Function at 0x1400c9570
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x14049f3c0]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov rdi, r8
mov r13d, edx
mov qword [rsp + 0x50], rcx
mov rsi, qword [rbp + 0x3e0]
test r9d, r9d
je 0x1400c95ca
cmp r9d, 1
je 0x1400c95c2
xor r14d, r14d
jmp 0x1400c95d0
mov r14d, 0xebb67
jmp 0x1400c95d0
mov r14d, 0xe1965
mov rcx, qword [r8 + 0x10]
test rcx, rcx
je 0x1400c997d
test r14d, r14d
je 0x1400c997d
lea rcx, [rbp + 0x200]
call fcn.1400b1470
nop
lea rcx, [rbp + 0x200]
call fcn.1400b1f70
mov r15d, 2
cmp eax, 6
cmove r14d, r15d
xor edx, edx
mov r8d, 0x240
lea rcx, [rbp - 0x40]
call fcn.14030b3a0
lea r12, str.DebugUtils
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.140031ed0
nop
lea r8, [rbp - 0x80]
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.1400c9a00
nop
lea rcx, [rbp - 0x80]
call fcn.1400166f0
lea rdx, str.dbghelp.dll
lea rcx, [rbp - 0x80]
call fcn.140031ed0
nop
xor r9d, r9d
lea r8, [rbp - 0x80]
lea edx, [r15 - 1]
lea rcx, [rbp - 0x40]
call fcn.1400a6ea0
movzx ebx, al
lea rcx, [rbp - 0x80]
call fcn.1400166f0
test bl, bl
jne 0x1400c96c2
test rsi, rsi
je 0x1400c96bb
mov rax, qword [rsi]
lea rcx, str.Unable_to_load_dbghelp.dll
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 1
mov r9d, 0x187
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call qword [rax + 0x18]
xor bl, bl
jmp 0x1400c996e
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rcx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x1400c96d6
mov rcx, qword [rdi]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
lea rax, vtable.mb::common::system::ScopedAny_void____ptr64__int____cdecl___void____ptr64___int___cdecl_CloseHandle_void____ptr64___2__0__0_.0
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
lea rcx, [r15 + 1]
test rcx, 0xfffffffffffffffe
jne 0x1400c977e
test rsi, rsi
je 0x1400c98e0
mov rcx, qword [rsi]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rdi + 0x18], 7
jbe 0x1400c973c
mov rdi, qword [rdi]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], rdi
lea rax, str.Unable_to_open_dump_file__ls:__u
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 2
mov r9d, 0x18f
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call rbx
xor bl, bl
jmp 0x1400c995a
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x5c], 0
mov ebx, dword [rbp + 0x3d0]
test ebx, ebx
je 0x1400c97a4
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, rbx
mov qword [rbp - 0x58], rax
xor ebx, ebx
jmp 0x1400c97aa
xor ebx, ebx
mov qword [rbp - 0x58], rbx
lea rax, [0x1400c94e0]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
mov rcx, qword [rbp + 0x78]
add rcx, 0x30
mov qword [rsp + 0x58], rcx
call fcn.14013d370
nop
mov rax, qword [rbp + 0x80]
test rax, rax
je 0x1400c9806
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9d, r14d
mov r8, r15
mov edx, r13d
mov rcx, qword [rsp + 0x50]
call rax
mov ebx, eax
jmp 0x1400c980c
mov ebx, dword [rbp + 0x88]
lea rcx, [rsp + 0x58]
call fcn.14005f960
test ebx, ebx
jne 0x1400c98e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
lea r13, vtable._com_error.0
mov qword [rbp - 0x80], r13
mov dword [rbp - 0x78], eax
movdqu xmmword [rbp - 0x70], xmm0
test rsi, rsi
je 0x1400c98a0
mov rax, qword [rsi]
mov r14, qword [rax + 0x20]
lea rcx, [rbp - 0x80]
call fcn.140061390
cmp qword [rdi + 0x18], 7
jbe 0x1400c985f
mov rdi, qword [rdi]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x38], rdi
lea rax, str.MiniDumpWriteDump_failed_to_write_dump_file__ls:__u___ws
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 2
mov r9d, 0x1a2
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call r14
mov byte [rsp + 0x70], 1
mov r9d, 1
lea r8, [rsp + 0x70]
lea edx, [r9 + 3]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
nop
mov qword [rbp - 0x80], r13
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1400c98d1
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x1400c98e0
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor bl, bl
jmp 0x1400c995a
mov qword [rsp + 0x78], 0
lea rdx, [rsp + 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test rsi, rsi
je 0x1400c9958
mov rax, qword [rsi]
mov r10, qword [rax + 0x20]
cmp qword [rdi + 0x18], 7
jbe 0x1400c9911
mov rdi, qword [rdi]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], r13d
lea rax, str.Successfully_wrote_dump_of_process___u__to__ls:___I64u_bytes_
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 4
mov r9d, 0x1ae
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call r10
mov bl, 1
lea rcx, [r15 - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400c996e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x40]
call fcn.1400c9f20
nop
movzx eax, bl
jmp 0x1400c99ca
test rsi, rsi
je 0x1400c99c8
mov rax, qword [rsi]
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x38], ecx
lea rcx, str.Invalid_parameter:__u__u
mov qword [rsp + 0x30], rcx
lea r12, str.DebugUtils
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 1
mov r9d, 0x178
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonDebugUtils.cpp
lea rdx, str.DumpProcess
mov rcx, rsi
call qword [rax + 0x20]
xor al, al
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.1402ba9b0
mov rbx, qword [rsp + 0x4c8]
add rsp, 0x470
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret