Function at 0x14043b930
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x50
xor r12d, r12d
mov r15, rdx
mov edi, r8d
mov qword [rsp + 0x30], r12
mov rsi, rcx
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov dword [rsp + 0x20], 3
lea r8d, [r12 + 1]
mov edx, 0x80000000
mov rcx, r15
mov ebx, r12d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x14043ba23
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, rsi
mov rax, qword [rsi]
or ebx, 0x80030000
call qword [rax + 0x10]
test rax, rax
je 0x14043ba11
lea rcx, [rsp + 0x98]
call fcn.1402d5f10
mov rax, qword [rsi]
lea edx, [rbp + 6]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, r15
lea rcx, [rsp + 0x98]
mov r8, rax
mov edx, 0x208
call fcn.1402d7570
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
mov r9, qword [rsp + 0x98]
lea edx, [rbp + 2]
mov dword [rsp + 0x30], r12d
xor r8d, r8d
mov dword [rsp + 0x28], r12d
mov rcx, rax
mov r10, qword [rax]
mov dword [rsp + 0x20], r12d
call qword [r10 + 0x20]
lea rcx, [rsp + 0x98]
call fcn.1402d84a0
cmp dword [rsi + 8], r12d
jl 0x14043bc37
mov dword [rsi + 8], ebx
jmp 0x14043bc37
xor edx, edx
mov qword [rsp + 0x80], r14
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
inc eax
test eax, 0xfffffffe
jne 0x14043baca
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
test rax, rax
je 0x14043bac5
lea rcx, [rsp + 0x98]
call fcn.1402d5f10
mov rax, qword [rsi]
mov edx, 6
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, r15
lea rcx, [rsp + 0x98]
mov r8, rax
mov edx, 0x208
call fcn.1402d7570
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
mov r9, qword [rsp + 0x98]
xor r8d, r8d
mov dword [rsp + 0x30], r12d
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov r10, qword [rax]
lea edx, [r8 + 1]
mov dword [rsp + 0x20], r12d
call qword [r10 + 0x20]
lea rcx, [rsp + 0x98]
call fcn.1402d84a0
mov ebx, 0x80004005
cmp r14d, edi
cmovb edi, r14d
test ebx, ebx
js 0x14043bc1d
mov edx, edi
mov ecx, 2
mov ebx, edi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov r14, rax
test rax, rax
je 0x14043bbce
lea r9, [rsp + 0x98]
mov qword [rsp + 0x20], r12
mov r8d, edi
mov rdx, rax
mov rcx, rbp
call sym.ErrorReportClient.exe_SfReadFile
test eax, eax
je 0x14043bb54
cmp dword [rsp + 0x98], edi
jne 0x14043bb54
mov rcx, rsi
call fcn.14043b3e0
mov qword [rsi + 0xb0], rbx
mov qword [rsi + 0xb8], rbx
mov ebx, r12d
mov dword [rsi + 0xa0], 1
mov qword [rsi + 0xa8], r14
jmp 0x14043bc1d
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
test rax, rax
je 0x14043bbc7
lea rcx, [rsp + 0x40]
call fcn.1402d5f10
mov rax, qword [rsi]
mov edx, 6
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, r15
lea rcx, [rsp + 0x40]
mov r8, rax
mov edx, 0x208
call fcn.1402d7570
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
mov r9, qword [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x30], r12d
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov r10, qword [rax]
lea edx, [r8 + 1]
mov dword [rsp + 0x20], r12d
call qword [r10 + 0x20]
lea rcx, [rsp + 0x40]
call fcn.1402d84a0
mov ebx, 0x80004005
jmp 0x14043bc1d
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
test rax, rax
je 0x14043bc18
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
mov edx, 4
mov rcx, rsi
mov rbx, rax
mov rdi, qword [rax]
mov rax, qword [rsi]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov dword [rsp + 0x30], r12d
mov r9, rax
mov dword [rsp + 0x28], r12d
mov rcx, rbx
mov dword [rsp + 0x20], r12d
lea edx, [r8 + 1]
call qword [rdi + 0x20]
mov ebx, 0x8007000e
mov r14, qword [rsp + 0x80]
cmp dword [rsi + 8], r12d
jl 0x14043bc2e
mov dword [rsi + 8], ebx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret