Function at 0x1400756e0
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rbx
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
push r14
push r15
sub rsp, 0x40
xchg rbx, rdx
mov rdx, rbx
xchg rbx, rdx
xchg rbx, rcx
mov rsi, rbx
xchg rbx, rcx
xor r13d, r13d
cmp qword [rcx], r13
jne 0x140075732
call 0x140074e80
test al, al
je 0x1400757c5
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.14007ba70
mov rcx, rax
xchg rbp, r13
mov qword [rsp + 0x30], rbp
xchg rbp, r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x44850845
xor dword [rsp + 0x20], 0x5e89dd11
add dword [rsp + 0x20], 0x1c6aa5fe
add dword [rsp + 0x20], 0x274348db
sub dword [rsp + 0x20], 0x2e123ef1
xor dword [rsp + 0x20], 0x2fa8853f
xor r9d, r9d
mov edx, 0x41fbb452
sub edx, 0x1827b13c
add edx, 0x4a5fb38f
sub edx, 0x74065ba1
add edx, 0x3ba4eaa2
add edx, 0x3661a2c5
add edx, 0xdcc1795
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
test rax, rax
jne 0x1400757cc
xor al, al
jmp 0x140075e77
xor r12b, r12b
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
test eax, eax
je 0x140075e64
lea ecx, [rax + 1]
mov ebx, ecx
call fcn.1401fcb78
xchg rcx, rax
mov rbp, rcx
xchg rcx, rax
test rax, rax
je 0x140075817
mov r8d, ebx
xor edx, edx
xchg r12, rcx
mov r12, rax
xchg rcx, r12
call sub.VCRUNTIME140.dll_memset
jmp 0x140075820
xchg r12, r13
mov rbp, r12
xchg r13, r12
mov qword [rsp + 0x98], rbp
mov dword [rsp + 0x80], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x80]
mov r8d, r14d
xchg rdx, rbp
mov rbp, rdx
xchg rbp, rdx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne r12b
test eax, eax
je 0x140075e4d
mov edx, dword [rsi + 8]
test edx, edx
je 0x140075878
lea rcx, [rsi + 0x20]
call fcn.140074950
mov dword [rsi + 8], r13d
movabs rax, 0x8523903c9217c
add rax, 0x4d454440
xor rax, 0x72b3d53e
xor rax, 0x792bb542
xor rax, 0x324e87a2
sub rax, 0x2e64c175
add rax, 0x19ebbed9
add rax, 0x169eb2a3
movabs rbx, 0xc56292c249d66
add rbx, 0xb1db5a9
add rbx, 0x1037385
xor rbx, 0x7143a7fe
xor rbx, 0x6e0cc8d5
add rbx, 0x5c0ee897
cmp qword [0x140216040], rax
je 0x140075b03
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075b03
cmp byte [0x140217008], 0
jne 0x140075964
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074be0]
mov ecx, 0x75721202
add ecx, 0xf82ee9
sub ecx, 0x3e18fb18
add ecx, 0x412718ab
xor ecx, 0x3f9ba95f
xor ecx, 0x5e98d998
add ecx, 0x29a1cc5b
sub ecx, 0x39153d18
sub ecx, 0x907bdfb
call rax
mov ecx, 0x57d02810
xor ecx, 0x843085
xor ecx, 0x49d97a34
xor ecx, 0x79d12cb8
xor ecx, 0x7335ff3f
sub ecx, 0x1469b125
call fcn.1401fcb34
xchg r14, rax
mov rdi, r14
xchg r14, rax
movabs rax, 0x5826a6c24ccbe5d
sub rax, 0x1d80d34a
xor rax, 0x3b5e6b96
add rax, 0x2c56a433
sub rax, 0xa04e750
xor rax, 0x15eacf47
add rax, 0x20a983de
xor rax, 0x2cb57645
mov rbx, qword [rsi + 0x10]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rcx, r12
mov r12, rdi
xchg rcx, r12
movabs rax, 0x58235925901bac9
xor rax, 0x17536d67
xor rax, 0x3f28d1ef
xor rax, 0x42a06899
sub rax, 0x52f13b
sub rax, 0x6e0eda6
xor rax, 0x718e8ecd
sub rax, 0x151899d0
add rax, 0x30360aef
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
xchg r9, rcx
mov qword [rsp + 0x90], r9
xchg rcx, r9
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e50
xchg rdx, rbx
mov qword [rax], rdx
xchg rdx, rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x4a8423ff
sub dword [rsp + 0x20], 0xfafb4e3
add dword [rsp + 0x20], 0xe377756
sub dword [rsp + 0x20], 0x43ee12ad
add dword [rsp + 0x20], 0x60d2f59a
sub dword [rsp + 0x20], 0x65f0c95b
mov r9d, r14d
xor r8d, r8d
mov rdx, rbp
lea ecx, [r8 + 1]
call rdi
movabs rbx, 0xc56293200ec76
add rbx, 0x4a2d815
sub rbx, 0x344c35f5
add rbx, 0x46ad84a1
add rbx, 0x1602692a
sub rbx, 0x38da4fe6
add rbx, 0x7fffffff
xor rbx, 0x2534be2c
jmp 0x140075bb1
movabs rcx, 0x5ffe1b50dfda
add rcx, 0x3aaea7
xor rcx, 0x7b744f32
sub rcx, 0x1bcc4671
add rcx, 0x2fdb6f19
sub rcx, 0x3c47784a
mov rax, qword [rsi + 0x10]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x2e56750d
xor dword [rsp + 0x20], 0x6db82f2b
sub dword [rsp + 0x20], 0x23d2fe84
xor dword [rsp + 0x20], 0x514003f9
sub dword [rsp + 0x20], 0x368fb59f
xor dword [rsp + 0x20], 0x416f7605
xor dword [rsp + 0x20], 0x5bb00016
xor dword [rsp + 0x20], 0x2014d4ab
mov r9d, r14d
xor r8d, r8d
xchg r14, rbp
mov rdx, r14
xchg rbp, r14
lea ecx, [r8 + 1]
call rax
mov r14d, eax
mov dword [rsi + 8], eax
movabs rax, 0x852390083ad16
add rax, 0x681ae467
sub rax, 0x17889d77
sub rax, 0x1ca14566
add rax, 0x34e38b2b
sub rax, 0x22806e95
add rax, 0x24266733
cmp qword [0x140216040], rax
je 0x140075dbe
mov rax, qword [0x140216050]
cmp rax, rbx
je 0x140075dbe
cmp byte [0x140217008], 0
jne 0x140075c6a
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140074be0]
mov ecx, 0x1a01754f
sub ecx, 0x16b9f76e
add ecx, 0xd448539
add ecx, 0x66246bc0
sub ecx, 0x618eb02f
xor ecx, 0x45c9d0b2
sub ecx, 0x11d3e45f
xor ecx, 0x3f1489bb
call rax
mov ecx, 0x3e1156a9
add ecx, 0x32d432b4
xor ecx, 0x74c8351
sub ecx, 0x54f4b79
sub ecx, 0x269a32c8
sub ecx, 0x721563c
xor ecx, 0x73afa3d1
add ecx, 0x251511ab
sub ecx, 0x5c46a808
call fcn.1401fcb34
mov rdi, rax
movabs rax, 0x5826f684730f0e2
sub rax, 0x21745d31
add rax, 0x124b2cfd
sub rax, 0x1f7c8398
xor rax, 0x2251b396
xor rax, 0x7aca499d
xor rax, 0x269409ba
add rax, 0x13aa2fb8
add rax, 0x365761e9
mov rbx, qword [rsi + 0x40]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg r8, r15
mov r15, rdi
xchg r8, r15
movabs rax, 0x58235921d1c1ad0
add rax, 0x1649236a
add rax, 0x1eb194b5
sub rax, 0x84a283
xor rax, 0x41e5ca37
xor rax, 0x68328802
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
or r8, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x90], r8
lea rdx, [rsp + 0x90]
lea rcx, [0x140216ff8]
call fcn.140029e50
mov qword [rax], rbx
mov edx, 0x6039987a
xor edx, 0x57233e76
add edx, 0xef8379
xor edx, 0xfd6966c
xor edx, 0x526c6113
xor edx, 0x770bea43
xor edx, 0x39a3757f
add edx, 0x45ab37ef
xor edx, 0x70c379b4
mov ecx, r14d
call rdi
jmp 0x140075e4d
movabs rax, 0x5afa11a0de29
add rax, 0x29203d54
xor rax, 0x465670aa
xor rax, 0x337e5010
xor rax, 0x43c3695a
add rax, 0x4d8966e9
add rax, 0x160ec8e6
add rax, 0x59008fa5
xchg r13, r8
mov r13, qword [rsi + 0x40]
xchg r13, r8
push r8
xor r8d, eax
push r8
xor r8, qword [rsp + 8]
shr r8, 0x20
ror rax, 0x20
xor r8d, eax
ror rax, 0x20
shl r8, 0x20
xor r8, qword [rsp]
add rsp, 0x10
mov edx, 0x4868014a
add edx, 0xb3f9097
sub edx, 0x33460676
xor edx, 0x6687919a
xor edx, 0x330b991d
sub edx, 0x75ed83eb
mov ecx, r14d
call r8
nop
test rbp, rbp
je 0x140075e64
xchg rbp, r15
mov rcx, r15
xchg r15, rbp
call fcn.1401fcb70
xchg r15, rcx
mov r15, rcx
xchg rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, r12b
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
nop
xchg qword [rsp], r15
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
add rsp, 8
mov r13, qword [rsp - 8]
nop
mov r12, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rsi
push rbx
push rcx
push rbx
push rdx
push rax
push rax
xchg qword [rsp + 0x30], rbp
pop rax
pop rax
pop rdx
pop rbx
pop rcx
pop rbx
add rsp, 8
ret