Function at 0x1001ec5a
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa30
mov eax, dword [0x10188074]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x208
xor edi, edi
lea eax, [ebp - 0x224]
push edi
push eax
call fcn.1003e610
mov esi, dword [ebp + 8]
xor ebx, ebx
add esp, 0xc
inc ebx
test esi, esi
je 0x1001ee1f
push 0x5c
push esi
call fcn.1003f13a
pop ecx
pop ecx
test eax, eax
je 0x1001eccd
push edi
lea ecx, [ebp - 0x224]
push 0x104
push ecx
push ecx
lea ecx, [eax + 2]
call fcn.10003264
add esp, 0x10
test eax, eax
je 0x1001eccd
cmp word [ebp - 0x224], di
jne 0x1001ee29
push edi
push 0x80
push 3
push edi
push ebx
push SysReAllocString
push esi
mov dword [ebp - 0xa28], edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa30], eax
cmp eax, 0xffffffff
je 0x1001ee9b
push 2
push edi
push 0xffffff00
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xa2c], edi
lea eax, [ebp - 0xa24]
mov edi, 0x800
push edi
push 0
push eax
call fcn.1003e610
add esp, 0xc
lea eax, [ebp - 0xa2c]
push 0
push eax
push edi
lea eax, [ebp - 0xa24]
push eax
push dword [ebp - 0xa30]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1001eddd
mov eax, dword [ebp - 0xa2c]
cmp eax, 0x100
ja 0x1001eddd
shr eax, 1
cmp eax, 0x11
jb 0x1001edc7
lea edi, [ebp + eax*2 - 0xa46]
jmp 0x1001ed81
push 0x11
sub edi, 2
push str.____360skin_ver_
push edi
call fcn.100443aa
add esp, 0xc
test eax, eax
je 0x1001ed8d
lea eax, [ebp - 0xa24]
cmp edi, eax
jne 0x1001ed6a
jmp 0x1001edc7
test edi, edi
je 0x1001edc7
add edi, 0x22
push 0x10132a74
push edi
call fcn.1003eebe
pop ecx
pop ecx
test eax, eax
je 0x1001edc7
sub eax, edi
sar eax, 1
cmp eax, 0x104
jae 0x1001edc7
push eax
lea eax, [ebp - 0x224]
push edi
push eax
call fcn.10044089
add esp, 0xc
mov dword [ebp - 0xa28], ebx
push dword [ebp - 0xa30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xa28]
test eax, eax
jne 0x1001ee18
push 0x5c
push esi
call fcn.1003f13a
pop ecx
pop ecx
test eax, eax
je 0x1001ee12
push ebx
lea ecx, [ebp - 0x224]
push 0x104
push ecx
push ecx
lea ecx, [eax + 2]
call fcn.10003264
add esp, 0x10
test eax, eax
je 0x1001ee12
cmp word [ebp - 0x224], 0
jne 0x1001ee27
mov eax, dword [ebp - 0xa28]
mov esi, dword [ebp + 8]
xor edi, edi
jmp 0x1001ee21
mov eax, edi
test eax, eax
je 0x1001ee9e
jmp 0x1001ee29
xor edi, edi
lea eax, [ebp - 0x16]
mov dword [ebp - 0x1c], edi
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], edi
push eax
lea eax, [ebp - 0x1a]
mov dword [ebp - 0x10], edi
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0xc], edi
push eax
mov esi, 0x10132a78
lea eax, [ebp - 0x224]
push esi
push eax
call fcn.10008a98
lea eax, [ebp - 0xa]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xe]
push eax
lea eax, [ebp - 0x10]
push eax
push esi
push str.12.0.0.1051
call fcn.10008a98
push dword [ebp - 0xa]
mov edx, dword [ebp - 0x1a]
push dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
push dword [ebp - 0xe]
push dword [ebp - 0x10]
push dword [ebp - 0x16]
push dword [ebp - 0x18]
call fcn.1000309c
add esp, 0x48
test eax, eax
js 0x1001ee9b
mov esi, dword [ebp + 8]
jmp 0x1001eea0
mov esi, dword [ebp + 8]
mov ebx, edi
lea ecx, [esi - 0x10]
call fcn.10002a86
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10038cf9
leave
ret 4