Function at 0x6308bbc0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov eax, 0x122c4c
mov ebp, esp
push edi
push esi
push ebx
call fcn.630a6c70
sub esp, eax
mov dword [ebp - 0x122c34], 0x63162480
lea edi, [ebp - 0x122c18]
xor eax, eax
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x122c34]
mov dword [esp + 4], eax
lea eax, [ebp - 0x122c18]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x122c18]
mov dword [esp], eax
call fcn.63089800
test al, al
mov byte [ebp - 0x122c2d], al
je 0x6308bfe3
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4b82
mov dword [ebp - 0x122c1c], 0
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bc92
lea edx, [ebp - 0x100018]
xor eax, eax
mov ecx, 0x20000
mov edi, edx
rep stosd dword es:[edi], eax
movzx eax, byte [0x63159464]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.6308b60c
test eax, eax
mov edx, eax
jle 0x6308c337
lea ebx, [ebp - 0x80018]
xor eax, eax
mov ecx, 0x20000
mov edi, ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x100018]
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], eax
jmp 0x6308bcd7
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4b86
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bce1
mov edx, dword [0x630d904c]
test edx, edx
jle 0x6308c337
lea ebx, [ebp - 0x80018]
mov ecx, 0x20000
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], 0x630d9460
call fcn.6308b24d
jmp 0x6308be99
mov eax, dword [ebp + 8]
mov dword [esp + 4], str.screen
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bd05
mov dword [esp + 4], 0x630c4b91
jmp 0x6308bd87
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4b94
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bd26
mov dword [esp + 4], 0x630c4b98
jmp 0x6308bd87
mov eax, dword [ebp + 8]
mov dword [esp + 4], str.search
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bd47
mov dword [esp + 4], 0x630c4ba2
jmp 0x6308bd87
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4ba5
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bd68
mov dword [esp + 4], 0x630c4ba8
jmp 0x6308bd87
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4bab
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bd95
mov dword [esp + 4], 0x630c4baf
lea eax, [ebp - 0x122c1c]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea esi, [ebp - 0x122018]
xor eax, eax
mov ecx, 0x800
lea ebx, [ebp - 0x120018]
mov edi, esi
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x122c1c]
mov dword [esp + 0xc], 0x630d9034
mov dword [esp + 4], str._s_mgh_st_s
mov dword [esp], esi
mov edi, ebx
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x122c18]
mov dword [esp + 8], eax
call sub.msvcrt.dll_sprintf
mov ecx, 0x8000
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.63089381
test eax, eax
jle 0x6308c337
mov eax, dword [ebp + 8]
mov dword [esp + 4], str.screen
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308be49
mov dword [esp + 4], 0x630c41ea
mov dword [esp], ebx
call fcn.63084c0b
test al, al
jne 0x6308c337
lea ebx, [ebp - 0x100018]
mov ecx, 0x20000
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x80000
mov dword [esp], ebx
call fcn.630885f8
jmp 0x6308be99
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4b94
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bec7
mov dword [esp + 4], 0x630c41ea
mov dword [esp], ebx
call fcn.63084c0b
test al, al
jne 0x6308c337
lea ebx, [ebp - 0x100018]
mov ecx, 0x20000
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x80000
mov dword [esp], ebx
call fcn.63089300
test eax, eax
jle 0x6308c337
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], eax
lea eax, [ebp - 0x122c18]
mov dword [esp], eax
call fcn.6308a24e
jmp 0x6308c337
mov eax, dword [ebp + 8]
mov dword [esp + 4], str.search
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bf20
lea ebx, [ebp - 0x122818]
xor esi, esi
lea eax, [ebp - 0x120018]
mov dword [esp + 4], 0x630c4456
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.63085a10
mov dword [ebp - 0x122c2c], eax
sub eax, 0
js 0x6308c337
cmp esi, dword [ebp - 0x122c2c]
jl 0x6308c00c
jmp 0x6308c337
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4ba5
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308bf7d
mov dword [esp], 0x200000
xor esi, esi
call sub.msvcrt.dll_malloc
mov ebx, eax
lea eax, [ebp - 0x120018]
mov dword [esp + 4], 0x630c4456
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.63085a10
cmp esi, eax
mov dword [ebp - 0x122c2c], eax
jge 0x6308c1e9
sub eax, 0
jns 0x6308c0e1
jmp 0x6308c1e9
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x630c4bab
mov dword [esp], eax
call fcn.63084c0b
test al, al
je 0x6308c337
lea ebx, [ebp - 0x122818]
xor esi, esi
lea eax, [ebp - 0x120018]
mov dword [esp + 4], 0x630c4456
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.63085a10
cmp esi, eax
mov dword [ebp - 0x122c2c], eax
jge 0x6308c337
sub eax, 0
jns 0x6308c1fe
jmp 0x6308c337
add dword [ebp - 0x122c34], 0x100
mov eax, 0x63162a80
cmp eax, dword [ebp - 0x122c34]
jne 0x6308bbdc
mov byte [ebp - 0x122c2d], 0
jmp 0x6308c337
xor eax, eax
mov ecx, 0x100
mov edi, ebx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x122c2c]
mov dword [esp + 8], esi
mov dword [esp], ebx
sub eax, esi
lea esi, [ebp - 0x122418]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x120018]
mov edi, esi
mov dword [esp + 4], eax
call fcn.630856b3
xor eax, eax
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], str._s:_
mov dword [esp], esi
call sub.msvcrt.dll_sprintf
lea edx, [ebp - 0x100018]
mov ecx, 0x20000
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.6308ad28
test eax, eax
mov esi, eax
jg 0x6308c08d
mov esi, dword [ebp - 0x122c2c]
inc esi
jmp 0x6308bee6
lea edx, [ebp - 0x80018]
xor eax, eax
mov ecx, 0x20000
mov edi, edx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x100018]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.6308b24d
test eax, eax
jle 0x6308c081
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x80018]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x122c18]
mov dword [esp], eax
call fcn.6308a24e
jmp 0x6308c081
lea edi, [ebp - 0x122818]
xor eax, eax
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x122c2c]
mov dword [esp + 8], esi
sub eax, esi
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x120018]
mov dword [esp + 4], eax
lea eax, [ebp - 0x122818]
mov dword [esp], eax
call fcn.630856b3
lea eax, [ebp - 0x122818]
mov dword [esp + 4], 0x630c4bdb
mov dword [esp], eax
call sub.msvcrt.dll_fopen
test eax, eax
mov esi, eax
jne 0x6308c140
mov esi, dword [ebp - 0x122c2c]
inc esi
jmp 0x6308bf47
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov dword [esp], esi
call sub.msvcrt.dll_fseek
mov dword [esp], esi
call sub.msvcrt.dll_ftell
mov edi, eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], esi
call sub.msvcrt.dll_fseek
cmp edi, 0x200000
mov edx, 0x200000
mov ecx, 0x80000
cmovbe edx, edi
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], ebx
call sub.msvcrt.dll_fread
mov dword [esp], esi
mov edi, eax
call sub.msvcrt.dll_fclose
test edi, edi
je 0x6308c134
lea eax, [ebp - 0x122818]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x122c18]
mov dword [esp], eax
call fcn.6308a24e
jmp 0x6308c134
test ebx, ebx
je 0x6308c337
mov dword [esp], ebx
call sub.msvcrt.dll_free
jmp 0x6308c337
xor eax, eax
mov ecx, 0x100
mov edi, ebx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x122c2c]
mov dword [esp + 8], esi
mov dword [esp], ebx
sub eax, esi
lea esi, [ebp - 0x122418]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x120018]
mov edi, esi
mov dword [esp + 4], eax
call fcn.630856b3
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp + 4], ebx
mov dword [esp], 0x630c483c
call fcn.630870ae
test eax, eax
mov edx, eax
js 0x6308c277
xor eax, eax
or ecx, 0xffffffff
mov edi, ebx
repne scasb al, byte es:[edi]
mov dword [esp + 4], ebx
mov dword [esp], esi
not ecx
dec ecx
sub ecx, edx
inc edx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
call fcn.630856b3
jmp 0x6308c297
mov dword [esp + 4], 0x10
mov dword [esp], esi
call fcn.630855e3
mov dword [esp + 4], str..exe
mov dword [esp], esi
call sub.msvcrt.dll_strcat
lea edx, [ebp - 0x100018]
xor eax, eax
mov ecx, 0x40
lea esi, [ebp - 0x80018]
mov edi, edx
mov dword [ebp - 0x122c38], edx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x122418]
mov dword [esp], edx
mov dword [esp + 8], pe_nt_image_headers32
mov edi, esi
mov dword [esp + 4], eax
call sub.msvcrt.dll_mbstowcs
mov ecx, 0x200
xor eax, eax
mov edx, dword [ebp - 0x122c38]
rep stosd dword es:[edi], eax
mov dword [esp + 8], 0x63160680
mov dword [esp + 4], str._ls_ls
mov dword [esp + 0xc], edx
mov dword [esp], esi
call fcn.63081580
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6308a378
test al, al
jne 0x6308c317
mov esi, dword [ebp - 0x122c2c]
inc esi
jmp 0x6308bfa0
lea eax, [ebp - 0x80018]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.630851db
jmp 0x6308c30b
mov al, byte [ebp - 0x122c2d]
add esp, 0x122c4c
pop ebx
pop esi
pop edi
pop ebp
ret