Function at 0x1501cfc0
Capabilities:
Create thread
Read file on windows

Disassembly:
sub esp, 0x14
push ebx
push ebp
push esi
push edi
push 0
push 0x10c0
push str..SFile.cpp
push 0x1000
mov dword [esp + 0x30], edx
mov ebp, ecx
call sym.Storm.dll_Ordinal_401
xor edx, edx
mov ebx, eax
mov dword [esp + 0x14], edx
jmp 0x1501cff0
mov eax, dword [esp + 0x14]
mov esi, dword [ebp + 0x130]
add eax, edx
cmp esi, eax
jb 0x1501d05a
mov ecx, dword [ebp + 0x10c]
push 0
push 0
push esi
push ecx
mov dword [esp + 0x28], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp + 0x10c]
push 0
lea edx, [esp + 0x14]
push edx
push 0x1000
push ebx
push eax
mov dword [esp + 0x24], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x10]
cmp eax, 0x20
jb 0x1501d08e
mov esi, dword [ebp + 0x130]
lea ecx, [esi + 0x20]
cmp ecx, dword [ebp + 0x134]
jae 0x1501d08e
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], eax
mov edi, dword [ebp + 0x138]
sub esi, edx
add esi, ebx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x138]
cmp dword [eax], 0x1a51504d
jne 0x1501d07f
cmp dword [eax + 4], 0x20
jae 0x1501d0cc
add dword [ebp + 0x130], 0x200
jmp 0x1501cff0
mov ecx, ebp
call fcn.15019740
push 0
push 0xffffffffffffffff
push 0x15041b7c
push ebp
call sym.Storm.dll_Ordinal_403
push 0x8510006c
call sym.Storm.dll_Ordinal_465
push 0
push 0x10dd
push str..SFile.cpp
push ebx
call sym.Storm.dll_Ordinal_403
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x14
ret 8
push 0
push 0x1104
push str..SFile.cpp
push ebx
call sym.Storm.dll_Ordinal_403
mov edx, dword [ebp + 0x138]
mov cl, byte [edx + 0xe]
push 0
mov eax, 0x200
shl eax, cl
push 0x1109
push str..SFile.cpp
push eax
mov dword [ebp + 0x124], eax
call sym.Storm.dll_Ordinal_401
mov dword [ebp + 0x128], eax
mov eax, dword [ebp + 0x138]
mov ecx, dword [eax + 0x18]
push 0
push 0x1112
push str..SFile.cpp
shl ecx, 4
push ecx
call sym.Storm.dll_Ordinal_401
mov ecx, dword [ebp + 0x138]
mov ebx, dword [ebp + 0x10c]
lea edx, [ebp + 8]
push edx
mov dword [ebp + 0x140], eax
mov edx, dword [ecx + 0x18]
mov edi, dword [ecx + 0x10]
add edi, dword [ebp + 0x130]
shl edx, 4
push edx
lea esi, [ebp + 0x144]
push eax
push esi
lea esi, [esp + 0x2c]
call fcn.15017770
push 3
mov eax, str._hash_table_
call fcn.150175e0
mov ecx, dword [ebp + 0x138]
mov edx, dword [ecx + 0x18]
shl edx, 4
mov ecx, eax
mov eax, edx
mov edx, dword [ebp + 0x140]
call fcn.15017570
mov eax, dword [ebp + 0x138]
mov ecx, dword [eax + 0x1c]
imul ecx, ecx, 0x2c
push 0
push 0x1131
push str..SFile.cpp
push ecx
call sym.Storm.dll_Ordinal_401
mov ecx, dword [ebp + 0x138]
mov ebx, dword [ebp + 0x10c]
mov dword [ebp + 0x13c], eax
mov edi, dword [ecx + 0x14]
add edi, dword [ebp + 0x130]
lea edx, [ebp + 8]
push edx
mov edx, dword [ecx + 0x1c]
shl edx, 4
push edx
push eax
lea eax, [ebp + 0x144]
push eax
call fcn.15017770
push 3
mov eax, str._block_table_
call fcn.150175e0
mov ecx, dword [ebp + 0x138]
mov edx, dword [ecx + 0x1c]
shl edx, 4
mov ecx, eax
mov eax, edx
mov edx, dword [ebp + 0x13c]
call fcn.15017570
mov eax, dword [ebp + 0x138]
mov ecx, dword [eax + 0x1c]
push ecx
mov ecx, dword [ebp + 0x13c]
call fcn.15018600
cmp dword [ebp + 0x130], 0
je 0x1501d256
mov eax, dword [ebp + 0x138]
xor edx, edx
cmp dword [eax + 0x1c], edx
jbe 0x1501d256
xor ecx, ecx
lea ecx, [ecx]
mov eax, dword [ebp + 0x13c]
add eax, ecx
cmp dword [eax], 0
je 0x1501d245
mov esi, dword [ebp + 0x130]
add dword [eax], esi
mov eax, dword [ebp + 0x138]
add edx, 1
add ecx, 0x2c
cmp edx, dword [eax + 0x1c]
jb 0x1501d230
mov eax, dword [0x15049610]
test eax, eax
jle 0x1501d278
mov ecx, dword [ebp + 0x118]
cmp dword [eax + 0x118], ecx
jle 0x1501d27a
mov eax, dword [eax + 4]
test eax, eax
jle 0x1501d278
jne 0x1501d265
jmp 0x1501d27a
xor eax, eax
mov esi, dword [ebp]
test esi, esi
je 0x1501d2ac
mov edx, dword [ebp + 4]
test edx, edx
jg 0x1501d28c
not edx
jmp 0x1501d293
mov ecx, ebp
sub ecx, dword [esi + 4]
add edx, ecx
mov dword [edx], esi
mov ecx, dword [ebp]
mov edx, dword [ebp + 4]
mov dword [ecx + 4], edx
mov dword [ebp], 0
mov dword [ebp + 4], 0
test eax, eax
jne 0x1501d2b5
mov eax, 0x1504960c
mov ecx, dword [eax]
mov dword [ebp], ecx
mov edx, dword [ecx + 4]
mov dword [ebp + 4], edx
mov dword [ecx + 4], ebp
mov dword [eax], ebp
cmp dword [ebp + 0x110], 0
je 0x1501d357
cmp dword [0x1504c2fc], 0
jne 0x1501d314
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0x1504c2f8
push 0
push 0
push 0x1501abd0
push 0
push 0
mov dword [0x1504c308], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 1
push eax
mov dword [0x1504c2fc], eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [esp + 0x2c]
push 0x1504c420
mov dword [eax], ebp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 0x138]
mov edx, dword [ecx + 0x1c]
mov eax, dword [ebp + 0x13c]
push edx
push eax
mov ecx, ebp
call fcn.1501b970
push 0x1504c420
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x14
ret 8
test byte [esp + 0x20], 1
je 0x1501d314
cmp dword [esp + 0x28], 0
jne 0x1501d314
push ebp
call sym.Storm.dll_Ordinal_252
push 0xf
call sym.Storm.dll_Ordinal_465
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x14
ret 8