Function at 0x140074cc0
Capabilities:
Get file size
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
xchg rcx, r14
mov rcx, r14
xchg rcx, r14
xor r12d, r12d
mov dword [rbp - 0x59], 0x1a783a86
add dword [rbp - 0x59], 0x5d828c84
add dword [rbp - 0x59], 0x70992d0
sub dword [rbp - 0x59], 0x584d827b
add dword [rbp - 0x59], 0x4a250ac6
sub dword [rbp - 0x59], 0x65d793b0
add dword [rbp - 0x59], 0xebf2a881
mov dword [rbp - 0x47], 0x89300b6
add dword [rbp - 0x47], 0x5d2e5b4c
sub dword [rbp - 0x47], 0x24597619
add dword [rbp - 0x47], 0x245dbd9a
xor dword [rbp - 0x47], 0x33897daf
xor dword [rbp - 0x47], 0x2c136a29
sub dword [rbp - 0x47], 0x30ef9abd
add dword [rbp - 0x47], 0xe9d0ce7
add dword [rbp - 0x47], 0xa76cd947
mov dword [rbp - 0x43], 0x16b7da11
add dword [rbp - 0x43], 0x1f1db775
sub dword [rbp - 0x43], 0x28f6a616
xor dword [rbp - 0x43], 0x2cf77d
sub dword [rbp - 0x43], 0x1bb33c
xor dword [rbp - 0x43], 0x4c0fe536
add dword [rbp - 0x43], 0x37d911ae
xor dword [rbp - 0x43], 0x87cb60e4
mov dword [rbp - 0x55], 0x24d0ad06
add dword [rbp - 0x55], 0x4cd888a1
sub dword [rbp - 0x55], 0x40d7ca5f
sub dword [rbp - 0x55], 0x2fbe7078
xor dword [rbp - 0x55], 0x4a1b0ea3
sub dword [rbp - 0x55], 0x4596231f
add dword [rbp - 0x55], 0xf18325a2
mov dword [rbp - 0x3f], 0x670958a1
xor dword [rbp - 0x3f], 0x6d95f726
add dword [rbp - 0x3f], 0x1bb1a9d8
add dword [rbp - 0x3f], 0x221e4ef2
sub dword [rbp - 0x3f], 0x47c56962
add dword [rbp - 0x3f], 0xb67e875
add dword [rbp - 0x3f], 0xf36dd802
mov dword [rbp - 0x3b], 0x4e8543f0
xor dword [rbp - 0x3b], 0x79f84297
sub dword [rbp - 0x3b], 0x2ba1845
xor dword [rbp - 0x3b], 0x74a38d4d
add dword [rbp - 0x3b], 0x31806b10
sub dword [rbp - 0x3b], 0x2084a757
sub dword [rbp - 0x3b], 0x4fd031e8
add dword [rbp - 0x3b], 0xfddd0901
mov dword [rbp - 0x51], 0x37ff37a0
add dword [rbp - 0x51], 0x328eec05
sub dword [rbp - 0x51], 0x5b5a05e7
xor dword [rbp - 0x51], 0xebff502
add dword [rbp - 0x51], 0x6371636e
sub dword [rbp - 0x51], 0x1ab8c248
sub dword [rbp - 0x51], 0x219a41b5
xor dword [rbp - 0x51], 0x520c5439
add dword [rbp - 0x51], 0x7c50dae2
mov dword [rbp - 0x37], 0x266d4952
add dword [rbp - 0x37], 0xb1e663
xor dword [rbp - 0x37], 0x2e4d7725
add dword [rbp - 0x37], 0x17ea5ad9
xor dword [rbp - 0x37], 0x24995535
add dword [rbp - 0x37], 0x535735ef
sub dword [rbp - 0x37], 0x2e80b7ff
add dword [rbp - 0x37], 0x19cb1790
add dword [rbp - 0x37], 0xbb248390
mov dword [rbp - 0x33], 0x2494d8ab
xor dword [rbp - 0x33], 0x4ee8289c
sub dword [rbp - 0x33], 0x384db888
sub dword [rbp - 0x33], 0x130e3e66
xor dword [rbp - 0x33], 0x23453cb0
xor dword [rbp - 0x33], 0xf9a22e9
sub dword [rbp - 0x33], 0xd2695a6
xor dword [rbp - 0x33], 0x2535af85
add dword [rbp - 0x33], 0xfb91008e
mov dword [rbp - 0x4d], 0x7ab164c
add dword [rbp - 0x4d], 0x3332b67
add dword [rbp - 0x4d], 0x5cf8eedb
sub dword [rbp - 0x4d], 0x30869291
xor dword [rbp - 0x4d], 0x64c31d5c
xor dword [rbp - 0x4d], 0x791dfa4f
add dword [rbp - 0x4d], 0xcc687c08
mov dword [rbp - 0x2f], 0x57b31455
sub dword [rbp - 0x2f], 0x53dd361
sub dword [rbp - 0x2f], 0x10da97be
add dword [rbp - 0x2f], 0x103ae689
add dword [rbp - 0x2f], 0x16fbb0d5
add dword [rbp - 0x2f], 0x969dbea4
mov dword [rbp - 0x2b], 0x5a06b6b
add dword [rbp - 0x2b], 0x70aff542
sub dword [rbp - 0x2b], 0x4881cbc7
sub dword [rbp - 0x2b], 0x254a0127
add dword [rbp - 0x2b], 0x14da90fa
add dword [rbp - 0x2b], 0x531f99e5
sub dword [rbp - 0x2b], 0x4951fdd6
xor dword [rbp - 0x2b], 0xd85a3fbe
xor eax, eax
mov word [rbp - 0x27], ax
mov edx, r12d
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 - 0x47]
movzx ecx, byte [rbp + rdx - 0x59]
add cx, ax
mov word [rbp + rdx*2 - 0x47], cx
mov byte [rbp + rdx - 0x59], r12b
inc rdx
cmp rdx, 0x10
jb 0x140074f9b
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0x4ea3d329
xor dword [rsp + 0x20], 0x253fa9e2
xor dword [rsp + 0x20], 0xd182669
xor dword [rsp + 0x20], 0x5cc9de58
sub dword [rsp + 0x20], 0x116bf648
sub dword [rsp + 0x20], 0x28e18caf
xor r9d, r9d
mov edx, 0x1f7719e4
sub edx, 0x17be94c8
add edx, 0x4f8b8d04
xor edx, 0x6e6079ee
xor edx, 0x7641792e
sub edx, 0x2607b96b
add edx, 0x56a2a68b
lea r8d, [r9 + 1]
lea rcx, [rbp - 0x47]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r14, rax
mov rbx, r14
xchg r14, rax
xchg rsi, r12
mov rcx, rsi
xchg rsi, r12
nop
mov byte [rbp + rcx - 0x47], r12b
inc rcx
cmp rcx, 0x20
jb 0x140075045
test rbx, rbx
jne 0x140075067
xor al, al
jmp 0x1400754bb
xor edx, edx
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
lea ecx, [rax + 1]
mov r15d, ecx
call fcn.1401fc5d4
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
test rax, rax
je 0x1400750ad
mov r8d, r15d
xor edx, edx
xchg r9, rcx
mov r9, rax
xchg rcx, r9
call sub.VCRUNTIME140.dll_memset
jmp 0x1400750b6
xchg rsi, rbp
mov rbp, r12
xchg rbp, rsi
mov qword [rbp + 0x77], rsi
test edi, edi
je 0x140075177
mov dword [rbp + 0x6f], r12d
xchg rdi, r12
mov qword [rsp + 0x20], rdi
xchg r12, rdi
lea r9, [rbp + 0x6f]
mov r8d, edi
xchg rsi, rdx
mov rsi, rdx
xchg rsi, rdx
xchg r11, rcx
mov r11, rbx
xchg r11, rcx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140075177
call fcn.140198d80
xchg rsi, r12
mov qword [rsp + 0x28], rsi
xchg r12, rsi
mov byte [rsp + 0x20], 0x24
add byte [rsp + 0x20], 0x4e
sub byte [rsp + 0x20], 0x27
add byte [rsp + 0x20], 0xb
add byte [rsp + 0x20], 0x14
sub byte [rsp + 0x20], 0x6a
xor r9d, r9d
xor r8d, r8d
xchg rdx, rsi
mov rsi, rdx
xchg rdx, rsi
mov rcx, rax
call fcn.140199f80
mov qword [r14], rax
test rax, rax
je 0x140075177
call fcn.140198d80
lea rcx, [0x140002d98]
mov qword [rbp - 0x21], rcx
mov qword [rbp - 0x19], r14
lea rcx, [rbp - 0x21]
mov qword [rbp + 0x17], rcx
lea r9, [rbp - 0x21]
xor r8d, r8d
mov rdx, qword [r14]
mov rcx, rax
call fcn.1401980f0
xchg rbx, r13
mov rcx, r13
xchg rbx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r14], 0
je 0x1400754a5
movabs rax, 0x852395da81c1c
sub rax, 0x1a007cae
add rax, 0x213736b1
xor rax, 0x48bdf4e4
xor rax, 0x19aadda5
xor rax, 0x5f37cd37
cmp qword [0x140216040], rax
je 0x1400753dc
movabs rdx, 0xc562915e9febb
add rdx, 0x1c465d67
add rdx, 0x2f125d76
sub rdx, 0x4291fe8c
sub rdx, 0x116e6588
xor rdx, 0x723de970
sub rdx, 0x3e09ccf1
add rdx, 0x41a3a253
mov rax, qword [0x140216050]
cmp rax, rdx
je 0x1400753dc
cmp byte [0x140217008], 0
jne 0x14007527e
push rax
xor eax, edx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rdx, 0x20
xor eax, edx
ror rdx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a40]
mov ecx, 0x5d3fe1de
sub ecx, 0x5584f725
add ecx, 0x216a7b1f
add ecx, 0xfaf773c
xor ecx, 0x4a899bd0
sub ecx, 0x5dd2e320
xor ecx, 0x26a8eee0
xor ecx, 0x6115c902
sub ecx, 0x53374445
call rax
mov ecx, 0xfa6ff9c
xor ecx, 0x1bfea2f6
add ecx, 0x197bf13e
add ecx, 0x1ea7efb6
sub ecx, 0xcbc81d7
sub ecx, 0x3fbfbc86
call fcn.1401fc590
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x5827fa879dfbcb6
sub rax, 0x5b5aacff
xor rax, 0x57040c95
add rax, 0xbe7e2a6
sub rax, 0x676931a
add rax, 0xc5be07
add rax, 0x7cb7e8b
sub rax, 0x16fd2ef8
mov rbx, qword [r14 + 0x60]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
movabs rax, 0x58235926aeed8c9
sub rax, 0x38508528
xor rax, 0x3c4c2949
add rax, 0x61749791
xor rax, 0x424e2d6
sub rax, 0x201c1b4a
add rax, 0x8ae1f48
add rax, 0x1b4f7dac
xchg rcx, r12
mov r12, rdi
xchg r12, rcx
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
xchg r10, rcx
mov qword [rbp + 0x6f], r10
xchg r10, rcx
lea rdx, [rbp + 0x6f]
lea rcx, [0x140216ff8]
call fcn.140029e40
xchg rbx, rbp
mov qword [rax], rbp
xchg rbp, rbx
xchg r8, r12
mov qword [rsp + 0x20], r8
xchg r12, r8
xor r9d, r9d
xor r8d, r8d
mov edx, 0x61a8c590
sub edx, 0x4a5a7670
add edx, 0x3e2940b9
add edx, 0x229825cc
xor edx, 0x560acc6f
add edx, 0x92ac5a7
add edx, 0xda3fd07
add edx, 0x39d6ba38
sub edx, 0x7eaa4a6c
lea ecx, [r9 - 1]
call rdi
jmp 0x140075481
movabs rcx, 0x4a3a1c331b98
add rcx, 0x4b5e049e
xor rcx, 0x539bcbb
sub rcx, 0x17869ed1
add rcx, 0x3072f976
xor rcx, 0x15669f4b
sub rcx, 0x362f5668
xchg rsi, rax
mov rsi, qword [r14 + 0x60]
xchg rsi, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
xchg r9, r12
mov qword [rsp + 0x20], r9
xchg r12, r9
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2efff9a7
add edx, 0x1a4cb402
sub edx, 0x44ab4a93
add edx, 0x7a309206
sub edx, 0x4f998c14
xor edx, 0x2ec0e54d
xor edx, 0x4adb398a
xor edx, 0x4b23198b
lea ecx, [r9 - 1]
call rax
test eax, eax
je 0x1400754a5
mov bl, 0xe
xor bl, 0x79
sub bl, 0x75
add bl, 2
add bl, 0x4c
sub bl, 0x27
add bl, 1
xor bl, 0x2b
jmp 0x1400754a7
xor bl, bl
test rsi, rsi
je 0x1400754b8
mov rcx, rsi
call fcn.1401fc5cc
movzx eax, bl
add rsp, 0xc0
nop
xchg qword [rsp], r15
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
push rbx
push rbx
push rcx
push rbx
push rbx
push rcx
push rbx
push rax
xchg qword [rsp + 0x40], r12
pop rax
pop rbx
pop rcx
pop rbx
pop rbx
pop rcx
pop rbx
pop rbx
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
xchg qword [rsp], rsi
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rbx
nop
mov rbp, qword [rsp]
add rsp, 8
ret