Function at 0x2e06d8e7
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x1c]
sub esp, 0xf8
push ebx
mov ebx, dword [ebp + 0x14]
push esi
xor esi, esi
mov dword [eax], esi
mov dword [eax + 4], esi
mov eax, ebx
or eax, dword [ebp + 0x18]
je 0x2e06de71
push edi
mov edi, dword [ebp + 0x20]
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 8], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
call dword [eax + 0xc]
mov dword [ebp - 0x40], eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0xc], edx
call dword [eax + 0xc]
test eax, eax
mov eax, 0x10000
je 0x2e06d944
movzx ecx, word [ebp + 0xc]
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x3c], eax
cmp ecx, dword [ebp + 0x18]
jb 0x2e06d959
ja 0x2e06d954
cmp eax, ebx
jb 0x2e06d959
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp + 0x18]
xor ecx, ecx
sub ebx, eax
sbb edx, ecx
add ebx, 0x1ffff
adc edx, esi
mov eax, ebx
shrd eax, edx, 0x10
push 4
pop ecx
shr edx, 0x10
cmp eax, ecx
mov dword [ebp - 0x1c], ecx
jg 0x2e06d980
mov dword [ebp - 0x1c], eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
test eax, eax
jne 0x2e06d996
push 0x40
pop eax
cmp dword [ebp - 0x1c], eax
jle 0x2e06d996
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
cmp eax, esi
mov dword [ebp + 0x20], eax
jl 0x2e06de30
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x18]
mov dword [ebp + 0x20], eax
test eax, eax
jl 0x2e06de30
and dword [ebp - 4], esi
cmp dword [ebp - 0x1c], esi
jle 0x2e06de0d
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xe4]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0xe0]
lea ebx, [ebp - 0xf8]
lea esi, [ebp - 0xd8]
mov dword [ebp - 0x38], eax
cmp dword [ebp + 0x18], 0
ja 0x2e06da1a
cmp dword [ebp + 0x14], 0
jbe 0x2e06dbb3
mov eax, dword [ebp - 4]
cmp dword [ebp - 8], eax
jne 0x2e06da71
mov eax, dword [ebp - 0x38]
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
mov dword [eax + 0xc], ecx
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
test eax, eax
jne 0x2e06da5e
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x2e06da53
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp + 0x20], eax
test eax, eax
jne 0x2e06de30
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 8]
mov eax, dword [eax]
inc dword [ebp - 8]
add dword [ebp - 0x38], 0x28
mov dword [ebp + ecx*4 - 0x58], eax
xor edx, edx
cmp dword [ebp - 0x40], edx
je 0x2e06da80
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], edx
jmp 0x2e06daa2
mov ecx, dword [ebp + 0x18]
cmp ecx, edx
jb 0x2e06da9c
ja 0x2e06da92
cmp dword [ebp + 0x14], 0x10000
jbe 0x2e06da9c
mov eax, 0x10000
mov dword [ebp - 0x44], edx
jmp 0x2e06daa2
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x44], ecx
push dword [ebp - 0xc]
sub dword [ebp + 0x14], eax
push dword [ebp - 0x10]
mov dword [esi], eax
push dword [ebp - 4]
mov eax, dword [edi]
sbb dword [ebp + 0x18], 0
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov dword [ebp + 0x20], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [esi]
mov dword [ebx], eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 4], eax
xor eax, eax
add dword [ebp - 0x10], ecx
push 0
adc dword [ebp - 0xc], eax
mov eax, dword [ebp + 0xc]
add dword [ebp + 0xc], ecx
mov dword [edx], eax
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
pop eax
push dword [ebp - 0x28]
adc dword [ebp + 0x10], eax
and dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
push dword [ebp + 0x20]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x2e06db2b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x2e06de29
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x2e06db8e
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
test eax, eax
je 0x2e06db54
cmp dword [ebp - 4], 0
je 0x2e06db54
mov eax, dword [ebp - 4]
push dword [ebp + eax*4 - 0x58]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x20]
mov dword [eax], 2
jmp 0x2e06db8e
mov eax, dword [ebp - 0x34]
cmp eax, dword [esi]
jne 0x2e06de29
push dword [ebp + 0x1c]
mov eax, dword [edi]
push ebx
mov ecx, edi
call dword [eax + 8]
mov dword [ebp + 0x20], eax
test eax, eax
jl 0x2e06de30
dec dword [ebp - 4]
push 0x28
pop eax
sub dword [ebp - 0x2c], eax
sub dword [ebp - 0x24], eax
sub dword [ebp - 0x30], eax
sub dword [ebp - 0x28], eax
sub dword [ebp - 0x20], eax
sub esi, eax
sub ebx, eax
inc dword [ebp - 4]
push 0x28
pop eax
add dword [ebp - 0x2c], eax
add dword [ebp - 0x24], eax
add dword [ebp - 0x30], eax
add dword [ebp - 0x28], eax
add dword [ebp - 0x20], eax
add esi, eax
add ebx, eax
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1c]
jl 0x2e06da0a
mov eax, dword [ebp - 4]
cmp dword [ebp - 8], eax
je 0x2e06de03
dec dword [ebp - 8]
mov esi, dword [ebp - 8]
imul esi, esi, 0x28
lea esi, [ebp + esi - 0xe0]
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esi], 0
jmp 0x2e06de03
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
test eax, eax
je 0x2e06dc2b
mov eax, dword [ebp - 0x18]
imul eax, eax, 0x28
cmp dword [ebp + eax - 0xd4], 1
jne 0x2e06dc2b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x18]
mov dword [ebp + 0x20], eax
test eax, eax
jl 0x2e06de30
mov esi, dword [ebp - 0x18]
push 0xffffffffffffffff
push dword [ebp + esi*4 - 0x58]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x2e06de29
mov dword [ebp - 4], esi
cmp esi, 0xffffffff
jne 0x2e06dc51
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x18]
mov dword [ebp + 0x20], eax
test eax, eax
jl 0x2e06de30
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
and dword [ebp - 0x34], 0
imul esi, esi, 0x28
push 0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + esi - 0xf0]
push eax
push dword [ebp + 8]
lea ebx, [ebp + esi - 0xd4]
mov dword [ebx], 2
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x2e06dca2
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x2e06dc97
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp + 0x20], eax
test eax, eax
jne 0x2e06de30
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp + esi - 0xd8]
jne 0x2e06de29
mov eax, dword [edi]
dec dword [ebp - 0x14]
mov ecx, edi
call dword [eax + 0x10]
test eax, eax
je 0x2e06dccc
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x18], eax
jne 0x2e06de03
cmp dword [ebx], 2
jne 0x2e06de03
mov esi, dword [ebp - 4]
push dword [ebp + 0x1c]
imul esi, esi, 0x28
mov edx, dword [edi]
lea eax, [ebp + esi - 0xf8]
push eax
mov ecx, edi
call dword [edx + 8]
mov dword [ebp + 0x20], eax
test eax, eax
jl 0x2e06de30
lea eax, [ebp + esi - 0xd4]
and dword [eax], 0
inc dword [ebp - 0x18]
mov dword [ebp + 0x20], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 8]
jne 0x2e06dd14
and dword [ebp - 0x18], 0
mov eax, dword [ebp + 0x14]
or eax, dword [ebp + 0x18]
je 0x2e06ddec
mov ecx, dword [ebp + 0x18]
test ecx, ecx
jb 0x2e06dd3d
ja 0x2e06dd32
cmp dword [ebp + 0x14], 0x10000
jbe 0x2e06dd3d
and dword [ebp - 0x44], 0
mov eax, 0x10000
jmp 0x2e06dd43
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x44], ecx
push dword [ebp - 0xc]
sub dword [ebp + 0x14], eax
push dword [ebp - 0x10]
lea ebx, [ebp + esi - 0xd8]
push dword [ebp - 4]
sbb dword [ebp + 0x18], 0
mov dword [ebx], eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x10]
mov ebx, dword [ebx]
mov edx, dword [ebp + 0xc]
mov dword [ebp + esi - 0xf8], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp + esi - 0xf4], ecx
xor ecx, ecx
add dword [ebp - 0x10], ebx
mov dword [ebp + esi - 0xe8], edx
mov edx, dword [ebp + 0x10]
adc dword [ebp - 0xc], ecx
add dword [ebp + 0xc], ebx
mov dword [ebp + esi - 0xdc], eax
mov dword [ebp + esi - 0xe4], edx
adc dword [ebp + 0x10], ecx
lea ecx, [ebp + esi - 0xf0]
push ecx
push 0
push ebx
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x2e06ddd6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x2e06de29
mov eax, dword [ebp + 0x20]
inc dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x2e06ddec
mov eax, dword [ebp + 0x20]
mov dword [eax], 2
mov eax, dword [ebp - 4]
push dword [ebp + eax*4 - 0x58]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
imul eax, eax, 0x28
cmp dword [ebp + eax - 0xd4], 2
je 0x2e06dcd5
cmp dword [ebp - 0x14], 0
jg 0x2e06dbdf
mov eax, dword [ebp + 0x14]
or eax, dword [ebp + 0x18]
jne 0x2e06de29
and dword [ebp + 0x20], eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
cmp eax, dword [ebp - 0x10]
jne 0x2e06de29
cmp edx, dword [ebp - 0xc]
je 0x2e06de30
mov dword [ebp + 0x20], 0x80004005
mov edi, dword [ebp - 8]
test edi, edi
jle 0x2e06de6d
lea esi, [ebp - 0xe0]
lea eax, [esi - 0x10]
cmp dword [eax + 0x1c], 1
jne 0x2e06de5a
and dword [ebp + 0x1c], 0
push 1
lea ecx, [ebp + 0x1c]
push ecx
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov eax, dword [esi]
test eax, eax
je 0x2e06de67
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add esi, 0x28
dec edi
jne 0x2e06de3d
mov eax, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
leave
ret 0x1c