Function at 0x1406dc345
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xac3c42d4
pushf
not eax
add eax, 0x973d36b4
xor eax, 0xcadf3c4c
rol eax, 0
popf
pushf
not eax
add eax, 0xaeb99929
xor eax, 0x8cd9c995
rol eax, 0xed
popf
cmp eax, 4
jne 0x1406dc382
popf
pop rax
jmp 0x1406dc670
cmp eax, 0
jne 0x1406dc391
popf
pop rax
jmp 0x1406dc409
cmp eax, 3
jne 0x1406dc3a0
popf
pop rax
jmp 0x1406dc5c8
cmp eax, 1
jne 0x1406dc3af
popf
pop rax
jmp 0x1406dc4a7
cmp eax, 5
jne 0x1406dc3be
popf
pop rax
jmp 0x1406dc70e
cmp eax, 7
jne 0x1406dc3cd
popf
pop rax
jmp 0x1406dc8b8
cmp eax, 6
jne 0x1406dc3dc
popf
pop rax
jmp 0x1406dc800
cmp eax, 2
jne 0x1406dc3eb
popf
pop rax
jmp 0x1406dc50e
cmp eax, 9
jne 0x1406dc3fa
popf
pop rax
jmp 0x1406dc922
cmp eax, 8
jne 0x1406dc409
popf
pop rax
jmp 0x1406dc920
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x1406dc461
push rax
pushf
mov eax, 0xbfdf2201
pushf
not eax
add eax, 0xa80a51de
xor eax, 0x96205403
rol eax, 9
popf
pushf
not eax
add eax, 0xeec78cf4
xor eax, 0xddb7bd7d
rol eax, 0x20
popf
pushf
not eax
add eax, 0xf3e0fb36
xor eax, 0xe8688aab
rol eax, 0x28
popf
jmp 0x1406dc373
push rax
pushf
mov eax, 0x8f8c8cdc
pushf
not eax
add eax, 0xb7a5bde6
xor eax, 0xc1b19654
rol eax, 0x44
popf
pushf
not eax
add eax, 0xde966f51
xor eax, 0xce46d9e4
rol eax, 0xed
popf
pushf
not eax
add eax, 0x8507be22
xor eax, 0xe0f46cd8
rol eax, 0x12
popf
jmp 0x1406dc373
mov al, 0x6b
pushf
not al
add al, 0x74
xor al, 0x9d
rol al, 0x6c
popf
pushf
not al
add al, 0xe
xor al, 0xa4
rol al, 0x1c
popf
jmp 0x1406dc922
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x1406dc56f
push rax
pushf
mov eax, 0x1098930
pushf
not eax
add eax, 0xcb92edc6
xor eax, 0x8cf1d515
rol eax, 0x64
popf
pushf
not eax
add eax, 0xef0df3f9
xor eax, 0xd77b40a5
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8ddbd29a
xor eax, 0xe27f8bc8
rol eax, 0x60
popf
pushf
not eax
add eax, 0x9b3b21be
xor eax, 0x8a4616d5
rol eax, 0x79
popf
jmp 0x1406dc373
push rax
pushf
mov eax, 0xb5bbde2
pushf
not eax
add eax, 0xda533604
xor eax, 0xd32706e2
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf7010569
xor eax, 0xa1203f8f
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf368aab6
xor eax, 0xe731de6e
rol eax, 0xe
popf
pushf
not eax
add eax, 0xe39c983c
xor eax, 0xb8f15b3d
rol eax, 0x8f
popf
jmp 0x1406dc373
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1406dc62a
push rax
pushf
mov eax, 0xccd80e53
pushf
not eax
add eax, 0xef1e40e3
xor eax, 0xc3f07950
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xdc536592
xor eax, 0xf19adcc0
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa2e3b390
xor eax, 0x9df9a9e3
rol eax, 0x37
popf
pushf
not eax
add eax, 0x90121341
xor eax, 0x94e41570
rol eax, 0
popf
jmp 0x1406dc373
push rax
pushf
mov eax, 0x268b1048
pushf
not eax
add eax, 0x9c2c0d5c
xor eax, 0x9eb38f84
rol eax, 0x64
popf
pushf
not eax
add eax, 0xcb480d47
xor eax, 0xfd190c85
rol eax, 0x71
popf
pushf
not eax
add eax, 0xbd2da77f
xor eax, 0xdf91d96b
rol eax, 0x2b
popf
jmp 0x1406dc373
mov ecx, dword [rcx + 0x18]
nop
call fcn.140616af5
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1406dc6b5
push rax
pushf
mov eax, 0xf33cb3ca
pushf
not eax
add eax, 0x9ef876dd
xor eax, 0xaebf6d64
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x931b38ad
xor eax, 0xe7f31339
rol eax, 0x48
popf
jmp 0x1406dc373
push rax
pushf
mov eax, 0x66c78d49
pushf
not eax
add eax, 0xf085556a
xor eax, 0xacc5c2a9
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xbcae4794
xor eax, 0xcda44b15
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xf1f25b90
xor eax, 0xad5ee2a5
rol eax, 0x52
popf
pushf
not eax
add eax, 0xa87c5dd6
xor eax, 0x83da96a0
rol eax, 0xb8
popf
jmp 0x1406dc373
and qword [rsp + 0x38], 0
lea r8, [rsp + 0x38]
mov r9d, 0x470581f6
pushf
not r9d
add r9d, 0xb4a87201
xor r9d, 0x869a96ef
rol r9d, 0xef
popf
pushf
not r9d
add r9d, 0xead3bb43
xor r9d, 0xb760c526
rol r9d, 0x59
popf
xor edx, edx
mov rcx, rax
jmp 0x1406dc757
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1406dc7a7
push rax
pushf
mov eax, 0xfd73aa47
pushf
not eax
add eax, 0xe2106459
xor eax, 0xc1056a0a
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x982659af
xor eax, 0x8f2891f2
rol eax, 0xca
popf
pushf
not eax
add eax, 0xfbcc8738
xor eax, 0x8988fad2
rol eax, 0xaf
popf
jmp 0x1406dc373
push rax
pushf
mov eax, 0x3d086f93
pushf
not eax
add eax, 0xb2038e50
xor eax, 0xdf9dcefd
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x9dcfb724
xor eax, 0x97f082f8
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xfd8bcfcc
xor eax, 0xa06aee8b
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xde254622
xor eax, 0xbcebfda1
rol eax, 0xbe
popf
jmp 0x1406dc373
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1406dc80f
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1406dc85f
push rax
pushf
mov eax, 0xb1e64049
pushf
not eax
add eax, 0xbf1a85e9
xor eax, 0xe67823a0
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xa244f86a
xor eax, 0xf995a914
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xcfdd68a6
xor eax, 0xbaf07e93
rol eax, 0x7a
popf
jmp 0x1406dc373
push rax
pushf
mov eax, 0xf491d11a
pushf
not eax
add eax, 0xba09535b
xor eax, 0xff5084fc
rol eax, 0x64
popf
pushf
not eax
add eax, 0x9d2d3568
xor eax, 0xdd2cdcf1
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x9aee6c50
xor eax, 0x99f89f61
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xafed7aef
xor eax, 0xd1610a42
rol eax, 0x1b
popf
jmp 0x1406dc373
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x1406dc922
xor al, al
add rsp, 0x20
pop rbx
ret