Function at 0x6309e4
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x630d45
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
mov ax, word [eax - 0xc]
call fcn.006309a0
movzx eax, ax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x18]
shl ebx, 4
mov eax, ebx
call fcn.00401e58
mov esi, eax
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push ebx
push esi
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x630d20
call fcn.006562d0
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0x18]
dec ebx
cmp ebx, 0
jl 0x630c57
mov eax, ebx
shl eax, 4
add eax, esi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax], 0x656d616e
jne 0x630c4d
push 0
push 0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 8]
call fcn.006309b8
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push 6
lea eax, [ebp - 6]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x630c57
mov ax, word [ebp - 4]
call fcn.006309a0
mov word [ebp - 4], ax
mov ax, word [ebp - 2]
call fcn.006309a0
mov word [ebp - 2], ax
lea eax, [ebp - 0x10]
call fcn.00403880
movzx ebx, word [ebp - 4]
dec ebx
test ebx, ebx
jl 0x630c57
inc ebx
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push 0xc
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
mov ax, word [ebp - 0x26]
call fcn.006309a0
cmp ax, 1
jne 0x630c44
mov ax, word [ebp - 0x24]
call fcn.006309a0
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x22]
call fcn.006309a0
mov edi, eax
mov word [ebp - 0x22], di
test di, di
jbe 0x630c44
push 1
push 0
push 0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
mov dword [ebp - 0x1c], eax
push 0
push 0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 8]
call fcn.006309b8
movzx edx, word [ebp - 0x22]
add eax, edx
movzx edx, word [ebp - 2]
add eax, edx
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
movzx edx, word [ebp - 0x24]
lea eax, [ebp - 0x14]
call fcn.00403804
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
movzx eax, word [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x14]
call fcn.004036e0
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
mov ax, word [ebp - 0x2a]
call fcn.006309a0
cmp ax, 1
jne 0x630bfd
movzx edx, word [ebp - 0x24]
sar edx, 1
jns 0x630bb9
adc edx, 0
lea eax, [ebp - 0x10]
call fcn.00403de4
movzx eax, word [ebp - 0x24]
sar eax, 1
jns 0x630bcc
adc eax, 0
cmp eax, 1
jl 0x630c08
mov edx, eax
add edx, edx
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + edx]
shl edx, 8
mov ecx, eax
add ecx, ecx
mov edi, dword [ebp - 0x14]
movzx ecx, byte [edi + ecx - 1]
or dx, cx
mov ecx, dword [ebp - 0x10]
mov word [ecx + eax*2 - 2], dx
dec eax
test eax, eax
jne 0x630bd1
jmp 0x630c08
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00403a34
lea eax, [ebp - 0x10]
call fcn.0065c7b8
cmp dword [ebp - 0x10], 0
je 0x630c30
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jge 0x630c30
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x30]
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
dec ebx
jne 0x630ae0
jmp 0x630c57
dec ebx
cmp ebx, 0xffffffff
jne 0x630a58
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x24], 0
jle 0x630d18
mov ebx, dword [ebp - 0x18]
dec ebx
cmp ebx, 0
jl 0x630d18
mov edi, ebx
shl edi, 4
add edi, esi
cmp dword [edi], 0x64616568
jne 0x630d0e
push 0
push 0
mov eax, dword [edi + 8]
call fcn.006309b8
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push 0x2e
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x630d0e
mov eax, dword [ebp - 0xc]
mov edi, dword [eax + 0x24]
dec edi
cmp edi, 0
jl 0x630d0e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x18]
mov edx, dword [eax + edi*4]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x1c]
mov ecx, dword [eax + 0x24]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x18]
call fcn.0065779c
mov ax, word [ebp - 0x30]
call fcn.006309a0
mov ecx, eax
and cx, 3
movzx ecx, cx
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x20]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x1c]
call fcn.0065779c
dec edi
cmp edi, 0xffffffff
jne 0x630cc8
dec ebx
cmp ebx, 0xffffffff
jne 0x630c71
mov eax, dword [ebp - 0xc]
call fcn.004028c0
mov eax, esi
call fcn.00401fac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x630d4c
lea eax, [ebp - 0x14]
call fcn.00403274
lea eax, [ebp - 0x10]
call fcn.00403880
ret