Function at 0x10002620
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101c2668
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x1022c068]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], edx
mov esi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [edx]
push 0x102345fc
push 0x10008970
mov dword [edx + 4], eax
push 0x10234630
mov dword [ebx], 0
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002994
mov dword [ebx + 4], 0x102345fc
cmp dword [esi + 0x14], 8
jb 0x1000268c
mov esi, dword [esi]
push 0x101e857c
push esi
call fcn.1018f123
mov edi, eax
add esp, 8
mov dword [ebp - 0x1c], edi
test edi, edi
jne 0x100026e6
push 0x1023461c
push 0x10008930
push 0x10234610
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002994
call fcn.1018efb7
mov eax, dword [eax]
mov dword [ebx], eax
xor al, al
mov dword [ebx + 4], 0x1023461c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x24], fcn.1018b580
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x2c], fcn.1018b580
mov dword [ebp - 0x28], edi
push 2
push 0
push edi
mov dword [ebp - 4], 0
call fcn.1018b8c7
add esp, 0xc
test eax, eax
je 0x10002765
push 0x1023461c
push 0x10008930
push 0x10234610
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002994
call fcn.1018efb7
mov eax, dword [eax]
mov dword [ebx], eax
mov dword [ebx + 4], 0x1023461c
mov dword [ebp - 4], 1
push edi
call fcn.1018b580
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
call fcn.1018b48f
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
test esi, esi
jg 0x100027d8
jne 0x1000279d
push edi
mov dword [ebp - 4], 2
call fcn.1018b580
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x1023461c
push 0x10008930
push 0x10234610
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002994
call fcn.1018efb7
mov eax, dword [eax]
mov dword [ebx], eax
mov dword [ebx + 4], 0x1023461c
mov dword [ebp - 4], 3
jmp 0x10002748
push 0
push 0
push edi
lfence
call fcn.1018b8c7
add esp, 0xc
test eax, eax
je 0x10002827
push 0x1023461c
push 0x10008930
push 0x10234610
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002994
call fcn.1018efb7
mov eax, dword [eax]
mov dword [ebx], eax
mov dword [ebx + 4], 0x1023461c
mov dword [ebp - 4], 4
jmp 0x10002748
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 5
mov byte [ebp - 0x11], 0
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
mov dword [ebp - 0x20], eax
sub eax, edx
cmp esi, eax
jae 0x10002848
lea eax, [edx + esi]
mov dword [ecx + 4], eax
jmp 0x100028c4
jbe 0x100028c4
mov eax, dword [ecx + 8]
sub eax, edx
cmp esi, eax
jbe 0x100028a6
push ecx
push esi
lfence
call fcn.10008d40
mov ecx, dword [ebp - 0x18]
jmp 0x100028c4
mov ecx, dword [ebp - 0x20]
add esi, edx
mov eax, esi
sub eax, ecx
push eax
push 0
push ecx
call fcn.10188460
mov ecx, dword [ebp - 0x18]
add esp, 0xc
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x24]
push edi
push 1
lfence
push esi
push dword [ecx]
call fcn.1018f461
add esp, 0x10
cmp eax, 1
je 0x10002970
push edi
lfence
call fcn.1018b4d1
add esp, 4
test eax, eax
je 0x10002918
push 0x1023461c
push 0x10008930
push 0x10234610
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002999
call fcn.1018efb7
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x1000295d
push edi
lfence
call fcn.1018b4a5
add esp, 4
push 0x1023461c
push 0x10008930
push 0x10234610
test eax, eax
je 0x1000294b
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002999
mov dword [ebx], 0x78
jmp 0x1000295d
call fcn.1018498a
add esp, 0xc
test eax, eax
je 0x10002999
mov dword [ebx], 0x83
mov dword [ebx + 4], 0x1023461c
mov dword [ebp - 4], 6
jmp 0x10002748
push edi
mov dword [ebp - 4], 9
call fcn.1018b580
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.1018eed8
call fcn.1018eed8
int3