Function at 0x1403644c3
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0x83b06ca7
pushf
not eax
add eax, 0x94547979
xor eax, 0xf55b368a
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x9db2aa70
xor eax, 0xbe83bf2e
rol eax, 2
popf
pushf
not eax
add eax, 0xaf0b4bc0
xor eax, 0xf22d2166
rol eax, 0xd9
popf
cmp eax, 4
jne 0x140364513
popf
pop rax
jmp 0x1403647c0
cmp eax, 0
jne 0x140364522
popf
pop rax
jmp 0x14036459a
cmp eax, 3
jne 0x140364531
popf
pop rax
jmp 0x140364718
cmp eax, 1
jne 0x140364540
popf
pop rax
jmp 0x140364624
cmp eax, 5
jne 0x14036454f
popf
pop rax
jmp 0x140364882
cmp eax, 7
jne 0x14036455e
popf
pop rax
jmp 0x140364a3f
cmp eax, 6
jne 0x14036456d
popf
pop rax
jmp 0x1403649a0
cmp eax, 2
jne 0x14036457c
popf
pop rax
jmp 0x140364698
cmp eax, 9
jne 0x14036458b
popf
pop rax
jmp 0x140364a96
cmp eax, 8
jne 0x14036459a
popf
pop rax
jmp 0x140364a94
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
shr edx, 3
test dl, 1
je 0x1403645f1
push rax
pushf
mov eax, 0x6ba55d33
pushf
not eax
add eax, 0xea35c40e
xor eax, 0xa194c23a
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x84ba6d38
xor eax, 0xbb95c86e
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xbe0dc195
xor eax, 0xb9105318
rol eax, 0xfe
popf
jmp 0x140364504
push rax
pushf
mov eax, 0x49cbefc7
pushf
not eax
add eax, 0xcb32e291
xor eax, 0x9d9da821
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xd857804b
xor eax, 0xb7e392df
rol eax, 0xe2
popf
jmp 0x140364504
mov al, 0xa4
pushf
not al
add al, 0xef
xor al, 0xde
rol al, 0xe0
popf
pushf
not al
add al, 0x4e
xor al, 0x76
rol al, 0x49
popf
pushf
not al
add al, 0xa4
xor al, 0x24
rol al, 3
popf
jmp 0x140364a96
mov eax, dword [rcx + 0x14]
test al, 0xc0
je 0x1403646d2
push rax
pushf
mov eax, 0x60c01d5d
pushf
not eax
add eax, 0xa9c2eaab
xor eax, 0xa16f25d0
rol eax, 0x59
popf
pushf
not eax
add eax, 0xce1367af
xor eax, 0x92428bde
rol eax, 0
popf
jmp 0x140364504
push rax
pushf
mov eax, 0x486cf962
pushf
not eax
add eax, 0xf0072c7b
xor eax, 0xce1f55aa
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xed597f4a
xor eax, 0x9d1c1da7
rol eax, 0x89
popf
pushf
not eax
add eax, 0xab534fd9
xor eax, 0xe2e2dab9
rol eax, 0x7b
popf
jmp 0x140364504
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x14036477a
push rax
pushf
mov eax, 0x107558a5
pushf
not eax
add eax, 0xbb3a9ef4
xor eax, 0xe5cc5e44
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xdea2195c
xor eax, 0xf185bcff
rol eax, 0x73
popf
pushf
not eax
add eax, 0xdb3511ce
xor eax, 0xf062d552
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xef3b6235
xor eax, 0x840860be
rol eax, 0x76
popf
jmp 0x140364504
push rax
pushf
mov eax, 0x40dd713b
pushf
not eax
add eax, 0x98a7ea1d
xor eax, 0x9c50f1e1
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xb7124712
xor eax, 0xb4918c4f
rol eax, 0x21
popf
pushf
not eax
add eax, 0xc30c00d6
xor eax, 0xd20c617d
rol eax, 3
popf
jmp 0x140364504
mov ecx, dword [rcx + 0x18]
call fcn.1401e191f
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14036482a
push rax
pushf
mov eax, 0xa49057d3
pushf
not eax
add eax, 0x96d05160
xor eax, 0x85540e60
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xc16fa299
xor eax, 0xa44697c7
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x85119b65
xor eax, 0xae9f8bd7
rol eax, 0x75
popf
pushf
not eax
add eax, 0xf102adc2
xor eax, 0xc54515de
rol eax, 0xc
popf
jmp 0x140364504
push rax
pushf
mov eax, 0x126c0767
pushf
not eax
add eax, 0xe46c8526
xor eax, 0x8272fd6d
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc82e1239
xor eax, 0x8a91aa80
rol eax, 0x97
popf
pushf
not eax
add eax, 0x9faa9a9d
xor eax, 0x972dbab4
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xb48ed711
xor eax, 0x861b73d5
rol eax, 1
popf
jmp 0x140364504
mov r9d, 0xdd220a6a
pushf
not r9d
add r9d, 0xfa4e2a9e
xor r9d, 0x8340fa63
rol r9d, 0xae
popf
pushf
not r9d
add r9d, 0xcc8e6e3b
xor r9d, 0xe887c956
rol r9d, 0xc
popf
pushf
not r9d
add r9d, 0xedb7bcc4
xor r9d, 0xe7f6612e
rol r9d, 0x3e
popf
pushf
not r9d
add r9d, 0x96d87d58
xor r9d, 0xda052ba7
rol r9d, 0xda
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x1403648f7
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x140364947
push rax
pushf
mov eax, 0xe9ddbcc8
pushf
not eax
add eax, 0xa557dc95
xor eax, 0xffa63279
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf3a48cfe
xor eax, 0xc6de81e0
rol eax, 0x37
popf
pushf
not eax
add eax, 0xed32b670
xor eax, 0x84eae4da
rol eax, 0x45
popf
jmp 0x140364504
push rax
pushf
mov eax, 0x2a5933dc
pushf
not eax
add eax, 0xe98c6eca
xor eax, 0xf8bb7803
rol eax, 0x45
popf
pushf
not eax
add eax, 0x9573247e
xor eax, 0xb66f21e7
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xac0f0726
xor eax, 0xd435dbd7
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xd58fae87
xor eax, 0xc3e764cb
rol eax, 0xce
popf
jmp 0x140364504
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1403649a9
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1403649f9
push rax
pushf
mov eax, 0x494a1fcf
pushf
not eax
add eax, 0x87615aca
xor eax, 0xd051d5c1
rol eax, 0x84
popf
pushf
not eax
add eax, 0x98d2294f
xor eax, 0xb18cfe14
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xbb0d6674
xor eax, 0xda7bea81
rol eax, 0x2c
popf
jmp 0x140364504
push rax
pushf
mov eax, 0xcfc5b76e
pushf
not eax
add eax, 0xe57e838b
xor eax, 0xfbd6e1b6
rol eax, 0x62
popf
pushf
not eax
add eax, 0xb3c32244
xor eax, 0xbec77b45
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xe255522a
xor eax, 0xab841ee5
rol eax, 0x2c
popf
jmp 0x140364504
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x140364a96
xor al, al
add rsp, 0x20
pop rbx
ret