Function at 0xc698c0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov ecx, ebx
call fcn.00c69a1e
xor al, al
mov byte [ebp - 1], al
lea ebx, [ebx]
cmp dword [edi + 8], 0
je 0xcaf23b
mov ecx, dword [edi + 0xc]
xor esi, esi
nop
cmp ecx, dword [edi + 8]
je 0xc699dc
mov eax, dword [edi + 4]
mov al, byte [ecx + eax]
inc ecx
mov byte [ebp + esi + 0xb], al
inc esi
mov dword [edi + 0xc], ecx
cmp esi, 1
jb 0xc698f0
add dword [edi + 0x10], esi
adc dword [edi + 0x14], 0
test esi, esi
je 0xc69a0a
mov al, byte [ebp + 0xb]
mov byte [ebp - 1], 1
cmp al, 0xd
je 0xc6996a
cmp al, 0xa
je 0xc69985
mov ecx, dword [ebx + 0xc]
mov eax, dword [ecx]
cmp eax, 1
jg 0xcaf27d
xor dl, dl
test dl, dl
jne 0xcaf284
mov eax, dword [ebx + 4]
add eax, 2
cmp dword [ebx + 8], eax
jb 0xc69990
mov ecx, dword [ebx + 4]
mov eax, dword [ebx]
mov dl, byte [ebp + 0xb]
mov byte [ecx + eax], dl
inc dword [ebx + 4]
mov ecx, dword [ebx + 4]
mov eax, dword [ebx]
mov byte [ecx + eax], 0
jmp 0xc698e0
push 1
lea eax, [ebp + 0xb]
mov ecx, edi
push eax
call fcn.00c69a40
test eax, eax
je 0xc69985
cmp byte [ebp + 0xb], 0xa
jne 0xcaf366
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x41c2
jae 0xcaf2cc
add eax, eax
test eax, eax
je 0xcaf35c
add eax, 0xf
and eax, 0xfffffff0
push eax
mov dword [ebx + 8], eax
call fcn.00c7fe0b
mov esi, eax
add esp, 4
mov eax, dword [ebx]
test eax, eax
je 0xc699d5
mov ecx, dword [ebx + 4]
inc ecx
push ecx
push eax
push esi
call fcn.00c80e20
push dword [ebx]
call fcn.00c7fe14
add esp, 0x10
mov dword [ebx], esi
jmp 0xc6994e
push 0
lea eax, [ebp - 8]
push eax
push 0x10000
push dword [edi + 4]
push dword [edi]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0xc6990d
mov eax, dword [ebp - 8]
test eax, eax
je 0xc6990d
jmp 0xcaf26c
mov al, byte [ebp - 1]
test al, al
jne 0xc69985
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 1
lea eax, [ebp - 0x18]
mov dword [edi + 8], 0
push eax
push 0
push 0
push dword [edi]
mov dword [edi + 0xc], 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov eax, dword [ebp - 0x18]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x14]
mov dword [edi + 0x14], eax
jmp 0xc698ea
mov dword [edi + 8], eax
xor ecx, ecx
mov dword [edi + 0xc], 0
jmp 0xc698f9
mov dl, 1
jmp 0xc6993b
dec eax
push 4
mov dword [ecx], eax
call fcn.00c7fddb
add esp, 4
mov dword [eax], 1
mov dword [ebx + 0xc], eax
mov eax, dword [ebx + 4]
add eax, 2
jne 0xcaf2a9
mov eax, 0x10
jmp 0xcaf2af
add eax, 0xf
and eax, 0xfffffff0
push eax
mov dword [ebx + 8], eax
call fcn.00c7fe0b
mov ecx, dword [ebx + 4]
mov esi, eax
inc ecx
push ecx
push dword [ebx]
push esi
call fcn.00c80e20
jmp 0xc699d2
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
test eax, eax
jns 0xcaf2dc
fadd qword [0xd281c0]
cmp eax, 0x2000000
jae 0xcaf309
fmul qword [0xd233f8]
fnstcw word [ebp - 4]
movzx eax, word [ebp - 4]
or eax, 0xc00
mov dword [ebp - 0xc], eax
fldcw word [ebp - 0xc]
fistp qword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
fldcw word [ebp - 4]
jmp 0xc6999d
cmp eax, 0x8000000
jae 0xcaf336
fmul qword [0xd233f0]
fnstcw word [ebp - 4]
movzx eax, word [ebp - 4]
or eax, 0xc00
mov dword [ebp - 0xc], eax
fldcw word [ebp - 0xc]
fistp qword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
fldcw word [ebp - 4]
jmp 0xc6999d
fmul qword [0xd233e8]
fnstcw word [ebp - 4]
movzx eax, word [ebp - 4]
or eax, 0xc00
mov dword [ebp - 0xc], eax
fldcw word [ebp - 0xc]
fistp qword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
fldcw word [ebp - 4]
jmp 0xc6999d
mov eax, 0x10
jmp 0xc699ab
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, edi
call fcn.00c654c6
jmp 0xc69985