Function at 0x140075500
Capabilities:
Get file size
Read file on windows

Disassembly:
xchg rbx, rsi
mov qword [rsp + 0x10], rsi
xchg rsi, rbx
nop
sub rsp, 8
mov qword [rsp], rbp
push rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
push r13
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x40
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
mov rsi, rcx
xor r13d, r13d
cmp qword [rcx], r13
jne 0x140075565
call 0x140074c90
test al, al
je 0x14007560a
xchg rcx, r13
mov r13, rbx
xchg r13, rcx
call fcn.14007b7d0
mov rcx, rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x44c389cc
sub dword [rsp + 0x20], 0xac9ee17
add dword [rsp + 0x20], 0x21673829
sub dword [rsp + 0x20], 0x134d0ebc
sub dword [rsp + 0x20], 0x76ce373
add dword [rsp + 0x20], 0xf7d9ec7
xor dword [rsp + 0x20], 0x50248075
xor r9d, r9d
mov edx, 0x5238442f
sub edx, 0x3c9ede79
add edx, 0x40800c39
sub edx, 0x445bbcbf
add edx, 0x67bf5d0
xor edx, 0x2a61fe76
sub edx, 0x26cf4410
xor edx, 0x439976cb
add edx, 0x37ef9853
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xchg r15, rax
mov rax, r15
xchg r15, rax
test rax, rax
jne 0x140075611
xor al, al
jmp 0x140075cf2
xor r12b, r12b
xor edx, edx
xchg r15, rbx
mov rcx, rbx
xchg rbx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075cdf
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fcce0
xchg rbp, r15
mov r15, rax
xchg r15, rbp
test rax, rax
je 0x140075662
mov r8d, ebx
xor edx, edx
xchg r9, rax
mov rcx, r9
xchg r9, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14007566b
xchg r13, rbx
mov rbp, rbx
xchg rbx, r13
xchg rbp, r14
mov qword [rsp + 0x98], r14
xchg r14, rbp
mov dword [rsp + 0x80], r13d
xchg r14, r13
mov qword [rsp + 0x20], r14
xchg r13, r14
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg rdx, r12
mov r12, rbp
xchg r12, rdx
xchg rcx, r13
mov r13, r15
xchg r13, rcx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075cc8
mov edx, dword [rsi + 8]
test edx, edx
je 0x1400756d5
lea rcx, [rsi + 0x20]
call fcn.140074760
mov dword [rsi + 8], r13d
movabs rax, 0x8523960e2771e
sub rax, 0x3aec5334
add rax, 0x16af5541
add rax, 0x13b52849
add rax, 0x240b9895
sub rax, 0x2d37d630
add rax, 0x23cfce90
movabs rbx, 0xc56295f7f13f7
xor rbx, 0x6f73f77
sub rbx, 0x4d8a48b9
add rbx, 0x6844ddeb
sub rbx, 0x186071a9
add rbx, 0x2737424d
cmp qword [0x140216040], rax
je 0x140075968
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075968
cmp byte [0x140217008], 0
jne 0x1400757b5
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a10]
mov ecx, 0x48fa200e
add ecx, 0xe5687de
sub ecx, 0x13ca0db6
sub ecx, 0x27a21a4f
xor ecx, 0x27e47af6
sub ecx, 0x17ad4a7a
xor ecx, 0xf62a2ba
sub ecx, 0x2b30182c
call rax
mov ecx, 0x275588f
xor ecx, 0x1b9d196
add ecx, 0x3a62738d
add ecx, 0x2df4827f
xor ecx, 0x26289b84
sub ecx, 0x4a0be4a0
call fcn.1401fcc9c
xchg r13, rdi
mov r13, rax
xchg rdi, r13
movabs rax, 0x5826a6c3a32abca
xor rax, 0x619ea388
sub rax, 0x2464ebec
add rax, 0x1f0937a6
xor rax, 0x34aa169a
sub rax, 0xcc8d023
sub rax, 0x487345c8
xor rax, 0x39a7602f
xor rax, 0x749b4f1c
xchg r12, rbx
mov r12, qword [rsi + 0x10]
xchg r12, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg rdi, rbp
mov rcx, rbp
xchg rbp, rdi
movabs rax, 0x58235927d650003
xor rax, 0x61145a76
add rax, 0x3558d532
sub rax, 0x2d291486
add rax, 0x3f1b2989
sub rax, 0x1de2a6dd
add rax, 0x326bd48c
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
xchg r12, rcx
mov qword [rsp + 0x90], r12
xchg r12, rcx
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e50
mov qword [rax], rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x631883bc
sub dword [rsp + 0x20], 0x49547006
xor dword [rsp + 0x20], 0x6b4563e8
xor dword [rsp + 0x20], 0x26b18fc9
xor dword [rsp + 0x20], 0x4adef156
xor dword [rsp + 0x20], 0x7a86684
add dword [rsp + 0x20], 0x659a0706
sub dword [rsp + 0x20], 0x35d212e2
sub dword [rsp + 0x20], 0x490e5c65
mov r9d, r14d
xor r8d, r8d
mov rdx, rbp
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc5629172c9868
add rbx, 0x6596f325
sub rbx, 0x2920d3d0
xor rbx, 0x2857d2b1
sub rbx, 0x713a23ce
xor rbx, 0x7f238e32
sub rbx, 0x6bcc5cd0
add rbx, 0x794d201a
jmp 0x140075a28
movabs rcx, 0x5ffe1d8af13a
xor rcx, 0x35646cfb
add rcx, 0x2a68554c
add rcx, 0x12db5ac7
xor rcx, 0x3c686a02
xor rcx, 0x28b8cd7b
xor rcx, 0x2e9f0324
sub rcx, 0x23b67778
xchg r10, rax
mov r10, qword [rsi + 0x10]
xchg r10, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x370bdda6
add dword [rsp + 0x20], 0x3f5a6a0a
xor dword [rsp + 0x20], 0x78b4f81d
add dword [rsp + 0x20], 0x1d50a3a9
sub dword [rsp + 0x20], 0x134914d4
sub dword [rsp + 0x20], 0x11e79307
add dword [rsp + 0x20], 0x48f4fe9d
xor dword [rsp + 0x20], 0x4fe7ba1c
mov r9d, r14d
xor r8d, r8d
xchg r14, rbp
mov rdx, r14
xchg r14, rbp
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x8523921b7a773
sub rax, 0x705d66b
add rax, 0x7a26968
add rax, 0x281dc43e
add rax, 0x1d268b0f
sub rax, 0x14e4750f
xor rax, 0x384a26c7
cmp qword [0x140216040], rax
je 0x140075c27
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075c27
cmp byte [0x140217008], 0
jne 0x140075adb
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074a10]
mov ecx, 0x79ed86eb
sub ecx, 0x60c3b7c1
xor ecx, 0x21788780
add ecx, 0xe21aeb
sub ecx, 0x243aa224
add ecx, 0x2c3e747
xor ecx, 0x17bca8b9
call rax
mov ecx, 0x2a8e3204
xor ecx, 0x4e3f7630
add ecx, 0x1d211e7
sub ecx, 0x5a565093
add ecx, 0x6486390
sub ecx, 0x12756917
call fcn.1401fcc9c
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x5826f682d345ee3
xor rax, 0x6d41b42a
xor rax, 0x38a0cd38
sub rax, 0x5596bfb7
add rax, 0x1e80718
xor rax, 0x2e4254de
add rax, 0x7fffffff
xor rax, 0x3be25bc3
xchg r15, rbx
mov r15, qword [rsi + 0x40]
xchg rbx, r15
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg r8, rsi
mov rsi, rdi
xchg rsi, r8
movabs rax, 0x58235921d1762ee
sub rax, 0xc8543d9
add rax, 0x6188eef2
sub rax, 0x230202e1
xor rax, 0x6ebedf9a
add rax, 0x569d9d9d
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], r8
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e50
xchg rdx, rbx
mov qword [rax], rdx
xchg rbx, rdx
mov edx, 0x29e4752e
xor edx, 0x54a98f20
xor edx, 0x5ea9a52d
add edx, 0x42e73d6f
xor edx, 0x1ef89837
xor edx, 0x7df25c9e
add edx, 0x2222f52d
xor edx, 0x609a9d84
sub edx, 0x477ed0eb
mov ecx, r14d
call rdi
jmp 0x140075cc8
movabs rax, 0x5afa66f66745
xor rax, 0x37c3f2f
sub rax, 0x608a2951
add rax, 0x72640ad1
add rax, 0x4bf6fed
xor rax, 0x740aa0bd
add rax, 0x117c0721
add rax, 0x7fffffff
add rax, 0x2f1e0187
xchg r8, r12
mov r12, qword [rsi + 0x40]
xchg r8, r12
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x6935ba57
sub edx, 0x421d5167
xor edx, 0x27305e5d
add edx, 0x6502b2b3
sub edx, 0x108e544e
sub edx, 0x53ccabd5
add edx, 0x69810203
xor edx, 0x6a50eb41
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075cdf
xchg rdi, rbp
mov rcx, rdi
xchg rdi, rbp
call fcn.1401fccd8
xchg r12, r15
mov rcx, r12
xchg r15, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
xchg r10, rbx
mov r10, qword [rsp + 0x88]
xchg r10, rbx
add rsp, 0x40
push rax
push rdx
push rcx
push rcx
xchg qword [rsp + 0x20], r15
add rsp, 0x28
nop
xchg qword [rsp], r14
add rsp, 8
nop
xchg qword [rsp], r13
add rsp, 8
nop
add rsp, 8
mov r12, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
push rax
push rdx
push rdx
push rdx
push rax
push rdx
push rax
push rdx
xchg qword [rsp + 0x40], rsi
add rsp, 0x48
nop
add rsp, 8
xchg qword [rsp - 8], rbp
nop
add rsp, 8
jmp qword [rsp - 8]