Function at 0x9250d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0xb108d8
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, ecx
xor esi, esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], esi
mov dword [ebp - 0x20], esi
mov eax, ebx
call fcn.00964530
test eax, eax
jne 0x92513a
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x100
call fcn.00a7a155
add esp, 4
mov edi, eax
cmp edi, esi
je 0x92551f
push 1
push esi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x24], eax
push 0x100
push esi
push edi
call fcn.00a7ffb0
add esp, 0xc
push esi
lea eax, [ebp - 0x20]
push eax
push 0xfb
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x9254ed
push 0x2e
push edi
call fcn.00a7a2c0
add esp, 8
mov esi, eax
test esi, esi
je 0x925343
cmp byte [esi + 1], 0
je 0x925343
mov eax, str..SCR
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..PIF
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..VBE
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..VBS
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..COM
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..CPL
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..WSF
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..HTA
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..CMD
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..CHM
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..SHTML
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..MSI
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..URL
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, 0xace5c0
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x9252df
mov eax, str..JSON
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9252df
mov eax, str..JSP
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x9254e6
mov eax, 0xace5d4
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..JSE
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..JAR
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..LNK
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, 0xace5f4
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
push 0x2e
push edi
call fcn.00a7aa50
add esp, 8
mov esi, eax
test esi, esi
je 0x9254ed
cmp byte [esi + 1], 0
je 0x9254ed
mov eax, str..SCR
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..PIF
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..VBE
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..VBS
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..COM
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..CPL
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..WSF
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..HTA
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..CMD
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..CHM
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..SHTML
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..MSI
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..URL
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, 0xace5c0
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x925496
mov eax, str..JSON
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x925496
mov eax, str..JSP
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x9254e6
mov eax, 0xace5d4
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..JSE
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..JAR
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, str..LNK
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x9254e6
mov eax, 0xace5f4
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x9254ed
mov dword [ebp - 0x1c], 1
push 0
push 0
mov ecx, dword [ebp - 0x24]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push edi
call fcn.00a78fec
add esp, 4
jmp 0x92551f
mov dword [ebp - 4], 0xfffffffe
cmp dword [ebp - 0x28], 0
je 0x925535
lea edx, [ebp - 0x2c]
push edx
call fcn.00985290
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret