Function at 0x140075550
Capabilities:
Get file size
Read file on windows

Disassembly:
xchg rbx, r11
mov qword [rsp + 0x10], r11
xchg rbx, r11
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
nop
push 0x54018f01
mov qword [rsp], r12
push rbx
mov qword [rsp], r13
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x40
xchg r14, rdx
mov rbx, r14
xchg rdx, r14
xchg rdx, rsi
mov rdx, rcx
xchg rsi, rdx
xor r13d, r13d
cmp qword [rcx], r13
jne 0x1400755c0
call 0x140074ce0
test al, al
je 0x140075669
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.14007b910
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0xc0bc3d9
add dword [rsp + 0x20], 0x493132f3
add dword [rsp + 0x20], 0x3b54237
sub dword [rsp + 0x20], 0x55d18aa6
xor dword [rsp + 0x20], 0x237eb8e5
add dword [rsp + 0x20], 0x4b15030b
sub dword [rsp + 0x20], 0x1aa23c70
xor dword [rsp + 0x20], 0x2aad7f2b
sub dword [rsp + 0x20], 0x7a7da275
xor r9d, r9d
mov edx, 0x4fa8dfcf
add edx, 0x251a4bed
sub edx, 0x6b1eb458
add edx, 0x5fb3fda6
sub edx, 0x26be66b9
add edx, 0x3d65f1af
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r10, r15
mov r10, rax
xchg r15, r10
test rax, rax
jne 0x140075670
xor al, al
jmp 0x140075d3f
xor r12b, r12b
xor edx, edx
xchg r15, r11
mov rcx, r11
xchg r11, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075d2c
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fd470
xchg rbp, rax
mov rax, rbp
xchg rbp, rax
test rax, rax
je 0x1400756bb
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x1400756c4
xchg rbp, r11
mov r11, r13
xchg rbp, r11
xchg rbp, r10
mov qword [rsp + 0x98], r10
xchg rbp, r10
mov dword [rsp + 0x80], r13d
xchg r13, rbp
mov qword [rsp + 0x20], rbp
xchg r13, rbp
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg rdx, r12
mov r12, rbp
xchg r12, rdx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075d1b
mov edx, dword [rsi + 8]
test edx, edx
je 0x140075728
lea rcx, [rsi + 0x20]
call fcn.140074780
mov dword [rsi + 8], r13d
movabs rax, 0x8523913e3bf0b
add rax, 0x1d8aab9b
xor rax, 0x2f7620f6
add rax, 0x5943a4ca
xor rax, 0x505d406d
add rax, 0x1dac640d
sub rax, 0x80f9b87
xor rax, 0x565d4594
movabs rbx, 0xc562959695138
add rbx, 0x1d14368f
sub rbx, 0x9d506a4
xor rbx, 0x1dd39788
sub rbx, 0x3f70b36a
sub rbx, 0x167eacd6
add rbx, 0x6bfa8e
add rbx, 0x39eb83d3
add rbx, 0x2d365d8a
cmp qword [0x140217040], rax
je 0x1400759db
mov rax, qword [0x140217050]
cmp rax, rbx
je 0x1400759db
cmp byte [0x140218008], 0
jne 0x140075817
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a50]
mov ecx, 0x61918f9d
xor ecx, 0x5b9a26e3
xor ecx, 0x1af1ce5d
add ecx, 0x12b1f0bc
add ecx, 0x28fe9ad7
xor ecx, 0x5caaf2b7
call rax
mov ecx, 0xef13a5c
xor ecx, 0x9d8836
add ecx, 0x27fb855d
sub ecx, 0x1fcb9c5a
xor ecx, 0x4a0d1f00
sub ecx, 0x193faa7c
add ecx, 0x33161d01
sub ecx, 0xaeb875f
xor ecx, 0x6b7c6f92
call fcn.1401fd42c
xchg rdx, rax
mov rdi, rdx
xchg rdx, rax
movabs rax, 0x5826a6c718beb50
sub rax, 0x13a83075
sub rax, 0x19859c68
sub rax, 0x234c0682
add rax, 0x7b93eb1
add rax, 0x7cb344a
sub rax, 0xf3bcd35
add rax, 0x12e9899b
add rax, 0xc3db8f6
xchg rbx, rbp
mov rbp, qword [rsi + 0x10]
xchg rbp, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg rcx, r11
mov r11, rdi
xchg r11, rcx
movabs rax, 0x582359272ca22e1
sub rax, 0x14393100
sub rax, 0x299f8c1d
sub rax, 0x20d73634
xor rax, 0x274b38eb
add rax, 0x3a6ac930
sub rax, 0x5b6ca9d
add rax, 0x10405c4b
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
xchg r10, rcx
mov qword [rsp + 0x90], r10
xchg r10, rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140217ff8]
call fcn.140029e60
xchg r9, rbx
mov qword [rax], r9
xchg rbx, r9
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x217799cd
add dword [rsp + 0x20], 0x3f519d08
add dword [rsp + 0x20], 0x45ef354
sub dword [rsp + 0x20], 0x938374a
add dword [rsp + 0x20], 0x982ad8d
xor dword [rsp + 0x20], 0x6572a068
mov r9d, r14d
xor r8d, r8d
xchg rdx, r8
mov r8, rbp
xchg r8, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc56294f909932
sub rbx, 0x2baeba8f
add rbx, 0x57b7072d
sub rbx, 0x1b5198e6
xor rbx, 0x559eae40
sub rbx, 0x2923d28b
add rbx, 0x5c5d0b2c
xor rbx, 0x549a0d6f
add rbx, 0x45907c32
jmp 0x140075a91
movabs rcx, 0x5ffe12fdd385
add rcx, 0x6103a2ab
xor rcx, 0x1a12ed37
xor rcx, 0x5fdc04c1
xor rcx, 0x59850435
sub rcx, 0x2f8329e2
mov rax, qword [rsi + 0x10]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x25e5603d
add dword [rsp + 0x20], 0xb161665
xor dword [rsp + 0x20], 0x5c500974
xor dword [rsp + 0x20], 0x7f8dfcac
add dword [rsp + 0x20], 0x4d46ec5
add dword [rsp + 0x20], 0x1ce61dc
xor dword [rsp + 0x20], 0x1c6fcfea
add dword [rsp + 0x20], 0x384f01e
xor dword [rsp + 0x20], 0x92b8c0b
mov r9d, r14d
xor r8d, r8d
xchg rdx, rsi
mov rsi, rbp
xchg rsi, rdx
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x852397f805384
sub rax, 0x6c81e1d3
xor rax, 0x5c16e14e
xor rax, 0x462604e7
add rax, 0x1d061ea6
sub rax, 0x25afdcad
add rax, 0xad79f70
add rax, 0x6001bce8
cmp qword [0x140217040], rax
je 0x140075c86
mov rax, qword [0x140217050]
cmp rax, rbx
je 0x140075c86
cmp byte [0x140218008], 0
jne 0x140075b4a
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a50]
mov ecx, 0x6930af39
xor ecx, 0x34b3da70
xor ecx, 0x132b1bc9
sub ecx, 0x168412f2
add ecx, 0x3e5599d4
sub ecx, 0xc4b6498
sub ecx, 0x6a2e90c9
call rax
mov ecx, 0x79b71227
xor ecx, 0x4d5b084
xor ecx, 0x8062e9f
xor ecx, 0x3db6eac4
xor ecx, 0x43dc9ce8
xor ecx, 0xb0efa11
call fcn.1401fd42c
mov rdi, rax
movabs rax, 0x5826f684b217516
sub rax, 0x4703e72
xor rax, 0x5efc9175
xor rax, 0x2b77ccef
xor rax, 0x7ff6b4a
add rax, 0x3c9fc748
add rax, 0x3f21988c
xchg r14, rbx
mov r14, qword [rsi + 0x40]
xchg rbx, r14
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
mov r8, rdi
movabs rax, 0x582359217d7953b
add rax, 0x13be7d1d
add rax, 0x51c4f38c
sub rax, 0x3403f1f1
xor rax, 0x589c07ea
sub rax, 0xe0e8b6a
add rax, 0x3fa89286
add rax, 0x34e05724
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
xchg r8, rbx
mov qword [rsp + 0x90], rbx
xchg rbx, r8
lea rdx, [rsp + 0x90]
lea rcx, [0x140217ff8]
call fcn.140029e60
xchg r13, rbx
mov qword [rax], r13
xchg rbx, r13
mov edx, 0x79b33420
sub edx, 0x141f3ab0
xor edx, 0x379512dd
add edx, 0x16a300e1
sub edx, 0x51a34b39
sub edx, 0x1706a154
mov ecx, r14d
call rdi
jmp 0x140075d1b
movabs rax, 0x5afa1b0f86f1
add rax, 0x60115c96
sub rax, 0x15e86681
sub rax, 0x60215d87
add rax, 0x3268f102
sub rax, 0x2fb82b85
add rax, 0x7fffffff
add rax, 0x40fb2d16
xchg r8, r14
mov r14, qword [rsi + 0x40]
xchg r14, r8
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x7e1fe9af
xor edx, 0x6878cd87
add edx, 0x1a78ddb1
add edx, 0xeeb1dd8
xor edx, 0x547f7ae7
sub edx, 0xf2ab32d
xor edx, 0x5c89b228
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075d2c
mov rcx, rbp
call fcn.1401fd468
xchg r11, rcx
mov r11, r15
xchg rcx, r11
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
xchg rbx, rdi
mov rdi, qword [rsp + 0x88]
xchg rbx, rdi
add rsp, 0x40
nop
xchg qword [rsp], r15
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
push rbx
push rbx
push rax
xchg qword [rsp + 0x18], r13
add rsp, 0x20
push rax
push rax
push rdx
push rcx
xchg qword [rsp + 0x20], r12
pop rcx
pop rdx
pop rax
pop rax
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
nop
xchg qword [rsp], rsi
add rsp, 8
nop
xchg qword [rsp], rbp
add rsp, 8
ret