Function at 0x140674486
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xff2dc822
pushf
not eax
add eax, 0xd08c9c94
xor eax, 0xe407144c
rol eax, 0x20
popf
pushf
not eax
add eax, 0xe97a9753
xor eax, 0xb420d715
rol eax, 0x91
popf
cmp eax, 4
jne 0x1406744c3
popf
pop rax
jmp 0x14067476c
cmp eax, 0
jne 0x1406744d2
popf
pop rax
jmp 0x14067454a
cmp eax, 3
jne 0x1406744e1
popf
pop rax
jmp 0x1406746ea
cmp eax, 1
jne 0x1406744f0
popf
pop rax
jmp 0x1406745e8
cmp eax, 5
jne 0x1406744ff
popf
pop rax
jmp 0x1406747f7
cmp eax, 7
jne 0x14067450e
popf
pop rax
jmp 0x140674988
cmp eax, 6
jne 0x14067451d
popf
pop rax
jmp 0x1406748e9
cmp eax, 2
jne 0x14067452c
popf
pop rax
jmp 0x140674656
cmp eax, 9
jne 0x14067453b
popf
pop rax
jmp 0x1406749df
cmp eax, 8
jne 0x14067454a
popf
pop rax
jmp 0x1406749dd
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x14067458f
push rax
pushf
mov eax, 0x9a8e5640
pushf
not eax
add eax, 0x88128a5c
xor eax, 0xc57e4acc
rol eax, 0x93
popf
pushf
not eax
add eax, 0xea25052e
xor eax, 0xf36bbd5e
rol eax, 0x3e
popf
jmp 0x1406744b4
push rax
pushf
mov eax, 0x1762eb01
pushf
not eax
add eax, 0xd9ff7bce
xor eax, 0xb8a0cab0
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xd074d868
xor eax, 0xf4341781
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x92dbbd0d
xor eax, 0x8f2895ce
rol eax, 0xab
popf
pushf
not eax
add eax, 0xcefd0514
xor eax, 0x83a441bc
rol eax, 0xea
popf
jmp 0x1406744b4
mov al, 0xe6
pushf
not al
add al, 0x53
xor al, 0xa6
rol al, 0xa3
popf
pushf
not al
add al, 0x18
xor al, 0xe7
rol al, 0x8e
popf
pushf
not al
add al, 0x2f
xor al, 0xc4
rol al, 0x16
popf
pushf
not al
add al, 0x84
xor al, 0x3b
rol al, 0xdc
popf
jmp 0x1406749df
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x140674691
push rax
pushf
mov eax, 0xbe0415a9
pushf
not eax
add eax, 0x904aa35f
xor eax, 0xd61e4c56
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xa2b0af12
xor eax, 0x8abde902
rol eax, 0x4c
popf
jmp 0x1406744b4
push rax
pushf
mov eax, 0xdee68f02
pushf
not eax
add eax, 0x9e2bdfda
xor eax, 0xc2c606c9
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xde41083b
xor eax, 0x9b96a24d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa6ba4c97
xor eax, 0xed6815b3
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xa756ef66
xor eax, 0xd65f5f25
rol eax, 0x29
popf
jmp 0x1406744b4
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x140674726
push rax
pushf
mov eax, 0xa60ff5e0
pushf
not eax
add eax, 0xa2dfbabf
xor eax, 0xad3aef4f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x9efbef10
xor eax, 0xc9dc9c56
rol eax, 0x64
popf
jmp 0x1406744b4
push rax
pushf
mov eax, 0xab2921e8
pushf
not eax
add eax, 0xb2793d86
xor eax, 0xb746b469
rol eax, 3
popf
pushf
not eax
add eax, 0xcdb08e32
xor eax, 0xf57909aa
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe0c31256
xor eax, 0xd0a6776f
rol eax, 8
popf
jmp 0x1406744b4
mov ecx, dword [rcx + 0x18]
nop
call fcn.140072316
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1406747c4
push rax
pushf
mov eax, 0x27cb263e
pushf
not eax
add eax, 0xe2a0c468
xor eax, 0xe816d42d
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe5088acf
xor eax, 0xc0cd925a
rol eax, 0xad
popf
pushf
not eax
add eax, 0xa0c93b8d
xor eax, 0xcdfd37a7
rol eax, 0x7c
popf
jmp 0x1406744b4
push rax
pushf
mov eax, 0xd940cbc5
pushf
not eax
add eax, 0xd7fcf804
xor eax, 0x93fdfb3a
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xfe008927
xor eax, 0x9a967a6e
rol eax, 5
popf
jmp 0x1406744b4
mov r9d, 0x615d1191
pushf
not r9d
add r9d, 0x94aec766
xor r9d, 0xd30b2cec
rol r9d, 0xaf
popf
pushf
not r9d
add r9d, 0xc822206d
xor r9d, 0xf77c9638
rol r9d, 0xf5
popf
pushf
not r9d
add r9d, 0xa027260e
xor r9d, 0xdf2586e9
rol r9d, 0x8c
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x140674853
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1406748a3
push rax
pushf
mov eax, 0x746de6a6
pushf
not eax
add eax, 0xa82837b2
xor eax, 0x84a96969
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x9fc20bff
xor eax, 0xcaa9beff
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xbcd41b38
xor eax, 0xf5d8e922
rol eax, 0xdd
popf
jmp 0x1406744b4
push rax
pushf
mov eax, 0x22f9dd4d
pushf
not eax
add eax, 0xc6b9b5bb
xor eax, 0xbd02ecce
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x96294756
xor eax, 0x9b966166
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xe5c57156
xor eax, 0xb32705e2
rol eax, 0xa6
popf
jmp 0x1406744b4
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1406748f2
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x14067492f
push rax
pushf
mov eax, 0x4159dc13
pushf
not eax
add eax, 0x87cde49d
xor eax, 0xc4fc1103
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xe7318902
xor eax, 0xa5ecbc3c
rol eax, 0x72
popf
jmp 0x1406744b4
push rax
pushf
mov eax, 0x44c03968
pushf
not eax
add eax, 0xf3bbc443
xor eax, 0xbcccaf7b
rol eax, 0x39
popf
pushf
not eax
add eax, 0xcd9e23d2
xor eax, 0x96d45868
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xde6828d5
xor eax, 0xe5f34fa9
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xe8e0e6f7
xor eax, 0xdc62b3fa
rol eax, 0x2d
popf
jmp 0x1406744b4
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x1406749df
xor al, al
add rsp, 0x20
pop rbx
ret