Function at 0x14010b734
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rbx, rdx
movaps xmmword [rsp + 0x50], xmm6
xor edx, edx
mov r15d, r8d
movzx r12d, r8w
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov r13, r9
mov dword [rsp + 0xb0], edx
mov r14, rcx
mov ebp, 0x2000
test rbx, rbx
jne 0x14010b783
mov esi, 0x80004003
jmp 0x14010b9b5
cmp r12d, 4
jae 0x14010b9b0
mov ecx, 0x7f0000
mov eax, r15d
and eax, 0xffff0000
or eax, ecx
cmp eax, ecx
jne 0x14010b9b0
mov eax, r15d
mov ecx, 0x4002100
and eax, 0x10000
mov edi, 1
mov eax, r15d
cmovne ebp, ecx
and eax, 0x40000
cmovne edi, edx
bt r15d, 0x15
jae 0x14010b7ce
or edi, 4
bt r15d, 0x16
jae 0x14010b7d8
or edi, 2
cmp r12d, 2
je 0x14010b7ed
call fcn.1400ae994
xor edx, edx
test al, al
je 0x14010b7ed
bts ebp, 0x1e
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], dx
jne 0x14010b7f1
movsxd rdx, eax
mov r8, r13
mov rcx, rbx
call fcn.14009da1c
mov qword [rsp + 0x40], rax
xor edx, edx
mov qword [rsp + 0x48], r13
mov rsi, rax
movaps xmm6, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm6
test rax, rax
jne 0x14010b831
mov esi, 0x8007000e
jmp 0x14010b9b5
lea rcx, [0x14024e738]
mov dword [rsp + 0x38], 1
mov eax, dword [rcx + r12*8 + 4]
xor r9d, r9d
mov qword [rsp + 0x30], rdx
mov r8d, edi
mov edx, dword [rcx + r12*8]
mov rcx, rsi
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], eax
call fcn.140112018
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14010b8f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x14010b8c5
test edi, edi
je 0x14010b8c5
lea rcx, [0x14024e738]
mov dword [rsp + 0x38], 1
mov eax, dword [rcx + r12*8 + 4]
or edi, 2
and qword [rsp + 0x30], 0
xor r9d, r9d
mov edx, dword [rcx + r12*8]
mov r8d, edi
mov rcx, rsi
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], eax
call fcn.140112018
mov rbx, rax
mov dword [rsp + 0xb0], 1
cmp rbx, 0xffffffffffffffff
jne 0x14010b8f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
jne 0x14010b9b5
mov esi, 0x8000ffff
jmp 0x14010b9b5
lea rdx, [rsp + 0xa8]
mov rcx, rbx
call sub.KERNEL32.dll_GetFileSizeEx
xor edx, edx
test eax, eax
jne 0x14010b921
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
jne 0x14010b99f
mov rax, qword [rsp + 0xa8]
test rax, rax
jns 0x14010b935
mov esi, 0x8000ffff
jmp 0x14010b99f
mov ecx, edx
mov qword [r14 + 0x88], rax
test r12d, r12d
mov esi, edx
setne cl
shr ebp, 0x1e
mov dword [r14 + 0x48], ecx
and ebp, 1
mov ecx, dword [rsp + 0xb0]
mov dword [r14 + 0x4c], ebp
mov dword [r14 + 0x50], ecx
mov rax, qword [r14 + 0x40]
mov qword [r14 + 0x40], rbx
mov rbx, rax
bt r15d, 0x11
jb 0x14010b988
xor r8d, r8d
lea rcx, [r14 + 0x58]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [r14 + 0x80], 1
movups xmm0, xmmword [r14 + 0x90]
movdqu xmmword [r14 + 0x90], xmm6
movdqu xmmword [rsp + 0x40], xmm0
cmp rbx, 0xffffffffffffffff
je 0x14010b9b5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14010b9b5
mov esi, 0x80070057
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14010b9c9
mov rdx, qword [rsp + 0x48]
call fcn.14009ffd0
mov rbx, qword [rsp + 0xa0]
mov eax, esi
movaps xmm6, xmmword [rsp + 0x50]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret