Function at 0x1400751e0
Capabilities:
Get file size
Read file on windows

Disassembly:
xchg rdx, rbx
mov qword [rsp + 0x10], rdx
xchg rdx, rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
push rsi
push rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
mov qword [rsp - 8], r13
sub rsp, 8
push r14
push r15
sub rsp, 0x40
xchg rdx, r8
mov rbx, r8
xchg r8, rdx
xchg rsi, r8
mov r8, rcx
xchg r8, rsi
xor r13d, r13d
cmp qword [rcx], r13
jne 0x14007523e
call 0x1400749d0
test al, al
je 0x1400752f1
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.14007b590
xchg r15, rax
mov rcx, r15
xchg r15, rax
xchg r15, r13
mov qword [rsp + 0x30], r15
xchg r13, r15
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x5ece6d64
xor dword [rsp + 0x20], 0x6b639509
sub dword [rsp + 0x20], 0x406e19b
xor dword [rsp + 0x20], 0x202fb337
add dword [rsp + 0x20], 0x5e16f4f6
sub dword [rsp + 0x20], 0x16365944
sub dword [rsp + 0x20], 0x4883779b
xor dword [rsp + 0x20], 0x10e5c9ff
xor r9d, r9d
mov edx, 0x2e3fe8dd
xor edx, 0x47169582
add edx, 0x6c917eb
sub edx, 0x33ee0cc2
sub edx, 0x3a172b54
add edx, 0x48112b05
xor edx, 0x4f456c69
add edx, 0x79441bb0
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r15, r12
mov r12, rax
xchg r15, r12
test rax, rax
jne 0x1400752f8
xor al, al
jmp 0x1400759e7
xor r12b, r12b
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x1400759d4
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fcb90
xchg rbp, rax
mov rax, rbp
xchg rbp, rax
test rax, rax
je 0x140075341
mov r8d, ebx
xor edx, edx
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x140075344
mov rbp, r13
xchg rbp, r10
mov qword [rsp + 0x98], r10
xchg r10, rbp
mov dword [rsp + 0x80], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg rbp, rdi
mov rdx, rdi
xchg rbp, rdi
xchg r9, rcx
mov r9, r15
xchg r9, rcx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x1400759bd
mov edx, dword [rsi + 8]
test edx, edx
je 0x1400753a8
lea rcx, [rsi + 0x20]
call fcn.140074490
mov dword [rsi + 8], r13d
movabs rax, 0x852390cabb453
add rax, 0x3b151a63
add rax, 0x22091036
xor rax, 0x74ff851c
xor rax, 0x522f1753
add rax, 0x5a07f0
add rax, 0x5203d8d
sub rax, 0x4d811060
add rax, 0x63ebb0a9
movabs rbx, 0xc562939c7c1d2
xor rbx, 0xa8cdf7b
add rbx, 0x3152c3ed
xor rbx, 0x9211be3
xor rbx, 0x4aedcbae
add rbx, 0x7fffffff
sub rbx, 0x2437a084
cmp qword [0x140216040], rax
je 0x140075657
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075657
cmp byte [0x140217008], 0
jne 0x14007549b
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074750]
mov ecx, 0xb308569
add ecx, 0x38ad1e77
xor ecx, 0x1272b10d
xor ecx, 0x7a6fe62b
add ecx, 0x1bc7aa47
add ecx, 0x6b39dba
sub ecx, 0x9a93cd9
sub ecx, 0x4492ffed
call rax
mov ecx, 0x206b0f94
add ecx, 0xa9baa67
xor ecx, 0x7d57c602
add ecx, 0x232e6e0
sub ecx, 0x31ee1169
add ecx, 0x37a374e2
xor ecx, 0x16e34796
sub ecx, 0x48da8dc3
call fcn.1401fcb4c
xchg rsi, rax
mov rdi, rsi
xchg rsi, rax
movabs rax, 0x5826a6c2a393bcd
add rax, 0x3e4cc1a5
xor rax, 0x1fa5aae9
sub rax, 0x6f676328
xor rax, 0x65e041cb
sub rax, 0x50ea63e6
xor rax, 0x1da36929
sub rax, 0x4fd89d4
xor rax, 0x474daf6f
mov rbx, qword [rsi + 0x10]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rcx, r13
mov r13, rdi
xchg r13, rcx
movabs rax, 0x582359238ec91c1
xor rax, 0xc2a8962
xor rax, 0x75518048
xor rax, 0x33939351
xor rax, 0x5c2a5d3f
xor rax, 0x29611f5f
add rax, 0x4151c50e
xor rax, 0x30e47cb1
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e00
mov qword [rax], rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x6c7fd32e
sub dword [rsp + 0x20], 0x4ff9ae14
xor dword [rsp + 0x20], 0x350fa9b0
add dword [rsp + 0x20], 0x497a0a6
add dword [rsp + 0x20], 0x4555d41a
sub dword [rsp + 0x20], 0x596b2e3a
add dword [rsp + 0x20], 0x2fa7ed39
sub dword [rsp + 0x20], 0x49b3c065
mov r9d, r14d
xor r8d, r8d
xchg rdx, r8
mov r8, rbp
xchg r8, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc5629208321e0
sub rbx, 0x1f1b937c
add rbx, 0x3aca4f1b
xor rbx, 0x2f35bcc4
add rbx, 0x1ef2460
add rbx, 0x65c87a69
sub rbx, 0x7169acb8
add rbx, 0xc4cfce1
add rbx, 0x6d7a41a9
jmp 0x1400756f9
movabs rcx, 0x5ffe2841b334
xor rcx, 0x5878ca5a
add rcx, 0x5fcbff
sub rcx, 0x1e3c0608
xor rcx, 0x7c7221bf
add rcx, 0xa985337
xchg r9, rax
mov r9, qword [rsi + 0x10]
xchg r9, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x515eedde
sub dword [rsp + 0x20], 0x744a38
add dword [rsp + 0x20], 0xafed4b6
sub dword [rsp + 0x20], 0x10024cdb
sub dword [rsp + 0x20], 0x8b3770e
xor dword [rsp + 0x20], 0x4333b477
mov r9d, r14d
xor r8d, r8d
xchg rbp, rdx
mov rbp, rdx
xchg rdx, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x852395fd8ae1d
sub rax, 0x11686b5c
sub rax, 0x2867a174
sub rax, 0x2f1a1dd
add rax, 0x2f5efe53
add rax, 0x188834a6
cmp qword [0x140216040], rax
je 0x140075910
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075910
cmp byte [0x140217008], 0
jne 0x1400757a6
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074750]
mov ecx, 0x68ee379c
xor ecx, 0x189216a4
sub ecx, 0x6405903f
sub ecx, 0x6dd8634
add ecx, 0x2c3753e3
xor ecx, 0x3bbe57a2
sub ecx, 0xa6e0909
call rax
mov ecx, 0xb522dc8
add ecx, 0x6e7e9fe0
sub ecx, 0x247121b4
sub ecx, 0x2d006e05
xor ecx, 0x2b3f65fa
add ecx, 0x38d8ae37
xor ecx, 0x19926063
xor ecx, 0x720f4c6f
sub ecx, 0x57a42a3f
call fcn.1401fcb4c
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x5826f684f31823c
xor rax, 0x664480d9
sub rax, 0x1e541bbf
xor rax, 0x4898af67
xor rax, 0x19496d09
xor rax, 0x4d4b9cab
xor rax, 0x673d4b00
xor rax, 0xf4ce4e4
add rax, 0x7fffffff
sub rax, 0x4f44b5be
mov rbx, qword [rsi + 0x40]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
mov r8, rdi
movabs rax, 0x58235924b06ae3e
xor rax, 0x23e673e1
add rax, 0xafd3bd
sub rax, 0x6963ef73
add rax, 0x2874f4f7
add rax, 0x61ae6df
xor rax, 0x338ddaa3
sub rax, 0xf54a379
add rax, 0x6a68ce76
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
xchg rdx, r8
mov qword [rsp + 0x90], rdx
xchg r8, rdx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e00
mov qword [rax], rbx
mov edx, 0x715c09ca
xor edx, 0x9517cbd
sub edx, 0x21d19691
xor edx, 0x1faee8f8
xor edx, 0x780f8b4
sub edx, 0x47c2dd72
add edx, 0x18a15d79
xor edx, 0x1ef44eb0
mov ecx, r14d
call rdi
jmp 0x1400759bd
movabs rax, 0x5afa014610e1
add rax, 0x38460624
add rax, 0x401b05b
xor rax, 0x1408305f
xor rax, 0x270e79b4
add rax, 0x1d9ddfcb
add rax, 0x163c99d4
sub rax, 0x2b8a2a64
add rax, 0x7fffffff
add rax, 0x31e7344c
xchg r8, rdi
mov rdi, qword [rsi + 0x40]
xchg rdi, r8
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
mov edx, 0x67505489
xor edx, 0xbebd8c2
add edx, 0x12547f8b
sub edx, 0x75076357
add edx, 0x34a4ac6a
xor edx, 0x57b46e0d
add edx, 0x527f33f
xor edx, 0x13bbcf49
sub edx, 0x7dfae169
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x1400759d4
xchg rbp, rsi
mov rcx, rsi
xchg rbp, rsi
call fcn.1401fcb88
xchg r15, r12
mov rcx, r12
xchg r12, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
xchg rdi, rbx
mov rdi, qword [rsp + 0x88]
xchg rdi, rbx
add rsp, 0x40
push rdx
push rax
push rax
push rbx
push rdx
push rdx
push rax
push rcx
xchg qword [rsp + 0x40], r15
add rsp, 0x48
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
add rsp, 8
mov r13, qword [rsp - 8]
push rax
push rax
push rcx
push rdx
xchg qword [rsp + 0x20], r12
add rsp, 0x28
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
push rcx
push rdx
xchg qword [rsp + 0x10], rbp
pop rdx
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]