Function at 0x100025d4c
Capabilities:
Get file size

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x10005c100]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov r12, r9
mov rsi, r8
mov rbx, rdx
mov qword [rsp + 0x68], rcx
xor r14d, r14d
and qword [rsp + 0x78], r14
test rcx, rcx
je 0x100025d98
mov rax, qword [rcx + 0x1c8]
mov qword [rsp + 0x78], rax
and qword [rsp + 0x58], r14
xor r13d, r13d
and dword [rsp + 0x40], r13d
xor eax, eax
mov dword [rsp + 0x44], eax
and dword [rsp + 0x50], eax
mov dword [rsp + 0x54], eax
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test r12, r12
jne 0x100025dcf
lea eax, [r13 + 1]
jmp 0x10002606e
and qword [rsp + 0x28], r13
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x54]
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x100025ea0
mov rdi, r12
mov rbx, rsi
and dword [rsp + 0x80], r13d
xor edx, edx
lea r8d, [rdx + 0x2c]
lea rcx, [rsp + 0x84]
call fcn.100039740
and dword [rsp + 0x38], r13d
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [rsp + 0xa8]
mov rax, rsi
cqo
idiv rcx
test rdx, rdx
je 0x100025e60
xor edx, edx
mov eax, esi
div dword [rsp + 0xa8]
mov r15d, edx
mov dword [rsp + 0x38], r15d
sub rbx, r15
lea rdi, [rdx + r12]
mov eax, edi
mov r8, rbx
shr r8, 0x20
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov edx, 4
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x100025ea0
mov r15d, 1
mov r14d, r15d
mov eax, dword [rsp + 0x38]
add rax, rdi
jmp 0x100025ea6
xor eax, eax
lea r15d, [rax + 1]
mov rbx, qword [rsp + 0x40]
cmp rbx, r12
jge 0x100026025
mov rdi, rax
add rbx, 0x32
mov qword [rsp + 0x40], rbx
add rax, 0x32
mov qword [rsp + 0x48], rax
cmp dword [0x10005d5f4], 0
jne 0x100025efd
cmp qword [rdi + 8], rsi
jg 0x100025ef6
mov rax, qword [rdi]
movabs rcx, 0xffffffffffffff
and rax, rcx
add rax, qword [rdi + 8]
cmp rax, rsi
jle 0x100025ef8
mov rax, qword [rsp + 0x48]
jmp 0x100025eab
mov rax, qword [rsp + 0x48]
test byte [rdi + 7], 0xf0
je 0x100025f05
jmp 0x100025eab
test byte [rdi + 7], r15b
je 0x100025f37
mov rdx, rdi
mov rcx, qword [rsp + 0x68]
call fcn.100026218
test rax, rax
jne 0x100025f37
xor r14d, r14d
mov dword [rsp + 0x30], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov dword [rsp + 0x34], eax
jmp 0x100026025
lea rcx, [0x10005d5e0]
mov rdx, qword [rdi + 0x1e]
cmp rdx, qword [rcx]
jne 0x100025f5d
mov rdx, qword [rdi + 0x26]
cmp rdx, qword [rcx + 8]
jne 0x100025f5d
mov edx, dword [rdi + 0x2e]
cmp edx, dword [rcx + 0x10]
jne 0x100025f5d
xor ecx, ecx
jmp 0x100025f62
sbb ecx, ecx
sbb ecx, 0xffffffff
xor eax, eax
test ecx, ecx
cmove eax, r15d
test eax, eax
je 0x100025f78
mov rax, qword [rsp + 0x48]
jmp 0x100025eab
mov rdx, rdi
mov rcx, qword [rsp + 0x68]
call fcn.100026218
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x100025fa6
xor r14d, r14d
mov dword [rsp + 0x30], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov dword [rsp + 0x34], eax
jmp 0x100026025
test byte [rax + 0xf], 2
je 0x100025fee
xor edi, edi
mov dword [rsp + 0x70], edi
cmp edi, dword [rax + 0x24]
jae 0x100025fee
mov rdx, rax
mov rcx, qword [rsp + 0x68]
call fcn.100025a9c
test rax, rax
jne 0x100025fe0
xor r14d, r14d
mov dword [rsp + 0x30], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov dword [rsp + 0x34], eax
jmp 0x100026025
add edi, r15d
mov dword [rsp + 0x70], edi
mov rax, qword [rsp + 0x40]
jmp 0x100025fb2
lea rdx, [rax + 0x28]
mov r8, rax
mov rcx, qword [rsp + 0x78]
call fcn.1000252c0
test rax, rax
jne 0x10002601b
xor r14d, r14d
mov dword [rsp + 0x30], r14d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov dword [rsp + 0x34], eax
jmp 0x100026025
mov rax, qword [rsp + 0x48]
jmp 0x100025eab
jmp 0x10002603a
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x10002604a
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x10002605d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13d, r13d
je 0x10002606b
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, r14d
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1000391d0
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret