Function at 0x100ec5c
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6e0
push ebx
push esi
push edi
xor edi, edi
cmp dword [ebp + 8], edi
mov dword [ebp - 8], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
je 0x100ed30
cmp byte [ebp + 0x1c], 0
jne 0x100ecd5
push 0x3a
push dword [ebp + 0x14]
call fcn.0100fbb0
mov esi, eax
cmp esi, edi
pop ecx
pop ecx
je 0x100ecd5
and byte [esi], 0
push 0x20
push dword [ebp + 0x14]
lea eax, [ebp - 0x6c]
push eax
call fcn.0100fec0
and byte [ebp - 0x4c], 0
add esp, 0xc
mov byte [esi], 0x3a
inc esi
lea eax, [ebp - 0x6c]
mov dword [ebp + 0x14], eax
je 0x100ecd5
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 8]
push eax
push 0x10022b0
push esi
call fcn.01005b40
test eax, eax
je 0x100ee12
jmp 0x100ed3d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 8]
push eax
mov esi, 0x10022b0
push esi
push dword [0x101eed8]
call fcn.01005b40
test eax, eax
je 0x100ee12
mov eax, dword [0x101eed8]
jmp 0x100ed20
inc eax
cmp byte [eax], 0x4f
jne 0x100ed16
mov cl, byte [eax + 1]
cmp cl, 0x55
jne 0x100ed11
cmp byte [eax + 2], 0x3d
je 0x100ed24
cmp cl, 0x3d
je 0x100ed24
push 0x2e
push eax
call fcn.0100fbb0
pop ecx
pop ecx
cmp eax, edi
jne 0x100ecfd
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 8]
push ecx
push esi
push eax
jmp 0x100ecc6
lea eax, [ebp - 0x18]
push eax
call fcn.01009e99
test eax, eax
jne 0x100ed49
mov dword [ebp - 4], 0x7774
jmp 0x100f122
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x18]
call fcn.0100bc1a
cmp eax, edi
mov dword [ebp - 4], eax
jne 0x100f122
lea eax, [ebp - 0x20]
push eax
push 0x100
push dword [0x101ef10]
push dword [ebp - 0x18]
call fcn.0100bd05
cmp eax, edi
mov dword [ebp - 4], eax
jne 0x100f122
push dword [ebp - 0x20]
call fcn.01006885
push eax
lea eax, [ebp - 0x6e0]
push 0x1002294
push eax
call fcn.010106a3
add esp, 0xc
push 0
mov ebx, 0x80
push ebx
push 3
push 0
push 1
mov edi, 0x80000000
push edi
lea eax, [ebp - 0x6e0]
push eax
call fcn.0100b808
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push eax
call esi
cmp eax, 0xffffffff
mov dword [ebp - 8], eax
jne 0x100ee10
lea eax, [ebp - 0x6e0]
push 0x100227c
push eax
call fcn.010106a3
pop ecx
pop ecx
push 0
push ebx
push 3
push 0
push 1
push edi
lea eax, [ebp - 0x6e0]
push eax
call fcn.0100b808
push eax
call esi
cmp eax, 0xffffffff
mov dword [ebp - 8], eax
jne 0x100ee10
mov dword [ebp - 4], 0x7774
jmp 0x100f129
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
lea eax, [ebp - 0xc]
push eax
mov esi, 0x172
push esi
lea eax, [ebp - 0x1e0]
push eax
push dword [ebp - 8]
call ebx
test eax, eax
je 0x100ef20
cmp dword [ebp - 0xc], esi
jae 0x100ee4e
cmp dword [ebp + 8], edi
je 0x100ef20
cmp dword [ebp - 0xc], edi
je 0x100ef20
cmp byte [ebp - 0x70], 4
je 0x100ee60
mov dword [ebp - 4], 0x7770
jmp 0x100f122
cmp byte [ebp - 0x6f], 0
jne 0x100ee6d
mov dword [ebp - 0x10], 1
mov al, byte [ebp + 0x1c]
test al, al
je 0x100ee91
cmp byte [ebp - 0x194], 0
jne 0x100ee89
mov dword [ebp - 4], 0x7773
jmp 0x100f122
lea ecx, [ebp - 0x194]
jmp 0x100ee94
mov ecx, dword [ebp + 0x14]
cmp dword [ebp - 0x10], edi
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x14], ecx
jne 0x100eeb1
push edi
push edi
push 0x372
push dword [ebp - 8]
call esi
mov al, byte [ebp + 0x1c]
xor edi, edi
cmp word [ebp - 0x74], di
jbe 0x100ef04
push 0
lea eax, [ebp - 0xc]
push eax
push 0x24
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 8]
call ebx
test eax, eax
je 0x100ef20
cmp dword [ebp - 0xc], 0x24
jae 0x100eee0
cmp dword [ebp + 8], 0
je 0x100ef20
cmp dword [ebp - 0xc], 0
je 0x100ef20
inc edi
cmp byte [ebp - 0x48], 0
je 0x100eef9
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x14]
call sub.ntdll.dll__strcmpi
test eax, eax
pop ecx
pop ecx
je 0x100ef01
movzx eax, word [ebp - 0x74]
cmp edi, eax
jb 0x100eeb9
mov al, byte [ebp + 0x1c]
movzx ecx, word [ebp - 0x74]
cmp edi, ecx
jbe 0x100ef2c
neg al
sbb eax, eax
and eax, 0xfffffffd
add eax, 0x7776
mov dword [ebp - 4], eax
jmp 0x100f122
mov dword [ebp - 4], 0x7779
jmp 0x100f122
movzx eax, word [ebp - 0x72]
mov ecx, dword [ebp - 0x28]
imul eax, eax, 0x708
cmp dword [ebp - 0x10], 0
push 0
push 0
je 0x100ef4c
lea eax, [eax + ecx + 0x172]
jmp 0x100ef53
lea eax, [eax + ecx + 0x372]
push eax
push dword [ebp - 8]
call esi
xor eax, eax
push eax
mov ecx, 0x100
lea edi, [ebp - 0x5e0]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xc]
push eax
mov esi, 0x400
push esi
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 8]
call ebx
test eax, eax
je 0x100ef94
cmp dword [ebp - 0xc], esi
jae 0x100efa0
cmp dword [ebp + 8], 0
je 0x100ef94
cmp dword [ebp - 0xc], 0
jne 0x100efa0
mov dword [ebp - 4], 0x7776
jmp 0x100f122
mov esi, dword [ebp + 0x18]
xor eax, eax
mov ecx, 0x101
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x5e0]
test al, 4
je 0x100efbb
or dword [esi], 4
test al, 8
je 0x100efc2
or dword [esi], 8
test al, 1
je 0x100efc9
or dword [esi], 1
test al, 2
je 0x100efd0
or dword [esi], 2
test al, 0x10
je 0x100efd7
or dword [esi], 0x10
mov cx, word [ebp - 0x5da]
test cx, cx
je 0x100efe6
or dword [esi], 0x20
test ah, 0xe
je 0x100efef
or byte [esi + 1], 2
shr eax, 6
mov edi, eax
and edi, 7
je 0x100effc
or dword [esi], 0x40
mov ax, word [ebp - 0x5dc]
mov word [esi + 4], ax
mov al, byte [ebp - 0x5d8]
mov word [esi + 6], cx
mov byte [esi + 8], al
mov al, byte [ebp - 0x5d7]
lea edx, [ebp - 0x58a]
mov ecx, esi
sub ecx, edx
mov byte [esi + 9], al
lea eax, [ebp - 0x58a]
lea edx, [ecx + 0x56]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100f030
lea edx, [ebp - 0x5ac]
mov ecx, esi
sub ecx, edx
lea eax, [ebp - 0x5ac]
lea edx, [ecx + 0x34]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100f04d
lea edx, [ebp - 0x5d6]
mov ecx, esi
sub ecx, edx
lea eax, [ebp - 0x5d6]
lea edx, [ecx + 0xa]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100f06a
lea edx, [ebp - 0x5ba]
mov ecx, esi
sub ecx, edx
lea eax, [ebp - 0x5ba]
lea edx, [ecx + 0x26]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100f087
test edi, edi
je 0x100f0be
lea eax, [ebp - 0x568]
push eax
call fcn.01004e51
lea ecx, [ebp - 0x568]
sub esi, ecx
lea eax, [ebp - 0x568]
add esi, 0x78
mov cl, byte [eax]
mov byte [esi + eax], cl
inc eax
test cl, cl
jne 0x100f0b2
jmp 0x100f0f9
lea edx, [ebp - 0x536]
mov ecx, esi
sub ecx, edx
lea eax, [ebp - 0x536]
lea edx, [ecx + 0xaa]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100f0d4
lea ecx, [ebp - 0x568]
sub esi, ecx
lea eax, [ebp - 0x568]
add esi, 0x78
mov cl, byte [eax]
mov byte [esi + eax], cl
inc eax
test cl, cl
jne 0x100f0ef
cmp byte [ebp + 0x1c], 0
je 0x100f118
mov edx, dword [ebp + 0x14]
test edx, edx
je 0x100f118
lea ecx, [ebp - 0x48]
lea eax, [ebp - 0x48]
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100f10e
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x100f122
and byte [eax], 0
mov eax, dword [ebp - 8]
test eax, eax
je 0x100f130
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret 0x18