Function at 0x985700
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
xor eax, eax
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0x5a
cmp ebx, eax
jne 0x985722
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp edi, eax
je 0x985a4a
mov esi, dword [ebp + 0x14]
cmp esi, eax
je 0x985a4a
push 8
push str.sha256__
push ebx
call fcn.0097b5d8
add esp, 0xc
test eax, eax
jne 0x9858e8
mov eax, dword [0xa0e354]
cmp dword [eax + 0x5c], 0
je 0x985a4a
push 0x20
call dword [0xa0e33c]
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x985803
mov ecx, dword [0xa0e354]
mov edx, dword [ecx + 0x5c]
push 0x20
push ebx
push esi
push edi
call edx
add esp, 0x10
test eax, eax
jne 0x985a4f
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 4]
push ecx
push 0x20
push ebx
call fcn.0099ed00
push ebx
mov esi, eax
call dword [0xa0e340]
add esp, 0x14
test esi, esi
je 0x9857ba
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 4]
mov eax, dword [ebp + 8]
push edx
push str._public_key_hash:_sha256___s
push eax
call fcn.0098dfd0
mov ebx, dword [ebp + 0xc]
mov eax, ebx
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x9857d7
sub eax, edx
lea esi, [eax + 1]
push esi
call dword [0xa0e33c]
mov edi, eax
add esp, 4
mov dword [ebp + 0xc], edi
test edi, edi
jne 0x98580f
mov ecx, dword [ebp - 4]
push ecx
call dword [0xa0e340]
add esp, 4
pop edi
pop esi
mov eax, 0x1b
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push ebx
push edi
call fcn.0096cbe0
add esp, 0xc
mov esi, edi
lea esp, [esp]
push str._sha256__
push esi
call fcn.0096dac0
mov edi, eax
add esp, 8
test edi, edi
je 0x985837
mov byte [edi], 0
lea edx, [esi + 8]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov bl, byte [ecx]
inc ecx
test bl, bl
jne 0x985840
sub ecx, esi
mov ebx, ecx
mov ecx, dword [ebp - 0x10]
cmp ecx, ebx
jne 0x985898
mov esi, dword [ebp - 4]
cmp ecx, 4
jb 0x985874
lea ebx, [ebx]
mov eax, dword [esi]
cmp eax, dword [edx]
jne 0x985898
sub ecx, 4
add edx, 4
add esi, 4
cmp ecx, 4
jae 0x985860
test ecx, ecx
je 0x9858b9
mov al, byte [edx]
cmp al, byte [esi]
jne 0x985898
cmp ecx, 1
jbe 0x9858b9
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x985898
cmp ecx, 2
jbe 0x9858b9
mov cl, byte [edx + 2]
cmp cl, byte [esi + 2]
je 0x9858b9
test edi, edi
je 0x9858c0
push str.sha256__
push edi
mov byte [edi], 0x3b
call fcn.0096dac0
mov esi, eax
add esp, 8
test esi, esi
jne 0x985820
jmp 0x9858c0
mov dword [ebp - 8], 0
mov edx, dword [ebp - 4]
push edx
call dword [0xa0e340]
mov eax, dword [ebp + 0xc]
push eax
mov dword [ebp - 4], 0
call dword [0xa0e340]
mov eax, dword [ebp - 8]
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x9f6170
push ebx
call fcn.0099ee70
mov ebx, eax
add esp, 8
mov dword [ebp + 0xc], ebx
test ebx, ebx
je 0x985a4a
push 2
push 0
push ebx
call fcn.009cbea1
add esp, 0xc
test eax, eax
jne 0x985a19
push ebx
call fcn.009cbdb2
push 0
push 0
push ebx
mov edi, eax
call fcn.009cbea1
add esp, 0x10
test eax, eax
jne 0x985a19
cmp edi, 0x100000
ja 0x985a19
mov eax, edi
cdq
push edx
push eax
call fcn.00990350
mov edi, eax
add esp, 8
cmp esi, edi
ja 0x985a19
lea ecx, [edi + 1]
push ecx
call dword [0xa0e33c]
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x985a1c
mov edx, dword [ebp + 0xc]
push edx
push 1
push edi
push ebx
call fcn.009cb935
add esp, 0x10
cmp eax, 1
jne 0x985a1c
cmp esi, edi
jne 0x9859d9
mov edi, dword [ebp + 0x10]
mov eax, esi
mov ecx, ebx
cmp esi, 4
jb 0x9859ac
mov edx, dword [edi]
cmp edx, dword [ecx]
jne 0x985a1c
sub eax, 4
add ecx, 4
add edi, 4
cmp eax, 4
jae 0x985998
test eax, eax
je 0x9859d0
mov dl, byte [ecx]
cmp dl, byte [edi]
jne 0x985a1c
cmp eax, 1
jbe 0x9859d0
mov dl, byte [ecx + 1]
cmp dl, byte [edi + 1]
jne 0x985a1c
cmp eax, 2
jbe 0x9859d0
mov al, byte [ecx + 2]
cmp al, byte [edi + 2]
jne 0x985a1c
mov dword [ebp - 8], 0
jmp 0x985a1c
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0xc]
push edx
mov byte [edi + ebx], 0
call fcn.00985630
add esp, 8
test eax, eax
jne 0x985a1c
cmp esi, dword [ebp - 0x10]
jne 0x985a1c
mov ecx, dword [ebp - 0xc]
mov edi, dword [ebp + 0x10]
mov eax, esi
cmp esi, 4
jb 0x9859ac
mov edx, dword [edi]
cmp edx, dword [ecx]
jne 0x985a1c
sub eax, 4
add ecx, 4
add edi, 4
cmp eax, 4
jae 0x985a03
jmp 0x9859ac
mov ebx, dword [ebp - 4]
push ebx
call dword [0xa0e340]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [0xa0e340]
mov edx, dword [ebp + 0xc]
push edx
mov dword [ebp - 0xc], 0
call fcn.0097f2b4
mov eax, dword [ebp - 8]
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x5a
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret