Function at 0x1400752e0
Capabilities:
Get file size
Read file on windows

Disassembly:
xchg rbx, rdx
mov qword [rsp + 0x10], rdx
xchg rdx, rbx
push rsi
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
push r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x40
xchg rdx, r12
mov rbx, r12
xchg r12, rdx
mov rsi, rcx
xor r13d, r13d
cmp qword [rcx], r13
jne 0x140075344
call 0x140074a80
test al, al
je 0x1400753e5
mov rcx, rbx
call fcn.14007b660
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x61edfbef
sub dword [rsp + 0x20], 0x5a6ffa28
add dword [rsp + 0x20], 0x6e7409eb
sub dword [rsp + 0x20], 0x514e129d
add dword [rsp + 0x20], 0x340c75b0
sub dword [rsp + 0x20], 0x471d05d
add dword [rsp + 0x20], 0x25dee87c
sub dword [rsp + 0x20], 0x5138ba0c
xor dword [rsp + 0x20], 0x28e4ccdb
xor r9d, r9d
mov edx, 0x6322d53b
sub edx, 0x20f87d29
xor edx, 0x6ff18070
add edx, 0x1ddcc9f3
sub edx, 0x9fd82b8
xor edx, 0xc1bb1f9d
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg rsi, rax
mov r15, rsi
xchg rsi, rax
test rax, rax
jne 0x1400753ec
xor al, al
jmp 0x140075aaf
xor r12b, r12b
xor edx, edx
xchg r13, r15
mov rcx, r13
xchg r15, r13
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075a9c
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fccd4
mov rbp, rax
test rax, rax
je 0x140075439
mov r8d, ebx
xor edx, edx
xchg rcx, r9
mov r9, rax
xchg r9, rcx
call sub.VCRUNTIME140.dll_memset
jmp 0x140075442
xchg rdx, rbp
mov rdx, r13
xchg rdx, rbp
xchg rdx, rbp
mov qword [rsp + 0x98], rdx
xchg rdx, rbp
mov dword [rsp + 0x80], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg rbp, r8
mov rdx, r8
xchg rbp, r8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075a85
mov edx, dword [rsi + 8]
test edx, edx
je 0x1400754a0
lea rcx, [rsi + 0x20]
call fcn.140074520
mov dword [rsi + 8], r13d
movabs rax, 0x85239106581ec
add rax, 0x1b436a51
add rax, 0x4461a37a
sub rax, 0x497dcc2
xor rax, 0x407a1500
xor rax, 0x46c5954b
sub rax, 0xd15fbe4
sub rax, 0x12de5bec
add rax, 0x1d25577b
movabs rbx, 0xc562932e34421
add rbx, 0x34d12a7d
xor rbx, 0x646105dd
add rbx, 0x1643cbec
add rbx, 0x18c30783
add rbx, 0x7fffffff
sub rbx, 0x2fc2ac5b
cmp qword [0x140216040], rax
je 0x14007571e
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x14007571e
cmp byte [0x140217008], 0
jne 0x140075593
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x1400747f0]
mov ecx, 0x3983e3cc
add ecx, 0x1f63012d
sub ecx, 0x4197ba44
add ecx, 0x591ba7d2
sub ecx, 0x59d51d1f
add ecx, 0x6391bd1a
sub ecx, 0x15f145df
sub ecx, 0x64362ca2
call rax
mov ecx, 0x4f1e2ee1
add ecx, 0xaff738
sub ecx, 0x4d93f94a
add ecx, 0x1509eb14
xor ecx, 0x256615a5
sub ecx, 0x32220245
call fcn.1401fcc90
mov rdi, rax
movabs rax, 0x5826a6c49a44ae5
sub rax, 0x6ea4533
add rax, 0x38566f48
xor rax, 0x45d7d3b0
add rax, 0x37681648
sub rax, 0x35adbd4a
mov rbx, qword [rsi + 0x10]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
movabs rax, 0x5823592102facb8
add rax, 0x3a5f0d90
sub rax, 0x9e1c6b4
add rax, 0x1ad0da
xor rax, 0x317b2f89
sub rax, 0x55b8b389
add rax, 0x393956f3
xor rax, 0x2d78fd08
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e60
xchg r10, rbx
mov qword [rax], r10
xchg rbx, r10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x13062437
add dword [rsp + 0x20], 0x69ea8df3
xor dword [rsp + 0x20], 0x1cd4d75e
xor dword [rsp + 0x20], 0x2b91df70
xor dword [rsp + 0x20], 0x3e65deae
xor dword [rsp + 0x20], 0x3e80428
xor dword [rsp + 0x20], 0x524f3e5f
xor dword [rsp + 0x20], 0x24775ed9
mov r9d, r14d
xor r8d, r8d
xchg rdx, r12
mov r12, rbp
xchg r12, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc56291a783b7c
xor rbx, 0x793f358b
xor rbx, 0x210b59f2
sub rbx, 0x2997df1
xor rbx, 0x609d816e
add rbx, 0x23ea39dc
jmp 0x1400757d7
movabs rcx, 0x5ffe64086d66
xor rcx, 0x2e4b71b2
add rcx, 0x25a005ea
sub rcx, 0x7622044
sub rcx, 0x1baa5976
sub rcx, 0x3a674393
add rcx, 0x26580ca0
xchg r15, rax
mov r15, qword [rsi + 0x10]
xchg r15, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x6f2a1abd
sub dword [rsp + 0x20], 0x4369f98e
xor dword [rsp + 0x20], 0x76a1438f
sub dword [rsp + 0x20], 0x4f81e2c
sub dword [rsp + 0x20], 0x2c1d7ca6
sub dword [rsp + 0x20], 0xeffe757
add dword [rsp + 0x20], 0x5976e383
sub dword [rsp + 0x20], 0x76c2c3f6
mov r9d, r14d
xor r8d, r8d
xchg rdx, rbp
mov rbp, rdx
xchg rdx, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x852396c74f4a5
sub rax, 0x6b259078
add rax, 0x171e7af1
add rax, 0xe63a452
add rax, 0x56362038
xor rax, 0x86f06cf
sub rax, 0xa6a72fe
cmp qword [0x140216040], rax
je 0x1400759e4
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x1400759e4
cmp byte [0x140217008], 0
jne 0x140075890
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x1400747f0]
mov ecx, 0x25106f4c
add ecx, 0x137d7133
xor ecx, 0x34f66a3f
xor ecx, 0x181bd80c
add ecx, 0x15f5c3a7
add ecx, 0x2d7bbe8e
sub ecx, 0x10c6751c
xor ecx, 0x470b5f64
call rax
mov ecx, 0x17014da4
add ecx, 0x3ba5c40c
sub ecx, 0x232a99ef
sub ecx, 0x221e1298
add ecx, 0x3764002
add ecx, 0x3bb7cc90
sub ecx, 0x4c8c71ba
call fcn.1401fcc90
mov rdi, rax
movabs rax, 0x5826f6842518045
add rax, 0x317c50d
xor rax, 0x2089eeab
xor rax, 0x1e94a1cc
xor rax, 0x7b22019f
xor rax, 0x7c023e90
xor rax, 0x56e20014
add rax, 0x7fffffff
add rax, 0x5d02b1b
mov rbx, qword [rsi + 0x40]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg rdx, r8
mov rdx, rdi
xchg rdx, r8
movabs rax, 0x58235924735085f
sub rax, 0x23b1e22d
xor rax, 0x1468d2ca
sub rax, 0x2722123b
add rax, 0x1598a9d9
add rax, 0x45f90faf
sub rax, 0x39d3a73b
add rax, 0x45bd7d4f
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
xchg r11, r8
mov qword [rsp + 0x90], r11
xchg r8, r11
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e60
mov qword [rax], rbx
mov edx, 0x1d5b2791
xor edx, 0x28dc4976
add edx, 0x3769c551
xor edx, 0x22c4bcec
sub edx, 0x210862c7
xor edx, 0xf19f765
add edx, 0x169a7d84
sub edx, 0x38cf4eeb
mov ecx, r14d
call rdi
jmp 0x140075a85
movabs rax, 0x5afa1dd0c715
add rax, 0x58c586e6
sub rax, 0x7ac4383
sub rax, 0x488fbc29
xor rax, 0x66e406ee
add rax, 0x32cd969
sub rax, 0xcacb569
add rax, 0x1199d766
add rax, 0x7fffffff
sub rax, 0x1531f5
xchg rdi, r8
mov rdi, qword [rsi + 0x40]
xchg rdi, r8
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x7e5cfe2b
xor edx, 0x1f1b09ca
add edx, 0x9e966f7
sub edx, 0x3cfa3c26
add edx, 0xbcc1ef3
sub edx, 0x208d332f
xor edx, 0x19760e77
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075a9c
xchg rcx, r11
mov r11, rbp
xchg rcx, r11
call fcn.1401fcccc
xchg rdx, r15
mov rcx, rdx
xchg rdx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
xchg rbx, rsi
mov rsi, qword [rsp + 0x88]
xchg rbx, rsi
add rsp, 0x40
nop
xchg qword [rsp], r15
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
add rsp, 8
xchg qword [rsp - 8], r13
nop
add rsp, 8
mov r12, qword [rsp - 8]
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
nop
add rsp, 8
mov rbp, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]