Function at 0x1402f7f43
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xbb0e5210
pushf
not eax
add eax, 0xbb0dadd4
xor eax, 0xe9b0d551
rol eax, 0x47
popf
pushf
not eax
add eax, 0xd2fea5a2
xor eax, 0xab375c96
rol eax, 0x1f
popf
cmp eax, 4
jne 0x1402f7f80
popf
pop rax
jmp 0x1402f8275
cmp eax, 0
jne 0x1402f7f8f
popf
pop rax
jmp 0x1402f8007
cmp eax, 3
jne 0x1402f7f9e
popf
pop rax
jmp 0x1402f81cd
cmp eax, 1
jne 0x1402f7fad
popf
pop rax
jmp 0x1402f80b8
cmp eax, 5
jne 0x1402f7fbc
popf
pop rax
jmp 0x1402f82ed
cmp eax, 7
jne 0x1402f7fcb
popf
pop rax
jmp 0x1402f847e
cmp eax, 6
jne 0x1402f7fda
popf
pop rax
jmp 0x1402f83df
cmp eax, 2
jne 0x1402f7fe9
popf
pop rax
jmp 0x1402f8139
cmp eax, 9
jne 0x1402f7ff8
popf
pop rax
jmp 0x1402f84c2
cmp eax, 8
jne 0x1402f8007
popf
pop rax
jmp 0x1402f84c0
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x1402f805f
push rax
pushf
mov eax, 0x1af1e24c
pushf
not eax
add eax, 0xedf1ae78
xor eax, 0x81fe1673
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xfd443b0a
xor eax, 0xfa50e942
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x8502f0c4
xor eax, 0xf4d0ed7e
rol eax, 0xbd
popf
jmp 0x1402f7f71
push rax
pushf
mov eax, 0xbf062f10
pushf
not eax
add eax, 0xd62e06cb
xor eax, 0xacd32640
rol eax, 0x18
popf
pushf
not eax
add eax, 0xa062bcfb
xor eax, 0xf81f8b18
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x9e392829
xor eax, 0xfcf93ca1
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xc3d0343f
xor eax, 0xb29dd89e
rol eax, 0xe
popf
jmp 0x1402f7f71
mov al, 0x8d
pushf
not al
add al, 0x3e
xor al, 0x3d
rol al, 0x71
popf
pushf
not al
add al, 0x7c
xor al, 0xd9
rol al, 0x20
popf
pushf
not al
add al, 0x99
xor al, 0x21
rol al, 0x11
popf
pushf
not al
add al, 0x76
xor al, 0x7c
rol al, 0xbe
popf
jmp 0x1402f84c2
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x1402f8187
push rax
pushf
mov eax, 0xc51da2b6
pushf
not eax
add eax, 0xfe1ee803
xor eax, 0xf40a76d7
rol eax, 0x24
popf
pushf
not eax
add eax, 0xaaf358ea
xor eax, 0xd50f2ee1
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xbbeec402
xor eax, 0xac9f9239
rol eax, 0x3e
popf
jmp 0x1402f7f71
push rax
pushf
mov eax, 0x5b843667
pushf
not eax
add eax, 0xd1335662
xor eax, 0xc9700c98
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x96dadbb1
xor eax, 0xefc06fb9
rol eax, 0xce
popf
pushf
not eax
add eax, 0xe28483fc
xor eax, 0xbbc4befa
rol eax, 0x33
popf
jmp 0x1402f7f71
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1402f822f
push rax
pushf
mov eax, 0x56b658d0
pushf
not eax
add eax, 0x97882856
xor eax, 0xa2e726e3
rol eax, 0x87
popf
pushf
not eax
add eax, 0xfcb1887e
xor eax, 0xbc93b139
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xaf63dcfd
xor eax, 0x90fb60c8
rol eax, 0x67
popf
pushf
not eax
add eax, 0xd74fd540
xor eax, 0x9b2abff7
rol eax, 0xcb
popf
jmp 0x1402f7f71
push rax
pushf
mov eax, 0x262e4f75
pushf
not eax
add eax, 0xf2e165fe
xor eax, 0xc80b7665
rol eax, 0x61
popf
pushf
not eax
add eax, 0xfc9e2e5a
xor eax, 0xa2bd21d2
rol eax, 0x91
popf
pushf
not eax
add eax, 0x8ada5155
xor eax, 0xef7faf34
rol eax, 0xbb
popf
jmp 0x1402f7f71
mov ecx, dword [rcx + 0x18]
nop
call fcn.140264225
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1402f82ba
push rax
pushf
mov eax, 0x1c9ca2d5
pushf
not eax
add eax, 0xbd2bc5c0
xor eax, 0xafcd2d59
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x953c5f6f
xor eax, 0xc85f5730
rol eax, 0x8b
popf
jmp 0x1402f7f71
push rax
pushf
mov eax, 0x80a805e4
pushf
not eax
add eax, 0x8106a124
xor eax, 0xa28501cd
rol eax, 0xad
popf
pushf
not eax
add eax, 0xf51e6356
xor eax, 0x81c80efa
rol eax, 0x10
popf
jmp 0x1402f7f71
mov r9d, 0x173ab3ad
pushf
not r9d
add r9d, 0xb8ef712a
xor r9d, 0x9d91d5e2
rol r9d, 0x55
popf
pushf
not r9d
add r9d, 0x8323b484
xor r9d, 0xe8f32d18
rol r9d, 0xc6
popf
pushf
not r9d
add r9d, 0xaa75de58
xor r9d, 0xbeb52abe
rol r9d, 0x5d
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x1402f8349
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1402f8386
push rax
pushf
mov eax, 0x2e143338
pushf
not eax
add eax, 0x8b690fd2
xor eax, 0xb41db42b
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xa5c1d9a7
xor eax, 0x8f36ab13
rol eax, 0x62
popf
jmp 0x1402f7f71
push rax
pushf
mov eax, 0x3f54846
pushf
not eax
add eax, 0xee08f697
xor eax, 0xd99deaa2
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xcd31b105
xor eax, 0xf68252af
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xf11f878e
xor eax, 0xca034a59
rol eax, 0x93
popf
pushf
not eax
add eax, 0xedda359c
xor eax, 0xce66eea8
rol eax, 0xb4
popf
jmp 0x1402f7f71
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1402f83e8
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1402f844b
push rax
pushf
mov eax, 0x7231c770
pushf
not eax
add eax, 0xa7d2c15b
xor eax, 0xc98ae10e
rol eax, 0x19
popf
pushf
not eax
add eax, 0xc9879db2
xor eax, 0xab255519
rol eax, 0x23
popf
pushf
not eax
add eax, 0xe5dbf7c4
xor eax, 0xd8b711f0
rol eax, 0x45
popf
pushf
not eax
add eax, 0xa06e82e0
xor eax, 0x992e21ac
rol eax, 0x4a
popf
jmp 0x1402f7f71
push rax
pushf
mov eax, 0xd56caf7
pushf
not eax
add eax, 0xd208e5e4
xor eax, 0xe6f73598
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xb79477bb
xor eax, 0xa671e100
rol eax, 0x1b
popf
jmp 0x1402f7f71
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x1402f84c2
xor al, al
add rsp, 0x20
pop rbx
ret