Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"