Function at 0x1003be20
Capabilities:
Read file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x102083a0
push 0x1018b7e6
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
sub esp, 0x4d0
mov eax, dword [0x10221008]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x4c0], edi
mov dword [ebp - 0x4b4], ecx
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x4d8], esi
xorps xmm0, xmm0
movlpd qword [ebp - 0x4d0], xmm0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x43c], 0
movups xmmword [ebp - 0x468], xmm0
movups xmmword [ebp - 0x458], xmm0
push 0x48
push 0
lea eax, [ebp - 0x4b0]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x440], 0
push 0x410
push 0
lea eax, [ebp - 0x438]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x4b4]
test eax, eax
je 0x1003c04c
push 0
lea ecx, [ebp - 0x438]
push ecx
push 0x208
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
je 0x1003c04c
lea edx, [ebp - 0x468]
lea ecx, [ebp - 0x438]
call fcn.1003b460
test eax, eax
je 0x1003c04c
test dword [ebp - 0x45c], 0xa00
jne 0x1003c04c
lea edx, [ebp - 0x4b0]
mov ecx, dword [ebp - 0x464]
call fcn.1003b0c0
test eax, eax
je 0x1003c04c
test dword [ebp - 0x46c], 0x8000
jne 0x1003c04c
lea eax, [ebp - 0x444]
push eax
lea edx, [ebp - 0x468]
lea ecx, [ebp - 0x4b0]
call fcn.1003b930
test eax, eax
je 0x1003c04c
mov eax, dword [ebp - 0x444]
cmp dword [eax], 0
jne 0x1003c084
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
jne 0x1003c084
lea eax, [ebp - 0x440]
push eax
lea edx, [ebp - 0x468]
lea ecx, [ebp - 0x4b0]
call fcn.1003bb80
test eax, eax
je 0x1003c04c
test edi, edi
je 0x1003c034
cmp dword [ebx + 0xc], 0
jl 0x1003c034
mov ecx, dword [ebx + 8]
jg 0x1003bfeb
test ecx, ecx
je 0x1003c034
mov eax, dword [ebp - 0x440]
mov edx, dword [eax]
cmp ecx, edx
ja 0x1003c00f
push ecx
add eax, 4
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebx + 8]
mov dword [esi], eax
mov eax, dword [ebx + 0xc]
mov dword [esi + 4], eax
jmp 0x1003c031
push edx
mov eax, dword [ebp - 0x440]
add eax, 4
push eax
push edi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
mov dword [esi], eax
mov dword [esi + 4], 0
add esp, 0xc
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 4], 0xfffffffe
call fcn.1003c287
mov eax, dword [ebp - 0x4d0]
mov edx, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.1018b774
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], ecx
test edi, edi
je 0x1003c04c
cmp dword [ebx + 0xc], ecx
jl 0x1003c04c
jg 0x1003c0c4
cmp dword [ebx + 8], eax
jb 0x1003c04c
push 4
push 0x1000
push dword [ebp - 0x480]
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov dword [ebp - 0x4bc], esi
test esi, esi
je 0x1003c04c
xor edx, edx
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x444]
cmp edx, dword [eax]
jae 0x1003c04c
xor edi, edi
mov dword [ebp - 0x4dc], edi
nop word [eax + eax]
mov ecx, edx
add ecx, ecx
mov eax, dword [ebp - 0x444]
cmp edi, dword [eax + ecx*8 + 8]
jae 0x1003c281
mov edx, dword [eax + ecx*8 + 0x14]
mov eax, dword [eax + ecx*8 + 0x10]
cmp eax, 0xffffffff
jne 0x1003c139
cmp edx, eax
je 0x1003c260
mov ecx, edi
add ecx, eax
mov eax, 0
adc eax, edx
mov dword [ebp - 0x4c8], ecx
mov dword [ebp - 0x4c4], eax
push eax
push ecx
push 0
push dword [ebp - 0x480]
call fcn.101a4d20
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], edx
add eax, dword [ebp - 0x4a8]
adc edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], edx
push 0
push 0
push edx
push eax
push dword [ebp - 0x4b0]
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1003c272
push dword [ebp - 0x480]
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
lea eax, [ebp - 0x43c]
push eax
push dword [ebp - 0x480]
push esi
push dword [ebp - 0x4b0]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1003c272
mov esi, dword [ebp - 0x480]
cmp esi, dword [ebp - 0x43c]
jne 0x1003c272
cmp dword [ebp - 0x4b4], 0
jg 0x1003c1fb
mov eax, dword [ebp - 0x4b8]
jl 0x1003c1f9
cmp eax, esi
jae 0x1003c1fb
mov esi, eax
push esi
mov eax, dword [ebp - 0x4bc]
push eax
push dword [ebp - 0x4c0]
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [ebp - 0x4b8]
sub eax, esi
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4b4]
sbb eax, 0
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4c0]
add eax, esi
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4d8]
add dword [eax], esi
adc dword [eax + 4], 0
mov esi, dword [ebp - 0x4bc]
inc edi
mov dword [ebp - 0x4dc], edi
mov edx, dword [ebp - 0x4d4]
jmp 0x1003c110
mov dword [ebp - 0x4e0], 1
jmp 0x1003c04c
inc edx
jmp 0x1003c0eb