Function at 0x140006140
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1e0
mov rax, qword [0x140069798]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rdx
mov ecx, dword [0x14006bf80]
mov rax, qword gs:[0x58]
mov edx, 4
mov rbx, qword [rax + rcx*8]
add rbx, rdx
mov eax, dword [rbx]
cmp dword [0x14006b2e0], eax
jg 0x1400067c7
mov eax, dword [rbx]
cmp dword [0x14006b2f0], eax
jg 0x140006827
mov rax, qword [0x14006b2d8]
cmp dword [rax - 0x10], 0
je 0x1400061d1
mov rax, qword [0x14006b2e8]
cmp dword [rax - 0x10], 0
jne 0x140006771
xor r15d, r15d
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x88]
call fcn.140008540
nop
lea r8, str.configurations_staticconfig.xml
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140004670
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
mov rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140006224
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x120089
lea r8d, [r9 + 1]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x60], rax
cmp rax, rsi
jne 0x14000627e
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140006279
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
jmp 0x14000679a
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x14000673e
lea ecx, [rax + 1]
mov r12d, ecx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], r15
mov rdi, r15
test ecx, ecx
je 0x14000631c
cmp r12, 0x1000
jb 0x1400062e4
add rcx, 0x27
cmp rcx, r12
jbe 0x140006887
call fcn.140024c18
test rax, rax
je 0x1400068a3
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400062ef
mov rcx, r12
call fcn.140024c18
mov rdi, rax
mov r13, rdi
mov qword [rsp + 0x70], rdi
lea rbx, [r12 + rdi]
mov qword [rsp + 0x80], rbx
mov r8, r12
xor edx, edx
mov rcx, rdi
call fcn.1400267c0
mov qword [rsp + 0x78], rbx
mov rbx, qword [rsp + 0x60]
jmp 0x140006321
mov r13, qword [rsp + 0x70]
mov dword [rsp + 0x50], r15d
nop word [rax + rax]
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x50]
mov r8d, r14d
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14000635d
mov ecx, dword [rsp + 0x50]
test ecx, ecx
je 0x14000635d
add rdi, rcx
sub r14d, ecx
jne 0x140006330
lea rax, [rsp + 0xc8]
mov qword [rsp + 0xc0], rax
mov r8d, 0x3a8
mov rdx, r13
lea rcx, [rsp + 0xc0]
call fcn.140008b40
nop
mov rbx, qword [rsp + 0xc0]
call fcn.140002690
mov rcx, rax
test rax, rax
je 0x14000688d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140004db0
test al, al
jne 0x1400063e3
test rbx, rbx
je 0x1400063d2
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400063c5
mov r15d, eax
mov r8d, r15d
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140009d40
nop
lea rax, [rsp + 0xc8]
mov rcx, qword [rsp + 0xc0]
cmp rcx, rax
je 0x1400063fd
call fcn.14002b89c
call fcn.140002690
mov rcx, rax
test rax, rax
je 0x140006898
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rbx, str._VersionString__
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140004db0
test al, al
jne 0x14000645b
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x140006440
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140009d40
nop
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x40]
test rdi, rdi
jne 0x14000646e
mov ecx, esi
jmp 0x140006495
cmp dword [rbx - 0x10], 0
jge 0x140006478
mov ecx, esi
jmp 0x140006495
mov rdx, rdi
mov rcx, rbx
call fcn.140027824
mov rcx, rax
test rax, rax
jne 0x14000648f
mov ecx, esi
jmp 0x140006495
sub rcx, rbx
sar rcx, 1
mov r8d, dword [rdi - 0x10]
add r8d, ecx
lea r12, [rbx - 0x18]
mov r9d, dword [r12 + 8]
sub r9d, r8d
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.140008e90
nop
mov rbx, qword [rsp + 0x48]
lea r14, [rbx - 0x18]
cmp dword [r14 + 8], 0
jge 0x1400064cc
mov eax, esi
jmp 0x1400064ea
lea rdx, str.__item_
mov rcx, rbx
call fcn.140027824
test rax, rax
jne 0x1400064e4
mov eax, esi
jmp 0x1400064ea
sub rax, rbx
sar rax, 1
mov r8d, eax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x48]
call fcn.140008d60
nop
mov rdx, rax
lea rcx, [0x14006b2d8]
call fcn.1400045e0
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140006531
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
lea rdx, str._ExeFileName__
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140006540
mov r8d, eax
lea rcx, [rsp + 0x58]
call fcn.140009d40
mov rbx, qword [rsp + 0x58]
test rbx, rbx
jne 0x140006565
mov ecx, esi
jmp 0x140006593
cmp dword [r12 + 8], 0
jge 0x140006571
mov ecx, esi
jmp 0x140006593
mov rdx, rbx
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call fcn.140027824
mov rcx, rax
test rax, rax
jne 0x14000658d
mov ecx, esi
jmp 0x140006593
sub rcx, rdi
sar rcx, 1
lea r15, [rbx - 0x18]
mov r8d, dword [r15 + 8]
add r8d, ecx
mov r9d, dword [r12 + 8]
sub r9d, r8d
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x40]
call fcn.140008e90
nop
mov rdx, qword [rsp + 0x98]
lea rbx, [rdx - 0x18]
cmp rbx, r14
je 0x14000661c
mov eax, dword [r14 + 0x10]
shr eax, 0x1f
test al, al
jne 0x14000660d
mov rax, qword [r14]
cmp qword [rbx], rax
jne 0x14000660d
mov rcx, rbx
call fcn.140004ed0
mov rdi, rax
mov ecx, esi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x140006602
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rVariantCopy + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x14000661c
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140009d40
nop
mov eax, esi
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x140006634
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + VariantCopy]
mov rbx, qword [rsp + 0x48]
cmp dword [rbx - 0x10], 0
jge 0x140006643
mov eax, esi
jmp 0x140006661
lea rdx, str..exe__item_
mov rcx, rbx
call fcn.140027824
test rax, rax
jne 0x14000665b
mov eax, esi
jmp 0x140006661
sub rax, rbx
sar rax, 1
mov r8d, eax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.140008d60
nop
mov rdx, rax
lea rcx, [0x14006b2e8]
call fcn.1400045e0
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400066a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
mov eax, esi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400066c4
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + VariantCopy]
nop
mov eax, esi
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x1400066de
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + VariantCopy]
nop
mov eax, esi
lock xadd dword [r12 + 0x10], eax
sub eax, 1
jg 0x1400066fa
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + VariantCopy]
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140006739
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006734
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400068a3
call fcn.140024eac
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000675b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
jmp 0x140006768
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x14006b2d8]
mov rcx, qword [rsp + 0xa8]
call fcn.1400045e0
lea rdx, [0x14006b2e8]
mov rcx, qword [rsp + 0xb0]
call fcn.1400045e0
nop
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.140024fc0
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, [0x14006b2e0]
call fcn.140025194
cmp dword [0x14006b2e0], 0xffffffff
jne 0x1400061a5
call fcn.140002690
mov rcx, rax
test rax, rax
jne 0x1400067f8
mov ecx, 0x80004005
call fcn.140002530
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x14006b2d8], rax
lea rcx, [0x14004c9a0]
call fcn.140024e94
lea rcx, [0x14006b2e0]
call fcn.140025134
nop
jmp 0x1400061a5
lea rcx, [0x14006b2f0]
call fcn.140025194
cmp dword [0x14006b2f0], 0xffffffff
jne 0x1400061b3
call fcn.140002690
mov rcx, rax
test rax, rax
jne 0x140006858
mov ecx, 0x80004005
call fcn.140002530
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x14006b2e8], rax
lea rcx, [0x14004c970]
call fcn.140024e94
lea rcx, [0x14006b2f0]
call fcn.140025134
nop
jmp 0x1400061b3
call fcn.140002000
nop
mov ecx, 0x80004005
call fcn.140002530
nop
mov ecx, 0x80004005
call fcn.140002530
nop
call fcn.14002b74c
int3