Function at 0x1402ffba0
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xe1193190
pushf
not eax
add eax, 0x904dcb03
xor eax, 0xbb3dfd4e
rol eax, 0xf
popf
pushf
not eax
add eax, 0xff88ce29
xor eax, 0x996e54ec
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xf9e8afbf
xor eax, 0xf557e6ea
rol eax, 0x27
popf
cmp eax, 4
jne 0x1402ffbf0
popf
pop rax
jmp 0x1402ffeb2
cmp eax, 0
jne 0x1402ffbff
popf
pop rax
jmp 0x1402ffc77
cmp eax, 3
jne 0x1402ffc0e
popf
pop rax
jmp 0x1402ffe30
cmp eax, 1
jne 0x1402ffc1d
popf
pop rax
jmp 0x1402ffd15
cmp eax, 5
jne 0x1402ffc2c
popf
pop rax
jmp 0x1402fff63
cmp eax, 7
jne 0x1402ffc3b
popf
pop rax
jmp 0x1403000d4
cmp eax, 6
jne 0x1402ffc4a
popf
pop rax
jmp 0x14030005b
cmp eax, 2
jne 0x1402ffc59
popf
pop rax
jmp 0x1402ffd89
cmp eax, 9
jne 0x1402ffc68
popf
pop rax
jmp 0x140300118
cmp eax, 8
jne 0x1402ffc77
popf
pop rax
jmp 0x140300116
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x1402ffce2
push rax
pushf
mov eax, 0x5b8d726b
pushf
not eax
add eax, 0xd8b969ac
xor eax, 0xb266822f
rol eax, 0x69
popf
pushf
not eax
add eax, 0xf9cef419
xor eax, 0xbc342013
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xbcc143eb
xor eax, 0xc295e1ce
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa88c255c
xor eax, 0xa618f73d
rol eax, 0xf6
popf
jmp 0x1402ffbe1
push rax
pushf
mov eax, 0xae5882a3
pushf
not eax
add eax, 0xdd2866c1
xor eax, 0x98ceff5d
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xd0bba85a
xor eax, 0xc7e1a2ad
rol eax, 0x7f
popf
jmp 0x1402ffbe1
mov al, 0x8d
pushf
not al
add al, 0x1d
xor al, 7
rol al, 0x69
popf
pushf
not al
add al, 0x3c
xor al, 0xc6
rol al, 0x66
popf
pushf
not al
add al, 0x8e
xor al, 0x72
rol al, 0xfb
popf
jmp 0x140300118
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x1402ffdd7
push rax
pushf
mov eax, 0xd8fd2965
pushf
not eax
add eax, 0xabe3541a
xor eax, 0xc34fcd7d
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xddb7b11c
xor eax, 0xb91fe5cd
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x9e9cdfa4
xor eax, 0xa5aee24b
rol eax, 7
popf
jmp 0x1402ffbe1
push rax
pushf
mov eax, 0x3dd81158
pushf
not eax
add eax, 0xd1edd8ac
xor eax, 0xb619793a
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xe1cbc0eb
xor eax, 0xe6e24edf
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xbab482d7
xor eax, 0x810e489e
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xca5a515b
xor eax, 0xbde513a1
rol eax, 0x15
popf
jmp 0x1402ffbe1
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1402ffe7f
push rax
pushf
mov eax, 0x2e17364b
pushf
not eax
add eax, 0x83a08c33
xor eax, 0x98edd4f7
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x9a869949
xor eax, 0xaf5d71fd
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xe13150b5
xor eax, 0xa8634f95
rol eax, 0x2c
popf
jmp 0x1402ffbe1
push rax
pushf
mov eax, 0x18bfae73
pushf
not eax
add eax, 0xfdac69d9
xor eax, 0x9c26a35d
rol eax, 0x25
popf
pushf
not eax
add eax, 0xf8b086c2
xor eax, 0xdf6d6fb2
rol eax, 0x77
popf
jmp 0x1402ffbe1
mov ecx, dword [rcx + 0x18]
nop
call fcn.14018fe84
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1402fff0a
push rax
pushf
mov eax, 0xe037716f
pushf
not eax
add eax, 0xa7f44dc9
xor eax, 0xe0086ba2
rol eax, 6
popf
pushf
not eax
add eax, 0xf11aa9a0
xor eax, 0xfb9d72bb
rol eax, 0x60
popf
pushf
not eax
add eax, 0x88fec2ec
xor eax, 0x908ceade
rol eax, 0x3b
popf
jmp 0x1402ffbe1
push rax
pushf
mov eax, 0xb7dc576a
pushf
not eax
add eax, 0xed867627
xor eax, 0xdc75fcaa
rol eax, 0x88
popf
pushf
not eax
add eax, 0xbcee20e8
xor eax, 0xe8e87c37
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xdce9150c
xor eax, 0xacd9ef81
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb69d40f4
xor eax, 0x89582ed8
rol eax, 0xb6
popf
jmp 0x1402ffbe1
mov r9d, 0x434b1aa9
pushf
not r9d
add r9d, 0xb712bd78
xor r9d, 0xe5b9f8b3
rol r9d, 0xe0
popf
pushf
not r9d
add r9d, 0xbffa9bf2
xor r9d, 0x9711e417
rol r9d, 0xa
popf
pushf
not r9d
add r9d, 0xbb455ccc
xor r9d, 0xe76a51da
rol r9d, 0x31
popf
pushf
not r9d
add r9d, 0xb9661ca4
xor r9d, 0x85545518
rol r9d, 0xc6
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x1402fffd8
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x140300015
push rax
pushf
mov eax, 0xee9566f9
pushf
not eax
add eax, 0xb924c52f
xor eax, 0xfbd2e23c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xf215ac6c
xor eax, 0xbb2587a6
rol eax, 0x63
popf
jmp 0x1402ffbe1
push rax
pushf
mov eax, 0x34d6fe16
pushf
not eax
add eax, 0xa00304e2
xor eax, 0xbbfabc5e
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xd1084061
xor eax, 0x8b9d7ac6
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa8b4f8a0
xor eax, 0xdc42b5e4
rol eax, 0x26
popf
jmp 0x1402ffbe1
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x140300064
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1403000a1
push rax
pushf
mov eax, 0xda036173
pushf
not eax
add eax, 0xa9da069a
xor eax, 0xea015992
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xc1203b96
xor eax, 0xc1898edb
rol eax, 0xb5
popf
jmp 0x1402ffbe1
push rax
pushf
mov eax, 0xd0c4abce
pushf
not eax
add eax, 0xa4913358
xor eax, 0xe024b88c
rol eax, 9
popf
pushf
not eax
add eax, 0xa7f094f8
xor eax, 0xd7729a90
rol eax, 0xb7
popf
jmp 0x1402ffbe1
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x140300118
xor al, al
add rsp, 0x20
pop rbx
ret