Function at 0x18005db50
Capabilities:
Get file size

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x280
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x2b8], rbx
mov rax, qword [0x18010f050]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rdi, r8
mov rsi, rdx
mov rbx, rcx
test rdx, rdx
je 0x18005df34
cmp word [rdx], 0
je 0x18005df34
call fcn.180063820
xor ebp, ebp
mov dword [rbx + 0x34], ebp
mov dword [rbx + 0x38], ebp
lea rcx, [rbx + 0x40]
xor edx, edx
mov r8d, 0x324
call fcn.1800795c0
mov dword [rbx + 0x364], ebp
lea rcx, str.http:__
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r8, eax
lea rdx, str.http:__
mov rcx, rsi
call fcn.180077948
test eax, eax
je 0x18005de71
lea rcx, str.ftp:__
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r8, eax
lea rdx, str.ftp:__
mov rcx, rsi
call fcn.180077948
test eax, eax
je 0x18005de71
mov word [rsp + 0x60], bp
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x62]
call fcn.1800795c0
lea r8, [rsp + 0x60]
mov rdx, rsi
mov rcx, rbx
call fcn.180061470
test eax, eax
js 0x18005df39
cmp eax, 1
je 0x18005df39
mov eax, dword [rbx + 0x38]
cmp eax, 0xa
jne 0x18005dc61
mov r8, rdi
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.18005df60
jmp 0x18005df39
cmp eax, 5
jne 0x18005dcb3
mov dword [rbx + 0x34], ebp
mov dword [rbx + 0x28], 0x930
mov dword [rbx + 0x378], 0x930
cmp dword [rbx + 0x368], ebp
je 0x18005dc8f
mov rcx, rbx
call fcn.1800621e0
jmp 0x18005df39
cmp dword [rbx + 0x364], ebp
jne 0x18005dca1
mov eax, 0x80004005
jmp 0x18005df39
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1800620e0
jmp 0x18005df39
cmp eax, 6
jne 0x18005dcf3
mov dword [rbx + 0x34], ebp
mov dword [rbx + 0x28], 0x930
mov dword [rbx + 0x378], 0x930
cmp dword [rbx + 0x368], ebp
je 0x18005dce1
mov rcx, rbx
call fcn.1800627e0
jmp 0x18005df39
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1800625e0
jmp 0x18005df39
cmp eax, 7
jne 0x18005dd33
mov dword [rbx + 0x34], ebp
mov dword [rbx + 0x28], 0x930
mov dword [rbx + 0x378], 0x930
cmp dword [rbx + 0x368], ebp
je 0x18005dd21
mov rcx, rbx
call fcn.180062e20
jmp 0x18005df39
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.180062c60
jmp 0x18005df39
cmp dword [rbx + 0x368], ebp
je 0x18005dd6f
cmp eax, 8
jne 0x18005dd65
mov dword [rbx + 0x34], 0x2c
mov dword [rbx + 0x28], 0x930
mov dword [rbx + 0x378], 0x930
mov rcx, rbx
call fcn.180063470
jmp 0x18005df39
mov eax, 0xe0032004
jmp 0x18005df39
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, rax
mov qword [rbx + 0x18], rax
cmp rax, 0xffffffffffffffff
jne 0x18005ddae
call fcn.180003220
jmp 0x18005df39
mov eax, dword [rbx + 0x38]
cmp eax, 2
jne 0x18005ddcf
cmp dword [rbx + 0x3c], ebp
je 0x18005ddc2
xor eax, eax
jmp 0x18005df39
mov rcx, rbx
call fcn.18005f920
jmp 0x18005df39
cmp eax, 1
jne 0x18005de06
mov rcx, rbx
call fcn.1800605d0
test eax, eax
js 0x18005df39
cmp eax, 1
je 0x18005df39
cmp dword [rbx + 0x3c], ebp
je 0x18005ddf9
xor eax, eax
jmp 0x18005df39
mov rcx, rbx
call fcn.18005f920
jmp 0x18005df39
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x18005de1f
call fcn.180003220
jmp 0x18005df39
cmp dword [rbx + 0x364], ebp
je 0x18005de54
cmp dword [rbx + 0x38], 8
jne 0x18005de47
mov rdx, qword [rsp + 0x40]
sub rdx, 0x2c
mov qword [rsp + 0x40], rdx
mov dword [rbx + 0x378], 0x930
jmp 0x18005de4c
mov rdx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.180060f90
mov rax, qword [rsp + 0x40]
mov qword [rbx + 0x370], rax
mov rdx, qword [rbx + 0x18]
mov rcx, rbx
call fcn.180061cb0
jmp 0x18005df39
lea rdx, [0x1801171e8]
mov ecx, 0x190
call fcn.1800776d4
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x18005deb4
lea rcx, [rax + 0x10]
call fcn.18000f9a0
nop
lea rcx, [rdi + 0xf0]
call fcn.18000d920
mov qword [rdi], rbp
mov dword [rdi + 8], ebp
mov qword [rdi + 0x188], rbp
jmp 0x18005deb7
mov rdi, rbp
mov qword [rbx + 0x20], rdi
test rdi, rdi
jne 0x18005dec7
mov eax, 0x8007000e
jmp 0x18005df39
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call fcn.180013190
test eax, eax
js 0x18005df39
cmp eax, 1
je 0x18005df39
mov rax, qword [rbx + 0x20]
mov rcx, qword [rax + 0x188]
mov qword [rbx + 0x370], rcx
mov edx, 0x2e
mov rcx, rsi
call fcn.180078578
test rax, rax
je 0x18005df28
lea rdx, str..nrg
mov rcx, rax
call fcn.180078364
test eax, eax
jne 0x18005df28
mov rcx, rbx
call fcn.1800605d0
test eax, eax
jns 0x18005df39
cmp eax, 0xe003200b
jne 0x18005df39
xor edx, edx
mov rcx, rbx
call fcn.180061cb0
jmp 0x18005df39
mov eax, 0x80070057
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.180076a70
mov rbx, qword [rsp + 0x2b8]
add rsp, 0x280
pop rdi
pop rsi
pop rbp
ret