Function at 0x39ea30ae
Capabilities:
Read file on windows

Disassembly:
push 0x1a4
mov eax, 0x39ebe928
call fcn.39eaecb8
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x154], eax
xor esi, esi
inc esi
mov dword [ebp - 4], esi
xor ebx, ebx
cmp dword [ebp + 0x3c], ebx
jne 0x39ea30f8
mov byte [ebp - 4], bl
push ebx
push esi
lea ecx, [ebp + 8]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push esi
lea ecx, [ebp + 0x28]
call fcn.39eb4742
xor al, al
call fcn.39eaed4a
ret 0x3c
cmp dword [ebp + 0x40], 8
mov eax, dword [ebp + 0x2c]
jae 0x39ea3104
lea eax, [ebp + 0x2c]
push ebx
push 0x80
push 3
push ebx
push esi
push SysReAllocStringLen
push eax
call dword [sym.imp.kernel32.dll_CreateFileW]
mov dword [ebp - 0x148], eax
cmp eax, 0xffffffff
jne 0x39ea3184
cmp dword [ebp + 0x40], 8
mov eax, dword [ebp + 0x2c]
jae 0x39ea3131
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x130]
call fcn.39eb4742
mov byte [ebp - 4], 2
push dword [ebp - 0x130]
lea ecx, [ebp - 0x2c]
call fcn.39eb4742
mov byte [ebp - 4], 2
push ebx
push esi
lea ecx, [ebp - 0x2c]
call fcn.39eb4742
mov byte [ebp - 4], 1
lea eax, [ebp - 0x12c]
cmp dword [ebp - 0x130], eax
je 0x39ea30d3
push dword [ebp - 0x130]
call fcn.39e6beaf
pop ecx
jmp 0x39ea30d3
push 0x800
call fcn.39eb4742
mov edi, 0x2000
push edi
mov esi, eax
call fcn.39eb4742
push edi
mov dword [ebp - 0x138], eax
call fcn.39eb4742
add esp, 0xc
mov edi, eax
xor eax, eax
mov dword [ebp - 0x13c], edi
stosd dword es:[edi], eax
push ebx
lea eax, [ebp - 0x14c]
push eax
push 0x7fe
jmp 0x39ea33e8
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
jbe 0x39ea33fd
mov edi, dword [ebp - 0x13c]
push esi
mov byte [eax + esi], bl
mov eax, dword [ebp - 0x14c]
push 0x1000
push edi
mov byte [eax + esi + 1], bl
call fcn.39eb4742
test eax, eax
jl 0x39ea3445
push 0x39e08f78
push edi
mov dword [ebp - 0x140], edi
call fcn.39eb4742
mov edi, eax
pop ecx
pop ecx
cmp edi, ebx
je 0x39ea3385
jmp 0x39ea3221
mov edi, dword [ebp - 0x144]
xor eax, eax
mov word [edi], ax
add edi, 4
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x144], edi
call fcn.39e466e0
mov byte [ebp - 4], 4
cmp dword [ebp + 0x20], 8
mov eax, dword [ebp + 0xc]
jae 0x39ea324a
lea eax, [ebp + 0xc]
push 1
push eax
lea ecx, [ebp - 0x188]
call fcn.39eb4742
cmp eax, ebx
jne 0x39ea3479
push pe_nt_image_headers32
lea ecx, [ebp - 0x1b0]
call fcn.39e46e7e
mov byte [ebp - 4], 5
push ebx
lea eax, [ebp - 0x1b0]
push eax
push dword [ebp - 0x140]
lea ecx, [ebp - 0x188]
call fcn.39eb4742
test eax, eax
je 0x39ea3346
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov byte [ebp - 4], 6
xor edi, edi
cmp dword [ebp - 0x1b0], ebx
jbe 0x39ea331f
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x150]
push eax
push edi
lea ecx, [ebp - 0x1b0]
call fcn.39eb4742
lea ecx, [ebp - 0x2c]
call fcn.39e3c0a7
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x2c]
sar eax, 1
push eax
push dword [ebp - 0x150]
call fcn.39eb4742
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x168]
call fcn.39eb4742
mov byte [ebp - 4], 6
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.39eb4742
inc edi
cmp edi, dword [ebp - 0x1b0]
jb 0x39ea32b5
mov ecx, dword [ebp - 0x154]
lea eax, [ebp - 0x168]
push eax
call fcn.39eb4742
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x168]
call fcn.39e339d2
mov edi, dword [ebp - 0x144]
mov dword [ebp - 0x140], edi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b0]
call fcn.39e444f3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.39e444cd
push 0x39e08f78
push edi
call fcn.39eb4742
pop ecx
pop ecx
mov dword [ebp - 0x144], eax
cmp eax, ebx
jne 0x39ea321b
mov edi, dword [ebp - 0x138]
push dword [ebp - 0x140]
xor eax, eax
stosd dword es:[edi], eax
mov edi, 0x1000
push edi
push dword [ebp - 0x138]
call fcn.39eb4742
test eax, eax
jl 0x39ea34a9
push dword [ebp - 0x138]
push edi
push dword [ebp - 0x13c]
call fcn.39eb4742
test eax, eax
jl 0x39ea34c2
push dword [ebp - 0x13c]
call dword [sym.imp.kernel32.dll_lstrlenW]
test al, 1
je 0x39ea33d8
inc eax
push ebx
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, 0x7fe
sub ecx, eax
push ecx
push esi
push dword [ebp - 0x148]
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0x39ea31c7
push dword [ebp - 0x148]
call dword [sym.imp.kernel32.dll_CloseHandle]
push esi
call fcn.39eb4742
push dword [ebp - 0x138]
call fcn.39eb4742
push dword [ebp - 0x13c]
call fcn.39eb4742
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 8]
sub ecx, dword [eax + 4]
add esp, 0xc
sar ecx, 4
test ecx, ecx
seta byte [ebp - 0x131]
jmp 0x39ea34e7
push esi
call fcn.39eb4742
push dword [ebp - 0x138]
call fcn.39eb4742
push edi
call fcn.39eb4742
add esp, 0xc
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push 1
jmp 0x39ea30e6
push esi
call fcn.39eb4742
push dword [ebp - 0x138]
call fcn.39eb4742
push dword [ebp - 0x13c]
call fcn.39eb4742
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.39e444cd
jmp 0x39ea345f
push esi
call fcn.39eb4742
push dword [ebp - 0x138]
call fcn.39eb4742
push dword [ebp - 0x13c]
jmp 0x39ea3457
push esi
call fcn.39eb4742
push dword [ebp - 0x138]
call fcn.39eb4742
push dword [ebp - 0x13c]
call fcn.39eb4742
add esp, 0xc
mov byte [ebp - 0x131], bl
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.39eb4742
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp + 0x28]
call fcn.39eb4742
mov al, byte [ebp - 0x131]
jmp 0x39ea30f0