Function at 0x1400a4ae2
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
jmp 0x1400e9820
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x288
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x62
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x2a8]
lea rcx, [0x140266107]
call fcn.1400a4e07
mov dword [rbp + 4], 0
mov qword [rbp + 0x28], 0xffffffffffffffff
mov dword [rbp + 0xa4], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rbp + 0x270]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0xffffffffffffffff
jne 0x1400e98c9
jmp 0x1400e9b51
lea rdx, [rbp + 0x168]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x1400e98e8
jmp 0x1400e9b51
mov dx, 0x5c
mov rcx, qword [rbp + 0x270]
call fcn.1400a4029
mov qword [rbp + 0x128], rax
cmp qword [rbp + 0x128], 0
jne 0x1400e9913
jmp 0x1400e9b51
mov rax, qword [rbp + 0x128]
add rax, 2
mov qword [rbp + 0x128], rax
mov dword [rbp + 0xe4], 0
mov rcx, qword [rbp + 0x128]
call fcn.1400a04ec
inc eax
mov eax, eax
shl rax, 1
mov dword [rbp + 0xc4], eax
mov eax, dword [rbp + 0xe4]
mov rcx, qword [rbp + 0x278]
mov edx, dword [rbp + 0xc4]
mov dword [rcx + rax], edx
mov eax, dword [rbp + 0xe4]
add rax, 4
mov dword [rbp + 0xe4], eax
mov eax, dword [rbp + 0xc4]
mov ecx, dword [rbp + 0xe4]
mov rdx, qword [rbp + 0x278]
add rdx, rcx
mov rcx, rdx
mov r8d, eax
mov rdx, qword [rbp + 0x128]
call fcn.1400a25d5
mov eax, dword [rbp + 0xc4]
mov ecx, dword [rbp + 0xe4]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0xe4], eax
mov eax, dword [rbp + 0xe4]
mov rcx, qword [rbp + 0x278]
mov edx, dword [rbp + 0x168]
mov dword [rcx + rax], edx
mov eax, dword [rbp + 0xe4]
add rax, 4
mov dword [rbp + 0xe4], eax
lea r9, [rbp + 0x148]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov eax, dword [rbp + 0xe4]
mov rcx, qword [rbp + 0x278]
mov edx, dword [rbp + 0x14c]
mov dword [rcx + rax], edx
mov eax, dword [rbp + 0xe4]
add rax, 4
mov dword [rbp + 0xe4], eax
mov eax, dword [rbp + 0xe4]
mov rcx, qword [rbp + 0x278]
mov edx, dword [rbp + 0x148]
mov dword [rcx + rax], edx
mov eax, dword [rbp + 0xe4]
add rax, 4
mov dword [rbp + 0xe4], eax
mov eax, dword [rbp + 0xe4]
mov dword [rbp + 0x104], eax
mov eax, dword [rbp + 0xa4]
cmp rax, qword [rbp + 0x168]
jge 0x1400e9b4a
mov eax, dword [rbp + 0x280]
mov ecx, dword [rbp + 0xa4]
add ecx, eax
mov eax, ecx
sub eax, dword [rbp + 0xe4]
mov eax, eax
cmp rax, qword [rbp + 0x168]
jge 0x1400e9a89
mov eax, dword [rbp + 0xe4]
mov ecx, dword [rbp + 0x280]
sub ecx, eax
mov eax, ecx
mov dword [rbp + 0x44], eax
jmp 0x1400e9a9f
mov eax, dword [rbp + 0xa4]
mov rcx, qword [rbp + 0x168]
sub rcx, rax
mov rax, rcx
mov dword [rbp + 0x44], eax
mov eax, dword [rbp + 0xe4]
mov rcx, qword [rbp + 0x278]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x64]
mov r8d, dword [rbp + 0x44]
mov rdx, rax
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400e9ad8
jmp 0x1400e9b51
mov eax, dword [rbp + 0x64]
mov ecx, dword [rbp + 0x104]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x104], eax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x84]
mov r8d, dword [rbp + 0x104]
mov rdx, qword [rbp + 0x278]
mov rcx, qword [rbp + 0x268]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400e9b1e
jmp 0x1400e9b51
mov eax, dword [rbp + 0x64]
mov ecx, dword [rbp + 0xa4]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0xe4], 0
mov dword [rbp + 0x104], 0
jmp 0x1400e9a40
mov dword [rbp + 4], 1
cmp qword [rbp + 0x28], 0xffffffffffffffff
je 0x1400e9b62
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 4]
mov edi, eax
lea rcx, [rbp - 0x40]
lea rdx, [0x140200200]
call fcn.1400a3fe8
mov eax, edi
lea rsp, [rbp + 0x248]
pop rdi
pop rbp
ret