Function at 0x180003208
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x180146008]
xor rax, rsp
mov qword [rsp + 0x60], rax
or rax, 0xffffffffffffffff
mov rbx, rcx
xor esi, esi
inc rax
cmp word [rcx + rax*2], si
jne 0x18000323c
lea rcx, [rcx + rax*2]
jmp 0x18000324f
sub rcx, 2
cmp word [rcx], 0x5c
jne 0x18000324b
add rcx, 2
call qword [0x180148b18]
xor r9d, r9d
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov rcx, rbx
mov qword [rsp + 0x48], rax
mov r15, rax
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, rax
xor edx, edx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x58], eax
mov ebx, eax
call qword [0x180148ac0]
mov r14d, 0x3000
mov ebp, 4
mov rcx, rax
mov dword [rsp + 0x20], ebp
mov r9d, r14d
mov r8d, ebx
xor edx, edx
call qword [0x180148b10]
mov r8d, dword [rsp + 0x58]
lea r9, [rsp + 0x58]
mov rdx, rax
mov qword [rsp + 0x50], rax
mov rcx, rdi
mov qword [rsp + 0x20], rsi
mov r13, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx ecx, byte [r13 + 1]
movzx edx, byte [r13]
lea eax, [rdx + rcx]
cmp eax, 0xa7
jne 0x1800033d8
sub ecx, edx
cmp ecx, 0xd
jne 0x1800033d8
movsxd rdi, dword [r13 + 0x3c]
add rdi, r13
movzx edx, byte [rdi + 1]
movzx ecx, byte [rdi]
lea eax, [rcx + rdx]
cmp eax, 0x95
jne 0x1800033d8
sub ecx, edx
cmp ecx, 0xb
jne 0x1800033d8
mov ebx, dword [rdi + 0x50]
call qword [0x180148ac0]
mov r9d, r14d
mov dword [rsp + 0x20], ebp
mov rcx, rax
mov r8d, ebx
xor edx, edx
call qword [0x180148b10]
mov r14, rax
test rax, rax
je 0x1800033dd
mov edx, esi
cmp dword [rdi + 0x54], esi
jbe 0x18000337f
mov ecx, edx
inc edx
mov al, byte [rcx + r13]
mov byte [rcx + r14], al
cmp edx, dword [rdi + 0x54]
jb 0x18000336e
movzx r8d, word [rdi + 0x14]
mov r10d, esi
add r8, rdi
cmp si, word [rdi + 6]
jae 0x1800033dd
mov eax, r10d
mov r11d, esi
lea r9, [rax + rax*4]
shl r9, 3
cmp dword [r9 + r8 + 0x28], esi
jbe 0x1800033ca
mov edx, dword [r9 + r8 + 0x2c]
mov ecx, dword [r9 + r8 + 0x24]
mov eax, r11d
inc r11d
add rcx, rax
add rdx, rax
mov al, byte [rdx + r13]
mov byte [rcx + r14], al
cmp r11d, dword [r9 + r8 + 0x28]
jb 0x1800033a5
movzx eax, word [rdi + 6]
inc r10d
cmp r10d, eax
jb 0x180003390
jmp 0x1800033dd
mov r14, qword [rsp + 0x50]
movsxd rdi, dword [r14 + 0x3c]
mov rdx, r15
movsxd rbx, dword [r15 + 0x3c]
add rdi, r14
mov rcx, r14
add rbx, r15
sub rdx, qword [rdi + 0x30]
call fcn.180002fb0
movzx r12d, word [rdi + 0x14]
mov eax, esi
movzx ebp, word [rbx + 0x14]
add r12, rdi
movzx r8d, word [rdi + 6]
add rbp, rbx
mov dword [rsp + 0x40], esi
test r8d, r8d
je 0x180003442
mov r9b, byte [0x180144638]
mov r10d, dword [str..text]
mov ecx, eax
lea rdx, [rcx + rcx*4]
cmp dword [r12 + rdx*8 + 0x18], r10d
jne 0x18000343b
cmp byte [r12 + rdx*8 + 0x1c], r9b
je 0x180003498
inc eax
cmp eax, r8d
jb 0x180003427
mov ebx, 0x8000
xor edx, edx
mov r8d, ebx
mov rcx, r14
call qword [0x180148b48]
mov r8d, ebx
xor edx, edx
mov rcx, r13
call qword [0x180148b48]
cmp dword [rsp + 0x40], esi
setne sil
mov eax, esi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1800035d0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rdi, [rcx + rcx*4]
mov dword [rsp + 0x5c], esi
mov ebx, dword [rbp + rdi*8 + 0x24]
lea r9, [rsp + 0x5c]
mov r15d, dword [r12 + rdi*8 + 0x24]
mov r8d, 0x40
add rbx, qword [rsp + 0x48]
add r15, r14
mov edx, dword [rbp + rdi*8 + 0x20]
mov rcx, rbx
call qword [0x180148b08]
test eax, eax
je 0x18000356c
mov eax, dword [r12 + rdi*8 + 0x24]
mov ecx, dword [r12 + rdi*8 + 0x20]
add rax, r14
add rcx, rax
cmp r15, rcx
jae 0x180003547
mov rdx, qword [rsp + 0x48]
mov r13d, esi
mov eax, dword [rbp + rdi*8 + 0x24]
mov ecx, dword [rbp + rdi*8 + 0x20]
add rax, rdx
add rcx, rax
cmp rbx, rcx
jae 0x18000353d
mov al, byte [rbx]
cmp al, byte [r15]
je 0x180003522
cmp al, 0xe9
jne 0x180003522
mov rax, qword [r15 + 8]
inc r13d
mov qword [rbx + 8], rax
mov rcx, qword [r15]
mov rax, qword [rbx]
lock cmpxchg qword [rbx], rcx
mov eax, dword [r12 + rdi*8 + 0x24]
inc rbx
mov ecx, dword [r12 + rdi*8 + 0x20]
add rax, r14
add rcx, rax
inc r15
cmp r15, rcx
jb 0x1800034ee
mov dword [rsp + 0x40], r13d
mov r13, qword [rsp + 0x50]
mov ecx, dword [rbp + rdi*8 + 0x24]
lea r9, [rsp + 0x5c]
add rcx, qword [rsp + 0x48]
mov edx, dword [rbp + rdi*8 + 0x20]
mov r8d, dword [rsp + 0x5c]
call qword [0x180148b08]
test eax, eax
jne 0x180003442
xor eax, eax
jmp 0x18000346d