Function at 0x140b5668b
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xd572945f
pushf
not eax
add eax, 0xe1fb8e5c
xor eax, 0xc8bfbdfc
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xc554cf93
xor eax, 0xb9115b52
rol eax, 0x8a
popf
cmp eax, 4
jne 0x140b566c8
popf
pop rax
jmp 0x140b569d4
cmp eax, 0
jne 0x140b566d7
popf
pop rax
jmp 0x140b5674f
cmp eax, 3
jne 0x140b566e6
popf
pop rax
jmp 0x140b5692c
cmp eax, 1
jne 0x140b566f5
popf
pop rax
jmp 0x140b567ff
cmp eax, 5
jne 0x140b56704
popf
pop rax
jmp 0x140b56a71
cmp eax, 7
jne 0x140b56713
popf
pop rax
jmp 0x140b56bf4
cmp eax, 6
jne 0x140b56722
popf
pop rax
jmp 0x140b56b7c
cmp eax, 2
jne 0x140b56731
popf
pop rax
jmp 0x140b56886
cmp eax, 9
jne 0x140b56740
popf
pop rax
jmp 0x140b56c38
cmp eax, 8
jne 0x140b5674f
popf
pop rax
jmp 0x140b56c36
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
shr edx, 3
test dl, 1
je 0x140b567b9
push rax
pushf
mov eax, 0x5c692119
pushf
not eax
add eax, 0x952bf1cc
xor eax, 0xa956fd97
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x8ba23132
xor eax, 0xe44cb32d
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x8517b339
xor eax, 0x9dc412e0
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xbf630a3b
xor eax, 0xe40ee276
rol eax, 0x9b
popf
jmp 0x140b566b9
push rax
pushf
mov eax, 0xfaed49dc
pushf
not eax
add eax, 0x87882c2a
xor eax, 0xd9934176
rol eax, 0x30
popf
pushf
not eax
add eax, 0x903cce0f
xor eax, 0xef6a98b0
rol eax, 0x35
popf
pushf
not eax
add eax, 0xcdb20e81
xor eax, 0x9711c106
rol eax, 0xe0
popf
jmp 0x140b566b9
mov al, 0xc
pushf
not al
add al, 0xc8
xor al, 0xe8
rol al, 0x67
popf
pushf
not al
add al, 0xfa
xor al, 0x6d
rol al, 0x3f
popf
pushf
not al
add al, 8
xor al, 0x68
rol al, 0x28
popf
jmp 0x140b56c38
mov eax, dword [rcx + 0x14]
test al, 0xc0
je 0x140b568d3
push rax
pushf
mov eax, 0xfeaaf389
pushf
not eax
add eax, 0xb97c2c42
xor eax, 0xf708150a
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xebde3723
xor eax, 0xf013c778
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xcbd72167
xor eax, 0xb140df4e
rol eax, 0xd2
popf
jmp 0x140b566b9
push rax
pushf
mov eax, 0xc703f428
pushf
not eax
add eax, 0x97fd06f9
xor eax, 0xec6aa281
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa8be0452
xor eax, 0x8d1eb6f2
rol eax, 0
popf
pushf
not eax
add eax, 0xe177a4e1
xor eax, 0x8c7dcba8
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xb300bd23
xor eax, 0xe83057f1
rol eax, 0x2a
popf
jmp 0x140b566b9
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x140b5697b
push rax
pushf
mov eax, 0x7e281d8d
pushf
not eax
add eax, 0xd53618eb
xor eax, 0xf8425f48
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xe8b90bd2
xor eax, 0xdebdebe0
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xbf5e6f19
xor eax, 0xef8aec79
rol eax, 0xa0
popf
jmp 0x140b566b9
push rax
pushf
mov eax, 0x3b0bbed2
pushf
not eax
add eax, 0x9145d5da
xor eax, 0xf3902056
rol eax, 0x30
popf
pushf
not eax
add eax, 0xbee78f26
xor eax, 0xe718e9dd
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xec26e6c5
xor eax, 0xa69f4862
rol eax, 0x89
popf
pushf
not eax
add eax, 0xfd941e4d
xor eax, 0xda5c5184
rol eax, 0xce
popf
jmp 0x140b566b9
mov ecx, dword [rcx + 0x18]
call fcn.140af31d8
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140b56a18
push rax
pushf
mov eax, 0x1bcd9bc2
pushf
not eax
add eax, 0x836e0eea
xor eax, 0xe5f56947
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x991c2fa9
xor eax, 0xddd01f5e
rol eax, 0x25
popf
jmp 0x140b566b9
push rax
pushf
mov eax, 0x9f573b92
pushf
not eax
add eax, 0x82278cec
xor eax, 0xd2551844
rol eax, 0xad
popf
pushf
not eax
add eax, 0xe298582a
xor eax, 0xf4da3029
rol eax, 0x63
popf
pushf
not eax
add eax, 0xb41ee27e
xor eax, 0xfd6ec061
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc2310480
xor eax, 0xaf598bed
rol eax, 0x9f
popf
jmp 0x140b566b9
mov r9d, 0xa1a6907f
pushf
not r9d
add r9d, 0xffdad5ce
xor r9d, 0xd0be50d3
rol r9d, 0xf1
popf
pushf
not r9d
add r9d, 0xbb161964
xor r9d, 0xefb4ef4b
rol r9d, 0xf8
popf
pushf
not r9d
add r9d, 0x9678c289
xor r9d, 0xe8bf651e
rol r9d, 0x6e
popf
pushf
not r9d
add r9d, 0xc74cef3b
xor r9d, 0xeaf21091
rol r9d, 0xc4
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x140b56ae6
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x140b56b36
push rax
pushf
mov eax, 0xc45b46d6
pushf
not eax
add eax, 0xbf5409dc
xor eax, 0xc48f98cc
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xb119735d
xor eax, 0xa296c3c7
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x9dd66bcb
xor eax, 0xee655b5a
rol eax, 0x9c
popf
jmp 0x140b566b9
push rax
pushf
mov eax, 0xccd85bb7
pushf
not eax
add eax, 0xb04b7e5b
xor eax, 0xdad98a3a
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x97c73f00
xor eax, 0x8abad94f
rol eax, 0xa
popf
pushf
not eax
add eax, 0xe0afece3
xor eax, 0xfec255bb
rol eax, 0xa6
popf
jmp 0x140b566b9
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x140b56b85
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x140b56bc2
push rax
pushf
mov eax, 0xa4b0a749
pushf
not eax
add eax, 0xd0f52433
xor eax, 0xf506aac4
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xfc3ab754
xor eax, 0x9f23cab2
rol eax, 0xc7
popf
jmp 0x140b566b9
push rax
pushf
mov eax, 0x4d64470a
pushf
not eax
add eax, 0x9934d147
xor eax, 0xcb09ba7e
rol eax, 1
popf
pushf
not eax
add eax, 0xb75193ea
xor eax, 0xb59f336c
rol eax, 0x40
popf
jmp 0x140b566b9
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x140b56c38
xor al, al
add rsp, 0x20
pop rbx
ret