Function at 0x100502b0
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x100ad7a8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov eax, dword [0x100de040]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x3c]
mov esi, ecx
cmp dword [esi + 0x24], 8
jne 0x100502f8
mov dword [esi + 0x20], 0x2c
mov dword [esi + 0x14], 0x930
xor eax, eax
jmp 0x1005057b
push 0x100e33b4
push 0xa290
call fcn.100628bb
mov edi, eax
add esp, 8
mov dword [esp + 0x3c], edi
xor ebp, ebp
mov dword [esp + 0x34], ebp
cmp edi, ebp
jne 0x10050324
mov eax, 0x8007000e
jmp 0x1005057b
push 0xa290
push ebp
push edi
call fcn.10064e10
mov ecx, dword [esi + 0x10]
add esp, 0xc
cmp ecx, ebp
je 0x10050381
mov edx, dword [esi + 0x20]
lea eax, [esp + 0x18]
push eax
push edi
push ebp
push edx
mov edx, 0xa290
mov dword [esp + 0x28], ebp
call fcn.1000fd20
mov ebx, eax
cmp ebx, ebp
jl 0x10050371
cmp ebx, 1
je 0x10050371
cmp dword [esp + 0x18], 0xa290
je 0x100503f4
jmp 0x1005056d
push edi
call fcn.100628c6
add esp, 4
mov eax, ebx
jmp 0x1005057b
mov eax, dword [esi + 0x20]
push ebp
lea edx, [esp + 0x20]
push edx
xor ecx, ecx
push ecx
push eax
push ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x100503b8
call fcn.10002d30
push edi
mov esi, eax
call fcn.100628c6
add esp, 4
mov eax, esi
jmp 0x1005057b
push ebp
lea eax, [esp + 0x1c]
push eax
push 0xa290
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x100503e6
call fcn.10002d30
lea esi, [esp + 0x3c]
mov edi, eax
call fcn.10008990
mov eax, edi
jmp 0x1005057b
cmp dword [esp + 0x18], 0xa290
jne 0x1005056d
mov eax, 0x8001
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x10050425
mov dword [esi + 0x14], 0x800
mov dword [esi + 0x1c], 0x18
mov dword [esi + 0x18], ebp
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov eax, 0x9311
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x10050457
mov eax, 0x10
mov dword [esi + 0x14], 0x930
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov eax, 0x9319
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x10050489
mov eax, 0x18
mov dword [esi + 0x14], 0x930
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov eax, 0x9911
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x100504bb
mov eax, 0x10
mov dword [esi + 0x14], 0x990
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov eax, 0x9919
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x100504ed
mov eax, 0x18
mov dword [esi + 0x14], 0x990
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov eax, 0x9209
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x1005051f
mov dword [esi + 0x14], 0x920
mov dword [esi + 0x18], 8
mov dword [esi + 0x1c], 0x18
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov eax, 0x9201
mov ecx, edi
call fcn.10050280
test eax, eax
je 0x1005054d
mov dword [esi + 0x14], 0x920
mov dword [esi + 0x1c], 0x10
mov dword [esi + 0x18], ebp
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
cmp dword [esi + 0x24], 4
jne 0x1005056a
mov dword [esi + 0x14], 0x930
mov dword [esi + 0x18], ebp
lea esi, [esp + 0x3c]
call fcn.10008990
xor eax, eax
jmp 0x1005057b
mov dword [esi + 0x24], ebp
lea esi, [esp + 0x3c]
call fcn.10008990
mov eax, 0xe00e1001
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 4