Function at 0x140075360
Capabilities:
Get file size
Read file on windows

Disassembly:
xchg rdx, rbx
mov qword [rsp + 0x10], rdx
xchg rdx, rbx
push rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
push r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x40
xchg r9, rdx
mov rbx, r9
xchg rdx, r9
xchg rsi, r9
mov r9, rcx
xchg r9, rsi
xor r13d, r13d
cmp qword [rcx], r13
jne 0x1400753c7
call 0x140074a80
test al, al
je 0x14007547a
xchg r10, rcx
mov r10, rbx
xchg rcx, r10
call fcn.14007b620
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x29852909
sub dword [rsp + 0x20], 0x19d4565c
xor dword [rsp + 0x20], 0x4a2e6557
sub dword [rsp + 0x20], 0x2f7be868
add dword [rsp + 0x20], 0x45e20a6a
xor dword [rsp + 0x20], 0x128cca6a
xor dword [rsp + 0x20], 0xef0a654
add dword [rsp + 0x20], 0x24252e06
sub dword [rsp + 0x20], 0x649de3c5
xor r9d, r9d
mov edx, 0x21c2f303
sub edx, 0x17bfb46c
add edx, 0x69829a43
sub edx, 0x5d6a78cd
xor edx, 0x43d8fc5d
sub edx, 0x1ee5f9e8
sub edx, 0x31337421
xor edx, 0x85aa2e47
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r15, rax
mov rax, r15
xchg r15, rax
test rax, rax
jne 0x140075481
xor al, al
jmp 0x140075b40
xor r12b, r12b
xor edx, edx
xchg rdx, r15
mov rcx, rdx
xchg rdx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075b33
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fc80c
xchg rdi, rax
mov rbp, rdi
xchg rdi, rax
test rax, rax
je 0x1400754d2
mov r8d, ebx
xor edx, edx
xchg rdi, rcx
mov rdi, rax
xchg rdi, rcx
call sub.VCRUNTIME140.dll_memset
jmp 0x1400754db
xchg rbp, r13
mov r13, rbp
xchg rbp, r13
mov qword [rsp + 0x98], rbp
mov dword [rsp + 0x80], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg rbp, rdx
mov rbp, rdx
xchg rbp, rdx
xchg rcx, r14
mov r14, r15
xchg r14, rcx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075b22
mov edx, dword [rsi + 8]
test edx, edx
je 0x140075539
lea rcx, [rsi + 0x20]
call fcn.140074560
mov dword [rsi + 8], r13d
movabs rax, 0x852390172c172
add rax, 0x39f6b2bd
sub rax, 0x1401920a
sub rax, 0x19c6b270
add rax, 0x259460ab
xor rax, 0x4641b49b
sub rax, 0x121a3e8b
sub rax, 0x2d0f9fe7
xor rax, 0x5cb474e0
movabs rbx, 0xc56295d29720b
xor rbx, 0x591584df
add rbx, 0x54cc5cc9
sub rbx, 0x2ffa0d6
sub rbx, 0x4ade409d
add rbx, 0x148c35dd
xor rbx, 0x332e4a77
xor rbx, 0x35d093f0
add rbx, 0x7fffffff
sub rbx, 0x162fdf29
cmp qword [0x140216040], rax
je 0x1400757e2
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x1400757e2
cmp byte [0x140217008], 0
jne 0x140075647
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074810]
mov ecx, 0x37bd844b
add ecx, 0x17f6a75b
sub ecx, 0x4eb9aed3
add ecx, 0x2c2a2507
add ecx, 0x5cf9717
xor ecx, 0x58ba7b3c
sub ecx, 0x55203389
xor ecx, 0x38cfc2ac
sub ecx, 0x2de1d2e7
call rax
mov ecx, 0x785bf6c
xor ecx, 0x1af2e2ac
sub ecx, 0x1a1945f7
add ecx, 0x573906e3
xor ecx, 0x3f191e54
sub ecx, 0x7eef1c8
sub ecx, 0x5d9f0f2f
call fcn.1401fc7c8
mov rdi, rax
movabs rax, 0x5826a6c4d59d237
sub rax, 0xf64fa2d
xor rax, 0x23899497
sub rax, 0x19df614
add rax, 0x17588144
xor rax, 0x45d0b89e
xor rax, 0x31656f1b
xchg rbx, r8
mov r8, qword [rsi + 0x10]
xchg r8, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
mov rcx, rdi
movabs rax, 0x5823592276b176a
sub rax, 0x516234c
add rax, 0x38d4df8a
sub rax, 0x4479b84e
add rax, 0x2813fe0e
sub rax, 0x3e1edc83
add rax, 0x1e0a3c37
add rax, 0x296d832d
add rax, 0x30287610
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029ed0
xchg r13, rbx
mov qword [rax], r13
xchg r13, rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x3ff8ef4d
xor dword [rsp + 0x20], 0x29058a9d
sub dword [rsp + 0x20], 0x6bb2386
add dword [rsp + 0x20], 0x683547f5
add dword [rsp + 0x20], 0x32f7504
sub dword [rsp + 0x20], 0x7ba6ff3f
mov r9d, r14d
xor r8d, r8d
xchg rdi, rdx
mov rdi, rbp
xchg rdi, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc562942e92c2e
xor rbx, 0x529fa3cf
add rbx, 0x42f0e5e6
add rbx, 0x27d8b99b
xor rbx, 0x1ce3ff90
xor rbx, 0x75387c7d
sub rbx, 0xab5789a
add rbx, 0x7b335e61
jmp 0x1400758a4
movabs rcx, 0x5ffe75a6323d
xor rcx, 0x7fe1d79d
add rcx, 0x36203837
xor rcx, 0x3c6974ea
xor rcx, 0x121a7e66
sub rcx, 0x2f7155a6
xor rcx, 0x40f8a9cd
sub rcx, 0x4589f667
xchg r14, rax
mov r14, qword [rsi + 0x10]
xchg r14, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x14b0bb66
add dword [rsp + 0x20], 0x5fdf14fb
xor dword [rsp + 0x20], 0xe9787b
sub dword [rsp + 0x20], 0x5e3dcdc0
xor dword [rsp + 0x20], 0x7c66ffaa
sub dword [rsp + 0x20], 0x59877998
add dword [rsp + 0x20], 0x2e0f3737
add dword [rsp + 0x20], 0x411fdd67
sub dword [rsp + 0x20], 0x7ff5c0f2
mov r9d, r14d
xor r8d, r8d
mov rdx, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x85239310ae891
add rax, 0x4182ddeb
add rax, 0x3a97199
xor rax, 0xecff3eb
sub rax, 0x1547ab98
sub rax, 0x3d2aee01
add rax, 0x44780004
cmp qword [0x140216040], rax
je 0x140075a93
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075a93
cmp byte [0x140217008], 0
jne 0x140075951
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074810]
mov ecx, 0x25d2e627
add ecx, 0x1d1788d4
xor ecx, 0x403cead8
add ecx, 0x546c90a9
xor ecx, 0x7c147b6
xor ecx, 0x5082537b
call rax
mov ecx, 0x5de76470
sub ecx, 0x3daf76e3
xor ecx, 0x34710c72
add ecx, 0x560c31e1
sub ecx, 0x25db36d9
sub ecx, 0x1f37290d
sub ecx, 0x2540b3f9
call fcn.1401fc7c8
mov rdi, rax
movabs rax, 0x5826f684def93d3
sub rax, 0x3eb9a1a2
sub rax, 0x9713fea
add rax, 0x159e466d
xor rax, 0x60ac2c3c
sub rax, 0x14448b63
add rax, 0x48fc1723
mov rbx, qword [rsi + 0x40]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg r8, r15
mov r15, rdi
xchg r8, r15
movabs rax, 0x582359209a1bf65
add rax, 0x3fa4cb4f
sub rax, 0x5f99c28
sub rax, 0x28cc156d
xor rax, 0x696dff55
xor rax, 0xba85413
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
xchg rbp, r8
mov qword [rsp + 0x90], rbp
xchg r8, rbp
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029ed0
mov qword [rax], rbx
mov edx, 0x4b556609
sub edx, 0x4579b857
add edx, 0x72854d3f
sub edx, 0xb8dadbb
xor edx, 0x6b1cf3dd
xor edx, 0x675c666
add edx, 0x31391e7a
add edx, 0x2a0dcfe
xor edx, 0x35947404
mov ecx, r14d
call rdi
jmp 0x140075b22
movabs rax, 0x5afa519d49c4
sub rax, 0x170d17be
add rax, 0x578ee1d
add rax, 0x2cda0826
xor rax, 0x361bc9d4
add rax, 0x6dca3074
xchg r14, r8
mov r14, qword [rsi + 0x40]
xchg r8, r14
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x39a32f29
xor edx, 0x6e75d2cc
add edx, 0x5dcd083
sub edx, 0x1e8a5c3d
sub edx, 0x9da48d5
add edx, 0x34a5cb22
sub edx, 0x88b819c
xor edx, 0x616972dd
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075b33
mov rcx, rbp
call fcn.1401fc804
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
xchg qword [rsp], r14
add rsp, 8
nop
xchg qword [rsp], r13
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r12
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
xchg qword [rsp], rsi
add rsp, 8
push rbx
push rax
push rdx
xchg qword [rsp + 0x18], rbp
pop rdx
pop rax
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]