Function at 0x140074cd0
Capabilities:
Get file size
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
push r14
push r15
sub rsp, 0x40
mov r14, rcx
mov rdi, rdx
lea rcx, [rdx + 0x11]
call fcn.1401a353c
lea r8, [rdi + 0x11]
xor edx, edx
mov rcx, rax
mov r15, rax
call fcn.14019a610
lea r8d, [rdi + 0x10]
mov rdx, r15
mov rcx, r14
call fcn.14015b7d0
test eax, eax
jle 0x140074eb9
movsxd rcx, dword [r15 + 0x28]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x70], rsi
call fcn.1401a353c
mov ecx, dword [r15 + 0x28]
xor edx, edx
inc ecx
mov rdi, rax
movsxd r8, ecx
mov rcx, rax
call fcn.14019a610
mov ecx, dword [r15 + 0x28]
lea rdx, [r15 + 0x30]
dec ecx
movsxd r8, ecx
mov rcx, rdi
call fcn.14019ea80
mov rbp, 0xffffffffffffffff
mov rcx, rbp
nop dword [rax]
inc rcx
cmp byte [rdi + rcx], 0
jne 0x140074d60
add rcx, 0x31
call fcn.1401a353c
mov rsi, rax
mov r8, rbp
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140074d80
add r8, 0x30
xor edx, edx
mov rcx, rsi
call fcn.14019a610
mov rax, rbp
mov dword [rsi], 5
inc rax
cmp byte [rdi + rax], 0
jne 0x140074da1
add rax, 0x21
mov qword [rsi + 8], rax
xor ebx, ebx
mov dword [rsi + 0x2c], ebx
mov rax, rbp
nop word [rax + rax]
inc rax
cmp byte [rdi + rax], bl
jne 0x140074dc0
mov dword [rsi + 0x28], eax
mov qword [rsi + 0x18], rbx
nop
inc rbp
cmp byte [rdi + rbp], bl
jne 0x140074dd0
mov r8, rbp
lea rcx, [rsi + 0x30]
mov rdx, rdi
call fcn.14019ea80
cmp dword [r15 + 0x10], 2
jne 0x140074f7c
cmp dword [r15 + 0x2c], ebx
je 0x140074f7c
lea rdx, [0x140244ed8]
mov rcx, rdi
call fcn.14019e968
mov rbp, rax
test rax, rax
jne 0x140074ecf
xor edx, edx
mov dword [rsi + 0x10], 8
mov rcx, rdi
call fcn.1401c0778
test eax, eax
jne 0x140074e88
mov qword [rsp + 0x30], rbx
lea r8d, [rbp + 1]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
je 0x140074fcc
lea rdx, [rsp + 0x68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
cmp eax, 0xffffffff
je 0x140074fcc
mov rbx, qword [rsp + 0x68]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi + 0x20], rbx
mov rdx, rsi
mov r8d, dword [rsi + 8]
mov rcx, r14
add r8d, 0x10
call fcn.14015bd80
mov rcx, rdi
call fcn.1401a28b8
mov rcx, rsi
call fcn.1401a28b8
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov rcx, r15
mov rbx, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop rdi
jmp fcn.1401a28b8
movsxd rax, dword [r15 + 0x28]
lea rcx, [r15 + 0x30]
movsxd r8, dword [r15 + 0x2c]
add rcx, rax
mov r9, rbp
mov edx, 1
call fcn.14019eed0
movsxd rcx, dword [r15 + 0x2c]
cmp rax, rcx
je 0x140074f6b
xor edx, edx
mov dword [rsi + 0x10], 7
mov rcx, rdi
call fcn.1401c0778
test eax, eax
jne 0x140074e88
xor r9d, r9d
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov rcx, rdi
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
je 0x140074fcc
lea rdx, [rsp + 0x68]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
cmp eax, 0xffffffff
jne 0x140074e7a
mov dword [0], 1
jmp 0x140074e88
mov rcx, rbp
call fcn.14019e9f8
mov dword [rsi + 0x10], 2
jmp 0x140074f0d
xor edx, edx
mov dword [rsi + 0x10], 9
mov rcx, rdi
call fcn.1401c0778
test eax, eax
jne 0x140074e88
mov qword [rsp + 0x30], rbx
lea r8d, [rax + 1]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x140074f44
mov dword [0], 1
jmp 0x140074e88