Function at 0x140075470
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbx
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
nop
sub rsp, 8
mov qword [rsp], r12
push r13
push r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x40
xchg rbx, r13
mov r13, rdx
xchg rbx, r13
xchg r9, rsi
mov r9, rcx
xchg rsi, r9
xor r13d, r13d
cmp qword [rcx], r13
jne 0x1400754ca
call 0x140074c10
test al, al
je 0x14007557b
xchg rcx, r13
mov r13, rbx
xchg rcx, r13
call fcn.14007b710
xchg rsi, rax
mov rcx, rsi
xchg rsi, rax
xchg r11, r13
mov qword [rsp + 0x30], r11
xchg r13, r11
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x206e59a4
sub dword [rsp + 0x20], 0x1d093726
add dword [rsp + 0x20], 0x64d01dce
xor dword [rsp + 0x20], 0x7266f1cf
add dword [rsp + 0x20], 0x1a1b45be
add dword [rsp + 0x20], 0x3c445a3e
sub dword [rsp + 0x20], 0x70b3517c
xor r9d, r9d
mov edx, 0x669e161f
sub edx, 0x65472cc4
xor edx, 0x275dc6cf
sub edx, 0x23710006
xor edx, 0x2d3760f6
add edx, 0x99c267
xor edx, 0x27ee3e3
xor edx, 0x255bafd3
add edx, 0x689da211
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg rbp, r15
mov rbp, rax
xchg rbp, r15
test rax, rax
jne 0x140075582
xor al, al
jmp 0x140075c45
xor r12b, r12b
xor edx, edx
xchg rdi, r15
mov rcx, rdi
xchg r15, rdi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075c32
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fd2a4
mov rbp, rax
test rax, rax
je 0x1400755cd
mov r8d, ebx
xor edx, edx
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x1400755d6
xchg r15, rbp
mov r15, r13
xchg r15, rbp
xchg rbp, rdi
mov qword [rsp + 0x98], rdi
xchg rbp, rdi
mov dword [rsp + 0x80], r13d
xchg r13, r9
mov qword [rsp + 0x20], r9
xchg r13, r9
lea r9, [rsp + 0x80]
mov r8d, r14d
mov rdx, rbp
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075c1b
mov edx, dword [rsi + 8]
test edx, edx
je 0x140075634
lea rcx, [rsi + 0x20]
call fcn.140074690
mov dword [rsi + 8], r13d
movabs rax, 0x852396bd17c73
sub rax, 0x376ddcba
add rax, 0x275deaa5
sub rax, 0xef6dfcf
sub rax, 0x4bddb027
add rax, 0x6a113801
movabs rbx, 0xc56294741c0bd
xor rbx, 0x38aa869a
sub rbx, 0x7652af6
sub rbx, 0xb7fb43b
sub rbx, 0x698604a2
add rbx, 0x29411f74
add rbx, 0x22862014
add rbx, 0x7fffffff
sub rbx, 0x4c2e0f85
cmp qword [0x140216040], rax
je 0x1400758d2
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x1400758d2
cmp byte [0x140217008], 0
jne 0x140075723
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074980]
mov ecx, 0x4a927988
sub ecx, 0xda042a9
add ecx, 0x485161a
add ecx, 0x39cd6b26
sub ecx, 0x7062f7b4
add ecx, 0x6dd38db1
xor ecx, 0x1ae6dc83
sub ecx, 0x6253929e
call rax
mov ecx, 0x7c65ae4b
sub ecx, 0x4884d931
add ecx, 0x2449a3f5
xor ecx, 0x61f29a41
sub ecx, 0x7850ef9
xor ecx, 0x63450fea
sub ecx, 0x2dd7bfcb
xor ecx, 0x43e72454
sub ecx, 0x60d83f9f
call fcn.1401fd260
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x5826a6c55283d9a
sub rax, 0xc6df11
xor rax, 0x29b40eff
xor rax, 0x47e4a7d6
xor rax, 0x19c5beeb
xor rax, 0x21273eee
add rax, 0x1342a9f9
add rax, 0x2a6bdeaa
mov rbx, qword [rsi + 0x10]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg rdi, r14
mov rcx, r14
xchg rdi, r14
movabs rax, 0x5823592621fa8e0
sub rax, 0x326953bc
add rax, 0x16d350f5
add rax, 0x34827b91
xor rax, 0x57612ef2
add rax, 0x4bd86301
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029d60
mov qword [rax], rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x202641fe
xor dword [rsp + 0x20], 0x3499345a
xor dword [rsp + 0x20], 0x14a40915
xor dword [rsp + 0x20], 0x60e03460
sub dword [rsp + 0x20], 0x100990c3
xor dword [rsp + 0x20], 0x5ce02406
sub dword [rsp + 0x20], 0xc119c04
mov r9d, r14d
xor r8d, r8d
xchg rdx, rbp
mov rbp, rdx
xchg rbp, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc56294a6344ec
add rbx, 0x2ed80d50
sub rbx, 0x5af8f1e5
xor rbx, 0x26d07b74
add rbx, 0x3fe4c16f
xor rbx, 0x2433f918
xor rbx, 0x21b85e46
xor rbx, 0x29388cc7
add rbx, 0x7fffffff
sub rbx, 0x51ac64b4
jmp 0x140075985
movabs rcx, 0x5ffe3be62462
add rcx, 0x2ec3657c
xor rcx, 0x402dc06d
xor rcx, 0xa948528
add rcx, 0x2de102b2
add rcx, 0x1e758b37
sub rcx, 0x339fe873
xchg r13, rax
mov r13, qword [rsi + 0x10]
xchg r13, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x3dba810f
add dword [rsp + 0x20], 0xf0af8a1
add dword [rsp + 0x20], 0x6ef642
sub dword [rsp + 0x20], 0xdeaea61
sub dword [rsp + 0x20], 0x1f062df9
sub dword [rsp + 0x20], 0x2bb18a5
add dword [rsp + 0x20], 0x735ed98
sub dword [rsp + 0x20], 0x24be2c87
mov r9d, r14d
xor r8d, r8d
mov rdx, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x8523927757054
sub rax, 0x1a36fce0
add rax, 0x1d3394e4
add rax, 0x325b6a5d
sub rax, 0x5a069c7f
add rax, 0x68375c33
cmp qword [0x140216040], rax
je 0x140075b8c
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075b8c
cmp byte [0x140217008], 0
jne 0x140075a32
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074980]
mov ecx, 0x13e272b7
add ecx, 0x2b965a1
add ecx, 0x667dcf0f
sub ecx, 0xfafb54
xor ecx, 0xe387475
sub ecx, 0x22959b59
sub ecx, 0x4f913d0c
call rax
mov ecx, 0x1f76b74d
xor ecx, 0x1ca27eb9
xor ecx, 0x12bc1b9b
add ecx, 0x4d2ada47
xor ecx, 0x6fa98375
xor ecx, 0x4071a5fe
xor ecx, 0x714b8a3c
call fcn.1401fd260
mov rdi, rax
movabs rax, 0x5826f684dd13d48
xor rax, 0x68164a0f
xor rax, 0x38664f4c
add rax, 0x483e26a1
sub rax, 0x3ac7cdb4
add rax, 0x3db74882
add rax, 0x47b786ce
mov rbx, qword [rsi + 0x40]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg rsi, rdi
mov r8, rsi
xchg rsi, rdi
movabs rax, 0x58235925a2165e4
sub rax, 0x4bee051f
add rax, 0x6039040
xor rax, 0x466a772e
xor rax, 0x242076d6
sub rax, 0x644de3ff
add rax, 0x2a5ab477
xor rax, 0xe4e8cec
xor rax, 0x4a823fc0
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
xchg r9, r8
mov qword [rsp + 0x90], r9
xchg r8, r9
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029d60
xchg rdi, rbx
mov qword [rax], rdi
xchg rbx, rdi
mov edx, 0x7060d40b
sub edx, 0x4e606ca7
add edx, 0x1545cc9b
sub edx, 0x1b0315b
sub edx, 0x2bf38d72
xor edx, 0x6c3a438
add edx, 0x3c1db2c0
xor edx, 0x1218f0f9
xor edx, 0x59677332
mov ecx, r14d
call rdi
jmp 0x140075c1b
movabs rax, 0x5afa56b53cb9
xor rax, 0xb586e50
add rax, 0x1195b6a9
sub rax, 0xacd1bb9
sub rax, 0x32c2cd4d
add rax, 0x7fffffff
add rax, 0x16cff186
xchg r8, r14
mov r14, qword [rsi + 0x40]
xchg r8, r14
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x512fcda2
add edx, 0x260c4350
sub edx, 0x525ea47b
add edx, 0x4dcacb4c
xor edx, 0x2aef0b0b
add edx, 0x19383d0d
sub edx, 0x717f79d4
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075c32
xchg rbx, rbp
mov rcx, rbx
xchg rbx, rbp
call fcn.1401fd29c
xchg r15, rcx
mov r15, rcx
xchg rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
nop
add rsp, 8
mov r15, qword [rsp - 8]
push rdx
push rbx
push rcx
push rax
xchg qword [rsp + 0x20], r14
add rsp, 0x28
nop
xchg qword [rsp], r13
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r12
nop
add rsp, 8
xchg qword [rsp - 8], rdi
push rdx
push rdx
push rax
push rdx
push rbx
push rcx
push rdx
push rax
xchg qword [rsp + 0x40], rsi
add rsp, 0x48
nop
mov rbp, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]