Function at 0x1c7c5a0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x238
mov edi, ecx
mov eax, dword [0x1d01324]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
lea esi, [ebp - 0x218]
push 0x208
push 0
push esi
call fcn.01cb76e0
add esp, 0xc
push 2
push 0
push 0xffffffffffffff96
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x21c]
push 0
push eax
push 0x6a
push esi
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x21c], 0x6a
jne 0x1c7c88a
push str.546865576F726C64_86C36F73_2C25_4a7d_91EA_F5581018A42D
push esi
call fcn.01cce713
add esp, 8
xor ebx, ebx
test eax, eax
jne 0x1c7c8c7
mov eax, 0xfffffffc
sub eax, dword [ebp - 0x21c]
push 1
push 0
push eax
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x220]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea ecx, [ebp - 0x21c]
push ecx
push 4
push eax
push dword [edi + 8]
call esi
mov eax, dword [ebp - 0x220]
add eax, dword [ebp - 0x21c]
neg eax
push 1
push 0
push eax
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x224]
push 0
lea ecx, [ebp - 0x21c]
push ecx
push 4
push eax
push dword [edi + 8]
call esi
cmp dword [ebp - 0x224], 0
je 0x1c7c88e
lea eax, [edi + 0x26e4]
mov dword [ebp - 0x22c], eax
lea esi, [edi + 0x5cfb8]
xor eax, eax
mov dword [ebp - 0x228], 0
xor ebx, ebx
mov dword [ebp - 0x238], edi
jmp 0x1c7c70b
mov dword [ebx], esi
add ebx, 4
mov dword [eax + 0x26e8], ebx
mov edi, eax
mov eax, dword [ebp - 0x240]
add eax, 1
add esi, 0x20
cmp eax, dword [ebp - 0x224]
mov ebx, dword [ebp - 0x244]
jae 0x1c7c898
mov dword [ebp - 0x240], eax
push 0
lea eax, [ebp - 0x21c]
push eax
push 0x20
push esi
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov word [esi], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
add eax, dword [esi + 0x18]
adc ecx, dword [esi + 0x1c]
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov edx, dword [ebp - 0x228]
sub edx, eax
sbb ebx, ecx
add edx, dword [esi + 0x10]
adc ebx, dword [esi + 0x14]
add edx, 1
mov dword [ebp - 0x228], edx
adc ebx, 0
mov dword [ebp - 0x244], ebx
mov ebx, dword [edi + 0x26e8]
mov eax, edi
mov edi, dword [edi + 0x26ec]
cmp ebx, edi
jb 0x1c7c6e0
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
sub ebx, ecx
sar ebx, 2
lea eax, [ebx + 1]
cmp eax, 0x40000000
jae 0x1c7c8de
sub edi, ecx
mov ecx, edi
sar ecx, 2
sar edi, 1
cmp edi, eax
cmovb edi, eax
cmp ecx, 0x1fffffff
mov eax, 0x3fffffff
cmovae edi, eax
test edi, edi
je 0x1c7c7e2
cmp edi, 0x40000000
jae 0x1c7c8e9
lea eax, [edi*4]
push eax
call fcn.01cb30d6
add esp, 4
mov dword [ebp - 0x234], eax
jmp 0x1c7c7ec
mov dword [ebp - 0x234], 0
mov ecx, dword [ebp - 0x234]
lea eax, [ecx + ebx*4]
mov dword [ecx + ebx*4], esi
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 0x26e4]
mov dword [ebp - 0x230], edx
mov ecx, dword [ecx + 0x26e8]
sub ecx, dword [ebp - 0x230]
sub eax, ecx
mov dword [ebp - 0x23c], eax
test ecx, ecx
jle 0x1c7c841
push ecx
push dword [ebp - 0x230]
push dword [ebp - 0x23c]
call fcn.01cb6be0
add esp, 0xc
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
jmp 0x1c7c847
mov eax, dword [ebp - 0x230]
mov edx, dword [ebp - 0x234]
lea ecx, [edx + edi*4]
lea edx, [edx + ebx*4]
add edx, 4
mov edi, dword [ebp - 0x238]
mov ebx, dword [ebp - 0x23c]
mov dword [edi + 0x26e4], ebx
mov dword [edi + 0x26e8], edx
mov dword [edi + 0x26ec], ecx
test eax, eax
je 0x1c7c6ed
push eax
call fcn.01cb3106
add esp, 4
jmp 0x1c7c6ed
xor ebx, ebx
jmp 0x1c7c8c7
mov dword [ebp - 0x228], 0
mov eax, dword [edi + 0x5d100]
mov ecx, dword [edi + 0x5d104]
sub eax, dword [ebp - 0x228]
sbb ecx, ebx
movd xmm0, eax
movd xmm1, ecx
punpckldq xmm0, xmm1
pshufd xmm0, xmm0, 0x44
movdqu xmmword [edi + 0x5d110], xmm0
mov bl, 1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.01cb3141
mov eax, ebx
add esp, 0x238
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x22c]
call fcn.01c41eac
call fcn.01cc6b80
int3