Function at 0xa6be66
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xb0e8a0
push 0xa713d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffffd70
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov byte [ebp - 0x40], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x3f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x24c], 0
xor eax, eax
mov byte [ebp - 0x24b], al
mov byte [ebp - 0x25c], 0
xor ecx, ecx
mov byte [ebp - 0x25b], cl
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x258], 0
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.kernel32.dll_CreateFileA]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xffffffff
jne 0xa6bf24
mov eax, 0x30000011
jmp 0xa6c903
mov dword [ebp - 4], 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_SetFilePointer]
push 0
lea ecx, [ebp - 0x260]
push ecx
push 2
lea edx, [ebp - 0x25c]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6bf70
mov dword [ebp - 0x258], 0x30000019
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 2
je 0xa6bf88
mov dword [ebp - 0x258], 0x3000001b
jmp 0xa6c8d0
movsx ecx, byte [ebp - 0x25c]
cmp ecx, 0x55
jne 0xa6c171
movsx edx, byte [ebp - 0x25b]
cmp edx, 0x45
jne 0xa6c171
push 0
lea eax, [ebp - 0x260]
push eax
push 4
lea ecx, [ebp - 0x254]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6bfda
mov dword [ebp - 0x258], 0x30000012
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 4
je 0xa6bff2
mov dword [ebp - 0x258], 0x30000013
jmp 0xa6c8d0
push 0
lea eax, [ebp - 0x260]
push eax
push 4
lea ecx, [ebp - 0x244]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c024
mov dword [ebp - 0x258], 0x30000014
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 4
je 0xa6c03c
mov dword [ebp - 0x258], 0x30000015
jmp 0xa6c8d0
mov eax, dword [ebp - 0x244]
xor eax, dword [ebp - 0x254]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
and ecx, 0xff
mov dword [ebp - 0x244], ecx
cmp dword [ebp - 0x244], 0
jne 0xa6c078
mov dword [ebp - 0x258], 0x30000016
jmp 0xa6c8d0
mov edx, dword [ebp - 0x254]
xor edx, dword [ebp - 0x244]
mov dword [ebp - 0x250], edx
lea eax, [ebp - 0x250]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x274]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xa6c0c4
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xa6c0ef
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x270]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xa6c11d
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x248]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xa6c14b
jmp 0xa6c8d0
cmp dword [ebp - 0x270], 0
jb 0xa6c15d
cmp dword [ebp - 0x248], 0
ja 0xa6c16c
mov dword [ebp - 0x258], 0x30000016
jmp 0xa6c8d0
jmp 0xa6c2bb
push 0
push 0
push 0
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_SetFilePointer]
push 0
lea edx, [ebp - 0x260]
push edx
push 4
lea eax, [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c1b6
mov dword [ebp - 0x258], 0x30000012
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 4
je 0xa6c1ce
mov dword [ebp - 0x258], 0x30000013
jmp 0xa6c8d0
push 0
lea edx, [ebp - 0x260]
push edx
push 4
lea eax, [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c200
mov dword [ebp - 0x258], 0x30000014
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 4
je 0xa6c218
mov dword [ebp - 0x258], 0x30000015
jmp 0xa6c8d0
mov edx, dword [ebp - 0x244]
xor edx, dword [ebp - 0x254]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x244]
and eax, 0xff
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jne 0xa6c253
mov dword [ebp - 0x258], 0x30000016
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x254]
xor ecx, dword [ebp - 0x244]
mov dword [ebp - 0x250], ecx
lea edx, [ebp - 0x250]
mov dword [ebp - 0x278], edx
push 0
lea eax, [ebp - 0x260]
push eax
push 4
lea ecx, [ebp - 0x270]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c2a3
mov dword [ebp - 0x258], 0x30000012
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 4
je 0xa6c2bb
mov dword [ebp - 0x258], 0x30000013
jmp 0xa6c8d0
cmp dword [ebp + 0x10], 0
je 0xa6c2cc
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
cmp dword [ebp + 0xc], 0
jne 0xa6c2e1
mov dword [ebp - 0x258], 0
jmp 0xa6c8d0
cmp dword [ebp + 0x14], 0
je 0xa6c2f2
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x248]
mov dword [edx], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x280], ecx
mov edx, dword [ebp - 0x280]
push edx
call fcn.00a6edf0
mov dword [ebp - 0x284], 0
jmp 0xa6c322
mov eax, dword [ebp - 0x284]
add eax, 1
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
cmp ecx, dword [ebp - 0x270]
jae 0xa6c710
mov edx, dword [ebp - 0x284]
imul edx, edx, 0x278
mov eax, dword [ebp + 0xc]
lea ecx, [eax + edx + 0x278]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x288], edx
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x288]
sub ecx, 1
mov dword [ebp - 0x288], ecx
test eax, eax
je 0xa6c6f8
push 0
lea edx, [ebp - 0x260]
push edx
push 4
lea eax, [ebp - 0x26c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c3ab
mov dword [ebp - 0x258], 0x30000017
jmp 0xa6c8d0
cmp dword [ebp - 0x260], 4
jne 0xa6c3c0
cmp dword [ebp - 0x26c], 0x200
jb 0xa6c3cf
mov dword [ebp - 0x258], 0x30000018
jmp 0xa6c8d0
push 0x200
push 0
lea edx, [ebp - 0x240]
push edx
call fcn.00a70120
add esp, 0xc
push 0
lea eax, [ebp - 0x260]
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
lea edx, [ebp - 0x240]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c41c
mov dword [ebp - 0x258], 0x30000019
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0x26c]
je 0xa6c439
mov dword [ebp - 0x258], 0x3000001a
jmp 0xa6c8d0
mov dword [ebp - 0x264], 0
mov edx, dword [ebp - 0x26c]
mov dword [ebp - 0x1c], edx
jmp 0xa6c45d
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [ebp - 0x26c]
jae 0xa6c4e6
mov edx, dword [ebp - 0x264]
mov al, byte [ebp + edx - 0x240]
mov byte [ebp - 0x268], al
mov ecx, dword [ebp - 0x264]
mov dl, byte [ebp + ecx - 0x240]
xor dl, byte [ebp - 0x1c]
mov eax, dword [ebp - 0x264]
mov byte [ebp + eax - 0x240], dl
mov eax, dword [ebp - 0x264]
xor edx, edx
mov ecx, 4
div ecx
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp - 0x278]
mov al, byte [ebp + eax - 0x240]
xor al, byte [ecx + edx]
mov ecx, dword [ebp - 0x264]
mov byte [ebp + ecx - 0x240], al
mov edx, dword [ebp - 0x268]
and edx, 0xff
mov eax, dword [ebp - 0x1c]
add eax, edx
mov dword [ebp - 0x1c], eax
jmp 0xa6c44e
push 0xe
push 0xbd527c
lea ecx, [ebp - 0x238]
push ecx
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c534
lea edx, [ebp - 0x22a]
push edx
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.kernel32.dll_lstrcpy]
lea ecx, [ebp - 0x24c]
push ecx
call fcn.00a7042a
add esp, 4
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x12c], eax
jmp 0xa6c6f3
push 0xe
push 0xbd528c
lea eax, [ebp - 0x238]
push eax
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c56a
lea ecx, [ebp - 0x22a]
push ecx
mov edx, dword [ebp - 0x28c]
add edx, 8
push edx
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0xa6c6f3
push 0xe
push 0xbd529c
lea eax, [ebp - 0x238]
push eax
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c5fd
lea ecx, [ebp - 0x22a]
push ecx
mov edx, dword [ebp - 0x28c]
add edx, 0x130
push edx
call dword [sym.imp.kernel32.dll_lstrcpy]
mov eax, dword [ebp - 0x28c]
add eax, 0x130
push eax
call fcn.00a70570
add esp, 4
test eax, eax
jbe 0xa6c5f8
mov ecx, dword [ebp - 0x28c]
add ecx, 0x130
push ecx
call fcn.00a70570
add esp, 4
mov edx, dword [ebp - 0x28c]
movsx eax, byte [edx + eax + 0x12f]
cmp eax, 0x2f
je 0xa6c5f8
push 0xbd52ac
mov ecx, dword [ebp - 0x28c]
add ecx, 0x130
push ecx
call fcn.00a714c0
add esp, 8
jmp 0xa6c6f3
push 0xe
push 0xbd52b0
lea edx, [ebp - 0x238]
push edx
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c633
lea eax, [ebp - 0x22a]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x28
push ecx
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0xa6c6f3
push 0xe
push 0xbd52c0
lea edx, [ebp - 0x238]
push edx
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c678
lea eax, [ebp - 0x22a]
push eax
lea ecx, [ebp - 0x40]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpy]
lea edx, [ebp - 0x40]
push edx
call fcn.00a7042a
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x234], eax
jmp 0xa6c6f3
push 0xe
push 0xbd52d0
lea edx, [ebp - 0x238]
push edx
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c6ae
lea eax, [ebp - 0x22a]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x238
push ecx
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0xa6c6f3
push 0xe
push 0xbd52e0
lea edx, [ebp - 0x238]
push edx
call fcn.00a73350
add esp, 0xc
test eax, eax
jne 0xa6c6e4
lea eax, [ebp - 0x22a]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x257
push ecx
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0xa6c6f3
mov dword [ebp - 0x258], 0x3000001b
jmp 0xa6c8d0
jmp 0xa6c35c
mov edx, dword [ebp - 0x28c]
push edx
mov eax, dword [ebp - 0x280]
push eax
call fcn.00a6ee6a
jmp 0xa6c313
cmp dword [ebp + 0x18], 0
je 0xa6c8d0
push 0x18
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.00a70120
add esp, 0xc
push 0
lea edx, [ebp - 0x260]
push edx
push 2
lea eax, [ebp - 0x29c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c752
jmp 0xa6c8d0
movsx edx, byte [ebp - 0x29c]
cmp edx, 0x48
jne 0xa6c76a
movsx eax, byte [ebp - 0x29b]
cmp eax, 0x4d
je 0xa6c76f
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
test eax, eax
je 0xa6c78f
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp + 0x18]
add edx, 4
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
test eax, eax
je 0xa6c7b2
jmp 0xa6c8d0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x290], 0
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x298]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
test eax, eax
je 0xa6c7e9
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00a6d59a
test eax, eax
je 0xa6c80c
jmp 0xa6c8d0
mov ecx, dword [ebp - 0x290]
xor edx, edx
mov eax, dword [ebp + 0x18]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov edx, dword [ebp + 0x18]
mov ecx, 0x20
mov eax, dword [edx + 8]
mov edx, dword [edx + 0xc]
call fcn.00a719f0
mov ecx, dword [ebp + 0x18]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edx
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp - 0x298]
xor ecx, ecx
mov esi, dword [edx + 8]
add esi, eax
mov edx, dword [edx + 0xc]
adc edx, ecx
mov eax, dword [ebp + 0x18]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edx
push 0
lea ecx, [ebp - 0x260]
push ecx
push 2
lea edx, [ebp - 0x294]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xa6c87c
jmp 0xa6c8d0
movsx ecx, byte [ebp - 0x29c]
cmp ecx, 0x49
jne 0xa6c894
movsx edx, byte [ebp - 0x29b]
cmp edx, 0x50
je 0xa6c896
jmp 0xa6c8d0
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp + 0x18]
add ecx, 0x10
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00a6d59a
test eax, eax
je 0xa6c8b6
jmp 0xa6c8d0
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp + 0x18]
add ecx, 0x14
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00a6d59a
mov dword [ebp - 4], 0xffffffff
call fcn.00a6c8de
jmp 0xa6c903
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14