Function at 0x140075520
Capabilities:
Get file size
Read file on windows

Disassembly:
xchg rbx, r11
mov qword [rsp + 0x10], r11
xchg rbx, r11
nop
push r14
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
push r13
push r9
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x40
xchg rdx, r12
mov rbx, r12
xchg rdx, r12
xchg rsi, r10
mov r10, rcx
xchg r10, rsi
xor r13d, r13d
cmp qword [rcx], r13
jne 0x140075589
call fcn.140074cc0
test al, al
je 0x140075642
xchg rbx, rsi
mov rcx, rsi
xchg rbx, rsi
call fcn.14007b910
xchg r10, rax
mov rcx, r10
xchg r10, rax
xchg rdi, r13
mov qword [rsp + 0x30], rdi
xchg r13, rdi
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x23d4a057
add dword [rsp + 0x20], 0x3d1175bb
sub dword [rsp + 0x20], 0x290bfba1
add dword [rsp + 0x20], 0x3468f40c
sub dword [rsp + 0x20], 0x53d07db9
add dword [rsp + 0x20], 0x5e5f3ce4
sub dword [rsp + 0x20], 0x6f956819
add dword [rsp + 0x20], 0xc4e4a5a
sub dword [rsp + 0x20], 0x138aafe6
xor r9d, r9d
mov edx, 0x1361b2a4
xor edx, 0x4cb2276c
xor edx, 0x6d2725c9
xor edx, 0x6d66662a
xor edx, 0x3b1b59be
sub edx, 0x1b99a8a0
sub edx, 0x24f1ff3d
add edx, 0x5c021848
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r15, rax
mov rax, r15
xchg r15, rax
test rax, rax
jne 0x140075649
xor al, al
jmp 0x140075d24
xor r12b, r12b
xor edx, edx
xchg r15, r11
mov rcx, r11
xchg r15, r11
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075d11
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fc5d4
mov rbp, rax
test rax, rax
je 0x140075694
mov r8d, ebx
xor edx, edx
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007569d
xchg r8, r13
mov rbp, r8
xchg r13, r8
xchg rbp, r8
mov qword [rsp + 0x98], r8
xchg r8, rbp
mov dword [rsp + 0x80], r13d
xchg r13, r8
mov qword [rsp + 0x20], r8
xchg r13, r8
lea r9, [rsp + 0x80]
mov r8d, r14d
mov rdx, rbp
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075cfa
mov edx, dword [rsi + 8]
test edx, edx
je 0x1400756fb
lea rcx, [rsi + 0x20]
call fcn.140074780
mov dword [rsi + 8], r13d
movabs rax, 0x85239354c535d
add rax, 0x3b2980e5
sub rax, 0x22277cce
add rax, 0x1525e961
xor rax, 0x7b6f32d4
xor rax, 0x72e54068
movabs rbx, 0xc562942c30ed9
add rbx, 0x1e78343b
sub rbx, 0x2d9bdd65
xor rbx, 0x402ab3b6
sub rbx, 0x3ba87d2c
xor rbx, 0x48ecec47
xor rbx, 0x4baa0ace
add rbx, 0x47cdd3f2
cmp qword [0x140216040], rax
je 0x1400759ac
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x1400759ac
cmp byte [0x140217008], 0
jne 0x1400757e9
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a40]
mov ecx, 0xe275de7
xor ecx, 0x256729ee
add ecx, 0x483c384e
xor ecx, 0x1a4654e4
add ecx, 0xdc0d034
xor ecx, 0x32272485
sub ecx, 0x3a7fb6d8
add ecx, 0x5a8404a9
sub ecx, 0x64e13a32
call rax
mov ecx, 0x3342f8b5
sub ecx, 0x233dae32
xor ecx, 0x30788b9
add ecx, 0x15e0cf48
add ecx, 0x31e2e372
xor ecx, 0x997e2b6
xor ecx, 0x3159cd47
sub ecx, 0x3c066cd3
xor ecx, 0x2601ee33
call fcn.1401fc590
mov rdi, rax
movabs rax, 0x5826a6c1697be9d
add rax, 0xa876d01
xor rax, 0x37077301
add rax, 0x4b5367d2
sub rax, 0x13a26690
sub rax, 0x13a2eed8
sub rax, 0x3053e0c7
add rax, 0x36af7606
xchg rcx, rbx
mov rcx, qword [rsi + 0x10]
xchg rbx, rcx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rbx, rcx
mov rbx, rdi
xchg rbx, rcx
movabs rax, 0x582359200e04fd9
add rax, 0x59361731
sub rax, 0x273e069d
xor rax, 0x18662a34
xor rax, 0x66be9f70
add rax, 0x316b5f91
sub rax, 0x4a4549a9
add rax, 0x27a1f668
add rax, 0x1d7c90e0
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
xchg r15, rcx
mov qword [rsp + 0x90], r15
xchg r15, rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e40
mov qword [rax], rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x22e5b6d5
xor dword [rsp + 0x20], 0xc3af3b
add dword [rsp + 0x20], 0x4b5f5dc9
add dword [rsp + 0x20], 0x576a983
sub dword [rsp + 0x20], 0x42d44b9
xor dword [rsp + 0x20], 0x282b4834
sub dword [rsp + 0x20], 0xc300f7c
sub dword [rsp + 0x20], 0x3ab58535
mov r9d, r14d
xor r8d, r8d
xchg rdx, rbp
mov rbp, rdx
xchg rbp, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc562958621bec
add rbx, 0x1e97c9e5
xor rbx, 0x757b8f9a
add rbx, 0x5802a721
sub rbx, 0x56dc3fee
add rbx, 0x609a3598
sub rbx, 0x11095b12
add rbx, 0x2edfe652
jmp 0x140075a4e
movabs rcx, 0x5ffe2fdebf71
xor rcx, 0xa93a99a
add rcx, 0x2006f2ce
xor rcx, 0x6a41883a
xor rcx, 0x7116301a
xor rcx, 0x66c4c388
xchg rdi, rax
mov rdi, qword [rsi + 0x10]
xchg rdi, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x7f96acee
xor dword [rsp + 0x20], 0x578540f2
add dword [rsp + 0x20], 0x43a9df15
xor dword [rsp + 0x20], 0x4b7b8f5f
add dword [rsp + 0x20], 0x2b0be733
sub dword [rsp + 0x20], 0x4bd22b9d
mov r9d, r14d
xor r8d, r8d
xchg r9, rdx
mov r9, rbp
xchg r9, rdx
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x8523955fd9892
sub rax, 0x11f99b01
sub rax, 0xff2cfa9
xor rax, 0x245c9985
add rax, 0x3f62ce55
add rax, 0x1b4dafa7
cmp qword [0x140216040], rax
je 0x140075c53
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075c53
cmp byte [0x140217008], 0
jne 0x140075b07
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a40]
mov ecx, 0x1bd9fa0c
xor ecx, 0x4cfdc417
xor ecx, 0x60c0922a
add ecx, 0x36fea0ad
sub ecx, 0x1732902
xor ecx, 0x2aa74084
sub ecx, 0x3380fa57
sub ecx, 0x132b3b2d
sub ecx, 0x12b2dd3
call rax
mov ecx, 0x7ba6ab5b
sub ecx, 0x817a22b
sub ecx, 0x294f5979
add ecx, 0x1b556962
xor ecx, 0x1b6016fd
sub ecx, 0x7ef50fe3
call fcn.1401fc590
xchg r12, rax
mov rdi, r12
xchg r12, rax
movabs rax, 0x5826f6865b43817
sub rax, 0x2072ff1e
xor rax, 0x43bbc768
add rax, 0x5d39b89e
sub rax, 0x10eca8fe
sub rax, 0x1731f57a
sub rax, 0x2c2d02e3
xor rax, 0x315dca82
add rax, 0x71d183f2
xchg rdx, rbx
mov rdx, qword [rsi + 0x40]
xchg rbx, rdx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rdi, r12
mov r8, r12
xchg rdi, r12
movabs rax, 0x582359261c49d04
sub rax, 0x57d63f7f
xor rax, 0x5922ec7c
xor rax, 0x62c02b92
add rax, 0x4e83ee3
xor rax, 0x213b54
add rax, 0x416f903f
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
xchg r8, rcx
mov qword [rsp + 0x90], rcx
xchg rcx, r8
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e40
mov qword [rax], rbx
mov edx, 0x56afb162
sub edx, 0x4ae39b8a
add edx, 0x9033a23
add edx, 0x4f7e8bcd
sub edx, 0xb99d7e0
add edx, 0x4fe0035
sub edx, 0x5db2041c
mov ecx, r14d
call rdi
jmp 0x140075cfa
movabs rax, 0x5afa48e1bbdf
xor rax, 0x6a9d80ed
add rax, 0x5063487b
xor rax, 0x7e0fcd9d
add rax, 0x198868dd
sub rax, 0xabbb7a3
add rax, 0x32383267
xor rax, 0x6a52e304
add rax, 0x7fffffff
add rax, 0x213b3f3d
mov r8, qword [rsi + 0x40]
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x4c181009
xor edx, 0x7acd8cba
xor edx, 0x7281a06f
add edx, 0x26f0e3de
sub edx, 0x199a0da7
sub edx, 0x10e4326d
sub edx, 0x14397890
xor edx, 0x7fc2a7f1
xor edx, 0x534fcfe6
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075d11
xchg rcx, rbp
mov rbp, rcx
xchg rbp, rcx
call fcn.1401fc5cc
xchg rcx, rbx
mov rbx, r15
xchg rbx, rcx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
push rax
push rbx
push rdx
push rdx
push rbx
push rbx
push rcx
push rcx
xchg qword [rsp + 0x40], r15
add rsp, 0x48
push rcx
push rbx
push rax
push rbx
push rdx
xchg qword [rsp + 0x28], r14
add rsp, 0x30
nop
xchg qword [rsp], r13
add rsp, 8
push rbx
push rax
push rcx
xchg qword [rsp + 0x18], r12
pop rcx
pop rax
pop rbx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
push rcx
push rax
push rcx
push rax
push rdx
push rdx
push rax
xchg qword [rsp + 0x38], rsi
pop rax
pop rdx
pop rdx
pop rax
pop rcx
pop rax
pop rcx
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret