Function at 0x140099bec
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r12
push r14
sub rsp, 0x40
and dword [rax - 0x28], 0
mov rbx, r9
mov rdi, rdx
mov qword [rax - 0x38], r8
mov r14, r8
lea r9, [rax - 0x28]
mov r8d, dword [rsp + 0x80]
mov rbp, rcx
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140099d9a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x140099dfa
mov ecx, 0x40
call fcn.1401d0ba8
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
lea edx, [r9 + 0x28]
call fcn.140096ee8
mov rcx, qword [rsp + 0x88]
mov rsi, rax
mov r12d, 0x400
mov qword [rax + 0x10], rdi
mov rdi, qword [rsp + 0x98]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rax], rbx
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], rcx
test rdi, rdi
jne 0x140099ca2
xor eax, eax
jmp 0x140099cad
mov rdx, r12
mov rcx, rdi
call fcn.1401d0514
add rax, 0xa
mov ecx, 0xffffffff
cmp rax, rcx
jae 0x140099d1d
test rdi, rdi
jne 0x140099cc4
xor eax, eax
jmp 0x140099ccf
mov rdx, r12
mov rcx, rdi
call fcn.1401d0514
mov ecx, 0xfffffff5
cmp rcx, rax
je 0x140099d1d
test rdi, rdi
jne 0x140099ce2
xor eax, eax
jmp 0x140099ced
mov rdx, r12
mov rcx, rdi
call fcn.1401d0514
add rax, 0xa
mov ecx, 0xffffffe7
cmp rax, rcx
jae 0x140099d1d
test rdi, rdi
jne 0x140099d04
xor eax, eax
jmp 0x140099d0f
mov rdx, r12
mov rcx, rdi
call fcn.1401d0514
lea rcx, [rax + 0x22]
call fcn.1401d0ba8
mov rbx, rax
jmp 0x140099d1f
xor ebx, ebx
test rdi, rdi
jne 0x140099d28
xor eax, eax
jmp 0x140099d33
mov rdx, r12
mov rcx, rdi
call fcn.1401d0514
lea rdx, [rax + 0xa]
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
call fcn.140096ee8
mov rbx, rax
lea r8, str._s__READ_
lea rax, [0x140253278]
test rdi, rdi
mov rcx, rbx
cmove rdi, rax
mov rdx, qword [rbx - 0x18]
mov r9, rdi
call fcn.140001138
mov rdx, qword [r14 + 0x18]
lea r9, [0x140099a20]
or r8d, 0xffffffff
mov qword [rsp + 0x28], rbx
mov rcx, rbp
mov qword [rsp + 0x20], rsi
call fcn.14009a1e4
mov rcx, rbx
call fcn.140096fd0
jmp 0x140099e2b
cmp dword [rsp + 0x30], 0
jbe 0x140099dfa
mov rsi, qword [rsp + 0x88]
test rsi, rsi
je 0x140099e2b
mov ecx, 0x28
call fcn.1401d0ba8
mov r9, rax
test rax, rax
je 0x140099e44
mov qword [rax], rbx
lea rdx, [0x140099bb8]
mov qword [rax + 8], rsi
mov r8d, 1
mov qword [rax + 0x10], rdi
mov rcx, rbp
mov rax, qword [rsp + 0x90]
mov qword [r9 + 0x20], rax
mov eax, dword [rsp + 0x30]
mov qword [r9 + 0x18], rax
call fcn.14009740c
jmp 0x140099e2b
mov r10, qword [rsp + 0x88]
test r10, r10
je 0x140099e2b
mov rax, qword [rsp + 0x90]
mov r9, rbx
mov qword [rsp + 0x28], rax
mov r8d, 5
and dword [rsp + 0x20], 0
mov rdx, rdi
mov rcx, rbp
call r10
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop r12
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, 0xfe
lea rdx, str...microstackILibParsers.c
mov ebx, 0xe43
mov dword [rsp + 0x20], eax
mov r9d, edi
mov r8d, ebx
xor ecx, ecx
call fcn.14009fb9c
mov r8d, ebx
lea rdx, str...microstackILibParsers.c
lea rcx, str.CRITICALEXIT__FILE:__s__LINE:__d_r_n
call fcn.1400010e4
mov ecx, edi
call fcn.1401c9718
int3