Function at 0x68db60
Capabilities:
Delete file
Get file size
Read file on windows

Disassembly:
push rbp
sub rsp, 0xe0
mov rbp, rsp
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0x98], rbp
mov qword [rbp + 0xf0], rcx
mov qword [rbp + 0xf8], rdx
mov dword [rbp + 0x100], r8d
nop
mov rcx, qword [rbp + 0xf0]
call fcn.0040e0d0
cmp dword [rbp + 0x100], 0x41c
jb 0x68dfba
mov rcx, qword [rbp + 0xf8]
add rcx, 0x210
mov edx, 0x80000000
xor r8, r8
xor r9, r9
mov dword [rsp + 0x20], 3
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x30], 0
call sub.kernel32.dll_CreateFileW_1
mov qword [rbp + 0xd8], rax
cmp qword [rbp + 0xd8], 0xffffffffffffffff
jne 0x68dc9d
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xd0], eax
lea rcx, [rbp + 0x88]
mov edx, dword [rbp + 0xd0]
call fcn.00435d20
lea rcx, [rbp + 0x90]
lea rdx, [0x0068e08c]
mov r8, qword [rbp + 0x88]
call fcn.004102f0
mov cx, 1
mov rdx, qword [rbp + 0x90]
call fcn.0047cfa0
jmp 0x68dfba
nop
mov rcx, qword [rbp + 0xd8]
xor rdx, rdx
xor r8, r8
xor r9, r9
call sub.kernel32.dll_SetFilePointer_1
cmp eax, 0xffffffff
jne 0x68dd0d
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xd0], eax
lea rcx, [rbp + 0x78]
mov edx, dword [rbp + 0xd0]
call fcn.00435d20
lea rcx, [rbp + 0x80]
lea rdx, [0x0068e0d4]
mov r8, qword [rbp + 0x78]
call fcn.004102f0
mov cx, 1
mov rdx, qword [rbp + 0x80]
call fcn.0047cfa0
xor rcx, rcx
mov rdx, qword [rbp + 0x98]
call fcn.0068dff0
jmp 0x68dfba
mov rcx, qword [rbp + 0xd8]
xor rdx, rdx
call sub.kernel32.dll_GetFileSize_1
mov dword [rbp + 0xd4], eax
cmp dword [rbp + 0xd4], 0xffffffff
jne 0x68dd7a
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xd0], eax
lea rcx, [rbp + 0x68]
mov edx, dword [rbp + 0xd0]
call fcn.00435d20
lea rcx, [rbp + 0x70]
lea rdx, [0x0068e124]
mov r8, qword [rbp + 0x68]
call fcn.004102f0
mov cx, 1
mov rdx, qword [rbp + 0x70]
call fcn.0047cfa0
xor rcx, rcx
mov rdx, qword [rbp + 0x98]
call fcn.0068dff0
jmp 0x68dfba
cmp dword [rbp + 0xd4], 0
jne 0x68dd97
xor rcx, rcx
mov rdx, qword [rbp + 0x98]
call fcn.0068dff0
jmp 0x68dfba
lea rcx, [rbp + 0x58]
mov rdx, qword [rbp + 0xf8]
add rdx, 0x210
mov r8d, 0x105
call fcn.0040ffb0
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x58]
call fcn.0042d660
lea rcx, [rbp + 0xc0]
mov rdx, qword [rbp + 0x60]
xor r8, r8
call fcn.0040f6a0
cmp qword [rbp + 0xc0], 0
jne 0x68ddf3
xor rcx, rcx
mov rdx, qword [rbp + 0x98]
call fcn.0068dff0
jmp 0x68dfba
mov rax, qword [rbp + 0xc0]
cmp byte [rax], 0x2e
jne 0x68de18
lea rcx, [rbp + 0xc0]
mov edx, 1
mov r8d, 1
call fcn.0040f3f0
lea rcx, [rbp + 0xc0]
lea rdx, [0x0068e16c]
call fcn.0040eea0
mov dword [rbp + 0xbc], 0
cmp qword [rbp + 0xc0], 0
je 0x68de4f
mov rax, qword [rbp + 0xc0]
mov eax, dword [rax - 4]
mov dword [rbp + 0xbc], eax
mov rcx, qword [rbp + 0xf0]
mov edx, dword [rbp + 0xd4]
add edx, dword [rbp + 0xbc]
xor r8, r8
call fcn.0040f5d0
lea rcx, [rbp + 0xc0]
call fcn.0040ea00
mov qword [rbp + 0xa8], rax
mov rcx, qword [rbp + 0xf0]
call fcn.0040ea00
mov qword [rbp + 0xb0], rax
mov dword [rbp + 0xb8], 0
cmp qword [rbp + 0xc0], 0
je 0x68deb4
mov rax, qword [rbp + 0xc0]
mov eax, dword [rax - 4]
mov dword [rbp + 0xb8], eax
mov rcx, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0xb0]
movsxd r8, dword [rbp + 0xb8]
call fcn.00406200
mov dword [rbp + 0xcc], 0
mov dword [rbp + 0xa4], 0
cmp qword [rbp + 0xc0], 0
je 0x68defc
mov rax, qword [rbp + 0xc0]
mov eax, dword [rax - 4]
mov dword [rbp + 0xa4], eax
mov rcx, qword [rbp + 0xf0]
call fcn.0040ea00
mov rcx, qword [rbp + 0xd8]
movsxd rdx, dword [rbp + 0xa4]
add rax, rdx
mov rdx, rax
mov r8d, dword [rbp + 0xd4]
lea r9, [rbp + 0xcc]
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_ReadFile_1
test eax, eax
setne al
test al, al
jne 0x68df99
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xd0], eax
lea rcx, [rbp + 0x48]
mov edx, dword [rbp + 0xd0]
call fcn.00435d20
lea rcx, [rbp + 0x50]
lea rdx, [0x0068e17c]
mov r8, qword [rbp + 0x48]
call fcn.004102f0
mov cx, 1
mov rdx, qword [rbp + 0x50]
call fcn.0047cfa0
mov rcx, qword [rbp + 0xf0]
call fcn.0040e0d0
xor rcx, rcx
mov rdx, qword [rbp + 0x98]
call fcn.0068dff0
jmp 0x68dfba
nop
mov rcx, qword [rbp + 0xd8]
call sub.kernel32.dll_CloseHandle_1
mov rcx, qword [rbp + 0xf8]
add rcx, 0x210
call sub.kernel32.dll_DeleteFileW
nop
lea rcx, [rbp + 0x48]
mov edx, 0xa
call fcn.0040e160
lea rcx, [rbp + 0xc0]
call fcn.0040e0d0
mov rax, qword [rbp + 0xf0]
lea rsp, [rbp + 0xe0]
pop rbp
ret