400110b4
lea rdx, [rbp]
lea rcx, [rbp + 0x3a0]
call qword [0x1400273d0]
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x3a0]
call qword [0x1400273d8]
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x260]
call fcn.140011442
lea rax, [rbp + 0x4b0]
mov rdi, rax
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
mov rdx, qword [0x1400284f0]
lea rcx, [rbp + 0x4b0]
call qword [0x1400273d0]
mov rdx, qword [0x140028288]
lea rcx, [rbp + 0x4b0]
call qword [0x1400273d8]
mov rdx, qword [0x140028520]
lea rcx, [rbp + 0x4b0]
call qword [0x1400273d8]
lea rdx, [0x14002457c]
lea rcx, [rbp + 0x4b0]
call qword [0x1400273d8]
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x4b0]
call qword [0x1400273d8]
lea rdx, [0x14002457c]
lea rcx, [rbp + 0x4b0]
call qword [0x1400273d8]
lea rax, [rbp + 0x5c0]
mov rdi, rax
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp + 0x5c0], 0x68
lea rax, [0x140028ad0]
mov qword [rbp + 0x5d0], rax
lea rax, [rbp + 0x630]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rax, [rbp + 0x630]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x5c0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x4b0]
xor ecx, ecx
call qword [0x1400274b8]
mov rcx, qword [rbp + 0x220]
call qword [0x140027320]
mov rcx, qword [rbp + 0x230]
call qword [0x140027360]
lea rsp, [rbp + 0x758]
pop rdi
pop rbp
ret