Function at 0x1001aae0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x38
mov eax, dword [0x100d1040]
xor eax, esp
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x3c]
push ebp
mov ebp, dword [esp + 0x44]
push esi
push edi
mov dword [esp + 0x10], ecx
test eax, eax
je 0x1001ad28
cmp word [eax], 0
je 0x1001ad28
push 0
push 0
push 3
push 0
push 1
push closesocket
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [esp + 0x18], esi
cmp esi, 0xffffffff
jne 0x1001ab47
call fcn.10002c20
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005710f
add esp, 0x38
ret
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov word [esp + 0x31], ax
mov byte [esp + 0x33], al
push 0x10
lea eax, [esp + 0x28]
push eax
push esi
mov dword [esp + 0x28], 0
mov byte [esp + 0x30], 0
call edi
test eax, eax
jne 0x1001aba7
call fcn.10002c20
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005710f
add esp, 0x38
ret
mov eax, dword [esp + 0x1c]
cmp eax, 0x2043414d
jne 0x1001abbe
mov dword [ebp], 5
jmp 0x1001ac4e
cmp eax, 0x43614c66
jne 0x1001abd1
mov dword [ebp], 6
jmp 0x1001ac4e
cmp eax, 0x6b707677
jne 0x1001abe1
mov dword [ebp], 7
jmp 0x1001ac4e
cmp eax, 0x215a7349
jne 0x1001abf1
mov dword [ebp], 0xa
jmp 0x1001ac4e
cmp eax, 0x46464952
jne 0x1001ac20
mov eax, 8
xor ecx, ecx
nop
mov edx, dword [esp + ecx + 0x24]
cmp edx, dword [ecx + str.WAVEfmt]
jne 0x1001ac20
sub eax, 4
add ecx, 4
cmp eax, 4
jae 0x1001ac00
mov dword [ebp], 8
jmp 0x1001ac4e
mov eax, 0x10
xor ecx, ecx
jmp 0x1001ac30
mov edx, dword [esp + ecx + 0x1c]
cmp edx, dword [ecx + str.MEDIA_DESCRIPTOR]
jne 0x1001ac73
sub eax, 4
add ecx, 4
cmp eax, 4
jae 0x1001ac30
mov dword [ebp], 2
mov eax, dword [esp + 0x10]
push esi
mov dword [eax], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005710f
add esp, 0x38
ret
xor eax, eax
push 2
push 0
or ecx, 0xffffffff
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov word [esp + 0x41], ax
mov byte [esp + 0x43], al
push ecx
mov eax, 0xfffffff0
push eax
push esi
mov byte [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1001ace1
push 0
lea eax, [esp + 0x18]
push eax
push 0x10
lea ecx, [esp + 0x38]
push ecx
push esi
call edi
test eax, eax
jne 0x1001ace1
call fcn.10002c20
lea esi, [esp + 0x18]
mov edi, eax
call fcn.1000fcc0
mov eax, edi
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005710f
add esp, 0x38
ret
cmp dword [esp + 0x30], 0x3552454e
je 0x1001acf5
cmp dword [esp + 0x34], 0x4f52454e
jne 0x1001ad01
mov dword [ebp], 1
jmp 0x1001ac4e
mov edx, dword [esp + 0x10]
lea esi, [esp + 0x18]
mov dword [edx], 0
call fcn.1000fcc0
xor eax, eax
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005710f
add esp, 0x38
ret
mov ecx, dword [esp + 0x3c]
pop edi
pop esi
pop ebp
xor ecx, esp
mov eax, 0x80070057
call fcn.1005710f
add esp, 0x38
ret