Function at 0x1400c2470
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x1404953c0]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov rdi, r8
mov r13d, edx
mov qword [rsp + 0x50], rcx
mov rsi, qword [rbp + 0x3e0]
test r9d, r9d
je 0x1400c24ca
cmp r9d, 1
je 0x1400c24c2
xor r14d, r14d
jmp 0x1400c24d0
mov r14d, 0xebb67
jmp 0x1400c24d0
mov r14d, 0xe1965
mov rcx, qword [r8 + 0x10]
test rcx, rcx
je 0x1400c287d
test r14d, r14d
je 0x1400c287d
lea rcx, [rbp + 0x200]
call fcn.1400aa270
nop
lea rcx, [rbp + 0x200]
call fcn.1400aad70
mov r15d, 2
cmp eax, 6
cmove r14d, r15d
xor edx, edx
mov r8d, 0x240
lea rcx, [rbp - 0x40]
call fcn.140306610
lea r12, str.DebugUtils
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.140030cb0
nop
lea r8, [rbp - 0x80]
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.1400c2900
nop
lea rcx, [rbp - 0x80]
call fcn.1400166f0
lea rdx, str.dbghelp.dll
lea rcx, [rbp - 0x80]
call fcn.140030cb0
nop
xor r9d, r9d
lea r8, [rbp - 0x80]
lea edx, [r15 - 1]
lea rcx, [rbp - 0x40]
call fcn.14009f6c0
movzx ebx, al
lea rcx, [rbp - 0x80]
call fcn.1400166f0
test bl, bl
jne 0x1400c25c2
test rsi, rsi
je 0x1400c25bb
mov rax, qword [rsi]
lea rcx, str.Unable_to_load_dbghelp.dll
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 1
mov r9d, 0x17b
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call qword [rax + 0x18]
xor bl, bl
jmp 0x1400c286e
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rcx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x1400c25d6
mov rcx, qword [rdi]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
lea rax, vtable.mb::common::system::ScopedAny_void____ptr64__int____cdecl___void____ptr64___int___cdecl_CloseHandle_void____ptr64___2__0__0_.0
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
lea rcx, [r15 + 1]
test rcx, 0xfffffffffffffffe
jne 0x1400c267e
test rsi, rsi
je 0x1400c27e0
mov rcx, qword [rsi]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rdi + 0x18], 7
jbe 0x1400c263c
mov rdi, qword [rdi]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], rdi
lea rax, str.Unable_to_open_dump_file__ls:__u
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 2
mov r9d, 0x183
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call rbx
xor bl, bl
jmp 0x1400c285a
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x5c], 0
mov ebx, dword [rbp + 0x3d0]
test ebx, ebx
je 0x1400c26a4
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, rbx
mov qword [rbp - 0x58], rax
xor ebx, ebx
jmp 0x1400c26aa
xor ebx, ebx
mov qword [rbp - 0x58], rbx
lea rax, [0x1400c23e0]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
mov rcx, qword [rbp + 0x78]
add rcx, 0x30
mov qword [rsp + 0x58], rcx
call fcn.140138a20
nop
mov rax, qword [rbp + 0x80]
test rax, rax
je 0x1400c2706
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9d, r14d
mov r8, r15
mov edx, r13d
mov rcx, qword [rsp + 0x50]
call rax
mov ebx, eax
jmp 0x1400c270c
mov ebx, dword [rbp + 0x88]
lea rcx, [rsp + 0x58]
call fcn.14005d9a0
test ebx, ebx
jne 0x1400c27e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
lea r13, vtable._com_error.0
mov qword [rbp - 0x80], r13
mov dword [rbp - 0x78], eax
movdqu xmmword [rbp - 0x70], xmm0
test rsi, rsi
je 0x1400c27a0
mov rax, qword [rsi]
mov r14, qword [rax + 0x20]
lea rcx, [rbp - 0x80]
call fcn.14005f3d0
cmp qword [rdi + 0x18], 7
jbe 0x1400c275f
mov rdi, qword [rdi]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x38], rdi
lea rax, str.MiniDumpWriteDump_failed_to_write_dump_file__ls:__u___ws
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 2
mov r9d, 0x196
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call r14
mov byte [rsp + 0x70], 1
mov r9d, 1
lea r8, [rsp + 0x70]
lea edx, [r9 + 3]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
nop
mov qword [rbp - 0x80], r13
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1400c27d1
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x1400c27e0
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor bl, bl
jmp 0x1400c285a
mov qword [rsp + 0x78], 0
lea rdx, [rsp + 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test rsi, rsi
je 0x1400c2858
mov rax, qword [rsi]
mov r10, qword [rax + 0x20]
cmp qword [rdi + 0x18], 7
jbe 0x1400c2811
mov rdi, qword [rdi]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], r13d
lea rax, str.Successfully_wrote_dump_of_process___u__to__ls:___I64u_bytes_
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 4
mov r9d, 0x1a2
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call r10
mov bl, 1
lea rcx, [r15 - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400c286e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x40]
call fcn.1400c2e20
nop
movzx eax, bl
jmp 0x1400c28ca
test rsi, rsi
je 0x1400c28c8
mov rax, qword [rsi]
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x38], ecx
lea rcx, str.Invalid_parameter:__u__u
mov qword [rsp + 0x30], rcx
lea r12, str.DebugUtils
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 1
mov r9d, 0x16c
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call qword [rax + 0x20]
xor al, al
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.1402b5c00
mov rbx, qword [rsp + 0x4c8]
add rsp, 0x470
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret