Function at 0x1009c220
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
xor eax, eax
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0x5a
mov dword [ebp - 0xc], eax
cmp edi, eax
jne 0x1009c245
pop edi
mov esp, ebp
pop ebp
ret
push ebx
mov ebx, dword [ebp + 0xc]
push esi
cmp ebx, eax
je 0x1009c555
mov esi, dword [ebp + 0x10]
cmp esi, eax
je 0x1009c555
push 8
push str.sha256__
push edi
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x1009c3ac
push 0x20
call dword [section..data]
add esp, 4
mov dword [ebp - 4], eax
test eax, eax
je 0x1009c2cc
push 0x20
push eax
push esi
push ebx
call fcn.100ae590
mov eax, edi
add esp, 0x10
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1009c2a0
sub eax, edx
lea esi, [eax + 1]
push esi
call dword [section..data]
mov ebx, eax
add esp, 4
mov dword [ebp - 0x14], ebx
test ebx, ebx
jne 0x1009c2d8
mov eax, dword [ebp - 4]
push eax
call dword [0x101e8004]
add esp, 4
pop esi
pop ebx
mov eax, 0x1b
pop edi
mov esp, ebp
pop ebp
ret
push esi
push edi
push ebx
call sub.MSVCR100.dll_memcpy
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
add esp, 0xc
mov esi, ebx
jmp 0x1009c2f0
push str._sha256__
push esi
call edi
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1009c304
mov byte [ebx], 0
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0xc]
push edx
add esi, 8
push esi
call fcn.100af740
add esp, 0xc
test eax, eax
jne 0x1009c35b
mov esi, dword [ebp - 0xc]
mov ecx, 0x20
cmp dword [ebp + 8], ecx
jne 0x1009c34a
mov edx, dword [ebp - 4]
mov eax, esi
sub edx, esi
cmp ecx, 4
jb 0x1009c379
mov edi, dword [edx + eax]
cmp edi, dword [eax]
jne 0x1009c344
sub ecx, 4
add eax, 4
jmp 0x1009c330
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
push esi
call dword [0x101e8004]
add esp, 4
mov dword [ebp - 0xc], 0
test ebx, ebx
je 0x1009c38b
push str.sha256__
push ebx
mov byte [ebx], 0x3b
call edi
mov esi, eax
add esp, 8
test esi, esi
jne 0x1009c2f0
jmp 0x1009c38b
xor edi, edi
push esi
mov dword [ebp - 8], edi
call dword [0x101e8004]
add esp, 4
mov dword [ebp - 0xc], edi
mov eax, dword [ebp - 4]
push eax
call dword [0x101e8004]
mov ecx, dword [ebp - 0x14]
push ecx
call dword [0x101e8004]
mov eax, dword [ebp - 8]
add esp, 8
pop esi
pop ebx
pop edi
mov esp, ebp
pop ebp
ret
push 0x101887a4
push edi
call dword [sym.imp.MSVCR100.dll_fopen]
mov edi, eax
add esp, 8
mov dword [ebp - 0x14], edi
test edi, edi
je 0x1009c555
mov ebx, dword [sym.imp.MSVCR100.dll_fseek]
push 2
push 0
push edi
call ebx
add esp, 0xc
test eax, eax
jne 0x1009c523
push edi
call dword [sym.imp.MSVCR100.dll_ftell]
mov edx, dword [ebp - 0x14]
push 0
push 0
push edx
mov edi, eax
call ebx
add esp, 0x10
test eax, eax
jne 0x1009c523
cmp edi, 0x100000
ja 0x1009c523
mov eax, edi
cdq
push edx
push eax
call fcn.100afa30
add esp, 8
mov dword [ebp + 8], eax
cmp esi, eax
ja 0x1009c523
inc eax
push eax
call dword [section..data]
mov edi, eax
add esp, 4
test edi, edi
je 0x1009c526
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 8]
push eax
push 1
push ecx
push edi
call dword [sym.imp.MSVCR100.dll_fread]
add esp, 0x10
cmp eax, 1
jne 0x1009c526
mov eax, dword [ebp + 8]
cmp esi, eax
jne 0x1009c4b2
mov ecx, dword [ebp + 0xc]
mov eax, edi
cmp esi, 4
jb 0x1009c47d
mov edx, dword [ecx]
cmp edx, dword [eax]
jne 0x1009c526
sub esi, 4
add eax, 4
add ecx, 4
cmp esi, 4
jae 0x1009c465
test esi, esi
je 0x1009c4a9
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1009c526
cmp esi, 1
jbe 0x1009c4a9
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1009c526
cmp esi, 2
jbe 0x1009c4a9
mov al, byte [eax + 2]
cmp al, byte [ecx + 2]
jne 0x1009c526
mov dword [ebp - 8], 0
jmp 0x1009c526
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x10]
push edx
mov ebx, edi
mov byte [eax + edi], 0
call fcn.1009c140
add esp, 8
test eax, eax
jne 0x1009c526
cmp esi, dword [ebp - 0x18]
jne 0x1009c526
mov ecx, dword [ebp - 0x10]
mov edi, dword [ebp + 0xc]
mov eax, esi
cmp esi, 4
jb 0x1009c4f4
mov edi, edi
mov edx, dword [edi]
cmp edx, dword [ecx]
jne 0x1009c51f
sub eax, 4
add ecx, 4
add edi, 4
cmp eax, 4
jae 0x1009c4e0
test eax, eax
je 0x1009c518
mov dl, byte [ecx]
cmp dl, byte [edi]
jne 0x1009c51f
cmp eax, 1
jbe 0x1009c518
mov dl, byte [ecx + 1]
cmp dl, byte [edi + 1]
jne 0x1009c51f
cmp eax, 2
jbe 0x1009c518
mov al, byte [ecx + 2]
cmp al, byte [edi + 2]
jne 0x1009c51f
mov dword [ebp - 8], 0
mov edi, ebx
jmp 0x1009c526
mov edi, dword [ebp - 4]
push edi
call dword [0x101e8004]
mov ecx, dword [ebp - 0x10]
push ecx
call dword [0x101e8004]
mov edx, dword [ebp - 0x14]
push edx
mov dword [ebp - 0x10], 0
call dword [sym.imp.MSVCR100.dll_fclose]
mov eax, dword [ebp - 8]
add esp, 0xc
pop esi
pop ebx
pop edi
mov esp, ebp
pop ebp
ret
pop esi
pop ebx
mov eax, 0x5a
pop edi
mov esp, ebp
pop ebp
ret