Function at 0x1401181b9
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0x48aea3e5
pushf
not eax
add eax, 0x1f395d38
xor eax, 0x31671fac
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x43916aef
xor eax, 0x7ba34f88
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x32b5527f
xor eax, 0x4f0f334e
rol eax, 0x69
popf
cmp eax, 8
jne 0x140118209
popf
pop rax
jmp 0x14011874c
cmp eax, 0
jne 0x140118218
popf
pop rax
jmp 0x140118290
cmp eax, 9
jne 0x140118227
popf
pop rax
jmp 0x140118794
cmp eax, 3
jne 0x140118236
popf
pop rax
jmp 0x140118456
cmp eax, 5
jne 0x140118245
popf
pop rax
jmp 0x14011859c
cmp eax, 7
jne 0x140118254
popf
pop rax
jmp 0x1401186f4
cmp eax, 2
jne 0x140118263
popf
pop rax
jmp 0x1401183c2
cmp eax, 4
jne 0x140118272
popf
pop rax
jmp 0x1401184eb
cmp eax, 6
jne 0x140118281
popf
pop rax
jmp 0x140118668
cmp eax, 1
jne 0x140118290
popf
pop rax
jmp 0x14011832e
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x1401182d5
push rax
pushf
mov eax, 0xa4820fc
pushf
not eax
add eax, 0x39b93247
xor eax, 0x5c846844
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x53b1518b
xor eax, 0x6c71b9fa
rol eax, 0xd2
popf
jmp 0x1401181fa
push rax
pushf
mov eax, 0x3f1249bf
pushf
not eax
add eax, 0xe602989
xor eax, 0x32e1c5f9
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x54db7313
xor eax, 0x188b522d
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x665e5d1
xor eax, 0x5a6260b9
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x1185ceec
xor eax, 0x2d417985
rol eax, 0xf1
popf
jmp 0x1401181fa
mov al, 0xc9
pushf
not al
add al, 0x34
xor al, 0x42
rol al, 0x1d
popf
pushf
not al
add al, 0x23
xor al, 0x4f
rol al, 0xcd
popf
pushf
not al
add al, 0x23
xor al, 9
rol al, 0x46
popf
pushf
not al
add al, 0x33
xor al, 0x3e
rol al, 9
popf
jmp 0x140118794
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x140118410
push rax
pushf
mov eax, 0x123d2a26
pushf
not eax
add eax, 0x368dff48
xor eax, 0x5b6ec27
rol eax, 0x52
popf
pushf
not eax
add eax, 0x1090cc49
xor eax, 0x4ea2e8e8
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x399a4498
xor eax, 0x1d3eef0c
rol eax, 0x64
popf
jmp 0x1401181fa
push rax
pushf
mov eax, 0x626daaa2
pushf
not eax
add eax, 0x3e5c9395
xor eax, 0x762ede25
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x7aad0a23
xor eax, 0x4a8719af
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x13a27242
xor eax, 0x67e9fc
rol eax, 0x58
popf
jmp 0x1401181fa
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x1401184b8
push rax
pushf
mov eax, 0x6109944e
pushf
not eax
add eax, 0x7d453d15
xor eax, 0x13f69b54
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x5e7c989b
xor eax, 0x413a73e8
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x5d6b8a44
xor eax, 0x4188990c
rol eax, 0x69
popf
pushf
not eax
add eax, 0x1172936b
xor eax, 0x7711d830
rol eax, 0xfd
popf
jmp 0x1401181fa
push rax
pushf
mov eax, 0x540b3ba5
pushf
not eax
add eax, 0x31686e74
xor eax, 0x58a43d4b
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x29d5a2e8
xor eax, 0xd4de025
rol eax, 0x46
popf
jmp 0x1401181fa
mov ecx, dword [rcx + 0x18]
nop
call fcn.1400f5512
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140118556
push rax
pushf
mov eax, 0x8f0811ef
pushf
not eax
add eax, 0x55c86053
xor eax, 0x2b5336b5
rol eax, 0x19
popf
pushf
not eax
add eax, 0x7d62814c
xor eax, 0x472bce6d
rol eax, 0xed
popf
pushf
not eax
add eax, 0x508ea5da
xor eax, 0x6df70e72
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x10b565e7
xor eax, 0x18700a7d
rol eax, 0xd
popf
jmp 0x1401181fa
push rax
pushf
mov eax, 0xb43c7909
pushf
not eax
add eax, 0x7a6394a4
xor eax, 0x69739ac0
rol eax, 0x24
popf
pushf
not eax
add eax, 0x661cc7ab
xor eax, 0x5ce839ee
rol eax, 0x47
popf
pushf
not eax
add eax, 0x6448eb73
xor eax, 0x4e02f45c
rol eax, 0xc8
popf
jmp 0x1401181fa
mov r9d, 0x40abbf62
pushf
not r9d
add r9d, 0x68ce8a96
xor r9d, 0x4336a597
rol r9d, 0xf1
popf
pushf
not r9d
add r9d, 0x9e99392
xor r9d, 0x1973aa61
rol r9d, 0x7a
popf
pushf
not r9d
add r9d, 0x4b73eca7
xor r9d, 0x2a1ca04a
rol r9d, 0x49
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x1401185f8
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x140118635
push rax
pushf
mov eax, 0xcc58e801
pushf
not eax
add eax, 0xe391cf1
xor eax, 0x41f4cf59
rol eax, 0x37
popf
pushf
not eax
add eax, 0x4305eced
xor eax, 0x6806e26f
rol eax, 0x71
popf
jmp 0x1401181fa
push rax
pushf
mov eax, 0x2c8621cd
pushf
not eax
add eax, 0xbc0c9ca
xor eax, 0x1f73bb0e
rol eax, 0x19
popf
pushf
not eax
add eax, 0xf007bde
xor eax, 0x297fe984
rol eax, 0x5e
popf
jmp 0x1401181fa
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x140118671
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x1401186ae
push rax
pushf
mov eax, 0xaa2850bf
pushf
not eax
add eax, 0x30bd64c0
xor eax, 0x6c9b55c2
rol eax, 0x74
popf
pushf
not eax
add eax, 0x5a4491ef
xor eax, 0x3e2df10a
rol eax, 0xcd
popf
jmp 0x1401181fa
push rax
pushf
mov eax, 0xd73fb714
pushf
not eax
add eax, 0x3235dcc0
xor eax, 0x28abb0a0
rol eax, 0x22
popf
pushf
not eax
add eax, 0x137f6c0e
xor eax, 0x8aafa3
rol eax, 0x76
popf
pushf
not eax
add eax, 0x215fa6c0
xor eax, 0x108d85d1
rol eax, 0x94
popf
jmp 0x1401181fa
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x140118794
xor al, al
push rax
pushf
mov eax, 0xfad08baf
pushf
not eax
add eax, 0x384c7761
xor eax, 0x465c5ff1
rol eax, 0
popf
pushf
not eax
add eax, 0x7a5d4afe
xor eax, 0x613d5c0
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x340ab4da
xor eax, 0x50f850a2
rol eax, 0x69
popf
jmp 0x1401181fa
add rsp, 0x20
pop rbx
ret