Function at 0x14007b0d0
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rax, qword [0x14022e2a0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rcx
lea rdi, [rcx + 0x68]
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14007b116
mov rcx, qword [rdi]
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r14 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14007b4b1
lea rdx, [rbp - 0x39]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
je 0x14007b4ab
mov rsi, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test rsi, rsi
jle 0x14007b4b3
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x21], xmm1
mov rdx, qword [str.NGLClientWF_]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r14b
jne 0x14007b197
lea rcx, [rbp - 0x31]
call fcn.140066b60
nop
mov r8d, 7
lea rdx, str.default
lea rcx, [rbp - 0x31]
call fcn.14006b5f0
mov r8d, 4
lea rdx, str..log
lea rcx, [rbp - 0x31]
call fcn.14006b5f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r14
mov qword [rbp + 7], 7
mov word [rbp - 0x11], r14w
lea rcx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rcx, qword [rbp - 0x31]
lea rdx, [rbp - 0x11]
call fcn.140084900
lea r10, [rbp - 0x11]
mov r14, qword [rbp - 0x11]
mov r12, qword [rbp + 7]
cmp r12, 8
cmovae r10, r14
mov r13, rdi
cmp qword [rdi + 0x18], 8
jb 0x14007b226
mov r13, qword [rdi]
mov rax, qword [rdi + 0x10]
mov r11, qword [rbp - 1]
cmp r11, rax
ja 0x14007b276
sub rax, r11
test r11, r11
je 0x14007b358
lea rbx, [rax*2]
mov rax, r13
nop word [rax + rax]
lea rcx, [rbx + 2]
add rcx, r13
sub rcx, rax
sar rcx, 1
je 0x14007b276
movzx edx, word [r10]
cmp word [rax], dx
je 0x14007b311
add rax, 2
sub rcx, 1
jne 0x14007b263
cmp qword [r15 + 0x130], 0
je 0x14007b2aa
lea rbx, [r15 + 0x98]
lea rcx, [rbx + 0x18]
call fcn.140076c50
test rax, rax
jne 0x14007b2aa
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov edx, dword [rcx + 0x10]
or edx, 2
call fcn.14006b920
mov rdx, rdi
lea rcx, [rbp + 0xf]
call fcn.14006a110
nop
lea rcx, [rbp + 0xf]
call fcn.140080140
lea rdx, [rbp + 0xf]
mov rcx, rdi
call fcn.14008df70
test al, al
je 0x14007b41a
cmp qword [rdi + 0x18], 8
jb 0x14007b2de
mov rdi, qword [rdi]
lea rbx, [r15 + 0x98]
mov r8d, SafeArrayGetLBound
mov rdx, rdi
lea rcx, [rbx + 0x18]
call fcn.140076d60
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
test rax, rax
je 0x14007b3ec
xor edx, edx
jmp 0x14007b3f2
test rax, rax
je 0x14007b276
mov r8, r11
mov rdx, r10
test r11, r11
je 0x14007b348
mov r9, rax
sub r9, r10
nop dword [rax + rax]
movzx ecx, word [rdx]
cmp word [r9 + rdx], cx
jne 0x14007b3e3
add rdx, 2
sub r8, 1
jne 0x14007b330
sub rax, r13
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14007b276
cmp rsi, 0x200000
jge 0x14007b276
cmp r12, 8
jb 0x14007b3a1
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14007b398
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b4e9
mov rcx, r14
call fcn.14013b70c
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x14007b3dc
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b3d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b4e3
call fcn.14013b70c
xor al, al
jmp 0x14007b4b6
add rax, 2
jmp 0x14007b250
mov edx, dword [rcx + 0x10]
or edx, 2
call fcn.14006b920
lea rcx, [rbx + 0x18]
call fcn.140076c50
test rax, rax
jne 0x14007b41a
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov edx, dword [rcx + 0x10]
or edx, 2
call fcn.14006b920
mov rax, qword [r15]
lea rdx, [r15 + 0x98]
mov rcx, r15
call qword [rax]
movzx ebx, al
lea rcx, [rbp + 0xf]
call fcn.140066870
nop
cmp r12, 8
jb 0x14007b472
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14007b469
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b4e9
mov rcx, r14
call fcn.14013b70c
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x14007b4b3
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b4a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b4e3
call fcn.14013b70c
jmp 0x14007b4b3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
movzx eax, bl
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14013b390
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401408a0
nop
call fcn.1401408a0
nop
int3