Function at 0x6fd93400
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x80000000
mov dword [esp], eax
call sym._CreateFileW_28
sub esp, 0x1c
cmp eax, 0xffffffff
je 0x6fd93540
mov ebx, eax
lea esi, [ebp - 0x18]
lea eax, [ebp - 0x14]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
jne 0x6fd934a5
test byte [section..data], 2
jne 0x6fd935e5
mov dword [esp], ebx
call sym._CloseHandle_4
sub esp, 4
xor esi, esi
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov edi, dword [ebp - 0x14]
call sym._GetProcessHeap_0
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp], eax
call sym._HeapAlloc_12
mov edi, eax
mov eax, dword [ebp - 0x14]
sub esp, 0xc
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
jne 0x6fd93590
test byte [section..data], 2
jne 0x6fd93684
mov dword [esp], ebx
call sym._CloseHandle_4
sub esp, 4
test edi, edi
je 0x6fd93497
call sym._GetProcessHeap_0
mov dword [esp + 8], edi
xor esi, esi
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._HeapFree_12
mov eax, esi
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
test byte [section..data], 2
je 0x6fd93497
call sym._GetLastError_0
mov dword [esp + 0x14], str.CreateFileW_failed_with_error__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3c8
mov dword [esp + 0xc], str.ClientSideInstallW
mov dword [esp + 8], 0x6fd9a071
mov dword [esp + 4], 0x6fd99000
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x6fd93497
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
jne 0x6fd93632
test byte [section..data], 2
je 0x6fd934fd
call sym._GetLastError_0
mov dword [esp + 0x14], str.ReadFile_failed_with_error__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3e0
jmp 0x6fd9369d
call sym._GetLastError_0
mov dword [esp + 0x14], str.ReadFile_failed_with_error__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3d0
mov dword [esp + 0xc], str.ClientSideInstallW
mov dword [esp + 8], 0x6fd9a071
mov dword [esp + 4], 0x6fd99000
mov dword [esp], 1
call sym._ros_dbg_log
mov dword [esp], ebx
call sym._CloseHandle_4
sub esp, 4
jmp 0x6fd93497
lea eax, [ebp - 0x14]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym._ReadFile_20
sub esp, 0x14
test eax, eax
jne 0x6fd936d0
test byte [section..data], 2
je 0x6fd934fd
call sym._GetLastError_0
mov dword [esp + 0x14], str.ReadFile_failed_with_error__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3e7
jmp 0x6fd9369d
call sym._GetLastError_0
mov dword [esp + 0x14], str.ReadFile_failed_with_error__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3d8
mov dword [esp + 0xc], str.ClientSideInstallW
mov dword [esp + 8], 0x6fd9a071
mov dword [esp + 4], 0x6fd99000
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x6fd934fd
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x24], edx
call sym._GetProcessHeap_0
mov edx, dword [ebp - 0x24]
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [esp + 8], edx
call sym._HeapAlloc_12
mov ecx, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
sub esp, 0xc
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], ebx
call sym._ReadFile_20
sub esp, 0x14
mov esi, eax
test eax, eax
je 0x6fd93810
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6fd93732
mov eax, 4
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], 0
call sym.newdev.dll_DevInstallW
sub esp, 0x10
mov esi, eax
test eax, eax
jne 0x6fd93840
test byte [section..data], 2
jne 0x6fd937c7
xor esi, esi
mov dword [esp], ebx
call sym._CloseHandle_4
sub esp, 4
test edi, edi
je 0x6fd93794
call sym._GetProcessHeap_0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._HeapFree_12
sub esp, 0xc
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x6fd93499
call sym._GetProcessHeap_0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._HeapFree_12
mov eax, esi
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
call sym._GetLastError_0
mov dword [esp + 0x14], str.DevInstallW_failed_with_error__lu_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3f6
mov dword [esp + 0xc], str.ClientSideInstallW
mov dword [esp + 8], 0x6fd9a071
mov dword [esp + 4], 0x6fd99000
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x6fd93769
test byte [section..data], 2
je 0x6fd93767
call sym._GetLastError_0
mov dword [esp + 0x14], str.ReadFile_failed_with_error__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3ef
jmp 0x6fd937e0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0
call sym._CreateEventW_16
sub esp, 0x10
test eax, eax
je 0x6fd93888
mov dword [esp], eax
mov dword [ebp - 0x28], eax
call sym._SetEvent_4
mov edx, dword [ebp - 0x28]
sub esp, 4
mov dword [esp], edx
call sym._CloseHandle_4
sub esp, 4
jmp 0x6fd93769
test byte [section..data], 8
je 0x6fd93769
call sym._GetLastError_0
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], str.CreateEventW__ls__failed_with_error__lu_n
mov dword [esp + 0x10], 0x3fd
mov dword [esp + 0xc], str.ClientSideInstallW
mov dword [esp + 8], 0x6fd9a071
mov dword [esp + 4], 0x6fd99000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6fd93769