Function at 0x1400751e0
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
push rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
push 0x40f8cc66
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x40
xchg rbx, r15
mov r15, rdx
xchg r15, rbx
mov rsi, rcx
xor r13d, r13d
cmp qword [rcx], r13
jne 0x14007524a
call 0x1400749c0
test al, al
je 0x140075301
xchg r12, rbx
mov rcx, r12
xchg rbx, r12
call fcn.14007b4f0
mov rcx, rax
xchg r13, rcx
mov qword [rsp + 0x30], rcx
xchg rcx, r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x9e9fef8
add dword [rsp + 0x20], 0x54e1bb53
sub dword [rsp + 0x20], 0x2781bbb3
xor dword [rsp + 0x20], 0x5ff7c3da
xor dword [rsp + 0x20], 0x245298cd
add dword [rsp + 0x20], 0x1ac592bf
xor dword [rsp + 0x20], 0x77078949
add dword [rsp + 0x20], 0x528a1330
sub dword [rsp + 0x20], 0x633fc434
xor r9d, r9d
mov edx, 0x319a557
add edx, 0x3fd3a522
xor edx, 0x3db120cd
xor edx, 0x2c9df7fe
xor edx, 0xe085ea1
sub edx, 0x3cdb1e11
xor edx, 0x40880c5b
xor edx, 0x725e4915
add edx, 0x6dc71f6c
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
test rax, rax
jne 0x140075308
xor al, al
jmp 0x1400759ef
xor r12b, r12b
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x1400759dc
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fcb08
xchg r8, rax
mov rbp, r8
xchg r8, rax
test rax, rax
je 0x140075353
mov r8d, ebx
xor edx, edx
xchg rcx, rdx
mov rdx, rax
xchg rdx, rcx
call sub.VCRUNTIME140.dll_memset
jmp 0x14007535c
xchg r8, r13
mov rbp, r8
xchg r13, r8
mov qword [rsp + 0x98], rbp
mov dword [rsp + 0x80], r13d
xchg r13, rsi
mov qword [rsp + 0x20], rsi
xchg r13, rsi
lea r9, [rsp + 0x80]
mov r8d, r14d
mov rdx, rbp
xchg rdx, rcx
mov rdx, r15
xchg rcx, rdx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x1400759c5
mov edx, dword [rsi + 8]
test edx, edx
je 0x1400753ba
lea rcx, [rsi + 0x20]
call fcn.140074470
mov dword [rsi + 8], r13d
movabs rax, 0x85239364cbd5c
xor rax, 0x6f020766
sub rax, 0x3d306d39
add rax, 0x3974d45e
xor rax, 0x551bfd8
sub rax, 0xeacbea0
xor rax, 0x28ebed8e
movabs rbx, 0xc56296f8611e0
sub rbx, 0x1c4d6a09
xor rbx, 0x446c4313
sub rbx, 0x1405f31d
add rbx, 0x4fa3df19
sub rbx, 0x1334b0b6
add rbx, 0x269c37ad
add rbx, 0x7fffffff
sub rbx, 0x6340c560
cmp qword [0x140216040], rax
je 0x14007566f
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x14007566f
cmp byte [0x140217008], 0
jne 0x1400754a9
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074750]
mov ecx, 0x3933120a
add ecx, 0x22214790
add ecx, 0x19a9e496
xor ecx, 0x7df3644
sub ecx, 0x4ac80582
xor ecx, 0x66c1e30a
sub ecx, 0x4e98e1f7
call rax
mov ecx, 0x83a1b2
add ecx, 0xd615228
add ecx, 0x690d1265
sub ecx, 0x22c1a753
add ecx, 0xf98e2d7
add ecx, 0x18aad919
xor ecx, 0x35ce2e3f
add ecx, 0x35e9e3bf
sub ecx, 0x7fa418a1
call fcn.1401fcac4
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x5826a6c4e29d4bb
sub rax, 0xef40aec
sub rax, 0x1a71a55
sub rax, 0x39a4e5b4
add rax, 0x13531e62
xor rax, 0xb63a733
xor rax, 0x385dc23a
add rax, 0x1c7f7327
xchg rbx, r11
mov r11, qword [rsi + 0x10]
xchg r11, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
movabs rax, 0x582359230500ff5
add rax, 0x1ad0b23e
sub rax, 0x9a8c77d
xor rax, 0x2be47dd3
sub rax, 0x175d5add
xor rax, 0x6fbeda7d
add rax, 0x1f93ee9
add rax, 0x39c33c7b
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
xchg r9, rcx
mov qword [rsp + 0x90], r9
xchg rcx, r9
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e00
xchg rdx, rbx
mov qword [rax], rdx
xchg rdx, rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x30bc8041
xor dword [rsp + 0x20], 0x6324c9f8
xor dword [rsp + 0x20], 0xf387535
add dword [rsp + 0x20], 0x1b60423e
sub dword [rsp + 0x20], 0x4a738b96
xor dword [rsp + 0x20], 0x2676973e
xor dword [rsp + 0x20], 0xbfa640e
mov r9d, r14d
xor r8d, r8d
xchg rdx, r14
mov r14, rbp
xchg r14, rdx
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc56294213d2a6
xor rbx, 0x1b326f7
sub rbx, 0x16670db8
xor rbx, 0x5deea9e3
sub rbx, 0x6975611d
xor rbx, 0x683863eb
sub rbx, 0x2ff2680a
add rbx, 0x7fffffff
xor rbx, 0x3c7eb7fd
jmp 0x140075707
movabs rcx, 0x5ffe694a5385
xor rcx, 0x5a8fc012
add rcx, 0x472a9752
xor rcx, 0x191b080
sub rcx, 0x306a4dc1
sub rcx, 0x122fda97
mov rax, qword [rsi + 0x10]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x19ce584d
xor dword [rsp + 0x20], 0x1a7b2720
add dword [rsp + 0x20], 0x43a04485
sub dword [rsp + 0x20], 0x15b3167e
add dword [rsp + 0x20], 0x371af9ce
xor dword [rsp + 0x20], 0x68bda746
mov r9d, r14d
xor r8d, r8d
mov rdx, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x8523909c876f2
xor rax, 0x54d98a7c
sub rax, 0x19e9b7c7
xor rax, 0x1a8fa46e
sub rax, 0x26f462ab
sub rax, 0x18dcff60
xor rax, 0x20c582b7
xor rax, 0x53edce40
cmp qword [0x140216040], rax
je 0x140075924
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075924
cmp byte [0x140217008], 0
jne 0x1400757cc
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074750]
mov ecx, 0x610bef94
sub ecx, 0x1b8a9436
sub ecx, 0x93ee825
sub ecx, 0x290f0237
add ecx, 0x6ad4868c
sub ecx, 0x7aca0414
add ecx, 0x2665dea1
sub ecx, 0xbc0829c
xor ecx, 0x1de34f7e
call rax
mov ecx, 0x7bbac8bf
xor ecx, 0x47d56338
xor ecx, 0x1501a42b
xor ecx, 0x3ad7416a
xor ecx, 0x16c8d63c
xor ecx, 0x175ebff3
add ecx, 0x6644cd85
xor ecx, 0x1f395c4
sub ecx, 0x79806149
call fcn.1401fcac4
xchg r15, rax
mov rdi, r15
xchg r15, rax
movabs rax, 0x5826f682a4a4265
sub rax, 0x29abd3a6
add rax, 0x50f7bc39
add rax, 0xe3c9135
sub rax, 0x8fdd503
add rax, 0x7fffffff
sub rax, 0x264e86e1
xchg rbx, rcx
mov rcx, qword [rsi + 0x40]
xchg rbx, rcx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rdi, r8
mov rdi, r8
xchg r8, rdi
movabs rax, 0x582359217040168
add rax, 0x20d9c1d0
sub rax, 0x2116f88f
add rax, 0x1d635969
add rax, 0x46653754
sub rax, 0x2aa58f20
xor rax, 0x37acbe1f
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
xchg r8, r12
mov qword [rsp + 0x90], r12
xchg r12, r8
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e00
xchg rbx, rbp
mov qword [rax], rbp
xchg rbp, rbx
mov edx, 0x256868ce
add edx, 0x5590f29f
xor edx, 0x935fa4
xor edx, 0x3d5645b5
sub edx, 0x26995e1b
add edx, 0x58d43d61
sub edx, 0x797720c1
mov ecx, r14d
call rdi
jmp 0x1400759c5
movabs rax, 0x5afa6e88c774
sub rax, 0x15dac34b
sub rax, 0x154ef78e
xor rax, 0x5721b3d8
sub rax, 0x83ea149
add rax, 0x25531394
add rax, 0x55d72c0
add rax, 0x7fffffff
add rax, 0x11d26dc4
xchg r12, r8
mov r12, qword [rsi + 0x40]
xchg r8, r12
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
mov edx, 0x18c51ca1
add edx, 0x53a72b80
sub edx, 0x5f4c057d
add edx, 0x6b5a48ca
sub edx, 0x13ce29f2
sub edx, 0x51f3289c
xor edx, 0x16995455
sub edx, 0x4206cb4
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x1400759dc
xchg rbp, rcx
mov rbp, rcx
xchg rcx, rbp
call fcn.1401fcb00
xchg r15, r12
mov rcx, r12
xchg r15, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
nop
mov r15, qword [rsp]
add rsp, 8
push rcx
push rax
push rdx
push rdx
push rbx
xchg qword [rsp + 0x28], r14
add rsp, 0x30
nop
mov r13, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov r12, qword [rsp - 8]
push rax
push rdx
xchg qword [rsp + 0x10], rdi
pop rdx
pop rax
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rsi
nop
add rsp, 8
xchg qword [rsp - 8], rbp
ret