Function at 0xbdc2d6
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xc95790
push 0xbe2b14
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffffd70
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov byte [ebp - 0x40], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x3f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x24c], 0
xor eax, eax
mov byte [ebp - 0x24b], al
mov byte [ebp - 0x25c], 0
xor ecx, ecx
mov byte [ebp - 0x25b], cl
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x258], 0
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.kernel32.dll_CreateFileA]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xffffffff
jne 0xbdc394
mov eax, 0x30000011
jmp 0xbdcdad
mov dword [ebp - 4], 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_SetFilePointer]
push 0
lea ecx, [ebp - 0x260]
push ecx
push 2
lea edx, [ebp - 0x25c]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc3e0
mov dword [ebp - 0x258], 0x30000019
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 2
je 0xbdc3f8
mov dword [ebp - 0x258], 0x3000001b
jmp 0xbdcd7a
movsx ecx, byte [ebp - 0x25c]
cmp ecx, 0x55
jne 0xbdc5e1
movsx edx, byte [ebp - 0x25b]
cmp edx, 0x45
jne 0xbdc5e1
push 0
lea eax, [ebp - 0x260]
push eax
push 4
lea ecx, [ebp - 0x254]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc44a
mov dword [ebp - 0x258], 0x30000012
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 4
je 0xbdc462
mov dword [ebp - 0x258], 0x30000013
jmp 0xbdcd7a
push 0
lea eax, [ebp - 0x260]
push eax
push 4
lea ecx, [ebp - 0x244]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc494
mov dword [ebp - 0x258], 0x30000014
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 4
je 0xbdc4ac
mov dword [ebp - 0x258], 0x30000015
jmp 0xbdcd7a
mov eax, dword [ebp - 0x244]
xor eax, dword [ebp - 0x254]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
and ecx, 0xff
mov dword [ebp - 0x244], ecx
cmp dword [ebp - 0x244], 0
jne 0xbdc4e8
mov dword [ebp - 0x258], 0x30000016
jmp 0xbdcd7a
mov edx, dword [ebp - 0x254]
xor edx, dword [ebp - 0x244]
mov dword [ebp - 0x250], edx
lea eax, [ebp - 0x250]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x274]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xbdc534
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xbdc55f
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x270]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xbdc58d
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x248]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0xbdc5bb
jmp 0xbdcd7a
cmp dword [ebp - 0x270], 0
jb 0xbdc5cd
cmp dword [ebp - 0x248], 0
ja 0xbdc5dc
mov dword [ebp - 0x258], 0x30000016
jmp 0xbdcd7a
jmp 0xbdc72b
push 0
push 0
push 0
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_SetFilePointer]
push 0
lea edx, [ebp - 0x260]
push edx
push 4
lea eax, [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc626
mov dword [ebp - 0x258], 0x30000012
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 4
je 0xbdc63e
mov dword [ebp - 0x258], 0x30000013
jmp 0xbdcd7a
push 0
lea edx, [ebp - 0x260]
push edx
push 4
lea eax, [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc670
mov dword [ebp - 0x258], 0x30000014
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 4
je 0xbdc688
mov dword [ebp - 0x258], 0x30000015
jmp 0xbdcd7a
mov edx, dword [ebp - 0x244]
xor edx, dword [ebp - 0x254]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x244]
and eax, 0xff
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jne 0xbdc6c3
mov dword [ebp - 0x258], 0x30000016
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x254]
xor ecx, dword [ebp - 0x244]
mov dword [ebp - 0x250], ecx
lea edx, [ebp - 0x250]
mov dword [ebp - 0x278], edx
push 0
lea eax, [ebp - 0x260]
push eax
push 4
lea ecx, [ebp - 0x270]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc713
mov dword [ebp - 0x258], 0x30000012
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 4
je 0xbdc72b
mov dword [ebp - 0x258], 0x30000013
jmp 0xbdcd7a
cmp dword [ebp + 0x10], 0
je 0xbdc73c
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
cmp dword [ebp + 0xc], 0
jne 0xbdc751
mov dword [ebp - 0x258], 0
jmp 0xbdcd7a
cmp dword [ebp + 0x14], 0
je 0xbdc762
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x248]
mov dword [edx], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x280], ecx
mov edx, dword [ebp - 0x280]
push edx
call fcn.00be0430
mov dword [ebp - 0x284], 0
jmp 0xbdc792
mov eax, dword [ebp - 0x284]
add eax, 1
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
cmp ecx, dword [ebp - 0x270]
jae 0xbdcbba
mov edx, dword [ebp - 0x284]
imul edx, edx, 0x27c
mov eax, dword [ebp + 0xc]
lea ecx, [eax + edx + 0x27c]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x288], edx
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x288]
sub ecx, 1
mov dword [ebp - 0x288], ecx
test eax, eax
je 0xbdcba2
push 0
lea edx, [ebp - 0x260]
push edx
push 4
lea eax, [ebp - 0x26c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc81b
mov dword [ebp - 0x258], 0x30000017
jmp 0xbdcd7a
cmp dword [ebp - 0x260], 4
jne 0xbdc830
cmp dword [ebp - 0x26c], 0x200
jb 0xbdc83f
mov dword [ebp - 0x258], 0x30000018
jmp 0xbdcd7a
push 0x200
push 0
lea edx, [ebp - 0x240]
push edx
call fcn.00be1770
add esp, 0xc
push 0
lea eax, [ebp - 0x260]
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
lea edx, [ebp - 0x240]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdc88c
mov dword [ebp - 0x258], 0x30000019
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0x26c]
je 0xbdc8a9
mov dword [ebp - 0x258], 0x3000001a
jmp 0xbdcd7a
mov dword [ebp - 0x264], 0
mov edx, dword [ebp - 0x26c]
mov dword [ebp - 0x1c], edx
jmp 0xbdc8cd
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [ebp - 0x26c]
jae 0xbdc956
mov edx, dword [ebp - 0x264]
mov al, byte [ebp + edx - 0x240]
mov byte [ebp - 0x268], al
mov ecx, dword [ebp - 0x264]
mov dl, byte [ebp + ecx - 0x240]
xor dl, byte [ebp - 0x1c]
mov eax, dword [ebp - 0x264]
mov byte [ebp + eax - 0x240], dl
mov eax, dword [ebp - 0x264]
xor edx, edx
mov ecx, 4
div ecx
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp - 0x278]
mov al, byte [ebp + eax - 0x240]
xor al, byte [ecx + edx]
mov ecx, dword [ebp - 0x264]
mov byte [ebp + ecx - 0x240], al
mov edx, dword [ebp - 0x268]
and edx, 0xff
mov eax, dword [ebp - 0x1c]
add eax, edx
mov dword [ebp - 0x1c], eax
jmp 0xbdc8be
push 0xe
push 0xd785f8
lea ecx, [ebp - 0x238]
push ecx
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdc9a4
lea edx, [ebp - 0x22a]
push edx
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea ecx, [ebp - 0x24c]
push ecx
call fcn.00be1b4a
add esp, 4
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x12c], eax
jmp 0xbdcb9d
push 0xe
push 0xd78608
lea eax, [ebp - 0x238]
push eax
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdc9da
lea ecx, [ebp - 0x22a]
push ecx
mov edx, dword [ebp - 0x28c]
add edx, 8
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
jmp 0xbdcb9d
push 0xe
push 0xd78618
lea eax, [ebp - 0x238]
push eax
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdca6d
lea ecx, [ebp - 0x22a]
push ecx
mov edx, dword [ebp - 0x28c]
add edx, 0x130
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
mov eax, dword [ebp - 0x28c]
add eax, 0x130
push eax
call fcn.00be1c90
add esp, 4
test eax, eax
jbe 0xbdca68
mov ecx, dword [ebp - 0x28c]
add ecx, 0x130
push ecx
call fcn.00be1c90
add esp, 4
mov edx, dword [ebp - 0x28c]
movsx eax, byte [edx + eax + 0x12f]
cmp eax, 0x2f
je 0xbdca68
push 0xd78628
mov ecx, dword [ebp - 0x28c]
add ecx, 0x130
push ecx
call fcn.00be2c00
add esp, 8
jmp 0xbdcb9d
push 0xe
push 0xd7862c
lea edx, [ebp - 0x238]
push edx
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdcaa3
lea eax, [ebp - 0x22a]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x28
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
jmp 0xbdcb9d
push 0xe
push 0xd7863c
lea edx, [ebp - 0x238]
push edx
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdcaeb
lea eax, [ebp - 0x22a]
push eax
lea ecx, [ebp - 0x40]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0x40]
push edx
call fcn.00be1b4a
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x234], eax
jmp 0xbdcb9d
push 0xe
push 0xd7864c
lea edx, [ebp - 0x238]
push edx
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdcb21
lea eax, [ebp - 0x22a]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x238
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
jmp 0xbdcb9d
push 0xe
push 0xd7865c
lea edx, [ebp - 0x238]
push edx
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdcb57
lea eax, [ebp - 0x22a]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x257
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
jmp 0xbdcb9d
push 0xe
push 0xd7866c
lea edx, [ebp - 0x238]
push edx
call fcn.00be4ac0
add esp, 0xc
test eax, eax
jne 0xbdcb8e
lea eax, [ebp - 0x22a]
push eax
call fcn.00be1abf
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x278], eax
jmp 0xbdcb9d
mov dword [ebp - 0x258], 0x3000001b
jmp 0xbdcd7a
jmp 0xbdc7cc
mov edx, dword [ebp - 0x28c]
push edx
mov eax, dword [ebp - 0x280]
push eax
call fcn.00be04aa
jmp 0xbdc783
cmp dword [ebp + 0x18], 0
je 0xbdcd7a
push 0x18
push 0
mov ecx, dword [ebp + 0x18]
push ecx
call fcn.00be1770
add esp, 0xc
push 0
lea edx, [ebp - 0x260]
push edx
push 2
lea eax, [ebp - 0x29c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdcbfc
jmp 0xbdcd7a
movsx edx, byte [ebp - 0x29c]
cmp edx, 0x48
jne 0xbdcc14
movsx eax, byte [ebp - 0x29b]
cmp eax, 0x4d
je 0xbdcc19
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
test eax, eax
je 0xbdcc39
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp + 0x18]
add edx, 4
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
test eax, eax
je 0xbdcc5c
jmp 0xbdcd7a
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x290], 0
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x298]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
test eax, eax
je 0xbdcc93
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x250]
push ecx
lea edx, [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00bddaa9
test eax, eax
je 0xbdccb6
jmp 0xbdcd7a
mov ecx, dword [ebp - 0x290]
xor edx, edx
mov eax, dword [ebp + 0x18]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov edx, dword [ebp + 0x18]
mov ecx, 0x20
mov eax, dword [edx + 8]
mov edx, dword [edx + 0xc]
call fcn.00be40c0
mov ecx, dword [ebp + 0x18]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edx
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp - 0x298]
xor ecx, ecx
mov esi, dword [edx + 8]
add esi, eax
mov edx, dword [edx + 0xc]
adc edx, ecx
mov eax, dword [ebp + 0x18]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edx
push 0
lea ecx, [ebp - 0x260]
push ecx
push 2
lea edx, [ebp - 0x294]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.kernel32.dll_ReadFile]
test eax, eax
jne 0xbdcd26
jmp 0xbdcd7a
movsx ecx, byte [ebp - 0x29c]
cmp ecx, 0x49
jne 0xbdcd3e
movsx edx, byte [ebp - 0x29b]
cmp edx, 0x50
je 0xbdcd40
jmp 0xbdcd7a
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp + 0x18]
add ecx, 0x10
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00bddaa9
test eax, eax
je 0xbdcd60
jmp 0xbdcd7a
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp + 0x18]
add ecx, 0x14
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00bddaa9
mov dword [ebp - 4], 0xffffffff
call fcn.00bdcd88
jmp 0xbdcdad
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14