Function at 0x140013870
Capabilities:
Get file size

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov rax, qword [0x14036b028]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r12, r9
mov r15, r8
mov rdi, rdx
mov r14, rcx
xor esi, esi
cmp dword [rcx + 0x98], esi
je 0x1400138e6
mov ebx, dword [rcx + 0x98]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
je 0x1400138e6
cmp byte [r14 + 0x91], sil
jne 0x1400138e6
test ebx, ebx
je 0x1400138e6
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [r14 + 0x98], eax
je 0x1400138e6
cmp byte [r14 + 0x91], sil
je 0x140013ce4
cmp qword [r14 + 0x18], rsi
jne 0x1400138ed
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013901
mov rdx, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x140066ca3.0]
mov r13d, esi
mov dword [rsp + 0x50], esi
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001391f
mov rcx, qword [rdi]
mov rbx, rsi
mov qword [rbp - 0x80], rbx
test rcx, rcx
je 0x140013cd9
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x140013976
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x1400139bd
jmp 0x140013979
mov rbx, rax
and dword [rsp + 0x7c], 0
lea rdx, [rsp + 0x7c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r13d, eax
cmp eax, 0xffffffff
jne 0x1400139ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x1400139b8
cmp dword [rsp + 0x7c], 0
je 0x1400139bd
mov esi, 0x800700df
mov r13d, dword [rsp + 0x50]
test rbx, rbx
je 0x1400139cb
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
test esi, esi
js 0x140013b6d
test r13d, r13d
jne 0x1400139e4
mov esi, 0xc02500bc
jmp 0x140013b6d
cmp qword [r14 + 0x18], rbx
jne 0x1400139eb
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400139ff
mov rdx, qword [rdi]
mov rax, qword [rax + 0x20]
call qword [case.0x140066ca3.0]
mov esi, eax
test eax, eax
js 0x140013b6d
cmp byte [rbp + 0xb0], bl
je 0x140013a4a
cmp qword [r14 + 0x18], rbx
jne 0x140013a22
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013a36
mov rdx, qword [rdi]
mov rax, qword [rax + 0x38]
call qword [case.0x140066ca3.0]
mov esi, eax
test eax, eax
js 0x140013b6d
mov byte [rsp + 0x78], bl
cmp qword [r15 + 0x10], rbx
je 0x140013b48
cmp qword [r12 + 0x10], rbx
je 0x140013b48
mov qword [rbp - 0x78], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013a7c
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp - 0x78]
call fcn.14000e6ec
nop
lea rcx, [rbp - 0x78]
call fcn.140078f54
mov rsi, r12
cmp qword [r12 + 0x18], 8
jb 0x140013aa2
mov rsi, qword [r12]
mov rbx, r15
cmp qword [r15 + 0x18], 8
jb 0x140013aaf
mov rbx, qword [r15]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013abc
mov rdx, qword [rdi]
lea rcx, [rsp + 0x58]
call fcn.14007905c
nop
cmp qword [rax + 0x18], 8
jb 0x140013ad1
mov rax, qword [rax]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov r9, rax
call fcn.14000f6d8
nop
lea rcx, [rsp + 0x58]
call fcn.140007e18
xor ebx, ebx
cmp qword [r14 + 0x18], rbx
jne 0x140013af7
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
cmp qword [r12 + 0x18], 8
jb 0x140013b0a
mov r12, qword [r12]
cmp qword [r15 + 0x18], 8
jb 0x140013b14
mov r15, qword [r15]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013b21
mov rdx, qword [rdi]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x20], r8
mov r9, r12
mov r8, r15
mov rax, qword [rax + 0x68]
call qword [case.0x140066ca3.0]
mov esi, eax
lea rcx, [rbp - 0x78]
call fcn.140007e18
jmp 0x140013b5a
lea r8, [rsp + 0x78]
mov rdx, rdi
mov rcx, r14
call fcn.140010f7c
mov esi, eax
test esi, esi
js 0x140013b6d
cmp byte [rsp + 0x78], bl
jne 0x140013cb7
mov esi, 0xc02500bd
cmp qword [r14 + 0x18], rbx
jne 0x140013b74
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013b88
mov rdx, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x140066ca3.0]
mov qword [rbp - 0x78], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140013bab
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp - 0x78]
call fcn.14000e6ec
mov qword [rbp - 0x58], 0xffffffff80000001
mov byte [rbp - 0x50], bl
cmp qword [r14 + 0x18], rbx
jne 0x140013bca
int3
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
lea rdx, [rbp - 0x78]
mov rax, qword [rax + 0x80]
call qword [case.0x140066ca3.0]
cmp qword [rdi + 0x18], 8
jb 0x140013bec
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.14007905c
nop
cmp qword [rax + 0x18], 8
jb 0x140013c04
mov rax, qword [rax]
lea rcx, str.filePath
mov qword [rbp - 8], rcx
mov dword [rbp - 0x10], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov qword [rbp], rax
test rax, rax
je 0x140013c2e
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], bx
jne 0x140013c23
jmp 0x140013c31
mov rcx, rbx
mov qword [rbp + 8], rcx
lea rax, str.result
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x10], 3
mov dword [rbp + 0x20], esi
mov eax, 2
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0x34ac12ea
lea rax, [0x140314218]
mov qword [rsp + 0x20], rax
lea r9, str.DownloaderUtil::VerifyFile
mov r8d, 0x504
lea rdx, str.D:dbs_shodct1010_172940_0cmdzclientonedriveProductCommonUpdateDownloaderUtilDownloaderUtil.cpp
lea rcx, [rbp - 0x48]
call fcn.14007697c
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x48]
call fcn.140078b60
call fcn.140078614
nop
lea rcx, [rsp + 0x58]
call fcn.140007e18
nop
lea rcx, [rbp - 0x78]
call fcn.140007e18
mov eax, esi
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140020ae0
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80004005
call fcn.140007be8
nop
mov ecx, 0x80004005
call fcn.140007be8
int3