Function at 0x18000c5d0
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0xd8
cmp qword [rsp + 0xe0], 0xffffffffffffffff
jne 0x18000c9e3
mov dword [rsp + 0x34], 7
mov dword [rsp + 0x3c], 9
mov eax, dword [rsp + 0x3c]
test eax, eax
jle 0x18000c64a
mov eax, dword [rsp + 0x3c]
cmp eax, 1
jle 0x18000c626
mov eax, dword [rsp + 0x34]
and eax, 0x19b6
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x3c]
sub eax, 2
mov dword [rsp + 0x3c], eax
jmp 0x18000c5fb
mov eax, dword [rsp + 0x34]
cmp eax, 0x80b
jle 0x18000c63e
mov eax, dword [rsp + 0x34]
and eax, 0x84
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x3c]
dec eax
mov dword [rsp + 0x3c], eax
jmp 0x18000c5fb
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x44], 0xb
mov eax, dword [rsp + 0x44]
test eax, eax
jle 0x18000c6a9
mov eax, dword [rsp + 0x44]
cmp eax, 1
jle 0x18000c685
mov eax, dword [rsp + 0x30]
and eax, 0x66b
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x44]
sub eax, 2
mov dword [rsp + 0x44], eax
jmp 0x18000c65a
mov eax, dword [rsp + 0x30]
cmp eax, 0x80d
jle 0x18000c69d
mov eax, dword [rsp + 0x30]
and eax, 0x86
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x44]
dec eax
mov dword [rsp + 0x44], eax
jmp 0x18000c65a
mov dword [rsp + 0x38], 8
mov dword [rsp + 0x48], 0xc
cmp dword [rsp + 0x48], 0
jle 0x18000c701
mov eax, dword [rsp + 0x48]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000c6ec
mov dword [rsp + 0x38], 4
mov eax, dword [rsp + 0x48]
dec eax
mov dword [rsp + 0x48], eax
jmp 0x18000c6b9
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x48]
sub eax, 2
mov dword [rsp + 0x48], eax
jmp 0x18000c6b9
mov dword [rsp + 0x24], 3
mov dword [rsp + 0x28], 8
mov eax, dword [rsp + 0x28]
test eax, eax
jle 0x18000c760
mov eax, dword [rsp + 0x28]
cmp eax, 1
jle 0x18000c73c
mov eax, dword [rsp + 0x24]
and eax, 0x11d0
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x28]
sub eax, 2
mov dword [rsp + 0x28], eax
jmp 0x18000c711
mov eax, dword [rsp + 0x24]
cmp eax, 0x80a
jle 0x18000c754
mov eax, dword [rsp + 0x24]
and eax, 0x83
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
jmp 0x18000c711
mov dword [rsp + 0x2c], 8
mov dword [rsp + 0x40], 3
mov eax, dword [rsp + 0x40]
test eax, eax
jle 0x18000c7bd
mov eax, dword [rsp + 0x40]
cmp eax, 1
jle 0x18000c79b
mov eax, dword [rsp + 0x2c]
and eax, 0x1fed
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x40]
sub eax, 2
mov dword [rsp + 0x40], eax
jmp 0x18000c770
mov eax, dword [rsp + 0x2c]
cmp eax, 0x805
jle 0x18000c7b1
mov eax, dword [rsp + 0x2c]
and eax, 0x7e
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x40]
dec eax
mov dword [rsp + 0x40], eax
jmp 0x18000c770
mov dword [rsp + 0x6c], 1
mov dword [rsp + 0x64], 0x10
cmp dword [rsp + 0x64], 0
jle 0x18000c815
mov eax, dword [rsp + 0x64]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000c800
mov dword [rsp + 0x6c], 4
mov eax, dword [rsp + 0x64]
dec eax
mov dword [rsp + 0x64], eax
jmp 0x18000c7cd
mov dword [rsp + 0x6c], 0
mov eax, dword [rsp + 0x64]
sub eax, 2
mov dword [rsp + 0x64], eax
jmp 0x18000c7cd
mov dword [rsp + 0x68], 7
mov dword [rsp + 0x74], 0xb
mov eax, dword [rsp + 0x74]
test eax, eax
jle 0x18000c874
mov eax, dword [rsp + 0x74]
cmp eax, 1
jle 0x18000c850
mov eax, dword [rsp + 0x68]
and eax, 0x66b
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x74]
sub eax, 2
mov dword [rsp + 0x74], eax
jmp 0x18000c825
mov eax, dword [rsp + 0x68]
cmp eax, 0x80d
jle 0x18000c868
mov eax, dword [rsp + 0x68]
and eax, 0x86
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x74]
dec eax
mov dword [rsp + 0x74], eax
jmp 0x18000c825
mov dword [rsp + 0x5c], 7
mov dword [rsp + 0x4c], 0x10
cmp dword [rsp + 0x4c], 0
jle 0x18000c8cc
mov eax, dword [rsp + 0x4c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000c8b8
mov dword [rsp + 0x5c], 0
mov eax, dword [rsp + 0x4c]
sub eax, 2
mov dword [rsp + 0x4c], eax
jmp 0x18000c884
mov dword [rsp + 0x5c], 0
mov eax, dword [rsp + 0x4c]
dec eax
mov dword [rsp + 0x4c], eax
jmp 0x18000c884
mov dword [rsp + 0x60], 7
mov dword [rsp + 0x70], 8
mov eax, dword [rsp + 0x70]
test eax, eax
jle 0x18000c92b
mov eax, dword [rsp + 0x70]
cmp eax, 1
jle 0x18000c907
mov eax, dword [rsp + 0x60]
and eax, 0x2542
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x70]
sub eax, 2
mov dword [rsp + 0x70], eax
jmp 0x18000c8dc
mov eax, dword [rsp + 0x60]
cmp eax, 0x80a
jle 0x18000c91f
mov eax, dword [rsp + 0x60]
and eax, 0x83
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x70]
dec eax
mov dword [rsp + 0x70], eax
jmp 0x18000c8dc
mov dword [rsp + 0x50], 8
mov dword [rsp + 0x58], 0x12
cmp dword [rsp + 0x58], 0
jle 0x18000c983
mov eax, dword [rsp + 0x58]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000c96e
mov dword [rsp + 0x50], 4
mov eax, dword [rsp + 0x58]
dec eax
mov dword [rsp + 0x58], eax
jmp 0x18000c93b
mov dword [rsp + 0x50], 0
mov eax, dword [rsp + 0x58]
sub eax, 2
mov dword [rsp + 0x58], eax
jmp 0x18000c93b
mov dword [rsp + 0x54], 3
mov dword [rsp + 0x78], 0xf
cmp dword [rsp + 0x78], 0
jle 0x18000c9dc
mov eax, dword [rsp + 0x78]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000c9c7
mov dword [rsp + 0x54], 0
mov eax, dword [rsp + 0x78]
sub eax, 2
mov dword [rsp + 0x78], eax
jmp 0x18000c993
mov dword [rsp + 0x54], 4
mov eax, dword [rsp + 0x78]
sub eax, 2
mov dword [rsp + 0x78], eax
jmp 0x18000c993
xor eax, eax
jmp 0x18000ce8f
xor edx, edx
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0xffffffff
jne 0x18000cc83
mov dword [rsp + 0x80], 7
mov dword [rsp + 0x98], 8
mov eax, dword [rsp + 0x98]
test eax, eax
jle 0x18000ca88
mov eax, dword [rsp + 0x98]
cmp eax, 1
jle 0x18000ca55
mov eax, dword [rsp + 0x80]
and eax, 0x2542
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x98]
sub eax, 2
mov dword [rsp + 0x98], eax
jmp 0x18000ca18
mov eax, dword [rsp + 0x80]
cmp eax, 0x80a
jle 0x18000ca76
mov eax, dword [rsp + 0x80]
and eax, 0x83
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x98]
dec eax
mov dword [rsp + 0x98], eax
jmp 0x18000ca18
mov dword [rsp + 0x94], 3
mov dword [rsp + 0xa0], 9
mov eax, dword [rsp + 0xa0]
test eax, eax
jle 0x18000cb0e
mov eax, dword [rsp + 0xa0]
cmp eax, 1
jle 0x18000cadb
mov eax, dword [rsp + 0x94]
and eax, 0x15f8
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0xa0]
sub eax, 2
mov dword [rsp + 0xa0], eax
jmp 0x18000ca9e
mov eax, dword [rsp + 0x94]
cmp eax, 0x80b
jle 0x18000cafc
mov eax, dword [rsp + 0x94]
and eax, 0x84
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0xa0]
dec eax
mov dword [rsp + 0xa0], eax
jmp 0x18000ca9e
mov dword [rsp + 0x9c], 0
mov dword [rsp + 0x90], 0xe
cmp dword [rsp + 0x90], 0
jle 0x18000cb84
mov eax, dword [rsp + 0x90]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000cb67
mov dword [rsp + 0x9c], 4
mov eax, dword [rsp + 0x90]
sub eax, 2
mov dword [rsp + 0x90], eax
jmp 0x18000cb24
mov dword [rsp + 0x9c], 4
mov eax, dword [rsp + 0x90]
dec eax
mov dword [rsp + 0x90], eax
jmp 0x18000cb24
mov dword [rsp + 0x7c], 5
mov dword [rsp + 0x88], 4
mov eax, dword [rsp + 0x88]
test eax, eax
jle 0x18000cbf6
mov eax, dword [rsp + 0x88]
cmp eax, 1
jle 0x18000cbce
mov eax, dword [rsp + 0x7c]
and eax, 0x1952
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x88]
sub eax, 2
mov dword [rsp + 0x88], eax
jmp 0x18000cb97
mov eax, dword [rsp + 0x7c]
cmp eax, 0x806
jle 0x18000cbe4
mov eax, dword [rsp + 0x7c]
and eax, 0x7f
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x88]
dec eax
mov dword [rsp + 0x88], eax
jmp 0x18000cb97
mov dword [rsp + 0x84], 7
mov dword [rsp + 0x8c], 9
mov eax, dword [rsp + 0x8c]
test eax, eax
jle 0x18000cc7c
mov eax, dword [rsp + 0x8c]
cmp eax, 1
jle 0x18000cc49
mov eax, dword [rsp + 0x84]
and eax, 0x19b6
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x8c]
sub eax, 2
mov dword [rsp + 0x8c], eax
jmp 0x18000cc0c
mov eax, dword [rsp + 0x84]
cmp eax, 0x80b
jle 0x18000cc6a
mov eax, dword [rsp + 0x84]
and eax, 0x84
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x8c]
dec eax
mov dword [rsp + 0x8c], eax
jmp 0x18000cc0c
xor eax, eax
jmp 0x18000ce8f
mov dword [rsp + 0xb4], 0
mov dword [rsp + 0xa8], 0xd
cmp dword [rsp + 0xa8], 0
jle 0x18000ccf9
mov eax, dword [rsp + 0xa8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000ccdb
mov dword [rsp + 0xb4], 4
mov eax, dword [rsp + 0xa8]
dec eax
mov dword [rsp + 0xa8], eax
jmp 0x18000cc99
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0xa8]
sub eax, 2
mov dword [rsp + 0xa8], eax
jmp 0x18000cc99
mov dword [rsp + 0xb0], 7
mov dword [rsp + 0xc0], 8
mov eax, dword [rsp + 0xc0]
test eax, eax
jle 0x18000cd7f
mov eax, dword [rsp + 0xc0]
cmp eax, 1
jle 0x18000cd4c
mov eax, dword [rsp + 0xb0]
and eax, 0x2542
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xc0]
sub eax, 2
mov dword [rsp + 0xc0], eax
jmp 0x18000cd0f
mov eax, dword [rsp + 0xb0]
cmp eax, 0x80a
jle 0x18000cd6d
mov eax, dword [rsp + 0xb0]
and eax, 0x83
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xc0]
dec eax
mov dword [rsp + 0xc0], eax
jmp 0x18000cd0f
mov dword [rsp + 0xac], 2
mov dword [rsp + 0xa4], 5
mov eax, dword [rsp + 0xa4]
test eax, eax
jle 0x18000ce05
mov eax, dword [rsp + 0xa4]
cmp eax, 1
jle 0x18000cdd2
mov eax, dword [rsp + 0xac]
and eax, 0x204d
mov dword [rsp + 0xac], eax
mov eax, dword [rsp + 0xa4]
sub eax, 2
mov dword [rsp + 0xa4], eax
jmp 0x18000cd95
mov eax, dword [rsp + 0xac]
cmp eax, 0x807
jle 0x18000cdf3
mov eax, dword [rsp + 0xac]
and eax, 0x80
mov dword [rsp + 0xac], eax
mov eax, dword [rsp + 0xa4]
dec eax
mov dword [rsp + 0xa4], eax
jmp 0x18000cd95
mov dword [rsp + 0xb8], 7
mov dword [rsp + 0xbc], 9
mov eax, dword [rsp + 0xbc]
test eax, eax
jle 0x18000ce8b
mov eax, dword [rsp + 0xbc]
cmp eax, 1
jle 0x18000ce58
mov eax, dword [rsp + 0xb8]
and eax, 0x19b6
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0xbc]
sub eax, 2
mov dword [rsp + 0xbc], eax
jmp 0x18000ce1b
mov eax, dword [rsp + 0xb8]
cmp eax, 0x80b
jle 0x18000ce79
mov eax, dword [rsp + 0xb8]
and eax, 0x84
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0xbc]
dec eax
mov dword [rsp + 0xbc], eax
jmp 0x18000ce1b
mov eax, dword [rsp + 0x20]
add rsp, 0xd8
ret