Function at 0x180006370
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x40
xor ebx, ebx
mov r14, rcx
mov dword [rsp + 0x28], ebx
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextVolumeW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_RegisterClipboardFormatW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RegisterSuspendResumeNotification]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RtlCaptureStackBackTrace]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitOnceInitialize]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DeleteBoundaryDescriptor]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_TileWindows]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ExcludeUpdateRgn]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FlashWindowEx]
mov dword [rsp + 0x30], ebx
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
call qword [sym.imp.USER32.dll_GetClipboardViewer]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsCharLowerW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FileTimeToDosDateTime]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileBandwidthReservation]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeParameters]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSectionWhenCallbackReturns]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
xor r9d, r9d
mov dword [rsp + 0x28], ebx
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MoveWindow]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_DlgDirListComboBoxW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DebugSetProcessKillOnExit]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_WaitForInputIdle]
xor ecx, ecx
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_QueryIdleProcessorCycleTimeEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FrameRect]
mov ecx, 0x6e90
nop dword [rax + rax]
inc ecx
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea edx, [rdx + rdx*2]
cmp ecx, edx
jne 0x180006530
mov r10d, 0xffffe18f
sub r10d, ecx
test cl, 1
je 0x18000655f
test ecx, ecx
jle 0x18000655f
add ecx, 0x218a
lea edi, [rcx + 0xcd0a]
mov r9d, 0xffffbef2
lea r11d, [rdi + 0x2dc6]
lea esi, [r11 + 0xfa8]
lea r8d, [rcx - 0x55f7]
inc r9d
mov eax, 0x55555556
imul r9d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea edx, [rdx + rdx*2]
cmp r9d, edx
jne 0x180006580
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea edx, [rdx + rdx*2]
cmp r8d, edx
je 0x1800065da
nop dword [rax]
nop word [rax + rax]
inc r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea edx, [rdx + rdx*2]
cmp r8d, edx
jne 0x1800065c0
add ecx, 0x4781
lea eax, [rdi + r9]
mov edx, 0xffffb733
sub edx, ecx
lea ebx, [rcx + rsi]
lea ecx, [r10 - 0x4e60]
lea edi, [r11 + rbx]
test cl, 1
je 0x180006607
nop
inc ecx
test cl, 1
jne 0x180006600
lea r10d, [rdx + rax]
add r10d, 0x1c9
add r10d, esi
cmp r11d, 0x18aeb
jne 0x18000665e
cmp r9d, 0xffffbef3
jne 0x18000665e
cmp edx, 0xfffedf97
jne 0x18000665e
cmp r8d, 0x3a26
jne 0x18000665e
cmp edi, 0x3fd1a
jne 0x18000665e
cmp r10d, 0x1980b
jne 0x18000665e
cmp ebx, 0x2722f
jne 0x18000665e
cmp ecx, 0xffff249e
jne 0x18000665e
mov eax, dword [r14]
jmp 0x180006663
mov eax, 1
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
add rsp, 0x40
pop r14
ret