Function at 0x14000b034
Capabilities:
Get file size
Print debug messages
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x140013008]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov esi, edx
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x50]
xor r14d, r14d
mov qword [rsp + 0x28], rax
mov r9d, 0x104
lea rax, [rsp + 0x60]
mov qword [rsp + 0x50], r14
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov dword [0x1400539a0], r14d
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_SearchPathW]
nop dword [rax + rax]
dec eax
cmp eax, 0x103
ja 0x14000b37c
mov qword [rsp + 0x30], r14
lea r8d, [r14 + 1]
mov dword [rsp + 0x28], 0x80
lea rcx, [rsp + 0x60]
xor r9d, r9d
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateFileW]
nop dword [rax + rax]
mov qword [0x140053760], rax
cmp rax, 0xffffffffffffffff
je 0x14000b37c
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileSize]
nop dword [rax + rax]
lea r9, [rsp + 0x4c]
mov qword [0x140053778], r14
mov ecx, eax
mov dword [0x140053770], r14d
mov eax, 0x51eb851f
mov qword [rsp + 0x20], r14
mul ecx
mov rcx, qword [0x140053760]
lea r8d, [r14 + 2]
shr edx, 5
mov dword [0x140053774], edx
lea rdx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_ReadFile]
nop dword [rax + rax]
test eax, eax
jne 0x14000b170
mov dword [0x1400539a0], 0x2bf
jmp 0x14000b3c7
mov eax, 0xfeff
cmp word [rsp + 0x48], ax
jne 0x14000b188
mov dword [0x140013020], 1
jmp 0x14000b1af
mov rcx, qword [0x140053760]
mov r9d, 1
xor r8d, r8d
mov dword [0x140013020], r14d
lea edx, [r9 - 3]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFilePointer]
nop dword [rax + rax]
mov dword [0x140053768], r14d
call fcn.14000c750
mov eax, 0x57
mov dword [0x140053780], r14d
lea rbx, str.REGEDIT
lea rdi, str.Windows_Registry_Editor_Version
movzx ecx, ax
call fcn.14000b6d8
test eax, eax
je 0x14000b1fb
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_string_l2_1_0.dll_CharNextW]
nop dword [rax + rax]
mov rdi, rax
movzx eax, word [rax]
test ax, ax
jne 0x14000b1d5
cmp r14w, word [rdi]
jne 0x14000b2f0
call fcn.14000c750
mov word [rsp + 0x42], r14w
mov ebx, 0x2e
jmp 0x14000b264
lea rcx, [rsp + 0x40]
call fcn.14000adbc
test eax, eax
je 0x14000b2e1
movzx ecx, word [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_string_l2_1_0.dll_IsCharAlphaNumericW]
nop dword [rax + rax]
test eax, eax
je 0x14000b2e1
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrToIntW]
nop dword [rax + rax]
mov ecx, dword [0x140053780]
shl ecx, 4
add ecx, eax
mov dword [0x140053780], ecx
mov ecx, ebx
call fcn.14000b6d8
test eax, eax
je 0x14000b217
mov ebx, r14d
lea rcx, [rsp + 0x40]
call fcn.14000adbc
test eax, eax
je 0x14000b2e1
movzx ecx, word [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_string_l2_1_0.dll_IsCharAlphaNumericW]
nop dword [rax + rax]
test eax, eax
je 0x14000b2e1
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrToIntW]
nop dword [rax + rax]
mov edx, dword [0x140053780]
inc ebx
shl edx, 4
add edx, eax
mov dword [0x140053780], edx
cmp ebx, 2
jb 0x14000b272
cmp edx, 0x500
je 0x14000b2d5
mov dword [0x1400539a0], 0x2c3
jmp 0x14000b3c7
call fcn.14000c750
mov ecx, esi
jmp 0x14000b364
mov dword [0x1400539a0], 0x2c2
jmp 0x14000b3c7
mov eax, 0x52
movzx ecx, ax
call fcn.14000b6d8
test eax, eax
je 0x14000b31b
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_string_l2_1_0.dll_CharNextW]
nop dword [rax + rax]
mov rbx, rax
movzx eax, word [rax]
test ax, ax
jne 0x14000b2f5
cmp word [rbx], r14w
jne 0x14000b2e1
mov ecx, 0x34
call fcn.14000b6d8
mov ebx, eax
call fcn.14000c750
lea rcx, [rsp + 0x44]
call fcn.14000adbc
test eax, eax
je 0x14000b3c7
cmp word [rsp + 0x44], 0xa
je 0x14000b354
cmp word [rsp + 0x44], 0xd
jne 0x14000b3c7
mov ecx, esi
test ebx, ebx
je 0x14000b36b
mov dword [0x140053780], 0x400
call fcn.14000af0c
jmp 0x14000b3c7
mov dword [0x140053780], 0x310
call fcn.14000b410
jmp 0x14000b3c7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea r8, str.REGEDIT:__CreateFile_failed__GetLastError_____d_n
mov edx, 0xfa
mov r9d, eax
lea rcx, [rbp + 0x170]
call fcn.14000c784
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_core_debug_l1_1_0.dll_OutputDebugStringW]
nop dword [rax + rax]
mov qword [0x140053760], r14
mov dword [0x1400539a0], 0x2be
mov rcx, qword [0x140053760]
test rcx, rcx
je 0x14000b3df
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.140001350
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret