Function at 0x180065590
Capabilities:
Get file size
Read file on windows

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov r13, r8
mov r12, rdx
mov r14, rcx
xor ebp, ebp
mov qword [rax - 0x68], rbp
mov dword [rax - 0x70], ebp
mov dword [rax - 0x78], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rbp + 1]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1800655f7
call fcn.180003220
nop
jmp 0x1800658c8
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x180065620
call fcn.180003220
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
jmp 0x1800658c8
mov rax, qword [rsp + 0x40]
cmp rax, 0x100000
jle 0x180065640
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe00e1001
jmp 0x1800658c8
lea ecx, [rax + 2]
lea rdx, [0x1801171e8]
call fcn.180077024
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x18006566f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8007000e
jmp 0x1800658c8
mov r8d, dword [rsp + 0x40]
add r8d, 2
xor edx, edx
mov rcx, rax
call fcn.1800795c0
mov dword [rsp + 0xb8], ebp
mov qword [rsp + 0x20], rbp
lea r9, [rsp + 0xb8]
mov r8d, dword [rsp + 0x40]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1800656cb
call fcn.180003220
mov esi, eax
mov rcx, rbx
call fcn.18007702c
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x1800658c8
mov rsi, rbp
mov qword [rsp + 0x48], rbp
movzx eax, byte [rbx]
or r15, 0xffffffffffffffff
cmp al, 0xff
jne 0x1800656ed
cmp byte [rbx + 1], 0xee
jne 0x1800656ed
lea rbp, [rbx + 2]
jmp 0x180065889
cmp al, 0xef
jne 0x1800657cb
cmp byte [rbx + 1], 0xbb
jne 0x1800657cb
cmp byte [rbx + 2], 0xbf
jne 0x1800657cb
mov ecx, dword [rsp + 0x40]
mov eax, 2
mul rcx
cmovo rax, r15
lea rdx, [0x1801171e8]
mov rcx, rax
call fcn.180077024
mov rsi, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x180065751
mov rcx, rbx
call fcn.18007702c
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8007000e
jmp 0x1800658c8
mov r8d, dword [rsp + 0x40]
add r8, r8
xor edx, edx
mov rcx, rax
call fcn.1800795c0
mov r11, qword [rsp + 0x40]
lea r9d, [r11 - 3]
lea r8, [rbx + 3]
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], rsi
mov edx, 8
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x1800657b3
mov rcx, rsi
call fcn.18007702c
nop
mov rcx, rbx
call fcn.18007702c
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xe00e1001
jmp 0x1800658c8
mov rcx, rbx
call fcn.18007702c
mov rbx, rbp
mov qword [rsp + 0x50], rbx
mov rbp, rsi
jmp 0x180065889
mov ecx, dword [rsp + 0x40]
inc ecx
mov eax, 2
mul rcx
cmovo rax, r15
lea rdx, [0x1801171e8]
mov rcx, rax
call fcn.180077024
mov rsi, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x180065815
mov rcx, rbx
call fcn.18007702c
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8007000e
jmp 0x1800658c8
mov r8d, dword [rsp + 0x40]
inc r8d
add r8, r8
xor edx, edx
mov rcx, rax
call fcn.1800795c0
mov r11, qword [rsp + 0x40]
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], rsi
mov r9d, r11d
mov r8, rbx
mov edx, 8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x180065876
call fcn.180003220
mov ebp, eax
mov rcx, rsi
call fcn.18007702c
nop
mov rcx, rbx
call fcn.18007702c
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebp
jmp 0x1800658c8
mov rcx, rbx
call fcn.18007702c
mov rbx, rbp
mov qword [rsp + 0x50], rbx
mov rbp, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x60], r15
mov r9, r13
mov r8, r12
mov rdx, rbp
mov rcx, r14
call fcn.180065c50
mov edi, eax
test rsi, rsi
je 0x1800658b8
mov rcx, rsi
call fcn.18007702c
nop
test rbx, rbx
je 0x1800658c6
mov rcx, rbx
call fcn.18007702c
nop
mov eax, edi
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret