Function at 0x1401280c3
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0x2e6a91ac
pushf
not eax
add eax, 0xcea58f4
xor eax, 0xb6815ec
rol eax, 8
popf
pushf
not eax
add eax, 0x41fe1242
xor eax, 0x2d029484
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x2a21fe7a
xor eax, 0x4e0533d5
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x5aa248ac
xor eax, 0x34927392
rol eax, 0xd8
popf
cmp eax, 8
jne 0x140128126
popf
pop rax
jmp 0x1401286cb
cmp eax, 9
jne 0x140128135
popf
pop rax
jmp 0x140128700
cmp eax, 3
jne 0x140128144
popf
pop rax
jmp 0x140128360
cmp eax, 2
jne 0x140128153
popf
pop rax
jmp 0x1401282df
cmp eax, 1
jne 0x140128162
popf
pop rax
jmp 0x140128271
cmp eax, 0
jne 0x140128171
popf
pop rax
jmp 0x1401281ad
cmp eax, 7
jne 0x140128180
popf
pop rax
jmp 0x140128689
cmp eax, 6
jne 0x14012818f
popf
pop rax
jmp 0x1401285ea
cmp eax, 4
jne 0x14012819e
popf
pop rax
jmp 0x140128408
cmp eax, 5
jne 0x1401281ad
popf
pop rax
jmp 0x1401284b9
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x140128218
push rax
pushf
mov eax, 0x22f41436
pushf
not eax
add eax, 0x129cc895
xor eax, 0x596cef8a
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x6c8e91dc
xor eax, 0x4c48e5a0
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x7ea0f622
xor eax, 0x33e6172a
rol eax, 0x44
popf
pushf
not eax
add eax, 0xdfada91
xor eax, 0x2496b586
rol eax, 0xbc
popf
jmp 0x140128117
push rax
pushf
mov eax, 0x71ffa5c5
pushf
not eax
add eax, 0x50581fd5
xor eax, 0x731ad3c7
rol eax, 0xde
popf
pushf
not eax
add eax, 0x1c6d82c1
xor eax, 0x7a5cfe94
rol eax, 0x39
popf
pushf
not eax
add eax, 0x252173a8
xor eax, 0x4cda7f93
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x54b5348e
xor eax, 0x431c0ce3
rol eax, 0xfd
popf
jmp 0x140128117
mov al, 0xb4
pushf
not al
add al, 0x6d
xor al, 0x62
rol al, 0x34
popf
pushf
not al
add al, 0x16
xor al, 0x11
rol al, 0xb0
popf
pushf
not al
add al, 7
xor al, 0x35
rol al, 0xcb
popf
pushf
not al
add al, 8
xor al, 0x52
rol al, 0xcc
popf
jmp 0x140128700
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x14012831a
push rax
pushf
mov eax, 0x4c99d70e
pushf
not eax
add eax, 0x6480f6b2
xor eax, 0x31607510
rol eax, 0xb
popf
pushf
not eax
add eax, 0x537840cc
xor eax, 0x19a2a797
rol eax, 0xa9
popf
jmp 0x140128117
push rax
pushf
mov eax, 0x9e444047
pushf
not eax
add eax, 0x43270260
xor eax, 0x242e7bc0
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x7b62c022
xor eax, 0x64fba8e0
rol eax, 4
popf
pushf
not eax
add eax, 0x32fff7a
xor eax, 0x4746f01d
rol eax, 0x67
popf
jmp 0x140128117
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1401283af
push rax
pushf
mov eax, 0xde752297
pushf
not eax
add eax, 0x6deb99e7
xor eax, 0x120fdf27
rol eax, 0x84
popf
pushf
not eax
add eax, 0x2eb768f9
xor eax, 0x6f93949e
rol eax, 0x78
popf
pushf
not eax
add eax, 0x58da5ab9
xor eax, 0x67a9cb42
rol eax, 0xcf
popf
jmp 0x140128117
push rax
pushf
mov eax, 0x772fe6af
pushf
not eax
add eax, 0x7d6ef4bf
xor eax, 0xcf4d938
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x387c439a
xor eax, 0x8a70440
rol eax, 0x42
popf
pushf
not eax
add eax, 0x28542f3b
xor eax, 0x4b6a14b3
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xca0db5a
xor eax, 0x64dc5cd4
rol eax, 0xa0
popf
jmp 0x140128117
mov ecx, dword [rcx + 0x18]
nop
call fcn.14010520d
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140128460
push rax
pushf
mov eax, 0xe4c6e7f0
pushf
not eax
add eax, 0x66256915
xor eax, 0x68da8c6c
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x17156d3e
xor eax, 0x404ceb92
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x5a6e29a5
xor eax, 0x5ba5fcd4
rol eax, 0x3d
popf
jmp 0x140128117
push rax
pushf
mov eax, 0xa66da810
pushf
not eax
add eax, 0x41e45d14
xor eax, 0x7a981617
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x4f0e3eed
xor eax, 0x2c054223
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x5ebca1bc
xor eax, 0x7cad3821
rol eax, 0xed
popf
pushf
not eax
add eax, 0x6170ef0
xor eax, 0x41abcf7d
rol eax, 0xc8
popf
jmp 0x140128117
mov r9d, 0xf9c5ad2c
pushf
not r9d
add r9d, 0x4ba3e297
xor r9d, 0x44e3a028
rol r9d, 0x4a
popf
pushf
not r9d
add r9d, 0x2b92c8dc
xor r9d, 0x52a70a0
rol r9d, 0x1b
popf
pushf
not r9d
add r9d, 0xb870ccb
xor r9d, 0x2472954
rol r9d, 0x44
popf
pushf
not r9d
add r9d, 0x54eec9e6
xor r9d, 0x50d06808
rol r9d, 0x2d
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x14012852e
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x140128591
push rax
pushf
mov eax, 0xe34fe7fa
pushf
not eax
add eax, 0x43593832
xor eax, 0x51375535
rol eax, 0x24
popf
pushf
not eax
add eax, 0x209b19b5
xor eax, 0x384465de
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x42a42a98
xor eax, 0x22dcd282
rol eax, 0x61
popf
pushf
not eax
add eax, 0x63a152cd
xor eax, 0x4db142e7
rol eax, 0x78
popf
jmp 0x140128117
push rax
pushf
mov eax, 0xebe0210d
pushf
not eax
add eax, 0xf38225b
xor eax, 0x689adc2
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x120cc68d
xor eax, 0x4016e62a
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x1b55f229
xor eax, 0x477afc15
rol eax, 0x15
popf
pushf
not eax
add eax, 0x6c1f8d75
xor eax, 0x1e9dd04e
rol eax, 0xf
popf
jmp 0x140128117
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1401285f3
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x140128643
push rax
pushf
mov eax, 0xbe1ccfb9
pushf
not eax
add eax, 0x34c3cef0
xor eax, 0x1d9f3468
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x67af13f8
xor eax, 0x1621a25b
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x4eef5068
xor eax, 0x652ecfc0
rol eax, 0x71
popf
jmp 0x140128117
push rax
pushf
mov eax, 0xc0fc3ad
pushf
not eax
add eax, 0x757a345c
xor eax, 0x6d1a427f
rol eax, 0x18
popf
pushf
not eax
add eax, 0x19b4428b
xor eax, 0x6e2feb51
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x5530c192
xor eax, 0x15143cde
rol eax, 0x7e
popf
jmp 0x140128117
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x140128700
xor al, al
push rax
pushf
mov eax, 0xf2f97bcf
pushf
not eax
add eax, 0x73c19e48
xor eax, 0x47627d83
rol eax, 0xff
popf
pushf
not eax
add eax, 0x35bfcc57
xor eax, 0x51ea9559
rol eax, 0x18
popf
jmp 0x140128117
add rsp, 0x20
pop rbx
ret