Function at 0x1400751d0
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
push 0x1dacc372
mov qword [rsp], rsi
push rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x40
xchg rbx, rdx
mov rdx, rbx
xchg rbx, rdx
xchg r15, rcx
mov rsi, r15
xchg r15, rcx
xor r13d, r13d
cmp qword [rcx], r13
jne 0x14007523f
call 0x140074940
test al, al
je 0x1400752ec
mov rcx, rbx
call fcn.14007b5c0
xchg rdi, rax
mov rcx, rdi
xchg rdi, rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x195c7978
xor dword [rsp + 0x20], 0x1d9ce7b8
add dword [rsp + 0x20], 0x5993132a
xor dword [rsp + 0x20], 0x7c1437cb
xor dword [rsp + 0x20], 0x55a48716
sub dword [rsp + 0x20], 0x401b319e
xor dword [rsp + 0x20], 0x49cdce39
sub dword [rsp + 0x20], 0x56233f4a
sub dword [rsp + 0x20], 0x27e6c253
xor r9d, r9d
mov edx, 0x2c122ccd
xor edx, 0x68863073
xor edx, 0x10689186
sub edx, 0x1beca70c
add edx, 0x5f806b2
xor edx, 0x43d57231
sub edx, 0x70614bc5
add edx, 0x738eacd6
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r15, rax
mov rax, r15
xchg r15, rax
test rax, rax
jne 0x1400752f3
xor al, al
jmp 0x1400759dc
xor r12b, r12b
xor edx, edx
xchg rcx, r15
mov r15, rcx
xchg r15, rcx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x1400759c9
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fd094
mov rbp, rax
test rax, rax
je 0x140075340
mov r8d, ebx
xor edx, edx
xchg rcx, rdx
mov rdx, rax
xchg rdx, rcx
call sub.VCRUNTIME140.dll_memset
jmp 0x140075349
xchg rbp, rdi
mov rdi, r13
xchg rdi, rbp
mov qword [rsp + 0x98], rbp
mov dword [rsp + 0x80], r13d
xchg rcx, r13
mov qword [rsp + 0x20], rcx
xchg rcx, r13
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg r15, rdx
mov r15, rbp
xchg r15, rdx
xchg r11, r15
mov rcx, r11
xchg r15, r11
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x1400759b2
mov edx, dword [rsi + 8]
test edx, edx
je 0x1400753ad
lea rcx, [rsi + 0x20]
call fcn.1400743e0
mov dword [rsi + 8], r13d
movabs rax, 0x8523935a9a3aa
xor rax, 0x44323515
add rax, 0xc5ff74f
xor rax, 0x2cdd1bd5
sub rax, 0x3b49b9a
sub rax, 0x244cf9a3
sub rax, 0x701e672
add rax, 0x20a56291
xor rax, 0x28364ed4
movabs rbx, 0xc562942c9a3dc
xor rbx, 0xbca4e01
xor rbx, 0x61671725
add rbx, 0x33f49e0b
xor rbx, 0x530b83dd
xor rbx, 0x73b62d37
xor rbx, 0x6e3e4d90
add rbx, 0x703f17dd
cmp qword [0x140216040], rax
je 0x140075662
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075662
cmp byte [0x140217008], 0
jne 0x1400754a1
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x1400746a0]
mov ecx, 0x17a25ef
add ecx, 0x4b2c2f6c
add ecx, 0x267546ab
sub ecx, 0x3c6f798f
sub ecx, 0x27088367
sub ecx, 0xf101dc5
sub ecx, 0x93814a
call rax
mov ecx, 0x16819be8
xor ecx, 0xdca2367
add ecx, 0x17f68dee
xor ecx, 0x65157699
add ecx, 0x23f6de
add ecx, 0x16bae2a1
sub ecx, 0x697a640
xor ecx, 0x669e6422
call fcn.1401fd050
xchg r15, rax
mov rdi, r15
xchg r15, rax
movabs rax, 0x5826a6c3abee65b
add rax, 0xbd10d95
add rax, 0x17cd1788
xor rax, 0x1c4ef7cd
add rax, 0x322947af
sub rax, 0x71959e73
add rax, 0x3dda5a57
xchg r11, rbx
mov r11, qword [rsi + 0x10]
xchg rbx, r11
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
movabs rax, 0x582359205e6b360
add rax, 0x215e89be
xor rax, 0x6a6e8383
xor rax, 0x748f0eae
sub rax, 0x21b63b85
add rax, 0x43097e30
xor rax, 0x4d67a6b4
add rax, 0x238acc1f
add rax, 0x3d2a51d0
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
xchg r9, rcx
mov qword [rsp + 0x90], r9
xchg rcx, r9
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e40
xchg r14, rbx
mov qword [rax], r14
xchg rbx, r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x27b2a184
sub dword [rsp + 0x20], 0x2a0ff0d
xor dword [rsp + 0x20], 0x6280740f
add dword [rsp + 0x20], 0xdccb3c4
sub dword [rsp + 0x20], 0x552e7ca
add dword [rsp + 0x20], 0x276026bb
xor dword [rsp + 0x20], 0x7d50dd2a
sub dword [rsp + 0x20], 0xa3b1403
mov r9d, r14d
xor r8d, r8d
xchg rdi, rbp
mov rdx, rdi
xchg rdi, rbp
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc56290000e99c
xor rbx, 0x78a86555
sub rbx, 0x2178e78a
xor rbx, 0xaef7738
sub rbx, 0x4bf7b34c
add rbx, 0x24927442
xor rbx, 0x27400ecf
add rbx, 0x71fdf624
jmp 0x140075712
movabs rcx, 0x5ffe5a6cea84
xor rcx, 0x112d536a
xor rcx, 0x7adb9ea5
xor rcx, 0x73541616
xor rcx, 0x674bc1de
xor rcx, 0x5f7f7b98
xor rcx, 0x2d3b97f1
sub rcx, 0x1ef9aad9
xchg r12, rax
mov r12, qword [rsi + 0x10]
xchg r12, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x57a02a3e
xor dword [rsp + 0x20], 0x5a1450d9
add dword [rsp + 0x20], 0x5ee04806
xor dword [rsp + 0x20], 0x39b0200a
sub dword [rsp + 0x20], 0x308c40b
sub dword [rsp + 0x20], 0x521c1ed8
mov r9d, r14d
xor r8d, r8d
xchg rdx, rbp
mov rbp, rdx
xchg rdx, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x852395a52b755
xor rax, 0x7ce53985
xor rax, 0x2523cedb
add rax, 0x77a78ab2
sub rax, 0x4befa1e1
add rax, 0x4abd7a6
add rax, 0x370631e7
cmp qword [0x140216040], rax
je 0x14007591d
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x14007591d
cmp byte [0x140217008], 0
jne 0x1400757c5
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x1400746a0]
mov ecx, 0x44813d78
xor ecx, 0x5c6578c5
add ecx, 0x3cb3aac2
add ecx, 0x2cbd4d0
xor ecx, 0x6bca8ad9
xor ecx, 0x59748b9f
sub ecx, 0x6addc408
call rax
mov ecx, 0x53aee6e2
sub ecx, 0x10fcff88
xor ecx, 0x1a39df9b
sub ecx, 0x1a64e44f
add ecx, 0x26b377d5
xor ecx, 0x53b60906
sub ecx, 0x29e401ec
sub ecx, 0xceae3b5
sub ecx, 0x91df9f
call fcn.1401fd050
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x5826f68755746ce
sub rax, 0xd197235
xor rax, 0x3692adee
xor rax, 0x66582036
add rax, 0x132651cd
add rax, 0xa5cc198
add rax, 0x5a0bf3a2
xchg rbx, rbp
mov rbp, qword [rsi + 0x40]
xchg rbp, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg rcx, rdi
mov r8, rcx
xchg rcx, rdi
movabs rax, 0x58235922da66681
add rax, 0x46393218
add rax, 0x57f0d63
sub rax, 0xcdd456b
xor rax, 0x542e1050
xor rax, 0x7ec9baa5
add rax, 0x31dea7f5
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], r8
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e40
xchg rsi, rbx
mov qword [rax], rsi
xchg rbx, rsi
mov edx, 0x2a5336f2
xor edx, 0x254a7ca9
add edx, 0x5970f269
xor edx, 0x6d6cf437
add edx, 0x64ff6695
sub edx, 0x3bce868d
sub edx, 0x28a4d01c
sub edx, 0x672d8de
mov ecx, r14d
call rdi
jmp 0x1400759b2
movabs rax, 0x5afa122124ab
xor rax, 0x777a583b
sub rax, 0x2c84eac2
add rax, 0xabade55
sub rax, 0xce553d0
sub rax, 0x2fb5dd60
xor rax, 0x32925bfc
add rax, 0x7fffffff
add rax, 0x145ead03
xchg r8, rbp
mov rbp, qword [rsi + 0x40]
xchg r8, rbp
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
mov edx, 0x7267f199
sub edx, 0x1ba7870e
sub edx, 0x2a4172ad
xor edx, 0x2d137972
xor edx, 0x1e26bfbc
sub edx, 0x1f4b310f
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x1400759c9
xchg rbp, rdx
mov rcx, rdx
xchg rbp, rdx
call fcn.1401fd08c
xchg r15, rcx
mov r15, rcx
xchg r15, rcx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
xchg r8, rbx
mov r8, qword [rsp + 0x88]
xchg rbx, r8
add rsp, 0x40
push rbx
push rcx
xchg qword [rsp + 0x10], r15
add rsp, 0x18
push rax
push rdx
push rbx
push rax
push rdx
push rax
xchg qword [rsp + 0x30], r14
pop rax
pop rdx
pop rax
pop rbx
pop rdx
pop rax
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
push rcx
push rdx
push rcx
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rsi
nop
add rsp, 8
xchg qword [rsp - 8], rbp
ret