Function at 0x140127dce
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0x936bc90e
pushf
not eax
add eax, 0x1b653803
xor eax, 0x4fed249a
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x6f349d0e
xor eax, 0x43d4e2ac
rol eax, 0x59
popf
pushf
not eax
add eax, 0x4cd7e5f8
xor eax, 0x607eeba6
rol eax, 0xff
popf
pushf
not eax
add eax, 0x2276728
xor eax, 0x14dc1fa6
rol eax, 0x78
popf
cmp eax, 9
jne 0x140127e31
popf
pop rax
jmp 0x140128396
cmp eax, 0
jne 0x140127e40
popf
pop rax
jmp 0x140127eb8
cmp eax, 3
jne 0x140127e4f
popf
pop rax
jmp 0x140128038
cmp eax, 4
jne 0x140127e5e
popf
pop rax
jmp 0x1401280a7
cmp eax, 8
jne 0x140127e6d
popf
pop rax
jmp 0x14012833b
cmp eax, 1
jne 0x140127e7c
popf
pop rax
jmp 0x140127f43
cmp eax, 7
jne 0x140127e8b
popf
pop rax
jmp 0x1401282d0
cmp eax, 5
jne 0x140127e9a
popf
pop rax
jmp 0x140128158
cmp eax, 2
jne 0x140127ea9
popf
pop rax
jmp 0x140127fa4
cmp eax, 6
jne 0x140127eb8
popf
pop rax
jmp 0x14012821e
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x140127efd
push rax
pushf
mov eax, 0xcedeb02d
pushf
not eax
add eax, 0x4dd24c5d
xor eax, 0x2917b976
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x7c3537de
xor eax, 0x3182a815
rol eax, 0xb3
popf
jmp 0x140127e22
push rax
pushf
mov eax, 0xb04270f9
pushf
not eax
add eax, 0x54df7031
xor eax, 0x7ab9edbb
rol eax, 0x25
popf
pushf
not eax
add eax, 0x2ad5afe
xor eax, 0x521f837e
rol eax, 0x68
popf
pushf
not eax
add eax, 0x18d5ec60
xor eax, 0x54bcff3
rol eax, 0xa9
popf
jmp 0x140127e22
mov al, 0x9e
pushf
not al
add al, 0x72
xor al, 0x66
rol al, 0x82
popf
pushf
not al
add al, 0x6d
xor al, 0x72
rol al, 0x7f
popf
pushf
not al
add al, 0x34
xor al, 0x41
rol al, 0x89
popf
jmp 0x140128396
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x140127ff2
push rax
pushf
mov eax, 0xce3f6a5c
pushf
not eax
add eax, 0x7cd50cfc
xor eax, 0x56c1b79
rol eax, 0x39
popf
pushf
not eax
add eax, 0x485ef2ed
xor eax, 0x18c6b0e0
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x2135441e
xor eax, 0x3adc640a
rol eax, 0xb4
popf
jmp 0x140127e22
push rax
pushf
mov eax, 0xfdc48549
pushf
not eax
add eax, 0x7b084290
xor eax, 0x356c7b52
rol eax, 0x82
popf
pushf
not eax
add eax, 0x693eb8f4
xor eax, 0x44999d16
rol eax, 0x93
popf
pushf
not eax
add eax, 0x23681ee6
xor eax, 0x35c7b3b4
rol eax, 0xf8
popf
jmp 0x140127e22
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x140128074
push rax
pushf
mov eax, 0xeee4fcf8
pushf
not eax
add eax, 0x67e0306a
xor eax, 0x4c21b36d
rol eax, 0x52
popf
pushf
not eax
add eax, 0x1c835315
xor eax, 0x1d127faa
rol eax, 0xca
popf
jmp 0x140127e22
push rax
pushf
mov eax, 0x86db4201
pushf
not eax
add eax, 0x3da9e159
xor eax, 0x20e9234e
rol eax, 0xee
popf
pushf
not eax
add eax, 0x6a4785cc
xor eax, 0x7b452042
rol eax, 0x71
popf
jmp 0x140127e22
mov ecx, dword [rcx + 0x18]
nop
call fcn.140104fc3
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140128112
push rax
pushf
mov eax, 0x57eadd9e
pushf
not eax
add eax, 0x5ab5b731
xor eax, 0x4d0aecdf
rol eax, 0x46
popf
pushf
not eax
add eax, 0x175c882d
xor eax, 0x2e7d49c8
rol eax, 0x12
popf
pushf
not eax
add eax, 0x10bc566
xor eax, 0x1b0b64cc
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x2e490a4d
xor eax, 0x2262f824
rol eax, 0x54
popf
jmp 0x140127e22
push rax
pushf
mov eax, 0x58ec5f8
pushf
not eax
add eax, 0x23155906
xor eax, 0x78560fe7
rol eax, 0x32
popf
pushf
not eax
add eax, 0x48a98f68
xor eax, 0x2f1b0ee1
rol eax, 0x38
popf
pushf
not eax
add eax, 0x33c0092f
xor eax, 0x6ecc2438
rol eax, 0x10
popf
jmp 0x140127e22
mov r9d, 0xdd67c74b
pushf
not r9d
add r9d, 0x33c9de1
xor r9d, 0x632ed452
rol r9d, 0xd0
popf
pushf
not r9d
add r9d, 0xd689520
xor r9d, 0xaa15e25
rol r9d, 0xb4
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x14012819b
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1401281eb
push rax
pushf
mov eax, 0x4c9b5340
pushf
not eax
add eax, 0x1b1b1397
xor eax, 0xb8ea24a
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x747c9b1
xor eax, 0x7c7ca31e
rol eax, 2
popf
pushf
not eax
add eax, 0x3ba0307b
xor eax, 0x3c498e10
rol eax, 0x2e
popf
jmp 0x140127e22
push rax
pushf
mov eax, 0x93b84e51
pushf
not eax
add eax, 0x50a8310d
xor eax, 0x3ce17e0c
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x4d4a84d1
xor eax, 0x4c60b95a
rol eax, 0x82
popf
jmp 0x140127e22
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x140128227
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x14012828a
push rax
pushf
mov eax, 0xafd5828b
pushf
not eax
add eax, 0x3bbd3eb9
xor eax, 0x34b5d4d7
rol eax, 0x98
popf
pushf
not eax
add eax, 0x57dda26
xor eax, 0x7c3a20ea
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x1e1ef6c2
xor eax, 0x5a06c40d
rol eax, 6
popf
pushf
not eax
add eax, 0x45201026
xor eax, 0x5089be2a
rol eax, 0xf0
popf
jmp 0x140127e22
push rax
pushf
mov eax, 0xb0fbd8bf
pushf
not eax
add eax, 0x359ee798
xor eax, 0x11e0e2
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x428d314d
xor eax, 0x78b16416
rol eax, 0x93
popf
pushf
not eax
add eax, 0x78e98fee
xor eax, 0x102e3626
rol eax, 0x1b
popf
jmp 0x140127e22
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x140128396
xor al, al
push rax
pushf
mov eax, 0x4530a71c
pushf
not eax
add eax, 0x49775991
xor eax, 0x3d5c4701
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x1fb7422
xor eax, 0x1b8d02c6
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x4e2e9e13
xor eax, 0x44d31828
rol eax, 0xab
popf
pushf
not eax
add eax, 0x50e4fcee
xor eax, 0x2181e14f
rol eax, 0xa9
popf
jmp 0x140127e22
add rsp, 0x20
pop rbx
ret