Function at 0x18016f64f
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0x521e3130
pushf
not eax
add eax, 0xb3e35185
xor eax, 0xa9f20910
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xa094ca67
xor eax, 0x8d73edc1
rol eax, 0x5c
popf
cmp eax, 4
jne 0x18016f68c
popf
pop rax
jmp 0x18016f967
cmp eax, 0
jne 0x18016f69b
popf
pop rax
jmp 0x18016f713
cmp eax, 3
jne 0x18016f6aa
popf
pop rax
jmp 0x18016f8d2
cmp eax, 1
jne 0x18016f6b9
popf
pop rax
jmp 0x18016f7c4
cmp eax, 5
jne 0x18016f6c8
popf
pop rax
jmp 0x18016fa05
cmp eax, 7
jne 0x18016f6d7
popf
pop rax
jmp 0x18016fbd5
cmp eax, 6
jne 0x18016f6e6
popf
pop rax
jmp 0x18016fb10
cmp eax, 2
jne 0x18016f6f5
popf
pop rax
jmp 0x18016f83e
cmp eax, 9
jne 0x18016f704
popf
pop rax
jmp 0x18016fc19
cmp eax, 8
jne 0x18016f713
popf
pop rax
jmp 0x18016fc17
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x18016f76b
push rax
pushf
mov eax, 0xa93f459a
pushf
not eax
add eax, 0xa5bad0a1
xor eax, 0x8e4082e4
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x93ed2edb
xor eax, 0xf357903c
rol eax, 0x40
popf
pushf
not eax
add eax, 0xaeef5369
xor eax, 0x8ccc58f8
rol eax, 0x75
popf
jmp 0x18016f67d
push rax
pushf
mov eax, 0x10852a57
pushf
not eax
add eax, 0x921efd96
xor eax, 0xcc182c4e
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xbd725c75
xor eax, 0x96abe78a
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa6e3d3b1
xor eax, 0x81c1d63f
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xbc901fa0
xor eax, 0xef0d5d20
rol eax, 0xa9
popf
jmp 0x18016f67d
mov al, 0xb8
pushf
not al
add al, 0x5e
xor al, 0xa7
rol al, 0xc5
popf
pushf
not al
add al, 0xb0
xor al, 0x4f
rol al, 0x83
popf
jmp 0x18016fc19
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x18016f89f
push rax
pushf
mov eax, 0x33b926db
pushf
not eax
add eax, 0xf2e78da5
xor eax, 0xac7165e6
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xc1825e31
xor eax, 0xf50a0f0f
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x87c2ccf6
xor eax, 0x8c00c505
rol eax, 0xce
popf
pushf
not eax
add eax, 0x9ec86f53
xor eax, 0xbbabbf2d
rol eax, 0x4e
popf
jmp 0x18016f67d
push rax
pushf
mov eax, 0x22fd23f3
pushf
not eax
add eax, 0xb70bc455
xor eax, 0xdd833524
rol eax, 0x35
popf
pushf
not eax
add eax, 0xaf55cb3f
xor eax, 0x86ac998c
rol eax, 0x63
popf
jmp 0x18016f67d
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x18016f921
push rax
pushf
mov eax, 0x38a6a54d
pushf
not eax
add eax, 0x9fb26c26
xor eax, 0xf95ccbb5
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe1fc13fb
xor eax, 0xf657482c
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xa7459c9f
xor eax, 0xfdb84605
rol eax, 0x19
popf
jmp 0x18016f67d
push rax
pushf
mov eax, 0x599d375
pushf
not eax
add eax, 0xe2d8ccc1
xor eax, 0xbbcf04b1
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xcf6f0b52
xor eax, 0xfa935485
rol eax, 0x39
popf
pushf
not eax
add eax, 0xa71d96a5
xor eax, 0xeec7d18e
rol eax, 0x7f
popf
jmp 0x18016f67d
mov ecx, dword [rcx + 0x18]
nop
call fcn.1800a67ed
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18016f9d2
push rax
pushf
mov eax, 0x2acf895d
pushf
not eax
add eax, 0xb43ebecd
xor eax, 0xa8e69570
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xed9ec48e
xor eax, 0xe9351b72
rol eax, 0xef
popf
pushf
not eax
add eax, 0x974dfd9a
xor eax, 0x8f1c5bba
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xfa19b672
xor eax, 0x80eeff90
rol eax, 0xae
popf
jmp 0x18016f67d
push rax
pushf
mov eax, 0x2b7379cb
pushf
not eax
add eax, 0xe5948c6c
xor eax, 0xb7a62d7e
rol eax, 0xda
popf
pushf
not eax
add eax, 0xd47955de
xor eax, 0xdc4338de
rol eax, 0x24
popf
jmp 0x18016f67d
mov r9d, 0x28965d26
pushf
not r9d
add r9d, 0x889886ae
xor r9d, 0xba06a131
rol r9d, 0x83
popf
pushf
not r9d
add r9d, 0x81c78f02
xor r9d, 0x80021b2f
rol r9d, 3
popf
pushf
not r9d
add r9d, 0xfcfc8637
xor r9d, 0xf9e12ca2
rol r9d, 0x55
popf
pushf
not r9d
add r9d, 0xe6e99971
xor r9d, 0xeff6d355
rol r9d, 0x56
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x18016fa7a
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x18016faca
push rax
pushf
mov eax, 0x2bd0d98c
pushf
not eax
add eax, 0xff8c981f
xor eax, 0xcc470726
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa3e47617
xor eax, 0xafc93c3f
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xc59f7f77
xor eax, 0xa558dcc5
rol eax, 0xeb
popf
jmp 0x18016f67d
push rax
pushf
mov eax, 0xbdab3153
pushf
not eax
add eax, 0xff4a03f5
xor eax, 0x9367fc12
rol eax, 0xec
popf
pushf
not eax
add eax, 0xad51fc49
xor eax, 0xf528d9e7
rol eax, 2
popf
pushf
not eax
add eax, 0xaecad9cd
xor eax, 0xf1113dd1
rol eax, 0xcc
popf
jmp 0x18016f67d
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x18016fb19
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x18016fb7c
push rax
pushf
mov eax, 0xb72f84ae
pushf
not eax
add eax, 0x81ad535c
xor eax, 0x8066e69d
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xadb8d7ce
xor eax, 0x816272b5
rol eax, 0x86
popf
pushf
not eax
add eax, 0xe1abf3fe
xor eax, 0xd9b26403
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xac14f1a0
xor eax, 0xc5464e19
rol eax, 0x27
popf
jmp 0x18016f67d
push rax
pushf
mov eax, 0x749d2162
pushf
not eax
add eax, 0xa16fba30
xor eax, 0x970e8ac7
rol eax, 0x13
popf
pushf
not eax
add eax, 0xf212214b
xor eax, 0xdc0d0bb2
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xb4ac4815
xor eax, 0xfa7a7b77
rol eax, 0xec
popf
pushf
not eax
add eax, 0xa9be64cd
xor eax, 0xf19be0f7
rol eax, 0xf3
popf
jmp 0x18016f67d
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x18016fc19
xor al, al
add rsp, 0x20
pop rbx
ret