Function at 0x4aa630
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x671650
push 0x5dfbd0
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x6aae14]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], esi
mov eax, dword [ebp + 8]
mov dword [ebp + 8], eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x24], esi
push eax
call fcn.004d90d0
add esp, 4
test eax, eax
jne 0x4aa6c5
mov eax, dword [ebp + 0xc]
cmp eax, esi
je 0x4aab01
cmp byte [eax], 0
je 0x4aab01
push esi
push 0x80
push 3
push esi
push 1
push connect
push eax
call fcn.004e0400
mov dword [ebp + 8], eax
push eax
call fcn.004d90d0
add esp, 0x20
test eax, eax
je 0x4aa6c5
mov dword [ebp - 0x20], 1
mov eax, dword [ebp + 8]
push eax
call fcn.004d90d0
add esp, 4
test eax, eax
je 0x4aab34
push 0x100
call fcn.005e20e4
add esp, 4
mov edi, eax
cmp edi, esi
je 0x4aab34
push 1
push esi
push esi
mov ecx, dword [ebp + 8]
push ecx
mov ebx, dword [sym.imp.KERNEL32.dll_SetFilePointer]
call ebx
mov dword [ebp - 0x28], eax
push 0x100
push esi
push edi
call fcn.005dfd60
add esp, 0xc
push esi
lea edx, [ebp - 0x24]
push edx
push 0xfb
push edi
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4aaae8
push 0x2e
push edi
call fcn.005e0940
add esp, 8
mov esi, eax
test esi, esi
je 0x4aa914
cmp byte [esi + 1], 0
je 0x4aa914
push str..SCR
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..PIF
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..VBE
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..VBS
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..COM
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..CPL
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..WSF
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..HTA
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..CMD
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..CHM
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..SHTML
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..MSI
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..URL
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push 0x628400
push esi
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x4aa8a6
push str..JSON
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aa8a6
push str..JSP
push esi
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x4aaae1
push 0x6283e8
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..JSE
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..JAR
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..LNK
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push 0x6283c8
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push 0x2e
push edi
call fcn.005e0a00
add esp, 8
mov esi, eax
test esi, esi
je 0x4aaae8
cmp byte [esi + 1], 0
je 0x4aaae8
push str..SCR
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..PIF
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..VBE
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..VBS
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..COM
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..CPL
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..WSF
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..HTA
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..CMD
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..CHM
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..SHTML
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..MSI
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..URL
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push 0x628400
push esi
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x4aaa87
push str..JSON
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaa87
push str..JSP
push esi
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x4aaae1
push 0x6283e8
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..JSE
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..JAR
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push str..LNK
push esi
call fcn.004dd620
add esp, 8
test eax, eax
je 0x4aaae1
push 0x6283c8
push esi
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x4aaae8
mov dword [ebp - 0x1c], 1
push 0
push 0
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call ebx
push edi
call fcn.005e0865
add esp, 4
jmp 0x4aab34
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 4], 0xfffffffe
cmp dword [ebp - 0x20], 0
je 0x4aab4a
lea eax, [ebp + 8]
push eax
call fcn.004dca10
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret