Function at 0x10006d35
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xac
mov eax, dword [0x1001f170]
xor eax, esp
mov dword [esp + 0xa8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0x1c]
push ebx
push esi
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x14]
push edi
xor edi, edi
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 0x28]
mov dword [esp + 0x80], edx
mov edx, dword [ebp + 0x2c]
lea esi, [eax + 0x400]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x38], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edi
mov byte [esp + 0x16], 0
mov dword [esp + 0x54], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x10], eax
cmp eax, esi
ja 0x1000663d
mov ecx, dword [esp + 0x84]
mov bl, 0xe8
nop
test edi, edi
jne 0x100065d4
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x84]
push eax
add ecx, edx
push ecx
call fcn.10003be0
add esp, 8
test eax, eax
je 0x1000663d
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x1000663d
cmp byte [esp + 0x9e], bl
je 0x100065c5
add dword [esp + 0x10], ecx
jmp 0x100065ca
mov edi, 1
cmp dword [esp + 0x10], esi
jbe 0x10006580
test edi, edi
je 0x1000663d
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xaa]
mov edi, ecx
sub edi, dword [ebp + 0x14]
add ecx, eax
add edi, edx
add edi, dword [ebp + 0x10]
add edx, ecx
lea ebx, [eax + edi]
mov dword [esp + 0x5c], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], ebx
cmp edx, esi
ja 0x1000663d
mov edi, edx
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x84]
push edx
add eax, edi
push eax
call fcn.10003be0
add esp, 8
test eax, eax
je 0x1000663d
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x1000663d
mov al, byte [esp + 0x9e]
cmp al, 0xe9
je 0x10006654
cmp al, 0x60
je 0x1000666b
add edi, ecx
cmp edi, esi
jbe 0x10006602
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.1000bd45
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0xaa]
sub ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
add ecx, edi
lea ebx, [ecx + edx + 5]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x40]
mov byte [esp + 0x17], 0
mov dword [esp + 0x60], ebx
mov eax, 1
mov dword [esp + 0x1c], 0
jmp 0x10006694
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x78]
mov esi, dword [esp + 0x68]
mov ebx, dword [esp + 0x50]
test edi, edi
je 0x100066b5
mov edx, dword [esp + 0x34]
and edx, dword [esp + 0x2c]
cmp dword [ebp + 0x24], edx
je 0x10006d90
cmp eax, 1
jne 0x10006792
mov al, byte [ebp + 0x20]
cmp al, 0x66
je 0x10006707
cmp al, 0x6d
jne 0x1000663d
mov eax, dword [ebp + 0x10]
push ebx
push eax
call fcn.10009030
mov ecx, dword [esp + 0x20]
mov esi, dword [ebp + 0x14]
push ebx
push ecx
sub esi, eax
call fcn.10009030
add esp, 0x10
add esi, eax
mov dword [esp + 0x24], esi
je 0x1000663d
mov edx, dword [esp + 0x3c]
lea eax, [edx + esi - 1]
mov dword [esp + 0x40], eax
jmp 0x10006792
mov eax, dword [ecx]
cmp eax, 4
jae 0x1000672b
mov edx, dword [esp + 0x60]
inc eax
mov dword [ecx], eax
mov dword [esi + eax*8 - 8], edx
mov eax, dword [ecx]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov dword [esi + eax*8 - 4], ecx
mov dword [esp + 0x60], edx
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ebx
add esi, 0x5001
push eax
mov dword [esp + 0x48], esi
call fcn.10009030
mov ecx, dword [ebx + 0x3140]
push 0
push eax
push ecx
call fcn.10016cec
add esp, 0x14
cmp eax, 0xffffffff
jne 0x10006769
call fcn.1000cfe0
cmp dword [eax], 0
jne 0x1000663d
mov edx, dword [ebx + 0x3140]
push 0x100
inc esi
push esi
push edx
call fcn.10016b7a
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10006792
call fcn.1000cfe0
cmp dword [eax], 0
jne 0x1000663d
mov dword [esp + 0x10], 1
mov dword [esp + 0x20], 0
cmp dword [esp + 0x20], 0
jne 0x10006d66
test edi, edi
je 0x100067c2
mov eax, dword [esp + 0x34]
and eax, dword [esp + 0x2c]
cmp dword [ebp + 0x24], eax
je 0x10006d6c
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x84]
push ecx
add edx, eax
push edx
call fcn.10003be0
add esp, 8
test eax, eax
je 0x1000663d
mov ebx, dword [esp + 0x84]
test ebx, ebx
je 0x1000663d
mov cl, byte [esp + 0x9e]
movzx eax, cl
cmp eax, 0xa00f
jg 0x10006d18
je case.0x10006824.6
sub eax, 6
cmp eax, 0xf9
ja case.0x10006824.8
movzx edx, byte [eax + 0x10006e68]
jmp dword [edx*4 + 0x10006e2c]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x10006848
test edi, edi
jne case.0x100069ab.60
mov dword [esp + 0x1c], 1
jmp case.0x100069ab.60
cmp eax, 1
jne case.0x100069ab.60
test edi, edi
jmp 0x10006d44
mov eax, dword [esp + 0xaa]
mov ecx, dword [esp + 0x18]
add eax, ebx
add eax, dword [esp + 0x10]
mov dword [esp + 0x20], 1
lea edx, [ecx + eax - 1]
mov dword [esp + 0x18], edx
jmp case.0x100069ab.60
mov cl, byte [esp + 0xaa]
mov eax, 0x7f
cmp al, cl
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
mov dword [esp + 0x20], 1
jns 0x100068a0
neg cl
mov edx, dword [esp + 0x18]
movzx ecx, cl
imul ecx, eax
add ecx, ebx
add ecx, dword [esp + 0x10]
lea eax, [edx + ecx - 1]
mov dword [esp + 0x18], eax
jmp case.0x100069ab.60
cmp edi, 1
je case.0x100069ab.60
mov al, byte [esp + 0xa0]
cmp al, 0x44
je 0x100068dd
cmp al, 0x74
je 0x100068dd
cmp al, 0x6c
jne case.0x100069ab.60
cmp byte [esp + 0xa2], 0x20
jne case.0x100069ab.60
cmp byte [esp + 0xa1], 0x24
jne case.0x100069ab.60
cmp dword [esp + 0x1c], 0
je case.0x100069ab.60
cmp al, 0x44
jne 0x10006928
mov ecx, dword [esp + 0xaa]
mov edx, dword [esp + 0x5c]
lea eax, [ecx + edx]
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], eax
mov edi, 1
jmp case.0x100069ab.60
cmp al, 0x74
jne 0x10006949
mov eax, dword [esp + 0xaa]
xor eax, dword [esp + 0x5c]
mov edi, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], eax
jmp case.0x100069ab.60
cmp al, 0x6c
jne 0x1000696a
mov eax, dword [esp + 0x5c]
sub eax, dword [esp + 0xaa]
mov edi, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], eax
jmp case.0x100069ab.60
mov eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
mov edi, 1
jmp case.0x100069ab.60
cmp dword [ebp + 0x24], 0
je case.0x100069ab.60
test edi, edi
je case.0x100069ab.60
movzx eax, byte [esp + 0xa0]
add eax, 0xffffffc5
cmp eax, 0xc1
ja case.0x100069ab.60
movzx eax, byte [eax + 0x10006f74]
jmp dword [eax*4 + 0x10006f64]
cmp ebx, 3
jne case.0x100069ab.60
cmp dword [esp + 0x28], 0
je case.0x100069ab.60
cmp byte [esp + 0xaa], 0x5a
jne case.0x100069ab.60
mov dword [esp + 0x44], 1
jmp case.0x100069ab.60
cmp ebx, 3
jne case.0x100069ab.60
mov eax, 1
cmp dword [esp + 0x28], eax
je case.0x100069ab.60
cmp byte [esp + 0xaa], 0x4d
jne case.0x100069ab.60
mov dword [esp + 0x58], eax
jmp case.0x100069ab.60
cmp ebx, 4
jne case.0x100069ab.60
mov eax, 1
cmp dword [esp + 0x28], eax
je case.0x100069ab.60
cmp byte [esp + 0xaa], 0x5a
jne case.0x100069ab.60
cmp byte [esp + 0xa2], al
jne case.0x100069ab.60
mov dword [esp + 0x44], eax
jmp case.0x100069ab.60
cmp dword [esp + 0x28], 0
je case.0x100069ab.60
cmp ebx, 2
jne case.0x100069ab.60
cmp byte [esp + 0xaa], 0x4d
jne case.0x100069ab.60
mov dword [esp + 0x58], 1
jmp case.0x100069ab.60
mov ecx, 1
cmp dword [esp + 0x58], ecx
je 0x10006a90
cmp dword [esp + 0x44], ecx
jne case.0x100069ab.60
movzx eax, byte [esp + 0x9f]
sub eax, 0x84
je 0x10006ab0
sub eax, ecx
jne case.0x100069ab.60
mov dword [esp + 0x70], ecx
jmp case.0x100069ab.60
cmp dword [esp + 0x70], ecx
jne case.0x100069ab.60
mov eax, dword [esp + 0x7c]
test eax, eax
jne 0x10006ac8
mov dword [esp + 0x7c], ecx
jmp 0x10006adf
cmp dword [esp + 0x30], 0
jne case.0x100069ab.60
cmp eax, ecx
jne case.0x100069ab.60
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0xaa]
add ecx, ebx
add ecx, dword [esp + 0x10]
lea eax, [edx + ecx - 1]
mov dword [esp + 0x18], eax
jmp case.0x100069ab.60
mov eax, 1
cmp dword [esp + 0x30], eax
jne case.0x100069ab.60
cmp byte [esp + 0xa0], 5
jne case.0x100069ab.60
mov ecx, dword [esp + 0xa2]
mov dl, byte [esp + 0xaa]
mov dword [esp + 0x4c], ecx
mov byte [esp + 0x16], dl
mov dword [esp + 0x2c], eax
jmp case.0x100069ab.60
mov al, byte [esp + 0xa0]
cmp al, 5
je 0x10006b8a
cmp al, 0x44
jne case.0x100069ab.60
cmp edi, 1
je case.0x100069ab.60
cmp byte [esp + 0xa2], 0x20
jne case.0x100069ab.60
cmp byte [esp + 0xa1], 0x24
jne case.0x100069ab.60
mov eax, dword [esp + 0xaa]
mov dword [esp + 0x38], eax
mov edi, 1
jmp case.0x100069ab.60
mov eax, 1
cmp dword [esp + 0x30], eax
jne case.0x100069ab.60
mov ecx, dword [esp + 0xa2]
mov edx, dword [esp + 0xaa]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x54], edx
mov dword [esp + 0x34], eax
jmp case.0x100069ab.60
cmp byte [esp + 0xa0], 3
jne case.0x100069ab.60
cmp ebx, 2
jne case.0x100069ab.60
cmp dword [ebp + 0x24], 0
je case.0x100069ab.60
test edi, edi
je case.0x100069ab.60
mov dword [esp + 0x28], 1
jmp case.0x100069ab.60
cmp dword [esp + 0x1c], 0
je 0x1000663d
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0xaa]
push eax
push esi
call fcn.10009030
add esp, 8
test eax, eax
jne 0x10006c1a
test edi, edi
je 0x1000663d
cmp edi, 1
je case.0x100069ab.60
mov dword [esp + 0x64], 1
mov dword [esp + 0x6c], esi
jmp case.0x100069ab.60
mov al, byte [esp + 0xa0]
cmp al, 0x10
jb 0x10006c47
cmp al, 0x17
jbe case.0x10006824.6
cmp al, 0x50
jb 0x10006c53
cmp al, 0x57
jbe case.0x10006824.6
cmp al, 0x90
jb 0x10006c5f
cmp al, 0x97
jbe case.0x10006824.6
cmp al, 0xd0
jb 0x10006c6b
cmp al, 0xd7
jbe case.0x10006824.6
cmp al, 0x18
jb 0x10006c77
cmp al, 0x1f
jbe case.0x10006824.6
cmp al, 0x58
jb 0x10006c83
cmp al, 0x5f
jbe case.0x10006824.6
cmp al, 0x98
jb 0x10006c8f
cmp al, 0x9f
jbe case.0x10006824.6
cmp al, 0xd8
jb 0x10006c9b
cmp al, 0xdf
jbe case.0x10006824.6
cmp al, 0x30
jb 0x10006ca7
cmp al, 0x37
jbe case.0x10006824.6
cmp al, 0x70
jb 0x10006cb3
cmp al, 0x77
jbe case.0x10006824.6
cmp al, 0xb0
jb 0x10006cbf
cmp al, 0xb7
jbe case.0x10006824.6
add al, 0x10
cmp al, 7
jmp 0x10006d33
mov al, byte [esp + 0xa0]
cmp al, 0x44
je 0x10006cd4
cmp al, 0x43
jne 0x10006cfe
cmp byte [esp + 0xa2], 0x20
jne 0x10006cfe
cmp byte [esp + 0xa1], 0x24
jne 0x10006cfe
cmp dword [esp + 0x64], 1
jne 0x10006cfe
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x38], ecx
mov edi, 1
jmp case.0x100069ab.60
cmp al, 7
jbe case.0x10006824.6
cmp al, 0x40
jb 0x10006d0a
cmp al, 0x47
jbe case.0x10006824.6
cmp al, 0x80
jb 0x10006d12
cmp al, 0x87
jbe case.0x10006824.6
add al, 0x40
cmp al, 7
jmp 0x10006d33
cmp eax, 0xa10f
je case.0x10006824.6
cmp eax, 0xa80f
je case.0x10006824.6
cmp eax, 0xa90f
je case.0x10006824.6
sub cl, 0x50
cmp cl, 0xf
ja case.0x100069ab.60
mov eax, dword [esp + 0x1c]
cmp eax, 1
jne 0x10006d42
test edi, edi
jmp 0x10006d44
test eax, eax
je 0x1000663d
mov eax, dword [esp + 0x10]
add eax, ebx
mov dword [esp + 0x10], eax
cmp eax, 0x100
jbe 0x100067a2
cmp dword [esp + 0x20], 0
je 0x10006d6c
inc byte [esp + 0x17]
jmp 0x10006d85
test edi, edi
je 0x1000663d
mov edx, dword [esp + 0x34]
and edx, dword [esp + 0x2c]
cmp dword [ebp + 0x24], edx
jne 0x1000663d
cmp byte [esp + 0x17], 0x40
jbe 0x10006690
mov edx, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
test edi, edi
je 0x1000663d
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x80]
mov dword [ecx], eax
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x10006de3
mov eax, dword [ebp + 0x24]
cmp eax, 1
je 0x1000663d
test eax, eax
jne 0x1000663d
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.1000bd45
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x1000663d
mov bl, byte [esp + 0x16]
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0x54]
cmp edx, esi
jae 0x10006e03
mov byte [eax], bl
mov dword [eax + 1], edi
jmp 0x10006e08
mov dword [eax], edi
mov byte [eax + 4], bl
mov eax, edx
cmp edx, esi
jb 0x10006e10
mov eax, esi
pop edi
mov dword [ecx], eax
mov ecx, dword [esp + 0xb0]
pop esi
pop ebx
xor ecx, esp
mov eax, 2
call fcn.1000bd45
mov esp, ebp
pop ebp
ret