Function at 0x1400fa798
Capabilities:
Get file size
Read file on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x6f8]
sub rsp, 0x7e0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1402126b0]
xor rax, rsp
mov qword [rbp + 0x6d0], rax
mov rbx, rcx
lea rcx, [rbp + 0x1a0]
call fcn.1400e02a8
nop
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp + 0x1a0]
call fcn.1400e4f70
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x80]
call fcn.1400e8c08
nop
xor ebx, ebx
mov edi, ebx
mov esi, ebx
call fcn.1400e1fec
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400e8c08
nop
call fcn.1400e1ffc
mov rcx, rax
call fcn.1400e96e0
test al, al
je 0x1400fa8f0
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400e8f14
lea rcx, [rsp + 0x60]
call fcn.140096040
mov rcx, rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], Ordinal_133
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rbx + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400fa898
lea rcx, [rsp + 0x60]
call fcn.1400e8d74
jmp 0x1400faa62
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
test eax, eax
je 0x1400fa889
mov dword [rsp + 0x40], ebx
mov ecx, esi
call fcn.140138904
mov rdi, rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
mov r8d, esi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x40], esi
je 0x1400faa4f
mov rcx, rdi
call fcn.140138344
mov rdi, rbx
jmp 0x1400fa889
call fcn.1400e1ffc
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400e8f14
call fcn.1400e2330
test al, al
je 0x1400fa915
call fcn.1400e2004
mov r14, rax
jmp 0x1400fa975
call fcn.1400e200c
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.1400e8c08
nop
lea rcx, [rbp + 0x110]
call fcn.140096040
mov rcx, rax
xor edx, edx
call fcn.1400e7874
mov r15, rax
lea rcx, [rsp + 0x60]
call fcn.140096040
mov rcx, rax
mov rdx, r15
call fcn.1400dbfdc
mov r14, rax
test r15, r15
je 0x1400fa969
mov rcx, r15
call fcn.140138344
nop
lea rcx, [rbp + 0x110]
call fcn.1400e8d74
test r14, r14
je 0x1400fa889
mov dword [rsp + 0x44], ebx
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x10]
call fcn.1400e8c08
nop
lea r8, [0x14018ca1c]
lea rdx, [0x14018c358]
lea rcx, [rbp - 0x10]
call fcn.1400e990c
lea rcx, [rbp - 0x10]
call fcn.140096040
mov rdx, rax
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
mov r8b, 1
mov rcx, r14
call fcn.1400db98c
test eax, eax
je 0x1400fa9e4
lea rcx, [rbp - 0x10]
call fcn.1400e8d74
jmp 0x1400fa889
mov esi, dword [rbp + 0x6cc]
test esi, esi
je 0x1400fa9d6
mov ecx, esi
call fcn.140138904
mov rdi, rax
mov r9d, esi
mov r8, rax
mov edx, dword [rsp + 0x44]
mov rcx, r14
call fcn.1400dc4d8
test eax, eax
je 0x1400faa33
cmp eax, 0x600
je 0x1400faa33
mov rcx, rdi
call fcn.140138344
mov rdi, rbx
call fcn.1400e2330
test al, al
jne 0x1400fa9d6
mov rcx, r14
call fcn.1400db6cc
jmp 0x1400fa9d6
call fcn.1400e2330
test al, al
jne 0x1400faa45
mov rcx, r14
call fcn.1400db6cc
nop
lea rcx, [rbp - 0x10]
call fcn.1400e8d74
nop
lea rcx, [rsp + 0x60]
call fcn.1400e8d74
test rdi, rdi
jne 0x1400faaf8
lea rcx, [rbp + 0x80]
call fcn.140096040
mov rcx, rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], Ordinal_133
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400faaf3
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
test eax, eax
je 0x1400faaf3
mov dword [rsp + 0x48], ebx
mov ecx, esi
call fcn.140138904
mov rdi, rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x48]
mov r8d, esi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x48], esi
je 0x1400faaf3
mov rcx, rdi
call fcn.140138344
mov rdi, rbx
test rdi, rdi
je 0x1400fab0e
mov edx, esi
mov rcx, rdi
call fcn.1400fa6d4
mov rbx, rax
mov rcx, rdi
call fcn.140138344
nop
lea rcx, [rbp + 0x80]
call fcn.1400e8d74
nop
lea rcx, [rbp + 0x418]
call fcn.1400e8d74
lea rcx, [rbp + 0x338]
call fcn.1400e8d74
lea rcx, [rbp + 0x2b0]
call fcn.1400e8d74
lea rcx, [rbp + 0x228]
call fcn.1400e8d74
lea rcx, [rbp + 0x1a0]
call fcn.1400e8d74
mov rax, rbx
mov rcx, qword [rbp + 0x6d0]
xor rcx, rsp
call fcn.140138320
lea r11, [rsp + 0x7e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret