Function at 0x1400ab6d0
Capabilities:
Get file size
Read file on windows

Disassembly:
mov rax, rsp
push rdi
push r14
push r15
sub rsp, 0xa0
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x14030bc70]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov ebx, 2
call fcn.1400a7590
nop
mov rsi, qword [r15 + 8]
test rsi, rsi
je 0x1400ab725
xor r14d, r14d
jmp 0x1400ab75f
mov ecx, 0x18
call fcn.1400dba80
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1400ab759
mov r9d, reloc.WS2_32.dll_sendto
xor r8d, r8d
lea rdx, [0x140285c9d]
mov rcx, rax
call fcn.1400a6730
mov rsi, rax
xor r14d, r14d
jmp 0x1400ab75f
xor r14d, r14d
mov esi, r14d
xor edx, edx
mov rcx, qword [rdi + 0x358]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0xffffffff
je 0x1400aba6f
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x358]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x38]
mov r8d, reloc.WSOCK32.dll_ioctlsocket
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + 0x358]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 1
jne 0x1400aba66
cmp dword [rsp + 0x38], 0xc
jne 0x1400aba66
cmp dword [rsp + 0x54], 0xff231ac2
jne 0x1400aba66
cmp dword [rsp + 0x58], 0x60000
jne 0x1400ab87d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x358]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x38]
mov r8d, 0x1d0
lea rdx, [rdi + 0x168]
mov rcx, qword [rdi + 0x358]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400aba66
cmp dword [rsp + 0x38], 0x1d0
jne 0x1400aba66
cmp dword [rdi + 0x16c], 0xff231ac2
jne 0x1400aba66
cmp dword [rdi + 0x170], 0x60000
jne 0x1400aba66
lea rdx, [rdi + 0x16c]
mov r8d, 0x1cc
or ecx, 0xffffffff
call fcn.1400e11c0
cmp dword [rdi + 0x168], eax
jne 0x1400aba66
mov dword [rsp + 0x34], 1
jmp 0x1400ab8b6
cmp dword [rdi + 0x38], 0
je 0x1400aba6f
lea r8, [rdi + 0x168]
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + 0x358]
call fcn.1400ac620
test eax, eax
je 0x1400aba66
mov dword [rsp + 0x34], 1
mov dword [rdi + 0x34], 1
mov byte [rsp + 0x60], 0
xor eax, eax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov word [rsp + 0x71], ax
mov byte [rsp + 0x73], al
mov ebx, dword [r15]
cmp ebx, 3
jle 0x1400ab8de
mov ebx, dword [rdi + 0x248]
cmp dword [rdi + 0x248], ebx
jne 0x1400aba56
xor edx, edx
mov rcx, rsi
call fcn.1400a9b00
test rax, rax
jne 0x1400ab921
mov rcx, rsi
call fcn.140030180
mov rcx, rax
lea rdx, [rsp + 0x78]
call fcn.1400a8580
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.1400abb50
mov r8d, dword [rdi + 0x248]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.1400a8700
test ebx, ebx
jne 0x1400ab946
mov rdx, rsi
mov rcx, rdi
call fcn.1400aa870
jmp 0x1400ab98b
mov ecx, dword [rdi + 0x248]
call fcn.1400a8520
mov qword [rdi + 0x368], rax
test rax, rax
je 0x1400aba46
mov rcx, rsi
call fcn.14001d070
mov rbx, rax
xor edx, edx
mov rcx, rsi
call fcn.1400a9b00
mov rdx, rax
xor r9d, r9d
mov r8d, ebx
mov rcx, qword [rdi + 0x368]
call fcn.1400f4e30
mov rax, qword [rsp + 0x60]
cmp rax, qword [rdi + 0x224]
jne 0x1400aba36
mov rax, qword [rsp + 0x68]
cmp rax, qword [rdi + 0x22c]
jne 0x1400aba36
mov eax, dword [rsp + 0x70]
cmp eax, dword [rdi + 0x234]
jne 0x1400aba36
mov ebx, r14d
mov dword [rsp + 0x30], ebx
mov eax, dword [rdi + 0x178]
mov dword [rdi + 0x338], eax
mov eax, dword [rdi + 0x238]
mov qword [rdi + 0x340], rax
mov eax, dword [rdi + 0x23c]
mov qword [rdi + 0x348], rax
mov eax, dword [rdi + 0x220]
mov dword [rdi + 0x354], eax
mov rcx, qword [rdi + 0x360]
test rcx, rcx
je 0x1400aba11
mov edx, 0x5c
call fcn.1401139ac
mov qword [rdi + 0x360], r14
mov rcx, rdi
call fcn.1400aafb0
mov qword [rdi + 0x360], rax
test rax, rax
je 0x1400aba2f
mov rcx, rdi
call fcn.1400a74c0
jmp 0x1400aba6f
mov ebx, 7
jmp 0x1400aba6b
mov ebx, 3
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x34], r14d
jmp 0x1400aba6f
mov ebx, 9
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x34], r14d
jmp 0x1400aba6f
mov ebx, 8
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x34], r14d
jmp 0x1400aba6f
mov ebx, 5
mov dword [rsp + 0x30], ebx
test rsi, rsi
je 0x1400aba90
cmp rsi, qword [r15 + 8]
je 0x1400aba90
mov rcx, rsi
call fcn.1400a6930
mov edx, 0x18
mov rcx, rsi
call fcn.1401139ac
nop
jmp 0x1400aba9b
mov rcx, rdi
call fcn.1400abb30
mov eax, ebx
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140113910
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret