Function at 0x140013810
Capabilities:
Get file size

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov rax, qword [0x14036e028]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r12, r9
mov r15, r8
mov rdi, rdx
mov r14, rcx
xor esi, esi
cmp dword [rcx + 0x98], esi
je 0x140013886
mov ebx, dword [rcx + 0x98]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
je 0x140013886
cmp byte [r14 + 0x91], sil
jne 0x140013886
test ebx, ebx
je 0x140013886
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [r14 + 0x98], eax
je 0x140013886
cmp byte [r14 + 0x91], sil
je 0x140013c84
cmp qword [r14 + 0x18], rsi
jne 0x14001388d
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400138a1
mov rdx, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x140066a83.0]
mov r13d, esi
mov dword [rsp + 0x50], esi
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400138bf
mov rcx, qword [rdi]
mov rbx, rsi
mov qword [rbp - 0x80], rbx
test rcx, rcx
je 0x140013c79
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x140013916
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x14001395d
jmp 0x140013919
mov rbx, rax
and dword [rsp + 0x7c], 0
lea rdx, [rsp + 0x7c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r13d, eax
cmp eax, 0xffffffff
jne 0x14001394c
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x140013958
cmp dword [rsp + 0x7c], 0
je 0x14001395d
mov esi, 0x800700df
mov r13d, dword [rsp + 0x50]
test rbx, rbx
je 0x14001396b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
test esi, esi
js 0x140013b0d
test r13d, r13d
jne 0x140013984
mov esi, 0xc02500bc
jmp 0x140013b0d
cmp qword [r14 + 0x18], rbx
jne 0x14001398b
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001399f
mov rdx, qword [rdi]
mov rax, qword [rax + 0x20]
call qword [case.0x140066a83.0]
mov esi, eax
test eax, eax
js 0x140013b0d
cmp byte [rbp + 0xb0], bl
je 0x1400139ea
cmp qword [r14 + 0x18], rbx
jne 0x1400139c2
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400139d6
mov rdx, qword [rdi]
mov rax, qword [rax + 0x38]
call qword [case.0x140066a83.0]
mov esi, eax
test eax, eax
js 0x140013b0d
mov byte [rsp + 0x78], bl
cmp qword [r15 + 0x10], rbx
je 0x140013ae8
cmp qword [r12 + 0x10], rbx
je 0x140013ae8
mov qword [rbp - 0x78], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013a1c
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp - 0x78]
call fcn.14000e68c
nop
lea rcx, [rbp - 0x78]
call fcn.140078cb4
mov rsi, r12
cmp qword [r12 + 0x18], 8
jb 0x140013a42
mov rsi, qword [r12]
mov rbx, r15
cmp qword [r15 + 0x18], 8
jb 0x140013a4f
mov rbx, qword [r15]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013a5c
mov rdx, qword [rdi]
lea rcx, [rsp + 0x58]
call fcn.140078dbc
nop
cmp qword [rax + 0x18], 8
jb 0x140013a71
mov rax, qword [rax]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov r9, rax
call fcn.14000f678
nop
lea rcx, [rsp + 0x58]
call fcn.140007db8
xor ebx, ebx
cmp qword [r14 + 0x18], rbx
jne 0x140013a97
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
cmp qword [r12 + 0x18], 8
jb 0x140013aaa
mov r12, qword [r12]
cmp qword [r15 + 0x18], 8
jb 0x140013ab4
mov r15, qword [r15]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013ac1
mov rdx, qword [rdi]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x20], r8
mov r9, r12
mov r8, r15
mov rax, qword [rax + 0x68]
call qword [case.0x140066a83.0]
mov esi, eax
lea rcx, [rbp - 0x78]
call fcn.140007db8
jmp 0x140013afa
lea r8, [rsp + 0x78]
mov rdx, rdi
mov rcx, r14
call fcn.140010f1c
mov esi, eax
test esi, esi
js 0x140013b0d
cmp byte [rsp + 0x78], bl
jne 0x140013c57
mov esi, 0xc02500bd
cmp qword [r14 + 0x18], rbx
jne 0x140013b14
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013b28
mov rdx, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x140066a83.0]
mov qword [rbp - 0x78], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013b4b
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp - 0x78]
call fcn.14000e68c
mov qword [rbp - 0x58], 0xffffffff80000001
mov byte [rbp - 0x50], bl
cmp qword [r14 + 0x18], rbx
jne 0x140013b6a
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
lea rdx, [rbp - 0x78]
mov rax, qword [rax + 0x80]
call qword [case.0x140066a83.0]
cmp qword [rdi + 0x18], 8
jb 0x140013b8c
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.140078dbc
nop
cmp qword [rax + 0x18], 8
jb 0x140013ba4
mov rax, qword [rax]
lea rcx, str.filePath
mov qword [rbp - 8], rcx
mov dword [rbp - 0x10], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rbp], rax
test rax, rax
je 0x140013bce
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], bx
jne 0x140013bc3
jmp 0x140013bd1
mov rcx, rbx
mov qword [rbp + 8], rcx
lea rax, str.result
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x10], 3
mov dword [rbp + 0x20], esi
mov eax, 2
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0x34ac12ea
lea rax, [0x140316a78]
mov qword [rsp + 0x20], rax
lea r9, str.DownloaderUtil::VerifyFile
mov r8d, 0x504
lea rdx, str.D:dbs_shodct0917_230313_1cmduclientonedriveProductCommonUpdateDownloaderUtilDownloaderUtil.cpp
lea rcx, [rbp - 0x48]
call fcn.1400766dc
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x48]
call fcn.1400788c0
call fcn.140078374
nop
lea rcx, [rsp + 0x58]
call fcn.140007db8
nop
lea rcx, [rbp - 0x78]
call fcn.140007db8
mov eax, esi
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140020a80
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80004005
call fcn.140007b88
nop
mov ecx, 0x80004005
call fcn.140007b88
int3