Function at 0x1400968d0
Capabilities:
Get file size
Read file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov r12, rcx
or r15, 0xffffffffffffffff
mov r13, r15
mov qword [rsp + 0x50], r15
xor esi, esi
mov dword [rsp + 0x48], esi
mov ebx, esi
mov qword [rsp + 0x68], rbx
or r9d, 0xffffffff
lea r8, str.LoadINISections
mov rdx, qword [rcx + 0x138]
lea rcx, [rsp + 0x70]
call fcn.1400daf80
nop
inc dword [r12 + 0x134]
cmp qword [r12 + 0x128], rsi
jne 0x140096ca7
lea rcx, [r12 + 8]
call fcn.1400d0090
test eax, eax
jne 0x14009695d
lea rcx, [rsp + 0x70]
call fcn.1400db090
xor eax, eax
jmp 0x140096ce6
mov edi, esi
mov dword [rsp + 0x5c], esi
cmp edi, 0x32
jge 0x1400969b3
cmp r13, 0xffffffffffffffff
jne 0x1400969ca
test edi, edi
jle 0x14009697c
lea ecx, [r13 + 0x15]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
mov dword [rsp + 0x5c], edi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [r12 + 8]
call fcn.140095fd0
mov r13, rax
mov qword [rsp + 0x50], rax
jmp 0x140096963
cmp r13, 0xffffffffffffffff
jne 0x1400969ca
lea rcx, [rsp + 0x70]
call fcn.1400db090
xor eax, eax
jmp 0x140096ce6
xor edx, edx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
cmp eax, 0xffffffff
jne 0x1400969ee
lea rcx, [rsp + 0x70]
call fcn.1400db090
xor eax, eax
jmp 0x140096ce6
lea eax, [r14 + 1]
mov edi, eax
mov ecx, eax
call fcn.14010a204
mov rbx, rax
mov qword [rsp + 0x68], rax
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.14010da60
test rbx, rbx
jne 0x140096a26
lea rcx, [rsp + 0x70]
call fcn.1400db090
xor eax, eax
jmp 0x140096ce6
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xd0]
mov r8d, r14d
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140096a57
lea rcx, [rsp + 0x70]
call fcn.1400db090
xor eax, eax
jmp 0x140096ce6
mov byte [r14 + rbx], 0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, r15
mov qword [rsp + 0x50], r15
lea rdx, [0x140224444]
mov rcx, rbx
call fcn.14010d30c
mov r11, rax
mov qword [rsp + 0x40], rax
test r11, r11
je 0x140096aca
inc dword [r12 + 0x130]
inc r11
mov qword [rsp + 0x40], r11
xor eax, eax
mov rcx, r15
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
dec rcx
add rcx, rbx
cmp r11, rcx
jae 0x140096ac8
lea rdx, [0x140224440]
mov rcx, r11
call fcn.14010d30c
mov r11, rax
mov qword [rsp + 0x40], rax
jmp 0x140096a84
mov ecx, dword [r12 + 0x130]
mov eax, 8
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.14010a204
mov qword [r12 + 0x128], rax
lea rdx, [0x140224444]
mov rcx, rbx
call fcn.14010d30c
mov r14, rax
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x58], esi
mov r15d, esi
mov dword [rsp + 0x60], esi
cmp r15d, dword [r12 + 0x130]
jae 0x140096c97
lea rdx, [0x140209f28]
mov rcx, r14
call fcn.14010d30c
mov rdi, rax
mov qword [rsp + 0xe0], rax
test rax, rax
je 0x140096c8a
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400854f0
mov edx, esi
mov qword [rsp + 0xd8], rdx
mov rcx, qword [r12 + 0x128]
mov qword [rcx + rdx*8], rax
sub rdi, r14
mov rcx, rdi
call fcn.14010a204
mov rcx, qword [r12 + 0x128]
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rcx + r8*8]
mov qword [rdx], rax
lea r8, [rdi - 1]
lea rdx, [r14 + 1]
mov rax, qword [r12 + 0x128]
mov rdi, qword [rsp + 0xd8]
mov rcx, qword [rax + rdi*8]
mov rcx, qword [rcx]
call fcn.14010d5f0
mov rdx, qword [r12 + 0x128]
mov rax, qword [rdx + rdi*8]
mov rcx, qword [rax]
sub rcx, r14
mov rax, qword [rsp + 0xe0]
mov byte [rcx + rax - 1], 0
inc rax
mov qword [rsp + 0x40], rax
lea rdx, [0x140224440]
mov rcx, rax
call fcn.14010d30c
mov r14, rax
test rax, rax
jne 0x140096bf6
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
lea r14, [rbx + rcx - 1]
mov rdi, r14
sub rdi, qword [rsp + 0x40]
lea rcx, [rdi + 1]
call fcn.14010a204
mov rcx, qword [r12 + 0x128]
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rcx + r8*8]
mov qword [rdx + 8], rax
mov rax, qword [r12 + 0x128]
mov rcx, qword [rax + r8*8]
mov r8, rdi
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rcx + 8]
call fcn.14010d5f0
mov rdx, qword [r12 + 0x128]
mov rdi, qword [rsp + 0xd8]
mov rax, qword [rdx + rdi*8]
mov rcx, qword [rax + 8]
sub rcx, qword [rsp + 0x40]
mov byte [rcx + r14], 0
mov rax, qword [r12 + 0x128]
mov rcx, qword [rax + rdi*8]
mov rax, qword [rcx + 8]
mov qword [rcx + 0x10], rax
mov qword [rsp + 0x40], r14
test r14, r14
je 0x140096c97
inc r14
mov qword [rsp + 0x40], r14
inc esi
mov dword [rsp + 0x58], esi
inc r15d
mov dword [rsp + 0x60], r15d
jmp 0x140096b10
mov dword [r12 + 0x130], esi
mov dword [rsp + 0x48], 1
jmp 0x140096cb3
test rbx, rbx
je 0x140096cc1
mov rcx, rbx
call fcn.14010d304
nop
jmp 0x140096cc8
cmp r13, 0xffffffffffffffff
je 0x140096cd8
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x70]
call fcn.1400db090
mov eax, dword [rsp + 0x48]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret