Function at 0x180067800
Capabilities:
Get file size

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0xc0
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x70], 0
mov qword [rsp + 0x60], 0xffffffffffffffff
lea rdi, [rsp + 0x78]
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0xffffffffffffffff
jne 0x180067944
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rax, qword [rsp + 0x130]
mov dword [rax], edx
mov dword [rsp + 0x70], 5
mov rax, qword [rsp + 0x130]
mov r9d, dword [rax]
mov rax, qword [rsp + 0x130]
mov r8d, dword [rax]
mov rdx, qword [rsp + 0xd8]
lea rcx, [0x180002e00]
call fcn.1800892c0
mov edx, dword [rsp + 0x128]
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0xd8]
lea r8, [0x180002e00]
mov rcx, qword [rsp + 0x120]
call fcn.1800ec1d0
mov eax, dword [rsp + 0x70]
jmp 0x180067aae
mov dword [rsp + 0x94], 0
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0xffffffff
jne 0x180067a10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rax, qword [rsp + 0x130]
mov dword [rax], edx
mov dword [rsp + 0x70], 5
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x130]
mov r9d, dword [rax]
xor r8d, r8d
mov edx, dword [rsp + 0x60]
lea rcx, [0x180002d80]
call fcn.1800892c0
mov edx, dword [rsp + 0x128]
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x130]
mov eax, dword [rax]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x60]
lea r8, [0x180002d80]
mov rcx, qword [rsp + 0x120]
call fcn.1800ec1d0
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x70]
jmp 0x180067aae
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rsp + 0x88]
mov rdi, qword [rdi]
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x58], al
movzx eax, word [rsp + 0x108]
mov word [rsp + 0x50], ax
movzx eax, byte [rsp + 0x110]
mov byte [rsp + 0x48], al
movzx eax, byte [rsp + 0x100]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0xf8]
mov byte [rsp + 0x38], al
movzx eax, byte [rsp + 0xf0]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0xe8]
mov r8, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x88]
call qword [rdi + 0x50]
nop
mov eax, dword [rsp + 0x70]
add rsp, 0xc0
pop rdi
ret