Function at 0x100b6bf0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x18
push esi
mov esi, dword [esp + 0x24]
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5a
test esi, esi
jne 0x100b6c1b
xor eax, eax
pop esi
add esp, 0x18
ret
push ebx
mov ebx, dword [esp + 0x2c]
push ebp
push edi
test ebx, ebx
je 0x100b7064
mov edi, dword [esp + 0x38]
test edi, edi
je 0x100b7064
push 8
push str.sha256__
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x100b6df5
mov eax, dword [0x1017d014]
cmp dword [eax + 0x5c], 0
je 0x100b7064
push 0x20
call dword [section..data]
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x100b6cfe
mov eax, dword [0x1017d014]
push 0x20
push ebp
push edi
mov eax, dword [eax + 0x5c]
push ebx
call eax
add esp, 0x10
test eax, eax
jne 0x100b7069
mov ebx, dword [esp + 0x2c]
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x34]
push eax
push 0x20
push ebp
push ebx
call fcn.100d3220
push ebp
mov edi, eax
call dword [0x1017d004]
add esp, 0x18
test edi, edi
je 0x100b6cbe
mov eax, edi
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x18
ret
push dword [esp + 0x30]
push str._t_public_key_hash:_sha256___s_n
push ebx
call fcn.100bd010
mov ecx, esi
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6cd5
sub ecx, edx
lea edi, [ecx + 1]
push edi
call dword [section..data]
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x100b6d0b
push dword [esp + 0x30]
call dword [0x1017d004]
add esp, 4
pop edi
pop ebp
pop ebx
mov eax, 0x1b
pop esi
add esp, 0x18
ret
push edi
push esi
push ebp
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, ebp
nop dword [eax + eax]
push str._sha256__
push esi
call sub.VCRUNTIME140.dll_strstr
mov edi, eax
add esp, 8
test edi, edi
je 0x100b6d37
mov byte [edi], 0
add esi, 8
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6d40
mov ebx, dword [esp + 0x30]
sub ecx, edx
mov edx, dword [esp + 0x1c]
cmp edx, ecx
jne 0x100b6da3
mov ecx, ebx
sub edx, 4
jb 0x100b6d71
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x100b6d76
add ecx, 4
add esi, 4
sub edx, 4
jae 0x100b6d60
cmp edx, 0xfffffffc
je 0x100b6deb
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x100b6da3
cmp edx, 0xfffffffd
je 0x100b6deb
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x100b6da3
cmp edx, 0xfffffffe
je 0x100b6deb
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x100b6da3
cmp edx, 0xffffffff
je 0x100b6deb
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
je 0x100b6deb
test edi, edi
je 0x100b6dc6
push str.sha256__
push edi
mov byte [edi], 0x3b
call sub.VCRUNTIME140.dll_strstr
mov esi, eax
add esp, 8
test esi, esi
jne 0x100b6d20
mov ebx, dword [esp + 0x30]
push ebx
call dword [0x1017d004]
push ebp
mov dword [esp + 0x38], 0
call dword [0x1017d004]
mov eax, dword [esp + 0x1c]
add esp, 8
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x18
ret
mov dword [esp + 0x14], 0
jmp 0x100b6dc6
push 0x10171110
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x30], eax
test eax, eax
je 0x100b7064
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
push 2
push 0
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x100b6ef3
push dword [esp + 0x30]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
push 0
push 0
push dword [esp + 0x3c]
mov ebp, eax
call esi
add esp, 0x10
test eax, eax
jne 0x100b6ef3
cmp ebp, 0x100000
ja 0x100b6ef3
mov eax, ebp
cdq
push edx
push eax
call fcn.100bf760
mov esi, eax
add esp, 8
cmp edi, esi
ja 0x100b6ef3
lea eax, [esi + 1]
push eax
call dword [section..data]
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x100b6ef3
push dword [esp + 0x30]
push 1
push esi
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
add esp, 0x10
cmp eax, 1
jne 0x100b6ef3
cmp edi, esi
jne 0x100b6f28
mov ecx, dword [esp + 0x10]
sub edi, 4
jb 0x100b6eb9
mov eax, dword [ebx]
cmp eax, dword [ecx]
jne 0x100b6ebe
add ebx, 4
add ecx, 4
sub edi, 4
jae 0x100b6ea8
cmp edi, 0xfffffffc
je 0x100b6eeb
mov al, byte [ebx]
cmp al, byte [ecx]
jne 0x100b6ef3
cmp edi, 0xfffffffd
je 0x100b6eeb
mov al, byte [ebx + 1]
cmp al, byte [ecx + 1]
jne 0x100b6ef3
cmp edi, 0xfffffffe
je 0x100b6eeb
mov al, byte [ebx + 2]
cmp al, byte [ecx + 2]
jne 0x100b6ef3
cmp edi, 0xffffffff
je 0x100b6eeb
mov al, byte [ebx + 3]
cmp al, byte [ecx + 3]
jne 0x100b6ef3
mov dword [esp + 0x14], 0
push dword [esp + 0x10]
call dword [0x1017d004]
push dword [esp + 0x1c]
call dword [0x1017d004]
push dword [esp + 0x38]
mov dword [esp + 0x24], 0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, dword [esp + 0x20]
add esp, 0xc
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x18
ret
mov eax, dword [esp + 0x10]
xor ebp, ebp
push str._____BEGIN_PUBLIC_KEY_____
push eax
mov byte [esi + eax], 0
call sub.VCRUNTIME140.dll_strstr
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x100b6ef3
mov eax, dword [esp + 0x10]
mov esi, ecx
sub esi, eax
je 0x100b6f56
cmp byte [ecx - 1], 0xa
jne 0x100b6ef3
add esi, 0x1a
add eax, esi
push str._n_____END_PUBLIC_KEY_____
push eax
call sub.VCRUNTIME140.dll_strstr
add esp, 8
test eax, eax
je 0x100b6ef3
sub eax, dword [esp + 0x10]
mov dword [esp + 0x20], eax
sub eax, esi
inc eax
push eax
call dword [section..data]
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
je 0x100b6ef3
mov edx, dword [esp + 0x20]
cmp esi, edx
jae 0x100b6fbe
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
nop
mov cl, byte [esi + eax]
cmp cl, 0xa
je 0x100b6fb1
cmp cl, 0xd
je 0x100b6fb1
mov byte [ebx + ebp], cl
inc ebp
inc esi
cmp esi, edx
jb 0x100b6fa0
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
mov byte [eax + ebp], 0
push ecx
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.100d3060
push dword [esp + 0x28]
mov esi, eax
call dword [0x1017d004]
add esp, 0x10
test esi, esi
jne 0x100b6ef3
cmp edi, dword [esp + 0x24]
jne 0x100b6ef3
mov ecx, dword [esp + 0x18]
sub edi, 4
jb 0x100b7011
nop dword [eax]
mov eax, dword [ebx]
cmp eax, dword [ecx]
jne 0x100b701a
add ebx, 4
add ecx, 4
sub edi, 4
jae 0x100b7000
cmp edi, 0xfffffffc
je 0x100b6eeb
mov al, byte [ebx]
cmp al, byte [ecx]
jne 0x100b7057
cmp edi, 0xfffffffd
je 0x100b6eeb
mov al, byte [ebx + 1]
cmp al, byte [ecx + 1]
jne 0x100b7057
cmp edi, 0xfffffffe
je 0x100b6eeb
mov al, byte [ebx + 2]
cmp al, byte [ecx + 2]
jne 0x100b7057
cmp edi, 0xffffffff
je 0x100b6eeb
mov al, byte [ebx + 3]
cmp al, byte [ecx + 3]
je 0x100b6eeb
mov dword [esp + 0x14], 0x5a
jmp 0x100b6ef3
mov eax, 0x5a
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x18
ret