Function at 0x1403a76bc
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0x311f813e
pushf
not eax
add eax, 0xf28bc221
xor eax, 0xf4c4fcbc
rol eax, 0x70
popf
pushf
not eax
add eax, 0x81329091
xor eax, 0xeb77fb0c
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xa28363a7
xor eax, 0xf6b7abe9
rol eax, 0xb
popf
pushf
not eax
add eax, 0x92b0428d
xor eax, 0xb0de4856
rol eax, 0x49
popf
cmp eax, 4
jne 0x1403a771f
popf
pop rax
jmp 0x1403a79a0
cmp eax, 0
jne 0x1403a772e
popf
pop rax
jmp 0x1403a77a6
cmp eax, 3
jne 0x1403a773d
popf
pop rax
jmp 0x1403a7931
cmp eax, 1
jne 0x1403a774c
popf
pop rax
jmp 0x1403a781d
cmp eax, 5
jne 0x1403a775b
popf
pop rax
jmp 0x1403a7a63
cmp eax, 7
jne 0x1403a776a
popf
pop rax
jmp 0x1403a7c0d
cmp eax, 6
jne 0x1403a7779
popf
pop rax
jmp 0x1403a7b6e
cmp eax, 2
jne 0x1403a7788
popf
pop rax
jmp 0x1403a788b
cmp eax, 9
jne 0x1403a7797
popf
pop rax
jmp 0x1403a7c77
cmp eax, 8
jne 0x1403a77a6
popf
pop rax
jmp 0x1403a7c75
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
shr edx, 3
test dl, 1
je 0x1403a77ea
push rax
pushf
mov eax, 0x1c0fecc
pushf
not eax
add eax, 0xe29183da
xor eax, 0xdbd2baf0
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x952f01fc
xor eax, 0xd49f02ed
rol eax, 0x3a
popf
jmp 0x1403a7710
push rax
pushf
mov eax, 0x4f88f3f4
pushf
not eax
add eax, 0xa759f6ff
xor eax, 0xf06ff518
rol eax, 4
popf
pushf
not eax
add eax, 0xb5edd2a1
xor eax, 0xb9fe7176
rol eax, 0x42
popf
jmp 0x1403a7710
mov al, 0xef
pushf
not al
add al, 0xfa
xor al, 0x73
rol al, 0xf8
popf
pushf
not al
add al, 0xf4
xor al, 0x7a
rol al, 0x68
popf
pushf
not al
add al, 0xc0
xor al, 0x9e
rol al, 0x4d
popf
pushf
not al
add al, 0x46
xor al, 1
rol al, 0x6b
popf
jmp 0x1403a7c77
mov eax, dword [rcx + 0x14]
test al, 0xc0
je 0x1403a78eb
push rax
pushf
mov eax, 0xdae6c2a2
pushf
not eax
add eax, 0x98372279
xor eax, 0xe1a6041e
rol eax, 0x72
popf
pushf
not eax
add eax, 0x89ce2e26
xor eax, 0x9fb64406
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x8b531b64
xor eax, 0xa3ba67ed
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xe087f1d5
xor eax, 0xb79a6b7a
rol eax, 0x83
popf
jmp 0x1403a7710
push rax
pushf
mov eax, 0xe29df7fc
pushf
not eax
add eax, 0xc98630e0
xor eax, 0xc647e157
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xb3d10d06
xor eax, 0x8b3389d8
rol eax, 0x15
popf
pushf
not eax
add eax, 0xa6c36e2c
xor eax, 0xaab02f0b
rol eax, 0x1d
popf
jmp 0x1403a7710
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1403a796d
push rax
pushf
mov eax, 0x9e8522e9
pushf
not eax
add eax, 0x964583cc
xor eax, 0xc6933741
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xcede645a
xor eax, 0xb553c99e
rol eax, 0x21
popf
jmp 0x1403a7710
push rax
pushf
mov eax, 0xec5b6c92
pushf
not eax
add eax, 0xf79688cd
xor eax, 0xd8d53da0
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xfbbe84a5
xor eax, 0xe21345c2
rol eax, 0x12
popf
jmp 0x1403a7710
mov ecx, dword [rcx + 0x18]
call fcn.14021034a
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1403a7a0a
push rax
pushf
mov eax, 0x33d9fdec
pushf
not eax
add eax, 0xcebff590
xor eax, 0xc6046186
rol eax, 0x96
popf
pushf
not eax
add eax, 0xff5fa50d
xor eax, 0xb4d0f81f
rol eax, 0x85
popf
pushf
not eax
add eax, 0xe3b9a705
xor eax, 0xb9d9fc33
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x859dd26a
xor eax, 0xa7214c3a
rol eax, 0xb3
popf
jmp 0x1403a7710
push rax
pushf
mov eax, 0x8cd360d6
pushf
not eax
add eax, 0xe621aee1
xor eax, 0x8d919216
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa36700c6
xor eax, 0xe563500b
rol eax, 0xda
popf
pushf
not eax
add eax, 0xdfe58d24
xor eax, 0xa12e77d0
rol eax, 0x85
popf
pushf
not eax
add eax, 0x820eed43
xor eax, 0xb50003c1
rol eax, 0x79
popf
jmp 0x1403a7710
mov r9d, 0xb1fbff1a
pushf
not r9d
add r9d, 0xc3dcbf5c
xor r9d, 0xfa4751aa
rol r9d, 0x39
popf
pushf
not r9d
add r9d, 0xa1b2aa61
xor r9d, 0xdce0aa67
rol r9d, 0x35
popf
pushf
not r9d
add r9d, 0xcd50850a
xor r9d, 0xd15a5078
rol r9d, 0x11
popf
pushf
not r9d
add r9d, 0xbd5e014b
xor r9d, 0xe1771a9b
rol r9d, 2
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x1403a7ad8
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1403a7b28
push rax
pushf
mov eax, 0xcdd6728a
pushf
not eax
add eax, 0xf3a9824f
xor eax, 0xc191b0be
rol eax, 0x55
popf
pushf
not eax
add eax, 0xd4884a0a
xor eax, 0xb5867a44
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xf8d1c3c6
xor eax, 0xcd62de31
rol eax, 0x76
popf
jmp 0x1403a7710
push rax
pushf
mov eax, 0xe86910f4
pushf
not eax
add eax, 0xefb18806
xor eax, 0xcb47090e
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x9fe13126
xor eax, 0x8852e5a4
rol eax, 0x41
popf
pushf
not eax
add eax, 0xba45e7b1
xor eax, 0xe6c13f0d
rol eax, 0xcf
popf
jmp 0x1403a7710
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1403a7b77
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1403a7bc7
push rax
pushf
mov eax, 0x2e9aa2ea
pushf
not eax
add eax, 0xdd320b60
xor eax, 0xaa425289
rol eax, 0x43
popf
pushf
not eax
add eax, 0xd7f903d5
xor eax, 0xcf89e354
rol eax, 0x11
popf
pushf
not eax
add eax, 0xca5a6323
xor eax, 0xb9196596
rol eax, 0x41
popf
jmp 0x1403a7710
push rax
pushf
mov eax, 0xda42c0f4
pushf
not eax
add eax, 0xdb04b96b
xor eax, 0xac6cb7b6
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x82df2790
xor eax, 0xa83b7cfb
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xec4ec1d2
xor eax, 0x96d51de1
rol eax, 0x6e
popf
jmp 0x1403a7710
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x1403a7c77
xor al, al
add rsp, 0x20
pop rbx
ret