Function at 0x18016f66c
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xc09d65e
pushf
not eax
add eax, 0xbb6c622d
xor eax, 0xfba077e9
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9ac25df0
xor eax, 0xee7c9bab
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x8c985a23
xor eax, 0xb334bf63
rol eax, 0x2d
popf
cmp eax, 4
jne 0x18016f6bc
popf
pop rax
jmp 0x18016f94b
cmp eax, 0
jne 0x18016f6cb
popf
pop rax
jmp 0x18016f743
cmp eax, 3
jne 0x18016f6da
popf
pop rax
jmp 0x18016f8c9
cmp eax, 1
jne 0x18016f6e9
popf
pop rax
jmp 0x18016f7bb
cmp eax, 5
jne 0x18016f6f8
popf
pop rax
jmp 0x18016f9e8
cmp eax, 7
jne 0x18016f707
popf
pop rax
jmp 0x18016fba5
cmp eax, 6
jne 0x18016f716
popf
pop rax
jmp 0x18016fb06
cmp eax, 2
jne 0x18016f725
popf
pop rax
jmp 0x18016f835
cmp eax, 9
jne 0x18016f734
popf
pop rax
jmp 0x18016fbfc
cmp eax, 8
jne 0x18016f743
popf
pop rax
jmp 0x18016fbfa
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0x14]
nop
shr edx, 3
test dl, 1
je 0x18016f788
push rax
pushf
mov eax, 0x2963b4e0
pushf
not eax
add eax, 0xd306f07e
xor eax, 0xaffaceaa
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xe183963c
xor eax, 0xdb21a104
rol eax, 0x2d
popf
jmp 0x18016f6ad
push rax
pushf
mov eax, 0x814d31b3
pushf
not eax
add eax, 0xc3d81092
xor eax, 0xd2614723
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x97cf6737
xor eax, 0xe96770f1
rol eax, 0xc0
popf
jmp 0x18016f6ad
mov al, 0x27
pushf
not al
add al, 0xe6
xor al, 0x7a
rol al, 0xce
popf
pushf
not al
add al, 0x4a
xor al, 0x19
rol al, 0xe8
popf
jmp 0x18016fbfc
mov eax, dword [rcx + 0x14]
nop
test al, 0xc0
je 0x18016f870
push rax
pushf
mov eax, 0x9cbc770a
pushf
not eax
add eax, 0xf4dcebb2
xor eax, 0xb3c78eee
rol eax, 0x89
popf
pushf
not eax
add eax, 0x8a936ef1
xor eax, 0xbaaedb19
rol eax, 0x8c
popf
jmp 0x18016f6ad
push rax
pushf
mov eax, 0x94f98b9
pushf
not eax
add eax, 0xd33ac051
xor eax, 0x99fe1ce5
rol eax, 0x23
popf
pushf
not eax
add eax, 0xe0c6ea61
xor eax, 0x9d50dfc7
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xd1538c46
xor eax, 0xf51d0c23
rol eax, 0x52
popf
pushf
not eax
add eax, 0x9546e66c
xor eax, 0xc4524266
rol eax, 0xe4
popf
jmp 0x18016f6ad
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
je 0x18016f905
push rax
pushf
mov eax, 0x55b5d6fb
pushf
not eax
add eax, 0xf361eab4
xor eax, 0xa48d816b
rol eax, 6
popf
pushf
not eax
add eax, 0xe461bcbb
xor eax, 0x8bfd07ec
rol eax, 0xa6
popf
jmp 0x18016f6ad
push rax
pushf
mov eax, 0x23d7d8d7
pushf
not eax
add eax, 0xa9a4ec6c
xor eax, 0xc7b9cf25
rol eax, 0xec
popf
pushf
not eax
add eax, 0x9ddc2a95
xor eax, 0xea250ebd
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb3225d59
xor eax, 0x990b12d5
rol eax, 0x19
popf
jmp 0x18016f6ad
mov ecx, dword [rcx + 0x18]
nop
call fcn.1800a6e9a
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18016f9b6
push rax
pushf
mov eax, 0xc6fd50a1
pushf
not eax
add eax, 0xcabac054
xor eax, 0xe9de4911
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xf22402a0
xor eax, 0x8aa6ba9c
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xfa00b7f6
xor eax, 0xdce793df
rol eax, 0x37
popf
pushf
not eax
add eax, 0x8e12e752
xor eax, 0xf420c620
rol eax, 0x86
popf
jmp 0x18016f6ad
push rax
pushf
mov eax, 0x433017d8
pushf
not eax
add eax, 0xabe2e386
xor eax, 0x97e67b81
rol eax, 0x60
popf
pushf
not eax
add eax, 0x84d87c80
xor eax, 0x8583cc57
rol eax, 1
popf
jmp 0x18016f6ad
mov r9d, 0x792698dc
pushf
not r9d
add r9d, 0xa85dd70d
xor r9d, 0xe8c2d52c
rol r9d, 0x3c
popf
pushf
not r9d
add r9d, 0xa907fe6b
xor r9d, 0xfe9fa1d6
rol r9d, 0x73
popf
pushf
not r9d
add r9d, 0x8b75717d
xor r9d, 0xf84802de
rol r9d, 0xd4
popf
pushf
not r9d
add r9d, 0xec50adca
xor r9d, 0xca79b287
rol r9d, 0x7e
popf
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rax
jmp 0x18016fa5d
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x18016faad
push rax
pushf
mov eax, 0x6bfe8e7e
pushf
not eax
add eax, 0xf112e81c
xor eax, 0xf1c4583c
rol eax, 0x38
popf
pushf
not eax
add eax, 0x96046d9c
xor eax, 0xf262ab9f
rol eax, 0x10
popf
pushf
not eax
add eax, 0xc46db9c8
xor eax, 0x8e68aada
rol eax, 0x56
popf
jmp 0x18016f6ad
push rax
pushf
mov eax, 0xb4b11e2a
pushf
not eax
add eax, 0xe3945c3b
xor eax, 0xf8ca2025
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xb721fedf
xor eax, 0xc9253885
rol eax, 0x67
popf
pushf
not eax
add eax, 0xd9557ad6
xor eax, 0xb7c507f0
rol eax, 4
popf
pushf
not eax
add eax, 0x987db6c0
xor eax, 0xca6ccb12
rol eax, 4
popf
jmp 0x18016f6ad
lea rdx, [rsp + 0x30]
mov rcx, rbx
jmp 0x18016fb0f
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x18016fb72
push rax
pushf
mov eax, 0xf58c6fa9
pushf
not eax
add eax, 0xb5c34e45
xor eax, 0xc1421544
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xbcde16bd
xor eax, 0xf356429f
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xed8cf18f
xor eax, 0x829bcacd
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc6984875
xor eax, 0xdce196d8
rol eax, 0xcf
popf
jmp 0x18016f6ad
push rax
pushf
mov eax, 0x7f73ee19
pushf
not eax
add eax, 0xd077899c
xor eax, 0xb3097512
rol eax, 0x35
popf
pushf
not eax
add eax, 0x98b3e1e3
xor eax, 0xc297a085
rol eax, 0xa9
popf
jmp 0x18016f6ad
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], rax
sete al
jmp 0x18016fbfc
xor al, al
add rsp, 0x20
pop rbx
ret