Function at 0x1400f2850
Capabilities:
Get file size

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa8
mov rax, qword [0x140300040]
xor rax, rsp
mov qword [rsp + 0x98], rax
mov r15, r9
mov r12, r8
mov r14, rdx
mov rsi, rcx
mov qword [rsp + 0x68], rdx
mov rbx, qword [rsp + 0x110]
mov rcx, qword [rcx + 0x20]
test rcx, rcx
je 0x1400f289d
call fcn.1401f785c
xor r13d, r13d
mov qword [rsi + 0x20], r13
lea rcx, [rsi + 0x28]
call fcn.1400f1560
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400f28c3
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [case.0x140038ca6.0]
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
movaps xmm0, xmmword [r15]
movdqa xmmword [rsp + 0x80], xmm0
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
mov rax, qword [rax + 0x130]
call qword [case.0x140038ca6.0]
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
mov rdx, rbx
mov rax, qword [rax + 0x118]
call qword [case.0x140038ca6.0]
mov rdi, 0xffffffffffffffff
mov qword [rsp + 0x40], rdi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x90], rax
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x1400f2b12
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rbx, [0x140267540]
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140018bb0
test al, al
jne 0x1400f2989
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x1400f2970
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140018f50
nop
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x1400f29bf
mov rax, rdi
jmp 0x1400f29e9
lea rdx, [rsp + 0x90]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov ebx, eax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, rdi
test ebx, ebx
cmovne rax, qword [rsp + 0x90]
mov qword [rsp + 0x40], rax
call fcn.140166630
mov rdx, rax
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rcx, qword [rsi + 8]
call fcn.1400f3bb0
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
mov r8, r12
mov rdx, qword [r14]
mov rax, qword [rax + 0x20]
call qword [case.0x140038ca6.0]
mov ebx, eax
mov rcx, qword [rsi + 8]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x120]
call qword [case.0x140038ca6.0]
mov dword [rsi + 0xa8], eax
mov rcx, qword [rsi + 8]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x128]
call qword [case.0x140038ca6.0]
mov dword [rsi + 0xac], eax
call fcn.14012bfe0
mov dword [rax + 0xc8], r13d
cmp ebx, 1
jne 0x1400f2a9b
cmp dword [r15 + 4], 0xffffffff
jne 0x1400f2a9b
movdqa xmm0, xmmword [0x1402b43f0]
movdqu xmmword [rsp + 0x58], xmm0
mov rdx, qword [rsi + 8]
lea rcx, [rsp + 0x58]
call fcn.1400f1990
test eax, eax
je 0x1400f2a9b
call fcn.14012bfe0
mov ecx, dword [rsp + 0x5c]
mov dword [rax + 0xc8], ecx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400f2acb
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
nop
mov rdx, qword [r14]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1400f2aec
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
mov eax, ebx
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1401f74b0
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0x80004005
call fcn.140019300
int3