Function at 0x180035d3b
Capabilities:
Get file size

Disassembly:
push rax
pushf
mov eax, 0xd9680cf9
pushf
not eax
add eax, 0x8843596c
xor eax, 0xbe92576c
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x99309e81
xor eax, 0xa8ae55a8
rol eax, 0x25
popf
cmp eax, 4
jne 0x180035d78
popf
pop rax
jmp 0x1800360d2
cmp eax, 0
jne 0x180035d87
popf
pop rax
jmp 0x180035e95
cmp eax, 3
jne 0x180035d96
popf
pop rax
jmp 0x180036056
cmp eax, 1
jne 0x180035da5
popf
pop rax
jmp 0x180035f21
cmp eax, 0xd
jne 0x180035db4
popf
pop rax
jmp 0x180036499
cmp eax, 7
jne 0x180035dc3
popf
pop rax
jmp 0x180036285
cmp eax, 0xe
jne 0x180035dd2
popf
pop rax
jmp 0x18003655a
cmp eax, 0xb
jne 0x180035de1
popf
pop rax
jmp 0x1800363a3
cmp eax, 0xc
jne 0x180035df0
popf
pop rax
jmp 0x1800363dd
cmp eax, 8
jne 0x180035dff
popf
pop rax
jmp 0x1800362ce
cmp eax, 0x10
jne 0x180035e0e
popf
pop rax
jmp 0x1800365fe
cmp eax, 2
jne 0x180035e1d
popf
pop rax
jmp 0x180035f57
cmp eax, 9
jne 0x180035e2c
popf
pop rax
jmp 0x180036306
cmp eax, 0x12
jne 0x180035e3b
popf
pop rax
jmp 0x180036684
cmp eax, 6
jne 0x180035e4a
popf
pop rax
jmp 0x18003620a
cmp eax, 0x11
jne 0x180035e59
popf
pop rax
jmp 0x180036636
cmp eax, 5
jne 0x180035e68
popf
pop rax
jmp 0x18003616f
cmp eax, 0x13
jne 0x180035e77
popf
pop rax
jmp 0x1800366fe
cmp eax, 0xa
jne 0x180035e86
popf
pop rax
jmp 0x180036355
cmp eax, 0xf
jne 0x180035e95
popf
pop rax
jmp 0x1800365fb
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x60
mov qword [rax - 0x28], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
movaps xmmword [rax - 0x18], xmm6
mov rbx, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x180035eee
push rax
pushf
mov eax, 0x355cb8e
pushf
not eax
add eax, 0xa0e7d06c
xor eax, 0xcc49e21e
rol eax, 4
popf
pushf
not eax
add eax, 0xc7db22a0
xor eax, 0xaa1cb6ea
rol eax, 0x59
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x4d0466ea
pushf
not eax
add eax, 0x847f37ed
xor eax, 0xc0d30bf2
rol eax, 0x56
popf
pushf
not eax
add eax, 0xb5fc5731
xor eax, 0xd9be6cba
rol eax, 0xa4
popf
jmp 0x180035d69
mov rcx, qword [rcx]
push rax
pushf
mov eax, 0x49d8fe8e
pushf
not eax
add eax, 0x996665c6
xor eax, 0xb5a6e394
rol eax, 0x56
popf
pushf
not eax
add eax, 0xc93030cd
xor eax, 0xa031a7eb
rol eax, 0x58
popf
jmp 0x180035d69
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x618a3993
pushf
not edx
add edx, 0xdf02c54f
xor edx, 0xa6b3fb66
rol edx, 0xcd
popf
pushf
not edx
add edx, 0x94aea17e
xor edx, 0xc0c76059
rol edx, 0x53
popf
pushf
not edx
add edx, 0xd5f236c7
xor edx, 0xc29f42a7
rol edx, 0x7a
popf
pushf
not edx
add edx, 0xeb08e99e
xor edx, 0xf5827a83
rol edx, 0x56
popf
lea r8d, [r9 + 1]
jmp 0x180035fce
call qword [0x18001eaf8]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x180036023
push rax
pushf
mov eax, 0xf416f067
pushf
not eax
add eax, 0xe612182b
xor eax, 0xdace139e
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe0562fd0
xor eax, 0x9595e541
rol eax, 0x27
popf
pushf
not eax
add eax, 0xda74d9ed
xor eax, 0x8eee7b50
rol eax, 0x7a
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x6cd249a7
pushf
not eax
add eax, 0xbcc6bee9
xor eax, 0x837352e2
rol eax, 0x56
popf
pushf
not eax
add eax, 0x8903652b
xor eax, 0xa0104f61
rol eax, 0x18
popf
jmp 0x180035d69
lea rdx, [rsp + 0x70]
mov rcx, rax
jmp 0x18003605f
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rdi
test eax, eax
je 0x18003609f
push rax
pushf
mov eax, 0x79397e65
pushf
not eax
add eax, 0x90271f84
xor eax, 0xb1e94556
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x95aab916
xor eax, 0x92199679
rol eax, 6
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x12faf82b
pushf
not eax
add eax, 0xc0e41a9f
xor eax, 0xa5d3bf24
rol eax, 0x25
popf
pushf
not eax
add eax, 0x9b90ca17
xor eax, 0xb83d1f35
rol eax, 0xe6
popf
jmp 0x180035d69
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rsp + 0x70]
mulsd xmm6, qword [0x180018e40]
jmp 0x1800360e5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18003613c
push rax
pushf
mov eax, 0xa4e573a8
pushf
not eax
add eax, 0xb52102e8
xor eax, 0x9e48eddd
rol eax, 7
popf
pushf
not eax
add eax, 0xd87a0dba
xor eax, 0xad2e31c8
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9928b0fd
xor eax, 0xf5d1d3e3
rol eax, 4
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x3e70a393
pushf
not eax
add eax, 0x8045421a
xor eax, 0xd656a07e
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xda8391aa
xor eax, 0xdb8afa25
rol eax, 0x22
popf
jmp 0x180035d69
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1800361b1
push rax
pushf
mov eax, 0x619911b8
pushf
not eax
add eax, 0xd59897c6
xor eax, 0xbbce4d4a
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x991cf763
xor eax, 0x92e38e65
rol eax, 0xbf
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x31ab23e6
pushf
not eax
add eax, 0xa23ae9d5
xor eax, 0x9497b301
rol eax, 0x44
popf
pushf
not eax
add eax, 0xcc9368d0
xor eax, 0xfd6c1e02
rol eax, 0x42
popf
pushf
not eax
add eax, 0x8b0d2ac8
xor eax, 0x90094ad9
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc0b35279
xor eax, 0xba22cce5
rol eax, 0xd1
popf
jmp 0x180035d69
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180036252
push rax
pushf
mov eax, 0x1b0fb869
pushf
not eax
add eax, 0xccb294ab
xor eax, 0xff0beb19
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8ff91280
xor eax, 0xe6c1a631
rol eax, 0x56
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x9a3719ed
pushf
not eax
add eax, 0xae1445dd
xor eax, 0xafca757f
rol eax, 0x74
popf
pushf
not eax
add eax, 0xba891cb2
xor eax, 0xd17d5b14
rol eax, 0x7e
popf
jmp 0x180035d69
mov rcx, r8
push rax
pushf
mov eax, 0xe846c1f9
pushf
not eax
add eax, 0xf3345ddc
xor eax, 0xea24c75c
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe9642be1
xor eax, 0x9ff21153
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xe6124cc7
xor eax, 0x96cd543f
rol eax, 0x77
popf
jmp 0x180035d69
call fcn.180043a39
push rax
pushf
mov eax, 0x7d2019bd
pushf
not eax
add eax, 0x9be2e359
xor eax, 0xa8493bca
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe534a67e
xor eax, 0x853218c9
rol eax, 0x2c
popf
jmp 0x180035d69
movaps xmm0, xmm6
jmp 0x180036684
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
push rax
pushf
mov eax, 0xbeb0dd8
pushf
not eax
add eax, 0xe0be97ca
xor eax, 0xc4fecb81
rol eax, 0xff
popf
pushf
not eax
add eax, 0xb6954432
xor eax, 0xdff33977
rol eax, 9
popf
pushf
not eax
add eax, 0xf98981ab
xor eax, 0x865264c7
rol eax, 0x25
popf
jmp 0x180035d69
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
push rax
pushf
mov eax, 0xe8a9f036
pushf
not eax
add eax, 0xc86f028d
xor eax, 0xc5d01b14
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xa9f82668
xor eax, 0x8856d453
rol eax, 0xdb
popf
jmp 0x180035d69
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180036440
push rax
pushf
mov eax, 0x6ca00d50
pushf
not eax
add eax, 0xd1a1fcb3
xor eax, 0xd6d756e7
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xed3d100e
xor eax, 0xcc2dfe37
rol eax, 0x66
popf
pushf
not eax
add eax, 0xdbbea654
xor eax, 0xb94faf76
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xc716679c
xor eax, 0xc737fefc
rol eax, 0x29
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0xc8b69f72
pushf
not eax
add eax, 0xde78da8a
xor eax, 0xd5bccd9c
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xf43b52f7
xor eax, 0xe3ef5115
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xfe5c06ef
xor eax, 0xc4742cdd
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xbe6b98dd
xor eax, 0xa758d453
rol eax, 0x5f
popf
jmp 0x180035d69
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x180036501
push rax
pushf
mov eax, 0x5c59b28
pushf
not eax
add eax, 0xd7ae0356
xor eax, 0xfdffc466
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x868c423f
xor eax, 0x9935dde5
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xcd3f7733
xor eax, 0xf66b9232
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xb40d3c3f
xor eax, 0xc40c5bb9
rol eax, 0x7e
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0xf500c045
pushf
not eax
add eax, 0xa647d03e
xor eax, 0xa3f200d0
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xde05f87b
xor eax, 0x82b88780
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xb3ff81f4
xor eax, 0x97f32f82
rol eax, 0x80
popf
pushf
not eax
add eax, 0x97a141d5
xor eax, 0xbad8b801
rol eax, 0xf6
popf
jmp 0x180035d69
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800365c8
push rax
pushf
mov eax, 0x88f2103
pushf
not eax
add eax, 0xc63b42bb
xor eax, 0xbced3db5
rol eax, 0x27
popf
pushf
not eax
add eax, 0xff6672c2
xor eax, 0xc0571414
rol eax, 0x41
popf
pushf
not eax
add eax, 0xae0a5816
xor eax, 0x90b67cbd
rol eax, 0x90
popf
pushf
not eax
add eax, 0xbb2cd4c1
xor eax, 0xca54f41b
rol eax, 0xdd
popf
jmp 0x180035d69
push rax
pushf
mov eax, 0x447b6adf
pushf
not eax
add eax, 0x8d6c64b5
xor eax, 0xdcb3fe04
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xed8ed9b3
xor eax, 0xe5bd4549
rol eax, 0x9f
popf
jmp 0x180035d69
mov rcx, r8
call fcn.180043a39
push rax
pushf
mov eax, 0xa6f2ec28
pushf
not eax
add eax, 0xba43a0cf
xor eax, 0x9adc268a
rol eax, 0x88
popf
pushf
not eax
add eax, 0xa4c5c0ac
xor eax, 0x9833942a
rol eax, 0xc1
popf
jmp 0x180035d69
movsd xmm0, qword [0x180018e50]
push rax
pushf
mov eax, 0x44c70b8f
pushf
not eax
add eax, 0xa016600a
xor eax, 0xa6123fc1
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xd523389c
xor eax, 0xb4e3575a
rol eax, 4
popf
pushf
not eax
add eax, 0x9d1fb90e
xor eax, 0xe3a25ac7
rol eax, 0xa5
popf
jmp 0x180035d69
and qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rbx, qword [rsp + 0x78]
movaps xmm6, xmmword [rsp + 0x50]
add rsp, 0x60
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3