Function at 0xb986b0
Capabilities:
Read file on windows

Disassembly:
push 0x898
mov eax, 0xbc87c0
call fcn.00bb501e
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x8a4], eax
xor eax, eax
xor ebx, ebx
mov byte [ebp - 0x64], bl
lea edi, [ebp - 0x63]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x50], bl
lea edi, [ebp - 0x4f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, 0xff
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x1f3]
push ebx
push eax
mov byte [ebp - 0x1f4], bl
call fcn.00baf900
add esp, 0xc
push esi
lea eax, [ebp - 0x4f3]
push ebx
push eax
mov byte [ebp - 0x4f4], bl
call fcn.00baf900
add esp, 0xc
push esi
lea eax, [ebp - 0x2f3]
push ebx
push eax
mov byte [ebp - 0x2f4], bl
call fcn.00baf900
xor eax, eax
mov byte [ebp - 0xf0], bl
lea edi, [ebp - 0xef]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xdc], bl
lea edi, [ebp - 0xdb]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xb4], bl
lea edi, [ebp - 0xb3]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xc8], bl
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0xc7]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x78], bl
lea edi, [ebp - 0x77]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xa0], bl
lea edi, [ebp - 0x9f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x3c], bl
lea edi, [ebp - 0x3b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x8c], bl
lea edi, [ebp - 0x8b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x5f3]
push ebx
push eax
mov dword [ebp - 0x89c], ebx
mov byte [ebp - 0x5f4], bl
call fcn.00baf900
xor eax, eax
mov byte [ebp - 0x870], bl
lea edi, [ebp - 0x86f]
stosw word es:[edi], ax
mov byte [ebp - 0x87c], bl
lea edi, [ebp - 0x87b]
stosw word es:[edi], ax
mov eax, dword [ebp - 0x8a4]
mov byte [eax], bl
add esp, 0xc
lea eax, [ebp - 0x82c]
push eax
push ecx
lea eax, [ebp - 0x8a0]
push eax
mov dword [ebp - 0x86c], ebx
call fcn.00ba6c06
pop ecx
pop ecx
mov ecx, eax
call fcn.00ba6ccc
mov dword [ebp - 4], ebx
lea ebx, [ebp - 0x848]
call fcn.00ba5ca4
cmp dword [eax + 0x14], 0x10
jb 0xb9885c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x64]
push 0x14
push eax
call fcn.00bb2249
add esp, 0xc
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x848]
call fcn.00b95dcc
lea eax, [ebp - 0x848]
push eax
call fcn.00ba5e77
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0xb98890
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x50]
push 0x14
push eax
call fcn.00bb2249
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x848]
call fcn.00b95dcc
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
cmp edx, 0x10
jb 0xb988bc
mov esi, dword [eax]
jmp 0xb988be
mov esi, eax
mov ecx, dword [eax + 0x10]
add ecx, esi
cmp edx, 0x10
jb 0xb988ca
mov eax, dword [eax]
push dword [ebp - 0x894]
mov dword [ebp - 0x890], ebx
push ecx
push eax
lea eax, [ebp - 0x890]
push eax
mov dword [ebp - 0x88c], ebx
mov dword [ebp - 0x888], ebx
call fcn.00b9cc48
mov byte [ebp - 4], 1
lea eax, [ebp - 0x865]
lea esi, [ebp - 0x890]
mov byte [ebp - 0x865], 0
call fcn.00b9a1c4
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp dword [0xbdb68c], ebx
je 0xb98c96
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push 0xbdb468
mov dword [ebp - 0x8a0], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x878], eax
cmp eax, 0xffffffff
jne 0xb98976
push ebx
push str.TestMode
push str.Failed_to_Open_Test_ConfigFile
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x890], ebx
je 0xb98970
push dword [ebp - 0x890]
call fcn.00bae562
pop ecx
push ebx
jmp 0xb9925d
mov esi, 0x200
push esi
lea eax, [ebp - 0x7f4]
push ebx
push eax
call fcn.00baf900
add esp, 0xc
push ebx
lea eax, [ebp - 0x8a0]
push eax
push esi
lea eax, [ebp - 0x7f4]
push eax
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x8a0], ebx
jbe 0xb98c96
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp - 0x7f4]
push 0xbcd83c
mov dword [ebp - 0x874], eax
call fcn.00b98536
mov esi, eax
pop ecx
test esi, esi
je 0xb98b91
push 0xbcd840
call fcn.00b98536
pop ecx
mov dword [ebp - 0x878], eax
test eax, eax
jne 0xb98a07
push esi
call edi
add eax, esi
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x878]
sub eax, esi
dec eax
mov dword [ebp - 0x880], eax
test eax, eax
jle 0xb98b86
push 0xbcd844
call edi
push eax
push 0xbcd844
push dword [ebp - 0x874]
call fcn.00bb1825
add esp, 0xc
test eax, eax
jne 0xb98a45
lea eax, [ebp - 0x1f4]
jmp 0xb98a8b
push 0xbcd858
call edi
push eax
push 0xbcd858
push dword [ebp - 0x874]
call fcn.00bb1825
add esp, 0xc
test eax, eax
jne 0xb98a69
lea eax, [ebp - 0x64]
jmp 0xb98a8b
push str.Arch
call edi
push eax
push str.Arch
push dword [ebp - 0x874]
call fcn.00bb1825
add esp, 0xc
test eax, eax
jne 0xb98a95
lea eax, [ebp - 0x50]
push dword [ebp - 0x880]
push esi
push eax
jmp 0xb98ac1
push str.Version
call edi
push eax
push str.Version
push dword [ebp - 0x874]
call fcn.00bb1825
add esp, 0xc
test eax, eax
jne 0xb98ac8
push dword [ebp - 0x880]
push esi
push dword [ebp - 0x898]
call ebx
jmp 0xb98b86
push str.Locale
call edi
push eax
push str.Locale
push dword [ebp - 0x874]
call fcn.00bb1825
add esp, 0xc
test eax, eax
jne 0xb98b51
push 0x14
push esi
lea eax, [ebp - 0x28]
push eax
call ebx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x848]
call fcn.00b95ac0
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x864]
mov byte [ebp - 4], 2
call fcn.00ba48a1
pop ecx
mov esi, eax
lea edi, [ebp - 0x82c]
mov byte [ebp - 4], 3
call fcn.00b95ce9
push 0
push 1
lea ecx, [ebp - 0x864]
call fcn.00b95dcc
push 0
push 1
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 1
call fcn.00b95dcc
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0xb98b86
push str.Cntry
call edi
push eax
push str.Cntry
push dword [ebp - 0x874]
call fcn.00bb1825
add esp, 0xc
test eax, eax
jne 0xb98b86
push 3
push esi
lea eax, [ebp - 0x870]
push eax
call ebx
mov dword [ebp - 0x86c], 1
mov eax, dword [ebp - 0x878]
jmp 0xb989cc
xor esi, esi
mov dword [ebp - 0x7fc], 0xf
mov dword [ebp - 0x800], esi
mov byte [ebp - 0x810], 0
push esi
push esi
push 1
lea eax, [ebp - 0x810]
push esi
push eax
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 4
call fcn.00b97f70
add esp, 0x14
test eax, eax
jns 0xb98c08
push esi
lea eax, [ebp - 0x1f4]
push eax
push str.FAILED_to_read_map.xml_File
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
push 1
lea ecx, [ebp - 0x810]
call fcn.00b95dcc
cmp dword [ebp - 0x890], esi
je 0xb98c02
push dword [ebp - 0x890]
call fcn.00bae562
pop ecx
push esi
jmp 0xb9925d
cmp dword [ebp - 0x7fc], 0x10
mov ebx, dword [ebp - 0x810]
mov eax, ebx
jae 0xb98c1f
lea eax, [ebp - 0x810]
mov esi, dword [ebp - 0x800]
add esi, eax
cmp dword [ebp - 0x7fc], 0x10
jae 0xb98c36
lea ebx, [ebp - 0x810]
push dword [ebp - 0x88c]
lea eax, [ebp - 0x878]
push dword [ebp - 0x890]
lea edi, [ebp - 0x890]
push eax
call fcn.00b9ce91
push dword [ebp - 0x894]
mov ecx, edi
push esi
push ebx
push dword [ebp - 0x890]
call fcn.00b9d4aa
lea eax, [ebp - 0x865]
mov esi, edi
mov byte [ebp - 0x865], 0
call fcn.00b9a1c4
push 0
push 1
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 1
call fcn.00b95dcc
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [ebp - 0x890]
mov dword [0xbdb694], esi
call 0xb9fe16
call 0xb9fee2
mov ebx, eax
test ebx, ebx
je 0xb99250
push str.java_update_map
push dword [ebx + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0xb99250
mov eax, dword [ebx + 0xc]
push str.cntry_lookup
call fcn.00ba00af
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
pop ecx
test eax, eax
je 0xb98d31
mov eax, dword [eax + 0xc]
test eax, eax
je 0xb98d31
push 0xffffffffffffffff
push dword [eax + 4]
lea eax, [ebp - 0x5f4]
push pe_nt_image_headers32
push eax
call fcn.00bafed8
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x87c]
call fcn.00ba069b
add esp, 0x14
cmp dword [ebp - 0x86c], 0
jne 0xb98d4a
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x870]
push eax
call esi
jmp 0xb98d4a
push 0xbcd8bc
lea eax, [ebp - 0x870]
push eax
call esi
push str.No_cntry_lookup_tag_in_map.xml
call fcn.00ba262c
pop ecx
mov eax, dword [ebx + 0xc]
push str.DEBUG
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb98d6b
mov eax, dword [eax + 0xc]
test eax, eax
je 0xb98d6b
mov ecx, dword [eax + 4]
call fcn.00b97af5
mov eax, dword [ebx + 0xc]
push str.SendUDPing
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb98de7
lea eax, [ebp - 0x86c]
push 1
push eax
call fcn.00b9d91e
pop ecx
pop ecx
test eax, eax
je 0xb98de7
mov eax, dword [ebp - 0x86c]
and dword [ebp - 0x7f8], 0
push 1
lea esi, [ebp - 0x28]
mov dword [ebp - 0x810], eax
mov byte [ebp - 0x7fc], 0
call fcn.00b97865
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x80c], eax
push str.SendUDPing
lea eax, [ebp - 0x810]
push eax
mov ecx, esi
call fcn.00ba2ded
lea esi, [ebp - 0x810]
call fcn.00ba2d4a
lea esi, [ebp - 0x24]
call fcn.00b9ad65
mov eax, dword [ebx + 0xc]
push str.SendUAPing
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb98e63
lea eax, [ebp - 0x86c]
push 1
push eax
call fcn.00b9d91e
pop ecx
pop ecx
test eax, eax
je 0xb98e63
mov eax, dword [ebp - 0x86c]
and dword [ebp - 0x7f8], 0
push 1
lea esi, [ebp - 0x28]
mov dword [ebp - 0x810], eax
mov byte [ebp - 0x7fc], 0
call fcn.00b97865
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x80c], eax
push str.SendUAPing
lea eax, [ebp - 0x810]
push eax
mov ecx, esi
call fcn.00ba2ded
lea esi, [ebp - 0x810]
call fcn.00ba2d4a
lea esi, [ebp - 0x24]
call fcn.00b9ad65
mov eax, dword [ebx + 0xc]
push str.mapping
call fcn.00ba00af
pop ecx
mov esi, eax
jmp 0xb99189
push str.mapping
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0xb99186
mov eax, dword [esi + 0xc]
push str.version
call fcn.00ba00af
mov ebx, eax
mov eax, dword [esi + 0xc]
mov dword [esp], 0xbcd910
call fcn.00ba00af
pop ecx
test ebx, ebx
je 0xb99186
mov ebx, dword [ebx + 0xc]
test ebx, ebx
je 0xb99186
test eax, eax
je 0xb99186
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x86c], eax
test eax, eax
je 0xb99186
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebx + 4]
lea eax, [ebp - 0x2f4]
push 0
push eax
call fcn.00b98573
pop ecx
pop ecx
test eax, eax
jne 0xb98f16
mov ecx, dword [ebp - 0x894]
mov edx, dword [ebx + 4]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.00b98573
pop ecx
pop ecx
test eax, eax
je 0xb99186
cmp dword [ebp + 0x14], 0
je 0xb98f32
mov eax, dword [esi + 0xc]
push str.critical
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb99186
mov eax, dword [esi + 0xc]
push 0xbcd920
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb98fa4
mov eax, dword [eax + 0xc]
test eax, eax
je 0xb98fa4
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x78]
push 1
push ecx
lea ecx, [ebp - 0x64]
call fcn.00b98573
pop ecx
pop ecx
test eax, eax
je 0xb99186
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0xc]
push str.arch
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb98fb7
mov eax, dword [eax + 0xc]
test eax, eax
je 0xb98fb7
mov edx, dword [eax + 4]
lea ecx, [ebp - 0xa0]
push 0
push ecx
lea ecx, [ebp - 0x50]
call fcn.00b98573
pop ecx
pop ecx
test eax, eax
jne 0xb98fc5
jmp 0xb99186
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0xbcc7de
lea eax, [ebp - 0x78]
push eax
call ebx
jmp 0xb98f6c
push 0xbcc7de
lea eax, [ebp - 0xa0]
push eax
call ebx
mov eax, dword [esi + 0xc]
push str.cntry
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb99000
mov eax, dword [eax + 0xc]
test eax, eax
je 0xb99000
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x8c]
push 0
push ecx
lea ecx, [ebp - 0x870]
call fcn.00b98573
pop ecx
pop ecx
test eax, eax
jne 0xb9900e
jmp 0xb99186
push 0xbcc7de
lea eax, [ebp - 0x8c]
push eax
call ebx
mov eax, dword [esi + 0xc]
push str.locale
call fcn.00ba00af
pop ecx
test eax, eax
je 0xb99055
mov eax, dword [eax + 0xc]
test eax, eax
je 0xb99055
cmp dword [ebp - 0x818], 0x10
mov ecx, dword [ebp - 0x82c]
jae 0xb9903c
lea ecx, [ebp - 0x82c]
lea edx, [ebp - 0x3c]
push 0
push edx
mov edx, dword [eax + 4]
call fcn.00b98573
pop ecx
pop ecx
test eax, eax
jne 0xb99060
jmp 0xb99186
push 0xbcc7de
lea eax, [ebp - 0x3c]
push eax
call ebx
lea eax, [ebp - 0x4f4]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x2f4]
push eax
call edi
cmp ebx, eax
ja 0xb99186
jb 0xb990ee
lea eax, [ebp - 0xf0]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x78]
push eax
call edi
cmp ebx, eax
ja 0xb99186
jb 0xb990ee
lea eax, [ebp - 0xdc]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0xa0]
push eax
call edi
cmp ebx, eax
ja 0xb99186
jb 0xb990ee
lea eax, [ebp - 0xc8]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x8c]
push eax
call edi
cmp ebx, eax
ja 0xb99186
jb 0xb990ee
lea eax, [ebp - 0xb4]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x3c]
push eax
call edi
cmp ebx, eax
jae 0xb99186
push 0xffffffffffffffff
lea eax, [ebp - 0x2f4]
push eax
mov ebx, pe_nt_image_headers32
lea eax, [ebp - 0x4f4]
push ebx
push eax
call fcn.00bafed8
mov eax, dword [ebp - 0x86c]
push 0xffffffffffffffff
push dword [eax + 4]
lea eax, [ebp - 0x1f4]
push ebx
push eax
call fcn.00bafed8
or ebx, 0xffffffff
push ebx
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xf0]
push 0x14
push eax
call fcn.00bafed8
push ebx
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xdc]
push 0x14
push eax
call fcn.00bafed8
add esp, 0x40
push ebx
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xc8]
push 0x14
push eax
call fcn.00bafed8
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xb4]
push 0x14
push eax
call fcn.00bafed8
add esp, 0x20
mov dword [ebp - 0x89c], 1
mov esi, dword [esi + 8]
test esi, esi
jne 0xb98e78
push 0xff
xor edi, edi
lea eax, [ebp - 0x3f3]
push edi
push eax
mov byte [ebp - 0x3f4], 0
call fcn.00baf900
mov eax, dword [ebp - 0x82c]
add esp, 0xc
cmp dword [ebp - 0x818], 0x10
jae 0xb991c4
lea eax, [ebp - 0x82c]
lea ecx, [ebp - 0x870]
push ecx
push eax
push dword [ebp - 0x898]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [0xbdb68c]
mov esi, pe_nt_image_headers32
push str.OVERRIDE_SYSTEM_VALUE_d:OS:_s_Arch:_s_Version:_s_Locale:_s_Cntry:_s_n
push 0xffffffffffffffff
lea eax, [ebp - 0x3f4]
push esi
push eax
call fcn.00bae983
lea eax, [ebp - 0x3f4]
push eax
call fcn.00ba262c
add esp, 0x2c
cmp dword [ebp - 0x89c], edi
je 0xb99226
lea eax, [ebp - 0x1f4]
push eax
push esi
push dword [ebp - 0x8a4]
call fcn.00bb2249
add esp, 0xc
cmp dword [ebp - 0x890], edi
je 0xb9923a
push dword [ebp - 0x890]
call fcn.00bae562
pop ecx
push edi
push 1
lea ecx, [ebp - 0x82c]
call fcn.00b95dcc
mov eax, dword [ebp - 0x89c]
jmp 0xb9926c
test esi, esi
je 0xb9925b
push esi
call fcn.00bae562
pop ecx
push 0
push 1
lea ecx, [ebp - 0x82c]
call fcn.00b95dcc
xor eax, eax
call fcn.00bb50a1
ret