Function at 0x1401b32fc
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xf262d8b
pushf
not eax
add eax, 0xdcad5ccf
xor eax, 0xd5ba1337
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xd9fe02b2
xor eax, 0xf65d40c8
rol eax, 0xd1
popf
cmp eax, 4
jne 0x1401b3339
popf
pop rax
jmp 0x1401b35f8
cmp eax, 0
jne 0x1401b3348
popf
pop rax
jmp 0x1401b33c0
cmp eax, 3
jne 0x1401b3357
popf
pop rax
jmp 0x1401b3563
cmp eax, 1
jne 0x1401b3366
popf
pop rax
jmp 0x1401b3470
cmp eax, 5
jne 0x1401b3375
popf
pop rax
jmp 0x1401b366f
cmp eax, 7
jne 0x1401b3384
popf
pop rax
jmp 0x1401b3800
cmp eax, 6
jne 0x1401b3393
popf
pop rax
jmp 0x1401b374e
cmp eax, 2
jne 0x1401b33a2
popf
pop rax
jmp 0x1401b34d1
cmp eax, 9
jne 0x1401b33b1
popf
pop rax
jmp 0x1401b386a
cmp eax, 8
jne 0x1401b33c0
popf
pop rax
jmp 0x1401b3868
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
shr edx, 3
test dl, 1
je 0x1401b3417
push rax
pushf
mov eax, 0xae80e21f
pushf
not eax
add eax, 0xdce1c711
xor eax, 0xc353259a
rol eax, 0x94
popf
pushf
not eax
add eax, 0xf5e306cd
xor eax, 0xc08c1d83
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xe7470e62
xor eax, 0x8b20cf31
rol eax, 0x9b
popf
jmp 0x1401b332a
push rax
pushf
mov eax, 0x799ec68d
pushf
not eax
add eax, 0xb69a675a
xor eax, 0xe35f5b2b
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xea55947f
xor eax, 0xc2b5608e
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd65119fa
xor eax, 0xfb12c053
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xd348e7eb
xor eax, 0xc87ebf1a
rol eax, 0xbc
popf
jmp 0x1401b332a
mov al, 0xe6
pushf
not al
add al, 0x8b
xor al, 0xb6
rol al, 0x44
popf
pushf
not al
add al, 0x33
xor al, 0xa
rol al, 0x4f
popf
pushf
not al
add al, 0xc
xor al, 0xfe
rol al, 0xd9
popf
jmp 0x1401b386a
mov eax, dword [rcx + 0x14]
test al, 0xc0
je 0x1401b350b
push rax
pushf
mov eax, 0x5cc2ebf4
pushf
not eax
add eax, 0xf3072a06
xor eax, 0xb84280ae
rol eax, 9
popf
pushf
not eax
add eax, 0xdcf0b1d5
xor eax, 0xcf733360
rol eax, 0xbd
popf
jmp 0x1401b332a
push rax
pushf
mov eax, 0xe4e232e3
pushf
not eax
add eax, 0xfb3c5561
xor eax, 0xedc98832
rol eax, 1
popf
pushf
not eax
add eax, 0x9932447b
xor eax, 0xdf3d57fd
rol eax, 0xea
popf
pushf
not eax
add eax, 0x8fbef57a
xor eax, 0x92be6da6
rol eax, 0x99
popf
pushf
not eax
add eax, 0xd8b6005f
xor eax, 0x92f13ff2
rol eax, 0xb
popf
jmp 0x1401b332a
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1401b35b2
push rax
pushf
mov eax, 0xe631c25a
pushf
not eax
add eax, 0xd3e4719f
xor eax, 0x8ce82482
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xce9deab7
xor eax, 0xa13097b4
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xe1f2e58b
xor eax, 0xfaad93e9
rol eax, 0xa5
popf
jmp 0x1401b332a
push rax
pushf
mov eax, 0xadeb1550
pushf
not eax
add eax, 0xd00e40ef
xor eax, 0xd9d412f3
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xf47b4607
xor eax, 0xbce253b2
rol eax, 0xba
popf
pushf
not eax
add eax, 0x85abe332
xor eax, 0x938c26cb
rol eax, 0x8a
popf
jmp 0x1401b332a
mov ecx, dword [rcx + 0x18]
call fcn.1400cc39a
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1401b363c
push rax
pushf
mov eax, 0x9857da2
pushf
not eax
add eax, 0xd4053c7b
xor eax, 0xa69ced18
rol eax, 3
popf
pushf
not eax
add eax, 0xf3f8bba9
xor eax, 0x8cd41da5
rol eax, 0xcf
popf
jmp 0x1401b332a
push rax
pushf
mov eax, 0xb0d52c02
pushf
not eax
add eax, 0xdc13ab57
xor eax, 0xec627f47
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xe0540f43
xor eax, 0x91769f42
rol eax, 0xcd
popf
jmp 0x1401b332a
mov r9d, 0xaf19aca7
pushf
not r9d
add r9d, 0xe0b6c88c
xor r9d, 0x8d5bdf6e
rol r9d, 0x23
popf
pushf
not r9d
add r9d, 0xeb026af0
xor r9d, 0x8800395c
rol r9d, 0x69
popf
pushf
not r9d
add r9d, 0x9286751a
xor r9d, 0xf886e800
rol r9d, 0x68
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x1401b36cb
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1401b371b
push rax
pushf
mov eax, 0xdce41fd2
pushf
not eax
add eax, 0x882c2273
xor eax, 0xdd1501e6
rol eax, 4
popf
pushf
not eax
add eax, 0xe6a11356
xor eax, 0xd0dd3e07
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd6778594
xor eax, 0xac75c9b6
rol eax, 0x7b
popf
jmp 0x1401b332a
push rax
pushf
mov eax, 0x901a92ed
pushf
not eax
add eax, 0xf682053f
xor eax, 0x879fe521
rol eax, 0x60
popf
pushf
not eax
add eax, 0xae69986f
xor eax, 0xcc7100ff
rol eax, 0x63
popf
jmp 0x1401b332a
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x1401b3757
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1401b37ba
push rax
pushf
mov eax, 0x852f411d
pushf
not eax
add eax, 0xaa05ccbb
xor eax, 0xb78de802
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xe8c339d3
xor eax, 0x811accac
rol eax, 8
popf
pushf
not eax
add eax, 0xec05d7ec
xor eax, 0xa4358df0
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x99819f19
xor eax, 0x8cc37b56
rol eax, 0x36
popf
jmp 0x1401b332a
push rax
pushf
mov eax, 0xadc5a08c
pushf
not eax
add eax, 0xc4836e71
xor eax, 0xf25bf027
rol eax, 0x43
popf
pushf
not eax
add eax, 0xb56b9fb8
xor eax, 0xb9f49015
rol eax, 0x81
popf
pushf
not eax
add eax, 0xf190fb3f
xor eax, 0xa1f6b824
rol eax, 0x46
popf
jmp 0x1401b332a
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x1401b386a
xor al, al
add rsp, 0x20
pop rbx
ret