Function at 0x140009f9c
Capabilities:
Get file size

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rax - 0x768]
sub rsp, 0x840
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x14005b178]
xor rax, rsp
mov qword [rbp + 0x730], rax
mov r14, rdx
mov rbx, rcx
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
xor r13d, r13d
mov qword [rbp - 0x10], r13
mov byte [rbp + 0x330], r13b
xor edx, edx
mov r8d, 0x3ff
lea rcx, [rbp + 0x331]
call fcn.140018a40
mov byte [rbp + 0x10], r13b
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x11]
call fcn.140018a40
mov r12d, r13d
mov word [rbp + 0x120], r13w
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x122]
call fcn.140018a40
test rbx, rbx
je 0x14000a302
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r13b
jne 0x14000a056
test rax, rax
je 0x14000a302
test r14, r14
je 0x14000a302
mov edx, 0x2f
mov rcx, rbx
call fcn.140012f94
test rax, rax
je 0x14000a302
lea r8, [rax + 1]
mov ebx, 0x400
mov edx, ebx
lea rcx, [rbp + 0x330]
call fcn.1400130d8
mov edx, 0x2e
lea rcx, [rbp + 0x330]
call fcn.140014b1c
test rax, rax
je 0x14000a0b7
mov byte [rax], r13b
lea r8, [0x140055d18]
mov rdx, rbx
lea rcx, [rbp + 0x330]
call fcn.14001486c
lea r8, [rbp - 0x20]
call fcn.140008530
test eax, eax
jne 0x14000a0ee
mov rdx, rbx
lea rcx, [rbp + 0x330]
call fcn.140010a84
jmp 0x14000a302
mov rdi, qword [rbp - 0x20]
mov rbx, rdi
cmp rdi, qword [rbp - 0x18]
je 0x14000a2a8
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp + 0x120]
call fcn.140018a40
lea rdx, [rbp + 0x120]
mov rcx, qword [rbx]
call fcn.140008a1c
lea rcx, [rbp + 0x120]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x14000a12d
test rax, rax
je 0x14000a25a
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x50]
call fcn.14000a344
mov edx, 0x5c
mov rcx, qword [rax]
call fcn.140012f94
mov rsi, rax
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
cmp rcx, rax
je 0x14000a175
call fcn.1400136ac
test rsi, rsi
je 0x14000a25a
lea r8, [rsi + 1]
mov edx, 0x105
lea rcx, [rbp + 0x10]
call fcn.1400130d8
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x10]
call fcn.140010108
lea rcx, [rbp + 0x10]
cmp rcx, rax
jne 0x14000a25a
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x50]
call fcn.14000a344
nop
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
mov r8d, 1
mov rcx, qword [rax]
call fcn.140007508
mov rsi, rax
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
cmp rcx, rax
je 0x14000a1f6
call fcn.1400136ac
cmp rsi, 0xffffffffffffffff
je 0x14000a25a
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
dec eax
mov rcx, rsi
cmp eax, 0xfffffffd
ja 0x14000a254
lea r9, [rbp - 8]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
jne 0x14000a229
mov rcx, rsi
jmp 0x14000a254
lea rdx, [rbp]
lea rcx, [0x1400a1a20]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
je 0x14000a224
lea rdx, [rbp - 8]
lea rcx, [rbp]
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
mov rcx, rsi
cmp eax, 0xffffffff
je 0x14000a267
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 8
cmp rbx, qword [rbp - 0x18]
jmp 0x14000a0f9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x50]
call fcn.14000a344
mov r8, qword [rax]
mov edx, 0x105
mov rcx, r14
call fcn.1400130d8
lea rax, [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
cmp rcx, rax
je 0x14000a2a2
call fcn.1400136ac
mov r12d, 1
mov rbx, rdi
mov r14, r13
mov rsi, qword [rbp - 0x18]
sub rsi, rdi
add rsi, 7
shr rsi, 3
cmp rdi, qword [rbp - 0x18]
cmova rsi, r13
test rsi, rsi
je 0x14000a2de
mov rcx, qword [rbx]
call fcn.140012eb0
lea rbx, [rbx + 8]
inc r14
cmp r14, rsi
jne 0x14000a2ca
mov qword [rbp - 0x18], rdi
mov ebx, 0x400
mov edx, ebx
lea rcx, [rbp + 0x330]
call fcn.140010a84
mov edx, ebx
lea rcx, [rbp + 0x10]
call fcn.140010a84
jmp 0x14000a309
mov r12d, r13d
mov rdi, qword [rbp - 0x20]
test rdi, rdi
je 0x14000a316
mov rcx, rdi
call fcn.140013388
mov eax, r12d
mov rcx, qword [rbp + 0x730]
xor rcx, rsp
call fcn.140012b40
lea r11, [rsp + 0x840]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret