Function at 0x1400025c4
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x1400cabe8]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rbx, rcx
mov dword [rbp - 0x70], 0x11c
xor eax, eax
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov rdi, rdx
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
nop dword [rax + rax]
test eax, eax
jne 0x140002638
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edx, eax
lea rcx, str.Warning_failed_to_get_OS_version_Info_GetLastError____0x_08X_n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
mov rax, qword [rbx + 0x108]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
nop dword [rax + rax]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
nop dword [rax + rax]
mov rax, qword [rbx + 0x10]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
nop dword [rax + rax]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
nop dword [rax + rax]
mov eax, dword [rbp - 0x64]
lea rcx, str._tOS_version___t_t_d._d._d___Currently_running_on__d._d._d__n
movzx r8d, byte [rbx + 5]
movzx edx, byte [rbx + 4]
mov r9d, dword [rbx + 8]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x20], eax
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
movzx ecx, word [rsp + 0x74]
movzx eax, word [rsp + 0x76]
movzx r10d, word [rsp + 0x72]
movzx r11d, word [rsp + 0x70]
movzx r9d, word [rsp + 0x6e]
movzx r8d, word [rsp + 0x6a]
movzx edx, word [rsp + 0x68]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
lea rcx, str._tStart_Time___t_t_04d__02d__02d__02d:_02d:_02d._03d_n
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
cmp qword [rbx + 0x10], 0
jne 0x140002742
lea rcx, str._tEnd_Time_t_tNot_set__Logger_may_not_have_been_stopped_._n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
jmp 0x14000278a
movzx ecx, word [rbp - 0x7c]
movzx eax, word [rbp - 0x7a]
movzx r10d, word [rbp - 0x7e]
movzx r11d, word [rbp - 0x80]
movzx r9d, word [rsp + 0x7e]
movzx r8d, word [rsp + 0x7a]
movzx edx, word [rsp + 0x78]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
lea rcx, str._tEnd_Time_____t_t_04d__02d__02d__02d:_02d:_02d._03d_n
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
mov r8d, dword [rbx + 0x48]
lea rdx, [rbx + 0x4c]
lea rcx, str._tTimezone_is__t_t_s__Bias_is__dmins__n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
mov edx, dword [rbx]
lea rcx, str._tBufferSize____________t_d_B_n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
mov edx, dword [rbx + 0x1c]
lea rcx, str._tMaximum_File_Size_____t_d_MB_n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
mov edx, dword [rbx + 0x24]
cmp edx, 1
ja 0x1400027ed
lea rcx, str._tBuffers__Written______tNot_set__No_events_matched_filter_._n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
jmp 0x140002800
lea rcx, str._tBuffers__Written______t_d_n
call qword [sym.imp.msvcrt.dll_wprintf]
nop dword [rax + rax]
mov edx, dword [rbx + 0x20]
lea rcx, str._tLogger_Mode_Settings_t__X_