Function at 0x140066b50
Capabilities:
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xdd0]
sub rsp, 0xed0
mov rax, qword [0x140096008]
xor rax, rsp
mov qword [rbp + 0xdc0], rax
mov r13d, 0x106
lea rax, [rbp + 0x70]
mov qword [rsp + 0x40], r13
mov ebx, r9d
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x890]
lea rax, [rbp + 0x780]
mov qword [rsp + 0x30], r13
mov esi, r8d
mov qword [rsp + 0x28], rax
mov edi, edx
mov qword [rsp + 0x20], r13
mov r8d, r13d
lea rdx, [rsp + 0x60]
mov r15, rcx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath_s]
lea rdx, [0x14008e22c]
lea rcx, [rbp + 0x71]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
xor r12d, r12d
test eax, eax
jne 0x140066bec
lea eax, [r12 + 0x32]
jmp 0x140066dcd
xor edx, edx
mov rcx, r15
call fcn.14007d020
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x140066c92
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x140066dcb
lea rax, [rbp + 0xbb0]
mov ebx, 0x105
mov dword [rsp + 0x28], ebx
lea edx, [r14 + 2]
or r9d, r14d
mov qword [rsp + 0x20], rax
mov r8, r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, qword [0x1400b8300]
lea r8, [rbp + 0x9a0]
mov r9d, ebx
lea edx, [r14 + 0x7a]
call qword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x140066c62
mov word [rbp + 0x570], r12w
jmp 0x140066c7c
lea r8, [rbp + 0x9a0]
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0xbb0]
call fcn.14007cb7c
xor r8d, r8d
lea rdx, [rbp + 0x570]
call fcn.140055b44
xor eax, eax
jmp 0x140066dcd
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileSize]
or r8d, 0xffffffff
mov ecx, r12d
cmp eax, r8d
mov edx, 0x2713
cmove ecx, edx
mov dword [rsp + 0x50], ecx
je 0x140066dc2
cmp eax, esi
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x50]
mov rcx, r14
cmovl esi, eax
lea rdx, [rbp + 0x180]
mov r8d, esi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140066dc2
test ebx, ebx
jne 0x140066dc0
mov ebx, 4
cmp esi, ebx
jbe 0x140066d87
mov eax, dword [rbp + 0x180]
lea rdx, [rsp + 0x60]
lea rcx, str.UOCF
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], r12b
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x140066d2e
lea ebx, [rax + 2]
cmp edi, 0x62
lea eax, [rbx + 0x59]
cmove ebx, eax
jmp 0x140066dc0
lea r15, [0x14008e230]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r8, eax
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memmove
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd rcx, eax
cmp rcx, r13
jae 0x140066df7
mov byte [rsp + rcx + 0x60], r12b
mov rdx, r15
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x140066dc0
cmp edi, ebx
jne 0x140066d87
mov edi, 3
cmp esi, 0xe
jbe 0x140066daa
mov eax, 0x4d42
cmp word [rbp + 0x180], ax
jne 0x140066daa
cmp dword [rbp + 0x19e], r12d
jne 0x140066daa
mov ebx, 9
jmp 0x140066dc0
cmp esi, 0x24
jbe 0x140066dc2
cmp dword [rbp + 0x180], 0x9ac6cdd7
jne 0x140066dc2
mov ebx, 0xa
mov edi, ebx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
mov rcx, qword [rbp + 0xdc0]
xor rcx, rsp
call fcn.14008a940
mov rbx, qword [rsp + 0xf18]
add rsp, 0xed0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14008aa78
int3