Function at 0xc9e650
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0xe19998
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push ebp
push esi
push edi
mov eax, dword [0xe816ec]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [edi + 0x1090]
mov ecx, 1
lock xadd dword [eax], ecx
lea ebp, [edi + 0x108c]
mov edx, 1
mov eax, ebp
lock xadd dword [eax], edx
mov ecx, dword [edi + 0x10cc]
mov ebx, dword [sym.imp.KERNEL32.dll_SetEvent]
push ecx
call ebx
lea esi, [edi + 0x1098]
push esi
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0x40], 0
cmp dword [edi + 0x1094], 0
je 0xc9e6e4
mov ecx, dword [edi + 0x1094]
mov edx, dword [ecx]
mov eax, dword [edi + 0x10d0]
mov edx, dword [edx + 8]
push eax
call edx
push esi
mov dword [esp + 0x44], 0xffffffff
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [edi + 0x1048]
lea eax, [edi + 0x1020]
push eax
push 0
push 0x1000
lea ecx, [edi + 4]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0xc9e72c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
je 0xc9e72c
mov eax, dword [edi + 0x104c]
push eax
call ebx
mov edx, dword [edi + 0x1050]
mov ecx, dword [edi + 0x104c]
mov eax, dword [edi + 0x1054]
mov esi, dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push 0xffffffffffffffff
mov dword [esp + 0x2c], edx
push 0
lea edx, [esp + 0x2c]
mov dword [esp + 0x2c], ecx
mov ecx, dword [edi + 0x1058]
push edx
push 4
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
call esi
test eax, eax
je 0xc9e7d5
jmp 0xc9e770
cmp eax, 1
jne 0xc9e77e
mov ecx, edi
call fcn.00c9e8a0
jmp 0xc9e79c
cmp eax, 2
jne 0xc9e78a
call fcn.00c9eac0
jmp 0xc9e79c
cmp eax, 3
jne 0xc9e796
call fcn.00c9ee40
jmp 0xc9e79c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [edi + 0x1050]
mov eax, dword [edi + 0x104c]
mov edx, dword [edi + 0x1054]
push 0xffffffffffffffff
mov dword [esp + 0x2c], ecx
push 0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 0x1058]
push ecx
push 4
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], eax
call esi
test eax, eax
jne 0xc9e770
mov esi, edi
call fcn.00c9ebc0
or edx, 0xffffffff
lock xadd dword [ebp], edx
mov ebx, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea esi, [edi + 0x1098]
push esi
mov dword [esp + 0x20], esi
call ebx
mov dword [esp + 0x40], 1
cmp dword [edi + 0x1094], 0
je 0xc9e81c
mov ecx, dword [edi + 0x1094]
mov eax, dword [ecx]
mov edx, dword [edi + 0x10d0]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ebp, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
call ebp
lea esi, [edi + 0x10b4]
push esi
mov dword [esp + 0x24], esi
call ebx
mov dword [esp + 0x40], 2
cmp dword [edi + 0x10b0], 0
je 0xc9e857
mov ecx, dword [edi + 0x10b0]
mov edx, dword [ecx]
mov eax, dword [edi + 0x10d0]
mov edx, dword [edx + 4]
push eax
call edx
push esi
mov dword [esp + 0x44], 0xffffffff
call ebp
or ecx, 0xffffffff
lea eax, [edi + 0x1090]
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0xc9e881
mov edx, dword [edi]
mov eax, dword [edx]
push 1
mov ecx, edi
call eax
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret