Function at 0x673574
Capabilities:
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdc8
mov eax, 0x69d2ab
xor edx, edx
push ebx
push esi
push edi
mov esi, dword [ebp + 0x20]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x84], 0x6f5a20
mov dword [ebp - 0x80], esp
mov dword [ebp - 0x88], eax
mov word [ebp - 0x7c], 0
mov dword [ebp - 0x70], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0x8c], ecx
lea eax, [ebp - 0x8c]
mov dword fs:[0], eax
mov edx, dword [ebx + 8]
push edx
call fcn.00445e50
pop ecx
test al, al
jne 0x6735e7
mov eax, 1
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
lea ecx, [ebp - 0x170]
push ecx
mov eax, dword [ebx + 8]
push eax
call fcn.006a0d9c
add esp, 8
test eax, eax
je 0x673615
mov eax, 1
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
cmp dword [ebp - 0x154], 0
jne 0x67363f
cmp dword [ebp - 0x158], 0
jne 0x67363f
xor ecx, ecx
mov dword [esi], ecx
xor eax, eax
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
mov word [ebp - 0x7c], 8
xor eax, eax
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, 0x6ff378
mov dword [ebp - 0x28], eax
mov eax, 0x6ff36c
mov ecx, dword [edx + 8]
cmp eax, 0x6ff36c
mov dword [ebp - 0x178], ecx
je 0x673674
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0x70]
inc dword [ebp - 0x70]
mov word [ebp - 0x7c], 0x20
push ebx
lea edx, [ebp - 0x30]
push edx
call fcn.0069a2e0
mov ecx, dword [ebp - 0x14c]
add esp, 8
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x30]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0xc], ecx
lea ecx, [ebp - 0x190]
mov eax, dword [ebp + 0x18]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 4], eax
push edx
push 0x6f597c
push ecx
call fcn.00673f94
add esp, 0xc
mov eax, dword [0x6f59a0]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov edx, dword [ebp - 0x188]
cmp eax, edx
setne cl
and ecx, 1
test cl, cl
je 0x6737d9
mov eax, dword [ebp - 0x188]
mov edx, dword [eax + 0x40]
mov dword [ebp - 0x94], edx
mov edx, dword [eax + 0x44]
xor eax, eax
mov dword [ebp - 0x90], edx
mov ecx, dword [ebp - 0x94]
mov dword [esi], ecx
push eax
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x6737c6
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x673778
mov ebx, dword [ebp - 0x28]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x67376f
cmp ebx, 0x6ff36c
je 0x673768
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x673774
mov eax, 1
jmp 0x673774
mov eax, 1
test eax, eax
jne 0x6737c6
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0x98], edx
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
mov dword [ebp - 0x9c], ecx
mov eax, dword [ebp - 0x9c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xa0], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1a8], ecx
pop eax
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
xor eax, eax
test al, al
jne 0x6738dd
push 0
push 0x80
push 3
push 0
push 3
push accept
mov edx, dword [ebx + 8]
push edx
call sub.KERNEL32.DLL_CreateFileA
mov edi, eax
cmp edi, 0xffffffff
jne 0x6738dd
mov eax, 1
push eax
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x6738ca
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x67387c
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xa8], edx
mov ecx, 0x6ff36c
mov eax, dword [ebp - 0xa8]
cmp ecx, eax
je 0x673873
mov edx, 0x6ff36c
mov ecx, dword [ebp - 0xa8]
cmp edx, ecx
je 0x67386c
mov eax, dword [ebp - 0xa8]
push eax
call sub.KERNEL32.DLL_InterlockedDecrement
mov edx, dword [ebp - 0xa8]
mov ecx, dword [edx]
inc ecx
jmp 0x673878
mov ecx, 1
jmp 0x673878
mov ecx, 1
test ecx, ecx
jne 0x6738ca
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff4
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0xb0]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xb4], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xb8], eax
mov edx, dword [ebp - 0xb8]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1b8], ecx
pop eax
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0xbc], 0xffffffff
cmp dword [ebp + 0x1c], 0
jne 0x6738ff
cmp dword [ebp + 0x18], 0
jbe 0x673919
jmp 0x673901
jle 0x673919
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp + 0x1c]
sub eax, dword [ebp + 0x10]
sbb edx, dword [ebp + 0x14]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
cmp dword [ebp + 0x14], 0
jne 0x67392b
cmp dword [ebp + 0x10], 0
jbe 0x673a3e
jmp 0x673931
jle 0x673a3e
mov eax, dword [ebp + 0x14]
mov edx, eax
mov dword [ebp - 0xc4], eax
sar edx, 0x1f
mov eax, dword [ebp + 0x10]
and eax, 0xffffffff
lea edx, [ebp - 0xc4]
mov dword [ebp - 0xc8], eax
push 0
push edx
mov ecx, dword [ebp - 0xc8]
push ecx
push edi
call sub.KERNEL32.DLL_SetFilePointer
cmp eax, 0xffffffff
jne 0x673a3e
mov eax, 2
push eax
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x673a2b
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x6739dd
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xcc], edx
mov ecx, 0x6ff36c
mov eax, dword [ebp - 0xcc]
cmp ecx, eax
je 0x6739d4
mov edx, 0x6ff36c
mov ecx, dword [ebp - 0xcc]
cmp edx, ecx
je 0x6739cd
mov eax, dword [ebp - 0xcc]
push eax
call sub.KERNEL32.DLL_InterlockedDecrement
mov edx, dword [ebp - 0xcc]
mov ecx, dword [edx]
inc ecx
jmp 0x6739d9
mov ecx, 1
jmp 0x6739d9
mov ecx, 1
test ecx, ecx
jne 0x673a2b
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff4
mov dword [ebp - 0xd0], eax
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0xd4]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xd8], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xdc], eax
mov edx, dword [ebp - 0xdc]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1c8], ecx
pop eax
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
mov dword [ebp - 0xe0], 0xffffffff
push 0x8000
call fcn.0067ac46
pop ecx
mov ebx, eax
push 0
lea eax, [ebp - 0xe4]
push eax
push 0x8000
push ebx
push edi
call sub.KERNEL32.DLL_ReadFile
test eax, eax
je 0x673b03
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x673b03
cmp dword [ebp - 0xbc], 0
jne 0x673a94
cmp dword [ebp - 0xc0], 0
jbe 0x673ad2
jmp 0x673a96
jle 0x673ad2
mov eax, dword [ebp - 0xe4]
xor edx, edx
cmp edx, dword [ebp - 0xbc]
jne 0x673ab0
cmp eax, dword [ebp - 0xc0]
jbe 0x673abe
jmp 0x673ab2
jle 0x673abe
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
xor edx, edx
sub dword [ebp - 0xc0], eax
sbb dword [ebp - 0xbc], edx
mov ecx, dword [ebp - 0xe4]
lea eax, [ebp - 0xe0]
push ecx
push ebx
push eax
call fcn.00446e80
add esp, 0xc
cmp dword [ebp - 0xbc], 0
jne 0x673a55
cmp dword [ebp - 0xc0], 0
jne 0x673a55
push ebx
call fcn.0067ac5a
pop ecx
push edi
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0xbc], 0
jne 0x673b28
cmp dword [ebp - 0xc0], 0
jbe 0x673be8
jmp 0x673b2e
jle 0x673be8
mov eax, 3
push eax
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x673bcf
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x673b81
mov ebx, dword [ebp - 0x28]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x673b78
cmp ebx, 0x6ff36c
je 0x673b71
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x673b7d
mov eax, 1
jmp 0x673b7d
mov eax, 1
test eax, eax
jne 0x673bcf
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xe8], edx
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
mov dword [ebp - 0xec], ecx
mov eax, dword [ebp - 0xec]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xf0], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0xf4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1d8], ecx
mov word [ebp - 0x7c], 0x20
pop eax
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
jmp 0x673ed5
mov ecx, dword [ebp - 0xe0]
xor ecx, 0xffffffff
mov dword [ebp - 0x94], ecx
mov dword [esi], ecx
push 0
call fcn.006a99d0
add eax, 0x1518
pop ecx
mov dword [ebp - 0x90], eax
xor eax, eax
mov word [ebp - 0x7c], 0x68
mov dword [ebp - 0xf8], eax
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x60], edx
mov word [ebp - 0x7c], 0x74
mov eax, dword [ebp - 0x28]
mov edx, dword [eax - 0xc]
inc edx
test edx, edx
jle 0x673c78
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x68]
mov dword [ebp - 0xfc], ecx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x100]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x1e8], eax
mov edi, dword [ebp - 0x60]
add edi, 0xfffffff4
cmp edi, 0x6ff36c
je 0x673cf7
push edi
call sub.KERNEL32.DLL_InterlockedIncrement
jmp 0x673cf7
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x68]
mov esi, dword [eax - 4]
push esi
push esi
push edx
call fcn.0069a874
mov dword [ebp - 0x108], eax
add esp, 0xc
mov ecx, dword [ebp - 0x108]
lea edx, [ebp - 0x68]
add ecx, 0xc
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10c], edx
mov ecx, dword [ebp - 0x10c]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x110], esi
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x114], edx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x118], ecx
mov eax, dword [ebp - 0x110]
push eax
mov edx, dword [ebp - 0x114]
push edx
mov ecx, dword [ebp - 0x118]
push ecx
call fcn.0069cc60
add esp, 0xc
inc dword [ebp - 0x70]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], edx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x68]
mov edx, dword [ebp - 8]
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x3c], edx
lea edx, [ebp - 0x218]
inc dword [ebp - 0x70]
mov word [ebp - 0x7c], 0x68
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x70]
push eax
push 0x6f597c
push edx
call fcn.006741f4
add esp, 0xc
mov ecx, dword [ebp - 0x210]
add ecx, 0x10
add ecx, 0x30
push ecx
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x673e0b
mov edx, dword [ebp - 0x60]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x673dbd
mov ebx, dword [ebp - 0x60]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x673db4
cmp ebx, 0x6ff36c
je 0x673dad
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x673db9
mov eax, 1
jmp 0x673db9
mov eax, 1
test eax, eax
jne 0x673e0b
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff4
mov dword [ebp - 0x124], edx
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff4
mov dword [ebp - 0x128], ecx
mov eax, dword [ebp - 0x128]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x12c], edx
lea eax, [ebp - 0x68]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x130], eax
mov edx, dword [ebp - 0x130]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x220], ecx
pop eax
mov word [ebp - 0x7c], 0x5c
mov edx, dword [ebp - 0x94]
mov dword [eax], edx
mov edx, dword [ebp - 0x90]
mov dword [eax + 4], edx
xor eax, eax
push eax
dec dword [ebp - 0x70]
dec dword [ebp - 0x70]
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x673ec1
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x673e73
mov ebx, dword [ebp - 0x28]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x673e6a
cmp ebx, 0x6ff36c
je 0x673e63
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x673e6f
mov eax, 1
jmp 0x673e6f
mov eax, 1
test eax, eax
jne 0x673ec1
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0x134], edx
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x138]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x13c], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x140], eax
mov edx, dword [ebp - 0x140]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x230], ecx
mov word [ebp - 0x7c], 0x20
pop eax
mov edx, dword [ebp - 0x8c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret